last executing test programs: 7.017389628s ago: executing program 2 (id=800): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x138, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x124, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001980)={0xfc, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000280)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000480)=[{&(0x7f0000000500)=""/100, 0x321}, {&(0x7f0000000580)=""/85, 0x42}, {&(0x7f0000000600)=""/4096, 0x197}, {&(0x7f0000001600)=""/106, 0x659}, {&(0x7f0000001680)=""/73, 0xd}, {&(0x7f0000001700)=""/77, 0x69}, {&(0x7f0000001780)=""/141, 0xc4}, {&(0x7f0000001840)=""/17, 0x1d8}], 0x21, &(0x7f0000001880)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000001940)={0x77359400}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x1000008, 0x0) 6.94018382s ago: executing program 2 (id=801): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x240000c4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040044) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r5 = accept$inet(r0, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f00000006c0)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x7c, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 'veth0_to_bridge\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r6, &(0x7f0000000780)='./file0\x00') ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000007c0)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffe}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x60}}, 0x40000) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000980)=@gcm_256={{0x303}, "5335f55fe6b48d55", "823ce7f9377ddf139478de2bc5d2b800c0a9be1148694e08a308fc46a39fa08c", "14918924", "4695fd6466baea8e"}, 0x38) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x2020) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r9, 0x40089413, &(0x7f0000002a40)=0x1) sendto$inet(r9, &(0x7f0000002a80)="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", 0x1000, 0x804, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x28, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x67}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000003b80)={0xffffffffffffffff, 0xc0}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000003bc0), &(0x7f0000003c00)=0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2, 0x12, r8, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000003dc0)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c80)={0xe0, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x156}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4046095) sendfile(r5, r9, &(0x7f0000003e00)=0x8, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000003e40), 0x80200, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd28, 0x25dfdbff, 0x6, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4040) gettid() 6.93276365s ago: executing program 2 (id=802): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0xfffffffffffffd81, &(0x7f0000000100)={0x20, 0x11, 0xff56, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xb00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0xc0000102, 0x0, 0x80}]}) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) 4.290847835s ago: executing program 2 (id=813): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x95, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x64c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x66, 0x0, 0xfc}}}}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0xd0, 0x0, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1029}}, {0x0, 0x0}]}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x9, 0xdb, {0xdb, 0x2, "b99af59b8fd62ca665301d29781ee5fbcc4eb1cea8cc0484b707fff30e64e79cef7731f1ad74756f09ed4f7dc1cf8798bc854a683410b86d128f65da3411ee9c23dda40eb228be0d17fd843f5f42ffa27873d043821326f48c8c9880c2bb379a445ee9793cdbe63e1eea483483588a6746f26f786703cf260dfdb030ebb50246f29b9253f61f7b6f812de1a6496b2b4cb4aa70d85f090c4ca7fa27d4a9483344a23c3dab1d995a236e2b7e710efd4297c8c80ced6db40568db6b4a9ff3cb9a44bee8a6037b0aa677e8d1720fa30d2ed32f9116c7819c69f8b9"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x9, '$'}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x7, "1374"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xc, "0e9da90e"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0xb22}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x18, 0x3c, "3ae692453fc5e43ceffcb51898043fe695f781e2f76f2c9eaa7dce464d4e1ad0144ed94e5a4bb5986de01ab30f105261f6436ab428acd40e5b48d363"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe1}, &(0x7f0000000400)={0x20, 0x1, 0xeb, "6f05f2164fd456311f806ee6ea014378659bfd35f4753688b914587b2d037e77da1f1c003e46f4cb15dd038319ed45a030ecaeaa8063ec33bc24b121d97ddf206431550751f78991b0abdd3fa54e6192a2c5badcb3ef4421bd1ac41e2c9452e994bbd658841a5160d0d182c8dc1ca3a85cfcc08aec3e8c7ccf555b7f6d3ef3726fea558aadce46c20c61425fca65940e700e7fe13121077625c6894ce1f79f41a60c1ed7ed587bca8e51409d0e3e5352a407079331ebb68a9a38f0ef2190ca73ee0aea42782fbcfb59a3dc404f3591cd0de46387a8114c394be17a6417c4e1dc244776797ff778d2699a94"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x10}}) 4.290594265s ago: executing program 3 (id=814): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x161) (rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x204a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) rmdir(&(0x7f00000000c0)='./cgroup/../file0/file0\x00') 4.279086215s ago: executing program 3 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000140)={0x10000a, 0xe4, 0x40000}, 0x20) rmdir(&(0x7f0000000100)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x42a01, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001800077bab092500090007000a0700000000000600003693", 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x25dfdbfd, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x70bd2a, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c494) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYBLOB="c5a748c3b5eca210e44e6ca6fcbc0000f862f4bfbbedb43455bbe031ff3c44fec7d7db061ad1734ff81e4386fa5d2a18e79506bfea591697bf97645de463e51e4da1e28aa47026e80084d6a05f6e544e9a9006be"]) getuid() ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000300)={0x2, 'vlan1\x00', {0x6}, 0x600}) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 4.160087708s ago: executing program 3 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x2c75, 0xfffd, 0x81, 0x200, 0x7, 0x0, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="f3410f1eea420f0748b805000000000000000f23c80f21f8350c0030000f23f80f21a6430f2158c4a3716a4100db0f01c5470f06c744240008bfb358c7442402bd440000c7442406000000000f01142466baf80cb87c491184ef66bafc0c66b85cfb66ef", 0x64}], 0x1, 0x41, 0x0, 0x0) r5 = dup3(r1, r1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x111}, 0x20000000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x2c75, 0xfffd, 0x81, 0x200, 0x7, 0x0, r3}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="f3410f1eea420f0748b805000000000000000f23c80f21f8350c0030000f23f80f21a6430f2158c4a3716a4100db0f01c5470f06c744240008bfb358c7442402bd440000c7442406000000000f01142466baf80cb87c491184ef66bafc0c66b85cfb66ef", 0x64}], 0x1, 0x41, 0x0, 0x0) (async) dup3(r1, r1, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x111}, 0x20000000) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 3.996837342s ago: executing program 3 (id=817): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x104000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) sendto$inet6(r3, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c) 3.995722662s ago: executing program 3 (id=818): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000546000/0x3000)=nil, 0x3000}, 0x2}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x6, "56b30d966b22"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.216196206s ago: executing program 2 (id=829): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendfile(r0, r0, 0x0, 0x4) (async) dup(r0) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.216011396s ago: executing program 2 (id=830): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000040)={0xa, 0x4, 0x1, 0x3, 0x2, [0x2, 0x6, 0x9, 0x3]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0xfd2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f00000001c0)=[{0x45, 0x0, 0x2, 0x8}, {0x35, 0x1, 0x0, 0x7fffffff}, {0x2, 0x4}, {0x6, 0x2, 0x0, 0x1ff}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000006c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.919178853s ago: executing program 0 (id=831): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000001010400000000000000000200000024"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000440)='./file0/../file0/../file0\x00', 0x800, &(0x7f0000000480)={0x1, 0x70, 0x100000}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.757109227s ago: executing program 0 (id=832): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) pwrite64(r1, &(0x7f0000000100)="6dd218aa8f7573e84aecc6b5b1e20bf7e3fa9c7f34d4ca063235bfb3c21dda5f6ce63e01cdb7ef248ce16b27a7ed9166e429d4caac1aed64900b04132a69096b08868f9d61b87ecd3e25f95eb1d6acc21c4962c3513efb0d74db6855bd304f67e4147f68d542c3dadca7e3edda910139809cddc6308e891461c3f7077a633aa36e51a79e9e36bebabcfcd22d7f51af3ac0b5da22ca924fd73148a2c26ab584be610c4ec50cf6d7571e361a965ece995f5d85769f92c84ee644b25588ecf9527ec4ab00d2ec8ca7fbc3d79600e3f8b842346d", 0xd2, 0x9) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x69, 0x8000, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3, &(0x7f0000000280)=[{0x3, 0xe, 0x1}, {0x7fffffffffffffff, 0x1, 0x67}, {0x10, 0x4, 0x1}, {0x1, 0x9, 0x4}], 0x4, 0xbf10, 0x41, 0x0, 0x20, 0x10}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(r4, &(0x7f0000000380)="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", 0x1000, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001480)={r4, &(0x7f0000001380)='pagemap\x00', 0x2e00, &(0x7f00000013c0)={@align=0x80, {0x2, 0x8, 0x101, 0x10}}, 0x9c49, &(0x7f0000001400)={@_ha_fsid}, &(0x7f0000001440)=0xff}) r6 = openat2(r5, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x40000, 0x101, 0x4}, 0x18) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000015c0)={'ip6tnl0\x00', &(0x7f0000001540)={'syztnl1\x00', 0x0, 0x4, 0xd, 0xa, 0x7, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x80, 0x0, 0x69f0}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001600)={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd6, 0x7, 0x7, 0x100, 0x8000, 0x40008, r7}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) connect$inet6(r6, &(0x7f0000001680)={0xa, 0x4e21, 0x1, @mcast2, 0x7}, 0x1c) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x23583d0575ab6572}, 0x40040) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f00000017c0)) r8 = signalfd4(r5, &(0x7f0000001800)={[0x2]}, 0x8, 0x80800) r9 = syz_io_uring_complete(0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r8) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f0000001b40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x21c, r10, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x43e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3e2c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4a1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc84}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x59e5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x404c011) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x40, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000001c80)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000001cc0)='syztnl1\x00', &(0x7f0000001d00)='./file0\x00', r8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001e80)={'erspan0\x00', &(0x7f0000001d40)={'tunl0\x00', r7, 0x8000, 0x80, 0x79, 0x2, {{0x39, 0x4, 0x2, 0x2b, 0xe4, 0x64, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @loopback, {[@lsrr={0x83, 0x1b, 0x8d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0x4, [{@private=0xa010101, 0x99d}, {@local, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xf099}, {@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0xa8}, {@private=0xa010101, 0x7fffffff}, {@loopback, 0xc}, {@local, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0xc, [{@loopback, 0x40}, {@multicast1, 0x8}, {@private=0xa010101}, {@multicast1, 0x40}, {@rand_addr=0x64010101, 0xfd50}, {@loopback, 0x72e8}]}, @end, @cipso={0x86, 0x19, 0x3, [{0x5, 0xb, "76cfedcb31130b59e4"}, {0x6, 0x8, "320dfc399329"}]}, @lsrr={0x83, 0x13, 0x65, [@rand_addr=0x64010101, @private=0xa010100, @multicast1, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000001fc0)={0x232cee0d, 0x7fffffff, 0xc, 0x8, 0x4, "bdb392239a4a79990b0623a42ce506dfceadcf", 0x5, 0x1}) readlink(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)=""/116, 0x74) 1.717366229s ago: executing program 0 (id=833): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000140)=0x7ff, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x40, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000140)=0x7ff, 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r6) (async) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x40, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) (async) 1.712222708s ago: executing program 0 (id=834): r0 = memfd_create(&(0x7f0000000480)='/dev/sda1\x00\xfb\x97Bp\xa9\x83\x7f\x99EY\xe5\xc1\xe7\x05\xf1\xdfA\x95\xfd\xfe\x8e\x89\xad\x1f\xfe\xde\x01\xcb.l\x9d\xb7R\x93\xf6%\xb5G\xc0QQ\\1\xaf\xdc\x17\xf4\xe6\x06\xf1e\x80\xc9\xb8%\x9f9\x86d\x8b\xc0{\x81\t\xc4\xb3\xb7\x13\xcc\xa7,\x13\x7f\x87\xa6\xf9\x83,\x8f\xda[ \xa2X\x1f\x93\x97\x8d\xb9@\x9cU\xb5\xa1(\xd0\x88\xa6\xe3X\x92qV\xc1\xb0)8\v\xb1\xfe^K;\x87s\xb9T\xd1\xfdbo\x86\xb7|\xc3H&U,n', 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000003c0), 0xffffffff80000001, 0x1680a2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_test', 0x82802, 0x1f8) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000540)={r3, 0x1000, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf90000000900030000000000ea6acc96e3a2503dc3bd30e77d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0x8, 0xa]}}) umount2(&(0x7f0000000680)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000006c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1, 0xfffc, 0x7895}, 0x789d, 0xbef, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd}]}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r11, &(0x7f0000000740)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x1b, 0x0, 0xfee00c00}, {0x832, 0x0, 0xfffffffffffffffd}]}) r12 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/251, 0xfb, 0x1, &(0x7f00000001c0)=""/106, 0x6a}, &(0x7f0000000280)=0x40) ioctl$FIBMAP(r1, 0x2284, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040)=[{0x78, 0x0, 0x0, {0x81b1, 0xfffff000, 0x1}}], 0x1, 0x20, 0x4, 0x8}) 1.688152309s ago: executing program 0 (id=835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009003610ef171e7206de01020301090212000100000000090400"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0xe, 0x0, &(0x7f0000000000)) fcntl$getown(r0, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009003610ef171e7206de01020301090212000100000000090400"], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$sock_int(r1, 0x1, 0xe, 0x0, &(0x7f0000000000)) (async) fcntl$getown(r0, 0x9) (async) 825.19905ms ago: executing program 1 (id=839): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffb000/0x3000)=nil}) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 814.61062ms ago: executing program 1 (id=840): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x0, 0x3}, {0x1d, 0x0, 0x6, 0x1}]}) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x559, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000009c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000a00)={0x2, 0x0, [{0x1b, 0x0, 0xfee00c00}, {0x832, 0x0, 0xfffffffffffffffd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x61) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@debug}]}}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000000)={0xffffffffffffaa72, 0x5, 0x80000000}) 517.221208ms ago: executing program 0 (id=841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000700)=""/256}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x3f6, 0x10, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x20004100) r4 = userfaultfd(0x80001) recvfrom(r3, &(0x7f0000000880)=""/4096, 0x1000, 0x60, &(0x7f0000001880)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100060000000000040005000000000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="100003000000000020"], 0x34, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x184, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xa}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xf}, @ETHTOOL_A_LINKMODES_OURS={0x150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "b6ad577c6447c857e95b9f415a5d4fd98f8dbb7d9a79184afe78bb723c979848c33d20286511d62b4fce3d620fef8cd067b5df5c06945383169b3fdd09e0be7bf2d5d2682109fc2ad2067089cbaf9eb50ccbd9bd1d2031459181aaecb541e37b3d2792356873a434b4d18786b592314ccd38c160037e5c04fab6488944bf2d7be832d0bc0a5502177528c9f73a84853aa7e96abd0df52d4bdbf4aa05a45acc"}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "14268e71d6893bc1d84e9a92a9ce6c2b365516932cda989dfd82985237f6f94ba7d204df01360b47403184e562b867b8970b9a2e4f4c501b085ced1fa3276c6b23095d53dda3af2b681c6940af60a1a57d2be1170be6d01fa07af0edd1c35386d3ad917428b4a724ca7dc41b2c5d31631b63e3bd09def2acc4d4f11dae575b92cfda3b27daeb86329b0d03092c1a734e26e28a1bd93f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 