last executing test programs: 20.402866031s ago: executing program 1 (id=401): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000680)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x30, 0x800d, 0x10, 0xe, 0x10, 0x11, 0x10, 0x8, 0x14, 0x60, 0x50}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ca08010000010000000109021900010100803209040000010000000007058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x20, 0x9, 0x35, "bbb8ad4da8283b448292ef64600a4db20e289adef0489832e96a009ab17eeda8e49be581a3c6fd6e491ebb548cd8d43e26f7931ce4"}, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000880)={0x14, &(0x7f00000006c0)={0x40, 0x22, 0xa7, {0xa7, 0x30, "beab452d23d6552461ccd57e5448408c1db5892c785c0c8b7bbf215abf391584bacdd0db184b5052441708d12d35e9dd1f05fa9833c6d02588a069ad55415862cb37e7984aaffc11016c8217487d519af20bb8dbcaec4e0e738bcbfb9665076ce1e4367eca91fde0b284caa8e0600dafd952885e2174d15ae3894da07440f9c6666ae43f88c250036ae68f5b07711d81ac591f2a66a7811677657b6243b9d74fc2e9d7ddec"}}, &(0x7f0000000780)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "a1312aaea2ecad21321f2452be3e466dc075ee45d9dcf4799e1649634261ce44102fb3e468cf6efc21f63113113d3516bd8cb664b8d364b94982ec22d44ac1aebcfdd4a3dadf2d473b856c625a964438ac7f870883379c7f7e976bd187a6dff28b1a18ae2edbcc5fffe8bf024bae1c4032942eed17d54e75571efda3bb929d948e8a6c75aa4c9f8d96816ea59022be852cc1367dc681fcb3e6c2c340062fe2c9ee7a050343fda797f59f30241071ddacc5e1c499f838a025ef1e050175cbb9a65db15544"}}}, &(0x7f0000000b00)={0x34, &(0x7f00000008c0)={0x40, 0x6, 0x1b, "a287f790828166fad633a276234d7747dc967998e0e7ea2ca32376"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000980)={0x20, 0x0, 0xc9, {0xc7, "fc91245e21683cef1ee7de299609ce23b5e4ed7a66891cc701b2214e1680d690f0ec48aaccf476f2d900bec34fa62262ed3fbb8825d79d4e429f48c62ab9f4f1cb666816c8d954667f29b800c89867192379dda0cb36abdb226939b1cb5168c623d6ac8a985d5b9e2314b9508015087e4baac0c4d8e7e1cdd78cbef4d2ebfb3780e7d543dc3e3bb02c54db039c43e96ecf5275fa8ec26a5545efa394fa09d7b1292079e5e42f00fd379a5adcf5f353ce970867ba7d11ca332702a9ecc418768549723db32b192a"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0xa7}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000424000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="203104000000209c8c5354b5df4cce1627bfcf25fca1fa8945552bc186c0717d304b5a608847f2c15734231821cb493675ca92"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x0, 0x31, 0x33, {0x33, 0xc, "4ad45292f98ce02d1714e2cac438ffbb4abe9878bbbbd6b4724a3849dfd4ec0c4fccaf078fbd400f40ab4c1b39da95db91"}}, &(0x7f0000000240)={0x0, 0x3, 0x56, @string={0x56, 0x3, "e576ffc881e0c1d4a71fdfa0aea68a0733f5a11fc7605ff7e3c29c36f61fed99f1c9f38fecb88579b1e9cf597667d3daa87fe78b2e022bc680105d1f1e1cc4ce5462dd19dd5314557932a0d1d79a9b47125e8d93"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0x30, 0x1b, "561e0de7085374f839f142a145fe255e0bd6912cbc078f49add7d9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5d}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000440)={0x20, 0x81, 0x1, '8'}, &(0x7f0000000500)={0x20, 0x82, 0x1, "d9"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "be1dca"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "0183"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "2e64c7"}}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0xffffff7f, 0x9}, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 7.687235195s ago: executing program 1 (id=414): r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) (async) pwritev(r0, &(0x7f0000001300)=[{0x0}, {&(0x7f00000002c0)="bd", 0x1}], 0x2, 0x8, 0x3) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) futex(&(0x7f0000000180)=0x2, 0x2, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x2, 0x1) (async) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r4, 0x89e1, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x10100, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'gre0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x62, 0x6, @broadcast}, 0x14) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.340451118s ago: executing program 1 (id=420): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x4) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x40, 0x0) 7.332251819s ago: executing program 1 (id=421): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x40, 0x6, 0x4, "1f498c60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x4, 0x15, {0x15, 0xc, "f988b4affbd3c6c7ab852ec75bc6f298ff4e95"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x40, 0x9, 0x59, "c1a1eb6731108fb10309bb2000adbf17be109a7d63944662d3ac65bf0f2f49e896091bef1a986bad735540cec408f99653044ce942e7e5b1679d1698c495b152ab088c21a5f62556fd63409a95cda4bfe7d5b51185f697e720"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x73, 0x82c, 0x4, 0x9, 0x0, 0xff, 0xd486, 0x9, 0x6, 0x9d80, 0xfffa}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x20, 0x1, 0x4, "9caf4a36"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.738998704s ago: executing program 3 (id=440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000180)="f20f2ce7b823000f00d0f20f5ead00003e0f01d10f78e70fc7b084003e9b0f20c06635000004000f22c066660f38f87406670f61a63e6b0000", 0x39}], 0x1, 0x43, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)="9d", 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3, 0x2f) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x20770000) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.629375453s ago: executing program 3 (id=442): socket$netlink(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x4, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000000000001c00000000000000000000000000000000000300004e2200000000008002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a00000000000000040000000000000002000000000000000400000000000000000000000000000000000601000000000000000000000000a1de000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a0002007000"], 0x104}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.063081215s ago: executing program 3 (id=447): socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) ioctl$FIBMAP(r1, 0x5382, 0x0) 5.062836685s ago: executing program 3 (id=448): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0xa, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x2, 0x2}, 0x20) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000140)={0x2, r2}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r5, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r2], 0x0) 4.319730147s ago: executing program 1 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x3, &(0x7f0000002500)=0x0) io_submit(r3, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f00000000c0)=' ', 0x1, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r2, 0x0, 0x0, 0x1}]) sendmmsg(0xffffffffffffffff, &(0x7f000000c040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="60000000000000001301000001000100cc3da64b2578d375318dc8304db14254db0d2b7bd36778718591602e8884c90f7bf9b7750a4c497336d78f912fbf3d7b479cc6e41e49b3d2c4e26f692322af2ca4750a10eecb9d2b6e0000000000000040000000000000000d01000002000000c89e75298f7a91a27682c4d36fe8a0992e2230199c692de85c0de3100fdb877882fad76d2b44fe54c35e972b45000000"], 0xa0}}], 0x1, 0x8c0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) connect$unix(r6, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file1\x00', 0x14d142, 0x82) gettid() 4.30648178s ago: executing program 1 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f000000d000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="c4c2cd3f3ec744240092770000c7442402f18f0000c7442406000000000f011424b99e0200000f320f011d0000000030c8c4c219a9876500000026a300a000000fc71ec744240000000000c7442402f3950000c7442406000000000f011424c4c1bdef6309", 0x65}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x224500, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.926963147s ago: executing program 0 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x1, 0x0, 0xfffffffffffffffe) setns(0xc9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)}, 0x87d52018}], 0x1, 0x10080, 0x0) ptrace(0x10, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x3, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "ab8e"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x40, 0x7fff, 0x5}, [@mbim_extended={0x4, 0x24, 0x1c, 0xb, 0x6, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0xe, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x80, 0x2f, 0x40}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0x6, 0x80, 0xef, 0x18}, 0xf, &(0x7f0000000e00)={0x5, 0xf, 0xf, 0x1, [@ss_container_id={0x0, 0x10, 0x4, 0xd, "09be0683a6ab5b7f9f089c70b9e53384"}]}, 0x4, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "3425be46bbd89dac576226743fc78ca993a17dfd5fa8bb0695c2e4189a"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40f}}, {0x34, &(0x7f0000000240)=@string={0x34, 0x3, "a38a3920ea9e7e66dfc409b2728f51d0b003e89d7b6d2ae6695cf52a342af94053c37ba7b5a233a9d836827845692dd868e3"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2.303942588s ago: executing program 0 (id=465): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x40, 0x6, 0x4, "1f498c60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x4, 0x15, {0x15, 0xc, "f988b4affbd3c6c7ab852ec75bc6f298ff4e95"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x40, 0x9, 0x59, "c1a1eb6731108fb10309bb2000adbf17be109a7d63944662d3ac65bf0f2f49e896091bef1a986bad735540cec408f99653044ce942e7e5b1679d1698c495b152ab088c21a5f62556fd63409a95cda4bfe7d5b51185f697e720"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x73, 0x82c, 0x4, 0x9, 0x0, 0xff, 0xd486, 0x9, 0x6, 0x9d80, 0xfffa}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) 1.946942172s ago: executing program 3 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000480)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0xffc99a3b00000000, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffffffffffffff, 0x2, 0x948, 0x9, 0x9, 0x1ff, 0x6, 0x4, 0x7ffffffffffffffe, 0x400000000000002, 0xffffffffffff986b, 0x1, 0x2000000000005, 0x3, 0x1], 0x0, 0x190980}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 1.782960131s ago: executing program 3 (id=469): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000319b16c25215896300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x1ffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) getdents64(r6, 0x0, 0x0) write$eventfd(r3, &(0x7f0000000040)=0x3, 0xe) dup(r0) r7 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0xa, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x15, 0x84}}, [{{0x9, 0x5, 0x2, 0x3, 0x3f7, 0xf7, 0x10, 0x5}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.779852832s ago: executing program 0 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r2, r2, 0x0, 0x3) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x7, 0x202) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000003c0)={r5, 0x1000, {0x0, 0x0, 0x0, 0x20009, 0x4, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x1000) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x95, {"36263666460f1107660fdec8660f01f848b8aebc0000000000000f23d80f21f835400000800f23f840df2c8500000000660f3882ad09000000460f01c498c0b9c551828266bafc0c66baf80cb8607f9f8def66bafc0cedefb8802c188def66bafc0cb8b69f4ea2efc7442400cb2b0000c7442402894a2358c7442406000000000f011424"}}], 0x95}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xa000, 0x109000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.775190213s ago: executing program 0 (id=471): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdir(&(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x8) socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/38, 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_script(r1, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rmdir(&(0x7f0000000340)='./bus\x00') clock_gettime(0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669632e74696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 1.403554599s ago: executing program 0 (id=472): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={[0x81]}, 0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) (async) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) 506.812309ms ago: executing program 0 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) (async) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008050b431740000102030109028600030180e007080b0101010a20000904000000010120000924010200032600c511240806010001000002000200feff03000c2403fd0004a80306f9ff0a090401"], 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) listen(r2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0xfffff96a, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @empty, 0xffffffff}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000095ca6cc00e1ca4140000000000000000000000000000007fff0000000000000a00000087000000585b4fb6e8824e41556226e24b15348e6413214a262942262cdbe8498eb31ce35bccfba4143d5a5efcaac1b4511c5961320da56c3174598a31a59ec8ef21e407003a124896f7ad2bf4f912a9873c1fae3f42", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000001000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x4041, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x92c, &(0x7f0000000800)={{0x12, 0x1, 0x100, 0x95, 0xbd, 0x7e, 0x40, 0x145f, 0x13d, 0xe5d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91a, 0x2, 0x7, 0x12, 0x10, 0xa, "", [{{0x9, 0x4, 0x93, 0x1, 0xd, 0x49, 0xac, 0xe8, 0x1, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff1, 0x8, 0x0, 0x15}, @as_header={0x7, 0x24, 0x1, 0xe2, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0xfb, 0x9, 0x3}, @as_header={0x7, 0x24, 0x1, 0x40, 0x88, 0x2}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9b0710"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9951, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x3c}, [@acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x6, 0x6, 0x80, 0x1, 0xa}]}], [{{0x9, 0x5, 0xf41d8126bb083bdf, 0x2, 0x40, 0x2, 0x9, 0x8, [@generic={0x30, 0x22, "c700397379b91f6d6ea6d82587f1371934a196af3dda4393d252033467cd6c9516a4322bc0da9d852e2d99fbaeb4"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x8, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x1}, @generic={0x32, 0x5, "c9f20e435ef310691092284ba9135f774936cdf2011c6bdeeb906932796d7abc3e4ef5901decaea7e5a4785274f11811"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xc, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x6e, 0x2, 0x81}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xff, 0x2, 0x4}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x29, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}, @generic={0x45, 0x6, "742786f2b1601d4ca8ff9af1d7743c909c1ad89c7add71714ed55f0bf791a97fe20c93508ddfeb9e34ad22f197fd8309b766bd3e30b909e6a65e6f6e94e04daf493fc5"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x5, 0x78, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x5, 0x1, [@generic={0x2c, 0xf, "abf7e6fc66e24c9794a80914da96359ab8d9c22d29d98c0de6a5810b75f5264f18ba791554053e440e52"}]}}, {{0x9, 0x5, 0xa, 0x14, 0x8, 0x7e, 0xb, 0x4}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x0, 0x1, 0x5, [@generic={0xe4, 0x9, "8592e9c8c3b484a3428e67237e7086b156586569181f5b98e8fe0a578e14d4f76b1d48e66c7ac26560e6aaa08025c2b7b3339bb6ad1f1b2117b94265c4c1fd652b285d853c7ba7f153f1936f703e3b930889ffd14f634bf9ec0a5864f5279c48f1e70e785802de13216af83ef407c648be75108b07831ca6ba743aae7852ef55da0cd0f3dfbfe0511c7451e06b68abdadf9807c51c76191fef8532337545a9d865c4fceae2bd61c7d46917821bf7a9446c0ef2f4fd88b21680a239c5be5ad1ba0aa6c31d70a30b5855e108587492e0312e52e7bf8fe62de2adda16dee5a4fc55c840"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x99, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xa}]}}]}}, {{0x9, 0x4, 0x6f, 0x0, 0xf, 0xf0, 0xa5, 0xad, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "bec4c0"}, {0x5, 0x24, 0x0, 0x17}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x10d3, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0xfff8, 0x0, 0x0, 0x3a3b, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x37}]}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x5, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x14, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0xe0, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xe0b8}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0xc, 0x2, 0x7, [@generic={0xe4, 0x7, "c01ff463ce8c5d7d394faff3854049cbd64af040b9a6c6095264e4f1a0036b1e742fc9d2b9c08be91ef7eeb8beed92d1212f4a1492f57d6f83f01b44cdcff10992a847a69b47869691ecec5185e5565aa22aceb785906f2529e44f098834fea254e04b022725b8a03885fe28150ead08f6a66792b8cf20a757647d12d04d2608e0fd5e1fdc391e52509324079bf3ab1b46ab5eaae7e8aea32e868cd6706a2ca0c1280b5dc2ef24400e077d280f8d4fb1f3ff5d67de62bc2a2600f45fa04712a0cf610b1bdbf0e0d219926bc89483cc820bbc2835a661cdfa6cbf5457be89d676aba0"}, @generic={0x36, 