last executing test programs: 3.25405784s ago: executing program 3 (id=401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='\xb5\xfa\a\x00\x00\x00\xf7Dd\xc8:') mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0xcc840000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfd, 0x2, @loopback}, 0x1c) 2.411204831s ago: executing program 3 (id=406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4002, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "64d78a0dd202ac4e"}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x2103) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x1f00, 0xffffffff}, 0x1c) r3 = open(&(0x7f0000000240)='./file0\x00', 0x101002, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000300)=0x4c11, 0x4) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7", 0xfffffe6c}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) keyctl$set_reqkey_keyring(0xe, 0x3) sendto$inet6(r0, &(0x7f0000000180)="fb12e5b1d04051e108df0acf7a0a27366736e19f29a6070b324fc99806afe2cd433aab2f03f9512501f9a7dcbd0cf3fe0f3f4fcca896a1d9dec64de1efea92ee4a92c7b0e92778362ea554f11a702493a3f8", 0x52, 0x20000001, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x8}, 0x1c) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="dbb94c1b50c87d86f438bafe1a8f460b9945c9a73f159bcc7eb1667ba57136376a1aa15a448809bc039a513b7ca96309fdba658c637d018e2c36c137bcc78eb8b266ee305972c56366224fffbbe26da8e8359257e49ff8bdb41dad98db6b3100b1d525ee366609c6b20df527bc3e34f90e694676b9fab727260cb7c1470f28d5f28206735f6de2ae", 0x88}, {&(0x7f0000000440)="bf11e80a7e87c156d5e24c1fa803bc5f904d93df35b26129cea4080900b84b00c384a962cc78608a566a0a0887ad97c8bfd28be14f4f3c62bd56939226e5fb0f25398d2021b4ab8d57a3b7ff4e1d8c07d2cc9fa7b308", 0x56}, {&(0x7f00000004c0)="3b0daf4b91b6468df3c16b6137ed16b524f9ec028d2749c2383132e181158bc02a6f7e523a57411f13c44e43673df2e82520c62bf99d9f6727dd3fafce1007716e12657c6337ae4fe1500e98b7daa2e197f7cce50aa77bdb45277d2a0c8aba87d4bd7c1b5f6c05ac4c94615c91b8b8ea433f2395a4b70457dfc6b1e7b30f6cfa8dc53f2263bc28dfe7a50337af93a26828e2950dc00333f720641bf105016855b509c760bdc8e5958795f018bf85715005271dccd576ac846466da25efab55f9ce5258f9", 0xc4}], 0x3, &(0x7f0000000600)}, 0x44) close_range(r4, 0xffffffffffffffff, 0x0) 2.366284694s ago: executing program 0 (id=409): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0xffffffd5, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x65}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40012146) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, 0x0) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) (async) wait4(r5, 0x0, 0x1, &(0x7f0000000180)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000002c0)=0xcf5) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000240)=0x101) (async) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) syslog(0xa, &(0x7f0000000280)=""/34, 0x22) 2.287515328s ago: executing program 0 (id=410): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000200)=""/87, 0x1000, 0x800, 0xfffffffe}, 