380.735071ms ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) syz_usb_connect$midi(0x4, 0x72, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x582, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x3, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x10, 0x3, [], [{{0x9, 0x5, 0xf, 0x1, 0x200, 0x3, 0x8, 0xa, {0x11, 0x25, 0x1, 0xd, "eb416e6b407715c11cc15890e9"}}}, {{0x9, 0x5, 0x7, 0x10, 0x4d1ffbe7c875bf98, 0x4, 0x5, 0xcf, {0xb, 0x25, 0x1, 0x7, "68563551c9817d"}}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x3, 0x66, 0xff, {0xa, 0x25, 0x1, 0x6, "171d5876baef"}}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x1, 0x80, 0x8, {0x4}}}]}}}}}]}}, 0x0) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000700)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70617468") ioctl(r0, 0xc138fd04, &(0x7f0000000740)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d70") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x20, 0x2, 0x2, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="c51129bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x401}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000851}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c8e000095cec8f5ceb510aba3033b45da0ea566c6de5efa29b82c3af479ae1bbe75599463c21d22fc12932346036aacbffdbbd2ee6c074cf0cc30f7b387bed4fc19e74017abbb23da2cb9041ed3fe726e2fcd8135a261f4a7c33b65dae7776a1632e6a7d1ca9562baf9cb38f01420e51ee060e7a8", @ANYRES8=r4, @ANYBLOB="cf042bbd7000fcdbdf251200000008000300", @ANYRES32=r9, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) 196.597896ms ago: executing program 1 (id=843): r0 = memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '#! '}, {0x20, '%]]\xbc@'}, {0x20, '\''}, {0x20, '[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_'}, {0x20, '#! '}], 0xa, "b456e398f9c3cc76932008abaec766f1d905319ff23bd5269e1a15e02b93472540c6bb5da9dfea967b6943f37ab3f4f0e15d57c173ae7529f7d1819a704cb4a7d21d84bca4cf8b748718943e3d8223f361f45d5e250401951fc6f53f93e009b3824513c32b0eb1412fa99e008f0547f1"}, 0x332) pwrite64(r0, &(0x7f0000000300)="078b7b7afffbd891fa10928a4b401bc5c42432f2c62237ffc8ee5d8dd1fe23223cea3e138abe9953655805b4788252bb0467297a6f46c8d9c66f8d3a4ee6149403ddec3cf384d0a52ab8a2a8552f369e97c2218e4e5e7bf7ac5f24f3328181a196b8ce937a633e7ca1bfe44b356e5309", 0x70, 0x2) execveat(r0, &(0x7f0000000380)='\x00', 0x0, 0x0, 0x1000) r2 = memfd_secret(0x0) fchmod(r2, 0x53) 139.813877ms ago: executing program 1 (id=844): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0xc2f, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x190ec) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) 37.148459ms ago: executing program 1 (id=845): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x1, 0x5}, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r2 = socket(0x2b, 0x2, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0x7f, 0x3}, @timestamp, @timestamp], 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_marker\x00', 0x1, 0x1a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000001040500000000000000000003eaff0f0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r5, &(0x7f0000000480), 0x1000) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfe, 0xfffffffe}]}, 0x10) 0s ago: executing program 1 (id=846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x4, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x2}, 0x1c) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000240)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setns(0xc9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f00000006c0)={'syzkaller1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r6, &(0x7f0000000700)={@void, @val={0x0, 0x0, 0x1c, 0x10, 0x14, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x3e, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x15}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "c8884ed45acb4e5bb1bca68f8e76efcb52d0e170c906b5a8c491409a20b7a69f", "c295a6d78c598bf8e5f2009c5ed6aa76de03e281925c9fb940535e2c3d309794a56b707fb5c0d550e53a54c348384ad6", "55b552eafe8c3b75a2478f11deb14dee4512324813f0349c2156be66", {"1605fc066f84d9777f07c8814becc93d", "13b21317e64dd5d40ceabb3c07f85894"}}}}}, 0xba) syz_ublk_setup_queues(r5, r3, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): nterval 1, probability 0, space 0, times 0 [ 87.845267][ T1912] CPU: 0 UID: 0 PID: 1912 Comm: syz.0.609 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 87.845304][ T1912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.845315][ T1912] Call Trace: [ 87.845321][ T1912] [ 87.845328][ T1912] __dump_stack+0x21/0x30 [ 87.845361][ T1912] dump_stack_lvl+0x140/0x1c0 [ 87.845439][ T1912] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.845465][ T1912] ? avc_has_perm_noaudit+0x289/0x360 [ 87.845485][ T1912] dump_stack+0x19/0x20 [ 87.845510][ T1912] should_fail_ex+0x3c2/0x510 [ 87.845528][ T1912] should_fail_alloc_page+0xec/0x110 [ 87.845548][ T1912] __alloc_pages_noprof+0x1c0/0x7e0 [ 87.845571][ T1912] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 87.845592][ T1912] ? selinux_file_open+0x46c/0x630 [ 87.845618][ T1912] pte_alloc_one+0x92/0x530 [ 87.845639][ T1912] ? __cfi_pte_alloc_one+0x10/0x10 [ 87.845660][ T1912] ? is_bpf_text_address+0x17b/0x1a0 [ 87.845683][ T1912] __pte_alloc+0x79/0x440 [ 87.845707][ T1912] ? __kernel_text_address+0x11/0x40 [ 87.845732][ T1912] ? unwind_get_return_address+0x51/0x90 [ 87.845757][ T1912] ? __cfi___pte_alloc+0x10/0x10 [ 87.845780][ T1912] ? arch_stack_walk+0x10a/0x170 [ 87.845801][ T1912] do_pte_missing+0x2b1a/0x4440 [ 87.845822][ T1912] ? _parse_integer+0x2e/0x40 [ 87.845847][ T1912] ? kstrtoull+0x13b/0x1e0 [ 87.845871][ T1912] ? pte_marker_clear+0x1b0/0x1b0 [ 87.845889][ T1912] ? kstrtouint_from_user+0x117/0x170 [ 87.845906][ T1912] ? __x64_sys_openat+0x13a/0x170 [ 87.845929][ T1912] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 87.845947][ T1912] ? selinux_file_permission+0x318/0xb60 [ 87.845973][ T1912] handle_mm_fault+0x1189/0x1ba0 [ 87.845994][ T1912] ? __cfi_handle_mm_fault+0x10/0x10 [ 87.846011][ T1912] ? lock_vma_under_rcu+0x4cf/0x590 [ 87.846031][ T1912] ? __kasan_check_write+0x18/0x20 [ 87.846057][ T1912] do_user_addr_fault+0x951/0x1230 [ 87.846075][ T1912] ? __cfi_ksys_write+0x10/0x10 [ 87.846101][ T1912] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 87.846127][ T1912] exc_page_fault+0x58/0xc0 [ 87.846150][ T1912] asm_exc_page_fault+0x2b/0x30 [ 87.846170][ T1912] RIP: 0033:0x7fdf62657236 [ 87.846187][ T1912] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 87.846204][ T1912] RSP: 002b:00007fdf636e2f60 EFLAGS: 00010206 [ 87.846223][ T1912] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000bfe000 [ 87.846237][ T1912] RDX: 00000000000025f5 RSI: 0000200000bfe000 RDI: 0000200000bff000 [ 87.846250][ T1912] RBP: 00007fdf62855040 R08: 0000000000000000 R09: 0000000000000004 [ 87.846263][ T1912] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000003ff000 [ 87.846275][ T1912] R13: 0000200000bfe000 R14: 00007fdf62a25fa0 R15: 0000000000000000 [ 87.846291][ T1912] [ 87.846352][ T1912] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 88.211749][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 88.211766][ T36] audit: type=1400 audit(1791807739.432:346): avc: denied { setcurrent } for pid=1915 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.259163][ T36] audit: type=1400 audit(1791807739.482:347): avc: denied { write } for pid=1917 comm="syz.0.611" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 88.285331][ T36] audit: type=1400 audit(1791807739.482:348): avc: denied { open } for pid=1917 comm="syz.0.611" path="/135/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 88.313207][ T36] audit: type=1400 audit(1791807739.482:349): avc: denied { mounton } for pid=1917 comm="syz.0.611" path="/135/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 88.532777][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 88.545541][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 88.546582][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 88.557632][ T66] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 88.577714][ T1927] netlink: 'syz.1.613': attribute type 33 has an invalid length. [ 88.587977][ T66] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 88.606577][ T66] usb 2-1: USB disconnect, device number 19 [ 88.716604][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 88.726265][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.738036][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 88.759416][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 88.776973][ T45] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 88.788411][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.801712][ T45] usb 4-1: Product: syz [ 88.807659][ T45] usb 4-1: Manufacturer: syz [ 88.814087][ T45] usb 4-1: SerialNumber: syz [ 89.198828][ T36] audit: type=1400 audit(1791807740.422:350): avc: denied { remount } for pid=1932 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.222909][ T1933] netlink: 80 bytes leftover after parsing attributes in process `syz.1.615'. [ 89.233748][ T1922] rust_binder: 1920:1922 error while translating object: ENOENT [ 89.243295][ T1934] rust_binder: 1920:1934 got transaction to invalid handle 3 [ 89.252110][ T1934] rust_binder: 1920:1934 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:950 [ 89.265243][ T1922] rust_binder: Failure in copy_transaction_data: ENOENT [ 89.265271][ T1922] rust_binder: 1920:1922 transaction call to 1920:0 failed ENOENT, code 0 size 96-24 line thread.rs:865 [ 89.274946][ T1937] input: syz0 as /devices/virtual/input/input8 [ 89.478258][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 89.486491][ T45] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 89.498315][ T45] usb 4-1: USB disconnect, device number 20 [ 89.566547][ T314] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 89.726505][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 89.735339][ T314] usb 2-1: no configurations [ 89.741026][ T314] usb 2-1: can't read configurations, error -22 [ 89.876473][ T314] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 89.975255][ T1949] FAULT_INJECTION: forcing a failure. [ 89.975255][ T1949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 89.992011][ T1949] CPU: 1 UID: 0 PID: 1949 Comm: syz.0.620 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 89.992040][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.992053][ T1949] Call Trace: [ 89.992059][ T1949] [ 89.992065][ T1949] __dump_stack+0x21/0x30 [ 89.992097][ T1949] dump_stack_lvl+0x140/0x1c0 [ 89.992123][ T1949] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.992146][ T1949] ? selinux_file_open+0x46c/0x630 [ 89.992170][ T1949] dump_stack+0x19/0x20 [ 89.992189][ T1949] should_fail_ex+0x3c2/0x510 [ 89.992204][ T1949] should_fail_alloc_page+0xec/0x110 [ 89.992219][ T1949] __alloc_pages_noprof+0x1c0/0x7e0 [ 89.992240][ T1949] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 89.992259][ T1949] ? _raw_spin_lock+0x92/0x120 [ 89.992283][ T1949] ? is_bpf_text_address+0x17b/0x1a0 [ 89.992305][ T1949] ? _raw_spin_unlock+0x45/0x60 [ 89.992330][ T1949] ? __pte_alloc+0x1ae/0x440 [ 89.992352][ T1949] ? __cfi___pte_alloc+0x10/0x10 [ 89.992374][ T1949] __folio_alloc_noprof+0x14/0x80 [ 89.992392][ T1949] folio_prealloc+0x46/0x220 [ 89.992408][ T1949] do_pte_missing+0x16af/0x4440 [ 89.992428][ T1949] ? pte_marker_clear+0x1b0/0x1b0 [ 89.992444][ T1949] ? kstrtouint_from_user+0x117/0x170 [ 89.992459][ T1949] ? __x64_sys_openat+0x13a/0x170 [ 89.992479][ T1949] ? selinux_file_permission+0x318/0xb60 [ 89.992503][ T1949] handle_mm_fault+0x1189/0x1ba0 [ 89.992521][ T1949] ? __cfi_handle_mm_fault+0x10/0x10 [ 89.992536][ T1949] ? lock_vma_under_rcu+0x4cf/0x590 [ 89.992554][ T1949] ? __kasan_check_write+0x18/0x20 [ 89.992578][ T1949] do_user_addr_fault+0x951/0x1230 [ 89.992594][ T1949] ? __cfi_ksys_write+0x10/0x10 [ 89.992618][ T1949] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 89.992641][ T1949] exc_page_fault+0x58/0xc0 [ 89.992664][ T1949] asm_exc_page_fault+0x2b/0x30 [ 89.992683][ T1949] RIP: 0033:0x7fdf62657236 [ 89.992710][ T1949] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 89.992725][ T1949] RSP: 002b:00007fdf636e2f60 EFLAGS: 00010206 [ 89.992743][ T1949] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000bfe000 [ 89.992755][ T1949] RDX: 00000000000025f5 RSI: 0000200000bfe000 RDI: 0000200000bff000 [ 89.992767][ T1949] RBP: 00007fdf62855040 R08: 0000000000000000 R09: 0000000000000004 [ 89.992779][ T1949] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000003ff000 [ 89.992791][ T1949] R13: 0000200000bfe000 R14: 00007fdf62a25fa0 R15: 0000000000000000 [ 89.992806][ T1949] [ 89.992818][ T1949] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 89.998449][ T66] rust_binder: 1920: undelivered TRANSACTION_ERROR: 29201 [ 90.026448][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 90.029140][ T402] rust_binder: 1920: undelivered TRANSACTION_ERROR: 29201 [ 90.037468][ T314] usb 2-1: no configurations [ 90.296426][ T66] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 90.303047][ T45] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 90.338648][ T314] usb 2-1: can't read configurations, error -22 [ 90.346016][ T314] usb usb2-port1: attempt power cycle [ 90.456432][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 90.463308][ T66] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 90.472344][ T66] usb 1-1: config 0 has no interface number 0 [ 90.476373][ T312] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 90.479069][ T66] usb 1-1: config 0 interface 184 has no altsetting 0 [ 90.496136][ T66] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 90.506157][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.515091][ T66] usb 1-1: Product: syz [ 90.517485][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.519743][ T66] usb 1-1: Manufacturer: syz [ 90.531272][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.535990][ T66] usb 1-1: SerialNumber: syz [ 90.546819][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 90.559998][ T66] usb 1-1: config 0 descriptor?? [ 90.562387][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.570696][ T66] smsc75xx v1.0.0 [ 90.576574][ T45] usb 3-1: SerialNumber: syz [ 90.616378][ T312] usb 4-1: device descriptor read/64, error -71 [ 90.686361][ T314] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 90.706644][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 90.712619][ T314] usb 2-1: no configurations [ 90.717776][ T314] usb 2-1: can't read configurations, error -22 [ 90.788487][ T45] usb 3-1: 0:2 : does not exist [ 90.797811][ T45] usb 3-1: USB disconnect, device number 19 [ 90.846418][ T314] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 90.856336][ T312] usb 4-1: device descriptor read/64, error -71 [ 90.876651][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 90.882632][ T314] usb 2-1: no configurations [ 90.887817][ T314] usb 2-1: can't read configurations, error -22 [ 90.895421][ T314] usb usb2-port1: unable to enumerate USB device [ 91.071515][ T66] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 91.085531][ T66] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 91.096369][ T312] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 91.097532][ T66] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 91.122116][ T66] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 91.136350][ T66] usb 1-1: USB disconnect, device number 23 [ 91.236460][ T312] usb 4-1: device descriptor read/64, error -71 [ 91.316936][ T36] audit: type=1400 audit(1791807742.543:351): avc: denied { write } for pid=1956 comm="syz.2.623" name="xfrm_stat" dev="proc" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.348302][ T1959] netlink: 80 bytes leftover after parsing attributes in process `syz.2.624'. [ 91.385902][ T36] audit: type=1400 audit(1791807742.603:352): avc: denied { connect } for pid=1965 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.476315][ T312] usb 4-1: device descriptor read/64, error -71 [ 91.586319][ T312] usb usb4-port1: attempt power cycle [ 91.602018][ T1990] FAULT_INJECTION: forcing a failure. [ 91.602018][ T1990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.617125][ T1990] CPU: 0 UID: 0 PID: 1990 Comm: syz.0.632 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 91.617158][ T1990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.617169][ T1990] Call Trace: [ 91.617177][ T1990] [ 91.617184][ T1990] __dump_stack+0x21/0x30 [ 91.617215][ T1990] dump_stack_lvl+0x140/0x1c0 [ 91.617230][ T1990] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.617245][ T1990] dump_stack+0x19/0x20 [ 91.617259][ T1990] should_fail_ex+0x3c2/0x510 [ 91.617270][ T1990] should_fail_alloc_page+0xec/0x110 [ 91.617280][ T1990] __alloc_pages_noprof+0x1c0/0x7e0 [ 91.617293][ T1990] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 91.617304][ T1990] ? static_key_count+0x45/0x70 [ 91.617316][ T1990] ? __count_memcg_events+0xdf/0x3a0 [ 91.617327][ T1990] pte_alloc_one+0x92/0x530 [ 91.617338][ T1990] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 91.617353][ T1990] ? __cfi_pte_alloc_one+0x10/0x10 [ 91.617364][ T1990] ? avc_has_extended_perms+0x7fb/0xe60 [ 91.617375][ T1990] ? __asan_memcpy+0x5a/0x80 [ 91.617389][ T1990] ? avc_has_extended_perms+0x94b/0xe60 [ 91.617399][ T1990] __pte_alloc+0x79/0x440 [ 91.617412][ T1990] ? __cfi___pte_alloc+0x10/0x10 [ 91.617425][ T1990] ? do_vfs_ioctl+0x1824/0x2010 [ 91.617435][ T1990] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 91.617445][ T1990] do_pte_missing+0x2b1a/0x4440 [ 91.617457][ T1990] ? pte_marker_clear+0x1b0/0x1b0 [ 91.617467][ T1990] ? __asan_set_shadow_00+0x12/0x20 [ 91.617478][ T1990] ? __snd_timer_user_ioctl+0x38e5/0x43d0 [ 91.617493][ T1990] ? ioctl_has_perm+0x39a/0x500 [ 91.617507][ T1990] handle_mm_fault+0x1189/0x1ba0 [ 91.617518][ T1990] ? __cfi_handle_mm_fault+0x10/0x10 [ 91.617527][ T1990] ? lock_vma_under_rcu+0x4cf/0x590 [ 91.617537][ T1990] ? __kasan_check_write+0x18/0x20 [ 91.617550][ T1990] ? mutex_unlock+0x90/0x240 [ 91.617562][ T1990] ? __cfi_mutex_unlock+0x10/0x10 [ 91.617573][ T1990] ? __fget_files+0x2bc/0x330 [ 91.617583][ T1990] do_user_addr_fault+0x951/0x1230 [ 91.617593][ T1990] ? __kasan_check_write+0x18/0x20 [ 91.617606][ T1990] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 91.617630][ T1990] exc_page_fault+0x58/0xc0 [ 91.617643][ T1990] asm_exc_page_fault+0x2b/0x30 [ 91.617654][ T1990] RIP: 0033:0x7fdf62657455 [ 91.617665][ T1990] Code: 0f 1f 44 00 00 49 89 4c 24 28 e9 a5 fe ff ff 66 0f 1f 44 00 00 48 81 fe 00 f0 02 00 0f 85 92 fe ff ff 66 0f 6f 0d 7b e6 1f 00 01 0f 00 00 00 48 89 4c 24 38 0f 11 49 08 66 0f 6f 0d 74 e6 1f [ 91.617674][ T1990] RSP: 002b:00007fdf636e2f60 EFLAGS: 00010246 [ 91.617685][ T1990] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000c0e000 [ 91.617692][ T1990] RDX: 0000000000001000 RSI: 000000000002f000 RDI: 0000000000000001 [ 91.617699][ T1990] RBP: 00007fdf62855060 R08: 0000000000000000 R09: 0000000000000004 [ 91.617705][ T1990] R10: 0000000000000000 R11: 0000000000000002 R12: 0000200000bfe000 [ 91.617712][ T1990] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000003ef000 [ 91.617720][ T1990] [ 91.617729][ T1990] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 91.936190][ T312] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 91.987307][ T312] usb 4-1: device descriptor read/8, error -71 [ 92.079292][ T36] audit: type=1400 audit(1791807743.303:353): avc: denied { bind } for pid=1997 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.117289][ T312] usb 4-1: device descriptor read/8, error -71 [ 92.206191][ T45] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 92.356227][ T312] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 92.368689][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.378926][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 92.389631][ T312] usb 4-1: device descriptor read/8, error -71 [ 92.398331][ T45] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 92.408801][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.418519][ T45] usb 1-1: Product: syz [ 92.423210][ T45] usb 1-1: Manufacturer: syz [ 92.428406][ T45] usb 1-1: SerialNumber: syz [ 92.436197][ T402] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 92.527122][ T312] usb 4-1: device descriptor read/8, error -71 [ 92.597274][ T402] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.611818][ T402] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.622912][ T402] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.639885][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.646726][ T312] usb usb4-port1: unable to enumerate USB device [ 92.648708][ T402] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 92.656985][ T1994] fuse: Bad value for 'fd' [ 92.668156][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.680341][ T1994] 9pnet_fd: p9_fd_create_unix (1994): problem connecting socket: ./file0: -111 [ 92.690837][ T402] usb 3-1: config 0 descriptor?? [ 92.706230][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 92.708231][ T402] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 92.716251][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.752508][ T45] usb 1-1: USB disconnect, device number 24 [ 92.760397][ T314] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 92.918018][ T314] usb 2-1: no configurations [ 92.923480][ T314] usb 2-1: can't read configurations, error -22 [ 93.056734][ T314] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 93.120899][ T402] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0009/input/input10 [ 93.139902][ T402] uclogic 0003:28BD:0909.0009: input,hidraw0: USB HID v0.08 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 93.217354][ T314] usb 2-1: no configurations [ 93.218608][ T2011] FAULT_INJECTION: forcing a failure. [ 93.218608][ T2011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.223073][ T314] usb 2-1: can't read configurations, error -22 [ 93.238703][ T2011] CPU: 0 UID: 0 PID: 2011 Comm: syz.0.641 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 93.238733][ T2011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.238746][ T2011] Call Trace: [ 93.238753][ T2011] [ 93.238761][ T2011] __dump_stack+0x21/0x30 [ 93.238791][ T2011] dump_stack_lvl+0x140/0x1c0 [ 93.238815][ T2011] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.238843][ T2011] dump_stack+0x19/0x20 [ 93.238866][ T2011] should_fail_ex+0x3c2/0x510 [ 93.238884][ T2011] should_fail_alloc_page+0xec/0x110 [ 93.238903][ T2011] __alloc_pages_noprof+0x1c0/0x7e0 [ 93.238924][ T2011] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 93.238944][ T2011] ? _raw_spin_lock+0x92/0x120 [ 93.238979][ T2011] ? _raw_spin_unlock+0x45/0x60 [ 93.239003][ T2011] ? __pte_alloc+0x1ae/0x440 [ 93.239025][ T2011] ? __cfi___pte_alloc+0x10/0x10 [ 93.239047][ T2011] __folio_alloc_noprof+0x14/0x80 [ 93.239066][ T2011] folio_prealloc+0x46/0x220 [ 93.239084][ T2011] do_pte_missing+0x16af/0x4440 [ 93.239105][ T2011] ? pte_marker_clear+0x1b0/0x1b0 [ 93.239122][ T2011] ? __asan_set_shadow_00+0x12/0x20 [ 93.239142][ T2011] ? __snd_timer_user_ioctl+0x38e5/0x43d0 [ 93.239174][ T2011] handle_mm_fault+0x1189/0x1ba0 [ 93.239193][ T2011] ? __cfi_handle_mm_fault+0x10/0x10 [ 93.239209][ T2011] ? lock_vma_under_rcu+0x4cf/0x590 [ 93.239227][ T2011] ? __kasan_check_write+0x18/0x20 [ 93.239249][ T2011] ? mutex_unlock+0x90/0x240 [ 93.239281][ T2011] ? __cfi_mutex_unlock+0x10/0x10 [ 93.239300][ T2011] ? __fget_files+0x2bc/0x330 [ 93.239317][ T2011] do_user_addr_fault+0x951/0x1230 [ 93.239334][ T2011] ? __kasan_check_write+0x18/0x20 [ 93.239358][ T2011] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 93.239383][ T2011] exc_page_fault+0x58/0xc0 [ 93.239404][ T2011] asm_exc_page_fault+0x2b/0x30 [ 93.239423][ T2011] RIP: 0033:0x7fdf62657455 [ 93.239439][ T2011] Code: 0f 1f 44 00 00 49 89 4c 24 28 e9 a5 fe ff ff 66 0f 1f 44 00 00 48 81 fe 00 f0 02 00 0f 85 92 fe ff ff 66 0f 6f 0d 7b e6 1f 00 01 0f 00 00 00 48 89 4c 24 38 0f 11 49 08 66 0f 6f 0d 74 e6 1f [ 93.239453][ T2011] RSP: 002b:00007fdf636e2f60 EFLAGS: 00010246 [ 93.239470][ T2011] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000c0e000 [ 93.239482][ T2011] RDX: 0000000000001000 RSI: 000000000002f000 RDI: 0000000000000001 [ 93.239494][ T2011] RBP: 00007fdf62855060 R08: 0000000000000000 R09: 0000000000000004 [ 93.239506][ T2011] R10: 0000000000000000 R11: 0000000000000002 R12: 0000200000bfe000 [ 93.239518][ T2011] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000003ef000 [ 93.239532][ T2011] [ 93.239544][ T2011] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 93.248359][ T314] usb usb2-port1: attempt power cycle [ 93.279014][ T36] audit: type=1400 audit(1791807744.503:354): avc: denied { block_suspend } for pid=2012 comm="syz.0.642" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.330347][ T312] usb 3-1: USB disconnect, device number 20 [ 93.626016][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 93.777217][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.789981][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.803616][ T45] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 93.817025][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.827049][ T45] usb 4-1: config 0 descriptor?? [ 93.835949][ T314] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 93.857364][ T314] usb 2-1: no configurations [ 93.863066][ T314] usb 2-1: can't read configurations, error -22 [ 93.906350][ T2024] FAULT_INJECTION: forcing a failure. [ 93.906350][ T2024] name failslab, interval 1, probability 0, space 0, times 0 [ 93.920961][ T2024] CPU: 0 UID: 0 PID: 2024 Comm: syz.2.645 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 93.920982][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.920991][ T2024] Call Trace: [ 93.921000][ T2024] [ 93.921008][ T2024] __dump_stack+0x21/0x30 [ 93.921040][ T2024] dump_stack_lvl+0x140/0x1c0 [ 93.921066][ T2024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.921084][ T2024] dump_stack+0x19/0x20 [ 93.921097][ T2024] should_fail_ex+0x3c2/0x510 [ 93.921108][ T2024] should_failslab+0xac/0x100 [ 93.921118][ T2024] kmem_cache_alloc_noprof+0x42/0x410 [ 93.921131][ T2024] ? sk_prot_alloc+0x69/0x3a0 [ 93.921149][ T2024] ? security_inode_alloc+0x51/0x230 [ 93.921170][ T2024] sk_prot_alloc+0x69/0x3a0 [ 93.921189][ T2024] ? security_inode_alloc+0xc2/0x230 [ 93.921209][ T2024] sk_alloc+0x40/0x590 [ 93.921221][ T2024] ? inode_init_always_gfp+0x76e/0x9e0 [ 93.921231][ T2024] inet_create+0x5b7/0x1010 [ 93.921242][ T2024] __sock_create+0x3a2/0x810 [ 93.921252][ T2024] __sys_socket+0xe1/0x1c0 [ 93.921261][ T2024] __x64_sys_socket+0x7e/0x90 [ 93.921271][ T2024] x64_sys_call+0x2608/0x2ee0 [ 93.921284][ T2024] do_syscall_64+0x57/0xf0 [ 93.921300][ T2024] ? clear_bhb_loop+0x50/0xa0 [ 93.921320][ T2024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.921339][ T2024] RIP: 0033:0x7f1debf9e1d9 [ 93.921355][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.921371][ T2024] RSP: 002b:00007f1dece17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 93.921391][ T2024] RAX: ffffffffffffffda RBX: 00007f1dec226180 RCX: 00007f1debf9e1d9 [ 93.921402][ T2024] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 93.921408][ T2024] RBP: 00007f1dec035888 R08: 0000000000000000 R09: 0000000000000000 [ 93.921414][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.921420][ T2024] R13: 00007f1dec226218 R14: 00007f1dec226180 R15: 00007ffe56aac028 [ 93.921430][ T2024] [ 93.935954][ T406] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 94.256341][ T314] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 94.277366][ T314] usb 2-1: no configurations [ 94.282847][ T314] usb 2-1: can't read configurations, error -22 [ 94.290509][ T314] usb usb2-port1: unable to enumerate USB device [ 94.345897][ T406] usb 1-1: Using ep0 maxpacket: 32 [ 94.352825][ T406] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.362369][ T406] usb 1-1: config 0 has no interface number 0 [ 94.370253][ T406] usb 1-1: config 0 interface 184 has no altsetting 0 [ 94.380193][ T406] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 94.385613][ T36] audit: type=1400 audit(1791807745.603:355): avc: denied { setopt } for pid=2007 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.391706][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.426922][ T406] usb 1-1: Product: syz [ 94.431915][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 94.438512][ T406] usb 1-1: Manufacturer: syz [ 94.443667][ T406] usb 1-1: SerialNumber: syz [ 94.449468][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 94.465115][ T406] usb 1-1: config 0 descriptor?? [ 94.472228][ T45] usb 4-1: USB disconnect, device number 25 [ 94.482221][ T406] smsc75xx v1.0.0 [ 94.683714][ T36] audit: type=1400 audit(1791807745.903:356): avc: denied { setopt } for pid=2019 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.712420][ T2020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 94.726694][ T2020] Zero length message leads to an empty skb [ 94.941556][ T36] audit: type=1400 audit(1791807746.163:357): avc: denied { create } for pid=2039 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 94.975939][ T402] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 95.053234][ T2049] FAULT_INJECTION: forcing a failure. [ 95.053234][ T2049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.068088][ T2049] CPU: 0 UID: 0 PID: 2049 Comm: syz.3.650 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 95.068121][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.068133][ T2049] Call Trace: [ 95.068138][ T2049] [ 95.068146][ T2049] __dump_stack+0x21/0x30 [ 95.068175][ T2049] dump_stack_lvl+0x140/0x1c0 [ 95.068201][ T2049] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.068228][ T2049] ? next_uptodate_folio+0xaca/0xb70 [ 95.068245][ T2049] ? __cfi_folio_unlock+0x10/0x10 [ 95.068263][ T2049] ? set_pte_range+0x42a/0x640 [ 95.068278][ T2049] dump_stack+0x19/0x20 [ 95.068292][ T2049] should_fail_ex+0x3c2/0x510 [ 95.068301][ T2049] should_fail_alloc_page+0xec/0x110 [ 95.068316][ T2049] __alloc_pages_noprof+0x1c0/0x7e0 [ 95.068338][ T2049] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 95.068361][ T2049] ? __cfi_filemap_map_pages+0x10/0x10 [ 95.068380][ T2049] ? folio_add_lru+0x116/0x400 [ 95.068397][ T2049] __folio_alloc_noprof+0x14/0x80 [ 95.068408][ T2049] folio_prealloc+0x46/0x220 [ 95.068418][ T2049] do_pte_missing+0x16af/0x4440 [ 95.068429][ T2049] ? pte_marker_clear+0x1b0/0x1b0 [ 95.068438][ T2049] ? cgroup_rstat_updated+0x144/0x800 [ 95.068453][ T2049] ? __snd_timer_user_ioctl+0x38e5/0x43d0 [ 95.068477][ T2049] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 95.068502][ T2049] handle_mm_fault+0x1189/0x1ba0 [ 95.068553][ T2049] ? __cfi_handle_mm_fault+0x10/0x10 [ 95.068561][ T2049] ? lock_vma_under_rcu+0x4cf/0x590 [ 95.068572][ T2049] ? __kasan_check_write+0x18/0x20 [ 95.068585][ T2049] ? mutex_unlock+0x90/0x240 [ 95.068597][ T2049] ? __cfi_mutex_unlock+0x10/0x10 [ 95.068617][ T2049] do_user_addr_fault+0x951/0x1230 [ 95.068637][ T2049] ? __kasan_check_write+0x18/0x20 [ 95.068661][ T2049] ? __kasan_check_read+0x15/0x20 [ 95.068683][ T2049] exc_page_fault+0x58/0xc0 [ 95.068695][ T2049] asm_exc_page_fault+0x2b/0x30 [ 95.068708][ T2049] RIP: 0033:0x7f968d36d307 [ 95.068718][ T2049] Code: 2e a2 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 95.068727][ T2049] RSP: 002b:00007f968e2e8f58 EFLAGS: 00010206 [ 95.068737][ T2049] RAX: 0000200000c60000 RBX: 0000000000000009 RCX: 00000000000025f5 [ 95.068748][ T2049] RDX: 00000000000025f5 RSI: 00007f968d404d00 RDI: 0000200000c60000 [ 95.068761][ T2049] RBP: 00007f968d4550d0 R08: 0000200000c60000 R09: 0000000000000004 [ 95.068774][ T2049] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000bfe000 [ 95.068787][ T2049] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 95.068802][ T2049] [ 95.068925][ T2049] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 95.388151][ T406] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.402790][ T406] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 95.405751][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 95.422044][ T402] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.425794][ T406] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 95.439782][ T402] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.471956][ T406] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 95.475560][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.488462][ T406] usb 1-1: USB disconnect, device number 25 [ 95.508364][ T402] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 95.527560][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.537742][ T402] usb 3-1: config 0 descriptor?? [ 95.647648][ T2071] veth1_to_bond: entered allmulticast mode [ 95.655220][ T2071] veth1_to_bond: entered promiscuous mode [ 95.755734][ T66] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 95.915664][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 95.922760][ T66] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.934319][ T66] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.946434][ T66] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.959565][ T402] input: HID 172f:0502 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:172F:0502.000A/input/input11 [ 95.974141][ T66] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 95.991156][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.003070][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 96.013228][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.024205][ T402] waltop 0003:172F:0502.000A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 96.040191][ T66] usb 4-1: config 0 descriptor?? [ 96.187109][ T45] usb 3-1: USB disconnect, device number 21 [ 96.476449][ T66] logitech-djreceiver 0003:046D:C53A.000B: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 96.477867][ T2070] veth1_to_bond: left promiscuous mode [ 96.498590][ T2070] veth1_to_bond: left allmulticast mode [ 96.844003][ T313] rust_binder: 2073: undelivered TRANSACTION_COMPLETE [ 96.955698][ T45] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 97.093285][ T2100] FAULT_INJECTION: forcing a failure. [ 97.093285][ T2100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 97.108766][ T2100] CPU: 0 UID: 0 PID: 2100 Comm: syz.1.662 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 97.108798][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.108807][ T2100] Call Trace: [ 97.108810][ T2100] [ 97.108815][ T2100] __dump_stack+0x21/0x30 [ 97.108836][ T2100] dump_stack_lvl+0x140/0x1c0 [ 97.108850][ T2100] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.108865][ T2100] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 97.108885][ T2100] dump_stack+0x19/0x20 [ 97.108907][ T2100] should_fail_ex+0x3c2/0x510 [ 97.108925][ T2100] should_fail_alloc_page+0xec/0x110 [ 97.108940][ T2100] __alloc_pages_noprof+0x1c0/0x7e0 [ 97.108959][ T2100] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 97.108980][ T2100] ? folio_add_lru+0x116/0x400 [ 97.108999][ T2100] ? __cfi_folio_add_lru+0x10/0x10 [ 97.109017][ T2100] __folio_alloc_noprof+0x14/0x80 [ 97.109030][ T2100] folio_prealloc+0x46/0x220 [ 97.109040][ T2100] do_pte_missing+0x16af/0x4440 [ 97.109057][ T2100] ? pte_marker_clear+0x1b0/0x1b0 [ 97.109074][ T2100] ? cgroup_rstat_updated+0x144/0x800 [ 97.109096][ T2100] ? __snd_timer_user_ioctl+0x38e5/0x43d0 [ 97.109119][ T2100] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 97.109143][ T2100] handle_mm_fault+0x1189/0x1ba0 [ 97.109162][ T2100] ? __cfi_handle_mm_fault+0x10/0x10 [ 97.109179][ T2100] ? lock_vma_under_rcu+0x4cf/0x590 [ 97.109199][ T2100] ? __kasan_check_write+0x18/0x20 [ 97.109224][ T2100] ? mutex_unlock+0x90/0x240 [ 97.109248][ T2100] ? __cfi_mutex_unlock+0x10/0x10 [ 97.109259][ T2100] do_user_addr_fault+0x951/0x1230 [ 97.109272][ T2100] ? __kasan_check_write+0x18/0x20 [ 97.109295][ T2100] ? __kasan_check_read+0x15/0x20 [ 97.109318][ T2100] exc_page_fault+0x58/0xc0 [ 97.109340][ T2100] asm_exc_page_fault+0x2b/0x30 [ 97.109361][ T2100] RIP: 0033:0x7f450336d307 [ 97.109378][ T2100] Code: 2e a2 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 97.109390][ T2100] RSP: 002b:00007f4504247f58 EFLAGS: 00010206 [ 97.109400][ T2100] RAX: 0000200000c60000 RBX: 0000000000000009 RCX: 00000000000015f5 [ 97.109408][ T2100] RDX: 00000000000025f5 RSI: 00007f4503405d00 RDI: 0000200000c61000 [ 97.109415][ T2100] RBP: 00007f45034550d0 R08: 0000200000c60000 R09: 0000000000000004 [ 97.109422][ T2100] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000bfe000 [ 97.109431][ T2100] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 97.109445][ T2100] [ 97.109456][ T2100] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 97.109834][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 97.139395][ T2102] FAULT_INJECTION: forcing a failure. [ 97.139395][ T2102] name fail_futex, interval 1, probability 0, space 0, times 1 [ 97.143313][ T314] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 97.148342][ T2102] CPU: 0 UID: 0 PID: 2102 Comm: syz.1.663 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 97.148375][ T2102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.148388][ T2102] Call Trace: [ 97.148396][ T2102] [ 97.148403][ T2102] __dump_stack+0x21/0x30 [ 97.148436][ T2102] dump_stack_lvl+0x140/0x1c0 [ 97.148465][ T2102] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.148500][ T2102] ? unwind_get_return_address+0x51/0x90 [ 97.148529][ T2102] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.148560][ T2102] dump_stack+0x19/0x20 [ 97.148585][ T2102] should_fail_ex+0x3c2/0x510 [ 97.148605][ T2102] should_fail+0xf/0x20 [ 97.148621][ T2102] get_futex_key+0x178/0x940 [ 97.148639][ T2102] ? __cfi_get_futex_key+0x10/0x10 [ 97.148656][ T2102] ? kasan_save_track+0x4f/0x80 [ 97.148683][ T2102] futex_wake+0x150/0x950 [ 97.148705][ T2102] ? __cfi_futex_wake+0x10/0x10 [ 97.148728][ T2102] do_futex+0x37d/0x510 [ 97.148747][ T2102] ? __cfi_do_futex+0x10/0x10 [ 97.148767][ T2102] __se_sys_futex+0x13c/0x320 [ 97.148786][ T2102] ? __x64_sys_futex+0x110/0x110 [ 97.148804][ T2102] ? __x64_sys_mount+0xf0/0xf0 [ 97.148841][ T2102] __x64_sys_futex+0xe9/0x110 [ 97.148862][ T2102] x64_sys_call+0x227f/0x2ee0 [ 97.148881][ T2102] do_syscall_64+0x57/0xf0 [ 97.148899][ T2102] ? clear_bhb_loop+0x50/0xa0 [ 97.148923][ T2102] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.148946][ T2102] RIP: 0033:0x7f450339e1d9 [ 97.148962][ T2102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.148979][ T2102] RSP: 002b:00007f45042480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.148999][ T2102] RAX: ffffffffffffffda RBX: 00007f4503625fa8 RCX: 00007f450339e1d9 [ 97.149013][ T2102] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4503625fac [ 97.149026][ T2102] RBP: 00007f4503625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 97.149044][ T2102] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 97.149057][ T2102] R13: 00007f4503626038 R14: 00007fff85a77420 R15: 00007fff85a77508 [ 97.149074][ T2102] [ 97.227317][ T313] usb 4-1: USB disconnect, device number 26 [ 97.233113][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0 [ 97.724336][ T45] usb 3-1: string descriptor 0 read error: -22 [ 97.732126][ T45] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 97.745847][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.759964][ T45] usb 3-1: low speed audio streaming not supported [ 97.771616][ T45] usb 3-1: low speed audio streaming not supported [ 97.774464][ T36] audit: type=1400 audit(1791807748.996:358): avc: denied { create } for pid=2107 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 97.847717][ T2110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.666'. [ 97.875651][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 97.882760][ T314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.894343][ T314] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.906817][ T314] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.918651][ T314] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.933332][ T314] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.941550][ T314] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 97.952497][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.962539][ T314] usb 1-1: config 0 descriptor?? [ 97.962596][ T66] usb 3-1: USB disconnect, device number 22 [ 97.985637][ T313] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 98.136028][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 98.143747][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.155755][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.166511][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.181116][ T313] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.191248][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.200742][ T313] usb 2-1: config 0 descriptor?? [ 98.412801][ T2106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.422929][ T2106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.429232][ T314] logitech-djreceiver 0003:046D:C53A.000C: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 98.678229][ T314] usb 1-1: USB disconnect, device number 26 [ 98.757695][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.765842][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.773766][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.781794][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.789917][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.798103][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.806460][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.816127][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.824350][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.832573][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.840560][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.848998][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.857556][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.865700][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.874162][ T313] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 98.885477][ T313] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input12 [ 98.903127][ T313] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 99.535709][ T313] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 99.645695][ T314] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 99.687667][ T313] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 99.702275][ T313] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 99.715805][ T313] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 99.732784][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.746235][ T313] usb 1-1: Product: syz [ 99.751206][ T313] usb 1-1: Manufacturer: syz [ 99.757445][ T313] usb 1-1: SerialNumber: syz [ 99.795671][ T314] usb 3-1: Using ep0 maxpacket: 16 [ 99.805763][ T314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.816853][ T314] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 99.832628][ T314] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 99.842870][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.853082][ T314] usb 3-1: Product: syz [ 99.858794][ T314] usb 3-1: Manufacturer: syz [ 99.864384][ T314] usb 3-1: SerialNumber: syz [ 99.967469][ T2126] overlayfs: statfs failed on './file0' [ 99.980201][ T313] usb 1-1: USB disconnect, device number 27 [ 100.003078][ T2131] FAULT_INJECTION: forcing a failure. [ 100.003078][ T2131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.029973][ T2131] CPU: 0 UID: 0 PID: 2131 Comm: syz.3.672 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 100.030008][ T2131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.030020][ T2131] Call Trace: [ 100.030026][ T2131] [ 100.030034][ T2131] __dump_stack+0x21/0x30 [ 100.030064][ T2131] dump_stack_lvl+0x140/0x1c0 [ 100.030094][ T2131] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.030121][ T2131] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 100.030142][ T2131] dump_stack+0x19/0x20 [ 100.030155][ T2131] should_fail_ex+0x3c2/0x510 [ 100.030165][ T2131] should_fail_alloc_page+0xec/0x110 [ 100.030176][ T2131] __alloc_pages_noprof+0x1c0/0x7e0 [ 100.030195][ T2131] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 100.030216][ T2131] ? folio_add_lru+0x116/0x400 [ 100.030235][ T2131] ? __cfi_folio_add_lru+0x10/0x10 [ 100.030254][ T2131] __folio_alloc_noprof+0x14/0x80 [ 100.030274][ T2131] folio_prealloc+0x46/0x220 [ 100.030285][ T2131] do_pte_missing+0x16af/0x4440 [ 100.030296][ T2131] ? pte_marker_clear+0x1b0/0x1b0 [ 100.030306][ T2131] ? cgroup_rstat_updated+0x144/0x800 [ 100.030319][ T2131] ? __snd_timer_user_ioctl+0x38e5/0x43d0 [ 100.030336][ T2131] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 100.030361][ T2131] handle_mm_fault+0x1189/0x1ba0 [ 100.030384][ T2131] ? __cfi_handle_mm_fault+0x10/0x10 [ 100.030398][ T2131] ? lock_vma_under_rcu+0x4cf/0x590 [ 100.030417][ T2131] ? __kasan_check_write+0x18/0x20 [ 100.030430][ T2131] ? mutex_unlock+0x90/0x240 [ 100.030442][ T2131] ? __cfi_mutex_unlock+0x10/0x10 [ 100.030453][ T2131] do_user_addr_fault+0x951/0x1230 [ 100.030463][ T2131] ? __kasan_check_write+0x18/0x20 [ 100.030476][ T2131] ? __kasan_check_read+0x15/0x20 [ 100.030499][ T2131] exc_page_fault+0x58/0xc0 [ 100.030521][ T2131] asm_exc_page_fault+0x2b/0x30 [ 100.030550][ T2131] RIP: 0033:0x7f968d36d307 [ 100.030564][ T2131] Code: 2e a2 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 100.030574][ T2131] RSP: 002b:00007f968e2e8f58 EFLAGS: 00010206 [ 100.030584][ T2131] RAX: 0000200000c60000 RBX: 0000000000000009 RCX: 00000000000005f5 [ 100.030591][ T2131] RDX: 00000000000025f5 RSI: 00007f968d406d00 RDI: 0000200000c62000 [ 100.030599][ T2131] RBP: 00007f968d4550d0 R08: 0000200000c60000 R09: 0000000000000004 [ 100.030605][ T2131] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000bfe000 [ 100.030612][ T2131] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 100.030620][ T2131] [ 100.030644][ T2131] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 100.675677][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 100.797068][ T66] usb 2-1: USB disconnect, device number 28 [ 100.825661][ T313] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 100.836883][ T45] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.854178][ T45] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.871531][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.880157][ T45] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 100.889162][ T402] hid-generic 0000:0008:0000.000E: unknown main item tag 0x0 [ 100.890737][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.899953][ T2138] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 100.914273][ T45] usb 4-1: config 0 descriptor?? [ 100.920602][ T36] audit: type=1400 audit(1791807752.126:359): avc: denied { relabelfrom } for pid=2137 comm="syz.1.675" name="SCO" dev="sockfs" ino=13171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.952991][ T402] hid-generic 0000:0008:0000.000E: unknown main item tag 0x0 [ 100.962268][ T36] audit: type=1400 audit(1791807752.176:360): avc: denied { relabelto } for pid=2137 comm="syz.1.675" name="SCO" dev="sockfs" ino=13171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:chfn_exec_t:s0" [ 100.995384][ T402] hid-generic 0000:0008:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 101.035744][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 101.043316][ T313] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 101.055438][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.068998][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.081205][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.096459][ T313] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 101.106857][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.118292][ T313] usb 1-1: config 0 descriptor?? [ 101.265702][ T66] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 101.331565][ T45] thrustmaster 0003:044F:B65A.000F: unbalanced collection at end of report description [ 101.342858][ T45] thrustmaster 0003:044F:B65A.000F: parse failed [ 101.350321][ T45] thrustmaster 0003:044F:B65A.000F: probe with driver thrustmaster failed with error -22 [ 101.415664][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 101.422564][ T66] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.438148][ T66] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 101.448862][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.457737][ T66] usb 2-1: SerialNumber: syz [ 101.463640][ T66] usb 2-1: config 0 descriptor?? [ 101.470004][ T66] hub 2-1:0.0: bad descriptor, ignoring hub [ 101.476566][ T66] hub 2-1:0.0: probe with driver hub failed with error -5 [ 101.484684][ T66] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 101.493501][ T66] usb 2-1: Detected SIO [ 101.498672][ T66] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.526402][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.534773][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.542322][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.542953][ T2133] netlink: 'syz.3.673': attribute type 17 has an invalid length. [ 101.549924][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.562515][ T45] usb 4-1: USB disconnect, device number 27 [ 101.566049][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.580710][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.588325][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.596379][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.604057][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.611618][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.619146][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.626795][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.636296][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.644369][ T313] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 101.651887][ T313] sony 0003:1345:3008.0010: unbalanced collection at end of report description [ 101.662808][ T313] sony 0003:1345:3008.0010: parse failed [ 101.669909][ T313] sony 0003:1345:3008.0010: probe with driver sony failed with error -22 [ 101.733452][ T2136] rust_binder: validate_parent_fixup: new_min_offset=210, sg_entry.length=0 [ 101.733486][ T2136] rust_binder: 2135:2136 error while translating object: EINVAL [ 101.752768][ T2136] rust_binder: Failure in copy_transaction_data: EINVAL [ 101.752793][ T2136] rust_binder: 2135:2136 transaction call to 2135:0 failed EINVAL, code 0 size 104-24 line thread.rs:942 [ 101.774413][ T313] usb 1-1: USB disconnect, device number 28 [ 101.783204][ T402] rust_binder: 2135: undelivered TRANSACTION_ERROR: 29201 [ 101.805724][ T31] usb 2-1: USB disconnect, device number 29 [ 101.813717][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.824276][ T31] ftdi_sio 2-1:0.0: device disconnected [ 102.244885][ T2151] FAULT_INJECTION: forcing a failure. [ 102.244885][ T2151] name failslab, interval 1, probability 0, space 0, times 0 [ 102.261672][ T2151] CPU: 0 UID: 0 PID: 2151 Comm: syz.1.678 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 102.261703][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.261715][ T2151] Call Trace: [ 102.261721][ T2151] [ 102.261729][ T2151] __dump_stack+0x21/0x30 [ 102.261759][ T2151] dump_stack_lvl+0x140/0x1c0 [ 102.261785][ T2151] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.261808][ T2151] dump_stack+0x19/0x20 [ 102.261830][ T2151] should_fail_ex+0x3c2/0x510 [ 102.261846][ T2151] ? sk_prot_alloc+0x104/0x3a0 [ 102.261862][ T2151] should_failslab+0xac/0x100 [ 102.261879][ T2151] __kmalloc_noprof+0x69/0x510 [ 102.261903][ T2151] ? sk_prot_alloc+0x104/0x3a0 [ 102.261920][ T2151] ? avc_has_perm_noaudit+0x289/0x360 [ 102.261938][ T2151] sk_prot_alloc+0x104/0x3a0 [ 102.261955][ T2151] sk_alloc+0x40/0x590 [ 102.261973][ T2151] tun_chr_open+0x80/0x7f0 [ 102.261996][ T2151] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 102.262022][ T2151] ? __cfi_tun_chr_open+0x10/0x10 [ 102.262045][ T2151] misc_open+0x2ec/0x370 [ 102.262068][ T2151] chrdev_open+0x4eb/0x610 [ 102.262093][ T2151] ? __cfi_chrdev_open+0x10/0x10 [ 102.262123][ T2151] ? bpf_lsm_file_open+0xd/0x20 [ 102.262139][ T2151] ? __cfi_chrdev_open+0x10/0x10 [ 102.262152][ T2151] do_dentry_open+0x97f/0x1510 [ 102.262171][ T2151] vfs_open+0x86/0x240 [ 102.262190][ T2151] ? __cfi_vfs_open+0x10/0x10 [ 102.262210][ T2151] ? may_open+0x352/0x430 [ 102.262229][ T2151] path_openat+0x2c49/0x35a0 [ 102.262249][ T2151] ? schedule+0xc5/0x240 [ 102.262259][ T2151] ? kasan_save_alloc_info+0x3a/0x50 [ 102.262272][ T2151] ? getname+0x1b/0x30 [ 102.262285][ T2151] ? x64_sys_call+0xe69/0x2ee0 [ 102.262296][ T2151] ? do_syscall_64+0x57/0xf0 [ 102.262305][ T2151] ? do_filp_open+0x440/0x440 [ 102.262324][ T2151] do_filp_open+0x1f2/0x440 [ 102.262353][ T2151] ? __cfi_do_filp_open+0x10/0x10 [ 102.262376][ T2151] ? alloc_fd+0x4c1/0x570 [ 102.262397][ T2151] do_sys_openat2+0x134/0x1d0 [ 102.262409][ T2151] ? fput+0x1a4/0x230 [ 102.262419][ T2151] ? do_sys_open+0x100/0x100 [ 102.262430][ T2151] ? __cfi_ksys_write+0x10/0x10 [ 102.262444][ T2151] __x64_sys_openat+0x13a/0x170 [ 102.262459][ T2151] x64_sys_call+0xe69/0x2ee0 [ 102.262478][ T2151] do_syscall_64+0x57/0xf0 [ 102.262494][ T2151] ? clear_bhb_loop+0x50/0xa0 [ 102.262516][ T2151] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.262536][ T2151] RIP: 0033:0x7f450339e1d9 [ 102.262547][ T2151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.262556][ T2151] RSP: 002b:00007f4504248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.262568][ T2151] RAX: ffffffffffffffda RBX: 00007f4503625fa0 RCX: 00007f450339e1d9 [ 102.262576][ T2151] RDX: 0000000000000002 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 102.262583][ T2151] RBP: 00007f4503435888 R08: 0000000000000000 R09: 0000000000000000 [ 102.262590][ T2151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.262598][ T2151] R13: 00007f4503626038 R14: 00007f4503625fa0 R15: 00007fff85a77508 [ 102.262614][ T2151] [ 102.666949][ T314] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 102.680800][ T314] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.700309][ T314] usb 3-1: USB disconnect, device number 23 [ 102.709209][ T2160] FAULT_INJECTION: forcing a failure. [ 102.709209][ T2160] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.733821][ T443] udevd[443]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.752981][ T2160] CPU: 1 UID: 0 PID: 2160 Comm: syz.0.681 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 102.753017][ T2160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.753030][ T2160] Call Trace: [ 102.753036][ T2160] [ 102.753044][ T2160] __dump_stack+0x21/0x30 [ 102.753076][ T2160] dump_stack_lvl+0x140/0x1c0 [ 102.753103][ T2160] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.753130][ T2160] ? check_stack_object+0x138/0x150 [ 102.753155][ T2160] dump_stack+0x19/0x20 [ 102.753181][ T2160] should_fail_ex+0x3c2/0x510 [ 102.753200][ T2160] should_fail+0xf/0x20 [ 102.753216][ T2160] should_fail_usercopy+0x1e/0x30 [ 102.753236][ T2160] _copy_to_user+0x24/0xa0 [ 102.753258][ T2160] simple_read_from_buffer+0xed/0x160 [ 102.753280][ T2160] proc_fail_nth_read+0x1aa/0x220 [ 102.753311][ T2160] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 102.753334][ T2160] ? bpf_lsm_file_permission+0xd/0x20 [ 102.753355][ T2160] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 102.753377][ T2160] vfs_read+0x288/0xc70 [ 102.753400][ T2160] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 102.753424][ T2160] ? __cfi_handle_mm_fault+0x10/0x10 [ 102.753440][ T2160] ? __cfi_vfs_read+0x10/0x10 [ 102.753458][ T2160] ? __kasan_check_write+0x18/0x20 [ 102.753482][ T2160] ? mutex_lock+0x97/0x1d0 [ 102.753503][ T2160] ? __cfi_mutex_lock+0x10/0x10 [ 102.753524][ T2160] ksys_read+0x145/0x260 [ 102.753548][ T2160] ? __cfi_ksys_read+0x10/0x10 [ 102.753571][ T2160] ? __kasan_check_write+0x18/0x20 [ 102.753592][ T2160] ? fput+0x1a4/0x230 [ 102.753608][ T2160] ? __kasan_check_read+0x15/0x20 [ 102.753630][ T2160] __x64_sys_read+0x7f/0x90 [ 102.753650][ T2160] x64_sys_call+0x2638/0x2ee0 [ 102.753668][ T2160] do_syscall_64+0x57/0xf0 [ 102.753685][ T2160] ? clear_bhb_loop+0x50/0xa0 [ 102.753707][ T2160] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.753729][ T2160] RIP: 0033:0x7fdf6275ea0e [ 102.753745][ T2160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.753761][ T2160] RSP: 002b:00007fdf636e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.753782][ T2160] RAX: ffffffffffffffda RBX: 00007fdf636e36c0 RCX: 00007fdf6275ea0e [ 102.753797][ T2160] RDX: 000000000000000f RSI: 00007fdf636e30a0 RDI: 0000000000000005 [ 102.753809][ T2160] RBP: 00007fdf636e3090 R08: 0000000000000000 R09: 0000000000000000 [ 102.753821][ T2160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.753832][ T2160] R13: 00007fdf62a26038 R14: 00007fdf62a25fa0 R15: 00007ffdf0bdeaf8 [ 102.753849][ T2160] [ 103.295706][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 103.304457][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 103.350985][ T2175] 9pnet_fd: p9_fd_create_tcp (2175): problem connecting socket to 127.0.0.1 [ 103.435740][ T31] usb 4-1: device descriptor read/64, error -71 [ 103.455713][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 103.463691][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.476431][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.490068][ T45] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.501608][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 103.515850][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.525522][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 103.535608][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.545391][ T45] usb 1-1: config 0 descriptor?? [ 103.685809][ T31] usb 4-1: device descriptor read/64, error -71 [ 103.925634][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 103.954904][ T45] logitech-djreceiver 0003:046D:C53A.0011: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 104.065663][ T31] usb 4-1: device descriptor read/64, error -71 [ 104.305700][ T31] usb 4-1: device descriptor read/64, error -71 [ 104.415862][ T31] usb usb4-port1: attempt power cycle [ 104.445708][ T313] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 104.585695][ T313] usb 2-1: device descriptor read/64, error -71 [ 104.755672][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 104.787394][ T31] usb 4-1: device descriptor read/8, error -71 [ 104.815655][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.815830][ T772] Bluetooth: hci0: command 0x1003 tx timeout [ 104.830434][ T313] usb 2-1: device descriptor read/64, error -71 [ 104.849198][ T36] audit: type=1400 audit(1791807756.076:361): avc: denied { ioctl } for pid=2191 comm="syz.2.689" path="cgroup:[4026532301]" dev="nsfs" ino=4026532301 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.917583][ T31] usb 4-1: device descriptor read/8, error -71 [ 105.085742][ T313] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 105.165720][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 105.186959][ T31] usb 4-1: device descriptor read/8, error -71 [ 105.225657][ T313] usb 2-1: device descriptor read/64, error -71 [ 105.317087][ T31] usb 4-1: device descriptor read/8, error -71 [ 105.435733][ T31] usb usb4-port1: unable to enumerate USB device [ 105.447537][ T2201] kvm: emulating exchange as write [ 105.466060][ T313] usb 2-1: device descriptor read/64, error -71 [ 105.547598][ T36] audit: type=1400 audit(1791807756.776:362): avc: denied { write } for pid=2203 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.549630][ T2204] kvm: kvm [2203]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 105.585408][ T2204] kvm: kvm [2203]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 105.596327][ T313] usb usb2-port1: attempt power cycle [ 105.905817][ T45] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 105.921165][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 105.934472][ T45] usb 1-1: device reset changed ep0 maxpacket size! [ 105.946679][ T861] usb 1-1: USB disconnect, device number 29 [ 105.955919][ T313] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 105.987361][ T313] usb 2-1: device descriptor read/8, error -71 [ 106.085781][ T31] usb 3-1: device descriptor read/64, error -71 [ 106.096272][ T861] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 106.115400][ T2215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.136654][ T313] usb 2-1: device descriptor read/8, error -71 [ 106.156173][ T2219] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 106.177649][ T36] audit: type=1400 audit(1791807757.406:363): avc: denied { ioctl } for pid=2217 comm="syz.3.698" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.265671][ T861] usb 1-1: Using ep0 maxpacket: 32 [ 106.274987][ T861] usb 1-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 106.288583][ T861] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 106.301827][ T861] usb 1-1: too many endpoints for config 1 interface 2 altsetting 197: 71, using maximum allowed: 30 [ 106.315604][ T861] usb 1-1: config 1 interface 2 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 106.333149][ T861] usb 1-1: config 1 interface 2 has no altsetting 1 [ 106.344835][ T861] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 106.352602][ T31] usb 3-1: device descriptor read/64, error -71 [ 106.357610][ T861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.374086][ T861] usb 1-1: Product: syz [ 106.379115][ T861] usb 1-1: Manufacturer: syz [ 106.384441][ T861] usb 1-1: SerialNumber: syz [ 106.389587][ T313] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 106.416685][ T313] usb 2-1: device descriptor read/8, error -71 [ 106.549315][ T313] usb 2-1: device descriptor read/8, error -71 [ 106.603906][ T861] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.609670][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 106.648315][ T861] usb 1-1: USB disconnect, device number 30 [ 106.663487][ T443] udevd[443]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.682010][ T313] usb usb2-port1: unable to enumerate USB device [ 106.755632][ T31] usb 3-1: device descriptor read/64, error -71 [ 106.927019][ T2225] can0: slcan on ptm0. [ 106.929337][ T36] audit: type=1400 audit(1791807758.156:364): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 106.959591][ T36] audit: type=1400 audit(1791807758.166:365): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.985668][ T36] audit: type=1400 audit(1791807758.166:366): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=1585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.013169][ T36] audit: type=1400 audit(1791807758.166:367): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.045506][ T2225] can0 (unregistered): slcan off ptm0. [ 107.045509][ T36] audit: type=1400 audit(1791807758.166:368): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.045540][ T36] audit: type=1400 audit(1791807758.246:369): avc: denied { read } for pid=2228 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.105913][ T31] usb 3-1: device descriptor read/64, error -71 [ 107.113477][ T36] audit: type=1400 audit(1791807758.246:370): avc: denied { open } for pid=2228 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.144497][ T36] audit: type=1400 audit(1791807758.246:371): avc: denied { getattr } for pid=2228 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.211226][ T36] audit: type=1400 audit(1791807758.336:372): avc: denied { write } for pid=2227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.240650][ T31] usb usb3-port1: attempt power cycle [ 107.365698][ T861] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 107.525669][ T861] usb 1-1: Using ep0 maxpacket: 32 [ 107.532564][ T861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.544598][ T861] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.557848][ T861] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.569317][ T861] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.583643][ T861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.591228][ T861] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 107.595662][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 107.601490][ T861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.619510][ T861] usb 1-1: config 0 descriptor?? [ 107.625736][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 107.635447][ T31] usb 3-1: device descriptor read/8, error -71 [ 107.766734][ T31] usb 3-1: device descriptor read/8, error -71 [ 107.775721][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 107.782607][ T45] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 107.793679][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.803746][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.812777][ T45] usb 2-1: Product: syz [ 107.817377][ T45] usb 2-1: Manufacturer: syz [ 107.822924][ T45] usb 2-1: SerialNumber: syz [ 107.832857][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 107.840338][ T45] r8152-cfgselector 2-1: config 0 descriptor?? [ 108.015761][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 108.030797][ T861] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 108.036629][ T31] usb 3-1: device descriptor read/8, error -71 [ 108.039805][ T861] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 108.048421][ T45] r8152-cfgselector 2-1: Unknown version 0x0000 [ 108.055843][ T861] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 108.062831][ T45] r8152-cfgselector 2-1: bad CDC descriptors [ 108.071596][ T861] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 108.088407][ T861] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0 [ 108.098630][ T861] hid-thrustmaster 0003:044F:B65D.0012: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 108.124553][ T861] hid-thrustmaster 0003:044F:B65D.0012: Wrong number of endpoints? [ 108.176896][ T31] usb 3-1: device descriptor read/8, error -71 [ 108.238429][ C0] hid-thrustmaster 0003:044F:B65D.0012: URB to get model id failed with error -71 [ 108.249088][ T861] usb 1-1: USB disconnect, device number 31 [ 108.300902][ T31] usb usb3-port1: unable to enumerate USB device [ 108.316770][ T31] r8152-cfgselector 2-1: USB disconnect, device number 34 [ 108.913479][ T2287] ./dev/sda1: Can't lookup blockdev [ 109.015670][ T31] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 109.176747][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.190261][ T31] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.201024][ T31] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.217653][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.225124][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 109.225629][ T66] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 109.235798][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.256371][ T31] usb 1-1: config 0 descriptor?? [ 109.295819][ T861] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 109.387728][ T66] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 109.398392][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 109.407616][ T66] usb 2-1: Product: syz [ 109.413056][ T66] usb 2-1: Manufacturer: syz [ 109.447042][ T861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.459406][ T861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.472762][ T2279] batadv_slave_1: entered promiscuous mode [ 109.472937][ T861] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.489779][ T861] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.499425][ T861] usb 3-1: Manufacturer: syz [ 109.505327][ T861] usb 3-1: config 0 descriptor?? [ 109.683228][ T31] input: HID 17ef:6047 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0013/input/input13 [ 109.705816][ T31] lenovo 0003:17EF:6047.0013: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 109.886470][ T2278] batadv_slave_1: left promiscuous mode [ 109.894391][ T313] usb 1-1: USB disconnect, device number 32 [ 110.171776][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.183085][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.194766][ T66] scsi host1: uas [ 110.200052][ C1] usb 2-1: stat urb: no pending cmd for uas-tag 78 [ 110.325628][ T861] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 110.335726][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 110.336037][ T861] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 110.356416][ T861] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 110.366019][ T861] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 110.375000][ T861] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 110.389210][ T861] usb 3-1: USB disconnect, device number 28 [ 110.406652][ C1] usb 2-1: cmd cmplt err -71 [ 110.412912][ T45] usb 2-1: USB disconnect, device number 35 [ 110.421225][ T45] scsi 1:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 110.430499][ T45] scsi 1:0:0:0: tag#20 CDB: opcode=0x12 12 00 00 00 24 00 [ 110.496375][ T31] usb 4-1: device descriptor read/64, error -71 [ 110.715724][ T402] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 110.745700][ T31] usb 4-1: device descriptor read/64, error -71 [ 110.855695][ T402] usb 1-1: device descriptor read/64, error -71 [ 110.900906][ T2313] netlink: 'syz.2.716': attribute type 7 has an invalid length. [ 110.980619][ T2320] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2558430984 (81869791488 ns) > initial count (19335048768 ns). Using initial count to start timer. [ 111.001920][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 111.105746][ T402] usb 1-1: device descriptor read/64, error -71 [ 111.135663][ T31] usb 4-1: device descriptor read/64, error -71 [ 111.365741][ T402] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 111.395899][ T31] usb 4-1: device descriptor read/64, error -71 [ 111.515709][ T402] usb 1-1: device descriptor read/64, error -71 [ 111.515805][ T31] usb usb4-port1: attempt power cycle [ 111.534979][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 111.534996][ T36] audit: type=1400 audit(1791807762.756:384): avc: denied { ioctl } for pid=2323 comm="syz.1.720" path="/188/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=84 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.547049][ T2325] 9p: Unknown access argument 18446744073709551615: -34 [ 111.581636][ T36] audit: type=1400 audit(1791807762.776:385): avc: denied { getattr } for pid=2323 comm="syz.1.720" path="/188/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.630081][ T36] audit: type=1400 audit(1791807762.776:386): avc: denied { mounton } for pid=2323 comm="syz.1.720" path="/188/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.795756][ T402] usb 1-1: device descriptor read/64, error -71 [ 111.806391][ T2327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 111.817555][ T2327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 111.865711][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 111.897505][ T31] usb 4-1: device descriptor read/8, error -71 [ 111.915959][ T402] usb usb1-port1: attempt power cycle [ 111.946895][ T36] audit: type=1400 audit(1791807763.176:387): avc: denied { ioctl } for pid=2330 comm="syz.2.722" path="socket:[14250]" dev="sockfs" ino=14250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.027274][ T31] usb 4-1: device descriptor read/8, error -71 [ 112.255692][ T402] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 112.265699][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 112.276866][ T402] usb 1-1: device descriptor read/8, error -71 [ 112.286945][ T31] usb 4-1: device descriptor read/8, error -71 [ 112.371559][ T2335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 112.382161][ T2336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 112.406839][ T402] usb 1-1: device descriptor read/8, error -71 [ 112.418050][ T31] usb 4-1: device descriptor read/8, error -71 [ 112.535848][ T31] usb usb4-port1: unable to enumerate USB device [ 112.645673][ T402] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 112.666916][ T402] usb 1-1: device descriptor read/8, error -71 [ 112.797295][ T402] usb 1-1: device descriptor read/8, error -71 [ 112.905827][ T402] usb usb1-port1: unable to enumerate USB device [ 113.035665][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 113.102348][ T1849] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.167788][ T31] usb 3-1: device descriptor read/64, error -71 [ 113.170647][ T36] audit: type=1400 audit(1791807764.396:388): avc: denied { read write } for pid=2346 comm="syz.1.728" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.202732][ T36] audit: type=1400 audit(1791807764.396:389): avc: denied { open } for pid=2346 comm="syz.1.728" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.229502][ T36] audit: type=1400 audit(1791807764.396:390): avc: denied { ioctl } for pid=2346 comm="syz.1.728" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.276290][ T36] audit: type=1400 audit(1791807764.506:391): avc: denied { ioctl } for pid=2340 comm="syz.2.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.315630][ T36] audit: type=1400 audit(1791807764.536:392): avc: denied { read write } for pid=2354 comm="syz.1.730" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.342098][ T36] audit: type=1400 audit(1791807764.536:393): avc: denied { open } for pid=2354 comm="syz.1.730" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.425669][ T31] usb 3-1: device descriptor read/64, error -71 [ 113.505647][ T402] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 113.555663][ T861] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 113.657080][ T402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.665795][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 113.666231][ T402] usb 4-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 113.685614][ T402] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 113.696957][ T402] usb 4-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40 [ 113.706942][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.715796][ T402] usb 4-1: Product: syz [ 113.720488][ T402] usb 4-1: Manufacturer: syz [ 113.726073][ T402] usb 4-1: SerialNumber: syz [ 113.731881][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.745443][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.756354][ T861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.772139][ T861] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.782221][ T861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.791567][ T861] usb 2-1: config 0 descriptor?? [ 113.805695][ T31] usb 3-1: device descriptor read/64, error -71 [ 113.865675][ T66] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 113.947256][ T402] usb 4-1: USB disconnect, device number 36 [ 114.015636][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 114.025314][ T66] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 114.038212][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.048108][ T66] usb 1-1: Product: syz [ 114.053493][ T66] usb 1-1: Manufacturer: syz [ 114.059768][ T66] usb 1-1: SerialNumber: syz [ 114.065688][ T31] usb 3-1: device descriptor read/64, error -71 [ 114.175761][ T31] usb usb3-port1: attempt power cycle [ 114.200174][ T861] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 114.210506][ T861] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.281684][ T66] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 114.290376][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.302044][ T66] usb 1-1: USB disconnect, device number 37 [ 114.312037][ T443] udevd[443]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.515681][ T31] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 114.536687][ T31] usb 3-1: device descriptor read/8, error -71 [ 114.666926][ T31] usb 3-1: device descriptor read/8, error -71 [ 114.708399][ T66] usb 2-1: USB disconnect, device number 36 [ 114.915676][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 114.936664][ T31] usb 3-1: device descriptor read/8, error -71 [ 115.014600][ T2371] FAULT_INJECTION: forcing a failure. [ 115.014600][ T2371] name failslab, interval 1, probability 0, space 0, times 0 [ 115.029558][ T2371] CPU: 1 UID: 0 PID: 2371 Comm: syz.0.735 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 115.029587][ T2371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.029596][ T2371] Call Trace: [ 115.029601][ T2371] [ 115.029607][ T2371] __dump_stack+0x21/0x30 [ 115.029630][ T2371] dump_stack_lvl+0x140/0x1c0 [ 115.029646][ T2371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.029663][ T2371] dump_stack+0x19/0x20 [ 115.029678][ T2371] should_fail_ex+0x3c2/0x510 [ 115.029688][ T2371] should_failslab+0xac/0x100 [ 115.029698][ T2371] kmem_cache_alloc_noprof+0x42/0x410 [ 115.029712][ T2371] ? getname_kernel+0x6b/0x450 [ 115.029737][ T2371] ? __check_object_size+0x54c/0x870 [ 115.029753][ T2371] getname_kernel+0x6b/0x450 [ 115.029768][ T2371] kern_path+0x23/0x60 [ 115.029777][ T2371] lookup_bdev+0xc9/0x290 [ 115.029793][ T2371] ? __cfi_lookup_bdev+0x10/0x10 [ 115.029811][ T2371] __se_sys_quotactl+0x21c/0x7e0 [ 115.029824][ T2371] ? __x64_sys_quotactl+0xc0/0xc0 [ 115.029836][ T2371] ? __put_user_nocheck_8+0x20/0x20 [ 115.029854][ T2371] ? __kasan_check_write+0x18/0x20 [ 115.029868][ T2371] ? fpregs_restore_userregs+0x11c/0x260 [ 115.029889][ T2371] __x64_sys_quotactl+0x9f/0xc0 [ 115.029904][ T2371] x64_sys_call+0x2818/0x2ee0 [ 115.029915][ T2371] do_syscall_64+0x57/0xf0 [ 115.029952][ T2371] ? clear_bhb_loop+0x50/0xa0 [ 115.029966][ T2371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.029985][ T2371] RIP: 0033:0x7fdf6279e1d9 [ 115.030003][ T2371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.030013][ T2371] RSP: 002b:00007fdf636e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 115.030031][ T2371] RAX: ffffffffffffffda RBX: 00007fdf62a25fa0 RCX: 00007fdf6279e1d9 [ 115.030043][ T2371] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffff80000301 [ 115.030051][ T2371] RBP: 00007fdf62835888 R08: 0000000000000000 R09: 0000000000000000 [ 115.030064][ T2371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.030071][ T2371] R13: 00007fdf62a26038 R14: 00007fdf62a25fa0 R15: 00007ffdf0bdeaf8 [ 115.030081][ T2371] [ 115.145645][ T772] Bluetooth: hci0: command 0x1003 tx timeout [ 115.151188][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.334505][ T31] usb 3-1: device descriptor read/8, error -71 [ 115.445709][ T31] usb usb3-port1: unable to enumerate USB device [ 115.809925][ T2401] input: syz1 as /devices/virtual/input/input14 [ 115.826218][ T2403] input: syz0 as /devices/virtual/input/input15 [ 115.855695][ T2407] netlink: 328 bytes leftover after parsing attributes in process `syz.3.745'. [ 115.873403][ T2410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.884660][ T2410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.953091][ T2421] fuse: Unknown parameter 'ô†¾ÒönLTkÛÉ.};<øã#—Åpܼw¸-yÖPë†ø g`ž' [ 116.105627][ T402] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 116.256756][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.269278][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.282983][ T402] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.293328][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.302870][ T402] usb 4-1: config 0 descriptor?? [ 116.345639][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 116.396917][ T2437] fuse: Unknown parameter 'Kã#wPI2ŽQ©[ˆ¡%5“`ÚŽÍä [ 116.396917][ T2437] ^ÝQMEðSA†è¾ÄèWz*Ë\ˆ¹¡ T8ÌEKGÞ•Rl½„‰ÒPÇÊľ^œ<;ª5Îf\*0x0000000000000005' [ 116.507086][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.523067][ T2450] FAULT_INJECTION: forcing a failure. [ 116.523067][ T2450] name failslab, interval 1, probability 0, space 0, times 0 [ 116.525674][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.540922][ T2450] CPU: 0 UID: 0 PID: 2450 Comm: syz.0.756 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 116.540968][ T2450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.540981][ T2450] Call Trace: [ 116.540986][ T2450] [ 116.540993][ T2450] __dump_stack+0x21/0x30 [ 116.541029][ T2450] dump_stack_lvl+0x140/0x1c0 [ 116.541053][ T2450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.541078][ T2450] dump_stack+0x19/0x20 [ 116.541101][ T2450] should_fail_ex+0x3c2/0x510 [ 116.541119][ T2450] should_failslab+0xac/0x100 [ 116.541136][ T2450] __kmalloc_cache_noprof+0x41/0x470 [ 116.541161][ T2450] ? kvm_set_irq_routing+0x1ab/0xeb0 [ 116.541185][ T2450] kvm_set_irq_routing+0x1ab/0xeb0 [ 116.541210][ T2450] kvm_setup_default_irq_routing+0x27/0x30 [ 116.541232][ T2450] kvm_arch_vm_ioctl+0x1467/0x16d0 [ 116.541253][ T2450] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 116.541274][ T2450] ? _raw_spin_unlock+0x45/0x60 [ 116.541301][ T2450] ? finish_task_switch+0x139/0x770 [ 116.541330][ T2450] ? __sched_text_start+0x10/0x10 [ 116.541348][ T2450] ? enqueue_task+0x1049/0x1100 [ 116.541370][ T2450] ? preempt_schedule_common+0x2d/0x60 [ 116.541388][ T2450] ? preempt_schedule+0xc5/0xe0 [ 116.541406][ T2450] ? __asan_set_shadow_00+0x12/0x20 [ 116.541427][ T2450] ? do_vfs_ioctl+0x1824/0x2010 [ 116.541442][ T2450] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 116.541456][ T2450] ? preempt_schedule_thunk+0x1a/0x40 [ 116.541474][ T2450] ? try_to_wake_up+0x119e/0x1fd0 [ 116.541496][ T2450] kvm_vm_ioctl+0x82b/0xc40 [ 116.541512][ T2450] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 116.541528][ T2450] ? ioctl_has_perm+0x1bc/0x500 [ 116.541553][ T2450] ? __asan_memcpy+0x5a/0x80 [ 116.541576][ T2450] ? ioctl_has_perm+0x408/0x500 [ 116.541603][ T2450] ? has_cap_mac_admin+0xd0/0xd0 [ 116.541629][ T2450] ? selinux_file_ioctl+0x732/0x1480 [ 116.541652][ T2450] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 116.541675][ T2450] ? do_futex+0x37d/0x510 [ 116.541694][ T2450] ? __cfi_do_futex+0x10/0x10 [ 116.541713][ T2450] ? __fget_files+0x2bc/0x330 [ 116.541731][ T2450] ? bpf_lsm_file_ioctl+0xd/0x20 [ 116.541749][ T2450] ? security_file_ioctl+0x3e/0x110 [ 116.541772][ T2450] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 116.541787][ T2450] __se_sys_ioctl+0x123/0x1b0 [ 116.541805][ T2450] __x64_sys_ioctl+0x7f/0xa0 [ 116.541821][ T2450] x64_sys_call+0x1878/0x2ee0 [ 116.541839][ T2450] do_syscall_64+0x57/0xf0 [ 116.541854][ T2450] ? clear_bhb_loop+0x50/0xa0 [ 116.541875][ T2450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.541895][ T2450] RIP: 0033:0x7fdf6279e1d9 [ 116.541911][ T2450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.541933][ T2450] RSP: 002b:00007fdf636a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.541953][ T2450] RAX: ffffffffffffffda RBX: 00007fdf62a26180 RCX: 00007fdf6279e1d9 [ 116.541967][ T2450] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000006 [ 116.541978][ T2450] RBP: 00007fdf62835888 R08: 0000000000000000 R09: 0000000000000000 [ 116.542003][ T2450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.542014][ T2450] R13: 00007fdf62a26218 R14: 00007fdf62a26180 R15: 00007ffdf0bdeaf8 [ 116.542030][ T2450] [ 116.545667][ T402] usbhid 4-1:0.0: can't add hid device: -71 [ 116.558242][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.564473][ T402] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.575452][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.594476][ T402] usb 4-1: USB disconnect, device number 37 [ 116.602070][ T31] usb 3-1: Product: syz [ 117.030152][ T31] usb 3-1: Manufacturer: syz [ 117.041152][ T31] usb 3-1: SerialNumber: syz [ 117.052648][ T31] cdc_mbim 3-1:1.0: skipping garbage [ 117.140639][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 117.140659][ T36] audit: type=1400 audit(1791807768.366:406): avc: denied { mounton } for pid=2465 comm="syz.3.760" path="/proc/505/task" dev="proc" ino=15948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 117.220145][ T36] audit: type=1400 audit(1791807768.446:407): avc: denied { mounton } for pid=2473 comm="syz.1.762" path="/sys" dev="ramfs" ino=16781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 117.322105][ T2483] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.417866][ T36] audit: type=1400 audit(1791807768.646:408): avc: denied { write } for pid=2490 comm="syz.0.767" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.454148][ T2429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.466680][ T36] audit: type=1400 audit(1791807768.696:409): avc: denied { open } for pid=2490 comm="syz.0.767" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.467251][ T2429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.125655][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 118.151354][ T2429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.161577][ T2429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.247700][ T36] audit: type=1400 audit(1791807769.476:410): avc: denied { mount } for pid=2503 comm="syz.0.772" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.287874][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.299679][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.312318][ T2509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.314366][ T45] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 118.332747][ T2509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.333507][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.372961][ T2429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.383407][ T2429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.393281][ T31] cdc_mbim 3-1:1.0: bind() failure [ 118.400841][ T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 118.410599][ T31] cdc_ncm 3-1:1.1: bind() failure [ 118.421228][ T31] usb 3-1: USB disconnect, device number 33 [ 118.545760][ T402] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 118.568169][ T2511] rust_binder: Error in use_page_slow: ESRCH [ 118.568209][ T2511] rust_binder: use_range failure ESRCH [ 118.569371][ T45] usb 4-1: USB disconnect, device