last executing test programs: 1m12.332700025s ago: executing program 2 (id=291): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4c010) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x40) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x8, 0x1ff, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffefffface6e3cd, 0x0, 0x1, 0xffffffffffffffff, 0xfd, 0xa]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.246345778s ago: executing program 2 (id=293): socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/49, 0x31}], 0x1, 0x36, 0x5) 1m12.232584569s ago: executing program 2 (id=294): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7a7, 0x81, 0x5, 0x400, {{0x2f, 0x4, 0x0, 0x1f, 0xbc, 0x68, 0x0, 0x9b, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x0, [{@empty, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x3}, {@empty, 0xfffffffd}, {@broadcast, 0xfffff801}]}, @timestamp={0x44, 0x14, 0x57, 0x0, 0xc, [0xfcc7, 0x3, 0x9, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x9, [{@private=0xa010100, 0x7}]}, @rr={0x7, 0x7, 0xb8, [@private=0xa010101]}, @cipso={0x86, 0x4c, 0x3, [{0x0, 0x4, "f7ab"}, {0x6, 0x2}, {0x1, 0xa, "b1665c24e9aa61e7"}, {0x5, 0x9, "06e793d6b6f253"}, {0x2, 0x10, "e28430aae786a3743a3e9fd5dabe"}, {0x0, 0xe, "d615db7a26273ff430901987"}, {0x5, 0xf, "9953cea3cbd121cd05e620a63e"}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1m12.218810299s ago: executing program 2 (id=295): r0 = socket(0x21, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x103, 0x4}], 0x10}}], 0x1, 0x404cc10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f011cdbe8650f01744466350b000000440d22c066b9800000c00f326635000400000f34bfbfb90f01c52e2e262e660f383935360f090f3066660ffdd6d1cd66efbafc0cec0f21ccd5d5fbfbff078ed83e363e3e67cb670fc72f", 0x5a}], 0x1, 0x1f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x10, 0x0, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x2}, @noop, @cipso={0x86, 0x14, 0x1, [{0x0, 0xe, "6e29562bb60020e0736859b1"}]}]}}}}}) mkdir(&(0x7f0000000400)='./bus\x00', 0xb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r9 = dup2(r8, r6) fallocate(r9, 0x0, 0x8, 0x4) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_auto}, {@uuid_on}, {@volatile}]}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) r11 = getpid() syz_pidfd_open(r11, 0x0) 1m12.052552195s ago: executing program 2 (id=296): timer_create(0x9, 0x0, &(0x7f0000002c40)) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1m12.023993475s ago: executing program 2 (id=297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto(r1, 0x0, 0x40, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1m11.931565229s ago: executing program 32 (id=297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto(r1, 0x0, 0x40, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 10.827203028s ago: executing program 0 (id=900): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00008500000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x4, 0xb1, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x103c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x1, 0x8, 0x72, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x14}, [@mixer_unit={0xa, 0x24, 0x4, 0x3, 0x3, "d119c19b1a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x5, 0xe, "13", "d80f9d"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x410, 0xda, 0xc, 0x6, {0x7, 0x25, 0x1, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x0, 0x8, "18ce28db"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x97, 0x4, 0x80, 0x14, "2e5d12"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x73, 0x7d, 0x18}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x66, 0x4, {0x7, 0x25, 0x1, 0xc, 0x1, 0x100}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x1, 0x9, 0x20, 0x5}, 0x12b, &(0x7f0000000200)={0x5, 0xf, 0x12b, 0x3, [@generic={0x102, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x6c, "2c647e1abba1427210b3f78d81eadc36"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x5, 0xf, 0x2, [0x3f00]}]}, 0x2, [{0x58, &(0x7f0000000340)=@string={0x58, 0x3, "bb9237780d856aa0dcbd8e1cd3ba71ac0d19187aa1edd873e5bbf7eeb9e5a91bddad294d987caf4381043c02b864bfa5d38c88429723d410cd4106e691c177d46f0496226a1c493de937d97ceeba0cafbb218b53266e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000580)={0x14, &(0x7f0000000440)={0x40, 0x22, 0xb1, {0xb1, 0xd, "889d248736eae6668a7bdebe9ae3d8e43b28165cea55234fe95bff623d0abee2fc17e2e56bc0481157cad45d7b004a3290888834f0c3ccf726607379f3f2121e292c976c0a6c471c9efc0071d3ab5e1aca5bd8d29729981d2332c940e8ad365d9529cac91d86cc6c2f215fec12046ecc8dbd751accb3d57f6fa4aa80e319628e9867f28daa190e5343c5e326462968753b90f6ff9c838112df4f0dca204f3d0c25018e7fd7a0bd1db9bbb563521403"}}, &(0x7f0000000500)={0x0, 0x3, 0x67, @string={0x67, 0x3, "387b7eb161c94694b9aea63d13fadcb4e63d074cbe09fdaabd8ccc1ce0b250efb96c3ca8d5cb2ce628819227a4ba981164725ddaf84b442d675de0647f3d2da712d8b8a0d0c754971c7d6433700fef42a5c9af3d638db6a2ecacd2cf7523c6edad0583f57d"}}}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x0, 0xc, 0x86, "a7816e4a18b265155839fe645dac4ff8bec0e008a9e9c32fbb4382211619c36334047ff691ab8c52064bab34732e8a19adf18f06f659386f98634bc43f29c15af3982b42c3fda748869abe833046f960b5bb8441cfd4e698d62e52883cee8fea9de059fd8118277547262374b35252afed83e069ca60284e8c5f0a6f61dabb445becb19c4268"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x81, 0x3, "66e1c7"}, &(0x7f0000000740)={0x20, 0x82, 0x2, "a439"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "009b3d"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "d0"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "b431f9"}}) 7.831728771s ago: executing program 0 (id=920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000100f64dec2c93b0921a6b257a17ff4fd2f2b1aa64f5d1626e"], 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ftruncate(r1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1000, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_eeprom={0xb, 0x0, 0x200, 0x1, "f7"}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x1, 0x1, 0xd3, 0x6, 0xa}) 7.296373079s ago: executing program 0 (id=928): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f07"], 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0xa00}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001000)=""/147, 0x93}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@buf={0x40, &(0x7f0000000180)="4d3caf680064961247b2638842adfb940df3bfa89d08eaab4408f446256225f25fe08b48dd3c5876c16ec6a5fe92ccaee2a7b95c5b27aa368e8cb73470a8221d"}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000010700c11f0400001020301c2ab54b7718f521107090400000003010000002100000001220000090581030000000000"], &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="040f190001140000ff00"]}) 4.318416372s ago: executing program 0 (id=941): r0 = gettid() ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) read$FUSE(r2, &(0x7f00000014c0)={0x2020}, 0x2020) 3.392550473s ago: executing program 0 (id=943): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000240)={0x1fd, 0x2c0, 0x300, 0x0}) syz_usb_ep_write(r0, 0x44, 0xf, &(0x7f0000000000)="a9072133413ff9471596e422b20d9b") 1.888499715s ago: executing program 3 (id=960): connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r1 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCADDRT(r1, 0x8914, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x103, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) 1.858152076s ago: executing program 3 (id=961): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000002c0)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x80000000000) 1.831085827s ago: executing program 3 (id=964): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x1f, 0x31, 0x81, 0x80, 0x0, 0x0, 0x4, 0x80, 0x4}, {0xfffffffc, 0x3, 0xfe, 0x0, 0x1, 0x61, 0xfd, 0xfd, 0x1, 0x1, 0x23, 0x3, 0x20000000000000}, {0x8000, 0xa, 0x22, 0x8, 0x44, 0x0, 0x5f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00000500050000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x37fe0) 1.772437449s ago: executing program 3 (id=965): syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x8}}, 0x28) 1.772157529s ago: executing program 3 (id=966): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404355450000000000000109022400010000780b0904000001030002000921f97f000122e30109058103"], 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x10, [@dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010102, @private=0xa010100, @private=0xa010100]}]}}}], 0x28}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000440)=""/138, 0x8a) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000d00)) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) 1.032404824s ago: executing program 1 (id=970): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r0 = socket$key(0xf, 0x3, 0x2) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="29000000742a33c942bd1b9c82a4110602000000ffcfe700dd000004bf000435ea11c21d0005000000", 0x29}, {&(0x7f0000000340)="a28c1fb8356d5ccf85ccc2f45ccefe3d5f2d1a7c4e439922231fa868de48b88bb1272c1b55eb44ace66a241440e3c23d6ea6863e7b444dd547aff68cbc5341ee43f8f3d4e6c075", 0x47}, {&(0x7f0000000240)="7de05666891ddfa6b356c95224ea419eb41987e41b6e52e332e1d70e33217eeaadd7d4696badef0b43c50c344b6792db5a9401edc4549d2e8b185ac9f1e38153d7ac4e05319466c2017dfd655d5f4b4c6f7506e16a324aac9e9c019993effd41bac42484b7e860460700000000000000e1a98cb3fe48f80938977682f47106623bd7dd4eff9dd036ebebf9f7bef1571cda79fd62e404a2f179157de8a3b800a6f31ee91577cde45a9306f46da2c0a9def5ea8b1559e8c9b4a6562fb39168eb4a1ea33ffc2ffd567908f2a6dce5562e0c7a54f9be39de8114f5a325a6443816", 0xfffffffffffffd6d}], 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x70}}, 0x81) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.031206744s ago: executing program 1 (id=971): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x6) r1 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r1}}], [{@fowner_lt={'fowner<', r2}}, {@flag='async'}]}) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) syz_usb_connect$uac3(0x0, 0x7c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x8f6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0xff, 0x0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x31, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xc2, 0x101, 0x6, 0x4, 0x2, 0x3, 0x5, 0x7f, 0x80}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x200, 0x3, 0x2, 0x3, 0x8, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd2, 0x1, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0xa, 0x1, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 880.43841ms ago: executing program 4 (id=974): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0x2000000, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 880.09993ms ago: executing program 4 (id=975): fsopen(0x0, 0x1) mkdir(&(0x7f0000000540)='./file0\x00', 0x20) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000180)={0x0, 0x5, 0x1000, 0x3, 0x6, 0x7, 0x0, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000440)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x24, 0x2) r2 = socket$inet6(0xa, 0x80000, 0x85) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 879.6123ms ago: executing program 4 (id=976): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c00048013000100"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f07"], 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0xb522f000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f00000004c0)) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f0000000100)={0x20, 0x21, 0xab, {0xab, 0x23, "e0deb486d04df124e08fda2cc50a42763e8d8579e9d0ba6a2f2e6376b7b77679ac0d86f4cc84e343f23cc1befa57347bf3c5301bda633e7f826e7a5ebda5881d2ba593d424eb9216abe995709ee4cc04b73c80f23689bd346ba1e1dcd0ad57598634149baf4b003d749039c87aebb175fc32285d62d30dc01403ed502b065bfde8418c0cc834b62a65f12d71b6a2cb6fca7851926a208716deb00326386319fb65916e4c729ef7675b"}}, &(0x7f0000000580)={0x0, 0x3, 0x66, @string={0x66, 0x3, "707569d664108d2ad2239ed071c4387990b41e6e7252f09543a78a6a89c06de2cb941ed32178d3643f159aef8e9a9eb38155b310ffd0b279f476e4f9ab4444dc263a4cbc1df6a60faf309d38d5bc09ac9477700fd2ca984ee7d252dfe0647f577fcf4632"}}, &(0x7f00000001c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x1, 0x0, 0xb, ')'}, @global=@item_4={0x3, 0x1, 0x0, "452d23cf"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x38e}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x0, 0x13, 0xf8, "4c80037a20e665b519a695f55c44187360babd6a876c031e9cf05c6e4d550b74e14831de01f01439d82042dd2f170a7c38198e9b2ace3146fe432a38d2dc6600f0243f1a325ee4fb8ca63e8b6f362da25d5513fddca99a5dfe46088f60fd5167b2a8e4ec5e33d1abb88682426f00808e09daba3f8a75cca8541504aa55c3c199c4f85d9d11562ad010f8b473b34fc298d20f216655bcc07376ae3ed495c1238331bf225838c8d2e04abe23d267cc457eca5db1cb68b3917638bfdcac3516de372a3651c59e657179efda79bc223c0e328fb1a115e715a0602f4e5da49e8822d61f8beab7d5ff512927c3f76cb25cebb82ec19b0b6ab8cf99"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x1, 0x32, "ab3003c4b4afb8c0da3ea5e40afa132bc05b1cd382e2be01431b25ed99eae3bad5136a097cd349d8f8c48b231ac3af0f910c"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x6}}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x210, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0xd1}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x96, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9c9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfa16}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x116}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x8000}, 0x40860) 481.619363ms ago: executing program 1 (id=977): landlock_create_ruleset(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) 473.753994ms ago: executing program 1 (id=978): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x2}]) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1d8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) listen(r4, 0xffff) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000680)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 368.338267ms ago: executing program 0 (id=979): r0 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xb000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x10008000000, 0x4, 0x7649, 0x1, 0x0, 0x9, 0x1000000000, 0x2, 0xffffffffffffffff], 0xeeee0000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000940)=[@cpuid={0x64, 0x18, {0x1, 0xb5d}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x3f, 0x0, 0x21, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xd8, 0x1}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401a, 0xf236, 0x1, 0x4}}, @in_dx={0x69, 0x20, {0xcb89, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5db, 0x0, 0x6, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest64=0x280e, 0x7fffffff, 0x4, 0xf}}, @wrmsr={0x65, 0x20, {0xb07, 0x4c}}, @in_dx={0x69, 0x20, {0xa86f}}], 0x190}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x5, 0x6, 0x7ff, 0x2, 0x4, 0xefffffffffffffff, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x1c, 0xfff, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r6, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000280)={&(0x7f00004cc000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x30, r8, 0x1, 0x70bd29, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x18, 0x4, 0x3, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 345.176958ms ago: executing program 1 (id=980): connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r1 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCADDRT(r1, 0x8914, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x103, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) 229.564582ms ago: executing program 3 (id=981): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @remote}}}]}]}, 0x88}}, 0x0) 174.171534ms ago: executing program 1 (id=982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x1010) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000017c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f0000001340)="5f1d", 0x2}], 0x2}, 0xc4) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) 48.502098ms ago: executing program 4 (id=983): landlock_create_ruleset(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x80111500, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) 48.197758ms ago: executing program 4 (id=984): mkdir(&(0x7f00000003c0)='./file0\x00', 0x93) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000003800)={0xfffffffffffffffd, 0x0, &(0x7f00000037c0)={&(0x7f00000036c0)=@report={0x4c, 0x20, 0x200, 0x70bd2b, 0x25dfdbfe, {0xff, {@in=@rand_addr=0x64010102, @in6=@remote, 0x4e22, 0x7, 0x4e23, 0x7, 0x8, 0x0, 0xa0, 0xff}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40011}, 0x400c054) r2 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r4, 0x0, 0x4, &(0x7f0000000080)="d69012", 0x3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460504028d0400000000000000020006000400000019000000380000005e0200000804000004002000dd"], 0x38) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x6}, 0xb}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x120, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 0s ago: executing program 4 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c88a80700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): 76.288049][ T307] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 76.296269][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.308087][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.318118][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.331112][ T307] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.340442][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.349520][ T307] usb 2-1: config 0 descriptor?? [ 76.657903][ T1417] tmpfs: Unknown parameter 'nofwap' [ 76.663625][ T36] audit: type=1400 audit(1774710587.554:256): avc: denied { remount } for pid=1416 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.731977][ T36] audit: type=1400 audit(1774710587.624:257): avc: denied { connect } for pid=1405 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.768137][ T307] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 76.791299][ T307] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 76.799105][ T307] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 76.817988][ T307] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 77.018917][ T306] usb 2-1: USB disconnect, device number 23 [ 77.149789][ T36] audit: type=1400 audit(1774710588.044:258): avc: denied { mount } for pid=1430 comm="syz.4.439" name="/" dev="ramfs" ino=13408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.172092][ T36] audit: type=1400 audit(1774710588.044:259): avc: denied { nlmsg_read } for pid=1430 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.189179][ T1433] fuseblk: Bad value for 'group_id' [ 77.193379][ T1434] fuseblk: Bad value for 'group_id' [ 77.197739][ T1433] fuseblk: Bad value for 'group_id' [ 77.203280][ T1434] fuseblk: Bad value for 'group_id' [ 77.232130][ T1434] kvm: kvm [1432]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 77.240960][ T1434] kvm: kvm [1432]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 77.555958][ T1443] netlink: 'syz.1.444': attribute type 11 has an invalid length. [ 77.628629][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.767010][ T307] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 77.788095][ T10] usb 5-1: config 0 has no interfaces? [ 77.793689][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.802902][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.811553][ T10] usb 5-1: config 0 descriptor?? [ 77.918187][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.928351][ T307] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.939166][ T307] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 77.948293][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.956283][ T307] usb 4-1: Product: syz [ 77.960485][ T307] usb 4-1: Manufacturer: syz [ 77.965212][ T307] usb 4-1: SerialNumber: syz [ 77.970453][ T307] usb 4-1: config 0 descriptor?? [ 78.017873][ T502] usb 5-1: USB disconnect, device number 6 [ 78.457025][ T307] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.608455][ T307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.616863][ T307] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 78.627820][ T307] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 78.645164][ T307] usb 5-1: string descriptor 0 read error: -22 [ 78.653395][ T1455] netlink: 25 bytes leftover after parsing attributes in process `syz.1.449'. [ 78.655150][ T36] audit: type=1400 audit(1774710589.544:260): avc: denied { write } for pid=1454 comm="syz.1.449" name="/" dev="incremental-fs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.663218][ T1455] netlink: 'syz.1.449': attribute type 16 has an invalid length. [ 78.686906][ T307] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 78.692936][ T1455] netlink: 'syz.1.449': attribute type 25 has an invalid length. [ 78.701932][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.709672][ T1455] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.449'. [ 78.717396][ T36] audit: type=1400 audit(1774710589.544:261): avc: denied { add_name } for pid=1454 comm="syz.1.449" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.752862][ T36] audit: type=1400 audit(1774710589.544:262): avc: denied { create } for pid=1454 comm="syz.1.449" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.773833][ T36] audit: type=1400 audit(1774710589.544:263): avc: denied { associate } for pid=1454 comm="syz.1.449" name="memory.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.953431][ T307] usb 5-1: Can't get UAC3 power state for id 10 [ 79.007041][ T502] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 79.158285][ T502] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 79.166449][ T502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.176269][ T502] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.189308][ T502] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.198437][ T502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.207567][ T502] usb 2-1: config 0 descriptor?? [ 79.213517][ T502] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 79.561158][ T307] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 80.169952][ T36] audit: type=1400 audit(1774710591.064:264): avc: denied { ioctl } for pid=1436 comm="syz.4.441" path="socket:[13481]" dev="sockfs" ino=13481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.532072][ T502] usb 4-1: USB disconnect, device number 17 [ 80.561458][ T36] audit: type=1400 audit(1774710591.454:265): avc: denied { relabelfrom } for pid=1466 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.581700][ T36] audit: type=1400 audit(1774710591.454:266): avc: denied { relabelto } for pid=1466 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.658632][ T36] audit: type=1400 audit(1774710591.554:267): avc: denied { map } for pid=1468 comm="syz.3.454" path="socket:[13522]" dev="sockfs" ino=13522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.686528][ T307] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 80.713080][ T307] usb 5-1: USB disconnect, device number 7 [ 80.729682][ T1471] netlink: 'syz.4.455': attribute type 16 has an invalid length. [ 80.735053][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.738661][ T1471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1471 comm=syz.4.455 [ 81.247057][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 81.398336][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.408682][ T45] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.420067][ T45] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 81.431126][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.439631][ T45] usb 4-1: Product: syz [ 81.443989][ T45] usb 4-1: Manufacturer: syz [ 81.448757][ T45] usb 4-1: SerialNumber: syz [ 81.454304][ T45] usb 4-1: config 0 descriptor?? [ 81.757030][ T307] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 81.798850][ T408] usb 2-1: USB disconnect, device number 24 [ 81.908131][ T307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.919230][ T307] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 81.930225][ T307] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 81.941294][ T307] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 81.953471][ T307] usb 5-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 81.962811][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.971083][ T307] usb 5-1: Product: syz [ 81.975255][ T307] usb 5-1: Manufacturer: syz [ 81.980087][ T307] usb 5-1: SerialNumber: syz [ 81.985499][ T1509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 82.147053][ T408] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 82.194301][ T1509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 82.201570][ T1509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 82.308429][ T408] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.316529][ T408] usb 2-1: not running at top speed; connect to a high speed hub [ 82.325099][ T408] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 82.336134][ T408] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 82.348719][ T408] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 82.357903][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.365900][ T408] usb 2-1: Product: syz [ 82.370132][ T408] usb 2-1: Manufacturer: syz [ 82.374751][ T408] usb 2-1: SerialNumber: syz [ 82.583084][ T408] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 82.606293][ T408] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 82.617890][ T408] usb 2-1: USB disconnect, device number 25 [ 82.626129][ T736] udevd[736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.815591][ T1509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 82.823053][ T1509] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 83.031105][ T307] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 83.038248][ T307] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 83.231835][ T307] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 83.238804][ T307] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 83.252745][ T307] usb 5-1: USB disconnect, device number 8 [ 83.259180][ T307] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 83.268414][ T36] audit: type=1400 audit(1774710594.154:268): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.290985][ T36] audit: type=1400 audit(1774710594.154:269): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.312298][ T36] audit: type=1400 audit(1774710594.154:270): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=3172 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.337644][ T36] audit: type=1400 audit(1774710594.154:271): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3172 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.363369][ T36] audit: type=1400 audit(1774710594.154:272): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3172 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.389704][ T36] audit: type=1400 audit(1774710594.184:273): avc: denied { read } for pid=1542 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.412832][ T36] audit: type=1400 audit(1774710594.184:274): avc: denied { open } for pid=1542 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.417007][ T773] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 83.440658][ T36] audit: type=1400 audit(1774710594.184:275): avc: denied { getattr } for pid=1542 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.471515][ T36] audit: type=1400 audit(1774710594.334:276): avc: denied { write } for pid=1541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.494551][ T36] audit: type=1400 audit(1774710594.334:277): avc: denied { add_name } for pid=1541 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.588139][ T773] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 83.596409][ T773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.607497][ T773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.617413][ T773] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.630531][ T773] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.639677][ T773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.648692][ T773] usb 2-1: config 0 descriptor?? [ 84.023848][ T502] usb 4-1: USB disconnect, device number 18 [ 84.056016][ T773] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 84.064604][ T773] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 84.075477][ T773] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.270091][ T502] usb 2-1: USB disconnect, device number 26 [ 84.801755][ T1581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.917417][ T1588] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 84.929180][ T1588] SELinux: failed to load policy [ 85.417199][ T773] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 85.537008][ T307] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.547017][ T306] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 85.568063][ T773] usb 2-1: config 5 has an invalid interface number: 66 but max is 0 [ 85.576173][ T773] usb 2-1: config 5 has no interface number 0 [ 85.582289][ T773] usb 2-1: config 5 interface 66 has no altsetting 0 [ 85.590394][ T773] usb 2-1: New USB device found, idVendor=7d94, idProduct=77d3, bcdDevice=81.05 [ 85.599519][ T773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.607650][ T773] usb 2-1: Product: syz [ 85.611815][ T773] usb 2-1: Manufacturer: syz [ 85.616400][ T773] usb 2-1: SerialNumber: syz [ 85.687009][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 85.693257][ T307] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 85.701969][ T307] usb 5-1: config 0 has no interface number 0 [ 85.708399][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.709702][ T307] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 85.716928][ T306] usb 4-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 85.725386][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.735698][ T306] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 85.743620][ T307] usb 5-1: Product: syz [ 85.754911][ T306] usb 4-1: string descriptor 0 read error: -22 [ 85.757113][ T307] usb 5-1: Manufacturer: syz [ 85.763244][ T306] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 85.767929][ T307] usb 5-1: SerialNumber: syz [ 85.776987][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.785673][ T307] usb 5-1: config 0 descriptor?? [ 85.796423][ T307] smsc95xx v2.0.0 [ 86.093485][ T1602] incfs: Can't find or create .incomplete dir in ./cgroup [ 86.100798][ T1602] incfs: mount failed -22 [ 86.331675][ T773] usb-storage 2-1:5.66: USB Mass Storage device detected [ 86.379123][ T773] usb 2-1: USB disconnect, device number 27 [ 86.667051][ T773] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 86.817032][ T773] usb 2-1: Using ep0 maxpacket: 8 [ 86.828579][ T1621] syz.0.503 uses obsolete (PF_INET,SOCK_PACKET) [ 86.829965][ T773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.845229][ T773] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 86.858222][ T773] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 86.867384][ T773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.876562][ T773] usb 2-1: config 0 descriptor?? [ 86.882825][ T773] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 87.019030][ T1598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.027813][ T1598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.046677][ T307] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 87.059867][ T307] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.072952][ T307] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 