0x21, "f4b54295dea23f059978bbdb550b7c6896a985e614bf5bc0e56918bc36217618c39c5c5b066a49a05022b5b64bed6466325dcd9c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x8, 0x8b, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x3, 0xf, 0x1, [@generic={0x42, 0x10, "1dcec6dc1967eb441b4b1358ef32a1ed1545fd5add18cb3203596014333a3a15ea1905f787b65af6ba27fb746f501c1907fb01daa20105bcddae16879b5e8ba2"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0xa0, 0x7, [@generic={0x7a, 0x23, "d28492d2d89a058621170021e4651398c414e8b5f1c5cc05cd3dca04408b3c4ead1a1012f92c088e5624661f69226239177b592fbfb3e1cb8ba18ac6ff8016b6e96deca9df7e39592194a30ead6386759d8f06560b16e83b2339f68873fe17b79faeaa2b94abf123cc9f89ffce0216cf8de54985ff02cdd0"}, @generic={0x62, 0x1, "dee3ad9662d9c1c48d83a80ed31b35d9ca144032fd0d34f22c84c1f28a727ad70af9637708938ee4c9d8b75466999d2709a7a4ebe25465bdd42342f080637189a7eb84f38f427f0c22f2f9037deb2726d1cbedec37967f648b95eae8f9049382"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x9, 0x9f, 0xd}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xa3, 0xd, 0x3, [@generic={0x38, 0x35, "54ffc1e948b4b01816b1731514514c4e650aa53a4e8135ea204d33e781b86af736de307aa6ecce7954f50ad3dfd4540bf88f17b07823"}]}}, {{0x9, 0x5, 0x0, 0x10, 0xc3c43a1092696cf8, 0x6, 0x5, 0x1a, [@generic={0x4e, 0x9, "088e239277f5bf332dfd681f834db5c8e01cf8f4bb1b272caf1ac3f6f8f51626a65373950870c6c228e01e845c3f9b760d914f8235a84edc3f6bffd3a72007e1c512492b55c96eeb182614be"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xfe, 0x7, 0xfc, [@generic={0x1a, 0x31, "0415e3735eb46ffcca20a7ecea66f7db270b35be1f645e66"}, @generic={0x6e, 0x9, "8f4715b3c19f375be074eacc0f51e2fe9479be3607f6e9f7f6aba0d1aa197983ff3cbe2ea434f53bd998202bea47774a12469aa62324e96a90c6514ea31a5033e6f7fc696d5cbd02e3feb871f00e059044b7edf0e64e38011d6dd5de43c735387fc632a1407ba21f2c116a4f"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x73, 0x3, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x2, 0xd, 0x6c, [@generic={0x4e, 0x23, "138bfc72a145c09834a3b0f0982e7e0520deaf1d163449b1a80d94c4b4181b8924227b4d5c4be7db27655df03378eb94f6d509385cfc9336df71ff86ef42595fab006866edf6ee08ec12a0ef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x14, 0x5, 0x1}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x6, 0x2, 0x5, [@generic={0xfc, 0x22, "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"}, @generic={0x9c, 0x5, "cc3a667d951f5bb2371cec0e96de5a919c8bc29d81484cdae1e2119eff51362716e6d29ee23f300a45832711d15681f3e0a4dfcf54fd28a0af62dfc4b92ca284359f14d01874b1639b0d3999e91c8df23a4b7ac3fa42847183652b368dddd17c166c1751f04b3a702bbae7343bcb724ee68ca2a5b5791f6945dd59435abef9a76ba78d82d512a8efb06230bd33b9f98add45c0d8905e1e13c241"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x4, 0x7, 0xd, [@generic={0x67, 0x9, "e218265ad2b2c0be71e1b798c8c72002057d08c61f743211b62ec270252f389d9fb9f7f76ad1d2f425548fa207aee521afc010d8fac2cfbb635cfd5bf08de61ae2c49a92820fee8cea2533ab07af7b432336444811f7cbb76c03cfb410ce1048c06fa06be9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x310, 0x6, 0x4, 0x1, 0x40, 0x7}, 0x27, &(0x7f0000001180)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xaa, "ea0b9cd81665564ebd86e8489e5c04a4"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x5, 0xfff8}]}, 0xa, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x51, &(0x7f0000001200)=@string={0x51, 0x3, "aeb01a8db6ab15f6b62f58f1b3104c3e5effd19c862b5c1bd3cd893a359f2d9062e3ce5f01f9217701ceaef2fcd5e8b7dd8459edd5ebfec0acce779019e3aa50405f90d5d4ff0977ceb97fa461a9a2"}}, {0x57, &(0x7f0000001280)=@string={0x57, 0x3, "cd1b1cec9dc50338adaae75ffae25e5405db7160127e58dcb20ce0ed5f23d28f1894f2857d15f5e0132881b7b8846a66082c2ac4e268dcf705b7c4a21969d1285884412ca4b4f3c8db10015fa607eb96abae375994"}}, {0xc, &(0x7f0000001300)=@string={0xc, 0x3, "72e2f6f9b2c1cf54e4a6"}}, {0xf3, &(0x7f0000001340)=@string={0xf3, 0x3, "ea12342b2846cb5e5779f3e687174a5b04d6cbee9bb1833d6aefbc0514e7a148af934da7aa11af4f73dcb0c134c3625747290275da649d18d0815c738a784cd985646f1b202ba378d8a129a44f0c2b64ad15b8c38c0a5ee775a4bd625ebddac6c6b93ceec0308fd03f25e7f9188e61ca93be4052a3af9bb430f9a4201729735f04477a2b5f8d461bed9c69c0d29ab9c5b7a9731a3d187021608cb372b0d1a6fe345b620f58827c1696e33ceea3420bffcc1f1a70b11021c42a0ba9fdb23850d31cddb3e2847861322043d7a62cd606b80eea50731be068c2f8ba10dec52c778987c6b22f038f04d36033bd70c7ea3711ed"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x425}}, {0x101, &(0x7f0000001480)=@string={0x101, 0x3, "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"}}, {0xe8, &(0x7f00000015c0)=@string={0xe8, 0x3, "f84c02ae76671096bc1b8ec7fa3128ed654463dfe3081804c9effb4d1322b3378e75e70165fdf412a334277d014bfc8a8603b3d65a953ee2acfee71d3c1934e84855c58538c66a8fc570005c6d578fa8fb425338565978bb303dc0eaf98c1f0e40379730d4a00b85146cc50c796ab217b05bdbeb3b064fb399db4b2d77d4d7a850fe79ff25b475f9ba3e8742f3facbda2e5efa0dde574772cdf101a37f67d8e801ce0fcee93e1673161f4fafe172e67bc6cdfae52e92b244c0f4b9a29fa5684b7087617b9270c648cd5aabce98d9a80b6a6eaf25add9c542158ac323a11e043a6c36ff1bc582"}}, {0x8d, &(0x7f00000016c0)=@string={0x8d, 0x3, "c240d782a794d67869c8751215f37ee2399c0568c37c8ee807d67197f3032c3b74c47f00640212bcb3bf982c3ba2661940ff4a0444cb1827e757453b3947a19628231adac121dee903e2cebfedccb413ecaa79d584513832b7655e689e166a6faf08742b21f0156dd890f311260c0e1255d24edce6adb653cc38c531e339675b028a0899dc3ebe322d1cb9"}}, {0xd5, &(0x7f0000001780)=@string={0xd5, 0x3, "19034c2b13b11ce448d1997120f602249c87501ccdc6ce4aa8be06428d65106cc56404822b366e0293b745a3de2e0fb33286a395db530a5ce47b16da8f519a826f05f54c756715577df6773dd28ada84ec309862191cc69b65a1184e540edc8a43432bdf04919de869534f2559cf2d91de2304bb632e1af49bb95ff783e64a6fe7430e8896deecfbad349791496c3761acda21bcb43537f1cafcde1a0aa5ba36b3523c2a2dc18310fbc4d1b312ddaedec4e6346fc11886506359a5936d193747b4e414043d204d8fedf497358b5d547e725638"}}]}) (async) getdents64(r4, &(0x7f0000000100)=""/1000, 0x3e8) (async) openat(r4, &(0x7f0000000143), 0x0, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000006000000000a00107e00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffff2200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e0000000302"], 0xb8}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x501800, 0x0) mlock(&(0x7f0000158000/0x4000)=nil, 0x4000) r6 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'nr0\x00'}) (async) madvise(&(0x7f0000283000/0x1000)=nil, 0x1000, 0x4) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) close(r7) (async) munlockall() (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) 329.539101ms ago: executing program 2 (id=474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x4, 0x2, {0xa, 0x4e20, 0x6f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}}, 0x3a) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x80, 0x5}) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x3) accept4(r3, 0x0, 0x0, 0x0) 314.719394ms ago: executing program 2 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./dev/sda1\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mmap(&(0x7f0000dab000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r3, 0xffffb000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x7, 0x0, 0x4, 0x1, 0x0, 0xf9}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0x88}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0xf, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x1ffc, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x54, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]}) (async) ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f0000000100)) close(r2) 231.081598ms ago: executing program 2 (id=476): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x16c) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c756e616d653d236c257d5b2628a624288a78dc2c63616368653d6c6f6f73652c008f88485d7d9e3e63e32e5f9f7a9a74736c0b06"]) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c756e616d653d236c257d5b2628a624288a78dc2c63616368653d6c6f6f73652c008f88485d7d9e3e63e32e5f9f7a9a74736c0b06"]) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040000004c"], 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) write$P9_RGETATTR(r1, &(0x7f00000002c0)={0xa0, 0x19, 0x0, {0x23d6, {0x80}, 0x41f6, 0xee00, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x800, 0x1000, 0x8, 0x1000, 0x40000f, 0x0, 0x0, 0x100000000, 0xfffffffffffffffb, 0x6fd, 0x2, 0x0, 0x10}}, 0xa0) 155.357243ms ago: executing program 2 (id=477): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x70bd2d, 0x0, 0xa}}}, 0xf8}}, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) syz_ublk_setup_io_uring(0x3833, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x8000003, 0x1e8}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x3cd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x30, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = dup(r5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') read$FUSE(r10, 0x0, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x1, @private0, 0x80000000}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r8, &(0x7f0000000ec0)={@void, @val={0x2, 0x3, 0x2b, 0x30, 0x14, 0x6}, @ipv6=@generic={0x0, 0x6, '|pU', 0x701, 0x5c, 0xff, @private0, @mcast2, {[@fragment={0x2f, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x64}, @hopopts={0xc, 0x2d, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x55, 0x72, "efba7fd3a44008aa5ec783b3a5cd97480d70bbeeaf758d0c183ff2976829148438a5df8cc313e996401b4ee5197344b3ef530edfa0e11465b05a5f333543410b08e81593f43dd76a90660bdabcfed16dde436d0df7ee2f201058ccf4cd545ef7bae56b55989991ff899b00c2a65f14eeb675"}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x1, 0xca, "918868c09153b7078515de9b12fc1374807908d84288b8cbbd9207348ff6e67f555c4565495fb968c7db2fac7aa47d480ab8f811430bd9e2a68d6d1edf24459a6ee60b076314a4567dcab2f6ff314d417933d463a51748d7849115358be4af879ffff4fb0a7b838f21f7eb64c7f806e9b73a7b7ec52c3d0b1fe5969aa6ea71076b64b13dc7197ab54e173f281a3c9e726ae427ebaa95b1583880e1df5d36a909950d253a9b86ca9d9143d5d6e9b091959e3e2ef2e971eaf2925758a2f86106ed777a912e5a3abc2c70b7"}]}, @hopopts={0x3a, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xc7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @hopopts={0x11, 0x2, '\x00', [@ra={0x5, 0x2, 0x100}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x2c, 0xe, 0x4, 0x7, 0x8, 0x20, 0x3, [@empty, @mcast1, @rand_addr=' \x01\x00', @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}, @hopopts={0x3b, 0x44, '\x00', [@generic={0x0, 0xda, "070b6d6fc4f6a9f11758901d0ae105f012227f0fe5ed858e104b77a06184fb9f0ab3324b81dcf5027f8204267b944d7e50c4e56020dde90fac63e5154239a37b1da774918695a3574e3af6e24c40b7efa838f7cf82f86c1f81eb6ad2563dbc1296f0cebf72d2a9a37c2095a6c6a0ed99be2eeca49986eb7c62d48f7f93b91cf8d1bfaa02212f949d20c8315550931b68deb2a9f510e3aad19636bbec2e1c2b3715d69c97520b57dab8e1901d9a29a800252e72a052c5319514bf2cd130b2382266c511b924fad07d817c046629fcda9157581957a784f070f936"}, @generic={0x40, 0xb6, "0bdd8028240cafcfc96afd0bbadc0a7c5760b9c27e244c713ae79d51afd741d2e81ca4fd0c65596fb77aeb81f31bc1c408bf7fe40455ae95f87faae3ce4a104f49a06d55461f64037e25776397b107c7a7ccfae5cd45083bd0e40d9c820d46aa64b67c234e580c1c4ddc1d694ff6c224bd9c3e8db49b5914d888d9add6cfcd7e913e68037382958fc14f21efb312c73d0f38a5a70c4994696d2a57b62324a3dd7443987be787dd571fa08ba481bfcac593b95bab1262"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7f, 0xb65, [0x8, 0x8000000000000001, 0x2]}}, @ra={0x5, 0x2, 0x6}, @generic={0x9, 0x60, "ea6b319b8aca6373880f0c1757a6576329c267f267f7f881557d8ab95f06ce21161ecb34f284206eaa809b6070639b358564e69202eb01af338bb7ef51284803361981e0f7eccd2a7753aca7cf8c9e4b40609d86cf7d3efc633a2b5e03999ecf"}, @jumbo={0xc2, 0x4, 0x10000}, @pad1]}, @srh={0x2c, 0x12, 0x4, 0x9, 0x1, 0x8, 0x1, [@private2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private1, @private2, @private0={0xfc, 0x0, '\x00', 0x4}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, @srh={0x87, 0x4, 0x4, 0x2, 0x4, 0x8, 0x81, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}, @dstopts={0x33, 0x18, '\x00', [@pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x81, 0x8, [0x4, 0x0, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x8, 0x2]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x0, 0x6, 0x6, 0x2, [0x9c20, 0xd320, 0x1]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x9, [0x1]}}, @pad1]}, @srh={0x0, 0xa, 0x4, 0x5, 0xa, 0x38, 0x4529, [@empty, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @remote}]}], "5c5be0bb8ed766878e4d816bc4ce842eceb2123ddb3714321f6cf068984a8553a324f6c89d5c14d148987dd0d5091678c2795a68aae272012eeddfb9d1fbed2fca1e9ff29efae34e916eba7a747b003466bacfb8c293fd844df2f88ab6124e536131b82c2a02f5a06e97d60eac4016ab62c5d2289daa6bb8812f498c88b72444cc881eb13f67d86d94be430a7d07632a97e0bba928012b24944ad2d481ff639791d4bcedb4caf7fd54e40fe47f608c5c06"}}}, 0x733) syz_ublk_setup_queues(r7, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 71.639947ms ago: executing program 2 (id=478): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x8440, 0x104) lsetxattr$security_selinux(0x0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:modem_device_t:s0\x00', 0x24, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/9, 0xffffff7a) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) add_key(&(0x7f00000002c0)='trusted\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) 0s ago: executing program 2 (id=479): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x40, 0x6, 0x4, "1f498c60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x4, 0x15, {0x15, 0xc, "f988b4affbd3c6c7ab852ec75bc6f298ff4e95"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x40, 0x9, 0x59, "c1a1eb6731108fb10309bb2000adbf17be109a7d63944662d3ac65bf0f2f49e896091bef1a986bad735540cec408f99653044ce942e7e5b1679d1698c495b152ab088c21a5f62556fd63409a95cda4bfe7d5b51185f697e720"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x73, 0x82c, 0x4, 0x9, 0x0, 0xff, 0xd486, 0x9, 0x6, 0x9d80, 0xfffa}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) kernel console output (not intermixed with test programs): g dummy_hcd [ 31.597053][ T348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.608136][ T348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 31.619090][ T348] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.631955][ T348] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.638645][ T348] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 31.647710][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.656439][ T348] usb 1-1: config 0 descriptor?? [ 31.661714][ T531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.715977][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 31.722363][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.731012][ T10] usb 4-1: config 0 has no interface number 0 [ 31.739332][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.748454][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.756602][ T10] usb 4-1: Product: syz [ 31.760778][ T10] usb 4-1: Manufacturer: syz [ 31.765371][ T10] usb 4-1: SerialNumber: syz [ 31.770752][ T10] usb 4-1: config 0 descriptor?? [ 31.776890][ T10] smsc95xx v2.0.0 [ 31.816036][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.894238][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 31.894260][ T36] audit: type=1326 audit(2000000003.199:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.1.52" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0a819e159 code=0x0 [ 31.965968][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 31.972205][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.980494][ T31] usb 3-1: config 0 has no interface number 0 [ 31.988032][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.998087][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.001513][ T36] audit: type=1326 audit(2000000003.309:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=538 comm="syz.1.52" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7ff0a819e159 code=0x0 [ 32.009989][ T542] syz.1.52: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 32.030726][ T31] usb 3-1: Product: syz [ 32.031495][ T36] audit: type=1400 audit(2000000003.319:202): avc: denied { setopt } for pid=538 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.043054][ T31] usb 3-1: Manufacturer: syz [ 32.047630][ T542] ,cpuset=syz1,mems_allowed=0 [ 32.072063][ T31] usb 3-1: SerialNumber: syz [ 32.075722][ T542] CPU: 0 UID: 0 PID: 542 Comm: syz.1.52 