last executing test programs: 10.667673945s ago: executing program 3 (id=198): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000040)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "ca933ad163a89f0240b8959e6224d258e7c5291f81b2fa81a56d50c2e25c5cdedeb3dafbfaa09e8d65fb6882283f7077ae25b7d8b53f9df03f7b05239c5a9afc"}}}}}, 0x5e) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0x5, 0x3, "d31002"}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x2b, {0x2b, 0x2, "45494777b156b709adec3fea8db00ed7182a7083a0925798bd50ba279bf64943eb52507b06ce30f3df"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000400)={0x0, 0xf, 0x102, {0x5, 0xf, 0x102, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0xcb, 0x8, 0xae, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x0, 0xf4}, @generic={0xda, 0x10, 0x0, "77daaf9cc886b8ce2ef5d5668aa3212990fdc6a04aa90a752e0d866e7a46883c48a12a88cee9a2f0ac7541a62a5544865a7e6164f1fcfabfe0a1298cf7b132cad97f820ebd15c11af55c27f8a17e6ca9cfec5eb2c49cb97388fd821ca20458482b4faa2f59fa5b792dde6d25e3874ea6d58133104291e035dc69a3b64fbaa47111c1c31b45546efd974ad6e749ebf82c62c18c4bb91f9946ed49e48641db1cee3292090d06a5ffb6fa8919ecc87b04ce3ef5b52525c67f0d0fef46b2d4d275b8e9b38d653b2ab8ddb98ff716da85ae682c5c934ff312ae"}, @ext_cap={0x7, 0x10, 0x2, 0x8d5900ad96f16ae9, 0x4, 0x5, 0x6e3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x3, 0x5}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0xe, 0xd6, "dd82d43d", "c9613d27"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0x4, 0xf, 0x1000, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20172e00000089381177421cec44761cff89ae1e7cd9e57014f018160d9906174df1867a0aa35e00"/52], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf000]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0xb, 0x2, "89e3"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "f57a"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x37}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xe}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) 7.638075128s ago: executing program 3 (id=208): bind$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000180)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000380)="2bd9652066ad96c0b822444f831ba410fc9b4bdfb2e86301b5b57de187782ce8b378b3bbae37ab63ae26c5d6b2cb72e52d3f78bacbd23dbbf6aca61287ed1cbe9f6cdc6b238841da6f009f508db069bd3224094981f7a93e3c9d4208bbf6ac", 0x5f}, {&(0x7f0000000440)="ea135e7405c84f54f2167466795f9fe5b0a3373feff6de061cc3d458e0fc80c215bbf292acf5a19ae96576afc1f81f29bc24299a411c12219f5a86735e48d21464c9a5f56513156a1f726dd6bf347961c02b313d9eac307d9206c3248af5201335a408b3741c3108b663b8590aab6ae0a331739df453bc8deae0b8", 0x7b}, {&(0x7f00000004c0)="90efa89920537f7ba2845e7b2d10753c7c52c59b0583a273f2b5647d957ceaf0255a6a39e247cfdadc8dc3e03c18236a975731a2b15dcaa3cf090df4ee60ebcc12e65444a343d688d590603846acee57008a2bb0d55621288b98ea6ffea6ab4d0a35c9601933048cf0c8d30574a1d9ac847c2e0f107c24d7af3d2db7e9f118b2ce61895064a9de850d0709d3f5388342690237bdceb5f78b46715c91018a006bfea2e9d2ea47ca0fb0c6d835281bd41d33b61f74446bf2fada213ba9447b25fda424058ede245e0c4daed54f1ec77db02d96a8b8f9a9246ab79434d924231e27d836e4aeadb7582bc83728da93720f86eac1eb35", 0xf4}, {&(0x7f0000000dc0)="b10c893043f04c813ae43100ffe440f0ef70", 0x12}, {&(0x7f0000000e80)="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", 0x347}], 0x5}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000003800)=[{&(0x7f00000000c0)="5768f60a50352a6a0f2fd0804132b9698520106d94239facd30abd340f59c301413f4a55926c99ff589411826778e3543bdbbff026d310b79f84488ea06b7d87e2c6e84b73d483d6ad40e2417a4cc1e3ba18f112b79f834ea67acb03f17020c51d480c6db5e23893335dd2c607efa472553759304aa076645f9488df8768328259d3b7351c9b037cefdceecb6355a02e7d8bcf8ef993af", 0x97}], 0x1) 7.621950588s ago: executing program 3 (id=209): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.55932343s ago: executing program 2 (id=213): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x2, "2ae8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.551106971s ago: executing program 3 (id=218): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x3}, {0x8}, 0x68, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x166, 0x0, &(0x7f0000000240)={0x2, 0x5c, {0x0, 0xc, 0x44, "738ae2604cdef6aa8a308dee09772fe5ca82f694fc8b23084490223070c494b36920ca6b227d171fa129b60e3ab255d49a638fc08101cbfe13761d5acb38ac3d37822431", 0xb, "70e95aa8a4c26f1fabf7ed"}, 0xce, "47befefa8bc478b79b7ed115d08bd1af59b979d176fa518526d9aa8e10f0d4dc4fdd5b1333df63003b1e8b5d7b9f32c34217e1bb14d303dc5819b1ee028db1cc029da4c3c5daf0e7465a68eacb6c32cea568414761b367617ee4059c46596007abd55a1c07a27544b4ee587c8891237fbe6f510e05c5ac80144b89545aab3b964939a7eeb372e71dbd97d5e73f6c27cbad53f73a47f0bdecaf66ceae936053b98f4049ea516175688cf5ae6089f8a9859d2235bf2dce25a0a8e0f703101a26a915b2a01c1937199159d3754a2dd3"}, 0x136}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @broadcast}, @multicast1, 0x2, 0x20}}) r2 = accept$inet(r1, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000500)={'\x00', 0xe9}) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000540)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000580)={'macvlan1\x00', {0x2, 0x0, @broadcast}}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x880) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000006c0)={0x8, 0x3ff, 0x5, 0x20000000, 0x3}) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000740), &(0x7f00000007c0)=0x68) bind$bt_rfcomm(r0, &(0x7f0000000800)={0x1f, @none, 0x7}, 0xa) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r4 = accept(r1, &(0x7f0000000880)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000900)=0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4480010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x13, 0x7, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}}, 0x20000040) r6 = socket$inet6(0xa, 0x4, 0x2) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000a80)={0x5, 0x6, 0x59}) r7 = dup(r6) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r7, 0x8010af78, &(0x7f0000000ac0)) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000b00)={'veth0_to_batadv\x00', @local}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000b40)={0x2, 0x6, 0x3, 0x7f, 0x4, 0x9, 0x4}, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000b80)) recvfrom$inet6(r6, &(0x7f0000000bc0)=""/96, 0x60, 0x40, &(0x7f0000000c40)={0xa, 0x4e24, 0x1, @mcast2, 0x3}, 0x1c) keyctl$invalidate(0x15, 0x0) r9 = dup2(r4, r3) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f0000000c80)={0x1, 0x200, 0x6, 0x1000, 0x3, 0x1c}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r10, 0x40786e88, &(0x7f0000001000)={{&(0x7f0000000cc0)=[{0x6, 0x66, 0x8, {0x81, 0x6}, 0xfffffffffffff63a, 0x0, 0x3a0d}, {0x80000000, 0x8, 0xcf, {0x8, 0xb6e}, 0x3, 0x0, 0x7}, {0x6, 0x10, 0x2, {0x3, 0x9}, 0xffffffffffffff0c, 0x3, 0x7ff}, {0x3, 0x3, 0x8e4e, {0xfffffffc00000000, 0x4}, 0x9, 0x1, 0x3}, {0x1fe3, 0xffffffffffffffff, 0x7fffffff, {0x0, 0x2}, 0x4, 0x8, 0x7}, {0xffffffff, 0x100, 0xba89, {0x7, 0x1}, 0x7, 0xffffffffffff0001, 0x7ff}, {0x17, 0x4, 0x9fb, {0xfffffffffffffff4, 0x7}, 0x5, 0x6, 0x3}], 0x7, 0x40, 0xbb, 0x2}, {&(0x7f0000000e80)=[{0x9, 0x787e0c5a}, {0xffffffffffffffff, 0x2ee2}, {0x9, 0x800}, {0x2, 0x40fb}], 0x4, 0x10, 0xc69, 0x6}, {&(0x7f0000000ec0)=[0x7fffffff, 0x6, 0xde, 0x0, 0x1, 0x8], 0x6, 0x8, 0x8ed4, 0x9}, {&(0x7f0000000f00)=[{0x4000000, 0x7f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x0, 0x81, 0xe6f}, {0x402, 0x9e6cada, 0x1be, 0x4, 0x734}, {0x1, 0xfffffffffffff800, 0x8, 0x5, 0x9}], 0x4, 0x28, 0x357, 0x39}, {&(0x7f0000000fc0)=[0x7f, 0x3, 0x219c0000, 0x6, 0x7, 0x1], 0x6, 0x8, 0x5, 0x4f6e}}) 4.549695322s ago: executing program 3 (id=219): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.915861761s ago: executing program 2 (id=222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000180)={0x1, 0x47b3, 0x3d3}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x8}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x600080c0}, 0x81) (async) syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000001c0)) (async) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000640)) 2.855391723s ago: executing program 2 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80040, 0x0) lstat(&(0x7f0000008cc0)='./file0/../file0\x00', 0x0) 2.854369393s ago: executing program 2 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex_waitv(&(0x7f0000001200), 0x0, 0x0, &(0x7f0000001800)={0x77359400}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3f, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x5, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.763014576s ago: executing program 2 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x63, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x2007) mmap(&(0x7f0000863000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000e00)=[{{&(0x7f0000000300)=@phonet, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/4}, {&(0x7f0000000400)=""/161}, {&(0x7f00000004c0)=""/53}]}, 0x8}, {{&(0x7f0000000540)=@qipcrtr, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/5}, {&(0x7f0000000600)=""/17}, {&(0x7f0000000640)=""/179}, {&(0x7f0000000700)=""/210}, {&(0x7f0000000800)=""/127}, {&(0x7f0000000880)=""/195}], 0x0, &(0x7f0000000a00)=""/17}, 0x6}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/205}, {&(0x7f0000000b40)=""/230}, {&(0x7f0000000c40)=""/243}], 0x0, &(0x7f0000000d80)=""/116}, 0xc}], 0x1e, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0x4018aee2, &(0x7f0000000000)={0x1, 0x0, [{0x483, 0x0, 0x100000001}]}) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x2000}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 2.411172907s ago: executing program 3 (id=226): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.97957823s ago: executing program 1 (id=228): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_procfs(0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/dev_snmp6\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x0, 0x0, 0x0}) 1.837142894s ago: executing program 2 (id=229): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000040)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "ca933ad163a89f0240b8959e6224d258e7c5291f81b2fa81a56d50c2e25c5cdedeb3dafbfaa09e8d65fb6882283f7077ae25b7d8b53f9df03f7b05239c5a9afc"}}}}}, 0x5e) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0x5, 0x3, "d31002"}, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x2b, {0x2b, 0x2, "45494777b156b709adec3fea8db00ed7182a7083a0925798bd50ba279bf64943eb52507b06ce30f3df"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000400)={0x0, 0xf, 0x102, {0x5, 0xf, 0x102, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0xcb, 0x8, 0xae, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x0, 0xf4}, @generic={0xda, 0x10, 0x0, "77daaf9cc886b8ce2ef5d5668aa3212990fdc6a04aa90a752e0d866e7a46883c48a12a88cee9a2f0ac7541a62a5544865a7e6164f1fcfabfe0a1298cf7b132cad97f820ebd15c11af55c27f8a17e6ca9cfec5eb2c49cb97388fd821ca20458482b4faa2f59fa5b792dde6d25e3874ea6d58133104291e035dc69a3b64fbaa47111c1c31b45546efd974ad6e749ebf82c62c18c4bb91f9946ed49e48641db1cee3292090d06a5ffb6fa8919ecc87b04ce3ef5b52525c67f0d0fef46b2d4d275b8e9b38d653b2ab8ddb98ff716da85ae682c5c934ff312ae"}, @ext_cap={0x7, 0x10, 0x2, 0x8d5900ad96f16ae9, 0x4, 0x5, 0x6e3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x3, 0x5}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0xe, 0xd6, "dd82d43d", "c9613d27"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x5, 0x4, 0xf, 0x1000, 0x4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20172e00000089381177421cec44761cff89ae1e7cd9e57014f018160d9906174df1867a0aa35e00"/52], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf000]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0xb, 0x2, "89e3"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "f57a"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x37}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xe}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) 1.756450087s ago: executing program 1 (id=230): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1020, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1.695381728s ago: executing program 1 (id=231): setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0x1}, @code={0xa, 0x5e, {"410f35660f3881690c65473131470f01c9b8010000000f01d9c482e599280f23d80f21f835400000b00f23f8b942080000b867472edaba9b692e6b0f30400fc79a0f000000b8010000000f01d9"}}, @nested_vmresume={0x130, 0x18, 0x2}], 0x8e}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@arm64={0x93, 0x4, 0x2, '\x00', 0x6}) mount(0x0, &(0x7f00000026c0)='.\x00', &(0x7f0000002680)='ramfs\x00', 0x1000040, 0x0) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x1a) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) 1.694932878s ago: executing program 1 (id=232): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.694710588s ago: executing program 1 (id=233): bind$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000180)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000380)="2bd9652066ad96c0b822444f831ba410fc9b4bdfb2e86301b5b57de187782ce8b378b3bbae37ab63ae26c5d6b2cb72e52d3f78bacbd23dbbf6aca61287ed1cbe9f6cdc6b238841da6f009f508db069bd3224094981f7a93e3c9d4208bbf6ac", 0x5f}, {&(0x7f0000000440)="ea135e7405c84f54f2167466795f9fe5b0a3373feff6de061cc3d458e0fc80c215bbf292acf5a19ae96576afc1f81f29bc24299a411c12219f5a86735e48d21464c9a5f56513156a1f726dd6bf347961c02b313d9eac307d9206c3248af5201335a408b3741c3108b663b8590aab6ae0a331739df453bc8deae0b8f6eb", 0x7d}, {&(0x7f00000004c0)="90efa89920537f7ba2845e7b2d10753c7c52c59b0583a273f2b5647d957ceaf0255a6a39e247cfdadc8dc3e03c18236a975731a2b15dcaa3cf090df4ee60ebcc12e65444a343d688d590603846acee57008a2bb0d55621288b98ea6ffea6ab4d0a35c9601933048cf0c8d30574a1d9ac847c2e0f107c24d7af3d2db7e9f118b2ce61895064a9de850d0709d3f5388342690237bdceb5f78b46715c91018a006bfea2e9d2ea47ca0fb0c6d835281bd41d33b61f74446bf2fada213ba9447b25fda424058ede245e0c4daed54f1ec77db02d96a8b8f9a9246ab79434d924231e27d836e4aeadb7582bc83728da93720f86eac1eb35", 0xf4}, {&(0x7f0000000dc0)="b10c893043f04c813ae43100ffe440f0ef70", 0x12}, {&(0x7f0000000e80)="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", 0x347}], 0x5}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000003800)=[{&(0x7f00000000c0)="5768f60a50352a6a0f2fd0804132b9698520106d94239facd30abd340f59c301413f4a55926c99ff589411826778e3543bdbbff026d310b79f84488ea06b7d87e2c6e84b73d483d6ad40e2417a4cc1e3ba18f112b79f834ea67acb03f17020c51d480c6db5e23893335dd2c607efa472553759304aa076645f9488df8768328259d3b7351c9b037cefdceecb6355a02e7d8bcf8ef993af", 0x97}], 0x1) 1.677151189s ago: executing program 1 (id=234): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.386792698s ago: executing program 0 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4620040000000000000004000002003e00090000007c00000000000000400000000000000002000000000000007f000000060038000100feffb418aee69fc1b661353bf254fcd35200003be50556f6223c47ae79b8c8000000bf5b12b60000e500000000000000feffff0000000000000000000000000000cc9ffd48d8d40b3f25c820508776be169f4493db989e1bbc76635c47bc3ce5b1c865b8343cbd4d43f8f0f4f421adb4e0fb2e04663c7e00c9349ec0de9e03d4b9d494393576daf69ef711572893a3e0cb42a2e6b214ffde0144858411"], 0x9e) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="0fc7284625c87dc07148b8b9000000000000000f23d00f21f835100000070f23f848b8bcc585fc2fd3c5080f23d00f21f835000000080f23f8660fc7b374000000450fc7720ec48189c6168bc744240060000000c744240200380000ff2c2466baf80cb808122188ef66bafc0ced66ba610066ed", 