last executing test programs: 35.058840636s ago: executing program 3 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4c0002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) socket$inet(0x2, 0x5, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4c181629a0900000066b870008ed866b81e008ee00f78190f20d835200000000f22d80f00947600000000660f5f39d2c966ba210066edc4c12956949502000000", 0x41}], 0x1, 0x5, &(0x7f0000000200)=[@cr4={0x1, 0x10}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 34.188744418s ago: executing program 3 (id=64): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ptrace$setsig(0x4203, 0x0, 0x84, &(0x7f00000000c0)={0x21, 0x7, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) truncate(&(0x7f00000000c0)='./file0/file2\x00', 0x7) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x1c6}], 0x1}, 0x84) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.038587302s ago: executing program 3 (id=65): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000580)) 33.966992333s ago: executing program 3 (id=66): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfdf9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x2, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2002, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x2, 0x8, 0x5, 0x405, 0x1, 0x40000405, 0xa7, 0x1, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x0, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1002, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x7, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x0, 0x6, 0x10000, 0xc, 0x5, 0xfff7fffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x8001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x8, 0x6, 0x80008001, 0x7777, 0x1, 0x8, 0x100, 0xd8ce, 0xfffffffc, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x6, 0x9, 0x4, 0x463f, 0x4, 0xda9, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x125d, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='coda\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000c004) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="f36d66b9800000c00f326635010000000f300f01c8ba4100b000eef30fc7b12798baf80c66b8fcb23d8b66efbafc0ced66b80d0000000f23c00f21f86635030005000f23f80f01d1660fdebb01000f00930500", 0x53}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4c, 0x0, 0x1, 0x3}, {0x16, 0x0, 0x0, 0xfffffffd}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 33.056733927s ago: executing program 3 (id=77): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa0102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x0, 0x80800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(r1, &(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x542}) syz_usb_control_io(r0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x22, {0x22, 0x1, "d408307844098dcdbe887721b92c5edb72ea333cd328e4eca977aa3d4753bba9"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0xf, 0x1a, "4298bb9b669ee125213a113635b7cdbed02135db04fa81ed6cfe"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x92}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x0, 0x98, {0x96, "535ee2d22bf754a2363ef9826380000a9547026953ad89b1c9dbf51ed98eaad49154934547f98f05689641e123c7793bd68eb08369753e391858fca20344965092162298d4ded2371c03f137904acbc99d21ad930485d8242e5768b12c1a56a23c31c17835096ddd6273155c3602f609c00c03554b5404878207071d74785f7bfca863359e1daf89cf2b3ed87b4fbedaaf3610ee24f2"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x33}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="002e190000001923dc747120e3292e628ca59fab9f7197e0fa7cab84bd1af9"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xd, @string={0xd, 0x3, "92d92c1ce12045f5a91b09"}}, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, "7f6d"}, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.098920817s ago: executing program 3 (id=94): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x3d13, &(0x7f0000000040)) 16.531124518s ago: executing program 2 (id=207): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40000001, 0x8000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 16.230902896s ago: executing program 2 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount$incfs(&(0x7f00000002c0)='dev\x00', &(0x7f00000004c0)='dev\x00', &(0x7f0000000540), 0x490, 0x0) 16.204427127s ago: executing program 2 (id=209): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x64403, 0x4) 16.08367121s ago: executing program 32 (id=94): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x3d13, &(0x7f0000000040)) 15.963038663s ago: executing program 2 (id=214): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x4000, 0x0, 0x0, 0x0, 0x6, r3, 0x0}]) 15.877753885s ago: executing program 2 (id=216): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40000001, 0x8000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 15.631052272s ago: executing program 2 (id=219): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r1, &(0x7f0000000100)={0x4000000000, 0x2d, 0x8, 0xa, 0x40000000000009, 0x2c}, 0x48) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0xb, 0x1}, 0x80000001, 0xa0, &(0x7f0000000200)="eb14ee06d4b166de81f346c5bf0a437f798bc855e1c4589f75063bed3fd4ee4174d39e6b13a4d8647bbe882761cd087430ef09132a99f151855082f698182db63c63380a117bc6c50348e671809845f1a6c06aa8b95e92ff6e8a686c6c8af04ac322c6c10ca0ef9ed0d6f071cc73def8ff5de0161b2a2a904af5ee79e8379e329751e0111928defe", 0x88, 0xea, 0x7, 0x45, 0xfffffffa, 0xca, &(0x7f00000002c0)="47b3072352370c9065364c12a5b9d1e366332ae8574876eed6fe0437306e7aa4b9607993ee926071dc2d0957e2a41788a03bc12626682db74fc9bf453bb1", [{0x80, 0x2, 0xdee}, {0x6c30, 0x1, 0x2}, {0x7, 0x2, 0x2c}, {0x1e0f, 0x6, 0x7bf}, {0x0, 0x1, 0xe}, {0x8, 0xb, 0x2}, {0x4, 0x9, 0xfffff161}, {0xfffffff8, 0x3, 0x2}, {0x6, 0x8001, 0x5}, {0xd, 0x3, 0x3f}, {0xa, 0x10001, 0x8}, {0x2, 0xe, 0x10001}, {0x8, 0x8ca, 0x7}, {0x6, 0x4, 0xad0}, {0x3, 0xb862, 0x94d4}, {0x7, 0xfffffff9, 0x1}, {0x6, 0x47, 0x7ffe}, {0x6, 0x2, 0xc}, {0xa09, 0x4, 0x1}, {0x3, 0x5, 0x3}, {0x1, 0x6ad2cc94, 0xa}, {0x7, 0x9, 0xa45}, {0x7ab, 0x1000, 0xa75250d}, {0xff, 0x1, 0x6}, {0x0, 0xfffffffe, 0x68f4}, {0x8, 0x4, 0x8}, {0x0, 0x2800000, 0xd3ce}, {0x2, 0x6, 0xfff}, {0xbd7b, 0x48, 0x202}, {0x8, 0xffffffe4, 0xfffff001}, {0x6, 0xec5, 0x78}, {0x81, 0x45, 0x6}, {0x80, 0x1, 0x5}, {0x8, 0x4, 0x5}, {0x0, 0x9, 0x7}, {0xe, 0x4, 0x8}, {0x5d, 0x2, 0x9}, {0x1ff, 0xe, 0x10}, {0x1, 0xfffffffa, 0x9e}, {0x6, 0x0, 0x5}, {0x1ff, 0x5, 0xb7c}, {0x1, 0x28d0, 0x1}, {0x6464, 0x2, 0x9}, {0x2, 0x3, 0xffffffff}, {0x6, 0xd8, 0x3}, {0x5, 0x2, 0x10}, {0x6, 0x80000000, 0x5}, {0x1, 0x12, 0x4}, {0x7, 0x58, 0xcd}, {0x3, 0x4, 0x9}, {0x7, 0xa, 0x1}, {0x9e, 0xe7, 0x3}, {0xffffea9d, 0xa00000, 0x7ac}, {0xe8, 0x6c83, 0xfffffff8}, {0x32f, 0x6, 0x1}, {0xfff, 0x3, 0x5}, {0x81, 0x9, 0x3}, {0x9, 0xe, 0x70a48f3}, {0xc7, 0x4, 0x7}, {0x7, 0x800, 0x5}, {0x8, 0xfffffe01, 0x1000}, {0x3, 0x4, 0x9}, {0x80, 0x7, 0x9}, {0x8, 0x5, 0x5}, {0x3, 0x5, 0x7}, {0x80000001, 0x8, 0x2}, {0x4, 0x2, 0x8}, {0x0, 0x59a, 0x5}, {0x6, 0x6, 0x2}]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) recvmsg$can_raw(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=""/95, 0x5f}, 0x40) (async) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408205740040000102030109028e0003017f3311080b0003010130010904000000010130000a03000000007e0700001324030200010405060500000004000a000d000d24070606"], 0x0) 15.628619941s ago: executing program 33 (id=219): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r1, &(0x7f0000000100)={0x4000000000, 0x2d, 0x8, 0xa, 0x40000000000009, 0x2c}, 0x48) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0xb, 0x1}, 0x80000001, 0xa0, &(0x7f0000000200)="eb14ee06d4b166de81f346c5bf0a437f798bc855e1c4589f75063bed3fd4ee4174d39e6b13a4d8647bbe882761cd087430ef09132a99f151855082f698182db63c63380a117bc6c50348e671809845f1a6c06aa8b95e92ff6e8a686c6c8af04ac322c6c10ca0ef9ed0d6f071cc73def8ff5de0161b2a2a904af5ee79e8379e329751e0111928defe", 0x88, 0xea, 0x7, 0x45, 0xfffffffa, 0xca, &(0x7f00000002c0)="47b3072352370c9065364c12a5b9d1e366332ae8574876eed6fe0437306e7aa4b9607993ee926071dc2d0957e2a41788a03bc12626682db74fc9bf453bb1", [{0x80, 0x2, 0xdee}, {0x6c30, 0x1, 0x2}, {0x7, 0x2, 0x2c}, {0x1e0f, 0x6, 0x7bf}, {0x0, 0x1, 0xe}, {0x8, 0xb, 0x2}, {0x4, 0x9, 0xfffff161}, {0xfffffff8, 0x3, 0x2}, {0x6, 0x8001, 0x5}, {0xd, 0x3, 0x3f}, {0xa, 0x10001, 0x8}, {0x2, 0xe, 0x10001}, {0x8, 0x8ca, 0x7}, {0x6, 0x4, 0xad0}, {0x3, 0xb862, 0x94d4}, {0x7, 0xfffffff9, 0x1}, {0x6, 0x47, 0x7ffe}, {0x6, 0x2, 0xc}, {0xa09, 0x4, 0x1}, {0x3, 0x5, 0x3}, {0x1, 0x6ad2cc94, 0xa}, {0x7, 0x9, 0xa45}, {0x7ab, 0x1000, 0xa75250d}, {0xff, 0x1, 0x6}, {0x0, 0xfffffffe, 0x68f4}, {0x8, 0x4, 0x8}, {0x0, 0x2800000, 0xd3ce}, {0x2, 0x6, 0xfff}, {0xbd7b, 0x48, 0x202}, {0x8, 0xffffffe4, 0xfffff001}, {0x6, 0xec5, 0x78}, {0x81, 0x45, 0x6}, {0x80, 0x1, 0x5}, {0x8, 0x4, 0x5}, {0x0, 0x9, 0x7}, {0xe, 0x4, 0x8}, {0x5d, 0x2, 0x9}, {0x1ff, 0xe, 0x10}, {0x1, 0xfffffffa, 0x9e}, {0x6, 0x0, 0x5}, {0x1ff, 0x5, 0xb7c}, {0x1, 0x28d0, 0x1}, {0x6464, 0x2, 0x9}, {0x2, 0x3, 0xffffffff}, {0x6, 0xd8, 0x3}, {0x5, 0x2, 0x10}, {0x6, 0x80000000, 0x5}, {0x1, 0x12, 0x4}, {0x7, 0x58, 0xcd}, {0x3, 0x4, 0x9}, {0x7, 0xa, 0x1}, {0x9e, 0xe7, 0x3}, {0xffffea9d, 0xa00000, 0x7ac}, {0xe8, 0x6c83, 0xfffffff8}, {0x32f, 0x6, 0x1}, {0xfff, 0x3, 0x5}, {0x81, 0x9, 0x3}, {0x9, 0xe, 0x70a48f3}, {0xc7, 0x4, 0x7}, {0x7, 0x800, 0x5}, {0x8, 0xfffffe01, 0x1000}, {0x3, 0x4, 0x9}, {0x80, 0x7, 0x9}, {0x8, 0x5, 0x5}, {0x3, 0x5, 0x7}, {0x80000001, 0x8, 0x2}, {0x4, 0x2, 0x8}, {0x0, 0x59a, 0x5}, {0x6, 0x6, 0x2}]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) recvmsg$can_raw(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=""/95, 0x5f}, 0x40) (async) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408205740040000102030109028e0003017f3311080b0003010130010904000000010130000a03000000007e0700001324030200010405060500000004000a000d000d24070606"], 0x0) 14.849678601s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount$incfs(&(0x7f00000002c0)='dev\x00', &(0x7f00000004c0)='dev\x00', &(0x7f0000000540), 0x490, &(0x7f0000000ac0)={[], [{@fowner_lt={'fowner<', 0xee01}}]}) 14.765804013s ago: executing program 0 (id=227): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40000001, 0x8000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14.704402275s ago: executing program 0 (id=229): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000002680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002640)={&(0x7f0000001300)=ANY=[], 0x131c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (fail_nth: 9) 14.353365234s ago: executing program 0 (id=232): r0 = socket(0x29, 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c9) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r1, 0x10, 0x8000, 0xfffffffffffffffa) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000d40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=']) 14.290310635s ago: executing program 0 (id=233): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000065b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000267000/0x3000)=nil) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.246436767s ago: executing program 0 (id=235): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000065b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000267000/0x3000)=nil) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14.007126253s ago: executing program 5 (id=241): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xea9}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, r3, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xa97, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x4, 0x0, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fc4, 0x2000, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e8}}], 0x1, 0x0, 0x0) (fail_nth: 8) 13.71329625s ago: executing program 5 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount$incfs(&(0x7f00000002c0)='dev\x00', &(0x7f00000004c0)='dev\x00', &(0x7f0000000540), 0x490, &(0x7f0000000ac0)) 13.685715071s ago: executing program 5 (id=245): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0x8}}, 0x28) 13.583241173s ago: executing program 5 (id=246): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000002c0)=0x3f) write$FUSE_DIRENT(r3, &(0x7f0000000140)=ANY=[], 0x128) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file2\x00') linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r4, 0x0}]) 13.422751928s ago: executing program 5 (id=252): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket(0x10, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async, rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async, rerun: 64) accept(0xffffffffffffffff, &(0x7f0000006e40)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000006ec0)=0x80) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f00000001c0)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r3, 0x108000) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x4000)=nil) (async, rerun: 64) unshare(0x2040400) open$dir(&(0x7f0000000040)='./dev/ttyUSB0\x00', 0x43e2029dd7ba7ebd, 0x53) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x2, 0x4005, 0x8, 0x0, 0x49, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000004000000200001800d0001"], 0x34}}, 0x4040) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x550009af) (async) r9 = inotify_init1(0x800) inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x40000000) rmdir(&(0x7f0000000080)='./file0\x00') 13.32462275s ago: executing program 5 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.244720382s ago: executing program 34 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.09515887s ago: executing program 6 (id=326): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89fd, &(0x7f0000000840)={'gre0\x00', 0x0}) r1 = syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x49, {0x49, 0x10, "ddee221825358f828f61cd7925800c6e3bc4db4839ec22ea90e54c657a97d9cc3915dd46b4d51e799d5cd453b0cf70ebbf0993553b380caf4ae28c2f9e688ade2e396aabfd5a15"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0x5, 0x30, "75dce0988800d0efb0c2ef3685e8bca3f38b999271114eb2fb6d021a369b7e12d2e240c7a8e4ee8c8b33da51c7313e6d"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x81, 0x2, "e22c"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "a8eeb5"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "0e"}, &(0x7f0000000300)={0x20, 0x84, 0x4, "ec8c2480"}, &(0x7f0000000340)={0x20, 0x85, 0x3, 'Y2+'}}) syz_usb_control_io(r1, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 3.254098217s ago: executing program 6 (id=356): syz_usb_connect(0x0, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00042406"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xbf, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x2, 0x1, 0x9, 0x10, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "02"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x71c, 0x649, 0x80, 0x81}, {0x6, 0x24, 0x1a, 0x200, 0x3a}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf7}, @mdlm_detail={0x43, 0x24, 0x13, 0x80, "87ff1e90e6b6da6eb055262378726e0a9b2104dc1430cc83a2c8363904ea94adc067d0c5c4934131649a6e7fffccbafd77b8de1ad4d2bfe71db58e008ba347"}, @country_functional={0x8, 0x24, 0x7, 0x3, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xf9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x59, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0xfc, 0x5}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x2, 0x8, 0x40, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0x7e, &(0x7f0000000140)=@string={0x7e, 0x3, "73c738a7aedb02d332736a3a0347702a738e84557eb528f15f2c91884541abe08a45f7c0c1597c446a8730d164cb4cdd78767854efebf04dc532f70128f257b67be5e30e1a663c2afd147ec6617cb31b42a719714f52d90928ef660f7859152904360bd87e8d2fb4817e4f02a2110661ab7d0b8f062811fe40859b4e"}}, {0xfffffffffffffeba, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0xf4ff}}]}) syz_usb_connect$midi(0x6, 0x103, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x1, 0x1, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x2c, [@midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x4, 0x3, [{0x73, 0xd}, {0x7, 0x80}, {0x4, 0x3}], 0xff}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x28}, @midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x5, 0x7, [{0x1, 0x1}, {0x5, 0x3}, {0x10, 0x40}, {0x70, 0x70}, {0x7, 0xb}, {0x8, 0xf7}, {0x4, 0x7}]}], [{{0x9, 0x5, 0xd, 0x8, 0x3ef, 0x4, 0x0, 0x10, {0x14, 0x25, 0x1, 0x10, "b17e6f8cb6191ac6d266204486a48689"}}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x1, 0x8, 0x5, {0x11, 0x25, 0x1, 0xd, "37510533abdd06925a3f4e0623"}}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x3, 0x6, 0x5, {0x6, 0x25, 0x1, 0x2, "fbd7"}}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xc4, 0x8, 0x5, {0x14, 0x25, 0x1, 0x10, "54ae3ebc8889d932af6742fa51b4b491"}}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x5, 0x6, 0x8, {0x12, 0x25, 0x1, 0xe, "242bc424ac863e30c87656cce709"}}}, {{0x9, 0x5, 0x4, 0x3, 0x787, 0x49, 0x4, 0x4, {0x8, 0x25, 0x1, 0x4, "efea6da2"}}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x0, 0x2, 0x3, {0x9, 0x25, 0x1, 0x5, "4e1a3eb04f"}}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x2, 0x5, 0x5, {0x6, 0x25, 0x1, 0x2, 'Q3'}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x22, 0x7f, 0x81, 0x40, 0xd9}, 0x97, &(0x7f0000000480)={0x5, 0xf, 0x97, 0x4, [@generic={0x70, 0x10, 0x2, "8f6889ee232f81f107cebb790d54f2809c1f8f2498a40a644a3d5e48b0fdbe7a3af4e2ede8c08f568d7e2d22e4d501c359ce1fbf30272ab7b8264ea14f28b7a503d8223aca9f6607312d9c59f8ae1d120711ecf98394e8d572d365fe98ef3cc2c9c66cfd3cc3d267389ce843a0"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0xd, 0x5, 0x7, 0x9f}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "f0b0e3e36b18fb49dd13ce3142b8e9ba"}]}, 0x4, [{0x91, &(0x7f0000000540)=@string={0x91, 0x3, "b21912a8d4c0b954a7bde4727ef51e414e42de53c404dad48a360e021398acc8840fa2298b0624d7fe6ef2124bccea7b430bd55fc01c0a2928c80719c90f899b5b3582312072adde113a5dd042052c2931695d7391f6e34bddd13a320bd6b442f4f48eea506b86dc80b41c4648f8bb1c2706ee6d08c66fdb5b6a7ee83b4e4357fdc94117d8216d46e2bdb14ddb9485"}}, {0x6e, &(0x7f0000000600)=@string={0x6e, 0x3, "b3ce065b4dffaa654b6ff483e945ee0f1d12e97dae82f1be1e181aeb47df04b83cc1fe12b681b2058643259fc1cbc5d1c1ab7b7f5bf011cf98abe3befb9f5f552727e64032d5f8e7efb5fa88e4793cc9c7a22eaa49275de4fb1bce15a2636e15a4f79616c336d8477ccbed1d"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x401}}]}) 