0x33) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) (async) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003f80), r3) (async) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f00006b7000/0x3000)=nil, 0x3000}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.287024938s ago: executing program 0 (id=411): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd700081b031ca235afb5adf2549efe7d5389b45444800"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd700081b031ca235afb5adf2549efe7d5389b45444800"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@nested_create_vm={0x12d, 0x18}], 0x18}) (async) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@nested_create_vm={0x12d, 0x18}], 0x18}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x3}, 0x10) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="4011", 0x2}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20040840}}], 0x1, 0x11) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r7) (async) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000400)="3e660f605ab62667660f2ac30f09f30fc7340f011bf380ad11009866b91b090000ba430066b88000c0fe66ef66b800a000000f23c00f21f8663501000c002f03f88e", 0x42}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.178856153s ago: executing program 0 (id=412): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {0x0}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97", 0xd}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd869", 0x4d}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad62", 0x27}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0x0, @local}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x1, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x6f, 0x5, 0x0, 0x2c, 0x89}, {0x2, 0x30000, 0xf, 0x2e, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xb0, 0x9}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x2, 0x0, 0xb, 0x3, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x2, 0x2, 0x1, 0x86, 0x7, 0x8b, 0xc, 0xed}, {0x4, 0xdddd0000, 0xd, 0x3, 0x5, 0x86, 0x8, 0x7f, 0xa, 0x0, 0xf2, 0x8}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7b, 0x4, 0x83, 0xc, 0x8, 0x3d}, {0xd000, 0x70000, 0x0, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x7f, 0x5}, {0x5000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x4, 0xf0}, {0xeeee8000, 0x2070}, {0x4000, 0x7}, 0xc0000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0xf000, [0x4, 0x7, 0x7, 0x9]}) 2.154632594s ago: executing program 0 (id=413): syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) write(r0, 0x0, 0x0) 1.537431205s ago: executing program 3 (id=415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000023c0002802c00018014000300ff01000300000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff080007400000000104000680"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc00000000000000000000000000000108000740000000012c00068014000500fe800000000000000000000400000031140004"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @none, 0x5, 0x2}, 0xe) 1.534061845s ago: executing program 3 (id=416): syz_io_uring_setup(0x1e94, &(0x7f0000000180)={0x0, 0xbba4, 0x73651cda65ebb59b, 0x1, 0x3e3}, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) clock_adjtime(0x0, &(0x7f0000000200)={0x7e7d, 