last executing test programs: 3.904928357s ago: executing program 2 (id=1503): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000880)=""/4096, 0x1020}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000002b40)=""/48, 0x30}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002d80)=""/254, 0xfe}, {&(0x7f0000002d00)=""/118, 0x76}], 0x9}, 0xe}, {{0x0, 0x0, 0x0, 0x600}, 0xc}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 3.832689451s ago: executing program 2 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee01) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="0d0327bd7000feeca210c533d0096cf0c4"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 3.820212441s ago: executing program 2 (id=1505): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f0000000080)={0x2, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0xf7, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 3.732957586s ago: executing program 2 (id=1507): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x2102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f38f191090000009a1b00c0fee300660f7ec2eaafca27f65b00b805000000b9d46bf15f0f01c1def8660fbc9e05000000c4e3d17cb02e3b000076f26e440f20c0350c000000440f22c0", 0x4a}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmsg$can_raw(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x2102) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="0f38f191090000009a1b00c0fee300660f7ec2eaafca27f65b00b805000000b9d46bf15f0f01c1def8660fbc9e05000000c4e3d17cb02e3b000076f26e440f20c0350c000000440f22c0", 0x4a}], 0x1, 0x70, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 3.339199975s ago: executing program 2 (id=1509): unshare(0x22020400) socket(0x11, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x57, 0xb8, 0xdd, 0x40, 0x413c, 0x2c8d, 0x81c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0xd4, 0x5, 0x0, 0x2, 0xd, 0x0, 0x5}}]}}]}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x0, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) 3.118464596s ago: executing program 3 (id=1513): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file4\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) ioctl$sock_proto_private(r1, 0x89e0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x37, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000800410000000000", @ANYRES32=0x0, @ANYBLOB="0400e5"], 0x1c}], 0x1}, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x27, 0x4}, &(0x7f0000000080)=0x0) timer_settime(r3, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000280)) dup(r0) 3.052778349s ago: executing program 3 (id=1514): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xfe69) 3.052595309s ago: executing program 3 (id=1515): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x7}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ff}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x120, 0x0) 3.050450659s ago: executing program 3 (id=1516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x20002, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x40, 0x22, 0x44, {0x44, 0x23, "3c75e56de0a95187b4193bce56276a774af3597238a4fd4ed21b1122a505333edcd3dec5b9f2867c84bae2d75fc15834748ca45783acc29bb254f00d79dfd257a2aa"}}, &(0x7f0000000640)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000040)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0xa, "35ef0eab"}, @global=@item_012={0x2, 0x1, 0x4, "2901"}, @global=@item_4={0x3, 0x1, 0x1, "d22e61cf"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xb09}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0xf, 0x14, "5b7d0a1ca66e8eaecaf7e32886510661e8e8e41b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x1, 0xb8, "938f682c5de3abd3a83dcde9bc970972a882e4156ae98ad854dc07cc0d4c8a942928ca2bd9770ea2a7e44db301babc3f915850ae1fcd67fbc6b88fb0019b6b6e35c8375c61a99682077d13976fe6cc912163460feeaa0f199c45cae7764e769fcf0a0b62df7ab21f4c5632fa7f9a5ffe6b9005fbbf922821cf9be0eda59792fc084409e41422dd671a2be1911de9f654e29a11146c2ece8031ad5d23ab25fb74c1a21e5ae1052f057fe3a3cfb8fd4f6f29956cf6a2bba974"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x10}}) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r4) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000a80)=0x0) syz_clone3(&(0x7f0000000b00)={0x15a040300, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x2e}, &(0x7f0000000900)=""/246, 0xf6, &(0x7f0000000a00)=""/121, &(0x7f0000000ac0)=[r4, r5, r6], 0x3, {r3}}, 0x58) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) (async) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2023020000000200"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000600), 0x0, 0x202) (async) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.477973008s ago: executing program 1 (id=1519): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x7, 0x1000000000008000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0xd, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f0000000040)=0x2, 0xa, 0x8, 0x0, 0x0, 0x1) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x8910, &(0x7f00000028c0)={'syztnl0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000400430000000200000000000006040000000000f93132", 0x39}], 0x1) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001600)=@svm={0xf, 0x1, 0x1080, {0x9000}, {"20fdd2e0e5b150701f2a002cd253602551b39487a3fb3ee876ae0f1f16d7bbcaa2b88ca5fad5c6aca8f4f9308182f3e885fc4a45a353ceb6447f2a5056ae4b098a9fd1b959355864da543ceba392d7fad25f66dafbfcb024402a7a130f4358c0efb2ef0b24efe386b88a3bcbd85762d08056b1c2c5ed88ea62266fb9e191c25803f3b2e039a1dbfb031c68cdcce4ae947cee5da7d84f1e1ec2d5fecc20e6fb5dca86db08b82481eed558e264b00aa023dceceef4689764ca23976904a303a8a29c60b9290a243f24d0f1de4aefa6a6ab03d8d052c8554f60911d27357f5a98c805385af7d7f04673e03c2ff638dee63377df904ca004418d63d5f9ec3ee6568fef43ad3c5b480d918b7312ea1d9a529c21185c194af41a76cda6276c375a8d9f1436e1be927aefde33853879cbe53c4c1e0cccb12539701659b543fdb855ca270ce3b7a072985717db55bc33071c5ecad4241ba783ccb228f69bf7f06d7e39b7bf7295990b8384493b33c43b21ec3b7fc845ef80740aa7b4e6028271402c60f49cf263961b34dddff3ddd0c4ea395b55489b0fec14a1b4f71c1d4773d98a410d0940dd4de77c188f20f5dc60c50674d49c1d61350ee8736bbc34ccf05eed189ce3c9a81ff47e6a50701ed5eb3e3a3b3b41b231010123549067b3a10de647702b9526f95c77f7aa6b9b0bf5363e01f543a211ac4d120c80ceeb8b226e4577b6a74753ff09909c6bf22ea71386dd8b6fd4d1b7fa567e280ab2bb34b1a34423e86beffe2d9290ed6ba350883a09606ba06a1276f145b555d124599733ea15fd00a1ccc2d4465fe169b0a56d56c1b794cb8793b8a20d08e5a8a6232791f44ea2b77fc8a7050059d33dd253f7c7c944cda38a6a54f93995496cfbf84b52da12ddb7dd3854eae9563bb64fa8df3303f43414e6f0e73807eaeaeb225f1d2d27733643e5f41a5569226c058e4c5909eb06b084136c701ad84a97a158ba9b09eba41ec764878b288524f26f2bf6f700a447c1be98f2948c6d0c7c68cd76e0d7b77c00933e2ff4936ba2dd1f57add0806df195dbec1af3ced1ab96156c4199d8151d3a5fbfc97e1a647193fa5627ceefd278e59b9393364868a0f4668e8997abb789852e0c358be1057abd4ddaa3997fa149eaceeb44bf50f6e7e04efcc078beb963f834a6a26c6dc936fcc8b260898d6cc8fb3077815c0f754aa16fcd859f5a95a80d23bbca41f4fd56157733193612af8ea03fd89725c14ff473490b787a64ff24d16db8c14b128cb485279f8030c41dc04e29d5ea04061023c6521005ecddeb59be5b21c9a887aba04201c6771b503544d100180a10c2d835d495fb2a444a7669406743850209255ccfe1dd8b7ed62bd7df9e90a9760c9c90cca6562e786940d1a8b55b8b562ba7a2ea5c5baa47a4c2f1d855dcda3fe1a70c57d53b75f4445af732a2e52cf741b54ec42536621dfa9e1c920ffcdc2bb3294de4ffb68bf3be4ec091817e5d3b563ce60b45d6ad5f82e9f1c5c170be668ce228ce4eb48e45a765e8b91663123d1cc7ed914ce907b5aefdbb583cd7b84eb97fd5b6cbb43d82f7d2e47fa378ca80669f11b5949d749925372117e1f472c597732660c73267cbd957d2770c2ed6c4b7513d60169a94b283c46ac53c7f2eb291c8e285a98136b41ad91bc0f0f698bf4b66f28c77f77e5cae947f2445efd96bb58f9048e824ee09109ed7fb50c9bf0f101bac73a6e9f3f10e8e440dcad2977f3b9f6fc9cad928de58e9088fbdd6e5946062d8471b4f35617b5d75e68ea642c45e16928d0cbb79d86f18f835be4af62fa8031411e621947edf4a0b7b450e5547d08b4def1ddfd16b089fbde4f6968805b1d81bbd10f5ae8b98060f7e2a7412e9a962b94fd8bcb78417ffe98404f06451d22ec04825fb850fb298fbc4a63056e00fc85e02fe8d83e0cbcc381b170555d2b32b13cf0df2832c5470b77f1236af12e9069377431e351f51aebd4f24167f54ca1230733a6bcbe76c2342a06350ee27bb9f328c5cd612526be6bd9e6bdeeb9c7bc7c5aa380a0ac420e3d54b377152a7349508615afd97d9f156a1a2df1030ce690ba5077b025a01b89f3f16d4e8ef805f058ef67e1e6358f13260b1c58b1eaa0cf02497684b09ecfc18383264a7dbeca583282a58203c134cd41cd107584eca6ffe58935484d7c90eb3eaf94dc85ab908ded8aa0d1066def5498a73bfcb105f6c2c5b2ecda85ea896e07e5b75a00c94a141a4c2133f6e18cc69afc5d9b5ca3e914b4c15aa83045c4609d83f60de2f45f9de8695839bf0c969aacb9da9d22797965d8c833960aa7e7ee85f4717f43008fb000f128698e6417a140138fd6f72054fcf12d94ef17db80942737ec0e27d0c36f3e17e28c9b0734d54dc5804758e0befa8317e75648cc150263ef976232da41b517e905f758c0296046378c402f2b946464b9dfece97bc11126e839752d5c841906c6c39e3ce34588b164b45abaca6d29d65a59012d1e61d5cf79c30f43eaf72ee76cd199fff24c617d82828fd66275297109f22d67ceba7ccf962c0e0c40459ff4641b8428de768e6af3ac20cd86bd4b4517f930102746d39575545564b4cffdbf62607f587b6919f6f3c325a356df67a89bf1148a0ea7641503e6b1b7a285423d859d0235b73743e3e968a570dd7490df06cb71819d013742511acff1af723e34da9630acbb31d3bcd55de9ff9e1e117bd200835247e488a932cad10591b67081eea95067695b7f3c7786f25344f3af73b077aadd8630c481883885b569dd44dab2f0bf944588d884156ffcbf6e1d02f218c82e2a2e1724e8476af7315dbc0dabd8fbb33eee86bce62929917a6a0db7103a7d805ca3a579a2b799c34d267450429c27ca2653ccddafb637b1c90ba773899aed724641f089c63109a7ba49bbd5bf86a9cb9b06e41496fd972f1ae2e10ff06c14313434687a7fc8323b28d387163abd09ef65af3a6ceeb1de16301573d23735e7110e283cfc9d1d4e40e46daf01fa4e1e04e5cedbf92125796bae6e927adb62cdda8ed69275e388b5ee41016b621b8fe7c1df70f199ee7e5ddbd5f86247f111a52c2b362949c9742f6eb339b2385d9d15f774df0e8f7506ce2774eea67b41dc96d9962bc9e8f3327569e6b2e2ec08cbfa26a76410dd7e5c256aff2ecfa61d1e48fb677c341ecd0584b30d4f2e2df42a72569241df5748781e6227864abd2b40c8039ecf82adf4d23751723dd93bcf02c708878178f34f32fef2a3fc21077839e260863b5630cd47187a9c1ac0bf6c8f8246426fa246c1427138c34ebe108f8f7393475c180b0cc062b48baefbe7c6b40a511479cd19df3422fcf585fd5d7083be36fdd774f9e6b1c111f137446b3f18cfe7035a89aa8f2fad14a35997200bfc6b85d3903b9b8f4d3375bbe40e96dee6f6f6b90554fd799fa983750e5ca07a14bff7e91654971f32c3b28095e621aa5180fd979440104d8ca9d2b582a15ac45eb1a0061c3313835bb885ca0a30d400deeedc90dd6fbdc26bd7f6476b43b1f2d44d8bc3a8ab632e992c270a716d0480b35ef5b6a95fe0e42aef74512b509a0004bdd49e76ca789a034923f3edf6dc9bc4912f6cea3ebf157bd48aa675ed4cfc36bd948eb845fa8b77b8a45c71310bba68e986b61f13da463d43c7e8a91db2c824bdac6459849a9e2c49a2868f4c69f98b32b271ce190e343661dd2e99561c22443456f4c9e37fc178f7602379e64fe9985de48abaa514a02e738a2da8aacdf62c9b062903d44fdb98c7576e6f3f56a6b5c8068cc7b4d289167c4e689ce3ff02f3282b3b117fd4c5bbcac266fc14975d83f4259713834348ed5903c7f4782d6791729f25d480ed3d8bcd9e3054849ba8e263976ed20554490cc756e45c850c46deb96db333535336885a28f7a2cd6f41da961d0cb54299e18c64f22f7cb96e1625df7a2bdfe31965138992be1353ae2715fc22a39d064f7f582ace029a5948b932ae375b36c331e19ad5bb3d8951f618f65d5508af85c456b0d2b7d32c274e1a036450f2ea2de0dfdae0410706d701ed4a7b4ffe33b0dd02bc9e6128d13c67aac19ed171f46c0de06b97d41af7c5152ee94ccbe87dcd22a2c06b9b6c44815e79dc08d42fe0eb626bb8991f94ee58074d8862dd65db5aa5925cc19aa62c7fced62a490f6294d2b192fbdb07ed6484baa30d444c94f83b4f18f8a8c0585449951b1bbae1fd0c0d69f50a0f4a3b0c5fa736277875f9af8f001cdaa070f7d784908814683727aa7d94a17c72834af2e353f33dc562631830ccf2e01bcf3754534773f1c27f33514c61ccb53ef598059e63bfa723770e7bf020a60ee64f255f6e280cd8b6024ee6b099ab37ede4d8437e5a27981f4f04caf495adc9912d26814b54ca5672110db412b45d82d7dd294020a7f179091afa42db120bcf5f417c67a0d7169b1f09c6b8bc4ad05bd0824f2fbdd83c4bf10bbbb0b38179b4e63e59f844c15bdc8ddb842e68489a6b74b81cad404bc76352bef333bb319fbf8071c8a2a1103c0b24c736fa75e8c1dbff5829e296694a18dcbacd7ba306f804d8f9914380b6fee764491678680cb80068cc4a4e94332d78f035ac9220bd8878843ce2e5da55d3c12da189ddff6aa8e4321ed0272e2b46401af50edc7d06bb2dbaeb202ee1e6571b68f083e2ecf678bdb272bb4bebb0cb78176992c694955f15b906ea0022f5f53246495b9f693dbc639d26a3b9eb170a607014e4544af996729ed2415d4fb528d105c272681e3b2df7e298cff3f08d2f50737ed6504df430c2750749e2ae46cdd0f324fadd6c302595620d54c005d7ed12bdc2a6dd082ba30b29e32c9868670aea734c328ef2a52c5f6023c7abee5db7b931967b09e2cf097d1357e433eb6a4f2bb455a911149b1c8ff097889fb48e5ab74b22fae7c78895503d2839565a412ae8ea5ebf397983728fe8e3f16658af904bb34cb6d3ab1acd23abc500cb9d0e0f364d201687f49c662188192b4afd27de36ae938ce47381b76a8ed84b4fe604558f5f7d99d19e1ff28625a84fa4e994f39b57fde8cf2205ff218e1ad704e106cc765a0475a020999f5e6ff41349b7692d7da83ff8daaf76086ce4950e284a733b72a797bf51e8ec6618f5d9c534b132f2fe4378daa335012b39b719ed233b748ef1dfa6d012b21aa97fb81d1ce8466dedf157f1a0fb0e024f1bd4875cc2f812b093150ca95766a36390eff2269af2900f2a2988073714906ebd7c96b50300a8b429ca4f4a9dce4041e15a4c9804dbecd34836bea87433205a6bc16cff3966cb1979b101dbb732a7d465e28c47e73e968d1be4a60f62baf33868be32dc3627b48c2e17377b2f2c457641dbb8625107546161e54063d1c9944be6a340cbcc5b2923030de59df2cd356db6b2a8cae1b9302d324a1ce93cd88614db8fb6ebc05bd87c57d46e7650cbea1657edc8597b480e7fccbbf6a6965db902239b52d9fd9f9b3a5b1f320de845485a4a7bb4bc3c5390c34667a6742c58941a21041608a71b085e5beed75bc7a9adceedbc7265c8d406ec965b726d74b801206286a22d4fee3b90343aa3910a28ba75ec32783147da027320b7f950e4410d25f263215f66502b6104ec9bf01572428841464c8aa590200927a8909f88820f12c6e8a42f465ba9cdc67d319c04a458b5bc69163d050143ddd73c57eee3d2d5a2fe590f24b04e4981006827250217e742a88c75eeca93df6dcdb492416dfe25b28999cffc5dbb568025b78e61886cd6144c8e3bd0705ab5d06e25f8dd657b6295aadeebf"}}) 2.396737321s ago: executing program 3 (id=1520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000080)=@generic={0xa, "b704e23b0230ec5547cb9d39b541177c2624047cdfbb1183e37a472edac14ed1f62fb01983111172d9fb0690eabb9ebc9bceb1c74212721ca59952e9cffa4005f2eab850139f1d84d13af2977f6d6284def2415254ad7188efd400d337d9272e0fa9e31051bbce00647a040627a7e0d3f6ad4319066929d5f578afb23137"}, 0x80, &(0x7f00000002c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.173008462s ago: executing program 3 (id=1521): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x140, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x4000090) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2.142958814s ago: executing program 32 (id=1521): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x140, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x4000090) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.500826595s ago: executing program 0 (id=1524): arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@local}) 1.475777197s ago: executing program 0 (id=1525): r0 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000bc0)={&(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="110000000000000000000000010000007f000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102e0000001000000002c000000000000000000000007000000440873f000000004071335ac1414aaac1e01017f000001ffffffff00000000008000"], 0xe8}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f00000000c0)="66a75a9e", 0x4) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r5], 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000a00)={0x0, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 1.434607089s ago: executing program 1 (id=1526): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xb) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.365471642s ago: executing program 4 (id=1527): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$netlink(0x10, 0x3, 0xe) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000040)='./cgroup\x00', 0x8000, 0x175) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$FUSE(r4, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x8, 0xf, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x3, 0x9, 0xc0, 0x2, '\x00', 0x8, 0xfffffffffffffff2}) 1.189655601s ago: executing program 4 (id=1528): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000014000/0x10000)=nil, 0x10000, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000000)=0x4, 