1.994358839s ago: executing program 6 (id=376): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='-}^-\x00', r0) keyctl$negate(0xd, r1, 0x6, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$get_persistent(0x16, r2, r1) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:mnt_t:s0\x00', 0x1b, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x8) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="2f2804ae90af7b10c9fffeba76f4172bae27570597b8d71a25bc06e90e7430ce95967186e7f9075c995f2f1a87a557393355a1453818e9cc", 0x38, r3) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x800) sendmsg$sock(r5, &(0x7f00000019c0)={&(0x7f0000000500)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)="54105d8a5fa57eb0bc99bd1056bb67dd8e233a054d6fcd37189c1bcf35cf034ab8aff48819f1560a49f567d965ea6b5259a22d91d5859381175906faaefe2b6ec7ea3e6856c38b99addada9c74ba62c57fb75d42e0b987d875df3670fc8bb07cc168f4f1728178c8c810922795d406616854a70f82753f16a181fa874e39703cb3451cf1c49057591a22b5ec8a79eb57899d5cbcdbeba6f0c95eddd56d048af97f810f750c6eb9de1d759ea82cc0c224b4dd5da6a4b62261f5864275d3f08fc9745f77d0016969379a21a426477d26ff30996e55e9ced761db3ee96922e4ae9787c26e63b2c6ecadfa", 0xe9}, {&(0x7f0000000680)="937c80ee8a4e27dd12f407b8c1ab4943dcec497cd29fec4448d8c8c47f11a179c4131d488d4bb2183c49810264a5c8fe", 0x30}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="7cf52a992649258641c16cffb825772c8d25e19bcce2b7aed759ea88db1c4218f140ee6b7b48995a3bfbc3105d13e0d50b2064a2cbb14d374de6d648cae10bcc8673f1b2dc9b000ddf83f773be73893a4cf13a29e025c6bff63b318f2bc61b9e2cb631373c992054eb6095594a86fcb972d0e117281516", 0x77}, {&(0x7f0000001740)="fc72b2ca5cde6169836db1876f2fc74eb919c5594551f60d900c95b344c392905ea1986b23b98ca702c809bc4d3f22f443063f8702cf8a9629cea3d4262f3a6851f577597e65bcf22893e9829a5585c4c3633ebeeeedae053f9f3003d7297cbe5af7f4fc6710cbb609376d0bcf6ccd9baa2f1dd0deab07f94cc147", 0x7b}, {&(0x7f00000017c0)="47519139aae04fc93ac290ceac485a461e2e288a5ef0384158c28a1f8d8784b7bf81fa402e225304a13aef3d2839c11c3bcd3bf3f654889321780350", 0x3c}, {&(0x7f0000001800)="57c75d3a50f8415fc9f8910b1167d933de0942e56d6aaca2804e326a67e4b1bbbc1f24ef9989e0ac9739af27e0f2d7e03540eba036d50f413ed9b4d5b6a142607d7a3b7dbdfca664f539675db39350289a7d56e22762812bbe6a5542ffa2cb7e4842954ebd71e9dca7d2168d3cebcd269797b75395ae8e63c28b956c1118833a939d3e521de093d23653073b65a79d4c39bd481fe63dd87fd9d1adf0540fd83ecc2c6a4a77b072bb8ea766bf337613267dac333802", 0xb5}], 0x7, &(0x7f0000001940)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x43b9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14}}], 0x60}, 0x2400c000) r6 = accept4$packet(r5, &(0x7f0000001a00), &(0x7f0000001a40)=0x14, 0x80000) sendto$packet(r6, &(0x7f0000001a80)="59c99715dd6d888b83873d736370cafea236f05df7e614a3231f7678cb91b00937fd7d8c23a8bf010d39bc1b4bf4c2aa85b78e2a737b521828337ec81f50fe3a9c9c783e4bdbd1dc7c70159d0a2965e1887681539fad096e4eb1315b081f9aa2d85dcc3a090d30fa2428980d406d62b18c1cd2c8477f5bc92c9079bccda8ab39d826f432979da3dd4c4506351f647abd6617b4b9bbd1b099b6e143541ba2dc7f08061ae68310d1f5c3b29c387254e6bad7b80e0bd5d06e8ed07cc0cf4cab99cfcc11404f603132e022ff14081ffbc596d5ec4366d1d0ee51403ecca13cc8948f63dc0e6b46f8f5f413bcc6bcbdc789e8fa", 0xf1, 0x20040880, &(0x7f0000001b80)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @random="be4ace4210b8"}, 0x14) add_key$fscrypt_v1(&(0x7f0000001bc0), &(0x7f0000001c00)={'fscrypt:', @desc4}, &(0x7f0000001c40)={0x0, "591935c1f67e78cc52ca1206ae74ac58732d83c6c184ca1e69d0dbac4aac8219a3f4b49164fab28f441c31a5740121af710298c091b866c10a59acee9ce39cc3", 0x33}, 0x48, r1) clock_adjtime(0x7, &(0x7f0000001cc0)={0xd4, 0x0, 0x5, 0xa, 0x8000000000000000, 0x0, 0xc, 0x4, 0x3000, 0x7, 0x7, 0x40, 0x3, 0x3ff, 0x1, 0x1, 0x9, 0x200, 0x100000001, 0x9, 0x6be, 0x6, 0x9, 0x43, 0xffffffffffffffff, 0x2}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000001dc0)=@rnullb, r2, &(0x7f0000001e00)) clock_adjtime(0x7, &(0x7f0000001e80)={0x3, 0x391624b9, 0xfb6d, 0xe0, 0x6, 0x3, 0x54ebf3e8, 0x6, 0x7, 0x1, 0x951, 0x6d6, 0x7, 0x5, 0x0, 0x51dc, 0x8, 0x1ff, 0xd, 0x86c7, 0x1, 0x5, 0x1, 0xff, 0x7, 0x5}) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000002f80)={0x3, 0x10001, 0x1000, &(0x7f0000001f80)=""/4096}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000002fc0)='pkcs7_test\x00', &(0x7f0000003000)=@secondary) openat2$dir(0xffffffffffffff9c, &(0x7f0000003040)='./file0/../file0\x00', &(0x7f0000003080)={0x2c0500, 0x80, 0x18}, 0x18) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000030c0)={r4, 0xa8, 0xdc}, &(0x7f0000003100)={'enc=', 'pkcs1', ' hash=', {'xxhash64\x00'}}, &(0x7f0000003180)="4f44ab72a20e7f71a4f274c782ed7c58ea1745e38ea1d41e5640109224c1898a4467aecb23d8643b1c0c19b2b0d28df1f2e49759f082abc78dca19aac3ef9851c85f6fef255f04b12a754a9eb46633cad605242292f9ae65ae0846a9b7ffd25450f72ea59aaa8bfad296e232a38b7f3f16e5be2de1017d08e707942639eca3e221f169f31634790bd3288fe754cfd23ff9179d977b3e71253e2b7745bf3e394e583864b1817cacf5", &(0x7f0000003240)=""/220) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x48, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfd61}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7fff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xe4d276c387d956c5, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xa958}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) lsetxattr(&(0x7f0000003480)='./file0/../file0\x00', &(0x7f00000034c0)=@random={'system.', 'keyring\x00'}, &(0x7f0000003500)='\x00', 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000003680)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003640)={&(0x7f0000003580)={0xa0, 0x3, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xa0}}, 0x24000000) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000036c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000003700)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000003780)=r9, 0x12) keyctl$negate(0xd, r1, 0x8, r1) recvfrom$unix(r5, &(0x7f00000037c0)=""/4096, 0x1000, 0x40000040, &(0x7f00000047c0)=@file={0x0, './file0\x00'}, 0x6e) 1.933877641s ago: executing program 6 (id=377): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)="01", 0x1) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x1) stat(&(0x7f0000000600)='dir0/per_cpu/cpu0/trace_pipe\x00', &(0x7f0000000700)) 1.933474501s ago: executing program 6 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.871002742s ago: executing program 6 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x4, 0xa6, 0x6, 0x0, 0x3, 0x28, 0x9, 0x9, 0x2, 0x9, 0x7, 0xda, 0x0, 0x10, 0x0, 0x10, 0x6, 0xc, 0xa0, '\x00', 0xb4, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x9, 0xff, 0x9, 0x0, 0x4000a}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect(0x6, 0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="120110016e2773fff60d3e005184010204c3a478ba8edc0600438bdeff0a24020103010801af9f00"/51], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") ioctl$KVM_RUN(r2, 0xae80, 0x0) 757.744721ms ago: executing program 1 (id=389): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'bridge_slave_1\x00'}) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000000000)='}', 0x1) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) close(r0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) socket(0x1e, 0x5, 0x0) (async) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) (async) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) write$binfmt_misc(r2, &(0x7f0000000000)='}', 0x1) (async) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async) 599.319705ms ago: executing program 1 (id=391): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) clock_settime(0x3b9aca00, 0x0) 599.225445ms ago: executing program 1 (id=392): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80080) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/63) 539.153126ms ago: executing program 1 (id=394): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x73, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x3b, {0x3b, 0x2, "c26313852642792c3cbdeace918d0fb74224cc4b44b72fb0ff0300002a52973661d67a0c5540c1a1d959ad58fe59444ec9a4134e73a6783995"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 405.70537ms ago: executing program 4 (id=397): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000100)) 339.102621ms ago: executing program 4 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = inotify_init() symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0xa0000006) setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r2, r3, 0x80000) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 319.517512ms ago: executing program 4 (id=399): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40043d0d, &(0x7f0000000040)) 278.245263ms ago: executing program 4 (id=400): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x821491a0337121c}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c4, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x5, 0x0, {0x2, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x6, 0x2}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x4, 0x0, {0x8, 0x2, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x3, 0x52}}, @NL80211_ATTR_KEYS={0x168, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b0932ceaf9"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "df5539245fc8ffd2d9b4118b1a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1e8077890d"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e3eb98e3cf"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xf, 0x4, "ac6b136bd86e847d1262b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8001}, 0x48c0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x821491a0337121c}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c4, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x5, 0x0, {0x2, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x6, 0x2}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x4, 0x0, {0x8, 0x2, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x3, 0x52}}, @NL80211_ATTR_KEYS={0x168, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b0932ceaf9"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "df5539245fc8ffd2d9b4118b1a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1e8077890d"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e3eb98e3cf"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xf, 0x4, "ac6b136bd86e847d1262b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8001}, 0x48c0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) 71.181978ms ago: executing program 4 (id=401): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80080) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0x40084504, 0x0) 70.886318ms ago: executing program 4 (id=402): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/108, 0x6c}], 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x50, &(0x7f0000000240)=[@cr4={0x1, 0x9e2}], 0x1) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000004c0)="400f23280f019c990e000000b91a0200000f32c344240000600000c744240200800000c7442406000000000f20c035010000000f22c06566262e440f23b126673e660f382943b0c4c3914984fb499e00007fc744240000000000c744240278581667c7442406000000000f01c267440fc7580066b804008ee8", 0x79}], 0x1, 0x45f5cb4379c34ea0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001880)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002800010023bd700000000000100000000c00000000000001000000000c002300040001"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r9, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2000}, 0x4) getsockopt$packet_int(r10, 0x107, 0x12, 0x0, &(0x7f0000001600)) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_hsr\x00', {0x2}, 0xcaca}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001d002100dfff0000000000000700000018000000000007000a0002"], 0x30}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f00000000c0)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) 39.568659ms ago: executing program 1 (id=403): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f00000004c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xef\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6\"\xc94&\xc1!r1\x80T2]\xb0\xe4\x93\xab\xa7\xa5\xa1\xb5*6\x93\xcd}\xa6\xea\x98\x92\x19&z\xa8\x10\x9d\x88\xa4=\xac\xe6\x9f=2\x86\v%\x979\xe3w+\x93\xc4\x84\xb9@c\xfb)~!\xf9)%\x84dT\x0e\xe4\x10\x9e\xf0\xb48\x91]\xf7Y6\xd9\xee\xadL\xfb\xe6\xa5\x05\xf8!\x1f]\x98Z\xdd]\x13\xe1\x88\x82\b\x96\xe22\xc3\x9eT\x11\xfa\xfe2U\x0e\xe8\xab\xff\xc2\x1e\x8c\xee\xe4g\xbep\xa2\xe8\xe3\xe8\xa3\x18\x83\x0fVQ\xfa\xe9\v7a\xa45$H\x00\x06\xd7.\xb6\xc4\x84Y\xa2\r\xfd>+\\\x16\xd4kI\xaa\x80\xd1\xdfq\x14|\\\xff\xed\'\x15BH6JOdt7', 0x3) fallocate(r2, 0x0, 0x0, 0x200401) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f0000000040)=ANY=[]) 0s ago: executing program 1 (id=404): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000390000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') pread64(r1, &(0x7f0000003900)=""/80, 0x50, 0x5) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80080) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PTP_PIN_SETFUNC(r3, 0x400445a0, 0x0) kernel console output (not intermixed with test programs): 36] audit: type=1400 audit(1786101092.590:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.952407][ T36] audit: type=1400 audit(1786101092.610:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.979535][ T36] audit: type=1400 audit(1786101092.610:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.765796][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.773661][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.781157][ T293] bridge_slave_0: entered allmulticast mode [ 22.787665][ T293] bridge_slave_0: entered promiscuous mode [ 22.797400][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.805226][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.813210][ T293] bridge_slave_1: entered allmulticast mode [ 22.820242][ T293] bridge_slave_1: entered promiscuous mode [ 22.856795][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.864310][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.871454][ T296] bridge_slave_0: entered allmulticast mode [ 22.880288][ T296] bridge_slave_0: entered promiscuous mode [ 22.890297][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.897501][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.904812][ T296] bridge_slave_1: entered allmulticast mode [ 22.911337][ T296] bridge_slave_1: entered promiscuous mode [ 22.943625][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.952302][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.960114][ T294] bridge_slave_0: entered allmulticast mode [ 22.967721][ T294] bridge_slave_0: entered promiscuous mode [ 22.982006][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.989671][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.996997][ T294] bridge_slave_1: entered allmulticast mode [ 23.003556][ T294] bridge_slave_1: entered promiscuous mode [ 23.038493][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.045813][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.053052][ T295] bridge_slave_0: entered allmulticast mode [ 23.059316][ T295] bridge_slave_0: entered promiscuous mode [ 23.068999][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.077346][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.084949][ T295] bridge_slave_1: entered allmulticast mode [ 23.091461][ T295] bridge_slave_1: entered promiscuous mode [ 23.222076][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.229239][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.236792][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.244076][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.270522][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277829][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.285271][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.292394][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.302026][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.309265][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.317190][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.324893][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.338844][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.347179][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.354936][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.362497][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.399532][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.407595][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.415066][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.422971][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.430188][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.437554][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.445705][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.453394][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.474673][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.481778][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.502782][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.510190][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.517820][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.524991][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.533202][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.540268][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.548134][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.555207][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.572992][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.580043][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.597473][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.605948][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.622111][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.629270][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.660761][ T296] veth0_vlan: entered promiscuous mode [ 23.686126][ T294] veth0_vlan: entered promiscuous mode [ 23.698982][ T295] veth0_vlan: entered promiscuous mode [ 23.717018][ T294] veth1_macvtap: entered promiscuous mode [ 23.725642][ T293] veth0_vlan: entered promiscuous mode [ 23.739117][ T296] veth1_macvtap: entered promiscuous mode [ 23.754630][ T293] veth1_macvtap: entered promiscuous mode [ 23.762973][ T295] veth1_macvtap: entered promiscuous mode [ 23.795344][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.121088][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.272796][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.281914][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.292941][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.305075][ T312] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 24.314749][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.323370][ T312] usb 3-1: Product: syz [ 24.327848][ T312] usb 3-1: Manufacturer: syz [ 24.333150][ T312] usb 3-1: SerialNumber: syz [ 24.342027][ T312] usb 3-1: selecting invalid altsetting 1 [ 24.348096][ T312] usb 3-1: unit 6 not found! [ 24.748098][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.873977][ T343] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 24.994182][ T316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.131137][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.146218][ T312] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 25.154207][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 25.163407][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.175258][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.181385][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.185834][ T316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.209584][ T316] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 25.221785][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.233943][ T316] usb 1-1: config 0 descriptor?? [ 25.301397][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 25.308420][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 25.316372][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 25.326377][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.335150][ T45] usb 4-1: config 0 descriptor?? [ 25.342432][ T9] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 25.355087][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.366809][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 25.371428][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.380503][ T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 25.393668][ T312] usb 3-1: USB disconnect, device number 2 [ 25.402128][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.414172][ T9] usb 2-1: config 0 descriptor?? [ 25.420261][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 25.428456][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.429137][ T9] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 25.660052][ T349] incfs: Options parsing error. -22 [ 25.664075][ T316] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input4 [ 25.672735][ T349] incfs: mount failed -22 [ 25.678661][ T316] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 25.692245][ T349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.701728][ T349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.715160][ T349] capability: warning: `syz.1.11' uses deprecated v2 capabilities in a way that may be insecure [ 25.729705][ T9] usb 2-1: USB disconnect, device number 2 [ 25.744700][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.758265][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.769187][ T45] hid (null): invalid report_count 2060869942 [ 25.777055][ T45] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x4 [ 25.786492][ T45] logitech-djreceiver 0003:046D:C534.0002: unexpected long global item [ 25.795425][ T45] logitech-djreceiver 0003:046D:C534.0002: logi_dj_probe: parse failed [ 25.804578][ T45] logitech-djreceiver 0003:046D:C534.0002: probe with driver logitech-djreceiver failed with error -22 [ 25.882117][ T10] usb 1-1: USB disconnect, device number 2 [ 25.989298][ T316] usb 4-1: USB disconnect, device number 2 [ 26.948676][ T380] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 27.130623][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 27.130643][ T36] audit: type=1400 audit(1786101097.850:139): avc: denied { create } for pid=385 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.157679][ T36] audit: type=1400 audit(1786101097.850:140): avc: denied { write } for pid=385 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.179285][ T36] audit: type=1400 audit(1786101097.860:141): avc: denied { read } for pid=385 comm="syz.2.22" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.203070][ T36] audit: type=1400 audit(1786101097.860:142): avc: denied { open } for pid=385 comm="syz.2.22" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.229573][ T36] audit: type=1400 audit(1786101097.860:143): avc: denied { ioctl } for pid=385 comm="syz.2.22" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.271552][ T389] fuse: Bad value for 'fd' [ 27.333722][ T36] audit: type=1400 audit(1786101098.060:144): avc: denied { mount } for pid=392 comm="syz.0.32" name="/" dev="ramfs" ino=4354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.357377][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.371056][ T36] audit: type=1400 audit(1786101098.060:145): avc: denied { mounton } for pid=392 comm="syz.0.32" path="/sys" dev="ramfs" ino=4357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 27.413146][ T36] audit: type=1400 audit(1786101098.060:146): avc: denied { mount } for pid=392 comm="syz.0.32" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.472643][ T36] audit: type=1400 audit(1786101098.200:147): avc: denied { ioctl } for pid=396 comm="syz.3.26" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3829 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.551264][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.552832][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.568666][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.579420][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.590885][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 27.600101][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.608250][ T45] usb 2-1: Product: syz [ 27.612737][ T45] usb 2-1: Manufacturer: syz [ 27.617700][ T45] usb 2-1: SerialNumber: syz [ 27.624921][ T45] usb 2-1: selecting invalid altsetting 1 [ 27.630902][ T45] usb 2-1: unit 6 not found! [ 27.651127][ T354] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.701071][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 27.707424][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.718565][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.729953][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.743222][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.752752][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.761245][ T316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.761958][ T10] usb 3-1: config 0 descriptor?? [ 27.821088][ T354] usb 1-1: Using ep0 maxpacket: 8 [ 27.827760][ T354] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.834510][ T354] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 27.844065][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.853185][ T354] usb 1-1: config 0 descriptor?? [ 27.912664][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.923178][ T316] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.932476][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.940770][ T316] usb 4-1: Product: syz [ 27.945215][ T316] usb 4-1: Manufacturer: syz [ 27.950111][ T316] usb 4-1: SerialNumber: syz [ 28.177186][ T36] audit: type=1400 audit(1786101098.900:148): avc: denied { read } for pid=390 comm="syz.2.24" dev="nsfs" ino=4026532549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.191084][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input5 [ 28.211752][ T10] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 28.261693][ T395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.270576][ T395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.288931][ T354] hid (null): invalid report_count 2060869942 [ 28.296595][ T354] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x4 [ 28.304952][ T354] logitech-djreceiver 0003:046D:C534.0004: unexpected long global item [ 28.314234][ T354] logitech-djreceiver 0003:046D:C534.0004: logi_dj_probe: parse failed [ 28.322573][ T354] logitech-djreceiver 0003:046D:C534.0004: probe with driver logitech-djreceiver failed with error -22 [ 28.403300][ T354] usb 3-1: USB disconnect, device number 3 [ 28.429143][ T45] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 28.491685][ T10] usb 1-1: USB disconnect, device number 3 [ 28.639986][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.651174][ T316] usb 4-1: cannot find UAC_HEADER [ 28.658517][ T45] usb 2-1: USB disconnect, device number 3 [ 28.661268][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.669335][ T316] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.699023][ T316] usb 4-1: USB disconnect, device number 3 [ 28.717928][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.081921][ T316] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.242299][ T316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.252552][ T316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.262474][ T316] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.271663][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.279742][ T316] usb 4-1: SerialNumber: syz [ 29.284689][ T399] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.411163][ T354] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.421082][ T399] usb 1-1: device descriptor read/64, error -71 [ 29.499771][ T316] usb 4-1: 0:2 : does not exist [ 29.508926][ T316] usb 4-1: USB disconnect, device number 4 [ 29.519443][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.561091][ T354] usb 2-1: Using ep0 maxpacket: 32 [ 29.567992][ T354] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 29.576280][ T354] usb 2-1: config 0 has no interface number 0 [ 29.582438][ T354] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 29.592886][ T354] usb 2-1: config 0 interface 196 has no altsetting 0 [ 29.601230][ T354] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 29.610273][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.618414][ T354] usb 2-1: Product: syz [ 29.622710][ T354] usb 2-1: Manufacturer: syz [ 29.627389][ T354] usb 2-1: SerialNumber: syz [ 29.633212][ T354] usb 2-1: config 0 descriptor?? [ 29.638718][ T420] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 29.671109][ T399] usb 1-1: device descriptor read/64, error -71 [ 29.911120][ T399] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.041102][ T399] usb 1-1: device descriptor read/64, error -71 [ 30.090714][ T420] Zero length message leads to an empty skb [ 30.098516][ T354] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 30.106282][ T354] ipheth 2-1:0.196: probe with driver ipheth failed with error -32 [ 30.124377][ T436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.139040][ T45] usb 2-1: USB disconnect, device number 4 [ 30.139059][ T436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.291128][ T399] usb 1-1: device descriptor read/64, error -71 [ 30.311129][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.319172][ T317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.401260][ T399] usb usb1-port1: attempt power cycle [ 30.471189][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 30.478871][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.489936][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.491043][ T45] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 30.500103][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.519839][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.529910][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.543221][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.552537][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.560806][ T317] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.569962][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.578845][ T317] usb 3-1: SerialNumber: syz [ 30.584099][ T10] usb 4-1: config 0 descriptor?? [ 30.651050][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 30.741107][ T399] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.762249][ T399] usb 1-1: device descriptor read/8, error -71 [ 30.781131][ T45] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 30.793008][ T317] usb 3-1: 0:2 : does not exist [ 30.803259][ T317] usb 3-1: USB disconnect, device number 4 [ 30.902214][ T399] usb 1-1: device descriptor read/8, error -71 [ 30.931068][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 30.936695][ T45] usb usb2-port1: attempt power cycle [ 30.997954][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input6 [ 31.012055][ T10] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 31.141111][ T399] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.162381][ T399] usb 1-1: device descriptor read/8, error -71 [ 31.215191][ T10] usb 4-1: USB disconnect, device number 5 [ 31.291183][ T45] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 31.299700][ T399] usb 1-1: device descriptor read/8, error -71 [ 31.311500][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 31.411198][ T399] usb usb1-port1: unable to enumerate USB device [ 31.441150][ T45] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 31.481529][ T45] usb 2-1: Invalid ep0 maxpacket: 16 [ 31.487111][ T45] usb usb2-port1: unable to enumerate USB device [ 31.981074][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.175078][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.201322][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.221445][ T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.242730][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.260837][ T45] usb 3-1: SerialNumber: syz [ 32.272329][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 32.272347][ T36] audit: type=1400 audit(1786101103.000:165): avc: denied { setopt } for pid=483 comm="syz.0.61" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.324003][ T484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1486864816 (190318696448 ns) > initial count (65390294784 ns). Using initial count to start timer. [ 32.329878][ T36] audit: type=1400 audit(1786101103.000:166): avc: denied { write } for pid=483 comm="syz.0.61" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.428140][ T486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=486 comm=syz.0.62 [ 32.502896][ T45] usb 3-1: 0:2 : does not exist [ 32.514349][ T45] usb 3-1: USB disconnect, device number 5 [ 32.732617][ T36] audit: type=1400 audit(1786101103.460:167): avc: denied { unlink } for pid=491 comm="syz.3.64" name="#1" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.757448][ T36] audit: type=1400 audit(1786101103.460:168): avc: denied { mount } for pid=491 comm="syz.3.64" name="/" dev="overlay" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.779300][ T36] audit: type=1400 audit(1786101103.460:169): avc: denied { create } for pid=491 comm="syz.3.64" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.800576][ T36] audit: type=1400 audit(1786101103.460:170): avc: denied { link } for pid=491 comm="syz.3.64" name="#3" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.822478][ T36] audit: type=1400 audit(1786101103.460:171): avc: denied { rename } for pid=491 comm="syz.3.64" name="#4" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.866771][ T36] audit: type=1400 audit(1786101103.590:172): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.911775][ T36] audit: type=1400 audit(1786101103.640:173): avc: denied { create } for pid=496 comm="syz.3.66" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.933331][ T36] audit: type=1400 audit(1786101103.640:174): avc: denied { read } for pid=496 comm="syz.3.66" name="file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.113099][ T500] netlink: 9 bytes leftover after parsing attributes in process `syz.2.67'. [ 33.122295][ T500] gretap0: entered promiscuous mode [ 33.129376][ T500] netlink: 5 bytes leftover after parsing attributes in process `syz.2.67'. [ 33.139321][ T500] 0{X: renamed from gretap0 [ 33.150242][ T500] 0{X: left promiscuous mode [ 33.157923][ T500] 0{X: entered allmulticast mode [ 33.165884][ T500] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 33.384786][ T520] bond_slave_0: entered allmulticast mode [ 33.551093][ T339] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.591092][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 33.681091][ T399] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.702441][ T339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 33.712358][ T339] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 33.723624][ T339] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 33.732867][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.741274][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 33.746522][ T339] usb 2-1: Product: syz [ 33.750897][ T339] usb 2-1: Manufacturer: syz [ 33.756571][ T339] usb 2-1: SerialNumber: syz [ 33.762052][ T45] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 33.770438][ T45] usb 1-1: config 0 has no interface number 0 [ 33.778129][ T45] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 33.789443][ T45] usb 1-1: config 0 interface 196 has no altsetting 0 [ 33.797924][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 33.808526][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.816889][ T45] usb 1-1: Product: syz [ 33.822662][ T45] usb 1-1: Manufacturer: syz [ 33.827572][ T45] usb 1-1: SerialNumber: syz [ 33.833746][ T45] usb 1-1: config 0 descriptor?? [ 33.839739][ T516] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.848185][ T399] usb 3-1: Using ep0 maxpacket: 8 [ 33.859256][ T399] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.867124][ T399] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 33.876914][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.886130][ T399] usb 3-1: config 0 descriptor?? [ 33.991153][ T339] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 34.121126][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.194433][ T339] usb 2-1: USB disconnect, device number 9 [ 34.201562][ T339] usblp0: removed [ 34.271155][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 34.277851][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.286048][ T10] usb 4-1: config 0 has no interface number 0 [ 34.292977][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.295919][ T522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.304319][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.314204][ T522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.323892][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 34.338334][ T399] hid (null): invalid report_count 2060869942 [ 34.339989][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.347801][ T399] logitech-djreceiver 0003:046D:C534.0006: unknown main item tag 0x4 [ 34.359602][ T10] usb 4-1: config 0 descriptor?? [ 34.363173][ T399] logitech-djreceiver 0003:046D:C534.0006: unexpected long global item [ 34.376923][ T399] logitech-djreceiver 0003:046D:C534.0006: logi_dj_probe: parse failed [ 34.386243][ T399] logitech-djreceiver 0003:046D:C534.0006: probe with driver logitech-djreceiver failed with error -22 [ 34.460597][ T45] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 34.470181][ T45] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 34.547164][ T45] usb 3-1: USB disconnect, device number 6 [ 34.662791][ C0] ipheth 1-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 34.871599][ T45] usb 1-1: USB disconnect, device number 8 [ 34.939091][ T45] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 35.052100][ T10] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0007/input/input7 [ 35.065923][ T10] uclogic 0003:28BD:0094.0007: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 35.210934][ T571] fuse: Bad value for 'fd' [ 35.243463][ T10] usb 4-1: USB disconnect, device number 6 [ 35.752141][ T596] fuse: Bad value for 'fd' [ 35.771057][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 35.932203][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.942674][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.952996][ T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.962593][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.971488][ T45] usb 1-1: SerialNumber: syz [ 36.031051][ T339] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.180015][ T45] usb 1-1: 0:2 : does not exist [ 36.192040][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 36.197885][ T45] usb 1-1: unit 5 not found! [ 36.204316][ T339] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 36.214605][ T45] usb 1-1: USB disconnect, device number 9 [ 36.223482][ T339] usb 2-1: config 0 has no interface number 0 [ 36.244994][ T339] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 36.255761][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.275771][ T339] usb 2-1: config 0 interface 196 has no altsetting 0 [ 36.284243][ T339] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 36.294780][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.308522][ T339] usb 2-1: Product: syz [ 36.313439][ T339] usb 2-1: Manufacturer: syz [ 36.318368][ T339] usb 2-1: SerialNumber: syz [ 36.327880][ T339] usb 2-1: config 0 descriptor?? [ 36.333782][ T600] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 36.947165][ T339] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 36.950839][ T631] FAULT_INJECTION: forcing a failure. [ 36.950839][ T631] name failslab, interval 1, probability 0, space 0, times 0 [ 36.969016][ T631] CPU: 0 UID: 0 PID: 631 Comm: syz.0.106 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 36.969047][ T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.969058][ T631] Call Trace: [ 36.969065][ T631] [ 36.969072][ T631] __dump_stack+0x21/0x30 [ 36.969103][ T631] dump_stack_lvl+0x140/0x1c0 [ 36.969127][ T631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.969152][ T631] ? handle_mm_fault+0x16fe/0x1ba0 [ 36.969175][ T631] dump_stack+0x19/0x20 [ 36.969199][ T631] should_fail_ex+0x3c2/0x510 [ 36.969233][ T631] should_failslab+0xac/0x100 [ 36.969256][ T631] kmem_cache_alloc_noprof+0x42/0x410 [ 36.969275][ T631] ? __cfi_handle_mm_fault+0x10/0x10 [ 36.969297][ T631] ? lock_vma_under_rcu+0x4cf/0x590 [ 36.969318][ T631] ? getname_flags+0xcc/0x6b0 [ 36.969340][ T631] getname_flags+0xcc/0x6b0 [ 36.969361][ T631] getname+0x1b/0x30 [ 36.969380][ T631] do_sys_openat2+0xda/0x1d0 [ 36.969407][ T631] ? do_sys_open+0x100/0x100 [ 36.969431][ T631] ? __kasan_check_write+0x18/0x20 [ 36.969450][ T631] ? do_user_addr_fault+0xbf5/0x1230 [ 36.969477][ T631] ? __cfi_ksys_write+0x10/0x10 [ 36.969498][ T631] __x64_sys_openat+0x13a/0x170 [ 36.969525][ T631] x64_sys_call+0xe69/0x2ee0 [ 36.969542][ T631] do_syscall_64+0x57/0xf0 [ 36.969563][ T631] ? clear_bhb_loop+0x50/0xa0 [ 36.969594][ T631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.969617][ T631] RIP: 0033:0x7f559035e90e [ 36.969634][ T631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.969649][ T631] RSP: 002b:00007f558edf6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.969673][ T631] RAX: ffffffffffffffda RBX: 00007f558edf76c0 RCX: 00007f559035e90e [ 36.969688][ T631] RDX: 0000000000000000 RSI: 00007f558edf6c00 RDI: ffffffffffffff9c [ 36.969701][ T631] RBP: 00007f558edf6c00 R08: 0000000000000000 R09: 0000000000000000 [ 36.969714][ T631] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 36.969725][ T631] R13: 00007f5590626038 R14: 00007f5590625fa0 R15: 00007ffdc40be0f8 [ 36.969741][ T631] [ 36.971082][ T339] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 37.285129][ T398] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.374328][ C1] ipheth 2-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 37.443487][ T398] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 37.452679][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.460974][ T398] usb 1-1: Product: syz [ 37.465506][ T398] usb 1-1: Manufacturer: syz [ 37.470268][ T398] usb 1-1: SerialNumber: syz [ 37.491091][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 37.491131][ T36] audit: type=1400 audit(1786101108.210:244): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.534392][ T36] audit: type=1400 audit(1786101108.260:245): avc: denied { append } for pid=650 comm="syz.2.109" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.587574][ T339] usb 2-1: USB disconnect, device number 10 [ 37.672625][ T339] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 37.728190][ T398] usb 1-1: USB disconnect, device number 10 [ 38.001100][ T399] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.152100][ T399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.166167][ T399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.177033][ T399] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 38.186663][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.195206][ T399] usb 3-1: SerialNumber: syz [ 38.354019][ T36] audit: type=1400 audit(1786101109.080:246): avc: denied { connect } for pid=677 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.392072][ T36] audit: type=1400 audit(1786101109.100:247): avc: denied { write } for pid=677 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.393124][ T398] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 38.433058][ T399] usb 3-1: 0:2 : does not exist [ 38.442759][ T399] usb 3-1: unit 5 not found! [ 38.449908][ T680] 9pnet_fd: Insufficient options for proto=fd [ 38.456579][ T36] audit: type=1400 audit(1786101109.120:248): avc: denied { create } for pid=679 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.485775][ T399] usb 3-1: USB disconnect, device number 7 [ 38.513497][ T36] audit: type=1400 audit(1786101109.140:249): avc: denied { write } for pid=679 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.532962][ T36] audit: type=1400 audit(1786101109.170:250): avc: denied { write } for pid=679 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.609725][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.621901][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.632292][ T398] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 38.641476][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.655364][ T398] usb 2-1: config 0 descriptor?? [ 38.841130][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.992422][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 39.002719][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 39.032067][ T45] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 39.047201][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.066326][ T36] audit: type=1400 audit(1786101109.790:251): avc: denied { append } for pid=672 comm="syz.1.113" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 39.099812][ T45] usb 1-1: Product: syz [ 39.104339][ T45] usb 1-1: Manufacturer: syz [ 39.108955][ T45] usb 1-1: SerialNumber: syz [ 39.290755][ T398] usbhid 2-1:0.0: can't add hid device: -32 [ 39.296860][ T398] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 39.326650][ T45] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 39.379096][ T398] usb 2-1: USB disconnect, device number 11 [ 39.540724][ T45] usb 1-1: USB disconnect, device number 11 [ 39.551373][ T45] usblp0: removed [ 39.821105][ T399] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.922021][ T36] audit: type=1400 audit(1786101110.650:252): avc: denied { create } for pid=690 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.944143][ T36] audit: type=1400 audit(1786101110.670:253): avc: denied { bind } for pid=690 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.991118][ T399] usb 3-1: Using ep0 maxpacket: 32 [ 39.998625][ T399] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 40.007402][ T399] usb 3-1: config 0 has no interface number 0 [ 40.013955][ T399] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 40.026016][ T399] usb 3-1: config 0 interface 196 has no altsetting 0 [ 40.035490][ T399] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 40.045065][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.064732][ T399] usb 3-1: Product: syz [ 40.069040][ T399] usb 3-1: Manufacturer: syz [ 40.079973][ T399] usb 3-1: SerialNumber: syz [ 40.096981][ T399] usb 3-1: config 0 descriptor?? [ 40.102367][ T689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.371051][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.541117][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 40.547938][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.556899][ T45] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.570193][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 40.579251][ T45] usb 1-1: language id specifier not provided by device, defaulting to English [ 40.589750][ T45] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40 [ 40.599363][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.607724][ T45] usb 1-1: Product: ࠊ [ 40.612200][ T45] usb 1-1: SerialNumber: И [ 40.713274][ T399] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 40.723905][ T399] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 40.994030][ C0] ipheth 3-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 41.206887][ T399] usb 3-1: USB disconnect, device number 8 [ 41.230967][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 41.237156][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 41.258721][ T45] usb 1-1: USB disconnect, device number 12 [ 41.269820][ T399] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 41.451074][ T398] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.612284][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.623734][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.633714][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.647023][ T398] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.656464][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.665832][ T398] usb 2-1: config 0 descriptor?? [ 41.778536][ T745] SELinux: policydb table sizes (8,221) do not match mine (8,7) [ 41.786577][ T745] SELinux: failed to load policy [ 42.011062][ T399] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 42.120974][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.136006][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.156773][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.164863][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.173246][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.181630][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.190625][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x3 [ 42.200751][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x3 [ 42.208611][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x3 [ 42.217650][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x3 [ 42.231047][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.231404][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x3 [ 42.249907][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x3 [ 42.251035][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.258545][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x6 [ 42.276144][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.283863][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.283918][ T399] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.291761][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.330177][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.331050][ T399] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 42.345432][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.359056][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.368991][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.371031][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.377504][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.395003][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.403270][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.403477][ T399] usb 1-1: config 0 descriptor?? [ 42.414254][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.423710][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.431472][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.441529][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.449415][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.457435][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.466092][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.474016][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.482713][ T398] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 42.491547][ T398] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 42.509640][ T398] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 42.525248][ T398] usb 2-1: USB disconnect, device number 12 [ 42.539729][ T768] fido_id[768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 42.591231][ T45] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 42.752487][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.761975][ T45] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 42.772511][ T45] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 42.783808][ T45] usb 3-1: string descriptor 0 read error: -22 [ 42.790076][ T45] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 42.799475][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.841354][ T399] thrustmaster 0003:044F:B324.0009: hiddev96,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.0-1/input0 [ 42.863367][ T399] thrustmaster 0003:044F:B324.0009: no inputs found [ 43.010383][ T10] usb 3-1: USB disconnect, device number 9 [ 43.050507][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 43.050526][ T36] audit: type=1400 audit(1786101113.770:263): avc: denied { mounton } for pid=744 comm="syz.0.130" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.080762][ T746] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 43.089309][ T399] usb 1-1: USB disconnect, device number 13 [ 43.191230][ T398] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 43.351063][ T398] usb 2-1: Using ep0 maxpacket: 32 [ 43.357668][ T398] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 43.366280][ T398] usb 2-1: config 0 has no interface number 0 [ 43.372884][ T398] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 43.385316][ T398] usb 2-1: config 0 interface 196 has no altsetting 0 [ 43.401111][ T398] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 43.410243][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.418509][ T398] usb 2-1: Product: syz [ 43.422903][ T398] usb 2-1: Manufacturer: syz [ 43.427525][ T398] usb 2-1: SerialNumber: syz [ 43.434904][ T398] usb 2-1: config 0 descriptor?? [ 43.440624][ T771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.553288][ T36] audit: type=1326 audit(1786101114.280:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.138" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0c39e0d9 code=0x0 [ 43.633104][ T36] audit: type=1400 audit(1786101114.360:265): avc: denied { write } for pid=778 comm="syz.0.140" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 43.656900][ T779] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 43.666492][ T779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 43.817026][ T36] audit: type=1400 audit(1786101114.540:266): avc: denied { execute } for pid=786 comm="syz.0.142" name="file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.817099][ T787] process 'syz.0.142' launched './file0' with NULL argv: empty string added [ 43.866501][ T36] audit: type=1400 audit(1786101114.580:267): avc: denied { execute_no_trans } for pid=786 comm="syz.0.142" path="/37/file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.917117][ T398] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 43.946139][ T398] ipheth 2-1:0.196: probe with driver ipheth failed with error -32 [ 43.983265][ T398] usb 2-1: USB disconnect, device number 13 [ 44.581145][ T398] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 44.732856][ T398] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.741414][ T398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.765465][ T398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.782529][ T398] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 44.801985][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.802419][ T399] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 