0x74}], 0x1, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) r5 = syz_open_dev$evdev(&(0x7f00000018c0), 0x2, 0x80) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000001640)=[0xfffffffa, 0x80]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x70000}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079fcffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.32774562s ago: executing program 0 (id=237): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x800b}}}, 0x1c}}, 0x4044890) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0xcc840000) (async) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000c80)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1u\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xea/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\a2t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) r6 = fcntl$dupfd(r0, 0x406, r0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r6, 0xc0205866, &(0x7f00000003c0)={&(0x7f0000000040)=0x2, 0x6, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000380)}) (async) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x4, 0x0}) 1.251867052s ago: executing program 0 (id=238): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x757}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4001) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000500)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000080)) r4 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0x80c, 0x0, 0x1c, 0x7, 0x2, 0x11, 0x7, 0xed, 0x9, 0x9, 0x4, 0xb}, {0x23, 0xcd59, 0xa, 0x97, 0xd, 0x6, 0x13, 0x7, 0xd9, 0x2, 0x44, 0x7d, 0x100003fffffffffd}, {0x7fffffff, 0x18, 0x3, 0xff, 0x2, 0x9, 0x10, 0xf8, 0x5, 0x8, 0x6, 0x9, 0xfffffffffffffffd}], 0x800000}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000081}, 0xc, &(0x7f0000000640)={&(0x7f0000000e40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fcdbdf250a000000840004801300010062726f6164636173742d6c696e6b00002400078008000400010000000800010018000000080004000900000008000100030000003c000780080003009abb0000080002000200000008000400000000600800030000000200080004fa4facdb99fc986000090000000800030009000000080004000d0000000900010073797a300000000070000280080002000200000008000100070000003c0001000080000008000200ffffffff440003800800010000000000080002008c416807080002000200000008000100ffff000008000c64d5fa8a12bdda568af627ab02000300000008000200010000000800020009000000080002000500000008000200060000004c000980080002000008000008000100ba0b0000080002000700000008000100ffffff7f080002000600000008000200ffffff7f080002000002000008000100060000000800020009000000340003800800020007000000080001000300000008000200ee110000080001007f000000080003000800000008000300030000004400028008000100080000000400040004000400040004002c000380080001000500000008000200d0010000080001001b0a000008080001001b00000010000280080002000500000004000400a800058008000100657468001c00028008000200010000800800030009000000080004000f0000003c0002800800040007000200080002000a00000008000300870000000800010018000000080001001d000000080001000000000008000300050000756470003c000280080001000600000008000300a0000e00000008000200000800000800030006000000080004000300000008000300ca0000001c0007800800020003000000080001000b000000002279b44fd49d787c9af12ddc1bf401922adb4323ab600cf1cc1bbaf6b314ead37bac002d4c9dab6d4649a7e8ba3aeb3c7e5eec5fd0f8fcaf8dde074a3d698fb6f4450f31d888fad5408fd9dbf3aaf26dba1f0211263dc58fc117cb578106ba972fceb0f39eb1a03275e800"/787], 0x2a0}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000d009) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)="f2316480fe4bc5323949b305c3f0ca35a940199af2212c7c99f7846286c4fd1b724f77d01db20434050e2600e58e47c55ac0590edc0499fd43c5fd2b7cff6b90f5b49b0dbcd30b3c72895e29ec6b7c991364e40c6831f63d21d8d8976c072b0044ba67a112c5c5079bdeb7442a457aa7c760598b1aa182f6040aef6027eabdd82230b8c6b88c4646dacf", 0x8a}, {&(0x7f0000000a40)="74bb2f306a8417b9e4ed7d80755b6b52b03d4415ae51ab8d7e7b5f169ed98e161a123b55061f45fb7bfd4393eb04222f3f483ce8e136c3f40a3449", 0x3b}], 0x2}, 0x40810) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffee0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702a907f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de57868228cc19ac23c1ccc1cdd936d2571c3510b0023000000000000000000000000000000f32bb3874c926a8944caa4e748000000", 0xb2, 0x1e, 0x0, 0x33) 806.37µs ago: executing program 0 (id=239): quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x8e\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\v\x00\x00\x00\x00\x00\x00\x00\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfczb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\x1d\xb5\x81\xce\xb7\xc0t\x83\\\xf7J\x12\xab\x8d\xf2\bc2\xe9]\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80\xba\a\xa8L\xf7\xa6&Y\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xdcdP\xb1\xf2a\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83A\x94\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5-\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\x9f\xdf!\x9bF\xad\fjD\xacaJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\xd6V\veD\r\xbc7\xd4\xb1\xdeM\'f\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xbe\x00\x00\x00\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x770a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x21, 0x0) ptrace(0x10, r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) tkill(r3, 0x2f) mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket(0x5, 0x2, 0x7) tgkill(r3, r3, 0x3b) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/211, 0xd3, 0x7fffffffffffffff) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast2}}}, 0x32) 0s ago: executing program 0 (id=241): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000340)=ANY=[@ANYBLOB='mpol=bind=relative:43\n,', @ANYBLOB=',fsname=dont_measure,permit_directio,smackfshat=##,},']) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000080)={{}, "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"}) sendto$packet(r3, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x1, 0x6, @random="1acbf47afb69"}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1c0, r7, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x4000044) bind$inet6(r5, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x100}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8949, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) gettid() r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r10, 0x7fffffffffffffff, 0x0) write$uinput_user_dev(r10, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 29.602396][ T36] audit: type=1400 audit(1779279547.720:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.605903][ T287] cgroup: Unknown subsys name 'net' [ 29.625079][ T36] audit: type=1400 audit(1779279547.730:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.652722][ T36] audit: type=1400 audit(1779279547.760:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.653297][ T287] cgroup: Unknown subsys name 'devices' [ 29.835602][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.841277][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.957437][ T36] audit: type=1400 audit(1779279548.080:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.980659][ T36] audit: type=1400 audit(1779279548.080:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.005512][ T36] audit: type=1400 audit(1779279548.080:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.030012][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.038848][ T36] audit: type=1400 audit(1779279548.160:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.064915][ T36] audit: type=1400 audit(1779279548.160:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.102837][ T36] audit: type=1400 audit(1779279548.220:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.128521][ T36] audit: type=1400 audit(1779279548.220:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.129223][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.016205][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.023350][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.030504][ T295] bridge_slave_0: entered allmulticast mode [ 31.037064][ T295] bridge_slave_0: entered promiscuous mode [ 31.053560][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.060633][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.067922][ T295] bridge_slave_1: entered allmulticast mode [ 31.074356][ T295] bridge_slave_1: entered promiscuous mode [ 31.115356][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.122483][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.129763][ T294] bridge_slave_0: entered allmulticast mode [ 31.136221][ T294] bridge_slave_0: entered promiscuous mode [ 31.142748][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.150008][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.157188][ T297] bridge_slave_0: entered allmulticast mode [ 31.163593][ T297] bridge_slave_0: entered promiscuous mode [ 31.173127][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.180212][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.187378][ T297] bridge_slave_1: entered allmulticast mode [ 31.193723][ T297] bridge_slave_1: entered promiscuous mode [ 31.206373][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.213476][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.220558][ T294] bridge_slave_1: entered allmulticast mode [ 31.226954][ T294] bridge_slave_1: entered promiscuous mode [ 31.248113][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.255230][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.262324][ T296] bridge_slave_0: entered allmulticast mode [ 31.268837][ T296] bridge_slave_0: entered promiscuous mode [ 31.275486][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.282547][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.289896][ T296] bridge_slave_1: entered allmulticast mode [ 31.296295][ T296] bridge_slave_1: entered promiscuous mode [ 31.453081][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.460178][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.467577][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.474680][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.488243][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.495440][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.502743][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.509836][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.524371][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.531552][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.538882][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.545963][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.587494][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.594639][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.601955][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.609073][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.622380][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.629913][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.638268][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.645716][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.653658][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.660910][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.668531][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.675964][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.706879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.713956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.721893][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.728965][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.737220][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.744427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.752040][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.759117][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.770481][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.777571][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.804841][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.811901][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.847343][ T297] veth0_vlan: entered promiscuous mode [ 31.859644][ T295] veth0_vlan: entered promiscuous mode [ 31.869045][ T294] veth0_vlan: entered promiscuous mode [ 31.884366][ T297] veth1_macvtap: entered promiscuous mode [ 31.901663][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.908832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.916700][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.923803][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.947978][ T294] veth1_macvtap: entered promiscuous mode [ 31.956015][ T295] veth1_macvtap: entered promiscuous mode [ 31.985871][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.031161][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.057534][ T296] veth0_vlan: entered promiscuous mode [ 32.088536][ T296] veth1_macvtap: entered promiscuous mode [ 32.232874][ T330] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 32.278015][ T341] netlink: 284 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.423022][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.513170][ T67] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.533262][ T348] kvm: kvm [347]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 32.542186][ T348] kvm: kvm [347]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 32.574924][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 32.583717][ T9] usb 3-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.596706][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.605690][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 32.615584][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.623679][ T9] usb 3-1: Product: syz [ 32.627916][ T9] usb 3-1: Manufacturer: syz [ 32.632612][ T9] usb 3-1: SerialNumber: syz [ 32.672980][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 32.679540][ T67] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.689141][ T67] usb 4-1: config 0 has no interface number 0 [ 32.695804][ T67] usb 4-1: config 0 interface 184 has no altsetting 0 [ 32.704664][ T67] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.713966][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.721994][ T67] usb 4-1: Product: syz [ 32.726242][ T67] usb 4-1: Manufacturer: syz [ 32.730903][ T67] usb 4-1: SerialNumber: syz [ 32.736363][ T67] usb 4-1: config 0 descriptor?? [ 32.742515][ T67] smsc75xx v1.0.0 [ 33.032946][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.184460][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.194927][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 33.208839][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 33.217965][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.226150][ T31] usb 1-1: SerialNumber: syz [ 33.233072][ T31] usb 1-1: bad CDC descriptors [ 33.238395][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 33.250183][ T31] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 33.323037][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.346215][ T67] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 33.357328][ T67] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.440228][ T361] usb 1-1: USB disconnect, device number 2 [ 33.472974][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 33.479304][ T311] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 33.489784][ T311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.499023][ T311] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 38, using maximum allowed: 30 [ 33.509876][ T311] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 33.524818][ T311] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 33.534330][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.542379][ T311] usb 2-1: Product: syz [ 33.546651][ T311] usb 2-1: Manufacturer: syz [ 33.551797][ T311] usb 2-1: SerialNumber: syz [ 33.567529][ T67] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 33.578476][ T67] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 33.588169][ T67] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 33.597723][ T67] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 33.759462][ T364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.768099][ T364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.779849][ T364] mmap: syz.1.16 (364) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.032680][ T372] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 34.392963][ T376] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.544158][ T376] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 34.552458][ T376] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 34.562659][ T376] usb 1-1: config 8 has no interface number 0 [ 34.568928][ T376] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 34.578872][ T376] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 34.593617][ T376] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 34.602773][ T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.610977][ T376] usb 1-1: Product: syz [ 34.615233][ T376] usb 1-1: Manufacturer: syz [ 34.619845][ T376] usb 1-1: SerialNumber: syz [ 34.827543][ T379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.836975][ T379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.854379][ T376] usb 1-1: USB disconnect, device number 3 [ 34.969629][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 34.969664][ T36] audit: type=1400 audit(1779279553.090:135): avc: denied { write } for pid=388 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.996163][ T389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 35.005711][ T36] audit: type=1400 audit(1779279553.090:136): avc: denied { read } for pid=388 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.108467][ T9] usb 3-1: USB disconnect, device number 2 [ 35.121248][ T36] audit: type=1400 audit(1779279553.240:137): avc: denied { read } for pid=394 comm="syz.2.25" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 35.147114][ T36] audit: type=1400 audit(1779279553.240:138): avc: denied { open } for pid=394 comm="syz.2.25" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 35.173242][ T36] audit: type=1400 audit(1779279553.290:139): avc: denied { create } for pid=394 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.273721][ T31] usb 4-1: USB disconnect, device number 2 [ 35.306379][ T376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.462978][ T376] usb 1-1: Using ep0 maxpacket: 16 [ 35.469619][ T376] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.480756][ T376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.487637][ T376] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 35.497164][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.506570][ T376] usb 1-1: config 0 descriptor?? [ 35.523021][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.672932][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 35.679373][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.690389][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.703270][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 35.712360][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.715490][ T31] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 35.725781][ T9] usb 3-1: config 0 descriptor?? [ 35.884512][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.895631][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 35.908555][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 35.917768][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.928780][ T376] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 35.930135][ T31] usb 4-1: config 0 descriptor?? [ 36.079362][ T311] usb 2-1: USB disconnect, device number 2 [ 36.094678][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.110681][ T36] audit: type=1400 audit(1779279554.220:140): avc: denied { connect } for pid=407 comm="syz.1.29" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.141482][ T36] audit: type=1400 audit(1779279554.220:141): avc: denied { write } for pid=407 comm="syz.1.29" path="socket:[3669]" dev="sockfs" ino=3669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.166460][ T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.178880][ T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.189230][ T36] audit: type=1400 audit(1779279554.310:142): avc: denied { read write } for pid=398 comm="syz.2.26" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.215276][ T36] audit: type=1400 audit(1779279554.310:143): avc: denied { open } for pid=398 comm="syz.2.26" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.239355][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 36.245556][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 36.255942][ T9] usb 3-1: USB disconnect, device number 3 [ 36.264680][ T36] audit: type=1400 audit(1779279554.340:144): avc: denied { read } for pid=409 comm="syz.1.30" dev="nsfs" ino=4026532330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.287404][ T410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.366716][ T405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.375676][ T405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.415695][ T311] usb 1-1: USB disconnect, device number 4 [ 36.648852][ T426] Bluetooth: hci0: sending frame failed (-49) [ 36.655109][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 36.752575][ T431] kvm: MWAIT instruction emulated as NOP! [ 36.908650][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 36.914725][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.923812][ T31] usb 4-1: USB disconnect, device number 3 [ 36.946577][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.962647][ T438] can: request_module (can-proto-5) failed. [ 36.971320][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 36.979624][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 36.987240][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 36.994707][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.002121][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.010148][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.017898][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.025517][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.033015][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.040521][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.048096][ T67] hid-generic 0000:0004:261D.0002: unknown main item tag 0x0 [ 37.056802][ T67] hid-generic 0000:0004:261D.0002: hidraw0: HID v0.03 Device [syz1] on syz0 [ 37.072947][ T360] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.088843][ T442] fido_id[442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.122948][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 37.132416][ T311] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 37.141078][ T311] usb 2-1: config 0 has no interface number 0 [ 37.147294][ T311] usb 2-1: config 0 interface 184 has no altsetting 0 [ 37.155687][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 37.167366][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.175649][ T311] usb 2-1: Product: syz [ 37.180045][ T311] usb 2-1: Manufacturer: syz [ 37.184739][ T311] usb 2-1: SerialNumber: syz [ 37.200376][ T311] usb 2-1: config 0 descriptor?? [ 37.208060][ T311] smsc75xx v1.0.0 [ 37.243622][ T362] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.251210][ T360] usb 3-1: Using ep0 maxpacket: 32 [ 37.257685][ T360] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 37.266091][ T360] usb 3-1: config 0 has no interface number 0 [ 37.272255][ T360] usb 3-1: config 0 interface 184 has no altsetting 0 [ 37.280694][ T360] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 37.289822][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.297916][ T360] usb 3-1: Product: syz [ 37.302122][ T360] usb 3-1: Manufacturer: syz [ 37.306802][ T360] usb 3-1: SerialNumber: syz [ 37.312257][ T360] usb 3-1: config 0 descriptor?? [ 37.318552][ T360] smsc75xx v1.0.0 [ 37.403196][ T362] usb 1-1: Using ep0 maxpacket: 8 [ 37.409914][ T362] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.418355][ T362] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 37.426174][ T362] usb 1-1: can't read configurations, error -71 [ 37.442998][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.592975][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 37.599390][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.609635][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.620000][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.629406][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.637464][ T31] usb 4-1: Product: syz [ 37.641943][ T31] usb 4-1: Manufacturer: syz [ 37.646942][ T31] usb 4-1: SerialNumber: syz [ 37.819475][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 37.830517][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.855475][ T31] usb 4-1: 0:2 : does not exist [ 37.862805][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 37.876966][ T31] usb 4-1: USB disconnect, device number 4 [ 37.889447][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.920614][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 37.931678][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.040772][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 38.053030][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 38.062841][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 38.072417][ T311] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 38.612957][ T362] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.743289][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 38.754168][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 38.763897][ T362] usb 4-1: Using ep0 maxpacket: 32 [ 38.769166][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 38.778726][ T360] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 38.787885][ T362] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 38.796696][ T362] usb 4-1: config 4 has no interface number 0 [ 38.802843][ T362] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.814079][ T362] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.824055][ T362] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 38.833185][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.843544][ T362] hub 4-1:4.128: USB hub found [ 39.049180][ T362] hub 4-1:4.128: 19 ports detected [ 39.054527][ T362] hub 4-1:4.128: Using single TT (err -22) [ 39.060628][ T362] hub 4-1:4.128: insufficient power available to use all downstream ports [ 39.078348][ T467] syzkaller1: entered promiscuous mode [ 39.084136][ T467] syzkaller1: entered allmulticast mode [ 39.258524][ T362] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 39.265180][ T362] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 39.293283][ T362] usb 4-1: USB disconnect, device number 5 [ 39.383008][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.532996][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 39.539463][ T311] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 39.547749][ T311] usb 1-1: config 0 has no interface number 0 [ 39.553916][ T311] usb 1-1: config 0 interface 184 has no altsetting 0 [ 39.562270][ T311] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.571459][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.579556][ T311] usb 1-1: Product: syz [ 39.583775][ T311] usb 1-1: Manufacturer: syz [ 39.588393][ T311] usb 1-1: SerialNumber: syz [ 39.593734][ T311] usb 1-1: config 0 descriptor?? [ 39.599654][ T311] smsc75xx v1.0.0 [ 39.719335][ T362] usb 2-1: USB disconnect, device number 3 [ 39.744189][ T475] netlink: 300 bytes leftover after parsing attributes in process `syz.1.52'. [ 39.794981][ T477] capability: warning: `syz.1.53' uses 32-bit capabilities (legacy support in use) [ 39.805662][ T477] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 39.815850][ T477] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 39.956919][ T9] usb 3-1: USB disconnect, device number 4 [ 40.004768][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 40.004788][ T36] audit: type=1400 audit(1779279558.130:174): avc: denied { mount } for pid=485 comm="syz.2.57" name="/" dev="ramfs" ino=4061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.033996][ T36] audit: type=1400 audit(1779279558.160:175): avc: denied { cmd } for pid=485 comm="iou-wrk-486" path="socket:[4057]" dev="sockfs" ino=4057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.053306][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 40.142968][ T362] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.193032][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.211502][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 40.222661][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.293911][ T362] usb 2-1: Using ep0 maxpacket: 16 [ 40.301543][ T362] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.310594][ T362] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.327100][ T362] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.337930][ T362] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 40.347280][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.355498][ T362] usb 2-1: Product: syz [ 40.359882][ T362] usb 2-1: Manufacturer: syz [ 40.364760][ T362] usb 2-1: SerialNumber: syz [ 40.370474][ T36] audit: type=1400 audit(1779279558.490:176): avc: denied { name_bind } for pid=559 comm="syz.2.59" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 40.442751][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 40.454590][ T36] audit: type=1400 audit(1779279558.580:177): avc: denied { create } for pid=562 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.463367][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 40.474401][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.488802][ T311] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 40.500165][ T36] audit: type=1400 audit(1779279558.610:178): avc: denied { ioctl } for pid=562 comm="syz.2.60" path="socket:[5273]" dev="sockfs" ino=5273 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.513215][ T311] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 40.524666][ T36] audit: type=1400 audit(1779279558.610:179): avc: denied { create } for pid=562 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 40.583508][ T482] process 'syz.1.55' launched './file0' with NULL argv: empty string added [ 40.592350][ T36] audit: type=1400 audit(1779279558.710:180): avc: denied { execute } for pid=481 comm="syz.1.55" name="file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.615825][ T36] audit: type=1400 audit(1779279558.710:181): avc: denied { execute_no_trans } for pid=481 comm="syz.1.55" path="/13/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.639563][ T36] audit: type=1400 audit(1779279558.740:182): avc: denied { read write } for pid=481 comm="syz.1.55" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.671085][ T36] audit: type=1400 audit(1779279558.740:183): avc: denied { open } for pid=481 comm="syz.1.55" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.695979][ T362] usb 2-1: 0:1 : does not exist [ 40.700922][ T362] usb 2-1: unit 5 not found! [ 40.706617][ T362] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 40.714676][ T362] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 40.725631][ T362] usb 2-1: USB disconnect, device number 4 [ 40.773076][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 40.791075][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.803165][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.903063][ T31] usb 4-1: device descriptor read/64, error -71 [ 40.982940][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 40.993718][ T311] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 41.001931][ T311] usb 3-1: config 0 has no interface number 0 [ 41.022995][ T311] usb 3-1: config 0 interface 184 has no altsetting 0 [ 41.044179][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 41.053618][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.061831][ T311] usb 3-1: Product: syz [ 41.066493][ T311] usb 3-1: Manufacturer: syz [ 41.071151][ T311] usb 3-1: SerialNumber: syz [ 41.077533][ T311] usb 3-1: config 0 descriptor?? [ 41.094422][ T311] smsc75xx v1.0.0 [ 41.153016][ T31] usb 4-1: device descriptor read/64, error -71 [ 41.263744][ T31] usb usb4-port1: attempt power cycle [ 41.503029][ T362] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.612992][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 41.634121][ T31] usb 4-1: device descriptor read/8, error -71 [ 41.653026][ T362] usb 2-1: Using ep0 maxpacket: 16 [ 41.659425][ T362] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 41.667774][ T362] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.677936][ T362] usb 2-1: config 0 has no interface number 0 [ 41.684075][ T362] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.694936][ T362] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.696100][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 41.709805][ T362] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 41.721995][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.727898][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.745043][ T362] usb 2-1: Product: syz [ 41.749445][ T362] usb 2-1: Manufacturer: syz [ 41.754094][ T362] usb 2-1: SerialNumber: syz [ 41.759959][ T362] usb 2-1: config 0 descriptor?? [ 41.766251][ T31] usb 4-1: device descriptor read/8, error -71 [ 41.772716][ T362] asix 2-1:0.34: probe with driver asix failed with error -22 [ 41.943040][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 41.954175][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 41.963902][ T311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 41.973622][ T311] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 42.002995][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 42.024160][ T31] usb 4-1: device descriptor read/8, error -71 [ 42.154053][ T31] usb 4-1: device descriptor read/8, error -71 [ 42.159638][ T311] usb 1-1: USB disconnect, device number 7 [ 42.263120][ T31] usb usb4-port1: unable to enumerate USB device [ 42.493027][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.642954][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 42.649473][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.660473][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.670318][ T311] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 42.679446][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.688692][ T311] usb 1-1: config 0 descriptor?? [ 43.099672][ T311] kye 0003:0458:5016.0003: control desc unexpectedly large [ 43.108324][ T311] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0003/input/input4 [ 43.123562][ T311] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0003/input/input5 [ 43.144100][ T311] kye 0003:0458:5016.0003: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 43.213004][ T362] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.362989][ T362] usb 4-1: Using ep0 maxpacket: 32 [ 43.369554][ T362] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 43.377811][ T362] usb 4-1: config 0 has no interface number 0 [ 43.383970][ T362] usb 4-1: config 0 interface 184 has no altsetting 0 [ 43.392288][ T362] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 43.401422][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.409530][ T362] usb 4-1: Product: syz [ 43.413957][ T362] usb 4-1: Manufacturer: syz [ 43.418662][ T362] usb 4-1: SerialNumber: syz [ 43.424137][ T362] usb 4-1: config 0 descriptor?? [ 43.429914][ T362] smsc75xx v1.0.0 [ 43.499739][ T46] usb 1-1: USB disconnect, device number 8 [ 43.575678][ T311] usb 3-1: USB disconnect, device number 5 [ 44.033000][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.033000][ T362] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 44.033040][ T362] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.182974][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 44.193759][ T311] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.202146][ T311] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.222953][ T311] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.232065][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.253477][ T311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.263234][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.287714][ T311] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.298681][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.313638][ T311] usb 3-1: config 0 descriptor?? [ 44.327071][ T9] usb 2-1: USB disconnect, device number 5 [ 44.522964][ T311] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.726344][ T31] usb 3-1: USB disconnect, device number 6 [ 44.737214][ T31] usblp0: removed [ 44.803006][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.885213][ T362] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 44.896144][ T362] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 44.905960][ T362] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 44.915837][ T362] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 44.952990][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 44.959633][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 44.967939][ T9] usb 2-1: config 0 has no interface number 0 [ 44.974217][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 44.982531][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 44.991714][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.999875][ T9] usb 2-1: Product: syz [ 45.005913][ T9] usb 2-1: Manufacturer: syz [ 45.010527][ T9] usb 2-1: SerialNumber: syz [ 45.016070][ T9] usb 2-1: config 0 descriptor?? [ 45.022891][ T9] smsc75xx v1.0.0 [ 45.252727][ T624] syzkaller1: entered promiscuous mode [ 45.258403][ T624] syzkaller1: entered allmulticast mode [ 45.622950][ T365] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.631197][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 45.642226][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 45.784262][ T365] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 45.793401][ T365] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 45.803584][ T365] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 45.812574][ T365] usb 3-1: too many endpoints for config 1 interface 1 altsetting 100: 52, using maximum allowed: 30 [ 45.823516][ T365] usb 3-1: config 1 interface 1 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 45.836726][ T365] usb 3-1: config 1 interface 1 has no altsetting 0 [ 45.844950][ T365] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 45.854175][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.862270][ T365] usb 3-1: Product: syz [ 45.866623][ T365] usb 3-1: Manufacturer: syz [ 45.871398][ T365] usb 3-1: SerialNumber: syz [ 46.082362][ T365] usb 3-1: USB disconnect, device number 7 [ 46.106946][ T361] usb 4-1: USB disconnect, device number 10 [ 46.236859][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 46.236878][ T36] audit: type=1400 audit(1779279564.360:196): avc: denied { append } for pid=638 comm="syz.3.84" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.593017][ T361] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 46.754163][ T361] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.764802][ T361] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.774553][ T361] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.783844][ T361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.791908][ T361] usb 4-1: SerialNumber: syz [ 46.852929][ T365] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.868287][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 46.879302][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 46.889084][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 46.898598][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 46.998988][ T36] audit: type=1400 audit(1779279565.120:197): avc: denied { append } for pid=638 comm="syz.3.84" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.021978][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 47.029094][ T361] usb 4-1: 0:2 : does not exist [ 47.034120][ T361] usb 4-1: unit 5 not found! [ 47.038990][ T365] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 47.047172][ T365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.057877][ T365] usb 3-1: config 0 has no interface number 0 [ 47.065109][ T361] usb 4-1: USB disconnect, device number 11 [ 47.071318][ T365] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 47.084499][ T365] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.099561][ T365] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 47.099969][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.108972][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.132492][ T365] usb 3-1: Product: syz [ 47.136838][ T365] usb 3-1: Manufacturer: syz [ 47.141485][ T365] usb 3-1: SerialNumber: syz [ 47.147148][ T365] usb 3-1: config 0 descriptor?? [ 47.153298][ T365] asix 3-1:0.34: probe with driver asix failed with error -22 [ 47.254938][ T36] audit: type=1400 audit(1779279565.380:198): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 47.552994][ T361] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.704208][ T361] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 47.716984][ T361] usb 1-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 47.726549][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.742160][ T361] usb 1-1: Product: ﺄ뼐巆끏ᓮỀꃓ灎湗챋丘龜๨눻Œ᰸㿱㻶翰 [ 47.751821][ T361] usb 1-1: Manufacturer: 뭃酼忟酀쓵ᢈ델 [ 47.758073][ T361] usb 1-1: SerialNumber: 嫯틇蓮癔捫䙡䛛庞⌌莇੔郷Ң줷䎽㮪喟輩䥋⤶葫劭 [ 47.771468][ T36] audit: type=1400 audit(1779279565.890:199): avc: denied { read } for pid=658 comm="syz.3.92" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.794153][ T36] audit: type=1400 audit(1779279565.920:200): avc: denied { open } for pid=658 comm="syz.3.92" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.818590][ T36] audit: type=1400 audit(1779279565.940:201): avc: denied { ioctl } for pid=658 comm="syz.3.92" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.844129][ T36] audit: type=1400 audit(1779279565.940:202): avc: denied { set_context_mgr } for pid=658 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.908471][ T31] usb 2-1: USB disconnect, device number 6 [ 48.132987][ T362] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 48.175040][ T361] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 48.185428][ T361] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.196436][ T361] usb 1-1: USB disconnect, device number 9 [ 48.207632][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.263021][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.270691][ T362] usb 4-1: device descriptor read/64, error -71 [ 48.423014][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 48.429372][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.437639][ T31] usb 2-1: config 0 has no interface number 0 [ 48.443844][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 48.452202][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 48.461446][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.469620][ T31] usb 2-1: Product: syz [ 48.473869][ T31] usb 2-1: Manufacturer: syz [ 48.478531][ T31] usb 2-1: SerialNumber: syz [ 48.483968][ T31] usb 2-1: config 0 descriptor?? [ 48.489908][ T31] smsc75xx v1.0.0 [ 48.522953][ T362] usb 4-1: device descriptor read/64, error -71 [ 48.694383][ T667] netlink: 104 bytes leftover after parsing attributes in process `syz.0.95'. [ 48.762984][ T362] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 48.812939][ T36] audit: type=1400 audit(1779279566.930:203): avc: denied { ioctl } for pid=672 comm="syz.0.98" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.892976][ T362] usb 4-1: device descriptor read/64, error -71 [ 49.100013][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 49.110980][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.132941][ T362] usb 4-1: device descriptor read/64, error -71 [ 49.253165][ T362] usb usb4-port1: attempt power cycle [ 49.292985][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 49.321015][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 49.332120][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 49.342225][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 49.351769][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 49.422987][ T46] usb 1-1: device descriptor read/64, error -71 [ 49.602993][ T362] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 49.624127][ T362] usb 4-1: device descriptor read/8, error -71 [ 49.659797][ T361] usb 3-1: USB disconnect, device number 8 [ 49.663063][ T46] usb 1-1: device descriptor read/64, error -71 [ 49.754349][ T362] usb 4-1: device descriptor read/8, error -71 [ 49.913014][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 49.993005][ T362] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 50.014513][ T362] usb 4-1: device descriptor read/8, error -71 [ 50.043054][ T46] usb 1-1: device descriptor read/64, error -71 [ 50.043054][ T361] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.144242][ T362] usb 4-1: device descriptor read/8, error -71 [ 50.192990][ T361] usb 3-1: Using ep0 maxpacket: 32 [ 50.199398][ T361] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 50.207947][ T361] usb 3-1: config 0 has no interface number 0 [ 50.214144][ T361] usb 3-1: config 0 interface 184 has no altsetting 0 [ 50.222995][ T361] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.232087][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.240143][ T361] usb 3-1: Product: syz [ 50.244381][ T361] usb 3-1: Manufacturer: syz [ 50.249005][ T361] usb 3-1: SerialNumber: syz [ 50.254502][ T361] usb 3-1: config 0 descriptor?? [ 50.260357][ T361] smsc75xx v1.0.0 [ 50.263299][ T362] usb usb4-port1: unable to enumerate USB device [ 50.292996][ T46] usb 1-1: device descriptor read/64, error -71 [ 50.403214][ T46] usb usb1-port1: attempt power cycle [ 50.743025][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 50.764367][ T46] usb 1-1: device descriptor read/8, error -71 [ 50.862278][ T361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 