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 32.075750][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 32.075765][ T542] Call Trace: [ 32.075772][ T542] [ 32.075781][ T542] __dump_stack+0x21/0x30 [ 32.075827][ T542] dump_stack_lvl+0x140/0x1c0 [ 32.075852][ T542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.075877][ T542] dump_stack+0x19/0x20 [ 32.075899][ T542] warn_alloc+0x1e7/0x2c0 [ 32.075923][ T542] ? stack_depot_save_flags+0x399/0x800 [ 32.075947][ T542] ? common_lsm_audit+0x14c8/0x18b0 [ 32.075969][ T542] ? __cfi_warn_alloc+0x10/0x10 [ 32.075992][ T542] ? kasan_save_track+0x3e/0x80 [ 32.076012][ T542] ? kasan_save_alloc_info+0x3a/0x50 [ 32.076030][ T542] ? xsk_init_queue+0xb2/0x120 [ 32.076049][ T542] ? xsk_setsockopt+0x411/0x760 [ 32.076068][ T542] ? do_sock_setsockopt+0x27f/0x410 [ 32.076092][ T542] ? __x64_sys_setsockopt+0x18c/0x220 [ 32.076114][ T542] ? x64_sys_call+0x2adc/0x2ee0 [ 32.076131][ T542] ? do_syscall_64+0x57/0xf0 [ 32.076149][ T542] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.076172][ T542] __vmalloc_node_range_noprof+0x136/0x1300 [ 32.076193][ T542] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 32.076210][ T542] ? avc_has_perm+0x1ec/0x240 [ 32.076232][ T542] ? kasan_save_alloc_info+0x3a/0x50 [ 32.076249][ T542] ? __kasan_kmalloc+0x96/0xb0 [ 32.076270][ T542] ? __kmalloc_cache_noprof+0x23c/0x470 [ 32.076290][ T542] vmalloc_user_noprof+0x77/0x90 [ 32.076306][ T542] ? xskq_create+0xdb/0x290 [ 32.076325][ T542] xskq_create+0xdb/0x290 [ 32.076344][ T542] xsk_init_queue+0xb2/0x120 [ 32.076363][ T542] xsk_setsockopt+0x411/0x760 [ 32.076382][ T542] ? __cfi_xsk_setsockopt+0x10/0x10 [ 32.076401][ T542] ? do_futex+0x32a/0x510 [ 32.076425][ T542] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 32.076445][ T542] ? security_socket_setsockopt+0x3d/0x100 [ 32.076470][ T542] ? __cfi_xsk_setsockopt+0x10/0x10 [ 32.076489][ T542] do_sock_setsockopt+0x27f/0x410 [ 32.076512][ T542] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 32.076536][ T542] ? __fget_files+0x2bc/0x330 [ 32.076558][ T542] __x64_sys_setsockopt+0x18c/0x220 [ 32.076590][ T542] x64_sys_call+0x2adc/0x2ee0 [ 32.076606][ T542] do_syscall_64+0x57/0xf0 [ 32.076623][ T542] ? clear_bhb_loop+0x50/0xa0 [ 32.076644][ T542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.076665][ T542] RIP: 0033:0x7ff0a819e159 [ 32.076686][ T542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.076701][ T542] RSP: 002b:00007ff0a9087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 32.076722][ T542] RAX: ffffffffffffffda RBX: 00007ff0a8426270 RCX: 00007ff0a819e159 [ 32.076735][ T542] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000027 [ 32.076747][ T542] RBP: 00007ff0a823506b R08: 0000000000000004 R09: 0000000000000000 [ 32.076758][ T542] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.076770][ T542] R13: 00007ff0a8426308 R14: 00007ff0a8426270 R15: 00007ffe6d42a768 [ 32.076785][ T542] [ 32.080199][ T542] Mem-Info: [ 32.096419][ T31] usb 3-1: config 0 descriptor?? [ 32.102176][ T542] active_anon:40026 inactive_anon:1 isolated_anon:0 [ 32.102176][ T542] active_file:17742 inactive_file:2588 isolated_file:0 [ 32.102176][ T542] unevictable:0 dirty:24 writeback:0 [ 32.102176][ T542] slab_reclaimable:5474 slab_unreclaimable:69321 [ 32.102176][ T542] mapped:24133 shmem:33564 pagetables:816 [ 32.102176][ T542] sec_pagetables:0 bounce:0 [ 32.102176][ T542] kernel_misc_reclaimable:0 [ 32.102176][ T542] free:1498637 free_pcp:1640 free_cma:0 [ 32.107878][ T31] smsc95xx v2.0.0 [ 32.108090][ T542] Node 0 active_anon:160104kB inactive_anon:4kB active_file:70968kB inactive_file:10352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96532kB dirty:96kB writeback:0kB shmem:134256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4528kB pagetables:3264kB sec_pagetables:0kB all_unreclaimable? no [ 32.478011][ T542] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5144kB free_cma:0kB [ 32.508114][ T542] lowmem_reserve[]: 0 3921 3921 [ 32.513010][ T542] Normal free:3035492kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:160296kB inactive_anon:4kB active_file:71076kB inactive_file:10352kB unevictable:0kB writepending:116kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:1716kB local_pcp:500kB free_cma:0kB [ 32.544357][ T542] lowmem_reserve[]: 0 0 0 [ 32.548767][ T542] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 32.564282][ T542] Normal: 7*4kB (UE) 97*8kB (UE) 4*16kB (UME) 26*32kB (UME) 37*64kB (UME) 21*128kB (UE) 15*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 737*4096kB (M) = 3035492kB [ 32.581527][ T542] 53923 total pagecache pages [ 32.586286][ T542] 3 pages in swap cache [ 32.590460][ T542] Free swap = 124472kB [ 32.594716][ T542] Total swap = 124996kB [ 32.598924][ T542] 2097051 pages RAM [ 32.602752][ T542] 0 pages HighMem/MovableOnly [ 32.607548][ T542] 352241 pages reserved [ 32.611756][ T542] 0 pages cma reserved [ 32.618178][ T542] Memory allocations: [ 32.622225][ T542] 0 B 0 init/main.c:1477 func:do_initcalls [ 32.626709][ T547] netlink: 'syz.0.53': attribute type 7 has an invalid length. [ 32.629522][ T36] audit: type=1400 audit(2000000003.929:203): avc: denied { mount } for pid=546 comm="syz.0.53" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 32.656206][ T542] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 32.659236][ T36] audit: type=1400 audit(2000000003.949:204): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 32.667837][ T542] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 32.695055][ T542] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 32.703371][ T542] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 32.711564][ T542] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 32.720604][ T542] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 32.728801][ T542] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 32.737083][ T542] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 32.745067][ T542] 0 B 0 init/initramfs.c:101 func:find_link [ 32.800726][ T36] audit: type=1400 audit(2000000004.109:205): avc: denied { write } for pid=552 comm="syz.0.56" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.825420][ T36] audit: type=1400 audit(2000000004.139:206): avc: denied { setopt } for pid=557 comm="syz.0.57" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.845555][ T36] audit: type=1400 audit(2000000004.139:207): avc: denied { read } for pid=557 comm="syz.0.57" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.865563][ T36] audit: type=1400 audit(2000000004.139:208): avc: denied { write } for pid=557 comm="syz.0.57" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.888455][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 32.899206][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 32.909215][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 32.920110][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 32.930824][ T10] usb 4-1: USB disconnect, device number 4 [ 33.045374][ T36] audit: type=1400 audit(2000000004.349:209): avc: denied { setopt } for pid=567 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.115591][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 33.126471][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 33.135794][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 33.146676][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 33.158121][ T31] usb 3-1: USB disconnect, device number 4 [ 33.175255][ T575] process 'syz.1.61' launched './file0' with NULL argv: empty string added [ 33.495967][ T396] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.645971][ T396] usb 2-1: Using ep0 maxpacket: 32 [ 33.651215][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.660872][ T396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.679343][ T396] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.688686][ T396] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 33.699878][ T396] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 33.713331][ T396] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.728740][ T593] capability: warning: `syz.0.69' uses deprecated v2 capabilities in a way that may be insecure [ 33.739390][ T396] usb 2-1: config 1 interface 1 has no altsetting 0 [ 33.750965][ T595] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 33.761785][ T396] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 33.773172][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.782712][ T396] usb 2-1: Product: syz [ 33.787140][ T396] usb 2-1: Manufacturer: syz [ 33.792188][ T396] usb 2-1: SerialNumber: syz [ 33.807223][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.818353][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 33.827571][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.837464][ T10] usb 4-1: config 0 descriptor?? [ 33.843718][ T10] usb 4-1: bad CDC descriptors [ 33.857315][ T608] ./dev/sda1: Can't lookup blockdev [ 33.958328][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.966948][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.003661][ T396] usb 2-1: selecting invalid altsetting 0 [ 34.043907][ T536] usb 4-1: USB disconnect, device number 5 [ 34.407269][ T396] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 34.419653][ T396] usb 2-1: USB disconnect, device number 6 [ 34.429843][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.601381][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.612684][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.805975][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 34.927080][ T630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=630 comm=syz.1.81 [ 34.940088][ T634] option changes via remount are deprecated (pid=629 comm=syz.1.81) [ 34.955727][ T630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.956722][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 34.964871][ T630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.973898][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.991223][ T10] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 35.000379][ T633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.008794][ T10] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 35.017073][ T633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.017154][ T10] usb 3-1: Product: syz [ 35.026777][ T633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.029093][ T10] usb 3-1: Manufacturer: syz [ 35.038999][ T633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.046564][ T10] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 35.051471][ T633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.064796][ T633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.076794][ T633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.085355][ T633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.139093][ T637] fuse: Unknown parameter 'šdÃkýãÃÒ¹¦B|²mÔzg¸†–Y2:³Ô÷8ÇËE!å_óÓy®x(ã¹E$‡ šºK‹›ë<0Ô8Yü¸_m‘âôoÎç±m:0.%tª­¸ÝQ&•Ô&SQF}‚˜Ù÷¸ô^íÚÆî¿>‹pêü(ÞŸ±¡¦ [ 35.139093][ T637] '¨DêþZ-ÈÇÓ(Sñ¯}Y|¿'!£¼Ñß Þ±ßŸP[G2Ây“¤ê6qñÊ´ÇL;…só_kx [ 43.151351][ T840] __dump_stack+0x21/0x30 [ 43.151382][ T840] dump_stack_lvl+0x140/0x1c0 [ 43.151408][ T840] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.151445][ T840] ? __kasan_kmalloc+0x96/0xb0 [ 43.151470][ T840] dump_stack+0x19/0x20 [ 43.151495][ T840] should_fail_ex+0x3c2/0x510 [ 43.151520][ T840] should_failslab+0xac/0x100 [ 43.151543][ T840] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 43.151564][ T840] ? simple_xattr_set+0x5e/0x300 [ 43.151585][ T840] ? __asan_memcpy+0x5a/0x80 [ 43.151604][ T840] kstrdup+0x4d/0x130 [ 43.151621][ T840] simple_xattr_set+0x5e/0x300 [ 43.151642][ T840] shmem_xattr_handler_set+0x198/0x2d0 [ 43.151668][ T840] ? __cfi_shmem_xattr_handler_set+0x10/0x10 [ 43.151692][ T840] __vfs_setxattr+0x456/0x4a0 [ 43.151711][ T840] __vfs_setxattr_noperm+0x12d/0x670 [ 43.151730][ T840] __vfs_setxattr_locked+0x212/0x240 [ 43.151748][ T840] vfs_setxattr+0x16b/0x2f0 [ 43.151763][ T840] ? __cfi_vfs_setxattr+0x10/0x10 [ 43.151780][ T840] ? mnt_want_write_file+0x224/0x300 [ 43.151801][ T840] __se_sys_fsetxattr+0x3c1/0x500 [ 43.151818][ T840] ? __x64_sys_fsetxattr+0xf0/0xf0 [ 43.151840][ T840] ? __cfi_ksys_write+0x10/0x10 [ 43.151858][ T840] ? __kasan_check_write+0x18/0x20 [ 43.151874][ T840] ? fpregs_restore_userregs+0x11c/0x260 [ 43.151894][ T840] __x64_sys_fsetxattr+0xc3/0xf0 [ 43.151911][ T840] x64_sys_call+0x1a16/0x2ee0 [ 43.151927][ T840] do_syscall_64+0x57/0xf0 [ 43.151945][ T840] ? clear_bhb_loop+0x50/0xa0 [ 43.151968][ T840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.151988][ T840] RIP: 0033:0x7fea7359e159 [ 43.152005][ T840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.152018][ T840] RSP: 002b:00007fea74535028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 43.152038][ T840] RAX: ffffffffffffffda RBX: 00007fea73825fa0 RCX: 00007fea7359e159 [ 43.152051][ T840] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 43.152064][ T840] RBP: 00007fea7363506b R08: 0000000000000001 R09: 0000000000000000 [ 43.152074][ T840] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 43.152085][ T840] R13: 00007fea73826038 R14: 00007fea73825fa0 R15: 00007ffefe80ba78 [ 43.152101][ T840] [ 43.157831][ T840] FAULT_INJECTION: forcing a failure. [ 43.157831][ T840] name failslab, interval 1, probability 0, space 0, times 0 [ 43.167733][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 43.167748][ T36] audit: type=1400 audit(2000000014.469:276): avc: denied { mounton } for pid=839 comm="syz.3.135" path="/28/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 43.182274][ T840] CPU: 1 UID: 0 PID: 840 Comm: syz.3.135 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 43.182302][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.182314][ T840] Call Trace: [ 43.182320][ T840] [ 43.182327][ T840] __dump_stack+0x21/0x30 [ 43.182359][ T840] dump_stack_lvl+0x140/0x1c0 [ 43.182385][ T840] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.182410][ T840] ? __futex_wait+0x330/0x3d0 [ 43.182429][ T840] dump_stack+0x19/0x20 [ 43.182451][ T840] should_fail_ex+0x3c2/0x510 [ 43.182474][ T840] should_failslab+0xac/0x100 [ 43.182497][ T840] kmem_cache_alloc_noprof+0x42/0x410 [ 43.182517][ T840] ? fcntl_setlease+0x106/0x570 [ 43.182538][ T840] fcntl_setlease+0x106/0x570 [ 43.182558][ T840] ? __cfi_futex_wait+0x10/0x10 [ 43.182575][ T840] ? __cfi_fcntl_setlease+0x10/0x10 [ 43.182596][ T840] ? vfs_write+0xbcf/0xfd0 [ 43.182616][ T840] do_fcntl+0x5de/0x1580 [ 43.182637][ T840] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 43.182657][ T840] ? check_fcntl_cmd+0xb0/0xb0 [ 43.182678][ T840] ? mutex_unlock+0x90/0x240 [ 43.182703][ T840] ? bpf_lsm_file_fcntl+0xd/0x20 [ 43.182727][ T840] ? security_file_fcntl+0x3e/0x110 [ 43.182746][ T840] __se_sys_fcntl+0xe4/0x180 [ 43.182767][ T840] __x64_sys_fcntl+0x7f/0xa0 [ 43.182788][ T840] x64_sys_call+0x1cb3/0x2ee0 [ 43.182806][ T840] do_syscall_64+0x57/0xf0 [ 43.182823][ T840] ? clear_bhb_loop+0x50/0xa0 [ 43.182846][ T840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.182868][ T840] RIP: 0033:0x7fea7359e159 [ 43.182883][ T840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.182898][ T840] RSP: 002b:00007fea74535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 43.182926][ T840] RAX: ffffffffffffffda RBX: 00007fea73825fa0 RCX: 00007fea7359e159 [ 43.182942][ T840] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000005 [ 43.182953][ T840] RBP: 00007fea7363506b R08: 0000000000000000 R09: 0000000000000000 [ 43.182965][ T840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.182977][ T840] R13: 00007fea73826038 R14: 00007fea73825fa0 R15: 00007ffefe80ba78 [ 43.182993][ T840] [ 43.735414][ T36] audit: type=1400 audit(2000000015.039:277): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.758464][ T311] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 43.773976][ T36] audit: type=1400 audit(2000000015.079:278): avc: denied { map } for pid=860 comm="syz.3.141" path="socket:[16595]" dev="sockfs" ino=16595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.797563][ T36] audit: type=1400 audit(2000000015.079:279): avc: denied { read } for pid=860 comm="syz.3.141" path="socket:[16595]" dev="sockfs" ino=16595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.927381][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 43.933717][ T311] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.941995][ T311] usb 2-1: config 0 has no interface number 0 [ 43.949557][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.958916][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.967157][ T311] usb 2-1: Product: syz [ 43.971498][ T311] usb 2-1: Manufacturer: syz [ 43.976154][ T311] usb 2-1: SerialNumber: syz [ 43.981395][ T311] usb 2-1: config 0 descriptor?? [ 43.988037][ T311] smsc95xx v2.0.0 [ 44.106033][ T348] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.256010][ T348] usb 3-1: device descriptor read/64, error -71 [ 44.285989][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.435966][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 44.442185][ T31] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.455175][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 44.461847][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 44.470898][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.479478][ T31] usb 4-1: config 0 descriptor?? [ 44.495956][ T348] usb 3-1: device descriptor read/64, error -71 [ 44.736101][ T348] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.783051][ T876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.791648][ T876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.792303][ T311] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 44.800999][ T36] audit: type=1400 audit(2000000016.109:280): avc: denied { create } for pid=875 comm="syz.0.145" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.810757][ T876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.830747][ T36] audit: type=1400 audit(2000000016.119:281): avc: denied { read } for pid=875 comm="syz.0.145" name="file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.838948][ T876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.860707][ T36] audit: type=1400 audit(2000000016.119:282): avc: denied { open } for pid=875 comm="syz.0.145" path="/39/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.867930][ T348] usb 3-1: device descriptor read/64, error -71 [ 44.890467][ T36] audit: type=1400 audit(2000000016.119:283): avc: denied { ioctl } for pid=875 comm="syz.0.145" path="/39/file0" dev="tmpfs" ino=237 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.010426][ T311] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 45.021390][ T311] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 45.031134][ T311] usb 2-1: USB disconnect, device number 13 [ 45.136036][ T348] usb 3-1: device descriptor read/64, error -71 [ 45.246035][ T348] usb usb3-port1: attempt power cycle [ 45.407954][ T36] audit: type=1400 audit(2000000016.719:284): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.539639][ T36] audit: type=1400 audit(2000000016.849:285): avc: denied { map } for pid=879 comm="syz.1.147" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.556285][ T880] rust_binder: Failure in copy_transaction_data: EFAULT [ 45.563298][ T880] rust_binder: 879:880 transaction call to 879:0 failed EFAULT, code 0 size 768-0 [ 45.580108][ T311] rust_binder: 879: undelivered TRANSACTION_ERROR: 29201 [ 45.595967][ T348] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.626986][ T348] usb 3-1: device descriptor read/8, error -71 [ 45.766994][ T348] usb 3-1: device descriptor read/8, error -71 [ 45.965957][ T327] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.005981][ T348] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.026955][ T348] usb 3-1: device descriptor read/8, error -71 [ 46.135954][ T327] usb 2-1: Using ep0 maxpacket: 32 [ 46.142228][ T327] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 46.150371][ T327] usb 2-1: config 0 has no interface number 0 [ 46.157044][ T348] usb 3-1: device descriptor read/8, error -71 [ 46.157919][ T327] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 46.172365][ T327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.180425][ T327] usb 2-1: Product: syz [ 46.184594][ T327] usb 2-1: Manufacturer: syz [ 46.189215][ T327] usb 2-1: SerialNumber: syz [ 46.194818][ T327] usb 2-1: config 0 descriptor?? [ 46.200590][ T327] smsc95xx v2.0.0 [ 46.276057][ T348] usb usb3-port1: unable to enumerate USB device [ 46.981899][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 46.988597][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 46.992521][ T923] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.999588][ T31] usb 4-1: USB disconnect, device number 10 [ 47.009062][ T327] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 47.024516][ T45] rust_binder: 922: undelivered TRANSACTION_ERROR: 29189 [ 47.033247][ T45] rust_binder: 922: undelivered TRANSACTION_ERROR: 29189 [ 47.224669][ T327] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 47.235687][ T327] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 47.245934][ T327] usb 2-1: USB disconnect, device number 14 [ 47.266123][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 47.436849][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 47.446659][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 47.458026][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 47.467423][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.475444][ T10] usb 3-1: Product: syz [ 47.479974][ T10] usb 3-1: Manufacturer: syz [ 47.484609][ T10] usb 3-1: SerialNumber: syz [ 47.491273][ T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 47.499375][ T10] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 47.499375][ T10] Please send a copy of this message to and [ 47.698994][ T946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=946 comm=syz.3.167 [ 47.712190][ T946] netlink: 'syz.3.167': attribute type 2 has an invalid length. [ 47.800944][ T961] incfs: Can't find or create .index dir in ./file0 [ 47.807686][ T961] incfs: mount failed -17 [ 47.930163][ T10] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 47.939676][ T10] usb 3-1: USB disconnect, device number 14 [ 48.115953][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.255988][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 48.266084][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 48.270405][ T974] fuse: blksize only supported for fuseblk [ 48.272521][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.290363][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.297139][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 48.306491][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.315647][ T45] usb 4-1: config 0 descriptor?? [ 48.405960][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 48.412193][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.422679][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.432249][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 48.441537][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.449690][ T31] usb 2-1: SerialNumber: syz [ 48.456320][ T31] usb 2-1: 0:2 : does not exist [ 48.655960][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 48.805921][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 48.812199][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 48.820556][ T10] usb 3-1: config 0 has no interface number 0 [ 48.832342][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 48.842138][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.850732][ T10] usb 3-1: Product: syz [ 48.855079][ T10] usb 3-1: Manufacturer: syz [ 48.859896][ T10] usb 3-1: SerialNumber: syz [ 48.867071][ T10] usb 3-1: config 0 descriptor?? [ 48.877242][ T10] smsc95xx v2.0.0 [ 49.277369][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 49.288139][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.698392][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 49.711536][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 49.723807][ T10] usb 3-1: USB disconnect, device number 15 [ 50.216804][ T995] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 50.434806][ T1012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1012 comm=syz.2.189 [ 50.828053][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 50.844866][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 50.863022][ T45] usb 4-1: USB disconnect, device number 11 [ 50.898049][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 50.898083][ T36] audit: type=1400 audit(8000001103.398:294): avc: denied { bind } for pid=1030 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.924369][ T36] audit: type=1400 audit(8000001103.418:295): avc: denied { listen } for pid=1030 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.944513][ T36] audit: type=1400 audit(8000001103.418:296): avc: denied { accept } for pid=1030 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.045882][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.064527][ T31] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 51.074344][ T31] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 51.084026][ T31] usb 2-1: USB disconnect, device number 15 [ 51.195879][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 51.202356][ T311] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 51.211049][ T311] usb 3-1: config 0 has no interface number 0 [ 51.219188][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 51.228549][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.236690][ T311] usb 3-1: Product: syz [ 51.240859][ T311] usb 3-1: Manufacturer: syz [ 51.245458][ T311] usb 3-1: SerialNumber: syz [ 51.252776][ T311] usb 3-1: config 0 descriptor?? [ 51.258698][ T311] smsc95xx v2.0.0 [ 51.315858][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.558413][ T36] audit: type=1400 audit(8000001104.058:297): avc: denied { create } for pid=1047 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.558835][ T1048] Unsupported ieee802154 address type: 0 [ 51.578515][ T36] audit: type=1400 audit(8000001104.058:298): avc: denied { append } for pid=1047 comm="syz.3.199" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 51.607528][ T36] audit: type=1400 audit(8000001104.058:299): avc: denied { write } for pid=1047 comm="syz.3.199" path="socket:[18681]" dev="sockfs" ino=18681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.631525][ T36] audit: type=1400 audit(8000001104.058:300): avc: denied { bind } for pid=1047 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.659666][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 51.670460][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.934804][ T1087] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 51.946308][ T36] audit: type=1400 audit(8000001104.448:301): avc: denied { relabelto } for pid=1086 comm="syz.0.201" name="63" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 51.975188][ T36] audit: type=1400 audit(8000001104.448:302): avc: denied { associate } for pid=1086 comm="syz.0.201" name="63" dev="tmpfs" ino=369 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 52.024036][ T36] audit: type=1400 audit(8000001104.508:303): avc: denied { write } for pid=295 comm="syz-executor" name="63" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 52.081363][ T311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 52.092182][ T311] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 52.102018][ T311] usb 3-1: USB disconnect, device number 16 [ 52.285910][ T45] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 52.355877][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.436572][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 52.445143][ T45] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 52.456436][ T45] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 52.465478][ T45] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 52.473851][ T45] usb 4-1: Product: syz [ 52.478044][ T45] usb 4-1: Manufacturer: syz [ 52.485237][ T45] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 52.505816][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 52.511966][ T31] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.525000][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 52.531652][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 52.540753][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.549388][ T31] usb 2-1: config 0 descriptor?? [ 52.674253][ T1120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.210'. [ 52.685573][ T45] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 52.695900][ T45] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 52.704746][ T45] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 52.716048][ T45] usb 4-1: USB disconnect, device number 13 [ 52.839357][ T1125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4129876687 (33039013496 ns) > initial count (2056 ns). Using initial count to start timer. [ 52.869161][ T1125] kvm: vcpu 0: requested 2056 ns lapic timer period limited to 200000 ns [ 52.877679][ T1125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3505350797 (448684902016 ns) > initial count (112427855744 ns). Using initial count to start timer. [ 52.896153][ T1125] rust_binder: 1124:1125 BC_FREEZE_NOTIFICATION_DONE 0000000000000002 not found [ 52.905215][ T1125] rust_binder: Write failure EINVAL in pid:175 [ 53.145793][ T327] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 53.305785][ T327] usb 3-1: Using ep0 maxpacket: 16 [ 53.312025][ T327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.322257][ T327] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.331258][ T327] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 225, changing to 7 [ 53.344235][ T327] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 53.355039][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.367000][ T327] usb 3-1: Product: syz [ 53.371215][ T327] usb 3-1: Manufacturer: syz [ 53.377091][ T327] usb 3-1: SerialNumber: syz [ 53.384467][ T1144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 53.476402][ T1150] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.220'. [ 53.485572][ T1150] netlink: 280 bytes leftover after parsing attributes in process `syz.0.220'. [ 53.507427][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 53.516670][ T1153] netlink: 1 bytes leftover after parsing attributes in process `syz.0.221'. [ 53.586524][ T327] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.593806][ T327] usb 3-1: 0:2 : does not exist [ 53.603270][ T327] usb 3-1: USB disconnect, device number 17 [ 54.060068][ T1160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 54.086260][ T1164] fuse: Bad value for 'fd' [ 54.090871][ T1167] fuse: Bad value for 'fd' [ 54.189298][ T1177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.225'. [ 54.208612][ T1171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.279128][ T1180] x_tables: duplicate underflow at hook 4 [ 54.405775][ T327] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 54.555751][ T327] usb 3-1: Using ep0 maxpacket: 32 [ 54.561982][ T327] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 54.570106][ T327] usb 3-1: config 0 has no interface number 0 [ 54.577639][ T327] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 54.586732][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.594750][ T327] usb 3-1: Product: syz [ 54.598949][ T327] usb 3-1: Manufacturer: syz [ 54.603547][ T327] usb 3-1: SerialNumber: syz [ 54.608808][ T327] usb 3-1: config 0 descriptor?? [ 54.615541][ T327] smsc95xx v2.0.0 [ 54.637180][ T1185] tmpfs: Unknown parameter '00000000000000000000000' [ 55.017226][ T327] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 55.028062][ T327] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 55.077618][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 55.083717][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.092768][ T31] usb 2-1: USB disconnect, device number 16 [ 55.106359][ T1190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.335577][ T1212] fuse: Bad value for 'fd' [ 55.438429][ T327] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 55.449299][ T327] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 55.460312][ T327] usb 3-1: USB disconnect, device number 18 [ 55.565777][ T31] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 55.695861][ T31] usb 4-1: device descriptor read/64, error -71 [ 55.715750][ T45] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 55.868840][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.880058][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.887035][ T1222] SELinux: failed to load policy [ 55.890326][ T45] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.907818][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.910542][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 55.910558][ T36] audit: type=1400 audit(8000001108.418:321): avc: denied { bind } for pid=1223 