0x8000000000000001, 0x80003ffd, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x2000008000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0xffffffffffffffff, 0x4d9, 0x3fe, 0x1fe, 0x8005, 0x4}) capset(&(0x7f0000000580)={0x19980330}, &(0x7f00000005c0)={0x6, 0x7, 0x1, 0x8001, 0xb, 0x9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone3(&(0x7f0000019380)={0x196300000, &(0x7f0000019200), &(0x7f0000019240), &(0x7f0000019280), {0x14}, &(0x7f00000192c0)=""/25, 0x19, &(0x7f0000019300)=""/1, &(0x7f0000019340)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) waitid(0x2, r3, &(0x7f0000019400), 0x80000000, &(0x7f0000019480)) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/232, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe6d}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f1c3103bfb0803e650fae39678bfb0f22a4652e0f00990000660fda940000660f38818c2768660fc7b600002e7cec", 0x2f}], 0x1, 0x62, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f00000000c0)=0x1) pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)="4d33169fbf87671ede1e6a59df4b72a12c8f17fb7f4c3bea15aa54ec6f5b8fdb8e0e67dde39e8ca4e2d691c00625521b0a2b0e4e565d6d16627f30b07983f8379ca1b9240b1b6022a63fc25222f9c67adf1ad2c08f7fb822cdf6e9d6cced30c457a3280debdfe6355af044268973250762b2e2bce7f48138aacfaeaf8c80e2252fbea7b088af0d7178cf0e", 0x8b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="d7", 0x1}, {&(0x7f0000001040)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001440)="e95ff3", 0x3}], 0x1}}], 0x3, 0x840) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x608d850) 1.010336461s ago: executing program 1 (id=418): mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)) r0 = syz_clone(0x0, 0x0, 0xfffffdf4, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace(0x4207, r0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x19e, [0x2000000005c0, 0x0, 0x0, 0x2000000005f0, 0x20000000072e], 0x0, &(0x7f0000000040), &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}, 0x215) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10004, 0x100, 0x4002004c2, 0x7ff, 0x7, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0xffffffff, 0x240046}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setreuid(0x0, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80000) fsetxattr(r4, 0x0, 0x0, 0x0, 0x2) 914.925875ms ago: executing program 0 (id=420): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02010003050000002cbdca7000fbdbdf25030004000000000002004e21ac1e010100000000000000005e594b0b753a04d4a82cf4af648790826db797757aa7ff7a5ed35d58e699445115538631b26a7154fa125fe90cc6c80fbc6aecddafb9c9a0d7d29c0c3f039f05d626d076f48ec25cb317d1515b6ef3a0d1016866db2505da88670661b97bfc1f2bf1fafd2acb87d221d920c1c9719c06ac205f20461f9160a440e9ea76e0a4fafb38669de855d30140c0bf42ba2c2393b6b1ac5bdc38"], 0x28}, 0x1, 0x7}, 0x0) 865.872348ms ago: executing program 2 (id=423): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x22480, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0xeeef0000, 