0x4) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_NMI(r3, 0xae9a) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.088472186s ago: executing program 4 (id=1529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000080)=@generic={0xa, "b704e23b0230ec5547cb9d39b541177c2624047cdfbb1183e37a472edac14ed1f62fb01983111172d9fb0690eabb9ebc9bceb1c74212721ca59952e9cffa4005f2eab850139f1d84d13af2977f6d6284def2415254ad7188efd400d337d9272e0fa9e31051bbce00647a040627a7e0d3f6ad4319066929d5f578afb23137"}, 0x80, &(0x7f00000002c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 904.899915ms ago: executing program 4 (id=1530): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000000)={0x1}) ioperm(0x1, 0x3, 0x163f) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) ioperm(0x9, 0x7ff, 0x100000000) prlimit64(r1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xea}, 0x0) 887.037946ms ago: executing program 4 (id=1531): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x40000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 878.221296ms ago: executing program 0 (id=1532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000200)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='gi\xe0', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd0ffff00000000) 756.747112ms ago: executing program 4 (id=1533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x7, 0x1000000000008000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0xd, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f0000000040)=0x2, 0xa, 0x8, 0x0, 0x0, 0x1) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x8910, &(0x7f00000028c0)={'syztnl0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000400430000000200000000000006040000000000f93132", 0x39}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000001600)=@svm={0xf, 0x1, 0x1080, {0x9000}, {"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"}}) 753.457082ms ago: executing program 0 (id=1541): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000003800)=""/4080, 0xff0}], 0x6}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x120, 0x0) 145.534352ms ago: executing program 1 (id=1534): arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@local}) 144.895512ms ago: executing program 0 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002300090025bd7000ffd3df25040000000c00010002000306"], 0x20}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) 69.034346ms ago: executing program 0 (id=1535): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x131) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000040000800010001"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r3], 0xfdef) openat(r3, &(0x7f00000000c0)='./bus\x00', 0x480a00, 0xc4) 68.542846ms ago: executing program 2 (id=1536): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000083090002000000000000007488dffc5f53d54e9c9211156c6c24d44294a92cf58602c3515a88c58bbfaf179bf0e1"], 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x9da, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0xb0, 0x2a, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x33e}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x6c, 0x3, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x1, 0xaf}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x9, 0x8, 0x0, 0x8, 0x8}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x7, 0x9}]}, 0x4, [{0x45, &(0x7f00000001c0)=@string={0x45, 0x3, "51ebcf86c5b9d57dd152e86c5a6ce7930468efedbe8f70a7b257a2af0ddfe00c35972c39b0ef24fb3b8864d9aa839a32ff790d26995cb3a03b1fcc6f225ca2c2f625f2"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x411}}, {0xab, &(0x7f0000000380)=@string={0xab, 0x3, "754e4d0131c3259897124c094409e5f4ace1afa65608760003d25bf766a9ac8d5520a9c6b409ee3a78d376dcc100624c747d1d4fb84d7ee189d504c1c8ff81f7bb7be34f65563c7db6fc4e0a1b5c23050be5503fab336141096c456876e76510fd3d9b4b96335bdb00de74885eb1e576de2c819d16e918046fe2cda46a1946369e5fc8db4e38fb89c90cafe1b8c445c63ece758dc982e661a8d72c1d39fdfce921885ae872206d964e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}]}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001"], 0x310) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x9, 0x9, 0x1, 0xfffff801, 0x7, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x3, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10002, 0x403, 0x7fd, 0x3, 0x0, 0xfffffffc, 0xffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x100001ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 68.131166ms ago: executing program 1 (id=1537): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a"], 0x1c}, 0x1, 0x0, 0x2100}, 0x804) 422.03µs ago: executing program 1 (id=1538): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000080)=@generic={0xa, "b704e23b0230ec5547cb9d39b541177c2624047cdfbb1183e37a472edac14ed1f62fb01983111172d9fb0690eabb9ebc9bceb1c74212721ca59952e9cffa4005f2eab850139f1d84d13af2977f6d6284def2415254ad7188efd400d337d9272e0fa9e31051bbce00647a040627a7e0d3f6ad4319066929d5f578afb23137"}, 0x80, &(0x7f00000002c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): kems 0003:2006:0118.0008: unknown main item tag 0x0 [ 113.756097][ T427] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 113.763054][ T427] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 113.769947][ T427] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 113.776860][ T427] hkems 0003:2006:0118.0008: unknown main item tag 0x0 [ 113.784515][ T427] hkems 0003:2006:0118.0008: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 113.795601][ T427] hkems 0003:2006:0118.0008: no inputs found [ 113.801625][ T427] hkems 0003:2006:0118.0008: force feedback init failed [ 113.870813][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 113.891528][ T72] usb 4-1: 0:2 : does not exist [ 113.901170][ T9] usb 1-1: device descriptor read/8, error -71 [ 113.908353][ T72] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 113.919428][ T72] usb 4-1: USB disconnect, device number 50 [ 113.927194][ T971] udevd[971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.949819][ T427] usb 3-1: USB disconnect, device number 56 [ 114.031808][ T9] usb 1-1: device descriptor read/8, error -71 [ 114.087763][ T36] audit: type=1400 audit(1773739326.479:18551): avc: denied { create } for pid=3020 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.119190][ T36] audit: type=1400 audit(1773739326.509:18552): avc: denied { getopt } for pid=3022 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.139151][ T3023] bpf: Bad value for 'gid' [ 114.141008][ T9] usb usb1-port1: unable to enumerate USB device [ 114.157853][ T3025] overlayfs: missing 'lowerdir' [ 114.169828][ T36] audit: type=1400 audit(1773739326.559:18553): avc: denied { mounton } for pid=3027 comm="syz.1.1076" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 114.169831][ T3028] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 114.552814][ T3042] netlink: 520 bytes leftover after parsing attributes in process `syz.3.1083'. [ 114.713090][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 114.762726][ T3056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 114.801162][ T289] cgroup: fork rejected by pids controller in /syz1 [ 114.864959][ T36] audit: type=1400 audit(1773739327.259:18554): avc: denied { bind } for pid=3066 comm="syz.3.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.880774][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 114.895635][ T36] audit: type=1400 audit(1773739327.259:18555): avc: denied { setopt } for pid=3066 comm="syz.3.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.902079][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.939446][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.949670][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.959934][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 114.978268][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.992186][ T9] usb 3-1: Product: syz [ 114.997614][ T9] usb 3-1: Manufacturer: syz [ 115.011888][ T9] usb 3-1: SerialNumber: syz [ 115.057493][ T36] audit: type=1400 audit(1773739327.449:18556): avc: denied { mounton } for pid=3073 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 115.096435][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.103556][ T3073] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.110666][ T3073] bridge_slave_0: entered allmulticast mode [ 115.117183][ T3073] bridge_slave_0: entered promiscuous mode [ 115.124161][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.131332][ T3073] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.138397][ T3073] bridge_slave_1: entered allmulticast mode [ 115.144690][ T3073] bridge_slave_1: entered promiscuous mode [ 115.150900][ T13] bridge_slave_1: left allmulticast mode [ 115.156552][ T13] bridge_slave_1: left promiscuous mode [ 115.162263][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.169767][ T13] bridge_slave_0: left allmulticast mode [ 115.175599][ T13] bridge_slave_0: left promiscuous mode [ 115.181402][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.230807][ T31] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 115.232693][ T9] usb 3-1: unit 5 not found! [ 115.251489][ T639] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 115.273407][ T9] usb 3-1: USB disconnect, device number 57 [ 115.282200][ T13] veth0_vlan: left promiscuous mode [ 115.324127][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.331221][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.338507][ T3073] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.345594][ T3073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.367235][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.374646][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.382137][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 115.388597][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.388997][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.398892][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 115.405690][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.420815][ T639] usb 4-1: device descriptor read/64, error -71 [ 115.424279][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.438102][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.446211][ T31] usb 1-1: Product: 뺡챣䥦彩筸᳤뼌딍煐庇甋蓁ໝↀ죲ⶇ [ 115.455957][ T31] usb 1-1: Manufacturer: 瑾绲兘궵漾퇝櫽ঔ릂ퟫȸ懲烈ຢ饢┃ᵢ㵜汝뚢鈎퀩য;઩ਯ砽沖獫篘춲䑚帑︑ﲐ儆㚫博掃渦♓獝ஔ⤏뭌皟料㥚쓖๟ﵠᩏ癛ꪖ맘鬣᰷译䡗왿 [ 115.477844][ T31] usb 1-1: SerialNumber: ఉ [ 115.478443][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.489494][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.507260][ T3073] veth0_vlan: entered promiscuous mode [ 115.519204][ T3073] veth1_macvtap: entered promiscuous mode [ 115.537266][ T36] audit: type=1400 audit(1773739327.929:18557): avc: denied { mount } for pid=3073 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.662395][ T639] usb 4-1: device descriptor read/64, error -71 [ 115.827546][ T9] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 115.910120][ T639] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 115.993859][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.004733][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.016308][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 116.027455][ T426] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 116.035113][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.048173][ T639] usb 4-1: device descriptor read/64, error -71 [ 116.056433][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 116.065667][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.073836][ T9] usb 2-1: Product: syz [ 116.078310][ T9] usb 2-1: Manufacturer: syz [ 116.082921][ T9] usb 2-1: SerialNumber: syz [ 116.088224][ T9] usb 2-1: config 0 descriptor?? [ 116.093529][ T3088] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.102068][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 116.188862][ T426] usb 3-1: device descriptor read/64, error -71 [ 116.292069][ T639] usb 4-1: device descriptor read/64, error -71 [ 116.308353][ T427] usb 2-1: USB disconnect, device number 47 [ 116.405700][ T639] usb usb4-port1: attempt power cycle [ 116.436592][ T426] usb 3-1: device descriptor read/64, error -71 [ 116.684271][ T426] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 116.766734][ T639] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 116.788288][ T639] usb 4-1: device descriptor read/8, error -71 [ 116.828456][ T426] usb 3-1: device descriptor read/64, error -71 [ 116.922204][ T639] usb 4-1: device descriptor read/8, error -71 [ 117.075906][ T426] usb 3-1: device descriptor read/64, error -71 [ 117.168473][ T639] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 117.189287][ T426] usb usb3-port1: attempt power cycle [ 117.195467][ T639] usb 4-1: device descriptor read/8, error -71 [ 117.209712][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 117.334320][ T639] usb 4-1: device descriptor read/8, error -71 [ 117.343618][ T9] usb 2-1: device descriptor read/64, error -71 [ 117.446668][ T639] usb usb4-port1: unable to enumerate USB device [ 117.539287][ T426] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 117.560898][ T426] usb 3-1: device descriptor read/8, error -71 [ 117.590844][ T9] usb 2-1: device descriptor read/64, error -71 [ 117.694816][ T426] usb 3-1: device descriptor read/8, error -71 [ 117.837771][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 117.940546][ T426] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 117.962134][ T426] usb 3-1: device descriptor read/8, error -71 [ 117.971587][ T9] usb 2-1: device descriptor read/64, error -71 [ 118.008740][ T31] cdc_ncm 1-1:1.0: bind() failure [ 118.015276][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 118.022108][ T31] cdc_ncm 1-1:1.1: bind() failure [ 118.032519][ T31] usb 1-1: USB disconnect, device number 57 [ 118.104655][ T426] usb 3-1: device descriptor read/8, error -71 [ 118.218168][ T9] usb 2-1: device descriptor read/64, error -71 [ 118.224566][ T426] usb usb3-port1: unable to enumerate USB device [ 118.331337][ T9] usb usb2-port1: attempt power cycle [ 118.372411][ T31] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 118.495812][ T639] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 118.526816][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 118.532959][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.543896][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.556712][ T31] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 118.565844][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.574381][ T31] usb 1-1: config 0 descriptor?? [ 118.650035][ T639] usb 4-1: Using ep0 maxpacket: 32 [ 118.656984][ T639] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.665554][ T639] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.675782][ T639] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 118.684781][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 118.692432][ T639] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 118.705086][ T639] usb 4-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 118.714155][ T639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.722226][ T639] usb 4-1: Product: syz [ 118.726421][ T639] usb 4-1: Manufacturer: syz [ 118.731258][ T639] usb 4-1: SerialNumber: syz [ 118.736521][ T9] usb 2-1: device descriptor read/8, error -71 [ 118.791136][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 118.797150][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 118.806257][ T31] usb 1-1: USB disconnect, device number 58 [ 118.887200][ T9] usb 2-1: device descriptor read/8, error -71 [ 118.950295][ T639] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.958802][ T639] usb 4-1: unit 2 not found! [ 118.964016][ T639] usb 4-1: unit 1 not found! [ 118.972212][ T639] usb 4-1: USB disconnect, device number 55 [ 118.989449][ T3122] x_tables: duplicate entry at hook 2 [ 118.990140][ T971] udevd[971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.132549][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 119.153138][ T31] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 119.154255][ T9] usb 2-1: device descriptor read/8, error -71 [ 119.297717][ T9] usb 2-1: device descriptor read/8, error -71 [ 119.307031][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 119.313095][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.321581][ T31] usb 1-1: config 179 has no interface number 0 [ 119.328016][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.339074][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.350519][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.360567][ T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.373809][ T427] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 119.381432][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.390543][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.399598][ T3120] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.410447][ T9] usb usb2-port1: unable to enumerate USB device [ 119.543118][ T427] usb 3-1: Using ep0 maxpacket: 8 [ 119.549415][ T427] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.557747][ T427] usb 3-1: config 179 has no interface number 0 [ 119.564173][ T427] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.575252][ T427] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.586666][ T427] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.596920][ T427] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.610265][ T427] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.614347][ T639] usb 1-1: USB disconnect, device number 59 [ 119.619365][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.636879][ T3124] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 119.727848][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 119.850753][ T3124] FAULT_INJECTION: forcing a failure. [ 119.850753][ T3124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.863996][ T3124] CPU: 0 UID: 0 PID: 3124 Comm: syz.2.1111 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 119.864028][ T3124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.864036][ T3124] Call Trace: [ 119.864041][ T3124] [ 119.864047][ T3124] __dump_stack+0x21/0x30 [ 119.864065][ T3124] dump_stack_lvl+0x140/0x1c0 [ 119.864078][ T3124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.864092][ T3124] dump_stack+0x19/0x20 [ 119.864103][ T3124] should_fail_ex+0x3d7/0x530 [ 119.864116][ T3124] should_fail+0xf/0x20 [ 119.864127][ T3124] should_fail_usercopy+0x1e/0x30 [ 119.864140][ T3124] _copy_from_user+0x20/0xa0 [ 119.864154][ T3124] raw_ioctl+0x888/0x37e0 [ 119.864168][ T3124] ? pte_offset_map_rw_nolock+0xba/0x110 [ 119.864181][ T3124] ? handle_mm_fault+0x171c/0x1bf0 [ 119.864197][ T3124] ? __cfi_raw_ioctl+0x10/0x10 [ 119.864210][ T3124] ? selinux_file_ioctl+0x732/0x1480 [ 119.864223][ T3124] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 119.864235][ T3124] ? __cfi_handle_mm_fault+0x10/0x10 [ 119.864249][ T3124] ? lock_vma_under_rcu+0x4d1/0x590 [ 119.864281][ T3124] ? __fget_files+0x2c5/0x340 [ 119.864297][ T3124] ? bpf_lsm_file_ioctl+0xd/0x20 [ 119.864308][ T3124] ? security_file_ioctl+0x3e/0x110 [ 119.864319][ T3124] ? __cfi_raw_ioctl+0x10/0x10 [ 119.864332][ T3124] __se_sys_ioctl+0x132/0x1b0 [ 119.864347][ T3124] __x64_sys_ioctl+0x7f/0xa0 [ 119.864361][ T3124] x64_sys_call+0x1878/0x2ee0 [ 119.864375][ T3124] do_syscall_64+0x57/0xf0 [ 119.864388][ T3124] ? clear_bhb_loop+0x50/0xa0 [ 119.864402][ T3124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.864414][ T3124] RIP: 0033:0x7fc90db9c42b [ 119.864425][ T3124] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 119.864435][ T3124] RSP: 002b:00007fc90ea12f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.864448][ T3124] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc90db9c42b [ 119.864456][ T3124] RDX: 00007fc90ea12fe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 119.864463][ T3124] RBP: 0000000000000003 R08: 00007fc90df40320 R09: 0000000000000000 [ 119.864471][ T3124] R10: 0000000000000003 R11: 0000000000000246 R12: 00002000000000c0 [ 119.864478][ T3124] R13: 0000000000000000 R14: 00007fc90de15fa0 R15: 00007ffc8155cb68 [ 119.864486][ T3124] [ 119.864757][ T427] usb 3-1: USB disconnect, device number 62 [ 119.902066][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 120.107236][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.115694][ T9] usb 4-1: config 179 has no interface number 0 [ 120.122007][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.133089][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.144349][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.155548][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.167008][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.174130][ T3132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3132 comm=syz.0.1115 [ 120.180304][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.201897][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.211572][ T3126] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 120.432282][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input30 [ 120.465691][ T427] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 120.486234][ T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 120.501249][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 120.501266][ T36] audit: type=1400 audit(1773739332.764:18560): avc: denied { ioctl } for pid=3135 comm="syz.2.1117" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.637803][ T3126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.639869][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 120.646470][ T3126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.651233][ T427] usb 1-1: Using ep0 maxpacket: 8 [ 120.665271][ T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.673690][ T31] usb 2-1: config 179 has no interface number 0 [ 120.679985][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.691373][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.702660][ T427] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.710914][ T427] usb 1-1: config 179 has no interface number 0 [ 120.717205][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.727352][ T427] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.738472][ T31] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.752376][ T427] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.763668][ T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.772743][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.780824][ T427] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.792372][ T427] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.804091][ T427] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.817372][ T427] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.817487][ T3128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.826484][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.847644][ T3134] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.867473][ T639] usb 4-1: USB disconnect, device number 56 [ 120.867511][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.881671][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.053403][ T427] usb 2-1: USB disconnect, device number 52 [ 121.067959][ T3134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.076731][ T3134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.292708][ T427] usb 1-1: USB disconnect, device number 60 [ 121.299052][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 121.299088][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.357170][ T31] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.374750][ T31] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.426000][ T36] audit: type=1400 audit(1773739333.663:18561): avc: denied { bind } for pid=3147 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.643609][ T3185] FAULT_INJECTION: forcing a failure. [ 121.643609][ T3185] name failslab, interval 1, probability 0, space 0, times 0 [ 121.659404][ T3185] CPU: 0 UID: 0 PID: 3185 Comm: syz.3.1135 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 121.659440][ T3185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.659453][ T3185] Call Trace: [ 121.659460][ T3185] [ 121.659467][ T3185] __dump_stack+0x21/0x30 [ 121.659495][ T3185] dump_stack_lvl+0x140/0x1c0 [ 121.659516][ T3185] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.659540][ T3185] dump_stack+0x19/0x20 [ 121.659560][ T3185] should_fail_ex+0x3d7/0x530 [ 121.659582][ T3185] should_failslab+0xac/0x100 [ 121.659599][ T3185] kmem_cache_alloc_node_noprof+0x45/0x420 [ 121.659624][ T3185] ? dup_task_struct+0xc1/0xd80 [ 121.659643][ T3185] ? kasan_save_alloc_info+0x40/0x50 [ 121.659664][ T3185] ? __kasan_kmalloc+0x96/0xb0 [ 121.659681][ T3185] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.659706][ T3185] dup_task_struct+0xc1/0xd80 [ 121.659725][ T3185] ? __kasan_check_write+0x18/0x20 [ 121.659748][ T3185] ? _raw_spin_lock_irq+0x93/0x120 [ 121.659770][ T3185] ? copy_process+0x3290/0x3290 [ 121.659790][ T3185] ? __kasan_check_write+0x18/0x20 [ 121.659813][ T3185] copy_process+0x55a/0x3290 [ 121.659836][ T3185] ? __cfi_copy_process+0x10/0x10 [ 121.659855][ T3185] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.659878][ T3185] ? __kasan_check_write+0x18/0x20 [ 121.659901][ T3185] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 121.659920][ T3185] vhost_task_create+0x1f7/0x400 [ 121.659945][ T3185] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 121.659965][ T3185] ? __cfi_vhost_task_create+0x10/0x10 [ 121.659990][ T3185] ? __cfi_vhost_task_fn+0x10/0x10 [ 121.660015][ T3185] ? __kasan_check_write+0x18/0x20 [ 121.660037][ T3185] ? mutex_lock+0x97/0x1d0 [ 121.660060][ T3185] ? __cfi_mutex_lock+0x10/0x10 [ 121.660084][ T3185] ? kernel_text_address+0xa9/0xe0 [ 121.660106][ T3185] kvm_mmu_post_init_vm+0x161/0x300 [ 121.660129][ T3185] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 121.660153][ T3185] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 121.660174][ T3185] ? kstrtoull+0x13b/0x1e0 [ 121.660203][ T3185] ? kstrtouint+0x78/0xf0 [ 121.660222][ T3185] ? ioctl_has_perm+0x1bc/0x500 [ 121.660244][ T3185] ? __asan_memcpy+0x5a/0x80 [ 121.660266][ T3185] ? ioctl_has_perm+0x408/0x500 [ 121.660286][ T3185] ? has_cap_mac_admin+0xd0/0xd0 [ 121.660306][ T3185] ? __kasan_check_write+0x18/0x20 [ 121.660327][ T3185] ? mutex_lock_killable+0x97/0x1d0 [ 121.660345][ T3185] ? __cfi_mutex_lock_killable+0x10/0x10 [ 121.660362][ T3185] ? proc_fail_nth_write+0x184/0x220 [ 121.660383][ T3185] kvm_vcpu_ioctl+0xa48/0x1000 [ 121.660408][ T3185] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.660431][ T3185] ? __cfi_vfs_write+0x10/0x10 [ 121.660454][ T3185] ? __kasan_check_write+0x18/0x20 [ 121.660476][ T3185] ? mutex_unlock+0x90/0x240 [ 121.660500][ T3185] ? __cfi_mutex_unlock+0x10/0x10 [ 121.660524][ T3185] ? __fget_files+0x2c5/0x340 [ 121.660549][ T3185] ? __fget_files+0x2c5/0x340 [ 121.660574][ T3185] ? bpf_lsm_file_ioctl+0xd/0x20 [ 121.660592][ T3185] ? security_file_ioctl+0x3e/0x110 [ 121.660612][ T3185] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 121.660636][ T3185] __se_sys_ioctl+0x132/0x1b0 [ 121.660661][ T3185] __x64_sys_ioctl+0x7f/0xa0 [ 121.660686][ T3185] x64_sys_call+0x1878/0x2ee0 [ 121.660710][ T3185] do_syscall_64+0x57/0xf0 [ 121.660731][ T3185] ? clear_bhb_loop+0x50/0xa0 [ 121.660754][ T3185] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.660776][ T3185] RIP: 0033:0x7f1d0d59c799 [ 121.660793][ T3185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.660808][ T3185] RSP: 002b:00007f1d0e4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.660828][ T3185] RAX: ffffffffffffffda RBX: 00007f1d0d815fa0 RCX: 00007f1d0d59c799 [ 121.660843][ T3185] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 121.660856][ T3185] RBP: 00007f1d0e4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 121.660869][ T3185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.660881][ T3185] R13: 00007f1d0d816038 R14: 00007f1d0d815fa0 R15: 00007fff0a6d2948 [ 121.660897][ T3185] [ 122.031195][ T31] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 122.086364][ T3193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 122.137510][ T3199] input: syz1 as /devices/virtual/input/input31 [ 122.235496][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 122.241644][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.249954][ T31] usb 3-1: config 179 has no interface number 0 [ 122.256525][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.271168][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.282515][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.293701][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.305865][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.319328][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.331457][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.340486][ T3173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.352541][ T3215] fuse: Bad value for 'fd' [ 122.511401][ T639] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 122.557152][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input32 [ 122.633997][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 122.665673][ T639] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.673958][ T639] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 122.683027][ T639] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.693366][ T639] usb 4-1: config 220 has no interface number 2 [ 122.699651][ T639] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 122.713005][ T639] usb 4-1: config 220 interface 0 has no altsetting 0 [ 122.719812][ T639] usb 4-1: config 220 interface 76 has no altsetting 0 [ 122.726895][ T639] usb 4-1: config 220 interface 1 has no altsetting 0 [ 122.735200][ T639] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.744548][ T639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.752620][ T639] usb 4-1: Product: syz [ 122.756850][ T639] usb 4-1: Manufacturer: syz [ 122.761481][ T639] usb 4-1: SerialNumber: syz [ 122.764469][ T3173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.774687][ T3173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.787214][ T426] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 122.794895][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 122.801647][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.811818][ T9] usb 2-1: config 0 has no interfaces? [ 122.818728][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.827828][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.835958][ T9] usb 2-1: Product: syz [ 122.840185][ T9] usb 2-1: Manufacturer: syz [ 122.844791][ T9] usb 2-1: SerialNumber: syz [ 122.850171][ T9] usb 2-1: config 0 descriptor?? [ 122.951694][ T426] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.961611][ T426] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43040, setting to 64 [ 122.973309][ T426] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.985691][ T426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.990481][ T31] usb 3-1: USB disconnect, device number 63 [ 122.995144][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 122.995180][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 122.995813][ T639] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 123.024150][ T426] usb 1-1: SerialNumber: syz [ 123.028986][ T639] usb 4-1: No valid video chain found. [ 123.034782][ T639] usb 4-1: selecting invalid altsetting 0 [ 123.041227][ T426] cdc_acm 1-1:1.0: skipping garbage [ 123.051845][ T639] usb 4-1: USB disconnect, device number 57 [ 123.420591][ T3228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.429107][ T3228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.437610][ T3228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.446331][ T3228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.848268][ T639] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 123.908336][ T3249] netlink: 'syz.2.1157': attribute type 4 has an invalid length. [ 123.934255][ T3251] FAULT_INJECTION: forcing a failure. [ 123.934255][ T3251] name failslab, interval 1, probability 0, space 0, times 0 [ 123.947166][ T3251] CPU: 1 UID: 0 PID: 3251 Comm: syz.2.1158 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 123.947201][ T3251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.947214][ T3251] Call Trace: [ 123.947222][ T3251] [ 123.947230][ T3251] __dump_stack+0x21/0x30 [ 123.947264][ T3251] dump_stack_lvl+0x140/0x1c0 [ 123.947287][ T3251] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.947311][ T3251] ? release_sock+0x171/0x1f0 [ 123.947329][ T3251] dump_stack+0x19/0x20 [ 123.947350][ T3251] should_fail_ex+0x3d7/0x530 [ 123.947373][ T3251] should_failslab+0xac/0x100 [ 123.947391][ T3251] kmem_cache_alloc_node_noprof+0x45/0x420 [ 123.947416][ T3251] ? netlink_data_ready+0x20/0x20 [ 123.947436][ T3251] ? __alloc_skb+0x108/0x370 [ 123.947455][ T3251] __alloc_skb+0x108/0x370 [ 123.947473][ T3251] netlink_alloc_large_skb+0xf7/0x1b0 [ 123.947493][ T3251] netlink_sendmsg+0x594/0xb10 [ 123.947516][ T3251] ? __cfi_netlink_sendmsg+0x10/0x10 [ 123.947538][ T3251] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 123.947563][ T3251] ? security_socket_sendmsg+0x3d/0x100 [ 123.947591][ T3251] sock_write_iter+0x4dc/0x530 [ 123.947615][ T3251] ? __cfi_sock_write_iter+0x10/0x10 [ 123.947640][ T3251] ? selinux_file_permission+0x8a4/0xb60 [ 123.947662][ T3251] do_iter_readv_writev+0x62f/0x820 [ 123.947688][ T3251] ? vfs_iter_read+0x5f0/0x5f0 [ 123.947713][ T3251] ? bpf_lsm_file_permission+0xd/0x20 [ 123.947732][ T3251] vfs_writev+0x4a8/0xe50 [ 123.947752][ T3251] ? do_writev+0x2e0/0x2e0 [ 123.947769][ T3251] ? vfs_write+0x9a4/0xf90 [ 123.947795][ T3251] do_writev+0x151/0x2e0 [ 123.947813][ T3251] ? vfs_readv+0xa10/0xa10 [ 123.947831][ T3251] ? __kasan_check_read+0x15/0x20 [ 123.947855][ T3251] __x64_sys_writev+0x81/0x90 [ 123.947879][ T3251] x64_sys_call+0x1fbb/0x2ee0 [ 123.947903][ T3251] do_syscall_64+0x57/0xf0 [ 123.947924][ T3251] ? clear_bhb_loop+0x50/0xa0 [ 123.947948][ T3251] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.947970][ T3251] RIP: 0033:0x7fc90db9c799 [ 123.947987][ T3251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.948004][ T3251] RSP: 002b:00007fc90ea14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 123.948025][ T3251] RAX: ffffffffffffffda RBX: 00007fc90de15fa0 RCX: 00007fc90db9c799 [ 123.948040][ T3251] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 123.948054][ T3251] RBP: 00007fc90ea14090 R08: 0000000000000000 R09: 0000000000000000 [ 123.948067][ T3251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.948080][ T3251] R13: 00007fc90de16038 R14: 00007fc90de15fa0 R15: 00007ffc8155cb68 [ 123.948097][ T3251] [ 124.011290][ T639] usb 4-1: Using ep0 maxpacket: 16 [ 124.219963][ T639] usb 4-1: no configurations [ 124.224582][ T639] usb 4-1: can't read configurations, error -22 [ 124.266056][ T31] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 124.357789][ T639] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 124.418897][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 124.425102][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.433405][ T31] usb 3-1: config 179 has no interface number 0 [ 124.439719][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.450957][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 124.462190][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.473418][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 124.484821][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.498154][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.507236][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.516380][ T3253] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 124.520784][ T639] usb 4-1: Using ep0 maxpacket: 16 [ 124.530334][ T639] usb 4-1: no configurations [ 124.535431][ T639] usb 4-1: can't read configurations, error -22 [ 124.542275][ T639] usb usb4-port1: attempt power cycle [ 124.731405][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 124.887593][ T639] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 124.908450][ T639] usb 4-1: Using ep0 maxpacket: 16 [ 124.914049][ T639] usb 4-1: no configurations [ 124.918878][ T639] usb 4-1: can't read configurations, error -22 [ 124.936390][ T3253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.945103][ T3253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.050494][ T639] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 125.071147][ T639] usb 4-1: Using ep0 maxpacket: 16 [ 125.076753][ T639] usb 4-1: no configurations [ 125.081581][ T639] usb 4-1: can't read configurations, error -22 [ 125.087950][ T639] usb usb4-port1: unable to enumerate USB device [ 125.157885][ T31] usb 3-1: USB disconnect, device number 64 [ 125.163850][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.163888][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.455205][ T31] usb 2-1: USB disconnect, device number 53 [ 125.492596][ T379] usb 1-1: USB disconnect, device number 61 [ 126.067971][ T379] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 126.241585][ T379] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 126.249923][ T379] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.260405][ T379] usb 3-1: config 0 has no interface number 0 [ 126.266705][ T379] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 126.276107][ T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.285024][ T379] usb 3-1: config 0 descriptor?? [ 126.291501][ T379] usb 3-1: bad CDC descriptors [ 126.495916][ T639] usb 3-1: USB disconnect, device number 65 [ 127.020914][ T36] audit: type=1400 audit(1773739339.147:18562): avc: denied { read } for pid=3292 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.041483][ T3293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 127.051344][ T3293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3293 comm=syz.0.1175 [ 127.064115][ T426] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 127.087594][ T3295] netlink: 'syz.2.1177': attribute type 33 has an invalid length. [ 127.106459][ T3295] netlink: 'syz.2.1177': attribute type 11 has an invalid length. [ 127.114510][ T3295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1177'. [ 127.236770][ T426] usb 4-1: Using ep0 maxpacket: 8 [ 127.247981][ T426] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 127.256336][ T426] usb 4-1: config 179 has no interface number 0 [ 127.263276][ T426] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 127.274543][ T426] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 127.286416][ T426] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.301886][ T426] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 127.315268][ T426] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.329438][ T426] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.338785][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.348071][ T3285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.551627][ T379] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 127.565853][ T426] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input35 [ 127.714806][ T379] usb 1-1: not running at top speed; connect to a high speed hub [ 127.723434][ T379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 127.734752][ T379] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.749382][ T379] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 127.758736][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.766918][ T379] usb 1-1: Product: ᰉ [ 127.768664][ T3285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.771196][ T379] usb 1-1: Manufacturer: ㊺绪깍눏郎뙸ᔵꥥ방沊퓣ᏤℰӘ홷絍᭄ [ 127.789615][ T379] usb 1-1: SerialNumber: ꃫꞿ愎쳣ퟎ쩄笭룳溇鶣焥淹✷艩⫕璧틊ﴌ禖㘍줴㎺晟⊟ᭈ췉 [ 127.801843][ T3285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.813695][ T3315] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.031300][ T379] usblp0: Disabling reads from problematic bidirectional printer [ 128.031806][ T426] usb 4-1: USB disconnect, device number 62 [ 128.039114][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.039146][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 128.066082][ T379] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 128.086252][ T379] usb 1-1: USB disconnect, device number 62 [ 128.101037][ T379] usblp0: removed [ 128.241106][ T36] audit: type=1400 audit(1773739340.349:18563): avc: denied { mounton } for pid=3318 comm="syz.2.1186" path="/282/file0" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 128.264685][ T3320] 9pnet: Could not find request transport: R [ 128.288364][ T3319] SELinux: failed to load policy [ 128.562057][ T3339] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1193'. [ 128.575441][ T36] audit: type=1400 audit(1773739340.684:18564): avc: denied { listen } for pid=3340 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.645083][ T3350] netlink: 'syz.1.1199': attribute type 33 has an invalid length. [ 128.667756][ T3352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 128.687816][ T3355] usb usb8: usbfs: process 3355 (syz.3.1201) did not claim interface 4 before use [ 128.824315][ T3365] overlayfs: overlapping lowerdir path [ 128.848295][ T3368] incfs: Options parsing error. -22 [ 128.853616][ T3368] incfs: mount failed -22 [ 128.939856][ T3380] netlink: 'syz.2.1211': attribute type 33 has an invalid length. [ 128.948044][ T639] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 128.955774][ T3380] FAULT_INJECTION: forcing a failure. [ 128.955774][ T3380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.968956][ T3380] CPU: 0 UID: 0 PID: 3380 Comm: syz.2.1211 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 128.968987][ T3380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.968999][ T3380] Call Trace: [ 128.969006][ T3380] [ 128.969013][ T3380] __dump_stack+0x21/0x30 [ 128.969041][ T3380] dump_stack_lvl+0x140/0x1c0 [ 128.969062][ T3380] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.969084][ T3380] ? check_stack_object+0x106/0x150 [ 128.969106][ T3380] dump_stack+0x19/0x20 [ 128.969124][ T3380] should_fail_ex+0x3d7/0x530 [ 128.969144][ T3380] should_fail+0xf/0x20 [ 128.969162][ T3380] should_fail_usercopy+0x1e/0x30 [ 128.969183][ T3380] _copy_from_user+0x20/0xa0 [ 128.969206][ T3380] kstrtouint_from_user+0xde/0x170 [ 128.969226][ T3380] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 128.969247][ T3380] ? selinux_file_permission+0x318/0xb60 [ 128.969269][ T3380] ? preempt_schedule_common+0x2d/0x60 [ 128.969293][ T3380] ? preempt_schedule+0xc5/0xe0 [ 128.969316][ T3380] proc_fail_nth_write+0x8f/0x220 [ 128.969336][ T3380] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 128.969355][ T3380] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 128.969374][ T3380] vfs_write+0x3c5/0xf90 [ 128.969396][ T3380] ? __cfi_vfs_write+0x10/0x10 [ 128.969418][ T3380] ? __kasan_check_write+0x18/0x20 [ 128.969439][ T3380] ? mutex_lock+0x97/0x1d0 [ 128.969463][ T3380] ? __cfi_mutex_lock+0x10/0x10 [ 128.969487][ T3380] ? __fget_files+0x2c5/0x340 [ 128.969512][ T3380] ksys_write+0x145/0x260 [ 128.969533][ T3380] ? xfd_validate_state+0x68/0x140 [ 128.969555][ T3380] ? __cfi_ksys_write+0x10/0x10 [ 128.969578][ T3380] ? __kasan_check_read+0x15/0x20 [ 128.969600][ T3380] __x64_sys_write+0x7f/0x90 [ 128.969622][ T3380] x64_sys_call+0x271c/0x2ee0 [ 128.969645][ T3380] do_syscall_64+0x57/0xf0 [ 128.969666][ T3380] ? clear_bhb_loop+0x50/0xa0 [ 128.969688][ T3380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.969710][ T3380] RIP: 0033:0x7fc90db5cfce [ 128.969735][ T3380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.969750][ T3380] RSP: 002b:00007fc90ea13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.969771][ T3380] RAX: ffffffffffffffda RBX: 00007fc90ea146c0 RCX: 00007fc90db5cfce [ 128.969786][ T3380] RDX: 0000000000000001 RSI: 00007fc90ea140a0 RDI: 000000000000000c [ 128.969800][ T3380] RBP: 00007fc90ea14090 R08: 0000000000000000 R09: 0000000000000000 [ 128.969813][ T3380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.969825][ T3380] R13: 00007fc90de16038 R14: 00007fc90de15fa0 R15: 00007ffc8155cb68 [ 128.969842][ T3380] [ 129.306848][ T639] usb 4-1: Using ep0 maxpacket: 8 [ 129.313199][ T3384] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 129.313367][ T639] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.347358][ T36] audit: type=1400 audit(1773739341.413:18565): avc: denied { create } for pid=3383 comm="syz.2.1213" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 129.405367][ T639] usb 4-1: config 179 has no interface number 0 [ 129.427298][ T36] audit: type=1400 audit(1773739341.413:18566): avc: denied { associate } for pid=3383 comm="syz.2.1213" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 129.504661][ T639] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.524376][ T36] audit: type=1400 audit(1773739341.413:18567): avc: denied { mounton } for pid=3383 comm="syz.2.1213" path="/297/bus" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 129.603350][ T639] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.704744][ T36] audit: type=1400 audit(1773739341.413:18568): avc: denied { write } for pid=3383 comm="syz.2.1213" name="bus" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 129.715670][ T36] audit: type=1400 audit(1773739341.413:18569): avc: denied { add_name } for pid=3383 comm="syz.2.1213" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 129.719084][ T639] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.908767][ T36] audit: type=1400 audit(1773739341.413:18570): avc: denied { setattr } for pid=3383 comm="syz.2.1213" name="work" dev="tmpfs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 129.910154][ T36] audit: type=1400 audit(1773739341.413:18571): avc: denied { write open } for pid=3383 comm="syz.2.1213" path=2F202864656C6574656429 dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 129.912433][ T639] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.104917][ T639] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.118815][ T639] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.127917][ T639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.137046][ T3357] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.148052][ T31] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 130.158138][ T426] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 130.299886][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 130.306206][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.317906][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.320186][ T426] usb 3-1: Using ep0 maxpacket: 8 [ 130.327083][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.333595][ T426] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 130.340185][ T31] usb 1-1: Product: syz [ 130.353758][ T31] usb 1-1: Manufacturer: syz [ 130.358383][ T31] usb 1-1: SerialNumber: syz [ 130.361970][ T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.371370][ T31] usb 1-1: config 0 descriptor?? [ 130.371961][ T639] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36 [ 130.384665][ T31] smsc95xx v2.0.0 [ 130.388046][ T426] usb 3-1: config 0 descriptor?? [ 130.390516][ T31] smsc95xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 130.405472][ T31] smsc95xx 1-1:0.0: probe with driver smsc95xx failed with error -22 [ 130.566031][ T3357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.574772][ T3357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.602876][ T426] usb 3-1: string descriptor 0 read error: -71 [ 130.610691][ T426] usb 3-1: Found UVC 0.00 device (2833:0201) [ 130.617630][ T426] usb 3-1: No valid video chain found. [ 130.625512][ T426] usb 3-1: USB disconnect, device number 66 [ 130.786504][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.794818][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.803370][ T639] usb 4-1: USB disconnect, device number 63 [ 130.827186][ T3413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 131.127351][ T3416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 131.145724][ T3418] FAULT_INJECTION: forcing a failure. [ 131.145724][ T3418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.158895][ T3418] CPU: 0 UID: 0 PID: 3418 Comm: syz.2.1227 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 131.158917][ T3418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.158925][ T3418] Call Trace: [ 131.158929][ T3418] [ 131.158935][ T3418] __dump_stack+0x21/0x30 [ 131.158952][ T3418] dump_stack_lvl+0x140/0x1c0 [ 131.158965][ T3418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.158978][ T3418] dump_stack+0x19/0x20 [ 131.158990][ T3418] should_fail_ex+0x3d7/0x530 [ 131.159003][ T3418] should_fail+0xf/0x20 [ 131.159014][ T3418] should_fail_usercopy+0x1e/0x30 [ 131.159027][ T3418] _copy_from_iter+0x1a9/0x1510 [ 131.159041][ T3418] ? kmalloc_reserve+0xcf/0x4f0 [ 131.159051][ T3418] ? __virt_addr_valid+0x2a6/0x380 [ 131.159062][ T3418] ? __cfi__copy_from_iter+0x10/0x10 [ 131.159076][ T3418] ? __check_object_size+0x527/0x830 [ 131.159090][ T3418] ? __cfi___check_object_size+0x10/0x10 [ 131.159103][ T3418] ? skb_put+0x112/0x1f0 [ 131.159113][ T3418] netlink_sendmsg+0x68e/0xb10 [ 131.159126][ T3418] ? __cfi_netlink_sendmsg+0x10/0x10 [ 131.159137][ T3418] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 131.159153][ T3418] ? security_socket_sendmsg+0x3d/0x100 [ 131.159169][ T3418] sock_write_iter+0x4dc/0x530 [ 131.159183][ T3418] ? __cfi_sock_write_iter+0x10/0x10 [ 131.159197][ T3418] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 131.159210][ T3418] vfs_write+0x764/0xf90 [ 131.159224][ T3418] ? __cfi_vfs_write+0x10/0x10 [ 131.159238][ T3418] ksys_write+0x145/0x260 [ 131.159251][ T3418] ? __cfi_ksys_write+0x10/0x10 [ 131.159264][ T3418] ? __kasan_check_read+0x15/0x20 [ 131.159277][ T3418] __x64_sys_write+0x7f/0x90 [ 131.159290][ T3418] x64_sys_call+0x271c/0x2ee0 [ 131.159304][ T3418] do_syscall_64+0x57/0xf0 [ 131.159316][ T3418] ? clear_bhb_loop+0x50/0xa0 [ 131.159330][ T3418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.159342][ T3418] RIP: 0033:0x7fc90db9c799 [ 131.159352][ T3418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.159361][ T3418] RSP: 002b:00007fc90ea14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.159374][ T3418] RAX: ffffffffffffffda RBX: 00007fc90de15fa0 RCX: 00007fc90db9c799 [ 131.159382][ T3418] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 131.159389][ T3418] RBP: 00007fc90ea14090 R08: 0000000000000000 R09: 0000000000000000 [ 131.159397][ T3418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.159403][ T3418] R13: 00007fc90de16038 R14: 00007fc90de15fa0 R15: 00007ffc8155cb68 [ 131.159412][ T3418] [ 131.437988][ T3423] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 131.542855][ T3433] Unsupported ieee802154 address type: 0 [ 131.788060][ T639] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 131.798263][ T426] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 131.939834][ T639] usb 4-1: Using ep0 maxpacket: 32 [ 131.946391][ T639] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.954263][ T426] usb 2-1: Using ep0 maxpacket: 8 [ 131.960732][ T426] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.968911][ T639] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 131.978016][ T639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.986086][ T426] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 131.996164][ T639] usb 4-1: Product: syz [ 132.000411][ T639] usb 4-1: Manufacturer: syz [ 132.005048][ T639] usb 4-1: SerialNumber: syz [ 132.009880][ T426] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 132.021220][ T426] usb 2-1: language id specifier not provided by device, defaulting to English [ 132.032968][ T426] usb 2-1: New USB device found, idVendor=15ba, idProduct=002a, bcdDevice=2e.ef [ 132.042093][ T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.050085][ T426] usb 2-1: Product: syz [ 132.054308][ T426] usb 2-1: SerialNumber: syz [ 132.224283][ T639] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.231406][ T639] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.243302][ T639] usb 4-1: USB disconnect, device number 64 [ 132.254262][ T745] udevd[745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.338826][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 132.338844][ T36] audit: type=1400 audit(1773739344.406:18581): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.564495][ T31] usb 1-1: USB disconnect, device number 63 [ 132.655833][ T426] usb 2-1: USB disconnect, device number 54 [ 132.762681][ T3460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.771255][ T3460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.783988][ T3462] netlink: 'syz.2.1243': attribute type 21 has an invalid length. [ 133.011793][ T72] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 133.018926][ T31] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 133.164359][ T72] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.174592][ T72] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.183822][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 133.185608][ T72] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 133.190149][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.198183][ T72] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.206570][ T31] usb 1-1: config 179 has no interface number 0 [ 133.214631][ T72] usb 4-1: Product: syz [ 133.221224][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.225349][ T72] usb 4-1: Manufacturer: syz [ 133.236647][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.241303][ T72] usb 4-1: SerialNumber: syz [ 133.252493][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.268039][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.279613][ T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.292891][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.294694][ T426] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 133.302072][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.318599][ T3455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.362716][ T3485] fuse: Bad value for 'fd' [ 133.362731][ T36] audit: type=1400 audit(1773739345.415:18582): avc: denied { mounton } for pid=3482 comm="syz.2.1252" path="/309/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 133.462562][ T72] usb 4-1: 0:2 : does not exist [ 133.467573][ T72] usb 4-1: unit 3 not found! [ 133.472311][ T72] usb 4-1: unit 64 not found! [ 133.477066][ T426] usb 2-1: Invalid ep0 maxpacket: 64 [ 133.483597][ T72] usb 4-1: cannot find UAC_HEADER [ 133.489986][ T72] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 133.502773][ T72] usb 4-1: USB disconnect, device number 65 [ 133.512995][ T436] udevd[436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.540297][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input37 [ 133.607986][ T426] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 133.743136][ T3455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.752582][ T3455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.760770][ T426] usb 2-1: Invalid ep0 maxpacket: 64 [ 133.766234][ T426] usb usb2-port1: attempt power cycle [ 133.975567][ T72] usb 1-1: USB disconnect, device number 64 [ 133.975686][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.990180][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.113214][ T426] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 134.143733][ T426] usb 2-1: Invalid ep0 maxpacket: 64 [ 134.284849][ T426] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 134.305473][ T426] usb 2-1: Invalid ep0 maxpacket: 64 [ 134.310888][ T426] usb usb2-port1: unable to enumerate USB device [ 134.497682][ T3500] FAULT_INJECTION: forcing a failure. [ 134.497682][ T3500] name failslab, interval 1, probability 0, space 0, times 0 [ 134.510372][ T3500] CPU: 0 UID: 0 PID: 3500 Comm: syz.0.1259 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 134.510403][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.510415][ T3500] Call Trace: [ 134.510422][ T3500] [ 134.510428][ T3500] __dump_stack+0x21/0x30 [ 134.510446][ T3500] dump_stack_lvl+0x140/0x1c0 [ 134.510459][ T3500] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.510471][ T3500] ? __kasan_check_write+0x18/0x20 [ 134.510485][ T3500] ? rcutree_migrate_callbacks+0xc50/0xc50 [ 134.510498][ T3500] dump_stack+0x19/0x20 [ 134.510510][ T3500] should_fail_ex+0x3d7/0x530 [ 134.510523][ T3500] should_failslab+0xac/0x100 [ 134.510532][ T3500] kmem_cache_alloc_noprof+0x42/0x410 [ 134.510546][ T3500] ? dst_alloc+0x13c/0x250 [ 134.510559][ T3500] dst_alloc+0x13c/0x250 [ 134.510571][ T3500] ? ip_check_mc_rcu+0x267/0x360 [ 134.510582][ T3500] ip_route_output_key_hash_rcu+0x1302/0x1f90 [ 134.510596][ T3500] ip_route_output_flow+0xff/0x2a0 [ 134.510607][ T3500] ? __cfi_ip_route_output_flow+0x10/0x10 [ 134.510618][ T3500] ? cgroup_rstat_updated+0x141/0x810 [ 134.510640][ T3500] ? selinux_sk_getsecid+0x2e/0xd0 [ 134.510657][ T3500] udp_sendmsg+0x126d/0x23f0 [ 134.510668][ T3500] ? avc_has_perm_noaudit+0x26c/0x360 [ 134.510683][ T3500] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 134.510695][ T3500] ? __cfi_udp_sendmsg+0x10/0x10 [ 134.510706][ T3500] ? do_wp_page+0x217f/0x2e90 [ 134.510721][ T3500] ? selinux_socket_sendmsg+0x281/0x380 [ 134.510736][ T3500] ? folio_put+0x90/0x90 [ 134.510750][ T3500] ? __count_memcg_events+0xdf/0x3b0 [ 134.510760][ T3500] ? inet_send_prepare+0x64/0x4e0 [ 134.510773][ T3500] ? pte_offset_map_rw_nolock+0xba/0x110 [ 134.510786][ T3500] ? __cfi_udp_sendmsg+0x10/0x10 [ 134.510796][ T3500] inet_sendmsg+0xef/0x120 [ 134.510809][ T3500] ____sys_sendmsg+0x8ac/0xae0 [ 134.510822][ T3500] ? __import_iovec+0x3ef/0x7c0 [ 134.510832][ T3500] ? __sys_sendmsg_sock+0x50/0x50 [ 134.510844][ T3500] ? import_iovec+0x80/0xb0 [ 134.510854][ T3500] ___sys_sendmsg+0x2a6/0x370 [ 134.510866][ T3500] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.510879][ T3500] ? do_user_addr_fault+0xbbb/0x11e0 [ 134.510895][ T3500] __sys_sendmmsg+0x2b4/0x4e0 [ 134.510908][ T3500] ? __cfi___sys_sendmmsg+0x10/0x10 [ 134.510921][ T3500] ? __cfi_ksys_write+0x10/0x10 [ 134.510935][ T3500] __x64_sys_sendmmsg+0xa4/0xc0 [ 134.510947][ T3500] x64_sys_call+0xfec/0x2ee0 [ 134.510961][ T3500] do_syscall_64+0x57/0xf0 [ 134.510973][ T3500] ? clear_bhb_loop+0x50/0xa0 [ 134.510987][ T3500] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.510999][ T3500] RIP: 0033:0x7f60de79c799 [ 134.511009][ T3500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.511019][ T3500] RSP: 002b:00007f60df5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.511031][ T3500] RAX: ffffffffffffffda RBX: 00007f60dea15fa0 RCX: 00007f60de79c799 [ 134.511040][ T3500] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 134.511048][ T3500] RBP: 00007f60df5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.511055][ T3500] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 134.511062][ T3500] R13: 00007f60dea16038 R14: 00007f60dea15fa0 R15: 00007ffdc09d09e8 [ 134.511071][ T3500] [ 135.133011][ T31] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 135.284443][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 135.290969][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.299422][ T31] usb 1-1: config 179 has no interface number 0 [ 135.305885][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.316958][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.328538][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.339669][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.351063][ T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.364380][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.373420][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.382414][ T3520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.413850][ T3527] SELinux: policydb string length 65567 does not match expected length 8 [ 135.422534][ T3527] SELinux: failed to load policy [ 135.601803][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input38 [ 135.804028][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.812622][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.024144][ T426] usb 1-1: USB disconnect, device number 65 [ 136.024144][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.024273][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.112463][ T3543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1278'. [ 136.134925][ T36] audit: type=1400 audit(1773739348.158:18583): avc: denied { create } for pid=3544 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 136.243722][ T3565] FAULT_INJECTION: forcing a failure. [ 136.243722][ T3565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.252801][ T36] audit: type=1400 audit(1773739348.267:18584): avc: denied { create } for pid=3566 comm="syz.1.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 136.256868][ T3565] CPU: 0 UID: 0 PID: 3565 Comm: syz.3.1288 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 136.256896][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.256908][ T3565] Call Trace: [ 136.256915][ T3565] [ 136.256923][ T3565] __dump_stack+0x21/0x30 [ 136.256950][ T3565] dump_stack_lvl+0x140/0x1c0 [ 136.256970][ T3565] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.256991][ T3565] ? check_stack_object+0x12b/0x150 [ 136.257015][ T3565] dump_stack+0x19/0x20 [ 136.257034][ T3565] should_fail_ex+0x3d7/0x530 [ 136.257055][ T3565] should_fail+0xf/0x20 [ 136.257074][ T3565] should_fail_usercopy+0x1e/0x30 [ 136.257095][ T3565] _copy_to_user+0x24/0xa0 [ 136.257118][ T3565] simple_read_from_buffer+0xed/0x160 [ 136.257138][ T3565] proc_fail_nth_read+0x1aa/0x220 [ 136.257158][ T3565] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 136.257177][ T3565] ? bpf_lsm_file_permission+0xd/0x20 [ 136.257195][ T3565] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 136.257214][ T3565] vfs_read+0x289/0xcb0 [ 136.257236][ T3565] ? __cfi_vfs_read+0x10/0x10 [ 136.257256][ T3565] ? __kasan_check_write+0x18/0x20 [ 136.257277][ T3565] ? mutex_lock+0x97/0x1d0 [ 136.257300][ T3565] ? __cfi_mutex_lock+0x10/0x10 [ 136.257324][ T3565] ? __fget_files+0x2c5/0x340 [ 136.257348][ T3565] ksys_read+0x145/0x260 [ 136.257370][ T3565] ? __cfi_ksys_read+0x10/0x10 [ 136.257390][ T3565] ? fdget+0x188/0x1e0 [ 136.257413][ T3565] ? __kasan_check_read+0x15/0x20 [ 136.257434][ T3565] __x64_sys_read+0x7f/0x90 [ 136.257456][ T3565] x64_sys_call+0x2638/0x2ee0 [ 136.257479][ T3565] do_syscall_64+0x57/0xf0 [ 136.257499][ T3565] ? clear_bhb_loop+0x50/0xa0 [ 136.257522][ T3565] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.257550][ T3565] RIP: 0033:0x7f1d0d55cfce [ 136.257566][ T3565] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.257581][ T3565] RSP: 002b:00007f1d0e4f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.257601][ T3565] RAX: ffffffffffffffda RBX: 00007f1d0e4f16c0 RCX: 00007f1d0d55cfce [ 136.257616][ T3565] RDX: 000000000000000f RSI: 00007f1d0e4f10a0 RDI: 0000000000000003 [ 136.257629][ T3565] RBP: 00007f1d0e4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 136.257641][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.257653][ T3565] R13: 00007f1d0d816038 R14: 00007f1d0d815fa0 R15: 00007fff0a6d2948 [ 136.257669][ T3565] [ 136.627797][ T3589] input: syz1 as /devices/virtual/input/input39 [ 136.746440][ T3599] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1303'. [ 136.830789][ T426] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 136.905985][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 136.918504][ T3614] netlink: 'syz.3.1309': attribute