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.914848][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 55.949423][ T31] usb 4-1: device descriptor read/64, error -71 [ 55.958043][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.967909][ T45] usb 2-1: config 0 descriptor?? [ 55.979360][ T1230] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 56.004106][ T1232] VFS: Mount too revealing [ 56.195707][ T31] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 56.325715][ T31] usb 4-1: device descriptor read/64, error -71 [ 56.376983][ T1220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.386697][ T1220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.397853][ T45] input: HID 0458:0138 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:0138.0005/input/input14 [ 56.411324][ T36] audit: type=1400 audit(8000001108.908:322): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.433788][ T36] audit: type=1400 audit(8000001108.908:323): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.462423][ T45] kye 0003:0458:0138.0005: input,hidraw0: USB HID v0.02 Joystick [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 56.474244][ T36] audit: type=1400 audit(8000001108.968:324): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=523 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.605724][ T31] usb 4-1: device descriptor read/64, error -71 [ 56.620250][ T45] usb 2-1: USB disconnect, device number 17 [ 56.715934][ T31] usb usb4-port1: attempt power cycle [ 57.024389][ T36] audit: type=1400 audit(8000001109.518:325): avc: denied { connect } for pid=1237 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.028652][ T1238] netlink: 'syz.0.252': attribute type 4 has an invalid length. [ 57.065724][ T31] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 57.086771][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.140364][ T36] audit: type=1400 audit(8000001109.638:326): avc: denied { read write } for pid=1239 comm="syz.1.253" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.167564][ T36] audit: type=1400 audit(8000001109.638:327): avc: denied { open } for pid=1239 comm="syz.1.253" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 57.206941][ T36] audit: type=1400 audit(8000001109.708:328): avc: denied { map } for pid=1243 comm="syz.1.254" path="socket:[19235]" dev="sockfs" ino=19235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.230530][ T36] audit: type=1400 audit(8000001109.708:329): avc: denied { read write } for pid=1243 comm="syz.1.254" path="socket:[19235]" dev="sockfs" ino=19235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.251363][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.495668][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 57.525694][ T31] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 57.547308][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.612816][ T36] audit: type=1400 audit(8000001110.108:330): avc: denied { bind } for pid=1251 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.632178][ T1252] syz.0.258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.655668][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 57.661929][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.676615][ T10] usb 2-1: config 0 has no interface number 0 [ 57.676664][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.692008][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.701421][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.709603][ T10] usb 2-1: Product: syz [ 57.713873][ T10] usb 2-1: Manufacturer: syz [ 57.718541][ T10] usb 2-1: SerialNumber: syz [ 57.725878][ T10] usb 2-1: config 0 descriptor?? [ 57.736015][ T10] smsc95xx v2.0.0 [ 57.805764][ T31] usb usb4-port1: unable to enumerate USB device [ 58.133101][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 58.143994][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.556267][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 58.572525][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 58.593676][ T10] usb 2-1: USB disconnect, device number 18 [ 59.262409][ T1271] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 59.325606][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.475602][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 59.490045][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.498233][ T10] usb 2-1: config 0 has no interface number 0 [ 59.505804][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.514875][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.523203][ T10] usb 2-1: Product: syz [ 59.527608][ T10] usb 2-1: Manufacturer: syz [ 59.532225][ T10] usb 2-1: SerialNumber: syz [ 59.545861][ T10] usb 2-1: config 0 descriptor?? [ 59.552131][ T10] smsc95xx v2.0.0 [ 59.621848][ T1283] netlink: 'syz.3.266': attribute type 4 has an invalid length. [ 59.629772][ T1283] netlink: 17 bytes leftover after parsing attributes in process `syz.3.266'. [ 59.653340][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.664767][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.885601][ T31] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 59.951946][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 59.975589][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.025581][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.265588][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.505574][ T31] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 60.586227][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 60.597069][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 60.635568][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.875562][ T31] usb 4-1: device descriptor read/64, error -71 [ 60.985687][ T31] usb usb4-port1: attempt power cycle [ 61.325549][ T31] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 61.346625][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.476644][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.715564][ T31] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 61.746608][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.876637][ T31] usb 4-1: device descriptor read/8, error -71 [ 61.985644][ T31] usb usb4-port1: unable to enumerate USB device [ 62.118306][ T1292] fuse: Bad value for 'fd' [ 62.137450][ T1294] fuse: Bad value for 'fd' [ 62.199308][ T36] audit: type=1400 audit(8000001114.703:331): avc: denied { associate } for pid=1293 comm="syz.0.269" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.514475][ T31] usb 2-1: USB disconnect, device number 19 [ 62.965534][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 63.056204][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 63.105536][ T31] usb 2-1: device descriptor read/64, error -71 [ 63.215514][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 63.227112][ T311] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.246120][ T311] usb 4-1: config 0 has no interface number 0 [ 63.254751][ T311] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.263944][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.272026][ T311] usb 4-1: Product: syz [ 63.276355][ T311] usb 4-1: Manufacturer: syz [ 63.281008][ T311] usb 4-1: SerialNumber: syz [ 63.283736][ T1308] kvm: kvm [1307]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x11b [ 63.286582][ T311] usb 4-1: config 0 descriptor?? [ 63.297944][ T1308] kvm: kvm [1307]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xefbe [ 63.300597][ T311] smsc95xx v2.0.0 [ 63.314962][ T1308] kvm: MONITOR instruction emulated as NOP! [ 63.345512][ T31] usb 2-1: device descriptor read/64, error -71 [ 63.356341][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.585504][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 63.702139][ T311] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 63.712958][ T311] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.725488][ T31] usb 2-1: device descriptor read/64, error -71 [ 63.965471][ T31] usb 2-1: device descriptor read/64, error -71 [ 64.075534][ T31] usb usb2-port1: attempt power cycle [ 64.122942][ T311] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 64.133764][ T311] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 64.143737][ T311] usb 4-1: USB disconnect, device number 23 [ 64.415538][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 64.436491][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.566532][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.665254][ T36] audit: type=1400 audit(8000001117.163:332): avc: denied { ioctl } for pid=1313 comm="syz.3.275" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.742507][ T1314] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 64.825478][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.846533][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.976465][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.985453][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 65.085551][ T31] usb usb2-port1: unable to enumerate USB device [ 65.146255][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 65.154782][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.165001][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.173926][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 65.183034][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.193388][ T10] usb 4-1: Found UVC 1.00 device (046d:0825) [ 65.200554][ T10] usb 4-1: Failed to create links for entity 1 [ 65.206795][ T10] usb 4-1: Failed to register entities (-22). [ 65.212868][ T10] usb 4-1: No streaming interface found for terminal 2. [ 65.375422][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.375434][ T673] Bluetooth: hci0: command 0x1003 tx timeout [ 65.394268][ T10] usb 4-1: USB disconnect, device number 24 [ 65.666149][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.674817][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.792426][ T1322] tipc: Started in network mode [ 65.797380][ T1322] tipc: Node identity 921ea6d6bd93, cluster identity 4711 [ 65.804595][ T1322] tipc: Enabled bearer , priority 10 [ 65.922712][ T1330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.280'. [ 65.940816][ T36] audit: type=1400 audit(8000001118.443:333): avc: denied { ioctl } for pid=1329 comm="syz.3.280" path="/57/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.055412][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 66.195459][ T10] usb 2-1: device descriptor read/64, error -71 [ 66.355937][ T1312] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 66.435427][ T10] usb 2-1: device descriptor read/64, error -71 [ 66.675382][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 66.805399][ T10] usb 2-1: device descriptor read/64, error -71 [ 66.820302][ T36] audit: type=1400 audit(8000001119.323:334): avc: denied { append } for pid=1344 comm="syz.3.284" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.925458][ T348] tipc: Node number set to 797812438 [ 66.934419][ T1363] FAULT_INJECTION: forcing a failure. [ 66.934419][ T1363] name failslab, interval 1, probability 0, space 0, times 0 [ 66.947200][ T1363] CPU: 0 UID: 0 PID: 1363 Comm: syz.3.288 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 66.947226][ T1363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.947234][ T1363] Call Trace: [ 66.947239][ T1363] [ 66.947245][ T1363] __dump_stack+0x21/0x30 [ 66.947267][ T1363] dump_stack_lvl+0x140/0x1c0 [ 66.947281][ T1363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.947297][ T1363] dump_stack+0x19/0x20 [ 66.947311][ T1363] should_fail_ex+0x3c2/0x510 [ 66.947324][ T1363] should_failslab+0xac/0x100 [ 66.947336][ T1363] kmem_cache_alloc_noprof+0x42/0x410 [ 66.947357][ T1363] ? __kernfs_new_node+0xf1/0x740 [ 66.947372][ T1363] __kernfs_new_node+0xf1/0x740 [ 66.947386][ T1363] ? make_kgid+0x1d0/0x690 [ 66.947400][ T1363] ? kernfs_new_node+0x280/0x280 [ 66.947413][ T1363] ? __cfi_make_kgid+0x10/0x10 [ 66.947425][ T1363] ? stack_depot_save_flags+0x38/0x800 [ 66.947443][ T1363] ? net_ns_get_ownership+0xfc/0x180 [ 66.947456][ T1363] kernfs_new_node+0x154/0x280 [ 66.947469][ T1363] kernfs_create_dir_ns+0x4b/0x130 [ 66.947482][ T1363] sysfs_create_dir_ns+0x127/0x210 [ 66.947494][ T1363] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 66.947505][ T1363] ? net_namespace+0x11/0x50 [ 66.947516][ T1363] kobject_add_internal+0x71f/0xc20 [ 66.947528][ T1363] kobject_add+0x169/0x240 [ 66.947537][ T1363] ? mutex_unlock+0x90/0x240 [ 66.947549][ T1363] ? __cfi_kobject_add+0x10/0x10 [ 66.947559][ T1363] ? kobject_put+0x1cc/0x2a0 [ 66.947568][ T1363] ? get_device_parent+0x43d/0x470 [ 66.947579][ T1363] device_add+0x3b5/0xbf0 [ 66.947587][ T1363] netdev_register_kobject+0x196/0x330 [ 66.947602][ T1363] register_netdevice+0x1042/0x1a80 [ 66.947614][ T1363] ? __cfi_register_netdevice+0x10/0x10 [ 66.947625][ T1363] tun_set_iff+0x828/0xec0 [ 66.947637][ T1363] __tun_chr_ioctl+0x852/0x1fb0 [ 66.947648][ T1363] ? tun_flow_create+0x400/0x400 [ 66.947660][ T1363] ? __fget_files+0x2bc/0x330 [ 66.947672][ T1363] tun_chr_ioctl+0x2e/0x40 [ 66.947682][ T1363] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 66.947692][ T1363] __se_sys_ioctl+0x123/0x1b0 [ 66.947705][ T1363] __x64_sys_ioctl+0x7f/0xa0 [ 66.947716][ T1363] x64_sys_call+0x1878/0x2ee0 [ 66.947727][ T1363] do_syscall_64+0x57/0xf0 [ 66.947736][ T1363] ? clear_bhb_loop+0x50/0xa0 [ 66.947749][ T1363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.947761][ T1363] RIP: 0033:0x7fea7359e159 [ 66.947772][ T1363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.947781][ T1363] RSP: 002b:00007fea74535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.947794][ T1363] RAX: ffffffffffffffda RBX: 00007fea73825fa0 RCX: 00007fea7359e159 [ 66.947802][ T1363] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000005 [ 66.947810][ T1363] RBP: 00007fea7363506b R08: 0000000000000000 R09: 0000000000000000 [ 66.947816][ T1363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.947823][ T1363] R13: 00007fea73826038 R14: 00007fea73825fa0 R15: 00007ffefe80ba78 [ 66.947832][ T1363] [ 66.947845][ T1363] kobject: kobject_add_internal failed for syzkaller1 (error: -12 parent: net) [ 66.986122][ T1364] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 66.989861][ T36] audit: type=1400 audit(8000001119.483:335): avc: denied { read } for pid=1362 comm="syz.3.288" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.994100][ T1364] audit: out of memory in audit_log_start [ 66.998966][ T36] audit: type=1400 audit(8000001119.483:336): avc: denied { open } for pid=1362 comm="syz.3.288" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.321579][ T10] usb 2-1: device descriptor read/64, error -71 [ 67.321595][ T36] audit: type=1400 audit(8000001119.773:337): avc: denied { read } for pid=1369 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.396904][ T36] audit: type=1400 audit(8000001119.903:338): avc: denied { remount } for pid=1373 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.445574][ T10] usb usb2-port1: attempt power cycle [ 67.655360][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 67.688427][ T36] audit: type=1400 audit(8000001120.193:339): avc: denied { mount } for pid=1378 comm="syz.0.293" name="/" dev="configfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.711298][ T36] audit: type=1400 audit(8000001120.193:340): avc: denied { search } for pid=1378 comm="syz.0.293" name="/" dev="configfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.733599][ T36] audit: type=1400 audit(8000001120.193:341): avc: denied { write } for pid=1378 comm="syz.0.293" name="usb_gadget" dev="configfs" ino=2415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.757279][ T36] audit: type=1400 audit(8000001120.193:342): avc: denied { add_name } for pid=1378 comm="syz.0.293" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.777669][ T36] audit: type=1400 audit(8000001120.193:343): avc: denied { create } for pid=1378 comm="syz.0.293" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 67.800184][ T36] audit: type=1400 audit(8000001120.303:344): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.820440][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 67.825260][ T1384] SELinux: policydb version 239534177 does not match my version range 15-33 [ 67.836943][ T1384] SELinux: failed to load policy [ 67.846364][ T10] usb 2-1: device descriptor read/8, error -71 [ 67.846430][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.866015][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.876422][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.892344][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.896861][ T1390] fuse: Unknown parameter 'rootoode' [ 67.901707][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.928719][ T9] usb 3-1: config 0 descriptor?? [ 67.958263][ T1402] fuse: Bad value for 'fd' [ 68.006000][ T10] usb 2-1: device descriptor read/8, error -71 [ 68.041836][ T36] audit: type=1400 audit(8000001120.543:345): avc: denied { accept } for pid=1408 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.079510][ T36] audit: type=1400 audit(8000001120.583:346): avc: denied { mounton } for pid=1410 comm="syz.3.304" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.139883][ T1377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.292'. [ 68.245355][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 68.266315][ T10] usb 2-1: device descriptor read/8, error -71 [ 68.294742][ T1421] netlink: 'syz.3.306': attribute type 4 has an invalid length. [ 68.359131][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 68.372189][ T9] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 68.387483][ T9] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 68.406335][ T10] usb 2-1: device descriptor read/8, error -71 [ 68.494649][ T1433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 68.503746][ T1434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 68.515447][ T10] usb usb2-port1: unable to enumerate USB device [ 68.615831][ T348] usb 3-1: USB disconnect, device number 19 [ 68.749116][ T1444] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.65564.4), cmd(2) [ 68.780135][ T1446] netlink: 'syz.0.314': attribute type 22 has an invalid length. [ 68.797346][ T1451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 68.813598][ T1453] fuse: Bad value for 'fd' [ 68.905368][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 69.056305][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.066444][ T31] usb 4-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.077168][ T31] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.089956][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 69.098997][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.108369][ T31] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 69.125330][ T10] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 69.286354][ T10] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 69.294575][ T10] usb 2-1: config 0 has no interface number 0 [ 69.300816][ T10] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 69.313336][ T10] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 69.328156][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.336310][ T10] usb 2-1: Product: syz [ 69.340478][ T10] usb 2-1: Manufacturer: syz [ 69.345078][ T10] usb 2-1: SerialNumber: syz [ 69.355544][ T10] usb 2-1: config 0 descriptor?? [ 69.361073][ T1448] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.371980][ T1462] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.386723][ T1462] overlayfs: failed to look up (tracing) for ino (-66) [ 69.386803][ T10] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3a:3c:f2:7e:08:cb [ 69.406656][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 69.555320][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 69.579134][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.588923][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 69.606724][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 69.632879][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.656187][ T1478] can: request_module (can-proto-0) failed. [ 69.669152][ T9] usb 3-1: Product: syz [ 69.673417][ T9] usb 3-1: Manufacturer: syz [ 69.706824][ T9] usb 3-1: SerialNumber: syz [ 69.921352][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 69.945496][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.945627][ T1484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.966327][ T1484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.990862][ T31] usb 2-1: USB disconnect, device number 28 [ 69.998320][ T31] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 70.321201][ T9] usb 3-1: 2:1 : can't get Cluster Descriptor [ 70.517132][ T1517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 70.536253][ T311] usb 3-1: USB disconnect, device number 20 [ 70.722713][ T1519] cgroup: noprefix used incorrectly [ 70.775483][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 70.925336][ T311] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 70.945320][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 70.951502][ T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.960136][ T31] usb 2-1: config 179 has no interface number 0 [ 70.966565][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 70.977928][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 70.989431][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.001045][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 71.012747][ T31] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 71.026242][ T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 71.035466][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.045163][ T1517] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.096426][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.106717][ T311] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.120037][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.126832][ T311] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 71.136206][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.145141][ T311] usb 3-1: config 0 descriptor?? [ 71.156369][ T311] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 71.262477][ T311] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 71.285616][ T1522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 71.319617][ T1524] FAULT_INJECTION: forcing a failure. [ 71.319617][ T1524] name failslab, interval 1, probability 0, space 0, times 0 [ 71.332298][ T1524] CPU: 0 UID: 0 PID: 1524 Comm: syz.0.328 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 71.332332][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.332352][ T1524] Call Trace: [ 71.332358][ T1524] [ 71.332367][ T1524] __dump_stack+0x21/0x30 [ 71.332401][ T1524] dump_stack_lvl+0x140/0x1c0 [ 71.332427][ T1524] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.332458][ T1524] dump_stack+0x19/0x20 [ 71.332483][ T1524] should_fail_ex+0x3c2/0x510 [ 71.332506][ T1524] should_failslab+0xac/0x100 [ 71.332528][ T1524] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 71.332550][ T1524] ? argv_split+0x33/0x4a0 [ 71.332575][ T1524] kstrndup+0x9e/0x220 [ 71.332593][ T1524] argv_split+0x33/0x4a0 [ 71.332619][ T1524] dyn_event_release+0x9c/0x4b0 [ 71.332637][ T1524] ? __check_object_size+0x99/0x870 [ 71.332656][ T1524] ? __check_object_size+0x54c/0x870 [ 71.332674][ T1524] ? __cfi_dyn_event_release+0x10/0x10 [ 71.332691][ T1524] ? __cfi___check_object_size+0x10/0x10 [ 71.332712][ T1524] create_or_delete_trace_uprobe+0x57/0xb0 [ 71.332736][ T1524] trace_parse_run_command+0x219/0x420 [ 71.332763][ T1524] ? __cfi_create_or_delete_trace_uprobe+0x10/0x10 [ 71.332789][ T1524] probes_write+0x38/0x50 [ 71.332811][ T1524] ? __cfi_probes_write+0x10/0x10 [ 71.332833][ T1524] vfs_write+0x3c1/0xfd0 [ 71.332853][ T1524] ? __cfi_vfs_write+0x10/0x10 [ 71.332871][ T1524] ? __kasan_check_write+0x18/0x20 [ 71.332889][ T1524] ? mutex_lock+0x97/0x1d0 [ 71.332913][ T1524] ? __cfi_mutex_lock+0x10/0x10 [ 71.332937][ T1524] ksys_write+0x145/0x260 [ 71.332956][ T1524] ? xfd_validate_state+0x68/0x140 [ 71.332980][ T1524] ? __cfi_ksys_write+0x10/0x10 [ 71.332999][ T1524] ? __kasan_check_write+0x18/0x20 [ 71.333017][ T1524] ? fpregs_restore_userregs+0x11c/0x260 [ 71.333040][ T1524] __x64_sys_write+0x7f/0x90 [ 71.333062][ T1524] x64_sys_call+0x271c/0x2ee0 [ 71.333081][ T1524] do_syscall_64+0x57/0xf0 [ 71.333099][ T1524] ? clear_bhb_loop+0x50/0xa0 [ 71.333121][ T1524] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.333143][ T1524] RIP: 0033:0x7f242cb9e159 [ 71.333159][ T1524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.333175][ T1524] RSP: 002b:00007f242dab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.333196][ T1524] RAX: ffffffffffffffda RBX: 00007f242ce25fa0 RCX: 00007f242cb9e159 [ 71.333212][ T1524] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 000000000000000b [ 71.333226][ T1524] RBP: 00007f242cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 71.333239][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.333249][ T1524] R13: 00007f242ce26038 R14: 00007f242ce25fa0 R15: 00007fff95f446e8 [ 71.333264][ T1524] [ 71.613880][ T1525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.624446][ T1525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.627044][ T10] usb 4-1: USB disconnect, device number 25 [ 71.842472][ T311] usb 3-1: USB disconnect, device number 21 [ 71.853584][ T1540] input: syz1 as /devices/virtual/input/input17 [ 71.860802][ T348] usb 2-1: USB disconnect, device number 29 [ 71.860853][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 71.860882][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 71.887253][ T348] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 72.005355][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 72.172713][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.194696][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.212615][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.225710][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.234891][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.249332][ T10] usb 4-1: config 0 descriptor?? [ 72.322273][ T1548] capability: warning: `syz.2.336' uses 32-bit capabilities (legacy support in use) [ 72.338444][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 72.338462][ T36] audit: type=1400 audit(8000001384.897:362): avc: denied { append } for pid=1547 comm="syz.2.336" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.625328][ T348] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 72.657796][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 72.665565][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 72.672971][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 72.680400][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 72.687809][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 72.695327][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 72.703294][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 72.712259][ T10] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 72.775379][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 72.781679][ T348] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 72.789796][ T348] usb 2-1: config 0 has no interface number 0 [ 72.795921][ T348] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 72.805948][ T348] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.817190][ T348] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 72.826271][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.834279][ T348] usb 2-1: Product: syz [ 72.838504][ T348] usb 2-1: Manufacturer: syz [ 72.843337][ T348] usb 2-1: SerialNumber: syz [ 72.849343][ T348] usb 2-1: config 0 descriptor?? [ 72.852579][ T1571] netlink: 'syz.0.342': attribute type 28 has an invalid length. [ 72.854624][ T1559] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.876372][ T348] asix 2-1:0.34: probe with driver asix failed with error -22 [ 72.936484][ T36] audit: type=1400 audit(8000001385.497:363): avc: denied { append } for pid=1533 comm="syz.3.331" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 72.946746][ T348] usb 4-1: USB disconnect, device number 26 [ 73.082063][ T10] usb 2-1: USB disconnect, device number 30 [ 73.246540][ T36] audit: type=1400 audit(8000001385.807:364): avc: denied { bind } for pid=1578 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.265683][ T36] audit: type=1400 audit(8000001385.817:365): avc: denied { ioctl } for pid=1578 comm="syz.2.344" path="socket:[21259]" dev="sockfs" ino=21259 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.290999][ T36] audit: type=1400 audit(8000001385.827:366): avc: denied { write } for pid=1580 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.645322][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 73.673870][ T36] audit: type=1400 audit(8000001386.227:367): avc: denied { setattr } for pid=1602 comm="syz.1.351" name="[io_uring]" dev="anon_inodefs" ino=21659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.785337][ T10] usb 3-1: device descriptor read/64, error -71 [ 73.813262][ T1620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'. [ 73.829400][ T36] audit: type=1400 audit(8000001386.387:368): avc: denied { create } for pid=1619 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.856685][ T36] audit: type=1400 audit(8000001386.417:369): avc: granted { setsecparam } for pid=1619 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 73.905323][ T348] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 74.025322][ T10] usb 3-1: device descriptor read/64, error -71 [ 74.035460][ T348] usb 4-1: device descriptor read/64, error -71 [ 74.251378][ T36] audit: type=1400 audit(8000001386.807:370): avc: denied { create } for pid=1621 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 74.252100][ T1622] netlink: 'syz.0.356': attribute type 4 has an invalid length. [ 74.272059][ T36] audit: type=1400 audit(8000001386.807:371): avc: denied { create } for pid=1621 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 74.279676][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 74.300879][ T348] usb 4-1: device descriptor read/64, error -71 [ 74.333969][ T1627] fuse: Bad value for 'fd' [ 74.432365][ T1651] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 74.440941][ T10] usb 3-1: device descriptor read/64, error -71 [ 74.478897][ T1663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 74.488104][ T1664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 74.497414][ T1662] overlay: Bad value for 'redirect_dir' [ 74.503584][ T1663] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.511935][ T1662] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.545452][ T348] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 74.615329][ T311] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 74.675327][ T348] usb 4-1: device descriptor read/64, error -71 [ 74.695384][ T10] usb 3-1: device descriptor read/64, error -71 [ 74.766426][ T311] usb 2-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 74.776804][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.789793][ T311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.798906][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.808140][ T311] usb 2-1: config 0 descriptor?? [ 74.814095][ T311] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 74.815443][ T10] usb usb3-port1: attempt power cycle [ 74.935373][ T348] usb 4-1: device descriptor read/64, error -71 [ 75.045430][ T348] usb usb4-port1: attempt power cycle [ 75.087498][ T1698] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 75.096920][ T1699] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 75.165397][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 75.186331][ T10] usb 3-1: device descriptor read/8, error -71 [ 75.316369][ T10] usb 3-1: device descriptor read/8, error -71 [ 75.385394][ T348] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 75.406319][ T348] usb 4-1: device descriptor read/8, error -71 [ 75.536298][ T348] usb 4-1: device descriptor read/8, error -71 [ 75.565366][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 75.586391][ T10] usb 3-1: device descriptor read/8, error -71 [ 75.648665][ T1721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 75.659591][ T1721] fuse: Bad value for 'fd' [ 75.726400][ T10] usb 3-1: device descriptor read/8, error -71 [ 75.775546][ T348] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 75.796312][ T348] usb 4-1: device descriptor read/8, error -71 [ 75.835403][ T10] usb usb3-port1: unable to enumerate USB device [ 75.926392][ T348] usb 4-1: device descriptor read/8, error -71 [ 76.035407][ T348] usb usb4-port1: unable to enumerate USB device [ 76.208222][ T1730] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 76.226250][ T1732] netlink: 96 bytes leftover after parsing attributes in process `syz.0.377'. [ 76.763760][ T1764] bridge0: entered allmulticast mode [ 76.769285][ T1764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1764 comm=syz.3.384 [ 76.781880][ T1764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1280 