number 38 [ 118.576294][ T2511] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 118.576316][ T2511] rust_binder: Failure in copy_transaction_data: ESRCH [ 118.600299][ T2511] rust_binder: 2510:2511 transaction call to 2510:0 failed ESRCH, code 0 size 104-24 line process.rs:1120 [ 118.696719][ T402] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 118.708459][ T402] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 118.720973][ T402] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 118.731991][ T402] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.747724][ T402] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 118.757968][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.766778][ T402] usb 2-1: Product: syz [ 118.771352][ T402] usb 2-1: Manufacturer: syz [ 118.776762][ T402] usb 2-1: SerialNumber: syz [ 118.785772][ T2508] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 118.794470][ T402] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 118.807075][ T402] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 118.818905][ T402] usbserial_generic 2-1:1.0: generic converter detected [ 118.827313][ T402] usb 2-1: generic converter now attached to ttyUSB0 [ 118.915626][ T66] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 119.005002][ T861] usb 2-1: USB disconnect, device number 37 [ 119.012795][ T861] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 119.022138][ T861] usbserial_generic 2-1:1.0: device disconnected [ 119.065680][ T66] usb 1-1: device descriptor read/64, error -71 [ 119.175686][ T402] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 119.305672][ T66] usb 1-1: device descriptor read/64, error -71 [ 119.326887][ T402] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.341463][ T402] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.353881][ T402] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.364669][ T402] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 119.375207][ T402] usb 3-1: Product: syz [ 119.381348][ T313] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 119.391001][ T402] usb 3-1: Manufacturer: syz [ 119.400308][ T402] hub 3-1:4.0: USB hub found [ 119.545651][ T66] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 119.555626][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 119.562434][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.571633][ T313] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.583834][ T313] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1536, setting to 1024 [ 119.597381][ T313] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 119.607540][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.616622][ T313] usb 4-1: Product: syz [ 119.621227][ T313] usb 4-1: Manufacturer: syz [ 119.627514][ T313] usb 4-1: SerialNumber: syz [ 119.675634][ T66] usb 1-1: device descriptor read/64, error -71 [ 119.755647][ T861] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 119.808707][ T402] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 119.836279][ T402] usb 3-1: USB disconnect, device number 34 [ 119.905608][ T861] usb 2-1: Using ep0 maxpacket: 8 [ 119.913549][ T861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.923229][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 119.935934][ T66] usb 1-1: device descriptor read/64, error -71 [ 119.943374][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.954620][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 119.966951][ T861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 119.978144][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.989559][ T861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 120.001881][ T313] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 120.012048][ T861] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 120.022605][ T861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.032031][ T313] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.044470][ T313] usb 4-1: USB disconnect, device number 39 [ 120.051132][ T66] usb usb1-port1: attempt power cycle [ 120.053581][ T443] udevd[443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.057192][ T861] usb 2-1: Product: syz [ 120.081813][ T861] usb 2-1: Manufacturer: syz [ 120.087875][ T861] usb 2-1: SerialNumber: syz [ 120.093956][ T861] usb 2-1: config 0 descriptor?? [ 120.100378][ T2527] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 120.118089][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.316733][ T313] usb 2-1: USB disconnect, device number 38 [ 120.426076][ T66] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 120.442002][ T2537] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 120.452828][ T2537] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.468447][ T66] usb 1-1: device descriptor read/8, error -71 [ 120.500917][ T2544] netlink: 'syz.3.784': attribute type 13 has an invalid length. [ 120.606942][ T66] usb 1-1: device descriptor read/8, error -71 [ 120.765696][ T45] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 120.845685][ T66] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 120.876711][ T66] usb 1-1: device descriptor read/8, error -71 [ 120.916764][ T45] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 120.926238][ T45] usb 3-1: config 0 has no interface number 0 [ 120.934444][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 120.944429][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.953361][ T45] usb 3-1: Product: syz [ 120.957986][ T45] usb 3-1: Manufacturer: syz [ 120.963332][ T45] usb 3-1: SerialNumber: syz [ 120.969164][ T45] usb 3-1: config 0 descriptor?? [ 121.006624][ T66] usb 1-1: device descriptor read/8, error -71 [ 121.055697][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 121.068766][ T2556] FAULT_INJECTION: forcing a failure. [ 121.068766][ T2556] name failslab, interval 1, probability 0, space 0, times 0 [ 121.082722][ T2556] CPU: 1 UID: 0 PID: 2556 Comm: syz.3.789 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 121.082754][ T2556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.082767][ T2556] Call Trace: [ 121.082773][ T2556] [ 121.082781][ T2556] __dump_stack+0x21/0x30 [ 121.082815][ T2556] dump_stack_lvl+0x140/0x1c0 [ 121.082832][ T2556] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.082847][ T2556] ? avc_has_perm_noaudit+0x289/0x360 [ 121.082859][ T2556] dump_stack+0x19/0x20 [ 121.082872][ T2556] should_fail_ex+0x3c2/0x510 [ 121.082882][ T2556] should_failslab+0xac/0x100 [ 121.082893][ T2556] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 121.082907][ T2556] ? sock_alloc_inode+0x48/0x150 [ 121.082922][ T2556] sock_alloc_inode+0x48/0x150 [ 121.082936][ T2556] ? __cfi_sock_alloc_inode+0x10/0x10 [ 121.082950][ T2556] alloc_inode+0x7d/0x270 [ 121.082960][ T2556] ? bpf_lsm_socket_create+0xd/0x20 [ 121.082974][ T2556] new_inode_pseudo+0x19/0x40 [ 121.082984][ T2556] __sock_create+0x130/0x810 [ 121.082994][ T2556] __sys_socket+0xe1/0x1c0 [ 121.083003][ T2556] __x64_sys_socket+0x7e/0x90 [ 121.083013][ T2556] x64_sys_call+0x2608/0x2ee0 [ 121.083023][ T2556] do_syscall_64+0x57/0xf0 [ 121.083032][ T2556] ? clear_bhb_loop+0x50/0xa0 [ 121.083044][ T2556] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.083055][ T2556] RIP: 0033:0x7f968d39e1d9 [ 121.083066][ T2556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.083074][ T2556] RSP: 002b:00007f968e2e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 121.083087][ T2556] RAX: ffffffffffffffda RBX: 00007f968d625fa0 RCX: 00007f968d39e1d9 [ 121.083095][ T2556] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 121.083101][ T2556] RBP: 00007f968d435888 R08: 0000000000000000 R09: 0000000000000000 [ 121.083108][ T2556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.083114][ T2556] R13: 00007f968d626038 R14: 00007f968d625fa0 R15: 00007fff5b377208 [ 121.083123][ T2556] [ 121.083167][ T2556] socket: no more sockets [ 121.125725][ T66] usb usb1-port1: unable to enumerate USB device [ 121.225638][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 121.334331][ T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.335828][ T2559] netlink: 'syz.3.790': attribute type 16 has an invalid length. [ 121.346677][ T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.366791][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.377237][ T31] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 121.386611][ T31] usb 2-1: Product: syz [ 121.391203][ T31] usb 2-1: Manufacturer: syz [ 121.398646][ T31] hub 2-1:4.0: USB hub found [ 121.485772][ T314] rust_binder: 2510: undelivered TRANSACTION_ERROR: 29201 [ 121.585665][ T66] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 121.595625][ T45] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 121.607157][ T31] hub 2-1:4.0: 2 ports detected [ 121.612555][ T45] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 121.625796][ T45] asix 3-1:0.251: probe with driver asix failed with error -71 [ 121.635651][ T45] usb 3-1: USB disconnect, device number 35 [ 121.746753][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.758115][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.768065][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.779078][ T66] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 121.791796][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.803978][ T66] hub 4-1:1.0: bad descriptor, ignoring hub [ 121.810699][ T66] hub 4-1:1.0: probe with driver hub failed with error -5 [ 121.812160][ T31] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 121.818736][ T66] cdc_wdm 4-1:1.0: skipping garbage [ 121.825967][ T31] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 121.831288][ T66] cdc_wdm 4-1:1.0: skipping garbage [ 121.846637][ T66] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 121.895654][ T559] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 122.045673][ T559] usb 1-1: Using ep0 maxpacket: 32 [ 122.052741][ T559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.065627][ T559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.076959][ T559] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.087822][ T559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.097876][ T559] usb 1-1: config 0 descriptor?? [ 122.104409][ T559] hub 1-1:0.0: USB hub found [ 122.115709][ T66] usb 4-1: USB disconnect, device number 40 [ 122.304400][ T559] hub 1-1:0.0: 1 port detected [ 122.355639][ T31] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 122.516700][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 122.529137][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 122.543136][ T31] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 122.553668][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.562488][ T31] usb 3-1: Product: syz [ 122.567106][ T31] usb 3-1: Manufacturer: syz [ 122.572555][ T31] usb 3-1: SerialNumber: syz [ 122.779674][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.791437][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.807157][ T31] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 122.820416][ T31] usb 3-1: clock source 0 is not valid, cannot use [ 122.828605][ T31] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 122.839732][ T31] usb 3-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 122.852943][ T31] usb 3-1: USB disconnect, device number 36 [ 122.866155][ T774] udevd[774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.906867][ T559] hub 1-1:0.0: activate --> -90 [ 123.421567][ T36] audit: type=1400 audit(1791807774.646:411): avc: denied { relabelfrom } for pid=2578 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.456088][ T36] audit: type=1400 audit(1791807774.646:412): avc: denied { relabelto } for pid=2578 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.529212][ T2593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2593 comm=syz.2.800 [ 123.551594][ T36] audit: type=1400 audit(1791807774.776:413): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 123.735625][ T31] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 123.805717][ T66] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 123.836959][ T36] audit: type=1400 audit(1791807775.066:414): avc: denied { mounton } for pid=2598 comm="syz.1.803" path="mnt:[4026532444]" dev="nsfs" ino=4026532444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.896654][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.909865][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.920830][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.938053][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.945743][ T313] usb 2-1: USB disconnect, device number 39 [ 123.949911][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.967413][ T36] audit: type=1400 audit(1791807775.186:415): avc: denied { mounton } for pid=2603 comm="syz.1.805" path="/208/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 123.981407][ T31] usb 4-1: config 0 descriptor?? [ 123.995028][ T66] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 124.011866][ T66] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.027394][ T66] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.034963][ T66] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 124.045278][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.055664][ T66] usb 3-1: config 0 descriptor?? [ 124.062284][ T2597] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 124.396489][ T559] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 124.405416][ T559] usb 1-1-port1: config error [ 124.412043][ T31] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 124.422596][ T31] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 124.474394][ T66] apple 0003:05AC:027A.0017: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 124.488993][ T66] input: HID 05ac:027a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:027A.0017/input/input16 [ 124.503620][ T66] apple 0003:05AC:027A.0017: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 124.550825][ T2613] netlink: 'syz.0.807': attribute type 27 has an invalid length. [ 124.636151][ T31] usb 1-1: USB disconnect, device number 42 [ 124.935668][ T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 125.247014][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.257494][ T31] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 125.267218][ T31] usb 1-1: can't read configurations, error -71 [ 125.735866][ T66] usb 3-1: reset full-speed USB device number 37 using dummy_hcd [ 125.895681][ T31] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 126.045673][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 126.051709][ T31] usb usb1-port1: attempt power cycle [ 126.180061][ T36] audit: type=1400 audit(1791807777.406:416): avc: denied { getopt } for pid=2626 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.228289][ T36] audit: type=1400 audit(1791807777.456:417): avc: denied { checkpoint_restore } for pid=2634 comm="syz.3.814" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.267954][ T36] audit: type=1400 audit(1791807777.496:418): avc: denied { ioctl } for pid=2639 comm="syz.3.815" path="socket:[17503]" dev="sockfs" ino=17503 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.405667][ T31] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 126.414808][ T559] usb 4-1: USB disconnect, device number 41 [ 126.436051][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 126.505146][ T2649] FAULT_INJECTION: forcing a failure. [ 126.505146][ T2649] name failslab, interval 1, probability 0, space 0, times 0 [ 126.519642][ T2649] CPU: 1 UID: 0 PID: 2649 Comm: syz.3.817 Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 126.519676][ T2649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.519689][ T2649] Call Trace: [ 126.519695][ T2649] [ 126.519703][ T2649] __dump_stack+0x21/0x30 [ 126.519739][ T2649] dump_stack_lvl+0x140/0x1c0 [ 126.519765][ T2649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.519789][ T2649] ? stack_trace_save+0xaa/0x100 [ 126.519812][ T2649] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 126.519840][ T2649] dump_stack+0x19/0x20 [ 126.519865][ T2649] should_fail_ex+0x3c2/0x510 [ 126.519884][ T2649] should_failslab+0xac/0x100 [ 126.519902][ T2649] kmem_cache_alloc_node_noprof+0x45/0x420 [ 126.519918][ T2649] ? __alloc_skb+0x10c/0x360 [ 126.519929][ T2649] ? __sys_sendto+0x4aa/0x6e0 [ 126.519941][ T2649] ? __x64_sys_sendto+0xe9/0x100 [ 126.519952][ T2649] ? x64_sys_call+0x2c2c/0x2ee0 [ 126.519963][ T2649] __alloc_skb+0x10c/0x360 [ 126.519972][ T2649] tcp_stream_alloc_skb+0x43/0x370 [ 126.519985][ T2649] ? __asan_memset+0x39/0x50 [ 126.519997][ T2649] tcp_connect+0x1743/0x5ad0 [ 126.520012][ T2649] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 126.520027][ T2649] ? __cfi_tcp_connect+0x10/0x10 [ 126.520040][ T2649] ? __inet_hash_connect+0x12a4/0x17f0 [ 126.520050][ T2649] ? read_tsc+0xd/0x20 [ 126.520064][ T2649] ? tcp_fastopen_defer_connect+0x105/0x480 [ 126.520079][ T2649] ? __cfi_tcp_fastopen_defer_connect+0x10/0x10 [ 126.520094][ T2649] ? inet6_hash_connect+0x95/0xe0 [ 126.520107][ T2649] tcp_v6_connect+0x1082/0x17f0 [ 126.520119][ T2649] ? tcp_sendmsg_locked+0x4401/0x4ac0 [ 126.520131][ T2649] ? __cfi_tcp_v6_connect+0x10/0x10 [ 126.520141][ T2649] ? do_syscall_64+0x57/0xf0 [ 126.520152][ T2649] __inet_stream_connect+0x272/0xf10 [ 126.520167][ T2649] ? __cfi___inet_stream_connect+0x10/0x10 [ 126.520182][ T2649] ? kasan_save_alloc_info+0x3a/0x50 [ 126.520194][ T2649] ? __kasan_kmalloc+0x96/0xb0 [ 126.520204][ T2649] ? __kmalloc_cache_noprof+0x23c/0x470 [ 126.520230][ T2649] tcp_sendmsg_fastopen+0x3aa/0x6f0 [ 126.520244][ T2649] tcp_sendmsg_locked+0x4431/0x4ac0 [ 126.520257][ T2649] ? avc_has_perm_noaudit+0x26b/0x360 [ 126.520269][ T2649] ? avc_has_perm_noaudit+0x289/0x360 [ 126.520279][ T2649] ? __kasan_check_write+0x18/0x20 [ 126.520293][ T2649] ? _raw_spin_lock_bh+0x96/0x130 [ 126.520308][ T2649] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 126.520323][ T2649] ? __cfi_futex_wake_mark+0x10/0x10 [ 126.520335][ T2649] ? _raw_spin_unlock_bh+0x54/0x60 [ 126.520344][ T2649] ? lock_sock_nested+0x216/0x2a0 [ 126.520358][ T2649] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 126.520371][ T2649] ? check_stack_object+0x10f/0x150 [ 126.520385][ T2649] ? __check_object_size+0xdc/0x870 [ 126.520398][ T2649] ? __cfi_tcp_sendmsg+0x10/0x10 [ 126.520410][ T2649] tcp_sendmsg+0x3e/0xd0 [ 126.520422][ T2649] ? __cfi_tcp_sendmsg+0x10/0x10 [ 126.520434][ T2649] inet6_sendmsg+0xb7/0x120 [ 126.520448][ T2649] ? __cfi_inet6_sendmsg+0x10/0x10 [ 126.520461][ T2649] __sys_sendto+0x4aa/0x6e0 [ 126.520472][ T2649] ? __cfi___sys_sendto+0x10/0x10 [ 126.520484][ T2649] ? __se_sys_futex+0x13c/0x320 [ 126.520495][ T2649] ? __cfi_ksys_write+0x10/0x10 [ 126.520508][ T2649] ? __kasan_check_write+0x18/0x20 [ 126.520521][ T2649] __x64_sys_sendto+0xe9/0x100 [ 126.520532][ T2649] x64_sys_call+0x2c2c/0x2ee0 [ 126.520543][ T2649] do_syscall_64+0x57/0xf0 [ 126.520551][ T2649] ? clear_bhb_loop+0x50/0xa0 [ 126.520563][ T2649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.520574][ T2649] RIP: 0033:0x7f968d39e1d9 [ 126.520585][ T2649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.520594][ T2649] RSP: 002b:00007f968e2e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.520606][ T2649] RAX: ffffffffffffffda RBX: 00007f968d625fa0 RCX: 00007f968d39e1d9 [ 126.520615][ T2649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 126.520621][ T2649] RBP: 00007f968d435888 R08: 00002000000001c0 R09: 000000000000001c [ 126.520628][ T2649] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 126.520635][ T2649] R13: 00007f968d626038 R14: 00007f968d625fa0 R15: 00007fff5b377208 [ 126.520644][ T2649] [ 126.615867][ T313] usb 3-1: USB disconnect, device number 37 [ 126.620634][ T31] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 127.036244][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 127.042727][ T31] usb usb1-port1: unable to enumerate USB device [ 127.125622][ T313] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 127.184934][ T36] audit: type=1400 audit(1791807778.406:419): avc: denied { ioctl } for pid=2668 comm="syz.1.823" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 Æ6ÿ[ 127.305651][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 127.312416][ T313] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 127.325056][ T313] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.325610][ T559] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 127.339282][ T313] usb 3-1: config 1 interface 0 has no altsetting 0 [ 127.358206][ T313] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 127.368378][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.377336][ T313] usb 3-1: Product: syz [ 127.382229][ T313] usb 3-1: SerialNumber: syz [ 127.407183][ T2677] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.416836][ T2677] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.438823][ T36] audit: type=1400 audit(1791807778.666:420): avc: denied { getopt } for pid=2678 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.506738][ T559] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 127.516258][ T559] usb 4-1: config 0 has no interface number 0 [ 127.523040][ T559] usb 4-1: config 0 interface 41 has no altsetting 0 [ 127.532092][ T559] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 127.542164][ T559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.551928][ T559] usb 4-1: Product: syz [ 127.557085][ T559] usb 4-1: Manufacturer: syz [ 127.562150][ T559] usb 4-1: SerialNumber: syz [ 127.568409][ T559] usb 4-1: config 0 descriptor?? [ 127.792164][ T313] usbhid 3-1:1.0: can't add hid device: -71 [ 127.799231][ T313] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 127.809609][ T313] usb 3-1: USB disconnect, device number 38 [ 128.285146][ T2685] fuseblk: Unknown parameter '0fÂ0x0000000000000004' [ 128.310740][ T2685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.828'. [ 128.377257][ T559] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 128.555650][ T313] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 128.629592][ T2692] overlayfs: workdir and upperdir must be separate subtrees [ 128.716860][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.729516][ T313] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.740162][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.750370][ T313] usb 3-1: config 0 descriptor?? [ 128.959570][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 128.967231][ T313] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.978419][ T313] usb 3-1: USB disconnect, device number 39 [ 129.065731][ T861] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 129.225685][ T861] usb 1-1: Using ep0 maxpacket: 16 [ 129.234981][ T861] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 129.246056][ T861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.255294][ T861] usb 1-1: Product: syz [ 129.260208][ T861] usb 1-1: Manufacturer: syz [ 129.265632][ T861] usb 1-1: SerialNumber: syz [ 129.274649][ T861] r8152-cfgselector 1-1: Unknown version 0x0000 [ 129.282316][ T861] r8152-cfgselector 1-1: config 0 descriptor?? [ 129.290734][ T861] hub 1-1:0.0: bad descriptor, ignoring hub [ 129.297739][ T861] hub 1-1:0.0: probe with driver hub failed with error -5 [ 129.465641][ T313] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 129.492727][ T2705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.503009][ T2705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.597309][ T559] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 129.613767][ T559] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 129.625601][ T559] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 129.625762][ T861] r8152-cfgselector 1-1: USB disconnect, device number 47 [ 129.638741][ T559] usb 4-1: USB disconnect, device number 42 [ 129.653721][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.676620][ T313] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 129.692496][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.705994][ T313] usb 3-1: config 0 descriptor?? [ 130.351650][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 130.351667][ T36] audit: type=1400 audit(1791807781.576:423): avc: denied { setattr } for pid=2727 comm="syz.1.843" name="secretmem" dev="secretmem" ino=18715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.406386][ T36] audit: type=1400 audit(1791807781.636:424): avc: denied { create } for pid=2729 comm="syz.1.844" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.448060][ T36] audit: type=1400 audit(1791807781.666:425): avc: denied { write } for pid=2729 comm="syz.1.844" name="file0" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.475469][ T36] audit: type=1400 audit(1791807781.666:426): avc: denied { open } for pid=2729 comm="syz.1.844" path="/225/file0" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.503044][ T36] audit: type=1400 audit(1791807781.666:427): avc: denied { unlink } for pid=297 comm="syz-executor" name="file0" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.531154][ T313] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 130.544924][ T313] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 130.565406][ C1] ------------[ cut here ]------------ [ 130.571559][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 130.581021][ C1] index 511 is out of range for type 'const int[34]' [ 130.588364][ C1] CPU: 1 UID: 0 PID: 443 Comm: udevd Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 130.588405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.588422][ C1] Call Trace: [ 130.588429][ C1] [ 130.588438][ C1] __dump_stack+0x21/0x30 [ 130.588480][ C1] dump_stack_lvl+0x140/0x1c0 [ 130.588514][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.588549][ C1] ? path_lookupat+0x155/0x440 [ 130.588571][ C1] ? __se_sys_newfstatat+0x127/0x3c0 [ 130.588595][ C1] ? x64_sys_call+0x1821/0x2ee0 [ 130.588620][ C1] dump_stack+0x19/0x20 [ 130.588652][ C1] ubsan_epilogue+0xe/0x40 [ 130.588674][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 130.588705][ C1] aiptek_irq+0x208d/0x2a00 [ 130.588733][ C1] ? _raw_spin_unlock+0x45/0x60 [ 130.588768][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 130.588800][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 130.588833][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 130.588864][ C1] dummy_timer+0xa3f/0x4900 [ 130.588905][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 130.588937][ C1] ? timerqueue_del+0xd7/0x130 [ 130.588967][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 130.589001][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 130.589033][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 130.589062][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 130.589088][ C1] ? read_tsc+0xd/0x20 [ 130.589122][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 130.589159][ C1] hrtimer_run_softirq+0x159/0x560 [ 130.589187][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 130.589223][ C1] handle_softirqs+0x1aa/0x5b0 [ 130.589250][ C1] __irq_exit_rcu+0x47/0xb0 [ 130.589275][ C1] irq_exit_rcu+0xd/0x30 [ 130.589298][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 130.589327][ C1] [ 130.589334][ C1] [ 130.589341][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 130.589379][ C1] RIP: 0010:__wake_up+0xa/0x190 [ 130.589413][ C1] Code: cc cc cc e8 f8 75 42 04 0f 1f 84 00 00 00 00 00 b8 59 cb 54 e9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 28 48 89 4d b0 41 89 d4 89 75 d0 49 [ 130.589435][ C1] RSP: 0018:ffffc9000daef6c0 EFLAGS: 00000246 [ 130.589458][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.589475][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffffc9000daef800 [ 130.589490][ C1] RBP: ffffc9000daef6c8 R08: ffff8881f6560d9f R09: 1ffff1103ecac1b3 [ 130.589508][ C1] R10: dffffc0000000000 R11: ffffed103ecac1b4 R12: ffff88811380acd0 [ 130.589527][ C1] R13: 1ffff1103ecac1b3 R14: ffff88813cdc2310 R15: dffffc0000000000 [ 130.589548][ C1] __d_add+0x610/0xac0 [ 130.589582][ C1] d_splice_alias+0x115/0x3a0 [ 130.589615][ C1] kernfs_iop_lookup+0x2c6/0x320 [ 130.589640][ C1] __lookup_slow+0x2e5/0x420 [ 130.589668][ C1] ? lookup_one_len+0x300/0x300 [ 130.589690][ C1] ? down_read+0x7f/0xe0 [ 130.589719][ C1] lookup_slow+0x57/0x80 [ 130.589741][ C1] walk_component+0x308/0x450 [ 130.589773][ C1] path_lookupat+0x155/0x440 [ 130.589795][ C1] filename_lookup+0x22d/0x5a0 [ 130.589817][ C1] ? __cfi_filename_lookup+0x10/0x10 [ 130.589843][ C1] ? __cfi___check_object_size+0x10/0x10 [ 130.589876][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 130.589908][ C1] vfs_statx+0x106/0x210 [ 130.589929][ C1] ? vfs_fstatat+0x1d0/0x1d0 [ 130.589956][ C1] ? getname_flags+0x203/0x6b0 [ 130.589996][ C1] vfs_fstatat+0xe5/0x1d0 [ 130.590017][ C1] __se_sys_newfstatat+0x127/0x3c0 [ 130.590041][ C1] ? __x64_sys_newfstatat+0xc0/0xc0 [ 130.590066][ C1] ? call_rcu_hurry+0x30/0x30 [ 130.590106][ C1] __x64_sys_newfstatat+0x9f/0xc0 [ 130.590129][ C1] x64_sys_call+0x1821/0x2ee0 [ 130.590153][ C1] do_syscall_64+0x57/0xf0 [ 130.590172][ C1] ? clear_bhb_loop+0x50/0xa0 [ 130.590200][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.590226][ C1] RIP: 0033:0x7fd878111b0a [ 130.590245][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 130.590265][ C1] RSP: 002b:00007ffd3de3d968 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 130.590289][ C1] RAX: ffffffffffffffda RBX: 00007ffd3de3ee90 RCX: 00007fd878111b0a [ 130.590307][ C1] RDX: 00007ffd3de3d970 RSI: 00007ffd3de3da00 RDI: 00000000ffffff9c [ 130.590324][ C1] RBP: 000055568136d540 R08: 00007ffd3de3ee90 R09: 0000000000000000 [ 130.590340][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 000055568136d630 [ 130.590355][ C1] R13: 00007ffd3de3da00 R14: 00005556813680f0 R15: 00007ffd3de3f690 [ 130.590375][ C1] [ 130.590383][ C1] ---[ end trace ]--- [ 131.104313][ C1] ------------[ cut here ]------------ [ 131.110428][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 131.120339][ C1] index 512 is out of range for type 'const int[34]' [ 131.127669][ C1] CPU: 1 UID: 0 PID: 443 Comm: udevd Not tainted syzkaller #0 9109b4058d136ef0ac9398910d6f8e272823abe4 [ 131.127705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.127721][ C1] Call Trace: [ 131.127728][ C1] [ 131.127737][ C1] __dump_stack+0x21/0x30 [ 131.127777][ C1] dump_stack_lvl+0x140/0x1c0 [ 131.127811][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.127845][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 131.127874][ C1] dump_stack+0x19/0x20 [ 131.127901][ C1] ubsan_epilogue+0xe/0x40 [ 131.127920][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 131.127946][ C1] aiptek_irq+0x1f3c/0x2a00 [ 131.127973][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 131.128002][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 131.128033][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 131.128061][ C1] dummy_timer+0xa3f/0x4900 [ 131.128101][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 131.128134][ C1] ? timerqueue_del+0xd7/0x130 [ 131.128161][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 131.128185][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 131.128214][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 131.128242][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 131.128266][ C1] ? read_tsc+0xd/0x20 [ 131.128298][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 131.128333][ C1] hrtimer_run_softirq+0x159/0x560 [ 131.128359][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 131.128405][ C1] handle_softirqs+0x1aa/0x5b0 [ 131.128431][ C1] __irq_exit_rcu+0x47/0xb0 [ 131.128452][ C1] irq_exit_rcu+0xd/0x30 [ 131.128474][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 131.128501][ C1] [ 131.128508][ C1] [ 131.128515][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 131.128542][ C1] RIP: 0010:__wake_up+0xa/0x190 [ 131.128575][ C1] Code: cc cc cc e8 f8 75 42 04 0f 1f 84 00 00 00 00 00 b8 59 cb 54 e9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 ec 28 48 89 4d b0 41 89 d4 89 75 d0 49 [ 131.128593][ C1] RSP: 0018:ffffc9000daef6c0 EFLAGS: 00000246 [ 131.128613][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000 [ 131.128627][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffffc9000daef800 [ 131.128642][ C1] RBP: ffffc9000daef6c8 R08: ffff8881f6560d9f R09: 1ffff1103ecac1b3 [ 131.128659][ C1] R10: dffffc0000000000 R11: ffffed103ecac1b4 R12: ffff88811380acd0 [ 131.128677][ C1] R13: 1ffff1103ecac1b3 R14: ffff88813cdc2310 R15: dffffc0000000000 [ 131.128698][ C1] __d_add+0x610/0xac0 [ 131.128730][ C1] d_splice_alias+0x115/0x3a0 [ 131.128758][ C1] kernfs_iop_lookup+0x2c6/0x320 [ 131.128781][ C1] __lookup_slow+0x2e5/0x420 [ 131.128802][ C1] ? lookup_one_len+0x300/0x300 [ 131.128821][ C1] ? down_read+0x7f/0xe0 [ 131.128846][ C1] lookup_slow+0x57/0x80 [ 131.128864][ C1] walk_component+0x308/0x450 [ 131.128891][ C1] path_lookupat+0x155/0x440 [ 131.128909][ C1] filename_lookup+0x22d/0x5a0 [ 131.128931][ C1] ? __cfi_filename_lookup+0x10/0x10 [ 131.128955][ C1] ? __cfi___check_object_size+0x10/0x10 [ 131.128987][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 131.129016][ C1] vfs_statx+0x106/0x210 [ 131.129034][ C1] ? vfs_fstatat+0x1d0/0x1d0 [ 131.129052][ C1] ? getname_flags+0x203/0x6b0 [ 131.129084][ C1] vfs_fstatat+0xe5/0x1d0 [ 131.129103][ C1] __se_sys_newfstatat+0x127/0x3c0 [ 131.129126][ C1] ? __x64_sys_newfstatat+0xc0/0xc0 [ 131.129149][ C1] ? call_rcu_hurry+0x30/0x30 [ 131.129186][ C1] __x64_sys_newfstatat+0x9f/0xc0 [ 131.129208][ C1] x64_sys_call+0x1821/0x2ee0 [ 131.129231][ C1] do_syscall_64+0x57/0xf0 [ 131.129250][ C1] ? clear_bhb_loop+0x50/0xa0 [ 131.129277][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.129301][ C1] RIP: 0033:0x7fd878111b0a [ 131.129320][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 131.129339][ C1] RSP: 002b:00007ffd3de3d968 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 131.129362][ C1] RAX: ffffffffffffffda RBX: 00007ffd3de3ee90 RCX: 00007fd878111b0a [ 131.129376][ C1] RDX: 00007ffd3de3d970 RSI: 00007ffd3de3da00 RDI: 00000000ffffff9c [ 131.129402][ C1] RBP: 000055568136d540 R08: 00007ffd3de3ee90 R09: 0000000000000000 [ 131.129417][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 000055568136d630 [ 131.129431][ C1] R13: 00007ffd3de3da00 R14: 00005556813680f0 R15: 00007ffd3de3f690 [ 131.129450][ C1] [ 131.129458][ C1] ---[ end trace ]--- [ 131.938889][ T861] usb 3-1: USB disconnect, device number 40 [ 131.938922][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19