type 11 has an invalid length. [ 136.926390][ T3614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1309'. [ 137.014590][ T426] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.022959][ T426] usb 1-1: config 179 has no interface number 0 [ 137.024177][ T45] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 137.029298][ T426] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 137.048127][ T426] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 137.058317][ T426] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.071840][ T426] usb 1-1: config 179 interface 65 has no altsetting 0 [ 137.078798][ T426] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 137.087862][ T426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.096955][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 137.097018][ T3587] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.111800][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 70, changing to 10 [ 137.129311][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58097, setting to 1024 [ 137.140421][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 137.149495][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.158087][ T9] usb 3-1: config 0 descriptor?? [ 137.163851][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 137.194679][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 137.200868][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.209327][ T45] usb 2-1: config 179 has no interface number 0 [ 137.215668][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.226708][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 137.237939][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.249057][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 137.260460][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.273787][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 137.282830][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.291661][ T3603] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 137.379316][ T3589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.387855][ T3589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.396241][ T3589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.404864][ T3589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.407018][ T9] usb 1-1: USB disconnect, device number 66 [ 137.520277][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input40 [ 137.524503][ T36] audit: type=1400 audit(1773739349.486:18585): avc: granted { setsecparam } for pid=3615 comm="syz.3.1310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 137.734103][ T3603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.742720][ T3603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.966110][ T45] usb 2-1: USB disconnect, device number 59 [ 137.972080][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 137.972116][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 137.986311][ T426] usb 3-1: USB disconnect, device number 67 [ 138.017988][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 138.581834][ T36] audit: type=1326 audit(1773739350.481:18586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 138.639837][ T3669] usb usb8: usbfs: process 3669 (syz.2.1326) did not claim interface 0 before use [ 138.995749][ T31] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 139.155951][ T31] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 139.169326][ T31] usb 2-1: New USB device found, idVendor=1199, idProduct=9829, bcdDevice=8c.aa [ 139.178409][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.186904][ T31] usb 2-1: config 0 descriptor?? [ 139.193036][ T31] hub 2-1:0.0: Invalid hub with more than one config or interface [ 139.200898][ T31] hub 2-1:0.0: probe with driver hub failed with error -22 [ 139.356206][ T36] audit: type=1326 audit(1773739351.203:18587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.380474][ T36] audit: type=1326 audit(1773739351.203:18588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.404478][ T36] audit: type=1326 audit(1773739351.203:18589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.407599][ T9] usb 2-1: USB disconnect, device number 60 [ 139.428710][ T36] audit: type=1326 audit(1773739351.203:18590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.465866][ T36] audit: type=1326 audit(1773739351.203:18591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.489490][ T36] audit: type=1326 audit(1773739351.203:18592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.513250][ T36] audit: type=1326 audit(1773739351.203:18593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.536754][ T36] audit: type=1326 audit(1773739351.203:18594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60de79c799 code=0x7fc00000 [ 139.567444][ T3685] blk-mq: reduced tag depth (128 -> 64) [ 139.581078][ T3687] input: syz0 as /devices/virtual/input/input41 [ 139.591760][ T3687] bridge0: port 3(ip6gretap0) entered blocking state [ 139.598810][ T3687] bridge0: port 3(ip6gretap0) entered disabled state [ 139.605567][ T3687] ip6gretap0: entered allmulticast mode [ 139.611600][ T3687] ip6gretap0: entered promiscuous mode [ 139.617250][ T3687] bridge0: port 3(ip6gretap0) entered blocking state [ 139.623931][ T3687] bridge0: port 3(ip6gretap0) entered forwarding state [ 140.642496][ T3721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.651175][ T3721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.732945][ T3728] SELinux: failed to load policy [ 140.739006][ T3729] SELinux: failed to load policy [ 141.127230][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 141.308389][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 141.315507][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.327453][ T31] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 141.336795][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.344994][ T31] usb 3-1: Product: syz [ 141.349294][ T31] usb 3-1: Manufacturer: syz [ 141.354557][ T31] usb 3-1: SerialNumber: syz [ 141.577896][ T31] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 141.589338][ T31] usb 3-1: USB disconnect, device number 68 [ 142.075714][ T9] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 142.214288][ T9] usb 2-1: device descriptor read/64, error -71 [ 142.353274][ T3759] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1364'. [ 142.480694][ T9] usb 2-1: device descriptor read/64, error -71 [ 142.736464][ T9] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 142.875012][ T9] usb 2-1: device descriptor read/64, error -71 [ 143.130781][ T9] usb 2-1: device descriptor read/64, error -71 [ 143.248163][ T9] usb usb2-port1: attempt power cycle [ 143.610391][ T9] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 143.632698][ T9] usb 2-1: device descriptor read/8, error -71 [ 143.771344][ T9] usb 2-1: device descriptor read/8, error -71 [ 144.026015][ T9] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 144.048314][ T9] usb 2-1: device descriptor read/8, error -71 [ 144.187084][ T9] usb 2-1: device descriptor read/8, error -71 [ 144.303284][ T9] usb usb2-port1: unable to enumerate USB device [ 145.049119][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 145.049137][ T36] audit: type=1400 audit(1773739356.542:18657): avc: granted { setsecparam } for pid=3766 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 145.108620][ T36] audit: type=1400 audit(1773739356.598:18658): avc: denied { associate } for pid=3779 comm="syz.2.1372" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.135878][ T36] audit: type=1400 audit(1773739356.617:18659): avc: denied { read write } for pid=3779 comm="syz.2.1372" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.160251][ T36] audit: type=1400 audit(1773739356.617:18660): avc: denied { open } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.183980][ T36] audit: type=1400 audit(1773739356.617:18661): avc: denied { ioctl } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.294236][ T45] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 145.400809][ T332] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 145.432770][ T45] usb 1-1: device descriptor read/64, error -71 [ 145.560650][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 145.567068][ T332] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 145.575533][ T332] usb 3-1: config 1 has no interface number 0 [ 145.581701][ T332] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.591912][ T332] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.602065][ T332] usb 3-1: config 1 interface 105 has no altsetting 0 [ 145.610537][ T332] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 145.620275][ T332] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 145.629002][ T332] usb 3-1: Product: syz [ 145.633284][ T332] usb 3-1: Manufacturer: syz [ 145.638065][ T332] usb 3-1: SerialNumber: syz [ 145.656327][ T3780] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 145.664207][ T36] audit: type=1400 audit(1773739357.114:18662): avc: denied { ioctl } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.689616][ T3780] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 145.691398][ T45] usb 1-1: device descriptor read/64, error -71 [ 145.714923][ T36] audit: type=1400 audit(1773739357.114:18663): avc: denied { ioctl } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.740999][ T36] audit: type=1400 audit(1773739357.114:18664): avc: denied { ioctl } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.767117][ T36] audit: type=1400 audit(1773739357.152:18665): avc: denied { ioctl } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.793082][ T36] audit: type=1400 audit(1773739357.152:18666): avc: denied { ioctl } for pid=3779 comm="syz.2.1372" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.976314][ T45] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 146.136310][ T45] usb 1-1: device descriptor read/64, error -71 [ 146.143464][ T3780] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 146.155068][ T3780] tipc: Enabling of bearer rejected, failed to enable media [ 146.167102][ T3780] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.175099][ T3780] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.402620][ T45] usb 1-1: device descriptor read/64, error -71 [ 146.520206][ T45] usb usb1-port1: attempt power cycle [ 146.612497][ T332] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 146.623638][ T332] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 146.634647][ T332] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 146.647272][ T332] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 92:e8:15:3c:18:bf [ 146.662953][ T332] usb 3-1: USB disconnect, device number 69 [ 146.669795][ T332] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 146.733949][ T332] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 146.743404][ T332] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 146.752882][ T332] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 146.882195][ T45] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 146.919968][ T45] usb 1-1: device descriptor read/8, error -71 [ 147.066069][ T45] usb 1-1: device descriptor read/8, error -71 [ 147.320202][ T45] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 147.331513][ T3848] fuse: Unknown parameter 'D' [ 147.375583][ T45] usb 1-1: device descriptor read/8, error -71 [ 147.534278][ T45] usb 1-1: device descriptor read/8, error -71 [ 147.580632][ T3867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3867 comm=syz.3.1400 [ 147.638853][ T427] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 147.649580][ T45] usb usb1-port1: unable to enumerate USB device [ 147.800814][ T427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.811824][ T427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.821572][ T427] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.834955][ T427] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.844031][ T427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.853237][ T427] usb 2-1: config 0 descriptor?? [ 148.296118][ T3871] can0: slcan on ttynull. [ 148.303143][ T427] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 148.331828][ T427] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 148.359560][ T427] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 148.367951][ T427] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 148.379467][ T427] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 148.388206][ T427] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 148.417901][ T427] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 13/15 [ 148.429595][ T427] plantronics 0003:047F:FFFF.000A: parse failed [ 148.435886][ T427] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 148.811923][ T3853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.836830][ T3853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.870267][ T3853] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 148.897760][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 148.928372][ T3853] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.935472][ T3853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.970859][ T426] usb 2-1: USB disconnect, device number 65 [ 149.727660][ T45] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 149.745538][ T3924] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3810004200 (60960067200 ns) > initial count (2678777824 ns). Using initial count to start timer. [ 149.763770][ T3924] netlink: 'syz.1.1413': attribute type 25 has an invalid length. [ 149.885001][ T45] usb 1-1: device descriptor read/64, error -71 [ 150.080068][ T426] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 150.143310][ T45] usb 1-1: device descriptor read/64, error -71 [ 150.164631][ T427] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 150.241886][ T426] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.251389][ T426] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.261945][ T426] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.271028][ T426] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 150.293595][ T426] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 150.302724][ T426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.327103][ T427] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 150.336249][ T427] usb 2-1: config 0 has no interface number 0 [ 150.342347][ T427] usb 2-1: config 0 interface 123 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.358267][ T427] usb 2-1: config 0 interface 123 has no altsetting 0 [ 150.368571][ T427] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 150.377630][ T427] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 150.387434][ T427] usb 2-1: Product: syz [ 150.392612][ T427] usb 2-1: Manufacturer: syz [ 150.398931][ T427] usb 2-1: config 0 descriptor?? [ 150.403933][ T45] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 150.413798][ T36] kauditd_printk_skb: 1000 callbacks suppressed [ 150.413814][ T36] audit: type=1400 audit(1773739361.581:19667): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.452392][ T36] audit: type=1400 audit(1773739361.609:19668): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.478332][ T36] audit: type=1400 audit(1773739361.609:19669): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.504123][ T36] audit: type=1400 audit(1773739361.609:19670): avc: denied { ioctl } for pid=3927 comm="syz.1.1415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.540055][ T36] audit: type=1400 audit(1773739361.609:19671): avc: denied { ioctl } for pid=3927 comm="syz.1.1415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.590913][ T45] usb 1-1: device descriptor read/64, error -71 [ 150.603879][ T36] audit: type=1400 audit(1773739361.609:19672): avc: denied { ioctl } for pid=3927 comm="syz.1.1415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.630954][ T36] audit: type=1400 audit(1773739361.609:19673): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.656798][ T36] audit: type=1400 audit(1773739361.609:19674): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.695287][ T3928] overlayfs: missing 'lowerdir' [ 150.701370][ T36] audit: type=1400 audit(1773739361.609:19675): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.731014][ T426] usb 3-1: Can't get UAC3 power state for id 10 [ 150.749885][ T36] audit: type=1400 audit(1773739361.609:19676): avc: denied { ioctl } for pid=3908 comm="syz.0.1409" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.755851][ T426] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 150.809897][ T426] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 150.859074][ T426] usb 3-1: USB disconnect, device number 70 [ 150.890284][ T45] usb 1-1: device descriptor read/64, error -71 [ 150.907900][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.017783][ T45] usb usb1-port1: attempt power cycle [ 151.379575][ T45] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 151.402836][ T45] usb 1-1: device descriptor read/8, error -71 [ 151.541481][ T45] usb 1-1: device descriptor read/8, error -71 [ 151.679778][ T3949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 151.795187][ T45] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 151.818612][ T45] usb 1-1: device descriptor read/8, error -71 [ 151.901790][ T332] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 151.957104][ T45] usb 1-1: device descriptor read/8, error -71 [ 152.061635][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 152.068872][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.079093][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.088049][ T45] usb usb1-port1: unable to enumerate USB device [ 152.097616][ T332] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.106755][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.114748][ T332] usb 3-1: Product: syz [ 152.118955][ T332] usb 3-1: Manufacturer: syz [ 152.123559][ T332] usb 3-1: SerialNumber: syz [ 152.350480][ T332] usb 3-1: 0:2 : does not exist [ 152.360527][ T332] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 152.381444][ T332] usb 3-1: USB disconnect, device number 71 [ 152.419667][ T436] udevd[436]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.120209][ T3968] cgroup: No subsys list or none specified [ 153.175234][ T3971] netlink: 'syz.2.1430': attribute type 16 has an invalid length. [ 153.210159][ T427] ftdi_sio 2-1:0.123: FTDI USB Serial Device converter detected [ 153.234812][ T427] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 153.258157][ T427] usb 2-1: USB disconnect, device number 66 [ 153.271447][ T427] ftdi_sio 2-1:0.123: device disconnected [ 154.011959][ T426] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 154.206073][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.235734][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.245563][ T426] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.279635][ T426] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.288716][ T426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.311931][ T426] usb 1-1: config 0 descriptor?? [ 154.773686][ T426] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 154.781715][ T426] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 154.789215][ T426] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 154.796790][ T426] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 154.819837][ T426] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 154.834835][ T426] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 154.849795][ T426] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 13/15 [ 154.859127][ T426] plantronics 0003:047F:FFFF.000B: parse failed [ 154.867586][ T426] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 155.001305][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.017516][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.031519][ T3987] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 155.039422][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 155.048343][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.055384][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.066685][ T427] usb 1-1: USB disconnect, device number 75 [ 155.205540][ T426] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 155.367384][ T426] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.380781][ T426] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.389927][ T426] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 155.398116][ T426] usb 3-1: Product: syz [ 155.402314][ T426] usb 3-1: SerialNumber: syz [ 155.709253][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 155.722484][ T4020] tipc: Enabling of bearer rejected, failed to enable media [ 155.847537][ T36] kauditd_printk_skb: 384 callbacks suppressed [ 155.847554][ T36] audit: type=1400 audit(1773739366.685:20061): avc: denied { ioctl } for pid=4009 comm="syz.2.1444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.878780][ T36] audit: type=1400 audit(1773739366.685:20062): avc: denied { ioctl } for pid=4009 comm="syz.2.1444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.904015][ T36] audit: type=1400 audit(1773739366.685:20063): avc: denied { ioctl } for pid=4009 comm="syz.2.1444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.929482][ T36] audit: type=1400 audit(1773739366.685:20064): avc: denied { ioctl } for pid=4009 comm="syz.2.1444" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.954871][ T36] audit: type=1400 audit(1773739366.713:20065): avc: denied { read write } for pid=3073 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.979487][ T36] audit: type=1400 audit(1773739366.713:20066): avc: denied { read write open } for pid=3073 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.004962][ T36] audit: type=1400 audit(1773739366.713:20067): avc: denied { ioctl } for pid=3073 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.031178][ T36] audit: type=1400 audit(1773739366.732:20068): avc: denied { read } for pid=4021 comm="syz.1.1448" dev="nsfs" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.055890][ T36] audit: type=1400 audit(1773739366.732:20069): avc: denied { read open } for pid=4021 comm="syz.1.1448" path="net:[4026532640]" dev="nsfs" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.080281][ T36] audit: type=1400 audit(1773739366.732:20070): avc: denied { create } for pid=4021 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.126054][ T426] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 156.132103][ T426] cdc_ncm 3-1:1.0: bind() failure [ 156.142058][ T426] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 156.148949][ T426] cdc_ncm 3-1:1.1: bind() failure [ 156.155337][ T426] usb 3-1: USB disconnect, device number 72 [ 156.548355][ T427] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 156.740189][ T427] usb 2-1: Using ep0 maxpacket: 8 [ 156.749349][ T427] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 156.758775][ T427] usb 2-1: config 179 has no interface number 0 [ 156.765716][ T427] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 156.777380][ T427] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 156.789421][ T427] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.799477][ T427] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 156.812786][ T427] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 156.821871][ T427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.832291][ T4032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.985304][ T72] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 157.054954][ T426] usb 2-1: USB disconnect, device number 67 [ 157.123850][ T72] usb 1-1: device descriptor read/64, error -71 [ 157.228799][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 157.379694][ T72] usb 1-1: device descriptor read/64, error -71 [ 157.646061][ T72] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 157.809919][ T72] usb 1-1: device descriptor read/64, error -71 [ 157.880032][ T4069] fuse: Bad value for 'fd' [ 157.888312][ T4070] overlayfs: workdir and upperdir must be separate subtrees [ 158.050004][ T4078] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1470'. [ 158.059023][ T4078] z00X: renamed from gretap0 (while UP) [ 158.065717][ T4078] z00X: entered allmulticast mode [ 158.072525][ T72] usb 1-1: device descriptor read/64, error -71 [ 158.190000][ T72] usb usb1-port1: attempt power cycle [ 158.210905][ T426] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 158.370757][ T426] usb 3-1: Using ep0 maxpacket: 32 [ 158.377986][ T426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.388710][ T426] usb 3-1: config 0 has no interfaces? [ 158.396710][ T426] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.402733][ T427] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 158.406242][ T426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.421409][ T426] usb 3-1: Product: syz [ 158.425609][ T426] usb 3-1: Manufacturer: syz [ 158.430214][ T426] usb 3-1: SerialNumber: syz [ 158.436445][ T426] usb 3-1: config 0 descriptor?? [ 158.551957][ T72] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 158.575084][ T72] usb 1-1: device descriptor read/8, error -71 [ 158.586633][ T427] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.595704][ T427] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 158.606608][ T427] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 158.621601][ T427] usb 2-1: string descriptor 0 read error: -22 [ 158.627832][ T427] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 158.636849][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.714181][ T72] usb 1-1: device descriptor read/8, error -71 [ 158.865192][ T427] usb 2-1: Can't get UAC3 power state for id 10 [ 158.877266][ T427] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 158.897357][ T427] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 158.924173][ T427] usb 2-1: USB disconnect, device number 68 [ 158.962325][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.967576][ T72] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 159.023552][ T72] usb 1-1: device descriptor read/8, error -71 [ 159.038162][ T4087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.046849][ T4087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.161410][ T72] usb 1-1: device descriptor read/8, error -71 [ 159.276736][ T72] usb usb1-port1: unable to enumerate USB device [ 159.692266][ T426] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 159.854099][ T426] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.865358][ T426] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.875109][ T426] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.888051][ T426] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.897095][ T426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.906367][ T426] usb 2-1: config 0 descriptor?? [ 160.010736][ T4097] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 160.345839][ T426] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 160.353407][ T426] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 160.360806][ T426] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 160.368260][ T426] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 160.375814][ T426] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 160.383238][ T426] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 160.390635][ T426] plantronics 0003:047F:FFFF.000C: item fetching failed at offset 13/15 [ 160.399126][ T426] plantronics 0003:047F:FFFF.000C: parse failed [ 160.405468][ T426] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 160.561820][ T4089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.570413][ T4089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.581245][ T4089] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 160.589014][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 160.597865][ T4089] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.604968][ T4089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.613084][ T426] usb 2-1: USB disconnect, device number 69 [ 161.026999][ T4133] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1492'. [ 161.036143][ T4133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1492'. [ 161.144689][ T426] usb 3-1: USB disconnect, device number 73 [ 161.195063][ T36] kauditd_printk_skb: 607 callbacks suppressed [ 161.195081][ T36] audit: type=1400 audit(1773739371.696:20678): avc: denied { read } for pid=4136 comm="syz.1.1493" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.225117][ T36] audit: type=1400 audit(1773739371.705:20679): avc: denied { read open } for pid=4136 comm="syz.1.1493" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.256402][ T36] audit: type=1400 audit(1773739371.705:20680): avc: denied { create } for pid=4136 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.292519][ T36] audit: type=1400 audit(1773739371.705:20681): avc: denied { create } for pid=4136 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.327196][ T36] audit: type=1400 audit(1773739371.705:20682): avc: denied { create } for pid=4136 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.354034][ T36] audit: type=1400 audit(1773739371.705:20683): avc: denied { getopt } for pid=4136 comm="syz.1.1493" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.375214][ T36] audit: type=1400 audit(1773739371.724:20684): avc: denied { read write } for pid=3073 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.405722][ T36] audit: type=1400 audit(1773739371.724:20685): avc: denied { read write open } for pid=3073 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.431482][ T36] audit: type=1400 audit(1773739371.724:20686): avc: denied { ioctl } for pid=3073 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.457131][ T36] audit: type=1400 audit(1773739371.724:20687): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.567971][ T72] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 161.727855][ T72] usb 2-1: Using ep0 maxpacket: 8 [ 161.741903][ T72] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 161.767989][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 161.768558][ T72] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 161.818726][ T72] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 161.837748][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.921944][ T4168] netlink: 'syz.2.1505': attribute type 4 has an invalid length. [ 161.972111][ T4170] FAULT_INJECTION: forcing a failure. [ 161.972111][ T4170] name failslab, interval 1, probability 0, space 0, times 0 [ 161.996186][ T4170] CPU: 1 UID: 0 PID: 4170 Comm: syz.0.1506 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 161.996218][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.996231][ T4170] Call Trace: [ 161.996238][ T4170] [ 161.996248][ T4170] __dump_stack+0x21/0x30 [ 161.996275][ T4170] dump_stack_lvl+0x140/0x1c0 [ 161.996293][ T4170] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.996314][ T4170] ? avc_alloc_node+0x8e/0x530 [ 161.996338][ T4170] ? release_sock+0x171/0x1f0 [ 161.996354][ T4170] dump_stack+0x19/0x20 [ 161.996374][ T4170] should_fail_ex+0x3d7/0x530 [ 161.996395][ T4170] should_failslab+0xac/0x100 [ 161.996412][ T4170] kmem_cache_alloc_node_noprof+0x45/0x420 [ 161.996436][ T4170] ? netlink_data_ready+0x20/0x20 [ 161.996462][ T4170] ? __alloc_skb+0x108/0x370 [ 161.996481][ T4170] __alloc_skb+0x108/0x370 [ 161.996499][ T4170] netlink_alloc_large_skb+0xf7/0x1b0 [ 161.996518][ T4170] netlink_sendmsg+0x594/0xb10 [ 161.996538][ T4170] ? __cfi_netlink_sendmsg+0x10/0x10 [ 161.996559][ T4170] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 161.996580][ T4170] ? security_socket_sendmsg+0x3d/0x100 [ 161.996601][ T4170] sock_write_iter+0x4dc/0x530 [ 161.996628][ T4170] ? __cfi_sock_write_iter+0x10/0x10 [ 161.996653][ T4170] ? selinux_file_permission+0x8a4/0xb60 [ 161.996674][ T4170] do_iter_readv_writev+0x62f/0x820 [ 161.996700][ T4170] ? vfs_iter_read+0x5f0/0x5f0 [ 161.996724][ T4170] ? bpf_lsm_file_permission+0xd/0x20 [ 161.996745][ T4170] vfs_writev+0x4a8/0xe50 [ 161.996764][ T4170] ? do_writev+0x2e0/0x2e0 [ 161.996780][ T4170] ? vfs_write+0x9a4/0xf90 [ 161.996807][ T4170] do_writev+0x151/0x2e0 [ 161.996831][ T4170] ? vfs_readv+0xa10/0xa10 [ 161.996849][ T4170] ? __kasan_check_read+0x15/0x20 [ 161.996872][ T4170] __x64_sys_writev+0x81/0x90 [ 161.996896][ T4170] x64_sys_call+0x1fbb/0x2ee0 [ 161.996920][ T4170] do_syscall_64+0x57/0xf0 [ 161.996941][ T4170] ? clear_bhb_loop+0x50/0xa0 [ 161.996964][ T4170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.996986][ T4170] RIP: 0033:0x7f60de79c799 [ 161.997004][ T4170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.997020][ T4170] RSP: 002b:00007f60df5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 161.997042][ T4170] RAX: ffffffffffffffda RBX: 00007f60dea15fa0 RCX: 00007f60de79c799 [ 161.997056][ T4170] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 161.997067][ T4170] RBP: 00007f60df5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 161.997078][ T4170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.997089][ T4170] R13: 00007f60dea16038 R14: 00007f60dea15fa0 R15: 00007ffdc09d09e8 [ 161.997103][ T4170] [ 162.286655][ T4141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.295264][ T4141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.304244][ T427] usb 2-1: USB disconnect, device number 70 [ 162.557642][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 162.623039][ T72] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 162.772328][ T426] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 162.793573][ T72] usb 3-1: Using ep0 maxpacket: 32 [ 162.800624][ T72] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.810914][ T72] usb 3-1: config 0 has no interfaces? [ 162.819505][ T72] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.831413][ T72] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.839424][ T72] usb 3-1: Product: syz [ 162.843733][ T72] usb 3-1: Manufacturer: syz [ 162.848767][ T72] usb 3-1: SerialNumber: syz [ 162.854889][ T72] usb 3-1: config 0 descriptor?? [ 162.933901][ T426] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.943750][ T426] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43040, setting to 64 [ 162.956385][ T426] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.965487][ T426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.973638][ T426] usb 1-1: SerialNumber: syz [ 162.985689][ T426] cdc_acm 1-1:1.0: skipping garbage [ 163.150932][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.175290][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.187917][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.204065][ T31] usb 1-1: USB disconnect, device number 80 [ 163.218013][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.416052][ T13] bridge_slave_1: left allmulticast mode [ 163.421775][ T13] bridge_slave_1: left promiscuous mode [ 163.428237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.437519][ T13] bridge_slave_0: left allmulticast mode [ 163.446182][ T13] bridge_slave_0: left promiscuous mode [ 163.451903][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.655412][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.662526][ T4224] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.669657][ T4224] bridge_slave_0: entered allmulticast mode [ 163.676051][ T4224] bridge_slave_0: entered promiscuous mode [ 163.683333][ T13] veth1_macvtap: left promiscuous mode [ 163.689251][ T13] veth0_vlan: left promiscuous mode [ 163.721613][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.728848][ T4224] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.736806][ T4224] bridge_slave_1: entered allmulticast mode [ 163.743470][ T4224] bridge_slave_1: entered promiscuous mode [ 163.800240][ T4229] bpf: Bad value for 'gid' [ 163.871952][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.879003][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.886300][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.893355][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.907229][ T4236] kvm: pic: non byte write [ 163.913897][ T4236] netlink: 'syz.0.1523': attribute type 4 has an invalid length. [ 163.965442][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.973533][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.992129][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.999371][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.015827][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.022924][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.101351][ T4224] veth0_vlan: entered promiscuous mode [ 164.129290][ T4224] veth1_macvtap: entered promiscuous mode [ 164.306744][ T4245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 164.530722][ T332] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 164.701225][ T332] usb 2-1: Using ep0 maxpacket: 8 [ 164.708189][ T332] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 164.718621][ T332] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 164.727859][ T332] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 164.737777][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.977318][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.985916][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.997905][ T332] usb 2-1: USB disconnect, device number 71 [ 165.556026][ T4267] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 165.590295][ T426] usb 3-1: USB disconnect, device number 74 [ 165.649847][ T4273] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 165.747859][ T4273] ------------[ cut here ]------------ [ 165.753395][ T4273] WARNING: CPU: 0 PID: 4273 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 165.762857][ T4273] Modules linked in: [ 165.766775][ T4273] CPU: 0 UID: 0 PID: 4273 Comm: syz.0.1535 Not tainted syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 165.778372][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.788734][ T4273] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 165.794388][ T4273] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 79 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 61 59 03 cc e8 f6 53 3f ff <0f> 0b e9 3e ff ff ff e8 ea 53 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 165.814054][ T4273] RSP: 0018:ffffc9000fb17b48 EFLAGS: 00010287 [ 165.820133][ T4273] RAX: ffffffff82484f5a RBX: 0000000000000000 RCX: 0000000000080000 [ 165.828176][ T4273] RDX: ffffc90001ac2000 RSI: 000000000000f99b RDI: 000000000000f99c [ 165.836182][ T4273] RBP: ffffc9000fb17b70 R08: ffff888123d140bf R09: 1ffff110247a2817 [ 165.844204][ T4273] R10: dffffc0000000000 R11: ffffed10247a2818 R12: 0000000000000000 [ 165.852210][ T4273] R13: dffffc0000000000 R14: ffff888123d14020 R15: ffff8881322c4550 [ 165.860188][ T4273] FS: 00007f60df5f06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 165.869172][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.875808][ T4273] CR2: 0000000000000000 CR3: 000000011ae4c000 CR4: 00000000003526b0 [ 165.884166][ T4273] Call Trace: [ 165.887450][ T4273] [ 165.890414][ T4273] ovl_do_remove+0x81b/0xda0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.895055][ T4273] ? ovl_set_redirect+0x780/0x780 [ 165.900084][ T4273] ? down_write+0xee/0x2b0 [ 165.904572][ T4273] ? __cfi_down_write+0x10/0x10 [ 165.909488][ T4273] ovl_rmdir+0x1e/0x30 [ 165.913566][ T4273] vfs_rmdir+0x3e3/0x560 [ 165.918113][ T4273] incfs_kill_sb+0x109/0x230 [ 165.922719][ T4273] deactivate_locked_super+0xd5/0x2a0 [ 165.928132][ T4273] deactivate_super+0xb8/0xe0 [ 165.932817][ T4273] cleanup_mnt+0x406/0x4a0 [ 165.937255][ T4273] __cleanup_mnt+0x1d/0x40 [ 165.941886][ T4273] task_work_run+0x1e8/0x260 [ 165.946490][ T4273] ? __cfi_task_work_run+0x10/0x10 [ 165.951635][ T4273] ? __x64_sys_umount+0x12e/0x180 [ 165.956682][ T4273] ? __cfi___x64_sys_umount+0x10/0x10 [ 165.962097][ T4273] resume_user_mode_work+0x35/0x50 [ 165.967226][ T4273] syscall_exit_to_user_mode+0x63/0xb0 [ 165.972749][ T4273] do_syscall_64+0x63/0xf0 [ 165.977303][ T4273] ? clear_bhb_loop+0x50/0xa0 [ 165.982036][ T4273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.988030][ T4273] RIP: 0033:0x7f60de79c799 [ 165.992550][ T4273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.012306][ T4273] RSP: 002b:00007f60df5f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 166.020741][ T4273] RAX: 0000000000000000 RBX: 00007f60dea15fa0 RCX: 00007f60de79c799 [ 166.028759][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 166.036816][ T4273] RBP: 00007f60de832c99 R08: 0000000000000000 R09: 0000000000000000 [ 166.044920][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.052998][ T4273] R13: 00007f60dea16038 R14: 00007f60dea15fa0 R15: 00007ffdc09d09e8 [ 166.061038][ T4273] [ 166.064061][ T4273] ---[ end trace 0000000000000000 ]--- [ 166.080690][ T4273] ------------[ cut here ]------------ [ 166.086174][ T4273] WARNING: CPU: 0 PID: 4273 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 166.095718][ T4273] Modules linked in: [ 166.099737][ T4273] CPU: 0 UID: 0 PID: 4273 Comm: syz.0.1535 Tainted: G W syzkaller #0 e9db8685c400c70f0098c2bc673af807e74041bb [ 166.112812][ T4273] Tainted: [W]=WARN [ 166.116612][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.126702][ T4273] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 166.132408][ T4273] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 79 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 61 59 03 cc e8 f6 53 3f ff <0f> 0b e9 3e ff ff ff e8 ea 53 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 166.152079][ T4273] RSP: 0018:ffffc9000fb17b48 EFLAGS: 00010287 [ 166.158180][ T4273] RAX: ffffffff82484f5a RBX: 0000000000000000 RCX: 0000000000080000 [ 166.166244][ T4273] RDX: ffffc90001ac2000 RSI: 000000000007e38f RDI: 000000000007e390 [ 166.174259][ T4273] RBP: ffffc9000fb17b70 R08: ffff888123d140bf R09: 1ffff110247a2817 [ 166.182505][ T4273] R10: dffffc0000000000 R11: ffffed10247a2818 R12: 0000000000000000 [ 166.190538][ T4273] R13: dffffc0000000000 R14: ffff888123d14020 R15: ffff8881322c4550 [ 166.198614][ T4273] FS: 00007f60df5f06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 166.207603][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.214200][ T4273] CR2: 0000000000000000 CR3: 000000011ae4c000 CR4: 00000000003526b0 [ 166.222229][ T4273] Call Trace: [ 166.225528][ T4273] [ 166.228463][ T4273] ovl_do_remove+0x81b/0xda0 [ 166.233068][ T4273] ? ovl_set_redirect+0x780/0x780 [ 166.238143][ T4273] ? down_write+0xee/0x2b0 [ 166.242571][ T4273] ? __cfi_down_write+0x10/0x10 [ 166.247467][ T4273] ovl_rmdir+0x1e/0x30 [ 166.251637][ T4273] vfs_rmdir+0x3e3/0x560 [ 166.255882][ T4273] incfs_kill_sb+0x1a0/0x230 [ 166.260526][ T4273] deactivate_locked_super+0xd5/0x2a0 [ 166.265912][ T4273] deactivate_super+0xb8/0xe0 [ 166.270627][ T4273] cleanup_mnt+0x406/0x4a0 [ 166.275065][ T4273] __cleanup_mnt+0x1d/0x40 [ 166.279540][ T4273] task_work_run+0x1e8/0x260 [ 166.284148][ T4273] ? __cfi_task_work_run+0x10/0x10 [ 166.289300][ T4273] ? __x64_sys_umount+0x12e/0x180 [ 166.294326][ T4273] ? __cfi___x64_sys_umount+0x10/0x10 [ 166.299743][ T4273] resume_user_mode_work+0x35/0x50 [ 166.304901][ T4273] syscall_exit_to_user_mode+0x63/0xb0 [ 166.310350][ T4273] do_syscall_64+0x63/0xf0 [ 166.314795][ T4273] ? clear_bhb_loop+0x50/0xa0 [ 166.319558][ T4273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.325486][ T4273] RIP: 0033:0x7f60de79c799 [ 166.329898][ T4273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.349555][ T4273] RSP: 002b:00007f60df5f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 166.358028][ T4273] RAX: 0000000000000000 RBX: 00007f60dea15fa0 RCX: 00007f60de79c799 [ 166.366113][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 166.374089][ T4273] RBP: 00007f60de832c99 R08: 0000000000000000 R09: 0000000000000000 [ 166.382078][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.390091][ T4273] R13: 00007f60dea16038 R14: 00007f60dea15fa0 R15: 00007ffdc09d09e8 [ 166.398090][ T4273] [ 166.401113][ T4273] ---[ end trace 0000000000000000 ]--- [ 166.546296][ T36] kauditd_printk_skb: 710 callbacks suppressed [ 166.546314][ T36] audit: type=1400 audit(1773739376.725:21398): avc: denied { search } for pid=4283 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.574840][ T36] audit: type=1400 audit(1773739376.725:21399): avc: denied { search } for pid=4283 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.597480][ T4284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.603349][ T36] audit: type=1400 audit(1773739376.725:21400): avc: denied { search } for pid=4283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.604138][ T4284] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 166.628729][ T36] audit: type=1400 audit(1773739376.725:21401): avc: denied { search } for pid=4283 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.635848][ T4284] audit: backlog limit exceeded [ 166.664115][ T36] audit: type=1400 audit(1773739376.754:21402): avc: denied { search } for pid=4284 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.674179][ T4284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.687486][ T36] audit: type=1400 audit(1773739376.754:21403): avc: denied { search } for pid=4284 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.760903][ T330] bridge_slave_1: left allmulticast mode [ 166.766583][ T330] bridge_slave_1: left promiscuous mode [ 166.771114][ T3879] can0 (unregistered): slcan off ttynull. [ 166.781731][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.789393][ T330] bridge_slave_0: left allmulticast mode [ 166.795079][ T330] bridge_slave_0: left promiscuous mode [ 166.800756][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.051903][ T330] veth1_macvtap: left promiscuous mode [ 167.057488][ T330] veth0_vlan: left promiscuous mode [ 167.333690][ T330] ip6gretap0: left allmulticast mode [ 167.339021][ T330] ip6gretap0: left promiscuous mode [ 167.354983][ T330] bridge0: port 3(ip6gretap0) entered disabled state [ 167.366609][ T330] bridge_slave_1: left allmulticast mode [ 167.372269][ T330] bridge_slave_1: left promiscuous mode [ 167.381507][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.389750][ T330] bridge_slave_0: left allmulticast mode [ 167.395396][ T330] bridge_slave_0: left promiscuous mode [ 167.402140][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.410858][ T330] bridge_slave_1: left allmulticast mode [ 167.416507][ T330] bridge_slave_1: left promiscuous mode [ 167.422629][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.431463][ T330] bridge_slave_0: left allmulticast mode [ 167.437113][ T330] bridge_slave_0: left promiscuous mode [ 167.443758][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.452628][ T330] bridge_slave_1: left allmulticast mode [ 167.458279][ T330] bridge_slave_1: left promiscuous mode [ 167.464962][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.473249][ T330] bridge_slave_0: left allmulticast mode [ 167.478894][ T330] bridge_slave_0: left promiscuous mode [ 167.485121][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.494533][ T330] tipc: Resetting bearer [ 167.499954][ T330] tipc: Resetting bearer [ 167.543472][ T330] tipc: Disabling bearer [ 167.751398][ T330] tipc: Disabling bearer [ 167.976076][ T330] tipc: Left network mode [ 167.980706][ T330] tipc: Left network mode [ 167.987962][ T330] veth1_macvtap: left promiscuous mode [ 167.993452][ T330] veth0_vlan: left promiscuous mode [ 167.999945][ T330] veth1_macvtap: left promiscuous mode [ 168.005482][ T330] veth0_vlan: left promiscuous mode [ 168.010833][ T330] veth1_macvtap: left promiscuous mode [ 168.016365][ T330] veth0_vlan: left promiscuous mode