0x1000, &(0x7f0000008000/0x1000)=nil}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040027"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r6) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004814) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x100000000000001}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000540)={[0x9ace, 0x9, 0xd1, 0x0, 0x9, 0x9, 0x109d, 0x81, 0x8001, 0x7fff, 0x6, 0x8, 0x6, 0x1000, 0x8d, 0x8, 0x30c33d0f, 0x400, 0x9, 0x8000, 0x401, 0x7, 0x7, 0x0, 0x9, 0x6, 0x5f14, 0x2, 0xffff, 0x8, 0x2, 0x54b3, 0x9, 0x10001, 0x80, 0xffffff3d, 0xe2, 0x1, 0x7fffffff, 0xe0, 0x5, 0x4, 0x3ca2, 0x4, 0x7f, 0x2, 0x0, 0x6, 0x7, 0x8, 0x8, 0x100, 0x8, 0x4, 0x5, 0xfffffff9, 0x9, 0x40, 0xb9b5, 0x9, 0x1, 0x10001, 0x3, 0x9, 0x100, 0x5, 0x3ff, 0x4, 0xfffffffc, 0xffff, 0x6, 0x8, 0x1, 0x0, 0x3, 0x7, 0x6, 0x6, 0xffffffff, 0x6, 0x0, 0x7, 0x2, 0x5, 0x1, 0x6, 0x1, 0x0, 0x9, 0x4, 0xfffffff9, 0x9, 0x4, 0xd34, 0x8, 0xfad2, 0x8, 0x5, 0x60, 0x7, 0x8, 0x2, 0x1ff, 0x0, 0x8, 0xaf7b, 0x5ac, 0x91cd, 0x8e8, 0x2, 0x6, 0xb6, 0x9, 0x8, 0x8, 0x0, 0x2, 0xa7, 0xffff71cf, 0x8, 0xff, 0x8000, 0x0, 0x9, 0x2, 0x2, 0x9, 0x3, 0x5, 0xda, 0x4, 0x8000, 0x9, 0xb, 0x18000, 0xe, 0xfffffffd, 0x5, 0x6, 0x4, 0xffffffe5, 0x7f, 0x7, 0x1, 0x2, 0x4, 0x2, 0x10000, 0x8, 0x2, 0x0, 0x1000, 0x96, 0x101, 0x1, 0x7, 0x9, 0x6, 0x2, 0xb, 0x9, 0xfff, 0xda17, 0x1000, 0x4, 0x10001, 0x2, 0x6, 0x6b, 0x80000000, 0x5, 0x0, 0xfffffffd, 0x4d9d, 0x8, 0x2, 0x3a6, 0xffffd1e6, 0xa95, 0x1, 0x80, 0x8, 0x3, 0xaa3, 0xd, 0x3, 0x5, 0x60, 0x6, 0x7, 0x5, 0xb, 0x6, 0x6, 0x2, 0x91e, 0x6, 0x6c, 0x9, 0x200, 0x8, 0x7f, 0x81, 0xa, 0xf, 0x2, 0x1, 0x1ff, 0xf74, 0x34, 0xb4a, 0x3, 0x7, 0x1, 0x0, 0xeab8, 0x8e90, 0x0, 0x0, 0x7, 0xffffffff, 0x2, 0x1ff, 0xff, 0x96, 0xffffffff, 0xd, 0x5, 0xd1, 0x82d, 0x7, 0x401, 0x0, 0xfffff001, 0x9, 0x1, 0x2, 0x10001, 0x6, 0x8, 0xf0, 0x80, 0x1, 0x667b4e5, 0x4, 0x6, 0x6, 0x9, 0xb9, 0x4, 0x4, 0x401, 0x3, 0x0, 0x0, 0x7, 0x6, 0xcf7a, 0x9b34, 0x1, 0x2, 0xb, 0x3, 0x8, 0xf7a9, 0x6f, 0x1bee, 0x5, 0xf, 0xe, 0x7, 0x7, 0x958, 0x2, 0x9, 0x3, 0xa5b, 0x6, 0x8, 0x37b9, 0x8, 0x8, 0x5, 0x80000001, 0x7eed, 0x401, 0x5, 0xe9f, 0x8, 0x80, 0x7fffffff, 0x0, 0x0, 0x4, 0x1ff, 0x80000000, 0x81, 0x5, 0x200, 0x3, 0xff, 0xffffa8c2, 0x7f, 0x8, 0xd9e2, 0x80, 0x4c0, 0x1000, 0x0, 0x5, 0x1, 0x9, 0x800, 0xc7a6, 0xcd2, 0x4, 0x200, 0x0, 0x2, 0x86, 0x6f8, 0x5, 0x7ff, 0xcb8, 0x1000, 0x3, 0xffffff05, 0x9, 0x5, 0x8, 0x9, 0x425f, 0x0, 0x8, 0x4, 0xaf, 0x9, 0x8000, 0x6, 0x2, 0x40, 0x8, 0xe, 0x4, 0x6, 0x7, 0xc52, 0x7f, 0x1, 0x4, 0x7, 0x5, 0x3, 0x800000, 0x8000, 0x10001, 0x5, 0x9, 0x0, 0xb006, 0xf4a40, 0x8, 0x7f, 0x1, 0x0, 0x2, 0x0, 0x8077, 0x1000, 0xa, 0x5, 0x800, 0x7f, 0x1, 0x3, 0x10, 0x280000, 0xc, 0x3, 0x8001, 0x3, 0x5, 0x8, 0x8000, 0x3, 0x4, 0x4, 0xfffffff4, 0xffff, 0x6, 0x8, 0x5, 0x1, 0x0, 0x9, 0xaf, 0xffff, 0x2, 0xfffffffc, 0x3d86, 0x800, 0x9, 0xcfb, 0x4b29, 0xaa06, 0x3ff, 0xe4c9, 0xb84, 0x3, 0x8, 0x7, 0x5ee88b9b, 0x4ce9692d, 0x0, 0x3, 0x8, 0x5, 0x6, 0xf, 0x200, 0x3, 0x4, 0x9, 0x2, 0x4, 0x0, 0x6, 0x7, 0x6, 0x2, 0x7, 0x14f40000, 0x414c, 0x93, 0x5, 0x6, 0x1, 0x2, 0x8, 0x3, 0xa6, 0x1ff, 0x0, 0x8000, 0x0, 0xfe50, 0x8, 0x10, 0x8cf, 0xc, 0x6, 0x10001, 0x5, 0x101, 0x10, 