sclass=netlink_audit_socket pid=1764 comm=syz.3.384 [ 77.055640][ T311] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 77.205329][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 77.211650][ T311] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 77.219944][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.230078][ T311] usb 4-1: config 0 has no interface number 0 [ 77.236235][ T311] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.249300][ T311] usb 4-1: config 0 interface 200 has no altsetting 0 [ 77.257941][ T311] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 77.267157][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.275159][ T311] usb 4-1: Product: syz [ 77.279339][ T311] usb 4-1: Manufacturer: syz [ 77.283942][ T311] usb 4-1: SerialNumber: syz [ 77.289192][ T311] usb 4-1: config 0 descriptor?? [ 77.390615][ T348] usb 2-1: USB disconnect, device number 31 [ 77.495330][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 77.497157][ T311] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 77.515823][ T311] usb 4-1: USB disconnect, device number 31 [ 77.660904][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.676737][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 77.692244][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 77.705303][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 77.705320][ T36] audit: type=1400 audit(8000001390.247:384): avc: denied { listen } for pid=1802 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.731122][ T36] audit: type=1400 audit(8000001390.267:385): avc: denied { accept } for pid=1802 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.752567][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 77.755375][ T348] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 77.761724][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.795326][ T10] usb 3-1: Product: syz [ 77.799520][ T10] usb 3-1: Manufacturer: syz [ 77.804095][ T10] usb 3-1: SerialNumber: syz [ 77.840244][ T36] audit: type=1400 audit(8000001390.397:386): avc: denied { write } for pid=1807 comm="syz.0.396" path="socket:[22777]" dev="sockfs" ino=22777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.920673][ T348] usb 2-1: config 5 has an invalid interface number: 110 but max is 2 [ 77.929124][ T348] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 77.938135][ T348] usb 2-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 77.948828][ T348] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 77.957918][ T348] usb 2-1: config 5 has no interface number 0 [ 77.964089][ T348] usb 2-1: config 5 interface 110 altsetting 14 endpoint 0xE is Bulk; changing to Interrupt [ 77.975888][ T348] usb 2-1: config 5 interface 110 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.989470][ T348] usb 2-1: config 5 interface 110 has no altsetting 0 [ 77.996976][ T348] usb 2-1: string descriptor 0 read error: -22 [ 78.003368][ T348] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=d8.5a [ 78.021248][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.032124][ T1795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.034203][ T1797] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 78.040666][ T36] audit: type=1400 audit(8000001390.587:387): avc: denied { write } for pid=1794 comm="syz.2.393" name="file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.047883][ T1795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.080654][ T36] audit: type=1400 audit(8000001390.587:388): avc: denied { setattr } for pid=1794 comm="syz.2.393" name="file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.116055][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.147028][ T36] audit: type=1400 audit(8000001390.607:389): avc: denied { setattr } for pid=1810 comm="syz.3.397" name="/" dev="configfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.175840][ T36] audit: type=1400 audit(8000001390.607:390): avc: denied { create } for pid=1810 comm="syz.3.397" name="freezer.self_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 78.198698][ T36] audit: type=1400 audit(8000001390.607:391): avc: denied { lock } for pid=1810 comm="syz.3.397" path="socket:[22352]" dev="sockfs" ino=22352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.222852][ T1817] netlink: 'syz.3.398': attribute type 28 has an invalid length. [ 78.316967][ T10] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 78.332046][ T10] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 78.625244][ T1825] netlink: 'syz.0.399': attribute type 13 has an invalid length. [ 78.633466][ T1825] virtio_net virtio1 eth0: refused to change device tx_queue_len [ 78.642143][ T36] audit: type=1400 audit(8000001391.197:392): avc: denied { setopt } for pid=1824 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.824134][ T10] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 78.832688][ T10] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 78.973650][ T9] usb 2-1: USB disconnect, device number 32 [ 78.994265][ T1831] fuse: Bad value for 'group_id' [ 78.999399][ T1831] fuse: Bad value for 'group_id' [ 79.255338][ T312] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 79.305312][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 79.405390][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 79.411807][ T312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 79.422864][ T312] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 79.435376][ T312] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.444460][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.452501][ T312] usb 4-1: Product: syz [ 79.456685][ T312] usb 4-1: Manufacturer: syz [ 79.461308][ T312] usb 4-1: SerialNumber: syz [ 79.467253][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.478281][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 79.490897][ T36] audit: type=1400 audit(8000001392.047:393): avc: denied { name_bind } for pid=1836 comm="syz.0.403" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 79.514401][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.524934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.533030][ T9] usb 2-1: Product: syz [ 79.537610][ T9] usb 2-1: Manufacturer: syz [ 79.542581][ T9] usb 2-1: SerialNumber: syz [ 79.544227][ T1845] overlay: filesystem on ./file0 not supported as upperdir [ 79.758482][ T1833] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 80.271437][ T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 80.299624][ T312] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.305454][ T10] usb 3-1: USB disconnect, device number 26 [ 80.321295][ T312] usb 4-1: 2:1 : sample bitwidth 73 in over sample bytes 1 [ 80.329118][ T1862] input: syz0 as /devices/virtual/input/input19 [ 80.335986][ T312] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 80.367861][ T1833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.385427][ T312] usb 4-1: USB disconnect, device number 32 [ 80.385656][ T1833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.402104][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.407184][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 80.454959][ T1833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.464017][ T1833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.523779][ T1870] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 80.675323][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 80.715366][ T312] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 80.731650][ T9] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 80.738174][ T9] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 80.815316][ T10] usb 3-1: device descriptor read/64, error -71 [ 80.866049][ T312] usb 4-1: not running at top speed; connect to a high speed hub [ 80.874647][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.884879][ T312] usb 4-1: config 1 interface 1 has no altsetting 0 [ 80.891589][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 80.902079][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.912231][ T312] usb 4-1: Found UVC 1.00 device (046d:0825) [ 80.919222][ T312] usb 4-1: selecting invalid altsetting 0 [ 80.932247][ T9] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 80.940358][ T9] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 80.953398][ T9] usb 2-1: USB disconnect, device number 33 [ 80.961506][ T9] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 81.065405][ T10] usb 3-1: device descriptor read/64, error -71 [ 81.114448][ T312] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 81.124115][ T312] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 81.132931][ T312] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 81.140258][ T312] usb 4-1: selecting invalid altsetting 0 [ 81.147442][ T312] usb 4-1: USB disconnect, device number 33 [ 81.305339][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 81.435789][ T10] usb 3-1: device descriptor read/64, error -71 [ 81.675376][ T10] usb 3-1: device descriptor read/64, error -71 [ 81.785472][ T10] usb usb3-port1: attempt power cycle [ 82.125458][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 82.146475][ T10] usb 3-1: device descriptor read/8, error -71 [ 82.276345][ T10] usb 3-1: device descriptor read/8, error -71 [ 82.515344][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 82.536342][ T10] usb 3-1: device descriptor read/8, error -71 [ 82.666437][ T10] usb 3-1: device descriptor read/8, error -71 [ 82.775469][ T10] usb usb3-port1: unable to enumerate USB device [ 91.792826][ T1894] FAULT_INJECTION: forcing a failure. [ 91.792826][ T1894] name failslab, interval 1, probability 0, space 0, times 0 [ 91.805567][ T1894] CPU: 0 UID: 0 PID: 1894 Comm: syz.0.417 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 91.805604][ T1894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.805619][ T1894] Call Trace: [ 91.805627][ T1894] [ 91.805636][ T1894] __dump_stack+0x21/0x30 [ 91.805673][ T1894] dump_stack_lvl+0x140/0x1c0 [ 91.805705][ T1894] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.805739][ T1894] dump_stack+0x19/0x20 [ 91.805770][ T1894] should_fail_ex+0x3c2/0x510 [ 91.805799][ T1894] should_failslab+0xac/0x100 [ 91.805827][ T1894] __kmalloc_cache_noprof+0x41/0x470 [ 91.805852][ T1894] ? alloc_fs_context+0x6f/0x800 [ 91.805883][ T1894] alloc_fs_context+0x6f/0x800 [ 91.805911][ T1894] ? __se_sys_fsopen+0x9c/0x390 [ 91.805932][ T1894] fs_context_for_mount+0x26/0x40 [ 91.805961][ T1894] __se_sys_fsopen+0xab/0x390 [ 91.805981][ T1894] __x64_sys_fsopen+0x5f/0x80 [ 91.806000][ T1894] x64_sys_call+0x2d40/0x2ee0 [ 91.806022][ T1894] do_syscall_64+0x57/0xf0 [ 91.806043][ T1894] ? clear_bhb_loop+0x50/0xa0 [ 91.806072][ T1894] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.806099][ T1894] RIP: 0033:0x7f242cb9e159 [ 91.806118][ T1894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.806138][ T1894] RSP: 002b:00007f242dab0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 91.806169][ T1894] RAX: ffffffffffffffda RBX: 00007f242ce25fa0 RCX: 00007f242cb9e159 [ 91.806187][ T1894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 91.806202][ T1894] RBP: 00007f242cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 91.806218][ T1894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.806232][ T1894] R13: 00007f242ce26038 R14: 00007f242ce25fa0 R15: 00007fff95f446e8 [ 91.806253][ T1894] [ 91.833651][ T36] audit: type=1400 audit(8000001404.377:394): avc: denied { mounton } for pid=1897 comm="syz.0.419" path="/170/file0" dev="tmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.141783][ T1910] 9p: Unknown Cache mode or invalid value fscachm [ 92.145329][ T348] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 92.179831][ T1910] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 92.306304][ T348] usb 3-1: config 7 has an invalid interface number: 177 but max is 1 [ 92.314594][ T348] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 92.324781][ T348] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 92.333685][ T348] usb 3-1: config 7 has no interface number 0 [ 92.339830][ T348] usb 3-1: config 7 interface 177 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 92.352945][ T312] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 92.360514][ T348] usb 3-1: config 7 interface 177 has no altsetting 0 [ 92.368830][ T348] usb 3-1: New USB device found, idVendor=19d2, idProduct=0b70, bcdDevice=b8.3c [ 92.377910][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.385948][ T348] usb 3-1: Product: syz [ 92.390130][ T348] usb 3-1: Manufacturer: syz [ 92.394714][ T348] usb 3-1: SerialNumber: syz [ 92.495336][ T312] usb 2-1: device descriptor read/64, error -71 [ 92.735329][ T312] usb 2-1: device descriptor read/64, error -71 [ 92.765957][ T1924] fuse: Unknown parameter '_2@0xffffffffffffffff00000000000000000000000000000000000000000xffffffffffffffff0xffffffffffffffff0cÕÝ)‰f\ÛñÛ(¯d":'>3' [ 92.817676][ T348] usb 3-1: bad CDC descriptors [ 92.823752][ T348] usb 3-1: USB disconnect, device number 31 [ 92.975330][ T312] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 93.105341][ T312] usb 2-1: device descriptor read/64, error -71 [ 93.209423][ T1932] overlayfs: failed to resolve './file1': -2 [ 93.326833][ T1946] kvm: user requested TSC rate below hardware speed [ 93.334989][ T1950] kvm: user requested TSC rate below hardware speed [ 93.345335][ T312] usb 2-1: device descriptor read/64, error -71 [ 93.456302][ T312] usb usb2-port1: attempt power cycle [ 93.705472][ T348] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 93.760387][ T1967] overlayfs: conflicting options: userxattr,redirect_dir=on [ 93.769900][ T1970] overlayfs: conflicting options: userxattr,redirect_dir=on [ 93.795493][ T312] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 93.814563][ T1976] netlink: 'syz.3.442': attribute type 2 has an invalid length. [ 93.822320][ T1976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.823351][ T312] usb 2-1: device descriptor read/8, error -71 [ 93.844833][ T1978] fuse: Bad value for 'fd' [ 93.855380][ T348] usb 3-1: Using ep0 maxpacket: 32 [ 93.861969][ T348] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.866800][ T36] audit: type=1400 audit(8000001406.417:395): avc: denied { setopt } for pid=1979 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.870136][ T348] usb 3-1: config 0 has no interface number 0 [ 93.898705][ T348] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.908307][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.916975][ T348] usb 3-1: Product: syz [ 93.921628][ T348] usb 3-1: Manufacturer: syz [ 93.926291][ T348] usb 3-1: SerialNumber: syz [ 93.931450][ T348] usb 3-1: config 0 descriptor?? [ 93.937270][ T348] smsc95xx v2.0.0 [ 93.966278][ T312] usb 2-1: device descriptor read/8, error -71 [ 94.205327][ T312] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 94.226274][ T312] usb 2-1: device descriptor read/8, error -71 [ 94.356293][ T312] usb 2-1: device descriptor read/8, error -71 [ 94.465416][ T312] usb usb2-port1: unable to enumerate USB device [ 94.483853][ T36] audit: type=1400 audit(8000001407.037:396): avc: denied { mounton } for pid=2002 comm="syz.0.453" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.585335][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 94.715323][ T9] usb 4-1: device descriptor read/64, error -71 [ 94.739224][ T348] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 94.750077][ T348] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.759345][ T348] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 94.770243][ T348] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 94.780663][ T348] usb 3-1: USB disconnect, device number 32 [ 94.965349][ T9] usb 4-1: device descriptor read/64, error -71 [ 95.182157][ T36] audit: type=1400 audit(8000001407.737:397): avc: denied { rmdir } for pid=294 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.215338][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 95.223384][ T36] audit: type=1400 audit(8000001407.777:398): avc: denied { ioctl } for pid=1991 comm="syz.3.448" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.269762][ T36] audit: type=1400 audit(8000001407.827:399): avc: denied { ioctl } for pid=2011 comm="syz.2.457" path="socket:[23268]" dev="sockfs" ino=23268 ioctlcmd=0xae82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.276212][ T2012] FAULT_INJECTION: forcing a failure. [ 95.276212][ T2012] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.308761][ T2012] CPU: 1 UID: 0 PID: 2012 Comm: syz.2.457 