50.873422][ T361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.904321][ T46] usb 1-1: device descriptor read/8, error -71 [ 50.938274][ T31] usb 2-1: USB disconnect, device number 7 [ 50.967870][ T694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 51.143107][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 51.164343][ T46] usb 1-1: device descriptor read/8, error -71 [ 51.294224][ T46] usb 1-1: device descriptor read/8, error -71 [ 51.393035][ T365] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.403265][ T46] usb usb1-port1: unable to enumerate USB device [ 51.442980][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 51.542925][ T365] usb 2-1: Using ep0 maxpacket: 16 [ 51.553832][ T365] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 51.561983][ T365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.592984][ T365] usb 2-1: config 0 has no interface number 0 [ 51.599159][ T365] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 51.609410][ T365] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.613041][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 51.628840][ T365] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 51.628867][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 51.628894][ T31] usb 4-1: config 0 has no interface number 0 [ 51.652557][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.652582][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 51.669371][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 51.673019][ T365] usb 2-1: Product: syz [ 51.679479][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.682701][ T365] usb 2-1: Manufacturer: syz [ 51.691884][ T31] usb 4-1: Product: syz [ 51.699669][ T31] usb 4-1: Manufacturer: syz [ 51.704571][ T31] usb 4-1: SerialNumber: syz [ 51.712936][ T365] usb 2-1: SerialNumber: syz [ 51.714095][ T31] usb 4-1: config 0 descriptor?? [ 51.723156][ T365] usb 2-1: config 0 descriptor?? [ 51.728488][ T707] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.736814][ T31] smsc75xx v1.0.0 [ 51.741284][ T365] asix 2-1:0.34: probe with driver asix failed with error -22 [ 52.082708][ T36] audit: type=1400 audit(1779279570.200:204): avc: denied { create } for pid=713 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.106140][ T361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 52.118359][ T361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 52.129874][ T36] audit: type=1400 audit(1779279570.200:205): avc: denied { ioctl } for pid=713 comm="syz.0.113" path="socket:[6849]" dev="sockfs" ino=6849 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.155989][ T361] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 52.165588][ T361] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 52.356859][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 52.367816][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 52.552999][ T361] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.577966][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 52.588900][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 52.598659][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 52.608215][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 52.704012][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 52.713911][ T361] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 52.723758][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 52.733582][ T361] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 52.744852][ T361] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 52.754006][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.762020][ T361] usb 1-1: Product: syz [ 52.766362][ T361] usb 1-1: Manufacturer: syz [ 52.770992][ T361] usb 1-1: SerialNumber: syz [ 52.776550][ T361] usb 1-1: config 0 descriptor?? [ 52.782693][ T361] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 52.986906][ T361] scsi host1: usb-storage 1-1:0.0 [ 52.996848][ T361] usb 1-1: USB disconnect, device number 14 [ 53.109342][ T365] usb 3-1: USB disconnect, device number 9 [ 53.276806][ T748] FAULT_INJECTION: forcing a failure. [ 53.276806][ T748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.289993][ T748] CPU: 1 UID: 0 PID: 748 Comm: syz.2.123 Not tainted syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 53.290030][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.290049][ T748] Call Trace: [ 53.290057][ T748] [ 53.290066][ T748] __dump_stack+0x21/0x30 [ 53.290114][ T748] dump_stack_lvl+0x140/0x1c0 [ 53.290147][ T748] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.290181][ T748] ? vfs_write+0x9a4/0xf90 [ 53.290205][ T748] dump_stack+0x19/0x20 [ 53.290237][ T748] should_fail_ex+0x3d7/0x530 [ 53.290260][ T748] should_fail+0xf/0x20 [ 53.290280][ T748] should_fail_usercopy+0x1e/0x30 [ 53.290303][ T748] _copy_from_user+0x20/0xa0 [ 53.290331][ T748] __se_sys_io_uring_setup+0x170/0x2b0 [ 53.290362][ T748] ? __kasan_check_write+0x18/0x20 [ 53.290385][ T748] ? __x64_sys_io_uring_setup+0x80/0x80 [ 53.290418][ T748] ? __kasan_check_read+0x15/0x20 [ 53.290441][ T748] __x64_sys_io_uring_setup+0x5f/0x80 [ 53.290471][ T748] x64_sys_call+0x22c0/0x2ee0 [ 53.290493][ T748] do_syscall_64+0x57/0xf0 [ 53.290516][ T748] ? clear_bhb_loop+0x50/0xa0 [ 53.290543][ T748] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.290569][ T748] RIP: 0033:0x7f6baab9ce59 [ 53.290600][ T748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.290619][ T748] RSP: 002b:00007f6bab974ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 53.290652][ T748] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f6baab9ce59 [ 53.290670][ T748] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 000000000000001c [ 53.290687][ T748] RBP: 0000200000000800 R08: 0000200000001540 R09: 0000000000000000 [ 53.290703][ T748] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 53.290719][ T748] R13: 0000200000000890 R14: 00007f6bab974fd8 R15: 0000000000000000 [ 53.290739][ T748] [ 53.523626][ T36] audit: type=1400 audit(1779279571.640:206): avc: denied { bind } for pid=751 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.821762][ T36] audit: type=1400 audit(1779279571.940:207): avc: denied { bind } for pid=764 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.971152][ T36] audit: type=1400 audit(1779279572.090:208): avc: denied { write } for pid=773 comm="syz.0.133" path="socket:[7207]" dev="sockfs" ino=7207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.994690][ T362] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.143456][ T362] usb 3-1: Using ep0 maxpacket: 32 [ 54.151395][ T362] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.168820][ T362] usb 3-1: config 0 has no interface number 0 [ 54.180633][ T362] usb 3-1: config 0 interface 184 has no altsetting 0 [ 54.192468][ T362] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.201745][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.210047][ T362] usb 3-1: Product: syz [ 54.214564][ T362] usb 3-1: Manufacturer: syz [ 54.219276][ T362] usb 3-1: SerialNumber: syz [ 54.225625][ T46] usb 2-1: USB disconnect, device number 8 [ 54.238323][ T362] usb 3-1: config 0 descriptor?? [ 54.248653][ T362] smsc75xx v1.0.0 [ 54.251279][ T361] usb 4-1: USB disconnect, device number 16 [ 54.304750][ T36] audit: type=1400 audit(1779279572.430:209): avc: denied { create } for pid=792 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 54.452938][ T365] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 54.545478][ T36] audit: type=1400 audit(1779279572.670:210): avc: denied { listen } for pid=799 comm="syz.3.142" path=2F33322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 54.622968][ T365] usb 1-1: Using ep0 maxpacket: 16 [ 54.631450][ T365] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 54.648636][ T803] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.653107][ T365] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 54.692972][ T365] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 54.702087][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.714399][ T365] usb 1-1: config 0 descriptor?? [ 54.742992][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 54.862806][ T362] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 54.873977][ T362] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 54.902969][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 54.909410][ T46] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.918049][ T46] usb 2-1: config 0 has no interface number 0 [ 54.924871][ T46] usb 2-1: config 0 interface 184 has no altsetting 0 [ 54.933200][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.942507][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.950587][ T46] usb 2-1: Product: syz [ 54.955335][ T46] usb 2-1: Manufacturer: syz [ 54.959998][ T46] usb 2-1: SerialNumber: syz [ 54.970010][ T46] usb 2-1: config 0 descriptor?? [ 54.977889][ T46] smsc75xx v1.0.0 [ 55.012983][ T361] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 55.126155][ T365] holtek_mouse 0003:04D9:A072.0004: ignoring exceeding usage max [ 55.137791][ T365] holtek_mouse 0003:04D9:A072.0004: ignoring exceeding usage max [ 55.145636][ T365] holtek_mouse 0003:04D9:A072.0004: usage index exceeded [ 55.152698][ T365] holtek_mouse 0003:04D9:A072.0004: item 0 2 2 2 parsing failed [ 55.160769][ T365] holtek_mouse 0003:04D9:A072.0004: hid parse failed: -22 [ 55.168087][ T365] holtek_mouse 0003:04D9:A072.0004: probe with driver holtek_mouse failed with error -22 [ 55.182579][ T361] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.196413][ T361] usb 4-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 55.205589][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.213645][ T361] usb 4-1: Product: syz [ 55.217836][ T361] usb 4-1: Manufacturer: syz [ 55.222443][ T361] usb 4-1: SerialNumber: syz [ 55.332740][ T365] usb 1-1: USB disconnect, device number 15 [ 55.434820][ T361] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.445758][ T361] usb 4-1: USB disconnect, device number 17 [ 55.461616][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.582006][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 55.592923][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.086577][ T362] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 56.097809][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 56.105604][ T362] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 56.115561][ T362] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 56.125627][ T362] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 56.212977][ T365] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 56.282948][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 56.290841][ T31] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 56.299052][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.309443][ T31] usb 1-1: config 0 has no interface number 0 [ 56.315739][ T31] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 56.325822][ T31] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.340289][ T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 56.349414][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.357586][ T31] usb 1-1: Product: syz [ 56.361790][ T31] usb 1-1: Manufacturer: syz [ 56.366448][ T31] usb 1-1: SerialNumber: syz [ 56.371871][ T31] usb 1-1: config 0 descriptor?? [ 56.375032][ T365] usb 4-1: Using ep0 maxpacket: 32 [ 56.377643][ T810] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 56.386148][ T365] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 56.392414][ T31] asix 1-1:0.34: probe with driver asix failed with error -22 [ 56.398186][ T365] usb 4-1: config 0 has no interface number 0 [ 56.413065][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 56.413083][ T365] usb 4-1: config 0 interface 184 has no altsetting 0 [ 56.415173][ T365] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 56.424084][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 56.432000][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.440879][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 56.455690][ T365] usb 4-1: Product: syz [ 56.465329][ T46] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 56.467878][ T365] usb 4-1: Manufacturer: syz [ 56.484344][ T365] usb 4-1: SerialNumber: syz [ 56.489658][ T365] usb 4-1: config 0 descriptor?? [ 56.495674][ T365] smsc75xx v1.0.0 [ 57.098120][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 57.109318][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.308853][ T46] usb 3-1: USB disconnect, device number 10 [ 57.319424][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 57.333016][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 57.342712][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 57.352529][ T365] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 57.406628][ T36] audit: type=1400 audit(1779279575.530:211): avc: denied { wake_alarm } for pid=822 comm="syz.2.151" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.438797][ T365] usb 2-1: USB disconnect, device number 9 [ 57.461305][ T827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 57.470582][ T827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 57.554134][ T827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3782869814 (121051834048 ns) > initial count (24832656960 ns). Using initial count to start timer. [ 57.736423][ T36] audit: type=1400 audit(1779279575.860:212): avc: denied { append } for pid=838 comm="syz.2.157" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.768084][ T36] audit: type=1400 audit(1779279575.880:213): avc: denied { mounton } for pid=838 comm="syz.2.157" path="/proc/105/task" dev="proc" ino=7524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 57.792180][ T835] FAULT_INJECTION: forcing a failure. [ 57.792180][ T835] name failslab, interval 1, probability 0, space 0, times 0 [ 57.804946][ T835] CPU: 0 UID: 0 PID: 835 Comm: syz.1.156 Not tainted syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 57.804982][ T835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 57.805013][ T835] Call Trace: [ 57.805019][ T835] [ 57.805026][ T835] __dump_stack+0x21/0x30 [ 57.805054][ T835] dump_stack_lvl+0x140/0x1c0 [ 57.805078][ T835] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.805103][ T835] ? __cfi_avc_has_perm+0x10/0x10 [ 57.805127][ T835] ? kasan_save_alloc_info+0x40/0x50 [ 57.805154][ T835] dump_stack+0x19/0x20 [ 57.805176][ T835] should_fail_ex+0x3d7/0x530 [ 57.805192][ T835] should_failslab+0xac/0x100 [ 57.805213][ T835] __kmalloc_cache_noprof+0x41/0x470 [ 57.805230][ T835] ? vhost_task_create+0x12c/0x400 [ 57.805250][ T835] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 57.805270][ T835] vhost_task_create+0x12c/0x400 [ 57.805288][ T835] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 57.805309][ T835] ? __cfi_vhost_task_create+0x10/0x10 [ 57.805328][ T835] ? __cfi_vhost_task_fn+0x10/0x10 [ 57.805345][ T835] ? __kasan_check_write+0x18/0x20 [ 57.805361][ T835] ? mutex_lock+0x97/0x1d0 [ 57.805382][ T835] ? __cfi_mutex_lock+0x10/0x10 [ 57.805401][ T835] ? kernel_text_address+0xa9/0xe0 [ 57.805426][ T835] kvm_mmu_post_init_vm+0x161/0x300 [ 57.805451][ T835] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 57.805476][ T835] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 57.805500][ T835] ? kstrtoull+0x13b/0x1e0 [ 57.805523][ T835] ? kstrtouint+0x78/0xf0 [ 57.805546][ T835] ? ioctl_has_perm+0x1bc/0x500 [ 57.805561][ T835] ? __asan_memcpy+0x5a/0x80 [ 57.805577][ T835] ? ioctl_has_perm+0x408/0x500 [ 57.805592][ T835] ? has_cap_mac_admin+0xd0/0xd0 [ 57.805608][ T835] ? __kasan_check_write+0x18/0x20 [ 57.805627][ T835] ? mutex_lock_killable+0x97/0x1d0 [ 57.805648][ T835] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.805669][ T835] ? proc_fail_nth_write+0x184/0x220 [ 57.805694][ T835] kvm_vcpu_ioctl+0xa48/0x1000 [ 57.805712][ T835] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 57.805728][ T835] ? __cfi_vfs_write+0x10/0x10 [ 57.805745][ T835] ? __kasan_check_write+0x18/0x20 [ 57.805761][ T835] ? mutex_unlock+0x90/0x240 [ 57.805781][ T835] ? __cfi_mutex_unlock+0x10/0x10 [ 57.805800][ T835] ? __fget_files+0x2c5/0x340 [ 57.805820][ T835] ? __fget_files+0x2c5/0x340 [ 57.805840][ T835] ? bpf_lsm_file_ioctl+0xd/0x20 [ 57.805862][ T835] ? security_file_ioctl+0x3e/0x110 [ 57.805886][ T835] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 57.805903][ T835] __se_sys_ioctl+0x132/0x1b0 [ 57.805923][ T835] __x64_sys_ioctl+0x7f/0xa0 [ 57.805942][ T835] x64_sys_call+0x1878/0x2ee0 [ 57.805958][ T835] do_syscall_64+0x57/0xf0 [ 57.805974][ T835] ? clear_bhb_loop+0x50/0xa0 [ 57.805994][ T835] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.806013][ T835] RIP: 0033:0x7f70eaf9ce59 [ 57.806032][ T835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.806046][ T835] RSP: 002b:00007f70ebe75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.806064][ T835] RAX: ffffffffffffffda RBX: 00007f70eb215fa0 RCX: 00007f70eaf9ce59 [ 57.806077][ T835] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 57.806087][ T835] RBP: 00007f70ebe75090 R08: 0000000000000000 R09: 0000000000000000 [ 57.806098][ T835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.806114][ T835] R13: 00007f70eb216038 R14: 00007f70eb215fa0 R15: 00007fffad45be18 [ 57.806129][ T835] [ 58.542994][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 58.692972][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 58.699412][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 58.707756][ T31] usb 2-1: config 0 has no interface number 0 [ 58.713939][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 58.722396][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 58.731561][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.739622][ T31] usb 2-1: Product: syz [ 58.743846][ T31] usb 2-1: Manufacturer: syz [ 58.748490][ T31] usb 2-1: SerialNumber: syz [ 58.753939][ T31] usb 2-1: config 0 descriptor?? [ 58.759952][ T31] smsc75xx v1.0.0 [ 58.913035][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.916709][ T365] usb 1-1: USB disconnect, device number 16 [ 58.937970][ T36] audit: type=1400 audit(1779279577.060:214): avc: denied { write } for pid=856 comm="syz.0.163" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.962750][ T857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 58.962817][ T857] rust_binder: 856:857 transaction to 856 failed: EFAULT [ 58.972548][ T36] audit: type=1400 audit(1779279577.080:215): avc: denied { map } for pid=856 comm="syz.0.163" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.003762][ T362] usb 4-1: USB disconnect, device number 18 [ 59.007049][ T36] audit: type=1400 audit(1779279577.080:216): avc: denied { call } for pid=856 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.086977][ T46] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 59.098503][ T46] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 33 [ 59.106132][ T861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=861 comm=syz.3.165 [ 59.112023][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 59.135000][ T46] usb 3-1: string descriptor 0 read error: -22 [ 59.141330][ T46] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 59.154336][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.168624][ T36] audit: type=1400 audit(1779279577.290:217): avc: denied { ioctl } for pid=862 comm="syz.3.166" path="socket:[7632]" dev="sockfs" ino=7632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.193169][ T36] audit: type=1400 audit(1779279577.290:218): avc: denied { connect } for pid=862 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.194332][ T863] netlink: 'syz.3.166': attribute type 29 has an invalid length. [ 59.213170][ T36] audit: type=1400 audit(1779279577.290:219): avc: denied { write } for pid=862 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.237966][ T863] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.166'. [ 59.286754][ T36] audit: type=1400 audit(1779279577.410:220): avc: denied { read write } for pid=866 comm="syz.3.168" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.293155][ T365] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 59.373210][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 59.392956][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.472953][ T365] usb 1-1: Using ep0 maxpacket: 32 [ 59.480539][ T872] binder: Unknown parameter '' [ 59.486240][ T365] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 59.494947][ T872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 59.503884][ T365] usb 1-1: config 0 has no interface number 0 [ 59.510012][ T365] usb 1-1: config 0 interface 184 has no altsetting 0 [ 59.517430][ T872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.169'. [ 59.527736][ T365] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 59.536911][ T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.546524][ T365] usb 1-1: Product: syz [ 59.550778][ T365] usb 1-1: Manufacturer: syz [ 59.555476][ T365] usb 1-1: SerialNumber: syz [ 59.560949][ T365] usb 1-1: config 0 descriptor?? [ 59.569304][ T365] smsc75xx v1.0.0 [ 59.572617][ T855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.593627][ T855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.618564][ T875] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 59.643830][ T46] usbhid 3-1:1.0: can't add hid device: -71 [ 59.649883][ T46] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 59.688840][ T46] usb 3-1: USB disconnect, device number 11 [ 59.972380][ T365] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 59.983395][ T365] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 59.993083][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 59.993109][ T365] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 60.001216][ T365] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 60.082944][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 60.172959][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 60.179198][ T46] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 60.187642][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.194398][ T376] usb 1-1: USB disconnect, device number 17 [ 60.198703][ T46] usb 3-1: config 0 has no interface number 0 [ 60.210504][ T46] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 60.222201][ T46] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.235309][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 60.246209][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 60.255970][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 60.263040][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 60.265735][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 60.273013][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.280511][ T46] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 60.288114][ T9] usb 4-1: config 0 has no interface number 0 [ 60.299388][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.310382][ T46] usb 3-1: Product: syz [ 60.313320][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 60.314716][ T46] usb 3-1: Manufacturer: syz [ 60.326005][ T46] usb 3-1: SerialNumber: syz [ 60.330725][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.340341][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.341302][ T46] usb 3-1: config 0 descriptor?? [ 60.353640][ T9] usb 4-1: Product: syz [ 60.354165][ T882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.357836][ T9] usb 4-1: Manufacturer: syz [ 60.367255][ T46] asix 3-1:0.34: probe with driver asix failed with error -22 [ 60.371231][ T9] usb 4-1: SerialNumber: syz [ 60.387210][ T9] usb 4-1: config 0 descriptor?? [ 60.394620][ T9] smsc75xx v1.0.0 [ 60.852468][ T893] netlink: 'syz.0.177': attribute type 16 has an invalid length. [ 60.900578][ T896] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.900714][ T896] rust_binder: Write failure EINVAL in pid:161 [ 61.000091][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 61.019059][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.099541][ T904] 9pnet: p9_errstr2errno: server reported unknown error [ 61.122686][ T907] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 61.228984][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 61.239912][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 61.249651][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 61.259338][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 61.456945][ T376] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 61.464909][ T9] usb 2-1: USB disconnect, device number 10 [ 61.612988][ T376] usb 1-1: Using ep0 maxpacket: 8 [ 61.619832][ T376] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.628523][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 61.639661][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 61.650595][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.660308][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 61.671425][ T376] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 61.681387][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 61.691079][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 61.702323][ T376] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 61.711493][ T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.719579][ T376] usb 1-1: Product: syz [ 61.723815][ T376] usb 1-1: Manufacturer: syz [ 61.728409][ T376] usb 1-1: SerialNumber: syz [ 61.733843][ T376] usb 1-1: config 0 descriptor?? [ 61.740325][ T911] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.759445][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.950065][ T911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 61.959619][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.968303][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.423339][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 62.423360][ T36] audit: type=1400 audit(1779283932.548:240): avc: denied { map } for pid=925 comm="syz.1.187" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 62.507108][ T928] fuse: Bad value for 'user_id' [ 62.512124][ T928] fuse: Bad value for 'user_id' [ 62.560477][ T928] Zero length message leads to an empty skb [ 62.567427][ T36] audit: type=1400 audit(1779283932.688:241): avc: denied { write } for pid=927 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.744481][ T46] usb 3-1: USB disconnect, device number 12 [ 62.767943][ T36] audit: type=1400 audit(1779283932.888:242): avc: denied { getopt } for pid=929 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.802950][ T376] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 62.844548][ T9] usb 4-1: USB disconnect, device number 19 [ 62.914497][ T932] 9pnet: p9_errstr2errno: server reported unknown error [ 62.932946][ T376] usb 2-1: device descriptor read/64, error -71 [ 62.963221][ T937] x_tables: duplicate entry at hook 2 [ 62.969769][ T36] audit: type=1400 audit(1779283933.088:243): avc: denied { read } for pid=936 comm="syz.3.192" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.992930][ T36] audit: type=1400 audit(1779283933.088:244): avc: denied { open } for pid=936 comm="syz.3.192" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.016461][ T36] audit: type=1400 audit(1779283933.098:245): avc: denied { ioctl } for pid=936 comm="syz.3.192" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.092983][ T46] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 63.172989][ T376] usb 2-1: device descriptor read/64, error -71 [ 63.243042][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 63.249750][ T46] usb 3-1: config 216 has 1 interface, different from the descriptor's value: 11 [ 63.259158][ T46] usb 3-1: config 216 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 63.269179][ T46] usb 3-1: config 216 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 63.279126][ T46] usb 3-1: config 216 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.289146][ T46] usb 3-1: config 216 interface 0 altsetting 3 bulk endpoint 0x81 has invalid maxpacket 0 [ 63.299160][ T46] usb 3-1: config 216 interface 0 has no altsetting 0 [ 63.306025][ T46] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 63.315135][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.323095][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 63.412958][ T376] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 63.452977][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.533088][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.541930][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.550790][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.553905][ T376] usb 2-1: device descriptor read/64, error -71 [ 63.559909][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.574778][ T46] usb 3-1: string descriptor 0 read error: -71 [ 63.581449][ T46] ums-sddr09 3-1:216.0: USB Mass Storage device detected [ 63.614606][ T46] ums-sddr09 3-1:216.0: probe with driver ums-sddr09 failed with error -22 [ 63.624561][ T46] usb 3-1: USB disconnect, device number 13 [ 63.712963][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.813016][ T376] usb 2-1: device descriptor read/64, error -71 [ 63.923069][ T376] usb usb2-port1: attempt power cycle [ 63.953025][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 64.084278][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.229654][ T46] usb 1-1: USB disconnect, device number 18 [ 64.263141][ T376] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 64.284188][ T376] usb 2-1: device descriptor read/8, error -71 [ 64.322984][ T9] usb 4-1: device descriptor read/64, error -71 [ 64.333041][ T365] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 64.414082][ T376] usb 2-1: device descriptor read/8, error -71 [ 64.433066][ T9] usb usb4-port1: attempt power cycle [ 64.482987][ T365] usb 3-1: Using ep0 maxpacket: 32 [ 64.489472][ T365] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.497747][ T365] usb 3-1: config 0 has no interface number 0 [ 64.504025][ T365] usb 3-1: config 0 interface 184 has no altsetting 0 [ 64.512365][ T365] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.521501][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.529680][ T365] usb 3-1: Product: syz [ 64.534168][ T365] usb 3-1: Manufacturer: syz [ 64.538779][ T365] usb 3-1: SerialNumber: syz [ 64.544138][ T365] usb 3-1: config 0 descriptor?? [ 64.549955][ T365] smsc75xx v1.0.0 [ 64.553064][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 64.662963][ T376] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 64.684072][ T376] usb 2-1: device descriptor read/8, error -71 [ 64.704148][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.715134][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.725039][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.737990][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.747081][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.755988][ T46] usb 1-1: config 0 descriptor?? [ 64.772959][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 64.793990][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.814150][ T376] usb 2-1: device descriptor read/8, error -71 [ 64.923173][ T376] usb usb2-port1: unable to enumerate USB device [ 64.930686][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.155059][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 65.166212][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.170825][ T46] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 65.180460][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 65.193119][ T46] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 65.208849][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.344131][ T9] usb 4-1: device descriptor read/8, error -71 [ 65.370652][ T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.379313][ T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.453073][ T9] usb usb4-port1: unable to enumerate USB device [ 65.994011][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 65.997787][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.005400][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 66.018898][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.024770][ T365] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 66.041767][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 66.049499][ T365] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 66.203053][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 66.209430][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 66.220497][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 66.233239][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 66.242394][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.250707][ T9] usb 2-1: Product: syz [ 66.254933][ T9] usb 2-1: Manufacturer: syz [ 66.259551][ T9] usb 2-1: SerialNumber: syz [ 66.372939][ T376] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 66.474650][ T9] usb 2-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 66.483515][ T9] usb 2-1: found format II with max.bitrate = 6, frame size=24576 [ 66.492138][ T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 66.499184][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 66.509460][ T9] usb 2-1: USB disconnect, device number 15 [ 66.522990][ T376] usb 4-1: Using ep0 maxpacket: 16 [ 66.529207][ T376] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 66.537554][ T376] usb 4-1: config 0 has no interface number 0 [ 66.543808][ T376] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 66.549651][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.554745][ T376] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.582305][ T376] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 66.592476][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.601216][ T376] usb 4-1: Product: syz [ 66.605667][ T376] usb 4-1: Manufacturer: syz [ 66.610380][ T376] usb 4-1: SerialNumber: syz [ 66.615879][ T376] usb 4-1: config 0 descriptor?? [ 66.621437][ T956] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 66.629491][ T376] asix 4-1:0.34: probe with driver asix failed with error -22 [ 67.062802][ T960] FAULT_INJECTION: forcing a failure. [ 67.062802][ T960] name failslab, interval 1, probability 0, space 0, times 0 [ 67.075628][ T960] CPU: 0 UID: 0 PID: 960 Comm: syz.0.200 Not tainted syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 67.075671][ T960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.075683][ T960] Call Trace: [ 67.075690][ T960] [ 67.075697][ T960] __dump_stack+0x21/0x30 [ 67.075726][ T960] dump_stack_lvl+0x140/0x1c0 [ 67.075750][ T960] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.075776][ T960] dump_stack+0x19/0x20 [ 67.075801][ T960] should_fail_ex+0x3d7/0x530 [ 67.075818][ T960] should_failslab+0xac/0x100 [ 67.075839][ T960] kmem_cache_alloc_noprof+0x42/0x410 [ 67.075856][ T960] ? getname_flags+0xc5/0x700 [ 67.075874][ T960] ? __kasan_check_write+0x18/0x20 [ 67.075892][ T960] getname_flags+0xc5/0x700 [ 67.075910][ T960] user_path_at+0x2b/0x60 [ 67.075930][ T960] path_listxattr+0xad/0x1d0 [ 67.075949][ T960] ? getxattr+0x250/0x250 [ 67.075968][ T960] ? __kasan_check_read+0x15/0x20 [ 67.075984][ T960] __x64_sys_llistxattr+0x81/0x90 [ 67.076001][ T960] x64_sys_call+0x2cb0/0x2ee0 [ 67.076018][ T960] do_syscall_64+0x57/0xf0 [ 67.076039][ T960] ? clear_bhb_loop+0x50/0xa0 [ 67.076059][ T960] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.076079][ T960] RIP: 0033:0x7f8684f9ce59 [ 67.076094][ T960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.076108][ T960] RSP: 002b:00007f8685da1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 67.076127][ T960] RAX: ffffffffffffffda RBX: 00007f8685215fa0 RCX: 00007f8684f9ce59 [ 67.076140][ T960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 67.076151][ T960] RBP: 00007f8685da1090 R08: 0000000000000000 R09: 0000000000000000 [ 67.076163][ T960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.076173][ T960] R13: 00007f8685216038 R14: 00007f8685215fa0 R15: 00007ffd787177f8 [ 67.076188][ T960] [ 67.236927][ T360] usb 3-1: USB disconnect, device number 14 [ 67.319116][ T973] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 67.353210][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 67.523069][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 67.529963][ T46] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 67.538469][ T46] usb 2-1: config 0 has no interface number 0 [ 67.545057][ T46] usb 2-1: config 0 interface 184 has no altsetting 0 [ 67.553521][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 67.562741][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.570865][ T46] usb 2-1: Product: syz [ 67.575444][ T46] usb 2-1: Manufacturer: syz [ 67.580080][ T46] usb 2-1: SerialNumber: syz [ 67.589946][ T46] usb 2-1: config 0 descriptor?? [ 67.596836][ T46] smsc75xx v1.0.0 [ 67.603675][ T365] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 67.742969][ T365] usb 1-1: device descriptor read/64, error -71 [ 67.760514][ T36] audit: type=1400 audit(1779283937.878:246): avc: denied { map } for pid=981 comm="syz.2.206" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.783388][ T36] audit: type=1400 audit(1779283937.878:247): avc: denied { execute } for pid=981 comm="syz.2.206" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.983004][ T365] usb 1-1: device descriptor read/64, error -71 [ 68.153004][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 68.208949][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 68.219876][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 68.232958][ T365] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 68.312950][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 68.319439][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.327784][ T9] usb 3-1: config 0 has no interface number 0 [ 68.335615][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.344752][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.352866][ T9] usb 3-1: Product: syz [ 68.357103][ T9] usb 3-1: Manufacturer: syz [ 68.361727][ T9] usb 3-1: SerialNumber: syz [ 68.366495][ T365] usb 1-1: device descriptor read/64, error -71 [ 68.373848][ T9] usb 3-1: config 0 descriptor?? [ 68.379752][ T9] smsc95xx v2.0.0 [ 68.429833][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 68.440766][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 68.450568][ T46] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 68.460178][ T46] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 68.612939][ T365] usb 1-1: device descriptor read/64, error -71 [ 68.852940][ T365] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 68.874105][ T365] usb 1-1: device descriptor read/8, error -71 [ 69.004123][ T365] usb 1-1: device descriptor read/8, error -71 [ 69.044364][ T46] usb 4-1: USB disconnect, device number 24 [ 69.242983][ T365] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 69.263962][ T365] usb 1-1: device descriptor read/8, error -71 [ 69.372989][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 69.403981][ T365] usb 1-1: device descriptor read/8, error -71 [ 69.513298][ T31] usb 1-1: USB disconnect, device number 19 [ 69.523053][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 69.530079][ T46] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 69.538380][ T46] usb 4-1: config 0 has no interface number 0 [ 69.544721][ T46] usb 4-1: config 0 interface 184 has no altsetting 0 [ 69.553040][ T46] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 69.562124][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.570168][ T46] usb 4-1: Product: syz [ 69.574406][ T46] usb 4-1: Manufacturer: syz [ 69.579042][ T46] usb 4-1: SerialNumber: syz [ 69.584584][ T46] usb 4-1: config 0 descriptor?? [ 69.593644][ T46] smsc75xx v1.0.0 [ 69.603226][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 69.614166][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 69.623529][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 69.634487][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 69.645766][ T9] usb 3-1: USB disconnect, device number 15 [ 69.652974][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 69.782939][ T31] usb 1-1: device descriptor read/64, error -71 [ 70.010605][ T67] usb 2-1: USB disconnect, device number 16 [ 70.032970][ T31] usb 1-1: device descriptor read/64, error -71 [ 70.048013][ T36] audit: type=1400 audit(1796061385.168:248): avc: denied { getopt } for pid=994 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.192597][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 70.203636][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.272954][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 70.372978][ T360] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 70.392990][ T67] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 70.523107][ T360] usb 3-1: Using ep0 maxpacket: 32 [ 70.529340][ T360] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.537742][ T360] usb 3-1: config 0 has no interface number 0 [ 70.543997][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 70.549246][ T360] usb 3-1: config 0 interface 184 has no altsetting 0 [ 70.557184][ T67] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.565529][ T67] usb 2-1: config 0 has no interface number 0 [ 70.572100][ T67] usb 2-1: config 0 interface 184 has no altsetting 0 [ 70.579491][ T360] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.588687][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.596873][ T360] usb 3-1: Product: syz [ 70.601128][ T360] usb 3-1: Manufacturer: syz [ 70.612949][ T67] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.622135][ T360] usb 3-1: SerialNumber: syz [ 70.633256][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.641294][ T67] usb 2-1: Product: syz [ 70.652220][ T360] usb 3-1: config 0 descriptor?? [ 70.657402][ T67] usb 2-1: Manufacturer: syz [ 70.662121][ T67] usb 2-1: SerialNumber: syz [ 70.667362][ T360] smsc75xx v1.0.0 [ 70.671967][ T67] usb 2-1: config 0 descriptor?? [ 70.677922][ T67] smsc75xx v1.0.0 [ 70.822495][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 70.833382][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 70.843323][ T46] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 70.852816][ T46] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 70.902944][ T31] usb 1-1: device descriptor read/64, error -71 [ 71.163139][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 71.169786][ T31] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 71.178026][ T31] usb 1-1: config 0 has no interface number 0 [ 71.184214][ T31] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 71.194274][ T31] usb 1-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.206619][ T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 71.215759][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.223810][ T31] usb 1-1: Product: syz [ 71.227987][ T31] usb 1-1: Manufacturer: syz [ 71.232601][ T31] usb 1-1: SerialNumber: syz [ 71.238122][ T31] usb 1-1: config 0 descriptor?? [ 71.243533][ T1008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.251421][ T31] asix 1-1:0.34: probe with driver asix failed with error -22 [ 71.270007][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 71.281001][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.290312][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 71.301281][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 72.090045][ T9] usb 4-1: USB disconnect, device number 25 [ 72.111756][ T36] audit: type=1400 audit(1796061387.228:249): avc: denied { ioctl } for pid=1013 comm="syz.3.218" path="socket:[10309]" dev="sockfs" ino=10309 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.136727][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 72.147833][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 72.157755][ T67] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 72.167467][ T67] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 72.472983][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 72.558475][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 72.569409][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 72.579154][ T360] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 72.588688][ T360] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 72.622977][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 72.629565][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.638696][ T9] usb 4-1: config 0 has no interface number 0 [ 72.644879][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 72.653363][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.662436][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.670500][ T9] usb 4-1: Product: syz [ 72.674783][ T9] usb 4-1: Manufacturer: syz [ 72.679403][ T9] usb 4-1: SerialNumber: syz [ 72.691482][ T9] usb 4-1: config 0 descriptor?? [ 72.697416][ T9] smsc75xx v1.0.0 [ 73.299660][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 73.310617][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 73.348242][ T365] usb 2-1: USB disconnect, device number 17 [ 73.520552][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 73.533345][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 73.535747][ T360] usb 1-1: USB disconnect, device number 21 [ 73.543146][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 73.559433][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 73.702988][ T365] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 73.722696][ T9] usb 4-1: USB disconnect, device number 26 [ 73.768007][ T360] usb 3-1: USB disconnect, device number 16 [ 73.862941][ T365] usb 2-1: Using ep0 maxpacket: 16 [ 73.873743][ T365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.884217][ T365] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.899412][ T365] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 73.908854][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.917940][ T365] usb 2-1: config 0 descriptor?? [ 73.932216][ T365] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 74.049778][ T36] audit: type=1400 audit(1796061389.168:250): avc: denied { create } for pid=1037 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.070824][ T36] audit: type=1400 audit(1796061389.188:251): avc: denied { write } for pid=1037 