44.810878][ T398] usb 1-1: Product: syz [ 44.824146][ T398] usb 1-1: Manufacturer: syz [ 44.829341][ T398] usb 1-1: SerialNumber: syz [ 44.841952][ T398] usb 1-1: selecting invalid altsetting 1 [ 44.848192][ T398] usb 1-1: unit 6 not found! [ 44.981106][ T399] usb 2-1: Using ep0 maxpacket: 32 [ 44.996068][ T399] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 45.005753][ T399] usb 2-1: config 0 has no interface number 0 [ 45.014756][ T399] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 45.031774][ T399] usb 2-1: config 0 interface 196 has no altsetting 0 [ 45.052186][ T399] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 45.062009][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.073052][ T399] usb 2-1: Product: syz [ 45.085273][ T399] usb 2-1: Manufacturer: syz [ 45.090082][ T399] usb 2-1: SerialNumber: syz [ 45.105581][ T399] usb 2-1: config 0 descriptor?? [ 45.112294][ T819] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.564434][ T399] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 45.581121][ T399] ipheth 2-1:0.196: probe with driver ipheth failed with error -32 [ 45.604620][ T399] usb 2-1: USB disconnect, device number 14 [ 45.624181][ T36] audit: type=1400 audit(1786101116.350:268): avc: denied { write } for pid=858 comm="syz.1.163" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.651093][ T36] audit: type=1400 audit(1786101116.350:269): avc: denied { open } for pid=858 comm="syz.1.163" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.678048][ T36] audit: type=1400 audit(1786101116.350:270): avc: denied { ioctl } for pid=858 comm="syz.1.163" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.841752][ T398] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.854527][ T398] usb 1-1: USB disconnect, device number 14 [ 45.868261][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.103209][ T36] audit: type=1400 audit(1786101116.830:271): avc: denied { create } for pid=876 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.129831][ T878] Unsupported ieee802154 address type: 0 [ 46.144074][ T36] audit: type=1400 audit(1786101116.850:272): avc: denied { bind } for pid=876 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.258642][ T885] fuse: Bad value for 'fd' [ 46.278368][ T887] MTRR 1 not used [ 46.344506][ T398] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.467687][ T898] FAULT_INJECTION: forcing a failure. [ 46.467687][ T898] name failslab, interval 1, probability 0, space 0, times 0 [ 46.486292][ T898] CPU: 1 UID: 0 PID: 898 Comm: syz.0.179 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 46.486324][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.486334][ T898] Call Trace: [ 46.486339][ T898] [ 46.486346][ T898] __dump_stack+0x21/0x30 [ 46.486373][ T898] dump_stack_lvl+0x140/0x1c0 [ 46.486394][ T898] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.486416][ T898] ? __cfi_vfs_write+0x10/0x10 [ 46.486433][ T898] dump_stack+0x19/0x20 [ 46.486452][ T898] should_fail_ex+0x3c2/0x510 [ 46.486471][ T898] should_failslab+0xac/0x100 [ 46.486490][ T898] kmem_cache_alloc_noprof+0x42/0x410 [ 46.486506][ T898] ? getname_flags+0xcc/0x6b0 [ 46.486524][ T898] ? ksys_write+0x1f3/0x260 [ 46.486540][ T898] getname_flags+0xcc/0x6b0 [ 46.486557][ T898] getname_uflags+0x28/0x40 [ 46.486576][ T898] __x64_sys_execveat+0xba/0xf0 [ 46.486600][ T898] x64_sys_call+0x906/0x2ee0 [ 46.486616][ T898] do_syscall_64+0x57/0xf0 [ 46.486636][ T898] ? clear_bhb_loop+0x50/0xa0 [ 46.486656][ T898] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.486676][ T898] RIP: 0033:0x7f559039e0d9 [ 46.486691][ T898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.486713][ T898] RSP: 002b:00007f558edd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 46.486732][ T898] RAX: ffffffffffffffda RBX: 00007f5590626090 RCX: 00007f559039e0d9 [ 46.486745][ T898] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 46.486757][ T898] RBP: 00007f558edd6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.486768][ T898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.486778][ T898] R13: 00007f5590626128 R14: 00007f5590626090 R15: 00007ffdc40be0f8 [ 46.486792][ T898] [ 46.551312][ T398] usb 3-1: Using ep0 maxpacket: 32 [ 46.691812][ T398] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 46.711040][ T398] usb 3-1: config 0 has no interface number 0 [ 46.717179][ T398] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 46.727985][ T398] usb 3-1: config 0 interface 196 has no altsetting 0 [ 46.742229][ T398] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 46.751496][ T354] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 46.759751][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.768005][ T398] usb 3-1: Product: syz [ 46.772269][ T398] usb 3-1: Manufacturer: syz [ 46.776890][ T398] usb 3-1: SerialNumber: syz [ 46.782732][ T398] usb 3-1: config 0 descriptor?? [ 46.788082][ T879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.912213][ T354] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.922569][ T354] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.941460][ T354] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.951116][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.959444][ T354] usb 2-1: SerialNumber: syz [ 47.101612][ T910] mmap: syz.0.183 (910) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.163479][ T913] fuse: Bad value for 'fd' [ 47.176836][ T354] usb 2-1: 0:2 : does not exist [ 47.186018][ T354] usb 2-1: unit 5 not found! [ 47.219855][ T354] usb 2-1: USB disconnect, device number 15 [ 47.312835][ T398] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 47.320426][ T398] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 47.340492][ T398] usb 3-1: USB disconnect, device number 10 [ 47.491070][ T399] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.641085][ T398] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.661070][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 47.667386][ T399] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 47.676090][ T399] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 47.684924][ T399] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 47.695682][ T399] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 47.705140][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.714370][ T399] usb 1-1: Product: syz [ 47.718653][ T399] usb 1-1: Manufacturer: syz [ 47.723950][ T399] usb 1-1: SerialNumber: syz [ 47.729603][ T399] usb 1-1: config 0 descriptor?? [ 47.736632][ T399] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 47.802803][ T924] FAULT_INJECTION: forcing a failure. [ 47.802803][ T924] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.820937][ T924] CPU: 0 UID: 0 PID: 924 Comm: syz.1.188 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 47.820969][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.820981][ T924] Call Trace: [ 47.821012][ T924] [ 47.821019][ T924] __dump_stack+0x21/0x30 [ 47.821050][ T924] dump_stack_lvl+0x140/0x1c0 [ 47.821073][ T924] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.821098][ T924] ? ____sys_sendmsg+0x780/0xa00 [ 47.821120][ T924] dump_stack+0x19/0x20 [ 47.821144][ T924] should_fail_ex+0x3c2/0x510 [ 47.821167][ T924] should_fail+0xf/0x20 [ 47.821186][ T924] should_fail_usercopy+0x1e/0x30 [ 47.821208][ T924] _copy_from_user+0x20/0xa0 [ 47.821234][ T924] ___sys_sendmsg+0x1c7/0x370 [ 47.821255][ T924] ? __sys_sendmsg+0x2a0/0x2a0 [ 47.821274][ T924] ? kstrtouint+0x78/0xf0 [ 47.821297][ T924] ? __fget_files+0x2bc/0x330 [ 47.821322][ T924] __sys_sendmmsg+0x2b4/0x4e0 [ 47.821343][ T924] ? __cfi___sys_sendmmsg+0x10/0x10 [ 47.821367][ T924] ? __cfi_ksys_write+0x10/0x10 [ 47.821388][ T924] __x64_sys_sendmmsg+0xa4/0xc0 [ 47.821409][ T924] x64_sys_call+0xfec/0x2ee0 [ 47.821426][ T924] do_syscall_64+0x57/0xf0 [ 47.821448][ T924] ? clear_bhb_loop+0x50/0xa0 [ 47.821474][ T924] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.821498][ T924] RIP: 0033:0x7f7cd639e0d9 [ 47.821515][ T924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.821697][ T924] RSP: 002b:00007f7cd7313028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.821721][ T924] RAX: ffffffffffffffda RBX: 00007f7cd6625fa0 RCX: 00007f7cd639e0d9 [ 47.821737][ T924] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 47.821750][ T924] RBP: 00007f7cd7313090 R08: 0000000000000000 R09: 0000000000000000 [ 47.821763][ T924] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 47.821776][ T924] R13: 00007f7cd6626038 R14: 00007f7cd6625fa0 R15: 00007ffd727e9778 [ 47.821793][ T924] [ 47.944186][ T399] usb 1-1: USB disconnect, device number 15 [ 47.950146][ T398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.059969][ T398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.070394][ T398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.083829][ T398] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 48.094104][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.102317][ T398] usb 3-1: Product: syz [ 48.107108][ T398] usb 3-1: Manufacturer: syz [ 48.112142][ T398] usb 3-1: SerialNumber: syz [ 48.122581][ T398] usb 3-1: selecting invalid altsetting 1 [ 48.128537][ T398] usb 3-1: unit 6 not found! [ 48.289566][ T936] fuse: Bad value for 'fd' [ 48.401616][ T938] FAULT_INJECTION: forcing a failure. [ 48.401616][ T938] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.415562][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.1.194 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 48.415601][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.415612][ T938] Call Trace: [ 48.415618][ T938] [ 48.415625][ T938] __dump_stack+0x21/0x30 [ 48.415667][ T938] dump_stack_lvl+0x140/0x1c0 [ 48.415692][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.415718][ T938] ? unwind_get_return_address+0x51/0x90 [ 48.415744][ T938] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 48.415772][ T938] dump_stack+0x19/0x20 [ 48.415796][ T938] should_fail_ex+0x3c2/0x510 [ 48.415818][ T938] should_fail_alloc_page+0xec/0x110 [ 48.415841][ T938] __alloc_pages_noprof+0x1c0/0x7e0 [ 48.415868][ T938] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.415894][ T938] ? kasan_save_track+0x4f/0x80 [ 48.415914][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 48.415942][ T938] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 48.415962][ T938] ? alloc_vmap_area+0x230/0x26f0 [ 48.415987][ T938] ? __get_vm_area_node+0x1f8/0x390 [ 48.416013][ T938] ? _raw_spin_lock+0x92/0x120 [ 48.416034][ T938] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.416056][ T938] get_free_pages_noprof+0x14/0x40 [ 48.416082][ T938] kasan_populate_vmalloc_pte+0x4c/0x170 [ 48.416104][ T938] __apply_to_page_range+0x7c2/0xd00 [ 48.416126][ T938] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 48.416147][ T938] ? apply_to_page_range+0x60/0x60 [ 48.416168][ T938] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 48.416187][ T938] apply_to_page_range+0x3f/0x60 [ 48.416208][ T938] kasan_populate_vmalloc+0x64/0x80 [ 48.416228][ T938] alloc_vmap_area+0x1e8e/0x26f0 [ 48.416256][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 48.416283][ T938] ? vm_map_ram+0xdd0/0xdd0 [ 48.416309][ T938] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 48.416330][ T938] ? __get_vm_area_node+0x150/0x390 [ 48.416356][ T938] __get_vm_area_node+0x1f8/0x390 [ 48.416383][ T938] __vmalloc_node_range_noprof+0x340/0x1300 [ 48.416411][ T938] ? copy_process+0x57c/0x3350 [ 48.416439][ T938] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 48.416466][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 48.416493][ T938] ? __kasan_slab_alloc+0x73/0x90 [ 48.416515][ T938] ? arch_dup_task_struct+0x5b/0xe0 [ 48.416542][ T938] ? __asan_memcpy+0x5a/0x80 [ 48.416561][ T938] dup_task_struct+0x5d6/0xd80 [ 48.416583][ T938] ? copy_process+0x57c/0x3350 [ 48.416607][ T938] ? _raw_spin_lock_irq+0x93/0x120 [ 48.416627][ T938] ? copy_process+0x3350/0x3350 [ 48.416658][ T938] ? __kasan_check_write+0x18/0x20 [ 48.416677][ T938] copy_process+0x57c/0x3350 [ 48.416703][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 48.416730][ T938] ? __cfi_copy_process+0x10/0x10 [ 48.416753][ T938] ? __kmalloc_cache_noprof+0x23c/0x470 [ 48.416773][ T938] ? __kasan_check_write+0x18/0x20 [ 48.416791][ T938] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 48.416814][ T938] vhost_task_create+0x1f7/0x3f0 [ 48.416834][ T938] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 48.416857][ T938] ? __cfi_vhost_task_create+0x10/0x10 [ 48.416877][ T938] ? __cfi_vhost_task_fn+0x10/0x10 [ 48.416896][ T938] ? __kasan_check_write+0x18/0x20 [ 48.416915][ T938] ? mutex_lock+0x97/0x1d0 [ 48.416940][ T938] ? __cfi_mutex_lock+0x10/0x10 [ 48.416964][ T938] ? kernel_text_address+0xa9/0xe0 [ 48.416990][ T938] kvm_mmu_post_init_vm+0x161/0x300 [ 48.417017][ T938] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 48.417043][ T938] ? _parse_integer_limit+0x195/0x1e0 [ 48.417064][ T938] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 48.417089][ T938] ? kstrtoull+0x13b/0x1e0 [ 48.417108][ T938] ? kstrtouint+0x78/0xf0 [ 48.417127][ T938] ? ioctl_has_perm+0x1bc/0x500 [ 48.417147][ T938] ? __asan_memcpy+0x5a/0x80 [ 48.417165][ T938] ? ioctl_has_perm+0x408/0x500 [ 48.417183][ T938] ? has_cap_mac_admin+0xd0/0xd0 [ 48.417201][ T938] ? __kasan_check_write+0x18/0x20 [ 48.417219][ T938] ? mutex_lock_killable+0x97/0x1d0 [ 48.417246][ T938] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.417272][ T938] ? proc_fail_nth_write+0x184/0x220 [ 48.417301][ T938] kvm_vcpu_ioctl+0xa43/0x1000 [ 48.417321][ T938] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.417340][ T938] ? __cfi_vfs_write+0x10/0x10 [ 48.417359][ T938] ? __kasan_check_write+0x18/0x20 [ 48.417378][ T938] ? mutex_unlock+0x90/0x240 [ 48.417402][ T938] ? __cfi_mutex_unlock+0x10/0x10 [ 48.417430][ T938] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.417453][ T938] ? security_file_ioctl+0x3e/0x110 [ 48.417480][ T938] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.417498][ T938] __se_sys_ioctl+0x135/0x1b0 [ 48.417521][ T938] __x64_sys_ioctl+0x7f/0xa0 [ 48.417544][ T938] x64_sys_call+0x1878/0x2ee0 [ 48.417562][ T938] do_syscall_64+0x57/0xf0 [ 48.417582][ T938] ? clear_bhb_loop+0x50/0xa0 [ 48.417608][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.417633][ T938] RIP: 0033:0x7f7cd639e0d9 [ 48.417658][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.417674][ T938] RSP: 002b:00007f7cd7313028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.417696][ T938] RAX: ffffffffffffffda RBX: 00007f7cd6625fa0 RCX: 00007f7cd639e0d9 [ 48.417711][ T938] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 48.417723][ T938] RBP: 00007f7cd7313090 R08: 0000000000000000 R09: 0000000000000000 [ 48.417735][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.417746][ T938] R13: 00007f7cd6626038 R14: 00007f7cd6625fa0 R15: 00007ffd727e9778 [ 48.417762][ T938] [ 48.417813][ T938] syz.1.194: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 48.537694][ T942] netlink: 148 bytes leftover after parsing attributes in process `syz.0.195'. [ 48.543365][ T938] ,cpuset= [ 48.631460][ T941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.821069][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 48.821086][ T36] audit: type=1400 audit(1786101119.480:277): avc: denied { ioctl } for pid=940 comm="syz.0.195" path="socket:[10245]" dev="sockfs" ino=10245 ioctlcmd=0x48dc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.825486][ T938] syz1 [ 48.831464][ T36] audit: type=1400 audit(1786101119.480:278): avc: denied { create } for pid=940 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.835821][ T938] ,mems_allowed=0 [ 48.850958][ T36] audit: type=1400 audit(1786101119.480:279): avc: denied { setopt } for pid=940 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.855782][ T938] [ 48.877082][ T36] audit: type=1400 audit(1786101119.490:280): avc: denied { read } for pid=940 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.882424][ T938] CPU: 1 UID: 0 PID: 938 Comm: syz.1.194 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 48.882453][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.882464][ T938] Call Trace: [ 48.882471][ T938] [ 48.882478][ T938] __dump_stack+0x21/0x30 [ 48.882515][ T938] dump_stack_lvl+0x140/0x1c0 [ 48.882538][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.882563][ T938] dump_stack+0x19/0x20 [ 48.882585][ T938] warn_alloc+0x1e7/0x2c0 [ 48.882610][ T938] ? kasan_save_track+0x3e/0x80 [ 48.882629][ T938] ? __cfi_warn_alloc+0x10/0x10 [ 48.882652][ T938] ? __get_vm_area_node+0x211/0x390 [ 48.882677][ T938] ? __get_vm_area_node+0x211/0x390 [ 48.882702][ T938] __vmalloc_node_range_noprof+0x365/0x1300 [ 48.882731][ T938] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 48.882757][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 48.882781][ T938] ? __kasan_slab_alloc+0x73/0x90 [ 48.882802][ T938] ? arch_dup_task_struct+0x5b/0xe0 [ 48.882827][ T938] ? __asan_memcpy+0x5a/0x80 [ 48.882846][ T938] dup_task_struct+0x5d6/0xd80 [ 48.882868][ T938] ? copy_process+0x57c/0x3350 [ 48.882889][ T938] ? _raw_spin_lock_irq+0x93/0x120 [ 48.882910][ T938] ? copy_process+0x3350/0x3350 [ 48.882931][ T938] ? __kasan_check_write+0x18/0x20 [ 48.882949][ T938] copy_process+0x57c/0x3350 [ 48.882971][ T938] ? kasan_save_alloc_info+0x3a/0x50 [ 48.882996][ T938] ? __cfi_copy_process+0x10/0x10 [ 48.883017][ T938] ? __kmalloc_cache_noprof+0x23c/0x470 [ 48.883036][ T938] ? __kasan_check_write+0x18/0x20 [ 48.883054][ T938] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 48.883075][ T938] vhost_task_create+0x1f7/0x3f0 [ 48.883093][ T938] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 48.883114][ T938] ? __cfi_vhost_task_create+0x10/0x10 [ 48.883133][ T938] ? __cfi_vhost_task_fn+0x10/0x10 [ 48.883151][ T938] ? __kasan_check_write+0x18/0x20 [ 48.883168][ T938] ? mutex_lock+0x97/0x1d0 [ 48.883191][ T938] ? __cfi_mutex_lock+0x10/0x10 [ 48.883212][ T938] ? kernel_text_address+0xa9/0xe0 [ 48.883237][ T938] kvm_mmu_post_init_vm+0x161/0x300 [ 48.883262][ T938] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 48.883286][ T938] ? _parse_integer_limit+0x195/0x1e0 [ 48.883305][ T938] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 