87.083948][ T307] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 87.096152][ T307] usb 5-1: USB disconnect, device number 9 [ 87.113098][ T1628] syzkaller0: entered promiscuous mode [ 87.118602][ T1628] syzkaller0: entered allmulticast mode [ 87.205427][ T773] usb 2-1: USB disconnect, device number 28 [ 87.215076][ T1631] netlink: 96 bytes leftover after parsing attributes in process `syz.1.505'. [ 87.397015][ T307] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 87.548200][ T307] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 87.556342][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.566307][ T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.579432][ T307] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.587000][ T773] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 87.588613][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.604883][ T307] usb 5-1: config 0 descriptor?? [ 87.610784][ T307] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 87.737049][ T773] usb 2-1: Using ep0 maxpacket: 32 [ 87.743611][ T773] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 87.754988][ T773] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 87.768178][ T773] usb 2-1: New USB device found, idVendor=0499, idProduct=5007, bcdDevice= 0.40 [ 87.777470][ T773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.787827][ T773] usb 2-1: Product: syz [ 87.795518][ T773] usb 2-1: Manufacturer: syz [ 87.800313][ T773] usb 2-1: SerialNumber: syz [ 88.033542][ T773] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 88.044398][ T773] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 88.062887][ T773] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 88.074249][ T773] usb 2-1: USB disconnect, device number 29 [ 88.090102][ T735] udevd[735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.323268][ T773] usb 4-1: USB disconnect, device number 19 [ 88.443971][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 88.443990][ T36] audit: type=1400 audit(1774710599.334:286): avc: denied { bpf } for pid=1652 comm="syz.3.514" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.787021][ T307] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 88.937070][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 88.943518][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.955014][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.964806][ T307] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.976306][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.986458][ T307] usb 2-1: config 0 descriptor?? [ 88.992629][ T307] hub 2-1:0.0: USB hub found [ 89.194263][ T307] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 89.204198][ T307] usbhid 2-1:0.0: can't add hid device: -71 [ 89.210422][ T307] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 89.237366][ T307] usb 2-1: USB disconnect, device number 30 [ 89.387060][ T773] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 89.538096][ T773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.548298][ T773] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.557392][ T773] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.573273][ T773] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 89.582474][ T773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.590630][ T773] usb 4-1: Product: syz [ 89.594786][ T773] usb 4-1: Manufacturer: syz [ 89.599550][ T773] usb 4-1: SerialNumber: syz [ 89.604831][ T773] usb 4-1: config 0 descriptor?? [ 89.610978][ T773] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 89.617525][ T773] usb 4-1: No valid video chain found. [ 89.782829][ T36] audit: type=1400 audit(1774710600.674:287): avc: denied { create } for pid=1703 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 89.815861][ T773] usb 4-1: USB disconnect, device number 20 [ 90.083941][ T307] usb 5-1: USB disconnect, device number 10 [ 90.109846][ T36] audit: type=1400 audit(1774710601.004:288): avc: denied { name_bind } for pid=1709 comm="syz.4.526" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.488147][ T36] audit: type=1400 audit(1774710601.384:289): avc: denied { read } for pid=1719 comm="syz.3.529" path="socket:[14237]" dev="sockfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.619786][ T36] audit: type=1400 audit(1774710601.514:290): avc: denied { setopt } for pid=1723 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.722488][ T1729] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 90.722600][ T36] audit: type=1400 audit(1774710601.614:291): avc: denied { write } for pid=1728 comm="syz.1.532" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 90.736519][ T1729] input: syz0 as /devices/virtual/input/input8 [ 91.007023][ T307] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 91.037026][ T773] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 91.187006][ T773] usb 2-1: Using ep0 maxpacket: 32 [ 91.193663][ T773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.204941][ T773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.214769][ T306] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 91.222730][ T773] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.232037][ T773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.241517][ T773] usb 2-1: config 0 descriptor?? [ 91.253608][ T773] hub 2-1:0.0: USB hub found [ 91.283735][ T1736] syzkaller0: entered promiscuous mode [ 91.289363][ T1736] syzkaller0: entered allmulticast mode [ 91.377077][ T306] usb 5-1: device descriptor read/64, error -71 [ 91.455560][ T773] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 91.466203][ T773] usbhid 2-1:0.0: can't add hid device: -71 [ 91.472514][ T773] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 91.497343][ T773] usb 2-1: USB disconnect, device number 31 [ 91.617045][ T306] usb 5-1: device descriptor read/64, error -71 [ 91.857039][ T306] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 91.983172][ T36] audit: type=1400 audit(1774710602.874:292): avc: denied { create } for pid=1744 comm="syz.1.539" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 91.989831][ T306] usb 5-1: device descriptor read/64, error -71 [ 92.018863][ T36] audit: type=1400 audit(1774710602.904:293): avc: denied { remove_name } for pid=1744 comm="syz.1.539" name="file0" dev="incremental-fs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.043089][ T36] audit: type=1400 audit(1774710602.904:294): avc: denied { rmdir } for pid=1744 comm="syz.1.539" name="file0" dev="incremental-fs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.074916][ T36] audit: type=1400 audit(1774710602.964:295): avc: denied { write } for pid=1746 comm="syz.1.540" path="socket:[15452]" dev="sockfs" ino=15452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.277042][ T306] usb 5-1: device descriptor read/64, error -71 [ 92.387235][ T306] usb usb5-port1: attempt power cycle [ 92.727043][ T306] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 92.758230][ T306] usb 5-1: device descriptor read/8, error -71 [ 92.888142][ T306] usb 5-1: device descriptor read/8, error -71 [ 92.953200][ T1753] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 93.019739][ T1754] netlink: 'syz.1.542': attribute type 16 has an invalid length. [ 93.028333][ T1754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 93.037830][ T1754] bridge_slave_1: left allmulticast mode [ 93.043586][ T1754] bridge_slave_1: left promiscuous mode [ 93.049599][ T1754] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.057816][ T1754] bridge_slave_0: left allmulticast mode [ 93.063577][ T1754] bridge_slave_0: left promiscuous mode [ 93.069509][ T1754] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.137080][ T306] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 93.158274][ T306] usb 5-1: device descriptor read/8, error -71 [ 93.298092][ T306] usb 5-1: device descriptor read/8, error -71 [ 93.407195][ T306] usb usb5-port1: unable to enumerate USB device [ 93.576826][ T36] audit: type=1400 audit(1774710604.464:296): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.608373][ T36] audit: type=1400 audit(1774710604.494:297): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.636872][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.655436][ T307] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 93.663380][ T307] usb 4-1: can't read configurations, error -71 [ 93.690348][ T1760] syzkaller0: entered promiscuous mode [ 93.695915][ T1760] syzkaller0: entered allmulticast mode [ 94.074337][ T1783] syzkaller0: entered promiscuous mode [ 94.079888][ T1783] syzkaller0: entered allmulticast mode [ 94.141332][ T1788] xt_NFQUEUE: number of total queues is 0 [ 94.377582][ T306] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 94.407025][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 94.469716][ T36] audit: type=1400 audit(1774710605.364:298): avc: denied { ioctl } for pid=1795 comm="syz.0.560" path="socket:[15600]" dev="sockfs" ino=15600 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.527070][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 94.533599][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.544891][ T45] usb 2-1: device descriptor read/64, error -71 [ 94.551214][ T306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.564244][ T306] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.573532][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.582467][ T306] usb 5-1: config 0 descriptor?? [ 94.798361][ T45] usb 2-1: device descriptor read/64, error -71 [ 94.801659][ T1804] syzkaller0: entered promiscuous mode [ 94.810263][ T1804] syzkaller0: entered allmulticast mode [ 95.047081][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 95.177000][ T45] usb 2-1: device descriptor read/64, error -71 [ 95.247824][ T1816] rust_binder: Write failure EFAULT in pid:412 [ 95.417781][ T45] usb 2-1: device descriptor read/64, error -71 [ 95.537105][ T45] usb usb2-port1: attempt power cycle [ 95.877051][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 95.898042][ T45] usb 2-1: device descriptor read/8, error -71 [ 96.028188][ T45] usb 2-1: device descriptor read/8, error -71 [ 96.084451][ T36] audit: type=1326 audit(1774710606.974:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1818 comm="syz.3.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd81739c819 code=0x0 [ 96.267101][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 96.288015][ T45] usb 2-1: device descriptor read/8, error -71 [ 96.418043][ T45] usb 2-1: device descriptor read/8, error -71 [ 96.527136][ T45] usb usb2-port1: unable to enumerate USB device [ 97.039184][ T306] usbhid 5-1:0.0: can't add hid device: -71 [ 97.046776][ T1832] syzkaller0: entered promiscuous mode [ 97.051352][ T306] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.052416][ T1832] syzkaller0: entered allmulticast mode [ 97.063432][ T306] usb 5-1: USB disconnect, device number 15 [ 97.260815][ T36] audit: type=1400 audit(1774710608.154:300): avc: denied { getopt } for pid=1838 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.295279][ T36] audit: type=1400 audit(1774710608.184:301): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.358360][ T1849] incfs: mount failed -22 [ 97.375595][ T1851] syzkaller0: entered promiscuous mode [ 97.381197][ T1851] syzkaller0: entered allmulticast mode [ 97.447037][ T306] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 97.598051][ T306] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 97.606265][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.617278][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.627162][ T306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.640094][ T306] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.649166][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.658050][ T306] usb 5-1: config 0 descriptor?? [ 97.717005][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 97.847027][ T45] usb 2-1: device descriptor read/64, error -71 [ 97.954692][ T1871] incfs: mount failed -22 [ 97.974049][ T1873] syzkaller0: entered promiscuous mode [ 97.979700][ T1873] syzkaller0: entered allmulticast mode [ 98.066852][ T306] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 98.078733][ T306] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 98.087128][ T45] usb 2-1: device descriptor read/64, error -71 [ 98.101235][ T306] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.227388][ T36] audit: type=1400 audit(1774710609.124:302): avc: denied { setattr } for pid=1885 comm="syz.3.597" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.327012][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 98.335426][ T10] usb 5-1: USB disconnect, device number 16 [ 98.467050][ T45] usb 2-1: device descriptor read/64, error -71 [ 98.506153][ T1897] incfs: mount failed -22 [ 98.707018][ T45] usb 2-1: device descriptor read/64, error -71 [ 98.817391][ T45] usb usb2-port1: attempt power cycle [ 98.927013][ T307] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 99.086995][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 99.093176][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.104150][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.113925][ T307] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.123232][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.131715][ T307] usb 4-1: config 0 descriptor?? [ 99.137725][ T307] hub 4-1:0.0: USB hub found [ 99.157022][ T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 99.178461][ T45] usb 2-1: device descriptor read/8, error -71 [ 99.207025][ T306] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 99.308057][ T45] usb 2-1: device descriptor read/8, error -71 [ 99.358209][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.369227][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.379123][ T306] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 99.388252][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.397341][ T306] usb 5-1: config 0 descriptor?? [ 99.539268][ T307] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 99.547004][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 99.548739][ T307] usbhid 4-1:0.0: can't add hid device: -71 [ 99.561185][ T307] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.568007][ T45] usb 2-1: device descriptor read/8, error -71 [ 99.587603][ T307] usb 4-1: USB disconnect, device number 23 [ 99.698158][ T45] usb 2-1: device descriptor read/8, error -71 [ 99.808177][ T45] usb usb2-port1: unable to enumerate USB device [ 100.088699][ T1929] incfs: mount failed -22 [ 100.114869][ T1932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.123527][ T1932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.877059][ T307] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 101.007519][ T36] audit: type=1400 audit(1774710611.904:303): avc: denied { connect } for pid=1942 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.028060][ T307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.038427][ T307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 101.048236][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.062810][ T307] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 101.072167][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.089922][ T307] usb 2-1: Product: syz [ 101.094131][ T307] usb 2-1: Manufacturer: syz [ 101.099369][ T307] usb 2-1: SerialNumber: syz [ 101.105629][ T307] usb 2-1: config 0 descriptor?? [ 101.110982][ T1937] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 101.125261][ T307] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 102.073211][ T306] usb 5-1: string descriptor 0 read error: -71 [ 102.081311][ T306] uclogic 0003:5543:0045.0012: failed retrieving string descriptor #200: -71 [ 102.092949][ T306] uclogic 0003:5543:0045.0012: failed retrieving pen parameters: -71 [ 102.103135][ T306] uclogic 0003:5543:0045.0012: failed probing pen v2 parameters: -71 [ 102.111493][ T306] uclogic 0003:5543:0045.0012: failed probing parameters: -71 [ 102.133436][ T306] uclogic 0003:5543:0045.0012: probe with driver uclogic failed with error -71 [ 102.148123][ T306] usb 5-1: USB disconnect, device number 17 [ 102.436992][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 102.466999][ T306] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 102.533287][ T1982] xt_NFQUEUE: number of total queues is 0 [ 102.587048][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 102.593585][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.604814][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.614694][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.624118][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.632722][ T306] usb 5-1: Using ep0 maxpacket: 8 [ 102.633211][ T36] audit: type=1400 audit(1774710613.534:304): avc: denied { append } for pid=1988 comm="syz.0.641" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.638954][ T31] usb 4-1: config 0 descriptor?? [ 102.666283][ T306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.675211][ T31] hub 4-1:0.0: USB hub found [ 102.682019][ T306] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 102.697544][ T36] audit: type=1400 audit(1774710613.554:305): avc: denied { ioctl } for pid=1988 comm="syz.0.641" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.698380][ T306] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 102.731644][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.739685][ T306] usb 5-1: Product: syz [ 102.745109][ T306] usb 5-1: Manufacturer: syz [ 102.749756][ T306] usb 5-1: SerialNumber: syz [ 102.956255][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.965051][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.974583][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.983206][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.992817][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.999394][ T2007] mmap: syz.0.648 (2007): VmData 29274112 exceed data ulimit 84. Update limits or use boot option ignore_rlimit_data. [ 103.001394][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.021820][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.030612][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.038951][ T1977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.047533][ T1977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.063731][ T306] usb 5-1: USB disconnect, device number 18 [ 103.077264][ T623] udevd[623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.097448][ T31] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 103.106875][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 103.112867][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.138138][ T31] usb 4-1: USB disconnect, device number 24 [ 103.513875][ T10] usb 2-1: USB disconnect, device number 40 [ 103.574419][ T2012] FAULT_INJECTION: forcing a failure. [ 103.574419][ T2012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.587699][ T2012] CPU: 1 UID: 0 PID: 2012 Comm: syz.4.650 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 103.587735][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.587748][ T2012] Call Trace: [ 103.587755][ T2012] [ 103.587763][ T2012] __dump_stack+0x21/0x30 [ 103.587806][ T2012] dump_stack_lvl+0x140/0x1c0 [ 103.587837][ T2012] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.587864][ T2012] dump_stack+0x19/0x20 [ 103.587889][ T2012] should_fail_ex+0x3d7/0x530 [ 103.587915][ T2012] should_fail+0xf/0x20 [ 103.587937][ T2012] should_fail_usercopy+0x1e/0x30 [ 103.587960][ T2012] __kvm_read_guest_page+0x177/0x210 [ 103.587981][ T2012] kvm_vcpu_read_guest+0x3a6/0x510 [ 103.588002][ T2012] read_emulate+0x30/0x50 [ 103.588022][ T2012] emulator_read_write_onepage+0x7df/0xd20 [ 103.588053][ T2012] emulator_read_write+0x1ef/0x580 [ 103.588074][ T2012] emulator_read_emulated+0x40/0x50 [ 103.588101][ T2012] ? __cfi_emulator_read_emulated+0x10/0x10 [ 103.588128][ T2012] segmented_read+0x1c5/0x400 [ 103.588149][ T2012] x86_emulate_insn+0x777/0x3fe0 [ 103.588167][ T2012] ? xaddq_rax_rdx+0x10/0x10 [ 103.588196][ T2012] x86_emulate_instruction+0xb5c/0x1a30 [ 103.588221][ T2012] kvm_mmu_page_fault+0x336/0x970 [ 103.588244][ T2012] handle_ept_violation+0x256/0x450 [ 103.588264][ T2012] ? vmx_vcpu_run+0x1116/0x1f70 [ 103.588291][ T2012] ? __cfi_handle_ept_violation+0x10/0x10 [ 103.588311][ T2012] vmx_handle_exit+0x12c0/0x1b10 [ 103.588336][ T2012] ? kvm_deliver_exception_payload+0xd7/0x200 [ 103.588359][ T2012] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 103.588386][ T2012] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 103.588413][ T2012] vcpu_run+0x49f7/0x7840 [ 103.588447][ T2012] ? signal_pending+0xc0/0xc0 [ 103.588472][ T2012] ? complete_emulated_mmio+0x4fb/0x790 [ 103.588495][ T2012] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 103.588522][ T2012] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 103.588547][ T2012] ? kstrtoull+0x13b/0x1e0 [ 103.588595][ T2012] ? kstrtouint+0x78/0xf0 [ 103.588617][ T2012] ? ioctl_has_perm+0x1bc/0x500 [ 103.588641][ T2012] ? __asan_memcpy+0x5a/0x80 [ 103.588667][ T2012] ? ioctl_has_perm+0x408/0x500 [ 103.588690][ T2012] ? has_cap_mac_admin+0xd0/0xd0 [ 103.588713][ T2012] ? __kasan_check_write+0x18/0x20 [ 103.588738][ T2012] ? mutex_lock_killable+0x97/0x1d0 [ 103.588759][ T2012] ? __cfi_mutex_lock_killable+0x10/0x10 [ 103.588787][ T2012] ? proc_fail_nth_write+0x184/0x220 [ 103.588811][ T2012] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 103.588834][ T2012] kvm_vcpu_ioctl+0xa48/0x1000 [ 103.588863][ T2012] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 103.588891][ T2012] ? __cfi_vfs_write+0x10/0x10 [ 103.588917][ T2012] ? __kasan_check_write+0x18/0x20 [ 103.588941][ T2012] ? mutex_unlock+0x90/0x240 [ 103.588960][ T2012] ? __cfi_mutex_unlock+0x10/0x10 [ 103.588979][ T2012] ? __fget_files+0x2c5/0x340 [ 103.588998][ T2012] ? __fget_files+0x2c5/0x340 [ 103.589017][ T2012] ? bpf_lsm_file_ioctl+0xd/0x20 [ 103.589037][ T2012] ? security_file_ioctl+0x3e/0x110 [ 103.589060][ T2012] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 103.589087][ T2012] __se_sys_ioctl+0x132/0x1b0 [ 103.589106][ T2012] __x64_sys_ioctl+0x7f/0xa0 [ 103.589124][ T2012] x64_sys_call+0x1878/0x2ee0 [ 103.589153][ T2012] do_syscall_64+0x57/0xf0 [ 103.589177][ T2012] ? clear_bhb_loop+0x50/0xa0 [ 103.589204][ T2012] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.589230][ T2012] RIP: 0033:0x7f2e2619c819 [ 103.589249][ T2012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.589267][ T2012] RSP: 002b:00007f2e26fc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.589291][ T2012] RAX: ffffffffffffffda RBX: 00007f2e26415fa0 RCX: 00007f2e2619c819 [ 103.589307][ T2012] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 103.589321][ T2012] RBP: 00007f2e26fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 103.589335][ T2012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.589349][ T2012] R13: 00007f2e26416038 R14: 00007f2e26415fa0 R15: 00007fffd791de68 [ 103.589366][ T2012] [ 104.015149][ T36] audit: type=1400 audit(1774710614.904:306): avc: denied { mount } for pid=2015 comm="syz.1.651" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.053887][ T307] kernel read not supported for file /mls (pid: 307 comm: kworker/0:2) [ 104.060296][ T36] audit: type=1400 audit(1774710614.904:307): avc: denied { mounton } for pid=2015 comm="syz.1.651" path="/165/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 104.087804][ T36] audit: type=1400 audit(1774710614.914:308): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.407022][ T306] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 104.437029][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 104.558128][ T306] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 104.568261][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.582751][ T306] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 104.591895][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.600022][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 104.605197][ T306] usb 4-1: Product: syz [ 104.609456][ T306] usb 4-1: Manufacturer: syz [ 104.614417][ T306] usb 4-1: SerialNumber: syz [ 104.619836][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.630989][ T306] usb 4-1: config 0 descriptor?? [ 104.636127][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.646051][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.646267][ T2034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.655147][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.670939][ T306] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 104.679396][ T31] usb 5-1: config 0 descriptor?? [ 104.688459][ T31] hub 5-1:0.0: USB hub found [ 105.087414][ T31] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 105.096479][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 105.102638][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.127507][ T31] usb 5-1: USB disconnect, device number 19 [ 105.177062][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 105.328258][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.339198][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.348973][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 105.358050][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.366666][ T10] usb 2-1: config 0 descriptor?? [ 105.657953][ T36] audit: type=1326 audit(1774710616.554:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 105.681116][ T36] audit: type=1326 audit(1774710616.554:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 105.704390][ T36] audit: type=1326 audit(1774710616.554:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 105.727415][ T36] audit: type=1326 audit(1774710616.554:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 105.828632][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.837587][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.019225][ T36] kauditd_printk_skb: 2570 callbacks suppressed [ 106.019244][ T36] audit: type=1326 audit(1774710616.904:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.050434][ T36] audit: type=1326 audit(1774710616.914:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.082870][ T36] audit: type=1326 audit(1774710616.914:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.107469][ T36] audit: type=1326 audit(1774710616.914:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.131104][ T36] audit: type=1326 audit(1774710616.914:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.154393][ T36] audit: type=1326 audit(1774710616.914:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.180085][ T36] audit: type=1326 audit(1774710616.914:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.205331][ T36] audit: type=1326 audit(1774710616.914:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.228685][ T36] audit: type=1326 audit(1774710616.914:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.264036][ T36] audit: type=1326 audit(1774710616.914:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2046 comm="syz.4.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2619c819 code=0x50000 [ 106.409407][ T2066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 106.448653][ T2068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 107.184496][ T306] usb 4-1: USB disconnect, device number 25 [ 107.675393][ T2111] FAULT_INJECTION: forcing a failure. [ 107.675393][ T2111] name failslab, interval 1, probability 0, space 0, times 0 [ 107.704768][ T2111] CPU: 1 UID: 0 PID: 2111 Comm: syz.3.688 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 107.704814][ T2111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.704827][ T2111] Call Trace: [ 107.704833][ T2111] [ 107.704841][ T2111] __dump_stack+0x21/0x30 [ 107.704871][ T2111] dump_stack_lvl+0x140/0x1c0 [ 107.704895][ T2111] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.704919][ T2111] ? crypto_authenc_init_tfm+0xc9/0x250 [ 107.704944][ T2111] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 107.704969][ T2111] dump_stack+0x19/0x20 [ 107.704992][ T2111] should_fail_ex+0x3d7/0x530 [ 107.705015][ T2111] ? esp6_init_state+0x777/0x1290 [ 107.705035][ T2111] should_failslab+0xac/0x100 [ 107.705063][ T2111] __kmalloc_noprof+0x69/0x500 [ 107.705088][ T2111] ? esp6_init_state+0x777/0x1290 [ 107.705107][ T2111] esp6_init_state+0x777/0x1290 [ 107.705125][ T2111] ? netlink_sendmsg+0x7fe/0xb10 [ 107.705149][ T2111] ? x64_sys_call+0x2a4c/0x2ee0 [ 107.705177][ T2111] ? __cfi_esp6_init_state+0x10/0x10 [ 107.705201][ T2111] ? __xfrm_init_state+0x453/0x1070 [ 107.705229][ T2111] ? __asan_memcpy+0x5a/0x80 [ 107.705254][ T2111] __xfrm_init_state+0xad3/0x1070 [ 107.705283][ T2111] xfrm_add_sa+0x2b62/0x3ed0 [ 107.705308][ T2111] ? selinux_capable+0x38/0x50 [ 107.705329][ T2111] ? __cfi_xfrm_add_sa+0x10/0x10 [ 107.705382][ T2111] xfrm_user_rcv_msg+0x5f3/0x910 [ 107.705408][ T2111] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 107.705435][ T2111] ? __asan_memcpy+0x5a/0x80 [ 107.705461][ T2111] ? avc_has_perm_noaudit+0x28a/0x360 [ 107.705491][ T2111] ? avc_has_perm+0x155/0x240 [ 107.705518][ T2111] netlink_rcv_skb+0x256/0x4f0 [ 107.705543][ T2111] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 107.705567][ T2111] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 107.705592][ T2111] ? __kasan_check_write+0x18/0x20 [ 107.705618][ T2111] ? mutex_lock+0x97/0x1d0 [ 107.705639][ T2111] ? __cfi_mutex_lock+0x10/0x10 [ 107.705658][ T2111] ? netlink_autobind+0x1c0/0x1c0 [ 107.705685][ T2111] xfrm_netlink_rcv+0x76/0x90 [ 107.705709][ T2111] netlink_unicast+0x8c3/0xa60 [ 107.705733][ T2111] netlink_sendmsg+0x7fe/0xb10 [ 107.705758][ T2111] ? __cfi_netlink_sendmsg+0x10/0x10 [ 107.705786][ T2111] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 107.705824][ T2111] ? security_socket_sendmsg+0x3d/0x100 [ 107.705844][ T2111] ? __cfi_netlink_sendmsg+0x10/0x10 [ 107.705868][ T2111] ____sys_sendmsg+0xa8c/0xae0 [ 107.705896][ T2111] ? __import_iovec+0x5ad/0x7c0 [ 107.705916][ T2111] ? __sys_sendmsg_sock+0x50/0x50 [ 107.705944][ T2111] ? import_iovec+0x80/0xb0 [ 107.705964][ T2111] ___sys_sendmsg+0x2a6/0x370 [ 107.705989][ T2111] ? __sys_sendmsg+0x2a0/0x2a0 [ 107.706015][ T2111] ? proc_fail_nth_write+0x184/0x220 [ 107.706040][ T2111] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 107.706071][ T2111] __x64_sys_sendmsg+0x1fb/0x2d0 [ 107.706097][ T2111] ? fput+0x1a4/0x240 [ 107.706118][ T2111] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 107.706144][ T2111] ? ksys_write+0x1f3/0x260 [ 107.706171][ T2111] ? __kasan_check_read+0x15/0x20 [ 107.706198][ T2111] x64_sys_call+0x2a4c/0x2ee0 [ 107.706225][ T2111] do_syscall_64+0x57/0xf0 [ 107.706251][ T2111] ? clear_bhb_loop+0x50/0xa0 [ 107.706278][ T2111] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.706305][ T2111] RIP: 0033:0x7fd81739c819 [ 107.706323][ T2111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.706341][ T2111] RSP: 002b:00007fd8182d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.706365][ T2111] RAX: ffffffffffffffda RBX: 00007fd817615fa0 RCX: 00007fd81739c819 [ 107.706381][ T2111] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 107.706394][ T2111] RBP: 00007fd8182d5090 R08: 0000000000000000 R09: 0000000000000000 [ 107.706407][ T2111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.706420][ T2111] R13: 00007fd817616038 R14: 00007fd817615fa0 R15: 00007ffcb71ee068 [ 107.706438][ T2111] [ 108.487042][ T408] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 108.646998][ T408] usb 4-1: device descriptor read/64, error -71 [ 108.890584][ T408] usb 4-1: device descriptor read/64, error -71 [ 108.901697][ T2155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.910624][ T2155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.971290][ T2166] fuse: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff' [ 109.137692][ T408] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 109.277051][ T408] usb 4-1: device descriptor read/64, error -71 [ 109.487015][ T399] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 109.517040][ T408] usb 4-1: device descriptor read/64, error -71 [ 109.627058][ T408] usb usb4-port1: attempt power cycle [ 109.638187][ T399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 109.648219][ T399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 109.659529][ T399] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 109.668825][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.677041][ T399] usb 5-1: Product: syz [ 109.681219][ T399] usb 5-1: Manufacturer: syz [ 109.685821][ T399] usb 5-1: SerialNumber: syz [ 109.691359][ T399] usb 5-1: config 0 descriptor?? [ 109.696670][ T2190] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 109.704162][ T2190] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 109.847651][ T2202] FAULT_INJECTION: forcing a failure. [ 109.847651][ T2202] name failslab, interval 1, probability 0, space 0, times 0 [ 109.860574][ T2202] CPU: 1 UID: 0 PID: 2202 Comm: syz.0.727 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 109.860609][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.860622][ T2202] Call Trace: [ 109.860628][ T2202] [ 109.860635][ T2202] __dump_stack+0x21/0x30 [ 109.860668][ T2202] dump_stack_lvl+0x140/0x1c0 [ 109.860694][ T2202] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.860729][ T2202] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 109.860752][ T2202] dump_stack+0x19/0x20 [ 109.860775][ T2202] should_fail_ex+0x3d7/0x530 [ 109.860801][ T2202] should_failslab+0xac/0x100 [ 109.860821][ T2202] kmem_cache_alloc_noprof+0x42/0x410 [ 109.860849][ T2202] ? __pte_alloc+0x1ae/0x440 [ 109.860873][ T2202] ? __anon_vma_prepare+0xac/0x560 [ 109.860900][ T2202] __anon_vma_prepare+0xac/0x560 [ 109.860926][ T2202] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 109.860951][ T2202] do_pte_missing+0x3445/0x44f0 [ 109.860971][ T2202] ? __kasan_check_write+0x18/0x20 [ 109.860998][ T2202] ? pte_marker_clear+0x1b0/0x1b0 [ 109.861017][ T2202] ? __cfi___pmd_alloc+0x10/0x10 [ 109.861035][ T2202] ? vma_wants_writenotify+0xcd/0x2e0 [ 109.861055][ T2202] handle_mm_fault+0x11b8/0x1bf0 [ 109.861074][ T2202] ? __cfi_handle_mm_fault+0x10/0x10 [ 109.861093][ T2202] ? __cfi_find_vma+0x10/0x10 [ 109.861117][ T2202] ? vma_is_secretmem+0x11/0x50 [ 109.861140][ T2202] __get_user_pages+0x1170/0x22b0 [ 109.861162][ T2202] ? populate_vma_page_range+0x220/0x220 [ 109.861182][ T2202] ? down_read+0x7f/0xe0 [ 109.861202][ T2202] ? __cfi_down_read+0x10/0x10 [ 109.861223][ T2202] __mm_populate+0x2f8/0x430 [ 109.861244][ T2202] vm_mmap_pgoff+0x426/0x4b0 [ 109.861271][ T2202] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 109.861298][ T2202] ? ksys_write+0x1f3/0x260 [ 109.861325][ T2202] ksys_mmap_pgoff+0xfa/0x1e0 [ 109.861353][ T2202] __x64_sys_mmap+0x121/0x140 [ 109.861383][ T2202] x64_sys_call+0x13bf/0x2ee0 [ 109.861412][ T2202] do_syscall_64+0x57/0xf0 [ 109.861439][ T2202] ? clear_bhb_loop+0x50/0xa0 [ 109.861467][ T2202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.861495][ T2202] RIP: 0033:0x7f4ecb19c819 [ 109.861514][ T2202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.861532][ T2202] RSP: 002b:00007f4ecc0db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.861557][ T2202] RAX: ffffffffffffffda RBX: 00007f4ecb415fa0 RCX: 00007f4ecb19c819 [ 109.861574][ T2202] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 109.861589][ T2202] RBP: 00007f4ecc0db090 R08: ffffffffffffffff R09: 0000000000000000 [ 109.861604][ T2202] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000002 [ 109.861617][ T2202] R13: 00007f4ecb416038 R14: 00007f4ecb415fa0 R15: 00007ffe4c2cc3d8 [ 109.861635][ T2202] [ 109.967000][ T408] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 109.970403][ T2190] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 110.018025][ T408] usb 4-1: device descriptor read/8, error -71 [ 110.019772][ T2190] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 110.158042][ T408] usb 4-1: device descriptor read/8, error -71 [ 110.270276][ T2218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'. [ 110.283787][ T2218] rust_binder: Write failure EFAULT in pid:495 [ 110.383960][ T399] Error reading MAC address [ 110.406344][ T399] usb 5-1: USB disconnect, device number 20 [ 110.457141][ T408] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 110.490480][ T408] usb 4-1: device descriptor read/8, error -71 [ 110.618578][ T408] usb 4-1: device descriptor read/8, error -71 [ 110.624880][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 110.633623][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 110.737154][ T408] usb usb4-port1: unable to enumerate USB device [ 110.905372][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.913067][ T2254] SELinux: failed to load policy [ 110.918131][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.925776][ T2254] SELinux: failed to load policy [ 110.930901][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.938636][ T2254] SELinux: failed to load policy [ 110.943660][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.951254][ T2254] SELinux: failed to load policy [ 110.956432][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.964299][ T2254] SELinux: failed to load policy [ 110.969456][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.977053][ T2254] SELinux: failed to load policy [ 110.982223][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 110.989802][ T2254] SELinux: failed to load policy [ 110.994801][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.002548][ T2254] SELinux: failed to load policy [ 111.007567][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.015301][ T2254] SELinux: failed to load policy [ 111.020333][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.027915][ T2254] SELinux: failed to load policy [ 111.032884][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.040791][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.048431][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.056014][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.063766][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.071419][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.079067][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.087048][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.094665][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.102684][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.110619][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.118274][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.125892][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.133648][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.141276][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.148934][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.156614][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.164478][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.172213][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.179931][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.187815][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.195583][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.203363][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.211111][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.220962][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.228990][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.236762][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.246406][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.254245][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.262159][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.270128][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.285164][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.292907][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.300725][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.311294][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.319703][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.327697][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.335601][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.356994][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.364677][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.373829][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.381745][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.389421][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.397199][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.405440][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.413666][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.421502][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.443570][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.451501][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.459384][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.467074][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.474727][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.484291][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.492309][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.500233][ T2254] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 111.607941][ T2306] loop2: detected capacity change from 0 to 7 [ 111.620660][ T2306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.629735][ T2306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.137048][ T10] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 112.140351][ T2322] fuse: Bad value for 'rootmode' [ 112.237012][ T36] kauditd_printk_skb: 16422 callbacks suppressed [ 112.237033][ T36] audit: type=1400 audit(1774710623.124:19315): avc: denied { map } for pid=2330 comm="syz.3.776" path="socket:[20552]" dev="sockfs" ino=20552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.288193][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.300030][ T10] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.313237][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 112.418929][ T2340] FAULT_INJECTION: forcing a failure. [ 112.418929][ T2340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.432085][ T2340] CPU: 1 UID: 0 PID: 2340 Comm: syz.1.780 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 112.432120][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.432134][ T2340] Call Trace: [ 112.432141][ T2340] [ 112.432149][ T2340] __dump_stack+0x21/0x30 [ 112.432182][ T2340] dump_stack_lvl+0x140/0x1c0 [ 112.432206][ T2340] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.432231][ T2340] ? __check_object_size+0x527/0x830 [ 112.432250][ T2340] dump_stack+0x19/0x20 [ 112.432265][ T2340] should_fail_ex+0x3d7/0x530 [ 112.432280][ T2340] should_fail+0xf/0x20 [ 112.432298][ T2340] should_fail_usercopy+0x1e/0x30 [ 112.432323][ T2340] __kvm_read_guest_page+0x177/0x210 [ 112.432344][ T2340] kvm_vcpu_read_guest+0x3a6/0x510 [ 112.432365][ T2340] read_emulate+0x30/0x50 [ 112.432385][ T2340] emulator_read_write_onepage+0x7df/0xd20 [ 112.432399][ T2340] emulator_read_write+0x1ef/0x580 [ 112.432412][ T2340] emulator_read_emulated+0x40/0x50 [ 112.432429][ T2340] ? __cfi_emulator_read_emulated+0x10/0x10 [ 112.432449][ T2340] segmented_read+0x1c5/0x400 [ 112.432469][ T2340] x86_emulate_insn+0x777/0x3fe0 [ 112.432542][ T2340] ? xaddq_rax_rdx+0x10/0x10 [ 112.432560][ T2340] x86_emulate_instruction+0xb5c/0x1a30 [ 112.432575][ T2340] kvm_mmu_page_fault+0x336/0x970 [ 112.432590][ T2340] handle_ept_violation+0x256/0x450 [ 112.432609][ T2340] ? vmx_vcpu_run+0x1116/0x1f70 [ 112.432636][ T2340] ? __cfi_handle_ept_violation+0x10/0x10 [ 112.432656][ T2340] vmx_handle_exit+0x12c0/0x1b10 [ 112.432680][ T2340] ? kvm_deliver_exception_payload+0xd7/0x200 [ 112.432699][ T2340] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 112.432715][ T2340] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 112.432736][ T2340] vcpu_run+0x49f7/0x7840 [ 112.432763][ T2340] ? signal_pending+0xc0/0xc0 [ 112.432789][ T2340] ? complete_emulated_mmio+0x4fb/0x790 [ 112.432812][ T2340] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 112.432837][ T2340] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 112.432853][ T2340] ? kstrtoull+0x13b/0x1e0 [ 112.432867][ T2340] ? kstrtouint+0x78/0xf0 [ 112.432880][ T2340] ? ioctl_has_perm+0x1bc/0x500 [ 112.432895][ T2340] ? __asan_memcpy+0x5a/0x80 [ 112.432930][ T2340] ? ioctl_has_perm+0x408/0x500 [ 112.432953][ T2340] ? has_cap_mac_admin+0xd0/0xd0 [ 112.432976][ T2340] ? __kasan_check_write+0x18/0x20 [ 112.432996][ T2340] ? mutex_lock_killable+0x97/0x1d0 [ 112.433009][ T2340] ? __cfi_mutex_lock_killable+0x10/0x10 [ 112.433022][ T2340] ? proc_fail_nth_write+0x184/0x220 [ 112.433036][ T2340] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 112.433054][ T2340] kvm_vcpu_ioctl+0xa48/0x1000 [ 112.433083][ T2340] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 112.433110][ T2340] ? __cfi_vfs_write+0x10/0x10 [ 112.433135][ T2340] ? __kasan_check_write+0x18/0x20 [ 112.433151][ T2340] ? mutex_unlock+0x90/0x240 [ 112.433162][ T2340] ? __cfi_mutex_unlock+0x10/0x10 [ 112.433174][ T2340] ? __fget_files+0x2c5/0x340 [ 112.433186][ T2340] ? __fget_files+0x2c5/0x340 [ 112.433199][ T2340] ? bpf_lsm_file_ioctl+0xd/0x20 [ 112.433220][ T2340] ? security_file_ioctl+0x3e/0x110 [ 112.433243][ T2340] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 112.433269][ T2340] __se_sys_ioctl+0x132/0x1b0 [ 112.433288][ T2340] __x64_sys_ioctl+0x7f/0xa0 [ 112.433299][ T2340] x64_sys_call+0x1878/0x2ee0 [ 112.433316][ T2340] do_syscall_64+0x57/0xf0 [ 112.433331][ T2340] ? clear_bhb_loop+0x50/0xa0 [ 112.433352][ T2340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.433378][ T2340] RIP: 0033:0x7f240fb9c819 [ 112.433396][ T2340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.433414][ T2340] RSP: 002b:00007f2410ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.433437][ T2340] RAX: ffffffffffffffda RBX: 00007f240fe15fa0 RCX: 00007f240fb9c819 [ 112.433447][ T2340] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 112.433456][ T2340] RBP: 00007f2410ac4090 R08: 0000000000000000 R09: 0000000000000000 [ 112.433464][ T2340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.433472][ T2340] R13: 00007f240fe16038 R14: 00007f240fe15fa0 R15: 00007fff1e1185d8 [ 112.433493][ T2340] [ 112.895006][ T36] audit: type=1400 audit(1774710623.784:19316): avc: denied { read } for pid=2342 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.948046][ T36] audit: type=1400 audit(1774710623.844:19317): avc: denied { setopt } for pid=2342 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.084373][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.093109][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.621024][ T2364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.629848][ T2364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.638222][ T2361] netlink: 'syz.1.788': attribute type 40 has an invalid length. [ 113.776428][ T2374] syzkaller0: entered promiscuous mode [ 113.782127][ T2374] syzkaller0: entered allmulticast mode [ 113.839523][ T36] audit: type=1400 audit(1774710624.734:19318): avc: denied { write } for pid=2369 comm="syz.1.790" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 113.840017][ T2370] incfs: mount failed -22 [ 113.886698][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.895483][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.929650][ T2381] netlink: 9 bytes leftover after parsing attributes in process `syz.3.794'. [ 113.939028][ T2381] gretap0: entered promiscuous mode [ 114.392429][ T2390] syzkaller0: entered promiscuous mode [ 114.398335][ T2390] syzkaller0: entered allmulticast mode [ 114.514059][ T2397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 114.579257][ T2400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.588067][ T2400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.906797][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 114.917050][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.926437][ T10] usb 5-1: can't set config #1, error -71 [ 114.933273][ T10] usb 5-1: USB disconnect, device number 21 [ 115.307009][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 115.437091][ T10] usb 5-1: device descriptor read/64, error -71 [ 115.536658][ T2427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.546095][ T2427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.681037][ T10] usb 5-1: device descriptor read/64, error -71 [ 115.927027][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 115.934652][ T399] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 116.066409][ T2431] FAULT_INJECTION: forcing a failure. [ 116.066409][ T2431] name failslab, interval 1, probability 0, space 0, times 0 [ 116.079212][ T10] usb 5-1: device descriptor read/64, error -71 [ 116.079219][ T2431] CPU: 1 UID: 0 PID: 2431 Comm: syz.1.813 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 116.079252][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.079264][ T2431] Call Trace: [ 116.079271][ T2431] [ 116.079279][ T2431] __dump_stack+0x21/0x30 [ 116.079309][ T2431] dump_stack_lvl+0x140/0x1c0 [ 116.079333][ T2431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.079358][ T2431] ? timerqueue_add+0x212/0x240 [ 116.079381][ T2431] dump_stack+0x19/0x20 [ 116.079404][ T2431] should_fail_ex+0x3d7/0x530 [ 116.079428][ T2431] should_failslab+0xac/0x100 [ 116.079447][ T2431] kmem_cache_alloc_node_noprof+0x45/0x420 [ 116.079473][ T2431] ? __alloc_skb+0x108/0x370 [ 116.079609][ T2431] __alloc_skb+0x108/0x370 [ 116.079645][ T2431] xfrm_send_state_notify+0x773/0x1ad0 [ 116.079670][ T2431] ? __cfi_xfrm_send_state_notify+0x10/0x10 [ 116.079693][ T2431] ? __cfi_xfrm_send_state_notify+0x10/0x10 [ 116.079734][ T2431] km_state_notify+0x81/0xe0 [ 116.079759][ T2431] xfrm_add_sa+0x3083/0x3ed0 [ 116.079781][ T2431] ? selinux_capable+0x38/0x50 [ 116.079799][ T2431] ? __cfi_xfrm_add_sa+0x10/0x10 [ 116.079823][ T2431] xfrm_user_rcv_msg+0x5f3/0x910 [ 116.079847][ T2431] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 116.079873][ T2431] ? __asan_memcpy+0x5a/0x80 [ 116.079898][ T2431] ? avc_has_perm_noaudit+0x28a/0x360 [ 116.079925][ T2431] ? avc_has_perm+0x155/0x240 [ 116.079951][ T2431] netlink_rcv_skb+0x256/0x4f0 [ 116.079974][ T2431] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 116.079997][ T2431] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 116.080021][ T2431] ? __kasan_check_write+0x18/0x20 [ 116.080045][ T2431] ? mutex_lock+0x97/0x1d0 [ 116.080063][ T2431] ? __cfi_mutex_lock+0x10/0x10 [ 116.080081][ T2431] ? netlink_autobind+0x1c0/0x1c0 [ 116.080106][ T2431] xfrm_netlink_rcv+0x76/0x90 [ 116.080129][ T2431] netlink_unicast+0x8c3/0xa60 [ 116.080151][ T2431] netlink_sendmsg+0x7fe/0xb10 [ 116.080175][ T2431] ? __cfi_netlink_sendmsg+0x10/0x10 [ 116.080200][ T2431] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 116.080227][ T2431] ? security_socket_sendmsg+0x3d/0x100 [ 116.080245][ T2431] ? __cfi_netlink_sendmsg+0x10/0x10 [ 116.080269][ T2431] ____sys_sendmsg+0xa8c/0xae0 [ 116.080293][ T2431] ? __import_iovec+0x5ad/0x7c0 [ 116.080312][ T2431] ? __sys_sendmsg_sock+0x50/0x50 [ 116.080337][ T2431] ? import_iovec+0x80/0xb0 [ 116.080354][ T2431] ___sys_sendmsg+0x2a6/0x370 [ 116.080378][ T2431] ? __sys_sendmsg+0x2a0/0x2a0 [ 116.080402][ T2431] ? proc_fail_nth_write+0x184/0x220 [ 116.080424][ T2431] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 116.080451][ T2431] __x64_sys_sendmsg+0x1fb/0x2d0 [ 116.080474][ T2431] ? fput+0x1a4/0x240 [ 116.080491][ T2431] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 116.080516][ T2431] ? ksys_write+0x1f3/0x260 [ 116.080542][ T2431] ? __kasan_check_read+0x15/0x20 [ 116.080568][ T2431] x64_sys_call+0x2a4c/0x2ee0 [ 116.080594][ T2431] do_syscall_64+0x57/0xf0 [ 116.080619][ T2431] ? clear_bhb_loop+0x50/0xa0 [ 116.080645][ T2431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.080670][ T2431] RIP: 0033:0x7f240fb9c819 [ 116.080689][ T2431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.080706][ T2431] RSP: 002b:00007f2410ac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.080738][ T2431] RAX: ffffffffffffffda RBX: 00007f240fe15fa0 RCX: 00007f240fb9c819 [ 116.080753][ T2431] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 116.080766][ T2431] RBP: 00007f2410ac4090 R08: 0000000000000000 R09: 0000000000000000 [ 116.080779][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.080792][ T2431] R13: 00007f240fe16038 R14: 00007f240fe15fa0 R15: 00007fff1e1185d8 [ 116.080809][ T2431] [ 116.098124][ T2433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.138457][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.142489][ T2433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.147053][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.491074][ T399] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.504007][ T399] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.513249][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.522282][ T399] usb 4-1: config 0 descriptor?? [ 116.647054][ T10] usb 5-1: device descriptor read/64, error -71 [ 116.667617][ T36] audit: type=1400 audit(1774710627.564:19319): avc: denied { append } for pid=2435 comm="syz.1.815" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.690714][ T36] audit: type=1400 audit(1774710627.564:19320): avc: denied { ioctl } for pid=2435 comm="syz.1.815" path="socket:[21204]" dev="sockfs" ino=21204 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.757213][ T10] usb usb5-port1: attempt power cycle [ 116.930734][ T399] usbhid 4-1:0.0: can't add hid device: -71 [ 116.936839][ T399] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.946523][ T399] usb 4-1: USB disconnect, device number 30 [ 117.097106][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 117.118273][ T10] usb 5-1: device descriptor read/8, error -71 [ 117.248080][ T10] usb 5-1: device descriptor read/8, error -71 [ 117.414380][ T36] audit: type=1400 audit(1774710628.304:19321): avc: denied { create } for pid=2448 comm="syz.1.821" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.414863][ T2449] fuse: Bad value for 'user_id' [ 117.435623][ T36] audit: type=1400 audit(1774710628.304:19322): avc: denied { mounton } for pid=2448 comm="syz.1.821" path="/242/file0" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.440751][ T2449] fuse: Bad value for 'user_id' [ 117.479042][ T36] audit: type=1400 audit(1774710628.374:19323): avc: denied { read write } for pid=2448 comm="syz.1.821" name="file0" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.503525][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.507073][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 117.512705][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.541225][ T36] audit: type=1400 audit(1774710628.374:19324): avc: denied { open } for pid=2448 comm="syz.1.821" path="/242/file0" dev="tmpfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.564451][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.573527][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.574072][ T10] usb 5-1: device descriptor read/8, error -71 [ 117.583730][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.597248][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.607192][ T2449] rust_binder: Write failure EFAULT in pid:610 [ 117.679292][ T36] audit: type=1326 audit(1774710628.574:19325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb19c819 code=0x7ffc0000 [ 117.710262][ T36] audit: type=1326 audit(1774710628.574:19326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb19c819 code=0x7ffc0000 [ 117.734686][ T36] audit: type=1326 audit(1774710628.574:19327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ecb15d04e code=0x7ffc0000 [ 117.740540][ T10] usb 5-1: device descriptor read/8, error -71 [ 117.759508][ T36] audit: type=1326 audit(1774710628.574:19328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ecb15d04e code=0x7ffc0000 [ 117.788407][ T36] audit: type=1326 audit(1774710628.574:19329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecb19c819 code=0x7ffc0000 [ 117.812431][ T36] audit: type=1326 audit(1774710628.574:19330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4ecb19c819 code=0x7ffc0000 [ 117.840668][ T2473] devpts: called with bogus options [ 117.917158][ T10] usb usb5-port1: unable to enumerate USB device [ 117.937029][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 118.080491][ T2482] bpf: Bad value for 'gid' [ 118.088332][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.099546][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.109626][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.122922][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.132519][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.141754][ T45] usb 4-1: config 0 descriptor?? [ 118.220519][ T2501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.840'. [ 118.230011][ T2502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.238555][ T2502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.477045][ T502] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 118.607019][ T502] usb 5-1: device descriptor read/64, error -71 [ 118.750413][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 118.756597][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 118.769158][ T45] usb 4-1: USB disconnect, device number 31 [ 118.847049][ T502] usb 5-1: device descriptor read/64, error -71 [ 118.923565][ T2514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=576 (1152 ns) > initial count (384 ns). Using initial count to start timer. [ 118.945963][ T2514] kvm: pic: non byte write [ 119.087008][ T502] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 119.120119][ T2519] loop5: detected capacity change from 0 to 7 [ 119.199716][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 119.209538][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 119.227012][ T502] usb 5-1: device descriptor read/64, error -71 [ 119.275496][ T2521] input: syz0 as /devices/virtual/input/input12 [ 119.303673][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 119.313674][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 119.337010][ T2523] __vm_enough_memory: pid: 2523, comm: syz.3.847, bytes: 68719480832 not enough memory for the allocation [ 119.490246][ T502] usb 5-1: device descriptor read/64, error -71 [ 119.581809][ T2541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 119.599031][ T502] usb usb5-port1: attempt power cycle [ 119.917011][ T773] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 119.936999][ T502] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 119.958054][ T502] usb 5-1: device descriptor read/8, error -71 [ 120.067052][ T773] usb 4-1: Using ep0 maxpacket: 16 [ 120.073493][ T773] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 120.082345][ T773] usb 4-1: config 0 has no interface number 0 [ 120.088603][ T773] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 120.099251][ T773] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.109947][ T502] usb 5-1: device descriptor read/8, error -71 [ 120.117469][ T773] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 120.126546][ T773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.135076][ T773] usb 4-1: Product: syz [ 120.139861][ T773] usb 4-1: Manufacturer: syz [ 120.144611][ T773] usb 4-1: SerialNumber: syz [ 120.154008][ T773] usb 4-1: config 0 descriptor?? [ 120.160583][ T2543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.168161][ T2543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.319708][ T2563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.328398][ T2563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.346991][ T502] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 120.367926][ T502] usb 5-1: device descriptor read/8, error -71 [ 120.379059][ T2543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.386239][ T2543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.498076][ T502] usb 5-1: device descriptor read/8, error -71 [ 120.594485][ T773] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 120.604926][ T773] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 120.614711][ T773] asix 4-1:0.251: probe with driver asix failed with error -5 [ 120.622396][ T502] usb usb5-port1: unable to enumerate USB device [ 120.630100][ T773] usb 4-1: USB disconnect, device number 32 [ 120.935427][ T2570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=576 (1152 ns) > initial count (384 ns). Using initial count to start timer. [ 120.956501][ T2570] kvm: pic: non byte write [ 121.034303][ T2576] syzkaller1: entered promiscuous mode [ 121.039899][ T2576] syzkaller1: entered allmulticast mode [ 121.108591][ T2580] sel_write_load: 55 callbacks suppressed [ 121.108607][ T2580] SELinux: failed to load policy [ 121.140335][ T2581] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 121.241669][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 121.357110][ T773] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 121.508374][ T773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.519561][ T773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.529418][ T773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.542283][ T773] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 121.551566][ T773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.560684][ T773] usb 4-1: config 0 descriptor?? [ 121.967952][ T773] steelseries 0003:1038:1410.0013: unknown main item tag 0x1 [ 121.975508][ T773] steelseries 0003:1038:1410.0013: item 0 2 0 9 parsing failed [ 121.983538][ T773] steelseries 0003:1038:1410.0013: parse failed [ 121.989935][ T773] steelseries 0003:1038:1410.0013: probe with driver steelseries failed with error -22 [ 122.169816][ T2580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.178502][ T2580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.187079][ T10] usb 4-1: USB disconnect, device number 33 [ 122.303032][ T2602] bond_slave_0: mtu less than device minimum [ 122.546997][ T399] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 122.653908][ T2627] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 122.694721][ T2631] FAULT_INJECTION: forcing a failure. [ 122.694721][ T2631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.714611][ T399] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.725684][ T2631] CPU: 1 UID: 0 PID: 2631 Comm: syz.0.889 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 122.725719][ T2631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.725731][ T2631] Call Trace: [ 122.725738][ T2631] [ 122.725746][ T2631] __dump_stack+0x21/0x30 [ 122.725778][ T2631] dump_stack_lvl+0x140/0x1c0 [ 122.725802][ T2631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.725829][ T2631] ? __check_object_size+0x527/0x830 [ 122.725859][ T2631] dump_stack+0x19/0x20 [ 122.725882][ T2631] should_fail_ex+0x3d7/0x530 [ 122.725908][ T2631] should_fail+0xf/0x20 [ 122.725929][ T2631] should_fail_usercopy+0x1e/0x30 [ 122.725954][ T2631] __kvm_read_guest_page+0x177/0x210 [ 122.725974][ T2631] kvm_vcpu_read_guest+0x3a6/0x510 [ 122.725995][ T2631] read_emulate+0x30/0x50 [ 122.726037][ T2631] emulator_read_write_onepage+0x7df/0xd20 [ 122.726060][ T2631] emulator_read_write+0x1ef/0x580 [ 122.726081][ T2631] emulator_read_emulated+0x40/0x50 [ 122.726110][ T2631] ? __cfi_emulator_read_emulated+0x10/0x10 [ 122.726138][ T2631] segmented_read+0x1c5/0x400 [ 122.726159][ T2631] x86_emulate_insn+0x777/0x3fe0 [ 122.726178][ T2631] ? xaddq_rax_rdx+0x10/0x10 [ 122.726208][ T2631] x86_emulate_instruction+0xb5c/0x1a30 [ 122.726232][ T2631] kvm_mmu_page_fault+0x336/0x970 [ 122.726257][ T2631] handle_ept_violation+0x256/0x450 [ 122.726277][ T2631] ? vmx_vcpu_run+0x1116/0x1f70 [ 122.726306][ T2631] ? __cfi_handle_ept_violation+0x10/0x10 [ 122.726327][ T2631] vmx_handle_exit+0x12c0/0x1b10 [ 122.726354][ T2631] ? kvm_deliver_exception_payload+0xd7/0x200 [ 122.726380][ T2631] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 122.726407][ T2631] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 122.726436][ T2631] vcpu_run+0x49f7/0x7840 [ 122.726473][ T2631] ? signal_pending+0xc0/0xc0 [ 122.726500][ T2631] ? complete_emulated_mmio+0x4fb/0x790 [ 122.726525][ T2631] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 122.726551][ T2631] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 122.726578][ T2631] ? kstrtoull+0x13b/0x1e0 [ 122.726601][ T2631] ? kstrtouint+0x78/0xf0 [ 122.726624][ T2631] ? ioctl_has_perm+0x1bc/0x500 [ 122.726659][ T2631] ? __asan_memcpy+0x5a/0x80 [ 122.726687][ T2631] ? ioctl_has_perm+0x408/0x500 [ 122.726717][ T2631] ? has_cap_mac_admin+0xd0/0xd0 [ 122.726742][ T2631] ? __kasan_check_write+0x18/0x20 [ 122.726759][ T399] usb 5-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.726769][ T2631] ? mutex_lock_killable+0x97/0x1d0 [ 122.726796][ T2631] ? __cfi_mutex_lock_killable+0x10/0x10 [ 122.726817][ T2631] ? proc_fail_nth_write+0x184/0x220 [ 122.726839][ T2631] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 122.726863][ T2631] kvm_vcpu_ioctl+0xa48/0x1000 [ 122.726891][ T2631] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 122.726918][ T2631] ? __cfi_vfs_write+0x10/0x10 [ 122.726944][ T2631] ? __kasan_check_write+0x18/0x20 [ 122.726969][ T2631] ? mutex_unlock+0x90/0x240 [ 122.726988][ T2631] ? __cfi_mutex_unlock+0x10/0x10 [ 122.727006][ T2631] ? __fget_files+0x2c5/0x340 [ 122.727026][ T2631] ? __fget_files+0x2c5/0x340 [ 122.727044][ T2631] ? bpf_lsm_file_ioctl+0xd/0x20 [ 122.727065][ T2631] ? security_file_ioctl+0x3e/0x110 [ 122.727088][ T2631] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 122.727114][ T2631] __se_sys_ioctl+0x132/0x1b0 [ 122.727134][ T2631] __x64_sys_ioctl+0x7f/0xa0 [ 122.727152][ T2631] x64_sys_call+0x1878/0x2ee0 [ 122.727179][ T2631] do_syscall_64+0x57/0xf0 [ 122.727203][ T2631] ? clear_bhb_loop+0x50/0xa0 [ 122.727230][ T2631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.727255][ T2631] RIP: 0033:0x7f4ecb19c819 [ 122.727273][ T2631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.727291][ T2631] RSP: 002b:00007f4ecc0db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.727314][ T2631] RAX: ffffffffffffffda RBX: 00007f4ecb415fa0 RCX: 00007f4ecb19c819 [ 122.727331][ T2631] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 122.727344][ T2631] RBP: 00007f4ecc0db090 R08: 0000000000000000 R09: 0000000000000000 [ 122.727358][ T2631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.727371][ T2631] R13: 00007f4ecb416038 R14: 00007f4ecb415fa0 R15: 00007ffe4c2cc3d8 [ 122.727388][ T2631] [ 123.152204][ T399] usb 5-1: config 1 interface 0 has no altsetting 0 [ 123.161822][ T399] usb 5-1: string descriptor 0 read error: -22 [ 123.168140][ T399] usb 5-1: New USB device found, idVendor=056a, idProduct=0034, bcdDevice= 0.40 [ 123.177252][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.231562][ T2641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.240281][ T2641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.315161][ T2650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.324187][ T2650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.546995][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 123.596181][ T399] usbhid 5-1:1.0: can't add hid device: -71 [ 123.608590][ T399] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 123.619031][ T399] usb 5-1: USB disconnect, device number 30 [ 123.707021][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 123.713257][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.724390][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 123.724420][ T36] audit: type=1400 audit(1774710634.624:19357): avc: denied { create } for pid=2659 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 123.751472][ T31] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 123.760870][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.769835][ T31] usb 4-1: config 0 descriptor?? [ 123.813799][ T2670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=576 (1152 ns) > initial count (384 ns). Using initial count to start timer. [ 123.917632][ T2673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.926482][ T2673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.978665][ T31] usb 4-1: USB disconnect, device number 34 [ 124.454932][ T36] audit: type=1400 audit(1774710635.344:19358): avc: denied { accept } for pid=2676 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.497144][ T2680] FAULT_INJECTION: forcing a failure. [ 124.497144][ T2680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.510280][ T2680] CPU: 1 UID: 0 PID: 2680 Comm: syz.4.905 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 124.510306][ T2680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.510315][ T2680] Call Trace: [ 124.510319][ T2680] [ 124.510325][ T2680] __dump_stack+0x21/0x30 [ 124.510347][ T2680] dump_stack_lvl+0x140/0x1c0 [ 124.510363][ T2680] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.510379][ T2680] ? check_stack_object+0x81/0x150 [ 124.510404][ T2680] ? __virt_addr_valid+0x2a6/0x380 [ 124.510418][ T2680] dump_stack+0x19/0x20 [ 124.510433][ T2680] should_fail_ex+0x3d7/0x530 [ 124.510449][ T2680] should_fail+0xf/0x20 [ 124.510462][ T2680] should_fail_usercopy+0x1e/0x30 [ 124.510478][ T2680] _copy_from_user+0x20/0xa0 [ 124.510496][ T2680] memdup_user+0x81/0x170 [ 124.510511][ T2680] ? strndup_user+0x40/0xd0 [ 124.510526][ T2680] strndup_user+0x6c/0xd0 [ 124.510540][ T2680] __se_sys_mount+0x9f/0x480 [ 124.510557][ T2680] ? ksys_write+0x1f3/0x260 [ 124.510573][ T2680] ? __x64_sys_mount+0xf0/0xf0 [ 124.510590][ T2680] __x64_sys_mount+0xc3/0xf0 [ 124.510606][ T2680] x64_sys_call+0x2021/0x2ee0 [ 124.510624][ T2680] do_syscall_64+0x57/0xf0 [ 124.510641][ T2680] ? clear_bhb_loop+0x50/0xa0 [ 124.510658][ T2680] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.510675][ T2680] RIP: 0033:0x7f2e2619c819 [ 124.510688][ T2680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.510700][ T2680] RSP: 002b:00007f2e26fc1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.510716][ T2680] RAX: ffffffffffffffda RBX: 00007f2e26415fa0 RCX: 00007f2e2619c819 [ 124.510726][ T2680] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 124.510735][ T2680] RBP: 00007f2e26fc1090 R08: 0000200000000580 R09: 0000000000000000 [ 124.510744][ T2680] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 124.510753][ T2680] R13: 00007f2e26416038 R14: 00007f2e26415fa0 R15: 00007fffd791de68 [ 124.510764][ T2680] [ 124.783684][ T2691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.792268][ T2691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.087046][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 125.236986][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 125.243500][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 125.251692][ T10] usb 5-1: config 0 has no interface number 0 [ 125.259430][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 125.268575][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.276755][ T10] usb 5-1: Product: syz [ 125.280939][ T10] usb 5-1: Manufacturer: syz [ 125.285624][ T10] usb 5-1: SerialNumber: syz [ 125.291109][ T10] usb 5-1: config 0 descriptor?? [ 125.297028][ T10] smsc95xx v2.0.0 [ 125.370752][ T36] audit: type=1400 audit(1774710636.264:19359): avc: denied { mount } for pid=2698 comm="syz.1.914" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.374919][ T2699] ======================================================= [ 125.374919][ T2699] WARNING: The mand mount option has been deprecated and [ 125.374919][ T2699] and is ignored by this kernel. Remove the mand [ 125.374919][ T2699] option from the mount to silence this warning. [ 125.374919][ T2699] ======================================================= [ 125.393382][ T36] audit: type=1400 audit(1774710636.264:19360): avc: denied { remount } for pid=2698 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.453848][ T36] audit: type=1400 audit(1774710636.344:19361): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.498869][ T36] audit: type=1400 audit(1774710636.394:19362): avc: denied { nosuid_transition } for pid=2709 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 125.519906][ T36] audit: type=1400 audit(1774710636.394:19363): avc: denied { transition } for pid=2709 comm="syz.1.916" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 125.553195][ T36] audit: type=1400 audit(1774710636.394:19364): avc: denied { entrypoint } for pid=2709 comm="syz.1.916" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=109 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.583086][ T36] audit: type=1400 audit(1774710636.394:19365): avc: denied { share } for pid=2709 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 125.603303][ T36] audit: type=1400 audit(1774710636.394:19366): avc: denied { noatsecure } for pid=2709 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 125.623676][ T399] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 125.698123][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 125.709054][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.776980][ T399] usb 4-1: Using ep0 maxpacket: 8 [ 125.783181][ T399] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.793127][ T399] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.799929][ T399] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 125.809117][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.818451][ T399] usb 4-1: config 0 descriptor?? [ 126.225957][ T2701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.234756][ T2701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.242889][ T2702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.251530][ T2702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.264058][ T399] usbhid 4-1:0.0: can't add hid device: -71 [ 126.272286][ T399] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 126.284872][ T399] usb 4-1: USB disconnect, device number 35 [ 126.508168][ T2721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.516720][ T2721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.525169][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 126.536052][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 126.545314][ T10] usb 5-1: USB disconnect, device number 31 [ 126.792139][ T2725] FAULT_INJECTION: forcing a failure. [ 126.792139][ T2725] name failslab, interval 1, probability 0, space 0, times 0 [ 126.805685][ T2725] CPU: 0 UID: 0 PID: 2725 Comm: syz.3.921 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 126.805725][ T2725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.805741][ T2725] Call Trace: [ 126.805749][ T2725] [ 126.805758][ T2725] __dump_stack+0x21/0x30 [ 126.805790][ T2725] dump_stack_lvl+0x140/0x1c0 [ 126.805816][ T2725] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.805841][ T2725] ? crypto_authenc_init_tfm+0xc9/0x250 [ 126.805866][ T2725] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 126.805893][ T2725] dump_stack+0x19/0x20 [ 126.805917][ T2725] should_fail_ex+0x3d7/0x530 [ 126.805941][ T2725] ? esp6_init_state+0x777/0x1290 [ 126.805962][ T2725] should_failslab+0xac/0x100 [ 126.805982][ T2725] __kmalloc_noprof+0x69/0x500 [ 126.806009][ T2725] ? esp6_init_state+0x777/0x1290 [ 126.806029][ T2725] esp6_init_state+0x777/0x1290 [ 126.806048][ T2725] ? netlink_sendmsg+0x7fe/0xb10 [ 126.806074][ T2725] ? x64_sys_call+0x2a4c/0x2ee0 [ 126.806103][ T2725] ? __cfi_esp6_init_state+0x10/0x10 [ 126.806128][ T2725] ? __xfrm_init_state+0x453/0x1070 [ 126.806157][ T2725] ? __asan_memcpy+0x5a/0x80 [ 126.806184][ T2725] __xfrm_init_state+0xad3/0x1070 [ 126.806214][ T2725] xfrm_add_sa+0x2b62/0x3ed0 [ 126.806238][ T2725] ? selinux_capable+0x38/0x50 [ 126.806257][ T2725] ? __cfi_xfrm_add_sa+0x10/0x10 [ 126.806283][ T2725] xfrm_user_rcv_msg+0x5f3/0x910 [ 126.806308][ T2725] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 126.806336][ T2725] ? __asan_memcpy+0x5a/0x80 [ 126.806374][ T2725] ? avc_has_perm_noaudit+0x28a/0x360 [ 126.806404][ T2725] ? avc_has_perm+0x155/0x240 [ 126.806432][ T2725] netlink_rcv_skb+0x256/0x4f0 [ 126.806458][ T2725] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 126.806483][ T2725] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 126.806509][ T2725] ? __kasan_check_write+0x18/0x20 [ 126.806536][ T2725] ? mutex_lock+0x97/0x1d0 [ 126.806557][ T2725] ? __cfi_mutex_lock+0x10/0x10 [ 126.806577][ T2725] ? netlink_autobind+0x1c0/0x1c0 [ 126.806605][ T2725] xfrm_netlink_rcv+0x76/0x90 [ 126.806630][ T2725] netlink_unicast+0x8c3/0xa60 [ 126.806656][ T2725] netlink_sendmsg+0x7fe/0xb10 [ 126.806683][ T2725] ? __cfi_netlink_sendmsg+0x10/0x10 [ 126.806710][ T2725] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 126.806741][ T2725] ? security_socket_sendmsg+0x3d/0x100 [ 126.806762][ T2725] ? __cfi_netlink_sendmsg+0x10/0x10 [ 126.806789][ T2725] ____sys_sendmsg+0xa8c/0xae0 [ 126.806816][ T2725] ? __import_iovec+0x5ad/0x7c0 [ 126.806837][ T2725] ? __sys_sendmsg_sock+0x50/0x50 [ 126.806865][ T2725] ? import_iovec+0x80/0xb0 [ 126.806887][ T2725] ___sys_sendmsg+0x2a6/0x370 [ 126.806915][ T2725] ? __sys_sendmsg+0x2a0/0x2a0 [ 126.806948][ T2725] ? proc_fail_nth_write+0x184/0x220 [ 126.806973][ T2725] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 126.807001][ T2725] __x64_sys_sendmsg+0x1fb/0x2d0 [ 126.807027][ T2725] ? fput+0x1a4/0x240 [ 126.807048][ T2725] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 126.807075][ T2725] ? ksys_write+0x1f3/0x260 [ 126.807106][ T2725] ? __kasan_check_read+0x15/0x20 [ 126.807134][ T2725] x64_sys_call+0x2a4c/0x2ee0 [ 126.807165][ T2725] do_syscall_64+0x57/0xf0 [ 126.807193][ T2725] ? clear_bhb_loop+0x50/0xa0 [ 126.807223][ T2725] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.807251][ T2725] RIP: 0033:0x7fd81739c819 [ 126.807272][ T2725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.807292][ T2725] RSP: 002b:00007fd8182d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.807318][ T2725] RAX: ffffffffffffffda RBX: 00007fd817615fa0 RCX: 00007fd81739c819 [ 126.807335][ T2725] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 126.807351][ T2725] RBP: 00007fd8182d5090 R08: 0000000000000000 R09: 0000000000000000 [ 126.807377][ T2725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.807392][ T2725] R13: 00007fd817616038 R14: 00007fd817615fa0 R15: 00007ffcb71ee068 [ 126.807411][ T2725] [ 126.958612][ T2723] rust_binder: 511: no such ref 1 [ 127.204805][ T2723] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 127.226999][ T408] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 127.256378][ T2738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 127.398242][ T408] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.409303][ T408] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 127.420302][ T408] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 127.431236][ T408] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 127.443946][ T408] usb 4-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 127.453237][ T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.461421][ T408] usb 4-1: Product: syz [ 127.465783][ T408] usb 4-1: Manufacturer: syz [ 127.470516][ T408] usb 4-1: SerialNumber: syz [ 127.476527][ T2728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.567025][ T399] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 127.685849][ T2728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.693182][ T2728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.718206][ T399] usb 5-1: config index 0 descriptor too short (expected 65170, got 92) [ 127.726803][ T399] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.739649][ T399] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.748963][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.757032][ T399] usb 5-1: Product: syz [ 127.761306][ T399] usb 5-1: Manufacturer: syz [ 127.765965][ T399] usb 5-1: SerialNumber: syz [ 127.901732][ T2728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.910351][ T2728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.980442][ T399] cdc_ncm 5-1:1.0: bind() failure [ 127.988310][ T399] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 127.997318][ T399] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 128.012730][ T399] usb 5-1: USB disconnect, device number 32 [ 128.119762][ T408] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 128.126113][ T408] cdc_ncm 4-1:1.0: bind() failure [ 128.273527][ T2761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.282099][ T2761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.333748][ T408] usb 4-1: USB disconnect, device number 36 [ 128.345221][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.353745][ T399] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 128.354105][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.370896][ T2757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.379817][ T2757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.508108][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.519077][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.528824][ T399] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.542188][ T399] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.551283][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.559964][ T399] usb 5-1: config 0 descriptor?? [ 128.856351][ T2764] FAULT_INJECTION: forcing a failure. [ 128.856351][ T2764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.869838][ T2764] CPU: 1 UID: 0 PID: 2764 Comm: syz.3.935 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 128.869874][ T2764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.869886][ T2764] Call Trace: [ 128.869892][ T2764] [ 128.869900][ T2764] __dump_stack+0x21/0x30 [ 128.869942][ T2764] dump_stack_lvl+0x140/0x1c0 [ 128.869969][ T2764] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.869995][ T2764] ? kernel_text_address+0xa9/0xe0 [ 128.870022][ T2764] dump_stack+0x19/0x20 [ 128.870046][ T2764] should_fail_ex+0x3d7/0x530 [ 128.870072][ T2764] should_fail+0xf/0x20 [ 128.870095][ T2764] should_fail_usercopy+0x1e/0x30 [ 128.870121][ T2764] _copy_from_user+0x20/0xa0 [ 128.870147][ T2764] ___sys_sendmsg+0x1c7/0x370 [ 128.870164][ T2764] ? __sys_sendmsg+0x2a0/0x2a0 [ 128.870180][ T2764] ? kstrtouint+0x78/0xf0 [ 128.870199][ T2764] __sys_sendmmsg+0x2b4/0x4e0 [ 128.870226][ T2764] ? __cfi___sys_sendmmsg+0x10/0x10 [ 128.870256][ T2764] ? __cfi_ksys_write+0x10/0x10 [ 128.870285][ T2764] __x64_sys_sendmmsg+0xa4/0xc0 [ 128.870306][ T2764] x64_sys_call+0xfec/0x2ee0 [ 128.870323][ T2764] do_syscall_64+0x57/0xf0 [ 128.870341][ T2764] ? clear_bhb_loop+0x50/0xa0 [ 128.870362][ T2764] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.870389][ T2764] RIP: 0033:0x7fd81739c819 [ 128.870409][ T2764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.870427][ T2764] RSP: 002b:00007fd8182d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 128.870450][ T2764] RAX: ffffffffffffffda RBX: 00007fd817615fa0 RCX: 00007fd81739c819 [ 128.870461][ T2764] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 128.870470][ T2764] RBP: 00007fd8182d5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.870479][ T2764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.870487][ T2764] R13: 00007fd817616038 R14: 00007fd817615fa0 R15: 00007ffcb71ee068 [ 128.870499][ T2764] [ 129.080296][ T399] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x1 [ 129.097996][ T399] plantronics 0003:047F:FFFF.0014: item fetching failed at offset 2/15 [ 129.106672][ T399] plantronics 0003:047F:FFFF.0014: parse failed [ 129.113415][ T399] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 129.280549][ T399] usb 5-1: USB disconnect, device number 33 [ 129.357043][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 129.508235][ T31] usb 4-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 129.518734][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.531694][ T31] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 129.540834][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.549581][ T31] usb 4-1: config 0 descriptor?? [ 129.555450][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 130.037032][ T399] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 130.188128][ T399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 130.198036][ T399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 130.209457][ T399] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 130.218635][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.226622][ T399] usb 5-1: Product: syz [ 130.230801][ T399] usb 5-1: Manufacturer: syz [ 130.235406][ T399] usb 5-1: SerialNumber: syz [ 130.240699][ T399] usb 5-1: config 0 descriptor?? [ 130.245955][ T2774] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 130.253416][ T2774] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 130.464858][ T2774] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 130.472246][ T2774] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 130.880402][ T399] Error reading MAC address [ 131.130809][ T31] usb 5-1: USB disconnect, device number 34 [ 131.225738][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.234363][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.685611][ T2796] fuse: Bad value for 'fd' [ 131.710746][ T2796] kvm: kvm [2795]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 131.719601][ T2796] kvm: kvm [2795]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 131.739694][ T2796] kvm: kvm [2795]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xff00 [ 131.748774][ T2796] kvm: kvm [2795]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xff00 [ 132.057054][ T399] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 132.128636][ T31] usb 4-1: USB disconnect, device number 37 [ 132.208675][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.219944][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.230203][ T399] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 132.239451][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.249539][ T399] usb 5-1: config 0 descriptor?? [ 132.318788][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 132.318808][ T36] audit: type=1400 audit(1774710643.214:19370): avc: denied { setattr } for pid=2814 comm="syz.3.955" name="PING" dev="sockfs" ino=24430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.462458][ T36] audit: type=1400 audit(1774710643.354:19371): avc: denied { connect } for pid=2817 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.528952][ T36] audit: type=1400 audit(1774710643.424:19372): avc: denied { write } for pid=2821 comm="syz.3.958" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.660156][ T399] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 132.671194][ T399] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 132.737399][ T399] cp2112 0003:10C4:EA90.0015: Part Number: 0x47 Device Version: 0xD0 [ 132.826248][ T2838] kvm: pic: non byte write [ 132.939343][ T399] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 132.949389][ T399] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 132.963576][ T399] usb 5-1: USB disconnect, device number 35 [ 132.980308][ T2847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.988919][ T2847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.037033][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 133.188067][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.199103][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.208885][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 133.218133][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.226658][ T10] usb 4-1: config 0 descriptor?? [ 133.449775][ T2850] fuse: Bad value for 'fd' [ 133.523005][ T36] audit: type=1400 audit(1774710644.414:19373): avc: denied { write } for pid=2856 comm="syz.1.971" name="file0" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.548603][ T2857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.551727][ T36] audit: type=1400 audit(1774710644.444:19374): avc: denied { mount } for pid=2856 comm="syz.1.971" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 133.562474][ T2857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.644193][ T2862] rust_binder: Write failure EINVAL in pid:339 [ 133.656524][ T2864] xt_NFQUEUE: number of total queues is 0 [ 133.693498][ T2868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.976'. [ 133.841998][ T10] usb 4-1: string descriptor 0 read error: -71 [ 133.849463][ T10] uclogic 0003:5543:0045.0016: failed retrieving string descriptor #200: -71 [ 133.858325][ T10] uclogic 0003:5543:0045.0016: failed retrieving pen parameters: -71 [ 133.866604][ T10] uclogic 0003:5543:0045.0016: failed probing pen v2 parameters: -71 [ 133.874769][ T10] uclogic 0003:5543:0045.0016: failed probing parameters: -71 [ 133.882451][ T10] uclogic 0003:5543:0045.0016: probe with driver uclogic failed with error -71 [ 133.897111][ T10] usb 4-1: USB disconnect, device number 38 [ 134.465708][ T2887] SELinux: policydb magic number 0x400000 does not match expected magic number 0xf97cff8c [ 134.476072][ T2887] SELinux: failed to load policy [ 134.509864][ T36] audit: type=1400 audit(1774710645.404:19375): avc: denied { read } for pid=2890 comm="syz.4.984" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.534960][ T2892] ------------[ cut here ]------------ [ 134.535157][ T36] audit: type=1400 audit(1774710645.404:19376): avc: denied { open } for pid=2890 comm="syz.4.984" path="/138/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.540476][ T2892] WARNING: CPU: 0 PID: 2892 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 134.540526][ T2892] Modules linked in: [ 134.540550][ T2892] CPU: 0 UID: 0 PID: 2892 Comm: syz.1.982 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 134.566401][ T36] audit: type=1400 audit(1774710645.414:19377): avc: denied { ioctl } for pid=2890 comm="syz.4.984" path="/138/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.574700][ T2892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.626239][ T2892] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 134.627173][ T306] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 134.632314][ T2892] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a 7f 0b 06 00 0f 85 c2 00 00 00 c6 05 fd 7e 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 134.632342][ T2892] RSP: 0018:ffffc90004ef7640 EFLAGS: 00010246 [ 134.665936][ T2892] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 134.673970][ T2892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004ef76f8 [ 134.682018][ T2892] RBP: ffffc90004ef7780 R08: ffffc90004ef76f7 R09: 0000000000000000 [ 134.690048][ T2892] R10: ffffc90004ef76e0 R11: fffff520009deedf R12: ffffc90004ef7680 [ 134.698078][ T2892] R13: dffffc0000000000 R14: 1ffff920009deecc R15: 0000000000000000 [ 134.706164][ T2892] FS: 00007f2410a826c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 134.715361][ T2892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.722002][ T2892] CR2: 0000200000005000 CR3: 000000012fadc000 CR4: 00000000003526b0 [ 134.730114][ T2892] Call Trace: [ 134.733410][ T2892] [ 134.736342][ T2892] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 134.742096][ T2892] ? __kasan_slab_alloc+0x73/0x90 [ 134.747169][ T2892] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 134.752816][ T2892] ? hashtab_init+0xdb/0x1f0 [ 134.757440][ T2892] ___kmalloc_large_node+0x81/0x210 [ 134.762660][ T2892] ? hashtab_init+0xdb/0x1f0 [ 134.767341][ T2892] __kmalloc_large_node_noprof+0x1e/0xd0 [ 134.773003][ T2892] ? hashtab_init+0xdb/0x1f0 [ 134.777760][ T2892] __kmalloc_noprof+0x326/0x500 [ 134.782638][ T2892] ? __cfi_ebitmap_read+0x10/0x10 [ 134.787710][ T2892] hashtab_init+0xdb/0x1f0 [ 134.792141][ T2892] ? policydb_read+0x87f/0x28b0 [ 134.797025][ T2892] symtab_init+0x44/0x70 [ 134.798914][ T306] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 134.801286][ T2892] policydb_read+0x90e/0x28b0 [ 134.810702][ T306] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 134.815062][ T2892] ? __kasan_kmalloc+0x96/0xb0 [ 134.823461][ T306] usb 4-1: Product: syz [ 134.827938][ T2892] ? __cfi_policydb_read+0x10/0x10 [ 134.837339][ T2892] ? security_load_policy+0x130/0x12d0 [ 134.842817][ T2892] security_load_policy+0x16a/0x12d0 [ 134.848166][ T2892] ? irqentry_exit+0x4a/0x60 [ 134.850680][ T306] usb 4-1: config 0 descriptor?? [ 134.852822][ T2892] ? asm_exc_page_fault+0x2b/0x30 [ 134.861838][ T306] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 134.862854][ T2892] ? __cfi_security_load_policy+0x10/0x10 [ 134.872166][ T306] usb 4-1: Detected FT232H [ 134.876173][ T2892] ? rep_movs_alternative+0x4a/0xa0 [ 134.885855][ T2892] sel_write_load+0x2a7/0x5f0 [ 134.890685][ T2892] ? __cfi_sel_write_load+0x10/0x10 [ 134.895999][ T2892] ? selinux_socket_setsockopt+0x324/0x3d0 [ 134.901992][ T2892] ? bpf_lsm_file_permission+0xd/0x20 [ 134.907445][ T2892] ? __cfi_sel_write_load+0x10/0x10 [ 134.912684][ T2892] vfs_write+0x3c5/0xf90 [ 134.916993][ T2892] ? __cfi_vfs_write+0x10/0x10 [ 134.921827][ T2892] ? __kasan_check_write+0x18/0x20 [ 134.927060][ T2892] ? mutex_lock+0x97/0x1d0 [ 134.931592][ T2892] ? __cfi_mutex_lock+0x10/0x10 [ 134.936461][ T2892] ? __fget_files+0x2c5/0x340 [ 134.941239][ T2892] ksys_write+0x145/0x260 [ 134.945607][ T2892] ? xfd_validate_state+0x68/0x140 [ 134.950828][ T2892] ? __cfi_ksys_write+0x10/0x10 [ 134.955720][ T2892] ? __kasan_check_write+0x18/0x20 [ 134.960925][ T2892] ? fpregs_restore_userregs+0x11c/0x260 [ 134.966657][ T2892] __x64_sys_write+0x7f/0x90 [ 134.971334][ T2892] x64_sys_call+0x271c/0x2ee0 [ 134.976050][ T2892] do_syscall_64+0x57/0xf0 [ 134.980516][ T2892] ? clear_bhb_loop+0x50/0xa0 [ 134.985304][ T2892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.991422][ T2892] RIP: 0033:0x7f240fb9c819 [ 134.995880][ T2892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.015573][ T2892] RSP: 002b:00007f2410a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.024084][ T2892] RAX: ffffffffffffffda RBX: 00007f240fe16180 RCX: 00007f240fb9c819 [ 135.032218][ T2892] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000004 [ 135.040344][ T2892] RBP: 00007f240fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 135.048388][ T2892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.056391][ T2892] R13: 00007f240fe16218 R14: 00007f240fe16180 R15: 00007fff1e1185d8 [ 135.062044][ T306] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 135.064451][ T2892] [ 135.074303][ T2892] ---[ end trace 0000000000000000 ]--- [ 135.074693][ T306] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 135.081481][ T2892] SELinux: failed to load policy [ 135.087884][ T306] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 135.104742][ T306] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.115848][ T306] usb 4-1: USB disconnect, device number 39 [ 135.123886][ T306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.133478][ T306] ftdi_sio 4-1:0.0: device disconnected