0xfffff8a4, 0xa6a, 0x0, 0x2, 0x81, 0x1, 0x891c, 0xe, 0x1ff, 0x3, 0x144, 0x559, 0x48, 0x2, 0x2000, 0x1ff, 0x1ff, 0xffffffff, 0x1000, 0x1, 0x7, 0x7fffffff, 0x80, 0x10001, 0x7fff, 0x80000001, 0x5, 0x6, 0x1, 0xb6c, 0x9, 0x1000, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x5, 0x38b, 0x4, 0x8, 0x4, 0x7, 0x1000, 0xfffffff9, 0x8, 0x3ff, 0x3, 0x1, 0x300, 0x54, 0x200, 0xff, 0x0, 0x10000, 0x3, 0x2c, 0x100, 0x5, 0x200, 0x8, 0x0, 0x7, 0x6, 0x9, 0x10001, 0x3, 0x6f, 0x0, 0x4, 0x3, 0x0, 0x7fffffff, 0x7, 0x1, 0x7, 0x2, 0x3, 0x6c343962, 0x8, 0x0, 0x7, 0x3, 0x9, 0xacd, 0x6, 0x10, 0x82e42a7f, 0x0, 0xfffffffa, 0xfffffffe, 0x6, 0x8, 0x1010000, 0xff, 0x48bf, 0x10001, 0x9, 0x7, 0x200, 0x81, 0x72, 0x0, 0x800, 0xffffffff, 0x9, 0x0, 0x0, 0x6, 0x7, 0x7, 0x9a5, 0xb632, 0x2000000, 0x7f, 0xffff, 0xe, 0x2, 0xb224, 0x2400000, 0x2, 0xfffffff8, 0x4, 0x7, 0x58e9, 0x9, 0x1, 0x2, 0x4, 0x4ac, 0x1, 0x7, 0x6, 0x0, 0x0, 0x1, 0x8, 0x6, 0x80, 0x4f, 0xfffffff7, 0x1, 0x6, 0x800, 0x9, 0x7, 0x2, 0x2, 0xad, 0xfffffff0, 0x5, 0xd1a7, 0x4, 0x8001, 0x9, 0xd, 0x3, 0x9, 0x5, 0x3, 0x4, 0x1, 0x5, 0x3ff, 0x4, 0x6, 0xf052, 0x1adb, 0x101, 0x1, 0x5, 0x4, 0xd200, 0x3, 0x6, 0x5, 0x76a7, 0x536a, 0x400, 0x9, 0x6, 0xfffffff8, 0x6, 0x200, 0x9, 0x82, 0xd71, 0x8001, 0x80000000, 0x8001, 0x4, 0x9, 0x4, 0x3f2, 0x7, 0x0, 0x81, 0x2, 0x4, 0x2, 0x9, 0x0, 0x1, 0x5, 0x2, 0x81, 0x7, 0x6, 0x7, 0x400, 0x6, 0x7, 0x100, 0x81, 0x6b, 0x7, 0x9dc4, 0x401, 0x0, 0x1, 0x3, 0x5, 0x8, 0x5, 0x84, 0x4, 0xf0c, 0x8, 0x2, 0x5e, 0x4, 0x8000, 0xff, 0x5, 0x7, 0xd, 0xbe, 0x42, 0x6, 0x4, 0x2, 0x7, 0x2, 0x7, 0x6, 0x1, 0x0, 0x8, 0x8000, 0x7, 0x4, 0x22, 0x8, 0x2, 0x1ff, 0x1, 0x2, 0x0, 0x3, 0x5, 0x40, 0xba14, 0x0, 0xffffffff, 0x1, 0x8, 0xf, 0xfffffffe, 0xd5e, 0x6, 0x10, 0x3, 0x7, 0x200, 0xcf, 0x3725, 0x2, 0xa, 0x3ff, 0x4, 0xd, 0x10001, 0x453, 0x8, 0x400, 0xffff, 0x80, 0x3, 0x3, 0x6, 0x8000, 0x0, 0x8dd4, 0x2, 0x3fb, 0x0, 0x72dd, 0x1, 0xc, 0x81, 0x2005, 0xfffffffc, 0x10000, 0xf, 0x5, 0x4, 0x8, 0x6, 0x9, 0x6, 0xeff7, 0x0, 0x200, 0x9, 0x0, 0x5, 0x7fffffff, 0x4, 0x6, 0x7, 0x8f5, 0x3, 0x8, 0x8a, 0x9, 0x7fff, 0x7, 0xec, 0x7, 0x8, 0x1, 0x40, 0xfc0, 0x2, 0x0, 0x698, 0x1, 0x5, 0x3, 0xc3e, 0x81, 0xc, 0x0, 0x8, 0x0, 0x0, 0x6, 0x3, 0x4, 0x9, 0x200, 0x644, 0x8, 0x6df, 0x9, 0x3, 0xea, 0x3, 0x7f, 0x3c98000, 0x10000, 0x5, 0x1ff, 0x2, 0x3, 0x4, 0x9, 0x1000, 0x80, 0xb, 0x5, 0x3, 0x800, 0x8, 0x0, 0x1, 0xf, 0xc7fc, 0x9, 0x4, 0xfff, 0x9, 0x6, 0x8001, 0x3, 0x101, 0x1bee, 0x2, 0x86, 0x2, 0x45, 0x7, 0x29, 0x5, 0x7ff, 0x2, 0xfffffff8, 0x2, 0x4, 0x9, 0x387, 0x1, 0x9, 0x6, 0x6, 0xfffffffe, 0x1000, 0xc, 0x1, 0x2, 0x89, 0x40, 0xfffffff8, 0xe, 0x9, 0xfffff0aa, 0xd, 0x1, 0x42d3, 0x7f, 0x8, 0x2a, 0x4, 0x1, 0x9, 0x2f05, 0x1, 0x2, 0x5, 0xb, 0x594, 0x2, 0x401, 0x8000, 0x2, 0xa606, 0x6, 0xfffffff8, 0x80000000, 0x8, 0xfff, 0xffffffff, 0x0, 0x9, 0x1, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x0, 0xfffffffd, 0x8, 0x8, 0x3ff, 0xa30, 0xfffffffb, 0xa, 0x4, 0x10, 0x2, 0x10000, 0x2878, 0x3, 0x3, 0x2, 0xfff, 0x7, 0x80000000, 0x19f, 0x5, 0x8, 0x7fff, 0xa, 0x1000, 0x80000001, 0x3150, 0xffffffff, 0x28, 0x0, 0x9, 0x4, 0x2, 0x0, 0x1a2, 0x2, 0x6, 0xa7, 0x6, 0x4, 0x1, 0x0, 0x1, 