48.883328][ T938] ? kstrtoull+0x13b/0x1e0 [ 48.883346][ T938] ? kstrtouint+0x78/0xf0 [ 48.883363][ T938] ? ioctl_has_perm+0x1bc/0x500 [ 48.883380][ T938] ? __asan_memcpy+0x5a/0x80 [ 48.883397][ T938] ? ioctl_has_perm+0x408/0x500 [ 48.883414][ T938] ? has_cap_mac_admin+0xd0/0xd0 [ 48.883431][ T938] ? __kasan_check_write+0x18/0x20 [ 48.883447][ T938] ? mutex_lock_killable+0x97/0x1d0 [ 48.883471][ T938] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.883502][ T938] ? proc_fail_nth_write+0x184/0x220 [ 48.883527][ T938] kvm_vcpu_ioctl+0xa43/0x1000 [ 48.883546][ T938] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.883563][ T938] ? __cfi_vfs_write+0x10/0x10 [ 48.883581][ T938] ? __kasan_check_write+0x18/0x20 [ 48.883598][ T938] ? mutex_unlock+0x90/0x240 [ 48.883620][ T938] ? __cfi_mutex_unlock+0x10/0x10 [ 48.883645][ T938] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.883666][ T938] ? security_file_ioctl+0x3e/0x110 [ 48.883691][ T938] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.883709][ T938] __se_sys_ioctl+0x135/0x1b0 [ 48.883730][ T938] __x64_sys_ioctl+0x7f/0xa0 [ 48.883750][ T938] x64_sys_call+0x1878/0x2ee0 [ 48.883767][ T938] do_syscall_64+0x57/0xf0 [ 48.883787][ T938] ? clear_bhb_loop+0x50/0xa0 [ 48.883812][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.883834][ T938] RIP: 0033:0x7f7cd639e0d9 [ 48.883850][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.883864][ T938] RSP: 002b:00007f7cd7313028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.883885][ T938] RAX: ffffffffffffffda RBX: 00007f7cd6625fa0 RCX: 00007f7cd639e0d9 [ 48.883899][ T938] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 48.883911][ T938] RBP: 00007f7cd7313090 R08: 0000000000000000 R09: 0000000000000000 [ 48.883923][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.883935][ T938] R13: 00007f7cd6626038 R14: 00007f7cd6625fa0 R15: 00007ffd727e9778 [ 48.883950][ T938] [ 48.883957][ T938] Mem-Info: [ 48.896684][ T36] audit: type=1400 audit(1786101119.550:281): avc: denied { write } for pid=940 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.901556][ T938] active_anon:7011 inactive_anon:0 isolated_anon:0 [ 48.901556][ T938] active_file:16053 inactive_file:2298 isolated_file:0 [ 48.901556][ T938] unevictable:0 dirty:444 writeback:0 [ 48.901556][ T938] slab_reclaimable:5316 slab_unreclaimable:76949 [ 48.901556][ T938] mapped:25676 shmem:164 pagetables:1040 [ 48.901556][ T938] sec_pagetables:0 bounce:0 [ 48.901556][ T938] kernel_misc_reclaimable:0 [ 48.901556][ T938] free:1522840 free_pcp:1516 free_cma:0 [ 48.963884][ T398] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.970660][ T938] Node 0 active_anon:28044kB inactive_anon:0kB active_file:64212kB inactive_file:9192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102704kB dirty:1776kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4912kB pagetables:4160kB sec_pagetables:0kB all_unreclaimable? no [ 48.979612][ T398] usb 3-1: USB disconnect, device number 11 [ 48.994901][ T938] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:0kB free_cma:0kB [ 49.105401][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.116514][ T938] lowmem_reserve[]: [ 49.591279][ T948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=948 comm=syz.2.196 [ 49.737374][ T938] 0 3921 3921 [ 49.740808][ T938] Normal free:3123172kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30200kB inactive_anon:0kB active_file:64212kB inactive_file:9200kB unevictable:0kB writepending:1776kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3672kB local_pcp:2812kB free_cma:0kB [ 49.811151][ T938] lowmem_reserve[]: 0 0 0 [ 49.813716][ T949] 9pnet_fd: Insufficient options for proto=fd [ 49.815649][ T938] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 49.868153][ T938] Normal: 153*4kB (UME) 124*8kB (UME) 1041*16kB (UME) 418*32kB (UME) 371*64kB (UME) 13*128kB (UME) 6*256kB (UME) 7*512kB (UME) 5*1024kB (UME) 3*2048kB (M) 746*4096kB (UME) = 3129044kB [ 49.886752][ T938] 18514 total pagecache pages [ 49.891744][ T938] 0 pages in swap cache [ 49.896108][ T938] Free swap = 124984kB [ 49.900280][ T938] Total swap = 124996kB [ 49.922267][ T938] 2097051 pages RAM [ 49.926168][ T938] 0 pages HighMem/MovableOnly [ 49.930859][ T938] 352233 pages reserved [ 49.935502][ T938] 0 pages cma reserved [ 49.948425][ T938] Memory allocations: [ 49.952730][ T938] 0 B 0 init/main.c:1477 func:do_initcalls [ 49.960031][ T938] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 49.973956][ T938] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 49.983387][ T938] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 49.991913][ T938] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 50.000716][ T938] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 50.010082][ T938] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 50.018586][ T938] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 50.027176][ T938] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 50.035542][ T938] 0 B 0 init/initramfs.c:101 func:find_link [ 50.087694][ T36] audit: type=1400 audit(1786101120.810:282): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.112862][ T957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=957 comm=syz.0.200 [ 50.334987][ T968] FAULT_INJECTION: forcing a failure. [ 50.334987][ T968] name failslab, interval 1, probability 0, space 0, times 0 [ 50.354288][ T968] CPU: 1 UID: 0 PID: 968 Comm: syz.1.205 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 50.354321][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.354333][ T968] Call Trace: [ 50.354339][ T968] [ 50.354347][ T968] __dump_stack+0x21/0x30 [ 50.354377][ T968] dump_stack_lvl+0x140/0x1c0 [ 50.354402][ T968] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.354426][ T968] ? kasan_save_track+0x4f/0x80 [ 50.354446][ T968] ? kasan_save_alloc_info+0x3a/0x50 [ 50.354471][ T968] dump_stack+0x19/0x20 [ 50.354494][ T968] should_fail_ex+0x3c2/0x510 [ 50.354515][ T968] should_failslab+0xac/0x100 [ 50.354538][ T968] kmem_cache_alloc_noprof+0x42/0x410 [ 50.354556][ T968] ? mas_wr_store_type+0x13f3/0x1b40 [ 50.354583][ T968] ? mas_alloc_nodes+0x254/0x9d0 [ 50.354601][ T968] mas_alloc_nodes+0x254/0x9d0 [ 50.354638][ T968] mas_preallocate+0x79b/0xc90 [ 50.354667][ T968] ? __cfi_mas_preallocate+0x10/0x10 [ 50.354692][ T968] ? __kasan_check_read+0x15/0x20 [ 50.354711][ T968] ? anon_vma_name+0x51/0xa0 [ 50.354735][ T968] ? vm_area_dup+0x415/0x560 [ 50.354755][ T968] __split_vma+0x449/0xc10 [ 50.354780][ T968] ? kernel_text_address+0xa9/0xe0 [ 50.354802][ T968] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 50.354820][ T968] ? unwind_get_return_address+0x51/0x90 [ 50.354844][ T968] ? can_vma_merge_left+0x184/0x4b0 [ 50.354861][ T968] vma_modify+0x60c/0x1540 [ 50.354882][ T968] vma_modify_flags+0x182/0x1c0 [ 50.354901][ T968] mprotect_fixup+0x432/0x8d0 [ 50.354920][ T968] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 50.354939][ T968] ? __cfi_mprotect_fixup+0x10/0x10 [ 50.354961][ T968] ? bpf_lsm_file_mprotect+0xd/0x20 [ 50.354985][ T968] do_mprotect_pkey+0xa85/0xe50 [ 50.355011][ T968] ? prot_none_test+0x30/0x30 [ 50.355033][ T968] ? mutex_unlock+0x90/0x240 [ 50.355060][ T968] ? fput+0x1a4/0x230 [ 50.355084][ T968] ? __cfi_ksys_write+0x10/0x10 [ 50.355105][ T968] ? __kasan_check_read+0x15/0x20 [ 50.355123][ T968] __x64_sys_mprotect+0x84/0xa0 [ 50.355147][ T968] x64_sys_call+0x2590/0x2ee0 [ 50.355164][ T968] do_syscall_64+0x57/0xf0 [ 50.355185][ T968] ? clear_bhb_loop+0x50/0xa0 [ 50.355211][ T968] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.355235][ T968] RIP: 0033:0x7f7cd639e0d9 [ 50.355253][ T968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.355270][ T968] RSP: 002b:00007f7cd7313028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 50.355293][ T968] RAX: ffffffffffffffda RBX: 00007f7cd6625fa0 RCX: 00007f7cd639e0d9 [ 50.355309][ T968] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 50.355322][ T968] RBP: 00007f7cd7313090 R08: 0000000000000000 R09: 0000000000000000 [ 50.355335][ T968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.355348][ T968] R13: 00007f7cd6626038 R14: 00007f7cd6625fa0 R15: 00007ffd727e9778 [ 50.355365][ T968] [ 50.679914][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 50.761140][ T36] audit: type=1400 audit(1786101121.480:283): avc: denied { setopt } for pid=978 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.943620][ T13] bridge_slave_1: left allmulticast mode [ 50.949676][ T13] bridge_slave_1: left promiscuous mode [ 50.955769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.956683][ T36] audit: type=1400 audit(1786101121.690:284): avc: denied { mounton } for pid=990 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.988067][ T13] bridge_slave_0: left allmulticast mode [ 50.994112][ T13] bridge_slave_0: left promiscuous mode [ 50.999846][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.141104][ T399] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 51.166637][ T13] veth1_macvtap: left promiscuous mode [ 51.172813][ T13] veth0_vlan: left promiscuous mode [ 51.271491][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.278623][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.285941][ T990] bridge_slave_0: entered allmulticast mode [ 51.293246][ T399] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 51.304827][ T990] bridge_slave_0: entered promiscuous mode [ 51.311614][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.318849][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.324172][ T36] audit: type=1400 audit(1786101122.040:285): avc: denied { create } for pid=1005 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.326092][ T399] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 51.346324][ T990] bridge_slave_1: entered allmulticast mode [ 51.358303][ T399] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 51.379873][ T399] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.388008][ T399] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 51.398772][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.401764][ T990] bridge_slave_1: entered promiscuous mode [ 51.407691][ T36] audit: type=1400 audit(1786101122.110:286): avc: denied { cmd } for pid=1005 comm="iou-wrk-1006" path="socket:[10813]" dev="sockfs" ino=10813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.444499][ T399] usb 2-1: config 0 descriptor?? [ 51.583928][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.591128][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.598539][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.605720][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.652826][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.660029][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.667657][ T1009] bridge_slave_0: entered allmulticast mode [ 51.674493][ T1009] bridge_slave_0: entered promiscuous mode [ 51.681688][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.688750][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.695909][ T1009] bridge_slave_1: entered allmulticast mode [ 51.710826][ T1009] bridge_slave_1: entered promiscuous mode [ 51.726490][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.736159][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.752951][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.760303][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.769861][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.777039][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.803961][ T1023] loop5: detected capacity change from 0 to 7 [ 51.818179][ T1023] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.826374][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.834885][ T1023] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.844903][ T1023] loop5: unable to read partition table [ 51.850728][ T1023] loop_reread_partitions: partition scan of loop5 (Sj̳P=?}X 5`㫅) failed (rc=-5) [ 51.871224][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.872674][ T990] veth0_vlan: entered promiscuous mode [ 51.879269][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.909838][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.909967][ T990] veth1_macvtap: entered promiscuous mode [ 51.927485][ T1023] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.934466][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.942478][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.950699][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.950936][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.958074][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.976980][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.991600][ T314] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.043624][ T1009] veth0_vlan: entered promiscuous mode [ 52.075354][ T1009] veth1_macvtap: entered promiscuous mode [ 52.098501][ T1031] incfs: Options parsing error. -22 [ 52.123516][ T1031] incfs: mount failed -22 [ 52.169355][ T1034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 52.215513][ T1041] FAULT_INJECTION: forcing a failure. [ 52.215513][ T1041] name failslab, interval 1, probability 0, space 0, times 0 [ 52.240875][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: syz.0.229 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 52.240909][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.240921][ T1041] Call Trace: [ 52.240927][ T1041] [ 52.240960][ T1041] __dump_stack+0x21/0x30 [ 52.240996][ T1041] dump_stack_lvl+0x140/0x1c0 [ 52.241021][ T1041] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.241046][ T1041] ? release_sock+0x171/0x1f0 [ 52.241070][ T1041] dump_stack+0x19/0x20 [ 52.241105][ T1041] should_fail_ex+0x3c2/0x510 [ 52.241129][ T1041] should_failslab+0xac/0x100 [ 52.241152][ T1041] kmem_cache_alloc_node_noprof+0x45/0x420 [ 52.241174][ T1041] ? netlink_data_ready+0x20/0x20 [ 52.241192][ T1041] ? __alloc_skb+0x10c/0x360 [ 52.241220][ T1041] __alloc_skb+0x10c/0x360 [ 52.241246][ T1041] netlink_alloc_large_skb+0xf7/0x1b0 [ 52.241275][ T1041] netlink_sendmsg+0x576/0xad0 [ 52.241295][ T1041] ? __cfi_netlink_sendmsg+0x10/0x10 [ 52.241317][ T1041] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 52.241339][ T1041] ? security_socket_sendmsg+0x3d/0x100 [ 52.241368][ T1041] ____sys_sendmsg+0x9a1/0xa00 [ 52.241389][ T1041] ? __import_iovec+0x5b9/0x7d0 [ 52.241416][ T1041] ? __sys_sendmsg_sock+0x50/0x50 [ 52.241437][ T1041] ? import_iovec+0x80/0xb0 [ 52.241464][ T1041] ___sys_sendmsg+0x2a6/0x370 [ 52.241485][ T1041] ? __sys_sendmsg+0x2a0/0x2a0 [ 52.241505][ T1041] ? proc_fail_nth_write+0x184/0x220 [ 52.241534][ T1041] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.241564][ T1041] ? __fget_files+0x2bc/0x330 [ 52.241587][ T1041] __x64_sys_sendmsg+0x206/0x2e0 [ 52.241604][ T1041] ? fput+0x1a4/0x230 [ 52.241627][ T1041] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 52.241648][ T1041] ? ksys_write+0x1f3/0x260 [ 52.241670][ T1041] ? __kasan_check_read+0x15/0x20 [ 52.241690][ T1041] x64_sys_call+0x2a4c/0x2ee0 [ 52.241707][ T1041] do_syscall_64+0x57/0xf0 [ 52.241729][ T1041] ? clear_bhb_loop+0x50/0xa0 [ 52.241756][ T1041] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.241781][ T1041] RIP: 0033:0x7f559039e0d9 [ 52.241799][ T1041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.241817][ T1041] RSP: 002b:00007f558edf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.241840][ T1041] RAX: ffffffffffffffda RBX: 00007f5590625fa0 RCX: 00007f559039e0d9 [ 52.241856][ T1041] RDX: 0000000000008000 RSI: 0000200000002680 RDI: 0000000000000003 [ 52.241870][ T1041] RBP: 00007f558edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.241882][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.241895][ T1041] R13: 00007f5590626038 R14: 00007f5590625fa0 R15: 00007ffdc40be0f8 [ 52.241913][ T1041] [ 52.562700][ T399] usbhid 2-1:0.0: can't add hid device: -71 [ 52.569984][ T399] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.589124][ T399] usb 2-1: USB disconnect, device number 16 [ 52.591559][ T1048] fuse: Bad value for 'user_id' [ 52.600412][ T1048] fuse: Bad value for 'user_id' [ 52.607864][ T46] bridge_slave_1: left allmulticast mode [ 52.621210][ T46] bridge_slave_1: left promiscuous mode [ 52.627404][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.636336][ T46] bridge_slave_0: left allmulticast mode [ 52.642590][ T46] bridge_slave_0: left promiscuous mode [ 52.670071][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.879461][ T46] veth1_macvtap: left promiscuous mode [ 52.892430][ T46] veth0_vlan: left promiscuous mode [ 52.952109][ T1072] FAULT_INJECTION: forcing a failure. [ 52.952109][ T1072] name failslab, interval 1, probability 0, space 0, times 0 [ 52.971285][ T1072] CPU: 0 UID: 0 PID: 1072 Comm: syz.5.241 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 52.971319][ T1072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.971331][ T1072] Call Trace: [ 52.971337][ T1072] [ 52.971344][ T1072] __dump_stack+0x21/0x30 [ 52.971376][ T1072] dump_stack_lvl+0x140/0x1c0 [ 52.971401][ T1072] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.971427][ T1072] dump_stack+0x19/0x20 [ 52.971451][ T1072] should_fail_ex+0x3c2/0x510 [ 52.971473][ T1072] should_failslab+0xac/0x100 [ 52.971496][ T1072] __kmalloc_node_noprof+0x69/0x500 [ 52.971514][ T1072] ? __kvmalloc_node_noprof+0x128/0x300 [ 52.971539][ T1072] __kvmalloc_node_noprof+0x128/0x300 [ 52.971564][ T1072] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 52.971591][ T1072] ? percpu_ref_init+0x230/0x4d0 [ 52.971612][ T1072] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 52.971633][ T1072] io_ring_ctx_alloc+0x428/0x1dc0 [ 52.971653][ T1072] io_uring_create+0x2e0/0x13f0 [ 52.971672][ T1072] ? __kasan_check_write+0x18/0x20 [ 52.971692][ T1072] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 52.971717][ T1072] ? __kasan_check_write+0x18/0x20 [ 52.971736][ T1072] ? __x64_sys_io_uring_setup+0x80/0x80 [ 52.971764][ T1072] ? __kasan_check_read+0x15/0x20 [ 52.971783][ T1072] __x64_sys_io_uring_setup+0x5f/0x80 [ 52.971809][ T1072] x64_sys_call+0x22c0/0x2ee0 [ 52.971827][ T1072] do_syscall_64+0x57/0xf0 [ 52.971850][ T1072] ? clear_bhb_loop+0x50/0xa0 [ 52.971877][ T1072] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.971901][ T1072] RIP: 0033:0x7f4f1e39e0d9 [ 52.971918][ T1072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.971935][ T1072] RSP: 002b:00007f4f1cdf6ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 52.971960][ T1072] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4f1e39e0d9 [ 52.971975][ T1072] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000a97 [ 52.971989][ T1072] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 52.972055][ T1072] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 52.972069][ T1072] R13: 0000200000000b10 R14: 00007f4f1cdf6fd8 R15: 0000000000000000 [ 52.972086][ T1072] [ 53.374314][ T1083] overlay: ./file0 is not a directory [ 53.414589][ T1085] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 53.564564][ T13] bridge_slave_1: left allmulticast mode [ 53.572715][ T13] bridge_slave_1: left promiscuous mode [ 53.593774][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.624570][ T13] bridge_slave_0: left allmulticast mode [ 53.630355][ T13] bridge_slave_0: left promiscuous mode [ 53.645762][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.794404][ T13] veth1_macvtap: left promiscuous mode [ 53.801580][ T13] veth0_vlan: left promiscuous mode [ 53.974175][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.981422][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.989790][ T1098] bridge_slave_0: entered allmulticast mode [ 53.996302][ T1098] bridge_slave_0: entered promiscuous mode [ 54.004475][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.011862][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.019372][ T1098] bridge_slave_1: entered allmulticast mode [ 54.029400][ T1098] bridge_slave_1: entered promiscuous mode [ 54.101034][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.108224][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.115684][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.125207][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.155773][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.164224][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.175361][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.182469][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.196674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.204679][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.237010][ T1098] veth0_vlan: entered promiscuous mode [ 54.254477][ T1098] veth1_macvtap: entered promiscuous mode [ 54.326167][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 54.326207][ T36] audit: type=1400 audit(1786101125.050:305): avc: denied { create } for pid=1115 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.627779][ T317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.645779][ T36] audit: type=1400 audit(1786101125.370:306): avc: denied { append } for pid=1128 comm="syz.4.266" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.780328][ T1140] FAULT_INJECTION: forcing a failure. [ 54.780328][ T1140] name failslab, interval 1, probability 0, space 0, times 0 [ 54.794143][ T1140] CPU: 0 UID: 0 PID: 1140 Comm: syz.4.269 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 54.794185][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.794198][ T1140] Call Trace: [ 54.794204][ T1140] [ 54.794212][ T1140] __dump_stack+0x21/0x30 [ 54.794244][ T1140] dump_stack_lvl+0x140/0x1c0 [ 54.794270][ T1140] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.794308][ T1140] ? is_bpf_text_address+0x17b/0x1a0 [ 54.794337][ T1140] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 54.794362][ T1140] dump_stack+0x19/0x20 [ 54.794387][ T1140] should_fail_ex+0x3c2/0x510 [ 54.794410][ T1140] should_failslab+0xac/0x100 [ 54.794432][ T1140] __kmalloc_node_noprof+0x69/0x500 [ 54.794467][ T1140] ? __kvmalloc_node_noprof+0x128/0x300 [ 54.794495][ T1140] ? __kasan_check_write+0x18/0x20 [ 54.794514][ T1140] __kvmalloc_node_noprof+0x128/0x300 [ 54.794543][ T1140] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 54.794581][ T1140] ? xas_start+0x317/0x3e0 [ 54.794604][ T1140] ? __kasan_check_write+0x18/0x20 [ 54.794623][ T1140] ? enqueue_timer+0x1c5/0x4b0 [ 54.794649][ T1140] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 54.794678][ T1140] ? mutex_unlock+0x90/0x240 [ 54.794704][ T1140] kvm_mmu_topup_memory_cache+0x24/0x30 [ 54.794730][ T1140] kvm_mmu_load+0xa1/0x2900 [ 54.794754][ T1140] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 54.794781][ T1140] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 54.794804][ T1140] ? kvm_apic_has_interrupt+0x77a/0x790 [ 54.794829][ T1140] ? kvm_vcpu_flush_tlb_guest+0xfe/0x220 [ 54.794858][ T1140] vcpu_run+0x4d72/0x7830 [ 54.794883][ T1140] ? kvm_sched_clock_read+0x15/0x30 [ 54.794921][ T1140] ? signal_pending+0xc0/0xc0 [ 54.794945][ T1140] ? __kasan_check_write+0x18/0x20 [ 54.794963][ T1140] ? xfd_validate_state+0x68/0x140 [ 54.794988][ T1140] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 54.795011][ T1140] ? __kasan_check_write+0x18/0x20 [ 54.795029][ T1140] ? fpregs_mark_activate+0x68/0x160 [ 54.795051][ T1140] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 54.795072][ T1140] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 54.795094][ T1140] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 54.795120][ T1140] ? _parse_integer_limit+0x195/0x1e0 [ 54.795141][ T1140] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 54.795167][ T1140] ? kstrtoull+0x13b/0x1e0 [ 54.795187][ T1140] ? kstrtouint+0x78/0xf0 [ 54.795206][ T1140] ? ioctl_has_perm+0x1bc/0x500 [ 54.795227][ T1140] ? __asan_memcpy+0x5a/0x80 [ 54.795245][ T1140] ? ioctl_has_perm+0x408/0x500 [ 54.795263][ T1140] ? has_cap_mac_admin+0xd0/0xd0 [ 54.795282][ T1140] ? __kasan_check_write+0x18/0x20 [ 54.795300][ T1140] ? mutex_lock_killable+0x97/0x1d0 [ 54.795327][ T1140] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.795352][ T1140] ? proc_fail_nth_write+0x184/0x220 [ 54.795381][ T1140] kvm_vcpu_ioctl+0xa43/0x1000 [ 54.795401][ T1140] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.795420][ T1140] ? __cfi_vfs_write+0x10/0x10 [ 54.795440][ T1140] ? __kasan_check_write+0x18/0x20 [ 54.795457][ T1140] ? mutex_unlock+0x90/0x240 [ 54.795481][ T1140] ? __cfi_mutex_unlock+0x10/0x10 [ 54.795510][ T1140] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.795534][ T1140] ? security_file_ioctl+0x3e/0x110 [ 54.795570][ T1140] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.795588][ T1140] __se_sys_ioctl+0x135/0x1b0 [ 54.795612][ T1140] __x64_sys_ioctl+0x7f/0xa0 [ 54.795635][ T1140] x64_sys_call+0x1878/0x2ee0 [ 54.795652][ T1140] do_syscall_64+0x57/0xf0 [ 54.795672][ T1140] ? clear_bhb_loop+0x50/0xa0 [ 54.795698][ T1140] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.795723][ T1140] RIP: 0033:0x7f531f39e0d9 [ 54.795741][ T1140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.795757][ T1140] RSP: 002b:00007f5320301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.795780][ T1140] RAX: ffffffffffffffda RBX: 00007f531f625fa0 RCX: 00007f531f39e0d9 [ 54.795796][ T1140] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 54.795808][ T1140] RBP: 00007f5320301090 R08: 0000000000000000 R09: 0000000000000000 [ 54.795822][ T1140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.795835][ T1140] R13: 00007f531f626038 R14: 00007f531f625fa0 R15: 00007ffecb61b0f8 [ 54.795851][ T1140] [ 54.796966][ T317] usb 7-1: unable to get BOS descriptor or descriptor too short [ 55.262621][ T317] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.277099][ T36] audit: type=1400 audit(1786101126.000:307): avc: denied { bind } for pid=1145 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.291036][ T317] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.351590][ T317] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 55.361199][ T317] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.369301][ T317] usb 7-1: Product: syz [ 55.375027][ T317] usb 7-1: Manufacturer: syz [ 55.379927][ T317] usb 7-1: SerialNumber: syz [ 55.392904][ T317] usb 7-1: selecting invalid altsetting 1 [ 55.399406][ T317] usb 7-1: unit 6 not found! [ 55.438808][ T1154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 55.451209][ T36] audit: type=1400 audit(1786101126.180:308): avc: denied { getopt } for pid=1153 comm="syz.4.275" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.199972][ T317] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 56.223137][ T317] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 56.240498][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.259843][ T317] usb 7-1: USB disconnect, device number 2 [ 57.131057][ T312] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.246591][ T1182] fuse: Bad value for 'user_id' [ 57.251859][ T1182] fuse: Bad value for 'user_id' [ 57.281060][ T312] usb 7-1: Using ep0 maxpacket: 8 [ 57.292333][ T312] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.308642][ T312] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 57.328976][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.351946][ T312] usb 7-1: config 0 descriptor?? [ 57.365218][ T36] audit: type=1400 audit(1786101128.090:309): avc: denied { setopt } for pid=1183 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.508437][ T1187] coredump: 192(syz.1.286): Core dump to core aborted: cannot preserve file permissions [ 57.564828][ T36] audit: type=1400 audit(1786101128.290:310): avc: denied { create } for pid=1183 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.679999][ T1194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.692671][ T1194] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 57.700522][ T1194] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 57.763757][ T1180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.781072][ T1200] netlink: 'syz.1.290': attribute type 13 has an invalid length. [ 57.782076][ T1180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.824383][ T312] hid (null): invalid report_count 2060869942 [ 57.840415][ T312] logitech-djreceiver 0003:046D:C534.000A: unknown main item tag 0x4 [ 57.850210][ T312] logitech-djreceiver 0003:046D:C534.000A: unexpected long global item [ 57.867671][ T312] logitech-djreceiver 0003:046D:C534.000A: logi_dj_probe: parse failed [ 57.881413][ T312] logitech-djreceiver 0003:046D:C534.000A: probe with driver logitech-djreceiver failed with error -22 [ 58.026774][ T312] usb 7-1: USB disconnect, device number 3 [ 58.385010][ T1211] incfs: Backing dir is not set, filesystem can't be mounted. [ 58.392766][ T1211] incfs: mount failed -2 [ 58.599388][ T1223] FAULT_INJECTION: forcing a failure. [ 58.599388][ T1223] name failslab, interval 1, probability 0, space 0, times 0 [ 58.612546][ T36] audit: type=1400 audit(1786101129.320:311): avc: denied { search } for pid=1222 comm="syz.6.300" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.634938][ T1223] CPU: 1 UID: 0 PID: 1223 Comm: syz.6.300 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 58.634972][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.634983][ T1223] Call Trace: [ 58.634989][ T1223] [ 58.634996][ T1223] __dump_stack+0x21/0x30 [ 58.635027][ T1223] dump_stack_lvl+0x140/0x1c0 [ 58.635052][ T1223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.635080][ T1223] dump_stack+0x19/0x20 [ 58.635104][ T1223] should_fail_ex+0x3c2/0x510 [ 58.635127][ T1223] should_failslab+0xac/0x100 [ 58.635151][ T1223] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 58.635174][ T1223] ? __kasan_kmalloc+0x96/0xb0 [ 58.635196][ T1223] ? create_filter_start+0xfd/0x380 [ 58.635220][ T1223] kstrdup+0x4d/0x130 [ 58.635246][ T1223] ? create_filter_start+0xef/0x380 [ 58.635271][ T1223] create_filter_start+0xfd/0x380 [ 58.635295][ T1223] ? strim+0x190/0x1d0 [ 58.635313][ T1223] apply_event_filter+0x184/0x460 [ 58.635337][ T1223] ? _copy_from_user+0x87/0xa0 [ 58.635363][ T1223] event_filter_write+0x166/0x200 [ 58.635384][ T1223] ? __cfi_event_filter_write+0x10/0x10 [ 58.635403][ T1223] vfs_write+0x3c1/0xfd0 [ 58.635423][ T1223] ? __cfi_vfs_write+0x10/0x10 [ 58.635443][ T1223] ? __kasan_check_write+0x18/0x20 [ 58.635462][ T1223] ? mutex_lock+0x97/0x1d0 [ 58.635487][ T1223] ? __cfi_mutex_lock+0x10/0x10 [ 58.635525][ T1223] ksys_write+0x145/0x260 [ 58.635545][ T1223] ? __cfi_ksys_write+0x10/0x10 [ 58.635565][ T1223] ? __kasan_check_read+0x15/0x20 [ 58.635585][ T1223] __x64_sys_write+0x7f/0x90 [ 58.635604][ T1223] x64_sys_call+0x271c/0x2ee0 [ 58.635622][ T1223] do_syscall_64+0x57/0xf0 [ 58.635644][ T1223] ? clear_bhb_loop+0x50/0xa0 [ 58.635671][ T1223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.635695][ T1223] RIP: 0033:0x7f17d159e0d9 [ 58.635712][ T1223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.635729][ T1223] RSP: 002b:00007f17d252d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.635753][ T1223] RAX: ffffffffffffffda RBX: 00007f17d1825fa0 RCX: 00007f17d159e0d9 [ 58.635769][ T1223] RDX: 0000000000000016 RSI: 0000200000000540 RDI: 0000000000000003 [ 58.635782][ T1223] RBP: 00007f17d252d090 R08: 0000000000000000 R09: 0000000000000000 [ 58.635795][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.635807][ T1223] R13: 00007f17d1826038 R14: 00007f17d1825fa0 R15: 00007ffc81da6df8 [ 58.635824][ T1223] [ 58.841150][ T36] audit: type=1400 audit(1786101129.320:312): avc: denied { write } for pid=1222 comm="syz.6.300" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.841981][ T339] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.850611][ T36] audit: type=1400 audit(1786101129.320:313): avc: denied { open } for pid=1222 comm="syz.6.300" path="/7/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.956933][ T36] audit: type=1400 audit(1786101129.590:314): avc: denied { unmount } for pid=1098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.011048][ T339] usb 5-1: Using ep0 maxpacket: 32 [ 59.017626][ T339] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 59.026075][ T339] usb 5-1: config 0 has no interface number 0 [ 59.032223][ T339] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 59.042907][ T339] usb 5-1: config 0 interface 196 has no altsetting 0 [ 59.051193][ T339] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 59.060583][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.068666][ T339] usb 5-1: Product: syz [ 59.073088][ T339] usb 5-1: Manufacturer: syz [ 59.077721][ T339] usb 5-1: SerialNumber: syz [ 59.083369][ T339] usb 5-1: config 0 descriptor?? [ 59.088632][ T1215] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.431043][ T312] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.568774][ T1234] incfs: Backing dir is not set, filesystem can't be mounted. [ 59.586679][ T1234] incfs: mount failed -2 [ 59.594078][ T312] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.605117][ T312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.624243][ T312] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.656254][ T312] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.662739][ T1236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.666130][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.692166][ T312] usb 7-1: Product: syz [ 59.698768][ T312] usb 7-1: Manufacturer: syz [ 59.701232][ T1236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.705645][ T312] usb 7-1: SerialNumber: syz [ 59.724403][ T312] hub 7-1:1.0: bad descriptor, ignoring hub [ 59.731813][ T312] hub 7-1:1.0: probe with driver hub failed with error -5 [ 59.801139][ T339] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 59.810002][ T339] ipheth 5-1:0.196: probe with driver ipheth failed with error -110 [ 59.925394][ T312] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.062212][ T36] audit: type=1400 audit(1786101130.790:315): avc: denied { bind } for pid=1239 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.111085][ T36] audit: type=1400 audit(1786101130.790:316): avc: denied { listen } for pid=1239 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.151119][ T36] audit: type=1400 audit(1786101130.810:317): avc: denied { accept } for pid=1239 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.156441][ T398] usb 5-1: USB disconnect, device number 2 [ 60.231440][ T339] usb 7-1: USB disconnect, device number 4 [ 60.238532][ T339] usblp0: removed [ 60.379412][ T1245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.406715][ T1245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.416158][ T1245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.624521][ T36] audit: type=1400 audit(1786101131.350:318): avc: denied { accept } for pid=1253 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.891059][ T312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.971061][ T339] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 61.042516][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 61.057395][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 61.069432][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 61.082855][ T312] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.092637][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.100937][ T312] usb 5-1: Product: syz [ 61.105720][ T312] usb 5-1: Manufacturer: syz [ 61.110523][ T312] usb 5-1: SerialNumber: syz [ 61.119839][ T312] usb 5-1: config 0 descriptor?? [ 61.126891][ T312] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 61.141059][ T339] usb 7-1: Using ep0 maxpacket: 32 [ 61.147695][ T339] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 61.156203][ T339] usb 7-1: config 0 has no interface number 0 [ 61.162938][ T339] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 61.174658][ T339] usb 7-1: config 0 interface 196 has no altsetting 0 [ 61.183424][ T339] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 61.193001][ T339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.205307][ T339] usb 7-1: Product: syz [ 61.209724][ T339] usb 7-1: Manufacturer: syz [ 61.214699][ T339] usb 7-1: SerialNumber: syz [ 61.224740][ T339] usb 7-1: config 0 descriptor?? [ 61.230132][ T1256] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 61.342119][ T312] usb 5-1: USB disconnect, device number 3 [ 61.688591][ T339] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 61.705901][ T339] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 