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 95.308795][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.308806][ T2012] Call Trace: [ 95.308812][ T2012] [ 95.308818][ T2012] __dump_stack+0x21/0x30 [ 95.308849][ T2012] dump_stack_lvl+0x140/0x1c0 [ 95.308874][ T2012] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.308901][ T2012] ? __kasan_slab_alloc+0x73/0x90 [ 95.308924][ T2012] dump_stack+0x19/0x20 [ 95.308946][ T2012] should_fail_ex+0x3c2/0x510 [ 95.308969][ T2012] should_fail+0xf/0x20 [ 95.308989][ T2012] should_fail_usercopy+0x1e/0x30 [ 95.309012][ T2012] _copy_to_user+0x24/0xa0 [ 95.309040][ T2012] do_timer_create+0xb9f/0x1260 [ 95.309067][ T2012] ? __ia32_sys_clock_nanosleep_time32+0xc0/0xc0 [ 95.309090][ T2012] ? __se_sys_futex+0x13c/0x320 [ 95.309114][ T2012] __x64_sys_timer_create+0x14d/0x1c0 [ 95.309133][ T2012] ? xfd_validate_state+0x68/0x140 [ 95.309155][ T2012] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 95.309172][ T2012] ? __kasan_check_write+0x18/0x20 [ 95.309188][ T2012] ? fpregs_restore_userregs+0x11c/0x260 [ 95.309207][ T2012] ? switch_fpu_return+0x12/0x20 [ 95.309227][ T2012] x64_sys_call+0x2704/0x2ee0 [ 95.309243][ T2012] do_syscall_64+0x57/0xf0 [ 95.309262][ T2012] ? clear_bhb_loop+0x50/0xa0 [ 95.309287][ T2012] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.309310][ T2012] RIP: 0033:0x7fccfd79e159 [ 95.309340][ T2012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.309356][ T2012] RSP: 002b:00007fccfe704028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 95.309378][ T2012] RAX: ffffffffffffffda RBX: 00007fccfda25fa0 RCX: 00007fccfd79e159 [ 95.309393][ T2012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.309405][ T2012] RBP: 00007fccfd83506b R08: 0000000000000000 R09: 0000000000000000 [ 95.309417][ T2012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.309428][ T2012] R13: 00007fccfda26038 R14: 00007fccfda25fa0 R15: 00007fff36a587d8 [ 95.309444][ T2012] [ 95.314886][ T36] audit: type=1400 audit(8000001407.867:400): avc: denied { relabelfrom } for pid=2011 comm="syz.2.457" name="" dev="pipefs" ino=23274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.403036][ T2014] fuse: Bad value for 'fd' [ 95.405853][ T9] usb 4-1: device descriptor read/64, error -71 [ 95.472983][ T36] audit: type=1400 audit(8000001408.027:401): avc: denied { accept } for pid=2015 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.477524][ T2016] tmpfs: Bad value for 'huge' [ 95.617213][ T36] audit: type=1400 audit(8000001408.177:402): avc: denied { read } for pid=2018 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.667891][ T662] tipc: Subscription rejected, illegal request [ 95.675901][ T36] audit: type=1400 audit(8000001408.237:403): avc: denied { cmd } for pid=2018 comm="iou-wrk-2020" path="socket:[23295]" dev="sockfs" ino=23295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.725386][ T9] usb 4-1: device descriptor read/64, error -71 [ 95.845490][ T9] usb usb4-port1: attempt power cycle [ 96.185370][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 96.216290][ T9] usb 4-1: device descriptor read/8, error -71 [ 96.347080][ T9] usb 4-1: device descriptor read/8, error -71 [ 96.450273][ T110] udevd[110]: could not touch /run/udev/queue: No such file or directory [ 96.489588][ T2035] x86/PAT: syz.0.463:2035 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 96.595336][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 96.616301][ T9] usb 4-1: device descriptor read/8, error -71 [ 96.638675][ T2036] x86/PAT: syz.0.463:2036 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 96.754875][ T9] usb 4-1: device descriptor read/8, error -71 [ 96.805331][ T327] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 96.865635][ T9] usb usb4-port1: unable to enumerate USB device [ 96.965335][ T327] usb 3-1: Using ep0 maxpacket: 16 [ 96.970970][ T327] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 96.985426][ T327] usb 3-1: string descriptor 0 read error: -71 [ 96.991681][ T327] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 97.004982][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.018016][ T327] r8152-cfgselector 3-1: Unknown version 0x0000 [ 97.024334][ T327] r8152-cfgselector 3-1: rejected 8 configurations due to insufficient available bus power [ 97.034522][ T327] r8152-cfgselector 3-1: no configuration chosen from 8 choices [ 97.045399][ T327] r8152-cfgselector 3-1: USB disconnect, device number 33 [ 97.671128][ T2054] FAULT_INJECTION: forcing a failure. [ 97.671128][ T2054] name failslab, interval 1, probability 0, space 0, times 0 [ 97.684042][ T2054] CPU: 1 UID: 0 PID: 2054 Comm: syz.0.471 Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 97.684076][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.684087][ T2054] Call Trace: [ 97.684094][ T2054] [ 97.684101][ T2054] __dump_stack+0x21/0x30 [ 97.684134][ T2054] dump_stack_lvl+0x140/0x1c0 [ 97.684156][ T2054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.684182][ T2054] dump_stack+0x19/0x20 [ 97.684205][ T2054] should_fail_ex+0x3c2/0x510 [ 97.684227][ T2054] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 97.684251][ T2054] should_failslab+0xac/0x100 [ 97.684274][ T2054] __kmalloc_noprof+0x69/0x510 [ 97.684294][ T2054] ? __cfi_lockref_get+0x10/0x10 [ 97.684309][ T2054] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 97.684332][ T2054] incfs_realloc_mount_info+0xa7/0x4c0 [ 97.684351][ T2054] ? incfs_add_sysfs_node+0x118/0x230 [ 97.684369][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.684388][ T2054] incfs_alloc_mount_info+0x478/0x5f0 [ 97.684410][ T2054] incfs_mount_fs+0x3ca/0x970 [ 97.684430][ T2054] ? __cfi_incfs_mount_fs+0x10/0x10 [ 97.684450][ T2054] ? vfs_parse_fs_string+0x10f/0x180 [ 97.684527][ T2054] ? selinux_capable+0x38/0x50 [ 97.684552][ T2054] legacy_get_tree+0x103/0x1b0 [ 97.684575][ T2054] ? __cfi_incfs_mount_fs+0x10/0x10 [ 97.684594][ T2054] vfs_get_tree+0xa1/0x290 [ 97.684612][ T2054] do_new_mount+0x251/0xb40 [ 97.684631][ T2054] ? security_capable+0x44/0x130 [ 97.684653][ T2054] path_mount+0x66a/0xff0 [ 97.684672][ T2054] ? putname+0x113/0x150 [ 97.684692][ T2054] __se_sys_mount+0x2bf/0x480 [ 97.684712][ T2054] ? __x64_sys_mount+0xf0/0xf0 [ 97.684732][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.684747][ T2054] ? fpregs_restore_userregs+0x11c/0x260 [ 97.684769][ T2054] __x64_sys_mount+0xc3/0xf0 [ 97.684788][ T2054] x64_sys_call+0x2021/0x2ee0 [ 97.684804][ T2054] do_syscall_64+0x57/0xf0 [ 97.684823][ T2054] ? clear_bhb_loop+0x50/0xa0 [ 97.684847][ T2054] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.684869][ T2054] RIP: 0033:0x7f242cb9e159 [ 97.684886][ T2054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.684903][ T2054] RSP: 002b:00007f242dab0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.684925][ T2054] RAX: ffffffffffffffda RBX: 00007f242ce25fa0 RCX: 00007f242cb9e159 [ 97.684940][ T2054] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 00002000000007c0 [ 97.684955][ T2054] RBP: 00007f242cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 97.684968][ T2054] R10: 0000000001804002 R11: 0000000000000246 R12: 0000000000000000 [ 97.684980][ T2054] R13: 00007f242ce26038 R14: 00007f242ce25fa0 R15: 00007fff95f446e8 [ 97.684997][ T2054] [ 97.685038][ T2054] incfs: Error allocating mount info. -12 [ 97.785331][ T327] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 97.790340][ T2054] incfs: mount failed -12 [ 97.974067][ T327] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 97.995356][ T327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.005339][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 98.165322][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 98.186155][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.199264][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.205966][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 98.215097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.225138][ T327] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 98.232455][ T9] usb 4-1: config 0 descriptor?? [ 98.477604][ T348] usb 3-1: USB disconnect, device number 34 [ 98.645629][ T9] wacom 0003:056A:00FA.0008: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.3-1/input0 [ 98.650215][ T2065] udevd[2065]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 98.891999][ T2067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.473'. [ 99.130834][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 99.130851][ T36] audit: type=1400 audit(8000001411.685:409): avc: denied { mounton } for pid=2073 comm="syz.2.475" path="/92/dev/sda1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.377668][ T36] audit: type=1400 audit(8000001411.935:410): avc: denied { link } for pid=2084 comm="syz.2.478" name="file1" dev="incremental-fs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.400594][ T36] audit: type=1400 audit(8000001411.935:411): avc: denied { setattr } for pid=2084 comm="syz.2.478" name="file1" dev="incremental-fs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.403573][ T293] ------------[ cut here ]------------ [ 99.429305][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 99.438809][ T293] Modules linked in: [ 99.442895][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 99.454582][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.464701][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 99.470475][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 5e 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c c9 5e 03 cc e8 d6 80 3e ff <0f> 0b e9 3e ff ff ff e8 ca 80 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 99.490237][ T293] RSP: 0018:ffffc9000b67fb88 EFLAGS: 00010293 [ 99.496475][ T293] RAX: ffffffff8248f89a RBX: 0000000000000000 RCX: ffff8881201f9300 [ 99.504461][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.512487][ T293] RBP: ffffc9000b67fbb0 R08: ffff888131cd5dbf R09: 1ffff1102639abb7 [ 99.520495][ T293] R10: dffffc0000000000 R11: ffffed102639abb8 R12: 0000000000000000 [ 99.528529][ T293] R13: dffffc0000000000 R14: ffff888131cd5d20 R15: ffff8881132ee220 [ 99.536621][ T293] FS: 00005555932d6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.545675][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.552269][ T293] CR2: 0000555593301998 CR3: 000000012a37e000 CR4: 00000000003526b0 [ 99.560303][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000e3e4 [ 99.568321][ T293] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 99.576344][ T293] Call Trace: [ 99.579640][ T293] [ 99.582587][ T293] ovl_do_remove+0x824/0xd10 [ 99.587240][ T293] ? ovl_set_redirect+0x780/0x780 [ 99.592287][ T293] ? __cfi_down_write+0x10/0x10 [ 99.597230][ T293] ovl_rmdir+0x1e/0x30 [ 99.601331][ T293] vfs_rmdir+0x3db/0x560 [ 99.605647][ T293] incfs_kill_sb+0x102/0x220 [ 99.610258][ T293] deactivate_locked_super+0xd2/0x270 [ 99.615708][ T293] deactivate_super+0xb8/0xe0 [ 99.620408][ T293] cleanup_mnt+0x438/0x4d0 [ 99.624854][ T293] __cleanup_mnt+0x1d/0x40 [ 99.629346][ T293] task_work_run+0x1e5/0x260 [ 99.633962][ T293] ? __cfi_task_work_run+0x10/0x10 [ 99.639161][ T293] ? __x64_sys_umount+0x12e/0x180 [ 99.644249][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 99.649699][ T293] ? __kasan_check_read+0x15/0x20 [ 99.654749][ T293] resume_user_mode_work+0x35/0x50 [ 99.659921][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 99.665430][ T293] do_syscall_64+0x63/0xf0 [ 99.669871][ T293] ? clear_bhb_loop+0x50/0xa0 [ 99.674573][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.680536][ T293] RIP: 0033:0x7fccfd79f397 [ 99.684959][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.704653][ T293] RSP: 002b:00007fff36a57a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.713105][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fccfd79f397 [ 99.721125][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36a57b00 [ 99.729138][ T293] RBP: 00007fff36a57b00 R08: 00007fff36a58b00 R09: 00000000ffffffff [ 99.737159][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36a58b90 [ 99.745225][ T293] R13: 00007fccfd8344bb R14: 000000000001841c R15: 00007fff36a58bd0 [ 99.753252][ T293] [ 99.756294][ T293] ---[ end trace 0000000000000000 ]--- [ 99.762796][ T293] ------------[ cut here ]------------ [ 99.768344][ T293] WARNING: CPU: 1 PID: 293 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 99.777699][ T293] Modules linked in: [ 99.781623][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 90688e1ceab05e74867d9ba7556f72450a710f26 [ 99.795668][ T293] Tainted: [W]=WARN [ 99.799479][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.809585][ T293] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 99.815237][ T293] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 5e 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c c9 5e 03 cc e8 d6 80 3e ff <0f> 0b e9 3e ff ff ff e8 ca 80 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 99.834931][ T293] RSP: 0018:ffffc9000b67fb88 EFLAGS: 00010293 [ 99.841062][ T293] RAX: ffffffff8248f89a RBX: 0000000000000000 RCX: ffff8881201f9300 [ 99.849081][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.857127][ T293] RBP: ffffc9000b67fbb0 R08: ffff888131cd5dbf R09: 1ffff1102639abb7 [ 99.865117][ T293] R10: dffffc0000000000 R11: ffffed102639abb8 R12: 0000000000000000 [ 99.873147][ T293] R13: dffffc0000000000 R14: ffff888131cd5d20 R15: ffff8881132ee220 [ 99.881154][ T293] FS: 00005555932d6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.890144][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.896755][ T293] CR2: 0000555593301998 CR3: 000000012a37e000 CR4: 00000000003526b0 [ 99.904756][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000e3e4 [ 99.912799][ T293] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 99.920911][ T293] Call Trace: [ 99.924208][ T293] [ 99.927221][ T293] ovl_do_remove+0x824/0xd10 [ 99.931836][ T293] ? ovl_set_redirect+0x780/0x780 [ 99.936963][ T293] ? __cfi_down_write+0x10/0x10 [ 99.941838][ T293] ovl_rmdir+0x1e/0x30 [ 99.945964][ T293] vfs_rmdir+0x3db/0x560 [ 99.950227][ T293] incfs_kill_sb+0x197/0x220 [ 99.954880][ T293] deactivate_locked_super+0xd2/0x270 [ 99.960319][ T293] deactivate_super+0xb8/0xe0 [ 99.965014][ T293] cleanup_mnt+0x438/0x4d0 [ 99.969490][ T293] __cleanup_mnt+0x1d/0x40 [ 99.973925][ T293] task_work_run+0x1e5/0x260 [ 99.978584][ T293] ? __cfi_task_work_run+0x10/0x10 [ 99.983715][ T293] ? __x64_sys_umount+0x12e/0x180 [ 99.988799][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 99.994180][ T293] ? __kasan_check_read+0x15/0x20 [ 99.999273][ T293] resume_user_mode_work+0x35/0x50 [ 100.004399][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 100.009918][ T293] do_syscall_64+0x63/0xf0 [ 100.014351][ T293] ? clear_bhb_loop+0x50/0xa0 [ 100.019140][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.025059][ T293] RIP: 0033:0x7fccfd79f397 [ 100.029524][ T293] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.049171][ T293] RSP: 002b:00007fff36a57a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.057641][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fccfd79f397 [ 100.065638][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36a57b00 [ 100.073625][ T293] RBP: 00007fff36a57b00 R08: 00007fff36a58b00 R09: 00000000ffffffff [ 100.081644][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36a58b90 [ 100.089646][ T293] R13: 00007fccfd8344bb R14: 000000000001841c R15: 00007fff36a58bd0 [ 100.097704][ T293] [ 100.100732][ T293] ---[ end trace 0000000000000000 ]--- [ 100.355375][ T312] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 100.505357][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 100.511892][ T312] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 100.520350][ T312] usb 3-1: config 0 has no interface number 0 [ 100.528192][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 100.537491][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.545681][ T312] usb 3-1: Product: syz [ 100.550028][ T312] usb 3-1: Manufacturer: syz [ 100.554741][ T312] usb 3-1: SerialNumber: syz [ 100.560326][ T312] usb 3-1: config 0 descriptor?? [ 100.568368][ T312] smsc95xx v2.0.0 [ 100.657922][ T327] usb 4-1: USB disconnect, device number 38 [ 101.371103][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 101.383678][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 101.393310][ T312] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 101.404434][ T312] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 101.418454][ T312] usb 3-1: USB disconnect, device number 35