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.091686][ T36] audit: type=1400 audit(1796061389.188:252): avc: denied { read } for pid=1037 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.111951][ T36] audit: type=1400 audit(1796061389.198:253): avc: denied { read } for pid=1037 comm="syz.2.225" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.134585][ T36] audit: type=1400 audit(1796061389.198:254): avc: denied { open } for pid=1037 comm="syz.2.225" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.157771][ T36] audit: type=1400 audit(1796061389.198:255): avc: denied { ioctl } for pid=1037 comm="syz.2.225" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.182444][ T67] usb 2-1: USB disconnect, device number 18 [ 74.187423][ T36] audit: type=1400 audit(1796061389.268:256): avc: denied { create } for pid=1022 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.208410][ T36] audit: type=1400 audit(1796061389.268:257): avc: denied { setopt } for pid=1022 comm="syz.1.220" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.228796][ T36] audit: type=1400 audit(1796061389.268:258): avc: denied { ioctl } for pid=1022 comm="syz.1.220" path="socket:[10342]" dev="sockfs" ino=10342 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.259267][ T36] audit: type=1400 audit(1796061389.278:259): avc: denied { read } for pid=1022 comm="syz.1.220" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.423402][ T1044] capability: warning: `syz.0.227' uses deprecated v2 capabilities in a way that may be insecure [ 74.523684][ T365] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 74.678413][ T365] usb 4-1: Using ep0 maxpacket: 32 [ 74.693120][ T365] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 74.701388][ T365] usb 4-1: config 0 has no interface number 0 [ 74.712989][ T365] usb 4-1: config 0 interface 184 has no altsetting 0 [ 74.728460][ T365] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 74.742990][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.751042][ T365] usb 4-1: Product: syz [ 74.755290][ T365] usb 4-1: Manufacturer: syz [ 74.759924][ T365] usb 4-1: SerialNumber: syz [ 74.771750][ T365] usb 4-1: config 0 descriptor?? [ 74.783623][ T365] smsc75xx v1.0.0 [ 75.102928][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 75.245492][ T1062] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 75.272919][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 75.278666][ T311] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 75.288751][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 75.297031][ T9] usb 3-1: config 0 has no interface number 0 [ 75.307167][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 75.322935][ T9] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.337146][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 75.346592][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.356690][ T9] usb 3-1: Product: syz [ 75.366787][ T9] usb 3-1: Manufacturer: syz [ 75.376915][ T9] usb 3-1: SerialNumber: syz [ 75.389237][ T9] usb 3-1: config 0 descriptor?? [ 75.394470][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 75.406827][ T1048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 75.414521][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 75.415167][ T9] asix 3-1:0.34: probe with driver asix failed with error -22 [ 75.452943][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 75.463011][ T311] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 75.471572][ T311] usb 2-1: config 0 has no interface number 0 [ 75.478579][ T311] usb 2-1: config 0 interface 184 has no altsetting 0 [ 75.487177][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 75.496590][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.504911][ T311] usb 2-1: Product: syz [ 75.509301][ T311] usb 2-1: Manufacturer: syz [ 75.514255][ T311] usb 2-1: SerialNumber: syz [ 75.519951][ T311] usb 2-1: config 0 descriptor?? [ 75.526008][ T311] smsc75xx v1.0.0 [ 75.682919][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 75.834039][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 75.842550][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 75.853033][ T9] usb 1-1: config 220 has no interface number 2 [ 75.859365][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 75.872641][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 75.879595][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 75.886531][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 75.894704][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 75.903863][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.911921][ T9] usb 1-1: Product: syz [ 75.916151][ T9] usb 1-1: Manufacturer: syz [ 75.920782][ T9] usb 1-1: SerialNumber: syz [ 76.033694][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 76.044914][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 76.054631][ T365] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 76.064169][ T365] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 76.129209][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 76.140773][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.151141][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 76.157684][ T9] usb 1-1: No valid video chain found. [ 76.163370][ T9] usb 1-1: selecting invalid altsetting 0 [ 76.172189][ T9] usb 1-1: USB disconnect, device number 22 [ 76.351359][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 76.362297][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 76.372198][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 76.381825][ T311] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 76.391214][ T311] usb 2-1: USB disconnect, device number 19 [ 76.675870][ T297] ------------[ cut here ]------------ [ 76.681381][ T297] WARNING: CPU: 0 PID: 297 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 76.689419][ T297] Modules linked in: [ 76.693976][ T297] CPU: 0 UID: 0 PID: 297 Comm: syz-executor Not tainted syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 76.705747][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.716028][ T297] RIP: 0010:drop_nlink+0xce/0x110 [ 76.721161][ T297] Code: 04 00 00 be 08 00 00 00 e8 cf 12 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 83 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 76.740842][ T297] RSP: 0018:ffffc9000b64fc40 EFLAGS: 00010293 [ 76.747085][ T297] RAX: ffffffff81f23fae RBX: ffff888121d61040 RCX: ffff888102b08000 [ 76.755133][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.763184][ T297] RBP: ffffc9000b64fc68 R08: 0000000000000003 R09: 0000000000000004 [ 76.771180][ T297] R10: dffffc0000000000 R11: fffff520016c9f80 R12: dffffc0000000000 [ 76.779214][ T297] R13: 1ffff110243ac211 R14: ffff888121d61088 R15: 0000000000000000 [ 76.787262][ T297] FS: 000055555b9f8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 76.796360][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.803073][ T297] CR2: 000055555ba23998 CR3: 0000000128888000 CR4: 00000000003526b0 [ 76.811075][ T297] Call Trace: [ 76.814403][ T297] [ 76.817394][ T297] simple_rmdir+0x153/0x260 [ 76.821943][ T297] vfs_rmdir+0x3e0/0x560 [ 76.826270][ T297] incfs_kill_sb+0x109/0x230 [ 76.830892][ T297] deactivate_locked_super+0xd8/0x2a0 [ 76.836331][ T297] deactivate_super+0xb8/0xe0 [ 76.841136][ T297] cleanup_mnt+0x406/0x4a0 [ 76.845617][ T297] __cleanup_mnt+0x1d/0x40 [ 76.850072][ T297] task_work_run+0x1e5/0x260 [ 76.854742][ T297] ? __cfi_task_work_run+0x10/0x10 [ 76.859909][ T297] ? __x64_sys_umount+0x12e/0x180 [ 76.865026][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 76.870508][ T297] ? __kasan_check_read+0x15/0x20 [ 76.875606][ T297] resume_user_mode_work+0x35/0x50 [ 76.880855][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 76.886429][ T297] do_syscall_64+0x63/0xf0 [ 76.890987][ T297] ? clear_bhb_loop+0x50/0xa0 [ 76.895762][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.901695][ T297] RIP: 0033:0x7f8684f9e097 [ 76.906165][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 76.925846][ T297] RSP: 002b:00007ffd78715978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.934324][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8684f9e097 [ 76.942361][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd78715a30 [ 76.950415][ T297] RBP: 00007ffd78715a30 R08: 00007ffd78716a30 R09: 00000000ffffffff [ 76.958547][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd78716b20 [ 76.966690][ T297] R13: 00007f86850321ca R14: 0000000000012b70 R15: 00007ffd78717bf0 [ 76.974825][ T297] [ 76.977866][ T297] ---[ end trace 0000000000000000 ]--- [ 76.983748][ T297] ================================================================== [ 76.991846][ T297] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 76.998113][ T297] Write of size 4 at addr 0000000000000168 by task syz-executor/297 [ 77.006099][ T297] [ 77.008436][ T297] CPU: 0 UID: 0 PID: 297 Comm: syz-executor Tainted: G W syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 77.008464][ T297] Tainted: [W]=WARN [ 77.008470][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.008481][ T297] Call Trace: [ 77.008487][ T297] [ 77.008495][ T297] __dump_stack+0x21/0x30 [ 77.008524][ T297] dump_stack_lvl+0x140/0x1c0 [ 77.008548][ T297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.008573][ T297] ? preempt_schedule_common+0x2d/0x60 [ 77.008595][ T297] print_report+0x3d/0x70 [ 77.008618][ T297] kasan_report+0x162/0x1a0 [ 77.008640][ T297] ? ihold+0x24/0x70 [ 77.008660][ T297] ? _raw_spin_unlock+0x5c/0x60 [ 77.008676][ T297] ? ihold+0x24/0x70 [ 77.008695][ T297] kasan_check_range+0x25a/0x2b0 [ 77.008717][ T297] __kasan_check_write+0x18/0x20 [ 77.008734][ T297] ihold+0x24/0x70 [ 77.008752][ T297] vfs_rmdir+0x26a/0x560 [ 77.008776][ T297] incfs_kill_sb+0x109/0x230 [ 77.008794][ T297] deactivate_locked_super+0xd8/0x2a0 [ 77.008818][ T297] deactivate_super+0xb8/0xe0 [ 77.008841][ T297] cleanup_mnt+0x406/0x4a0 [ 77.008862][ T297] __cleanup_mnt+0x1d/0x40 [ 77.008883][ T297] task_work_run+0x1e5/0x260 [ 77.008906][ T297] ? __cfi_task_work_run+0x10/0x10 [ 77.008928][ T297] ? __x64_sys_umount+0x12e/0x180 [ 77.008954][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 77.008980][ T297] ? __kasan_check_read+0x15/0x20 [ 77.008997][ T297] resume_user_mode_work+0x35/0x50 [ 77.009013][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 77.009037][ T297] do_syscall_64+0x63/0xf0 [ 77.009054][ T297] ? clear_bhb_loop+0x50/0xa0 [ 77.009074][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.009094][ T297] RIP: 0033:0x7f8684f9e097 [ 77.009108][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.009123][ T297] RSP: 002b:00007ffd78715978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.009142][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8684f9e097 [ 77.009154][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd78715a30 [ 77.009165][ T297] RBP: 00007ffd78715a30 R08: 00007ffd78716a30 R09: 00000000ffffffff [ 77.009178][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd78716b20 [ 77.009189][ T297] R13: 00007f86850321ca R14: 0000000000012b70 R15: 00007ffd78717bf0 [ 77.009204][ T297] [ 77.009210][ T297] ================================================================== [ 77.259780][ T297] Disabling lock debugging due to kernel taint [ 77.266024][ T297] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 77.273856][ T297] #PF: supervisor write access in kernel mode [ 77.279969][ T297] #PF: error_code(0x0002) - not-present page [ 77.285978][ T297] PGD 800000010db52067 P4D 800000010db52067 PUD 0 [ 77.292535][ T297] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 77.298642][ T297] CPU: 0 UID: 0 PID: 297 Comm: syz-executor Tainted: G B W syzkaller #0 3e7fae14ba6b85f6920b1ae189ed61b1234f6a84 [ 77.306974][ T360] usb 4-1: USB disconnect, device number 27 [ 77.311791][ T297] Tainted: [B]=BAD_PAGE, [W]=WARN [ 77.322820][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.332916][ T297] RIP: 0010:ihold+0x2a/0x70 [ 77.337480][ T297] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 77.357291][ T297] RSP: 0018:ffffc9000b64fca0 EFLAGS: 00010246 [ 77.363387][ T297] RAX: ffff888102b08000 RBX: 0000000000000000 RCX: ffff888102b08000 [ 77.371408][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.379424][ T297] RBP: ffffc9000b64fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 77.387419][ T297] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888121d6104c [ 77.395508][ T297] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 77.403577][ T297] FS: 000055555b9f8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 77.412518][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.419114][ T297] CR2: 0000000000000168 CR3: 0000000128888000 CR4: 00000000003526b0 [ 77.427117][ T297] Call Trace: [ 77.430399][ T297] [ 77.433345][ T297] vfs_rmdir+0x26a/0x560 [ 77.437620][ T297] incfs_kill_sb+0x109/0x230 [ 77.442220][ T297] deactivate_locked_super+0xd8/0x2a0 [ 77.447631][ T297] deactivate_super+0xb8/0xe0 [ 77.452326][ T297] cleanup_mnt+0x406/0x4a0 [ 77.456751][ T297] __cleanup_mnt+0x1d/0x40 [ 77.461180][ T297] task_work_run+0x1e5/0x260 [ 77.465781][ T297] ? __cfi_task_work_run+0x10/0x10 [ 77.470921][ T297] ? __x64_sys_umount+0x12e/0x180 [ 77.476069][ T297] ? __cfi___x64_sys_umount+0x10/0x10 [ 77.481463][ T297] ? __kasan_check_read+0x15/0x20 [ 77.486519][ T297] resume_user_mode_work+0x35/0x50 [ 77.491636][ T297] syscall_exit_to_user_mode+0x63/0xb0 [ 77.497108][ T297] do_syscall_64+0x63/0xf0 [ 77.501554][ T297] ? clear_bhb_loop+0x50/0xa0 [ 77.506244][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.512184][ T297] RIP: 0033:0x7f8684f9e097 [ 77.516610][ T297] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.536224][ T297] RSP: 002b:00007ffd78715978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.544648][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8684f9e097 [ 77.552716][ T297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd78715a30 [ 77.560694][ T297] RBP: 00007ffd78715a30 R08: 00007ffd78716a30 R09: 00000000ffffffff [ 77.568676][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd78716b20 [ 77.576697][ T297] R13: 00007f86850321ca R14: 0000000000012b70 R15: 00007ffd78717bf0 [ 77.584786][ T297] [ 77.587809][ T297] Modules linked in: [ 77.591725][ T297] CR2: 0000000000000168 [ 77.595881][ T297] ---[ end trace 0000000000000000 ]--- [ 77.601376][ T297] RIP: 0010:ihold+0x2a/0x70 [ 77.605901][ T297] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 7a 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 09 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 77.625522][ T297] RSP: 0018:ffffc9000b64fca0 EFLAGS: 00010246 [ 77.631599][ T297] RAX: ffff888102b08000 RBX: 0000000000000000 RCX: ffff888102b08000 [ 77.639858][ T297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.647843][ T297] RBP: ffffc9000b64fcb0 R08: ffffffff88bba947 R09: 1ffffffff1177528 [ 77.656108][ T297] R10: dffffc0000000000 R11: fffffbfff1177529 R12: ffff888121d6104c [ 77.664106][ T297] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 77.672088][ T297] FS: 000055555b9f8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 77.681028][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.687646][ T297] CR2: 0000000000000168 CR3: 0000000128888000 CR4: 00000000003526b0 [ 77.695754][ T297] Kernel panic - not syncing: Fatal exception [ 77.702425][ T297] Kernel Offset: disabled [ 77.706758][ T297] Rebooting in 86400 seconds..