61.731610][ T339] usb 7-1: USB disconnect, device number 5 [ 61.805611][ T36] audit: type=1400 audit(1786101132.530:319): avc: denied { remount } for pid=1291 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.039096][ T36] audit: type=1400 audit(1786101392.816:320): avc: denied { name_bind } for pid=1309 comm="syz.1.336" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.075883][ T1313] tipc: Started in network mode [ 62.080831][ T1313] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 62.090235][ T339] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 62.098485][ T1313] tipc: Enabled bearer , priority 10 [ 62.252777][ T339] usb 7-1: unable to get BOS descriptor or descriptor too short [ 62.261243][ T312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.269684][ T339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.280325][ T339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.291856][ T339] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 62.301155][ T339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.309182][ T339] usb 7-1: Product: syz [ 62.313740][ T339] usb 7-1: Manufacturer: syz [ 62.318373][ T339] usb 7-1: SerialNumber: syz [ 62.330734][ T339] usb 7-1: selecting invalid altsetting 1 [ 62.337041][ T339] usb 7-1: unit 6 not found! [ 62.421079][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 62.427387][ T312] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 62.436130][ T312] usb 5-1: config 0 has no interface number 0 [ 62.449960][ T312] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 62.460346][ T312] usb 5-1: config 0 interface 196 has no altsetting 0 [ 62.468945][ T312] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 62.478456][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.487079][ T312] usb 5-1: Product: syz [ 62.492448][ T312] usb 5-1: Manufacturer: syz [ 62.497248][ T312] usb 5-1: SerialNumber: syz [ 62.505539][ T312] usb 5-1: config 0 descriptor?? [ 62.511190][ T1306] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 62.669804][ T1322] x_tables: duplicate underflow at hook 1 [ 62.989047][ T312] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 63.006944][ T312] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 63.020286][ T312] usb 5-1: USB disconnect, device number 4 [ 63.136029][ T339] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 63.157158][ T339] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.181741][ T339] usb 7-1: USB disconnect, device number 6 [ 63.195362][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.211094][ T312] tipc: Node number set to 4269801492 [ 63.239215][ T1335] 9pnet_fd: Insufficient options for proto=fd [ 63.299392][ T36] audit: type=1400 audit(1786101394.076:321): avc: denied { ioctl } for pid=1337 comm="syz.4.348" path="socket:[12188]" dev="sockfs" ino=12188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.394361][ T36] audit: type=1400 audit(1786101394.176:322): avc: denied { create } for pid=1340 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.629928][ T1358] 9pnet_fd: Insufficient options for proto=fd [ 63.656403][ T1358] netlink: 96 bytes leftover after parsing attributes in process `syz.1.355'. [ 63.661042][ T36] audit: type=1400 audit(1786101394.436:323): avc: denied { write } for pid=1357 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.715051][ T36] audit: type=1400 audit(1786101394.436:324): avc: denied { nlmsg_write } for pid=1357 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.921076][ T317] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.014282][ T1379] netlink: 96 bytes leftover after parsing attributes in process `syz.1.365'. [ 64.081041][ T317] usb 7-1: Using ep0 maxpacket: 8 [ 64.101768][ T317] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.112277][ T317] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 64.141037][ T317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.151366][ T317] usb 7-1: config 0 descriptor?? [ 64.157650][ T317] usb 7-1: bad CDC descriptors [ 64.359944][ T1360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.375752][ T1360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.392287][ T339] usb 7-1: USB disconnect, device number 7 [ 64.611063][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.771045][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 64.777620][ T45] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 64.786231][ T45] usb 5-1: config 0 has no interface number 0 [ 64.792654][ T45] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 64.803181][ T45] usb 5-1: config 0 interface 196 has no altsetting 0 [ 64.812055][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 64.821528][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.830070][ T45] usb 5-1: Product: syz [ 64.834743][ T45] usb 5-1: Manufacturer: syz [ 64.839541][ T45] usb 5-1: SerialNumber: syz [ 64.849432][ T45] usb 5-1: config 0 descriptor?? [ 64.855319][ T1392] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 65.261063][ T317] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 65.422082][ T317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.433109][ T317] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.442585][ T317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.461733][ T317] usb 7-1: config 0 descriptor?? [ 65.572209][ T45] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 65.580510][ T45] ipheth 5-1:0.196: probe with driver ipheth failed with error -110 [ 65.672547][ T317] usbhid 7-1:0.0: can't add hid device: -71 [ 65.678724][ T317] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 65.691772][ T317] usb 7-1: USB disconnect, device number 8 [ 66.081913][ T1431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.386'. [ 66.091580][ T1431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.386'. [ 66.140687][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 66.140704][ T36] audit: type=1400 audit(1786101396.916:330): avc: denied { connect } for pid=1436 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.172255][ T317] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 66.250496][ T12] tipc: Subscription rejected, illegal request [ 66.326459][ T1450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.349570][ T1450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.400834][ T317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.414003][ T1455] tipc: Started in network mode [ 66.420328][ T1455] tipc: Node identity ac14140f, cluster identity 4711 [ 66.427650][ T317] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 66.437134][ T317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.446879][ T1455] tipc: New replicast peer: 255.255.255.255 [ 66.459589][ T317] usb 7-1: config 0 descriptor?? [ 66.465028][ T1455] tipc: Enabled bearer , priority 10 [ 66.535214][ T36] audit: type=1400 audit(1786101397.316:331): avc: denied { watch } for pid=1464 comm="syz.4.398" path="/46" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.558801][ T36] audit: type=1400 audit(1786101397.316:332): avc: denied { read } for pid=1464 comm="syz.4.398" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.595745][ T36] audit: type=1400 audit(1786101397.316:333): avc: denied { open } for pid=1464 comm="syz.4.398" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.620227][ T36] audit: type=1400 audit(1786101397.316:334): avc: denied { ioctl } for pid=1464 comm="syz.4.398" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.927793][ T36] audit: type=1400 audit(1786101397.706:335): avc: denied { map } for pid=1475 comm="syz.4.402" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.281549][ T317] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 67.291299][ T317] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 67.311817][ C1] ------------[ cut here ]------------ [ 67.317997][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 67.327032][ C1] index 8194 is out of range for type 'const int[34]' [ 67.333913][ C1] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 67.333936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.333944][ C1] Call Trace: [ 67.333949][ C1] [ 67.333954][ C1] __dump_stack+0x21/0x30 [ 67.333986][ C1] dump_stack_lvl+0x140/0x1c0 [ 67.334004][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.334032][ C1] dump_stack+0x19/0x20 [ 67.334049][ C1] ubsan_epilogue+0xe/0x40 [ 67.334060][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 67.334080][ C1] aiptek_irq+0x208d/0x2a00 [ 67.334098][ C1] ? __cfi_mon_bin_complete+0x10/0x10 [ 67.334115][ C1] ? _raw_spin_unlock+0x45/0x60 [ 67.334131][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 67.334145][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 67.334165][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 67.334183][ C1] dummy_timer+0xa3f/0x4900 [ 67.334200][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 67.334213][ C1] ? timerqueue_del+0xd7/0x130 [ 67.334225][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 67.334244][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 67.334255][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 67.334275][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 67.334293][ C1] ? read_tsc+0xd/0x20 [ 67.334318][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 67.334345][ C1] hrtimer_run_softirq+0x159/0x560 [ 67.334365][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 67.334382][ C1] handle_softirqs+0x1aa/0x620 [ 67.334396][ C1] __irq_exit_rcu+0x47/0xb0 [ 67.334408][ C1] irq_exit_rcu+0xd/0x30 [ 67.334419][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 67.334438][ C1] [ 67.334442][ C1] [ 67.334446][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 67.334463][ C1] RIP: 0010:get_stack_info_noinstr+0x105/0x130 [ 67.334486][ C1] Code: 49 01 d4 49 8d 14 0c 42 0f b7 34 fd 06 d5 e4 85 89 33 4c 89 63 08 48 89 53 10 4a 8b 4c 21 f0 48 89 4b 18 5b 41 5c 41 5e 41 5f <5d> c3 cc cc cc cc cc 48 c7 c7 c0 87 4b 87 4c 89 fe e8 55 84 42 fd [ 67.334498][ C1] RSP: 0018:ffffc9000b5ff480 EFLAGS: 00000202 [ 67.334511][ C1] RAX: ffff88811fefdf01 RBX: ffffc9000b5ff548 RCX: 000000001fefdf01 [ 67.334521][ C1] RDX: ffffc9000b5ff528 RSI: ffffc9000b600000 RDI: ffffc9000b5ff518 [ 67.334530][ C1] RBP: ffffc9000b5ff480 R08: ffffc9000b5ff501 R09: 0000000000000000 [ 67.334539][ C1] R10: ffffc9000b5ff528 R11: fffff520016bfeb1 R12: 0000000000000000 [ 67.334548][ C1] R13: ffffc9000b5ff518 R14: ffffc9000b5ff528 R15: ffff88811fefdf00 [ 67.334559][ C1] get_stack_info+0x3e/0x100 [ 67.334571][ C1] __unwind_start+0x20a/0x400 [ 67.334587][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 67.334602][ C1] arch_stack_walk+0xf2/0x170 [ 67.334614][ C1] stack_trace_save+0xaa/0x100 [ 67.334628][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 67.334642][ C1] kasan_save_track+0x3e/0x80 [ 67.334661][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 67.334680][ C1] kasan_save_alloc_info+0x3a/0x50 [ 67.334700][ C1] __kasan_slab_alloc+0x73/0x90 [ 67.334725][ C1] kmem_cache_alloc_noprof+0x1bf/0x410 [ 67.334747][ C1] ? alloc_empty_file+0xbf/0x270 [ 67.334776][ C1] alloc_empty_file+0xbf/0x270 [ 67.334793][ C1] path_openat+0xf4/0x35a0 [ 67.334810][ C1] ? stack_depot_save_flags+0x38/0x800 [ 67.334825][ C1] ? kasan_save_track+0x4f/0x80 [ 67.334838][ C1] ? kasan_save_track+0x3e/0x80 [ 67.334851][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 67.334869][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 67.334883][ C1] ? getname+0x1b/0x30 [ 67.334897][ C1] ? do_sys_openat2+0xda/0x1d0 [ 67.334913][ C1] ? __x64_sys_openat+0x13a/0x170 [ 67.334930][ C1] ? x64_sys_call+0xe69/0x2ee0 [ 67.334941][ C1] ? do_syscall_64+0x57/0xf0 [ 67.334956][ C1] ? do_filp_open+0x440/0x440 [ 67.334982][ C1] do_filp_open+0x1f2/0x440 [ 67.334998][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 67.335018][ C1] ? alloc_fd+0x4c1/0x570 [ 67.335034][ C1] do_sys_openat2+0x134/0x1d0 [ 67.335052][ C1] ? do_sys_open+0x100/0x100 [ 67.335070][ C1] ? __cfi_do_unlinkat+0x10/0x10 [ 67.335089][ C1] __x64_sys_openat+0x13a/0x170 [ 67.335109][ C1] x64_sys_call+0xe69/0x2ee0 [ 67.335120][ C1] do_syscall_64+0x57/0xf0 [ 67.335133][ C1] ? clear_bhb_loop+0x50/0xa0 [ 67.335160][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.335176][ C1] RIP: 0033:0x7f5590359257 [ 67.335187][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 67.335197][ C1] RSP: 002b:00007ffdc40ba000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 67.335215][ C1] RAX: ffffffffffffffda RBX: 000055555750c500 RCX: 00007f5590359257 [ 67.335225][ C1] RDX: 0000000000000000 RSI: 00007ffdc40ba150 RDI: ffffffffffffff9c [ 67.335234][ C1] RBP: 00007ffdc40ba150 R08: 0000000000000000 R09: 0000000000000000 [ 67.335245][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdc40bb240 [ 67.335253][ C1] R13: 00007f5590434474 R14: 000055555750c4e8 R15: 0000000000000008 [ 67.335263][ C1] [ 67.335268][ C1] ---[ end trace ]--- [ 67.581092][ T317] tipc: Node number set to 2886997007 [ 67.589188][ C1] ------------[ cut here ]------------ [ 67.589203][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 67.589225][ C1] index 8195 is out of range for type 'const int[34]' [ 67.589238][ C1] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 67.589270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.589282][ C1] Call Trace: [ 67.589289][ C1] [ 67.589297][ C1] __dump_stack+0x21/0x30 [ 67.589337][ C1] dump_stack_lvl+0x140/0x1c0 [ 67.589362][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.589388][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 67.589417][ C1] dump_stack+0x19/0x20 [ 67.589442][ C1] ubsan_epilogue+0xe/0x40 [ 67.589459][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 67.589488][ C1] aiptek_irq+0x1f3c/0x2a00 [ 67.589512][ C1] ? __cfi_mon_bin_complete+0x10/0x10 [ 67.589537][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 67.589558][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 67.589588][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 67.589616][ C1] dummy_timer+0xa3f/0x4900 [ 67.589649][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 67.589668][ C1] ? timerqueue_del+0xd7/0x130 [ 67.589687][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 67.589716][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 67.589734][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 67.589763][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 67.589789][ C1] ? read_tsc+0xd/0x20 [ 67.589814][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 67.589838][ C1] hrtimer_run_softirq+0x159/0x560 [ 67.589857][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 67.589885][ C1] handle_softirqs+0x1aa/0x620 [ 67.589906][ C1] __irq_exit_rcu+0x47/0xb0 [ 67.589925][ C1] irq_exit_rcu+0xd/0x30 [ 67.589942][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 67.589971][ C1] [ 67.589977][ C1] [ 67.589985][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 67.590011][ C1] RIP: 0010:get_stack_info_noinstr+0x105/0x130 [ 67.590040][ C1] Code: 49 01 d4 49 8d 14 0c 42 0f b7 34 fd 06 d5 e4 85 89 33 4c 89 63 08 48 89 53 10 4a 8b 4c 21 f0 48 89 4b 18 5b 41 5c 41 5e 41 5f <5d> c3 cc cc cc cc cc 48 c7 c7 c0 87 4b 87 4c 89 fe e8 55 84 42 fd [ 67.590056][ C1] RSP: 0018:ffffc9000b5ff480 EFLAGS: 00000202 [ 67.590076][ C1] RAX: ffff88811fefdf01 RBX: ffffc9000b5ff548 RCX: 000000001fefdf01 [ 67.590092][ C1] RDX: ffffc9000b5ff528 RSI: ffffc9000b600000 RDI: ffffc9000b5ff518 [ 67.590107][ C1] RBP: ffffc9000b5ff480 R08: ffffc9000b5ff501 R09: 0000000000000000 [ 67.590121][ C1] R10: ffffc9000b5ff528 R11: fffff520016bfeb1 R12: 0000000000000000 [ 67.590135][ C1] R13: ffffc9000b5ff518 R14: ffffc9000b5ff528 R15: ffff88811fefdf00 [ 67.590152][ C1] get_stack_info+0x3e/0x100 [ 67.590173][ C1] __unwind_start+0x20a/0x400 [ 67.590196][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 67.590220][ C1] arch_stack_walk+0xf2/0x170 [ 67.590240][ C1] stack_trace_save+0xaa/0x100 [ 67.590262][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 67.590285][ C1] kasan_save_track+0x3e/0x80 [ 67.590312][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 67.590355][ C1] kasan_save_alloc_info+0x3a/0x50 [ 67.590382][ C1] __kasan_slab_alloc+0x73/0x90 [ 67.590405][ C1] kmem_cache_alloc_noprof+0x1bf/0x410 [ 67.590425][ C1] ? alloc_empty_file+0xbf/0x270 [ 67.590451][ C1] alloc_empty_file+0xbf/0x270 [ 67.590475][ C1] path_openat+0xf4/0x35a0 [ 67.590500][ C1] ? stack_depot_save_flags+0x38/0x800 [ 67.590523][ C1] ? kasan_save_track+0x4f/0x80 [ 67.590544][ C1] ? kasan_save_track+0x3e/0x80 [ 67.590564][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 67.590591][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 67.590613][ C1] ? getname+0x1b/0x30 [ 67.590633][ C1] ? do_sys_openat2+0xda/0x1d0 [ 67.590659][ C1] ? __x64_sys_openat+0x13a/0x170 [ 67.590684][ C1] ? x64_sys_call+0xe69/0x2ee0 [ 67.590702][ C1] ? do_syscall_64+0x57/0xf0 [ 67.590724][ C1] ? do_filp_open+0x440/0x440 [ 67.590750][ C1] do_filp_open+0x1f2/0x440 [ 67.590774][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 67.590801][ C1] ? alloc_fd+0x4c1/0x570 [ 67.590824][ C1] do_sys_openat2+0x134/0x1d0 [ 67.590849][ C1] ? do_sys_open+0x100/0x100 [ 67.590876][ C1] ? __cfi_do_unlinkat+0x10/0x10 [ 67.590902][ C1] __x64_sys_openat+0x13a/0x170 [ 67.590929][ C1] x64_sys_call+0xe69/0x2ee0 [ 67.590946][ C1] do_syscall_64+0x57/0xf0 [ 67.590967][ C1] ? clear_bhb_loop+0x50/0xa0 [ 67.590991][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.591015][ C1] RIP: 0033:0x7f5590359257 [ 67.591031][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 67.591046][ C1] RSP: 002b:00007ffdc40ba000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 67.591066][ C1] RAX: ffffffffffffffda RBX: 000055555750c500 RCX: 00007f5590359257 [ 67.591080][ C1] RDX: 0000000000000000 RSI: 00007ffdc40ba150 RDI: ffffffffffffff9c [ 67.591095][ C1] RBP: 00007ffdc40ba150 R08: 0000000000000000 R09: 0000000000000000 [ 67.591107][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdc40bb240 [ 67.591120][ C1] R13: 00007f5590434474 R14: 000055555750c4e8 R15: 0000000000000008 [ 67.591136][ C1] [ 67.591144][ C1] ---[ end trace ]--- [ 68.670478][ T317] usb 7-1: USB disconnect, device number 9 [ 68.670560][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19