0x8, 0x57, 0x7, 0x4, 0x4, 0x8, 0xffff, 0x8, 0x7, 0x100, 0x0, 0x1, 0x8, 0x1, 0x80000001, 0xfff, 0x3, 0xe, 0x5, 0x101, 0x1, 0xd21, 0x182, 0x3, 0x4, 0x8, 0x7, 0x6, 0xe, 0xa6, 0x3, 0x9, 0xff, 0x2, 0x5, 0x99d7, 0x3, 0x2, 0x2f9, 0x2, 0x3ff, 0x6, 0x3, 0x0, 0x3, 0x1, 0x77b7, 0x0, 0x5, 0x4, 0x7, 0x8f60, 0xb, 0x9, 0x4acb9b46, 0x10000, 0x9, 0x7, 0x2, 0xc0, 0x3b9, 0x0, 0x4, 0x5, 0x5, 0x6d, 0x4, 0x9, 0x8, 0x5, 0xffff, 0x4, 0xe0f, 0x71, 0x401, 0x7f]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xf) 780.982202ms ago: executing program 1 (id=424): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) eventfd(0x9) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) eventfd(0x9) (async) 780.535332ms ago: executing program 1 (id=425): r0 = userfaultfd(0x801) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0xfefffff6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) capset(0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r4, 0x351ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$xdp(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008001}, 0x400c815) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 576.239242ms ago: executing program 1 (id=426): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000340)={0x20, 0x9, 0x4, "fce890dc"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000500)={0x40, 0x16, 0x4, "4e59aaf9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x20, 0x9, 0x4, "748d4627"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="001604"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001f80)={0x34, &(0x7f0000001d40)={0x40, 0x15, 0x4, "fe16abac"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 570.579662ms ago: executing program 3 (id=427): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x14, r2, 0x607, 0x0, 0x3}, 0x14}}, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) (async, rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904"], 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x24000, 0x1000, 0xfffffc00, 0x1}, 0x20) (rerun: 64) r4 = socket(0x10, 0x803, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="0f20d835200000000f22d866baa100ec0f1a41bf66ba210066b8890b66ef8f89709174ce00f30f586b063e2e660f5b055f580000c744240005000000c7442402f8ffffffc7442406000000000f011c24c74424000b000000c744240200900000c7442406000000000f011424470f01c5", 0x70}], 0x1, 0x15, 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x143802, 0x0) pwritev2(r9, &(0x7f0000000080)=[{&(0x7f0000000040)="1daf24", 0x3}], 0x1, 0x9, 0x1, 0x9) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000002580)=""/4065, 0xfe1}, {&(0x7f0000000380)=""/109, 0x6d}], 0x6}, 0x11}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40012002, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000110001002cbd70000200000017000000e402e380e0022280dc022b80d7021c"], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 391.494591ms ago: executing program 3 (id=428): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f229071882d3b464605515e233dd4423cb855193f2779b82135abc1b8eb2e9257e7dd8e0dfa64467e9e68b182b5447d8b3be2b6beb713ba51f0df6897627f26c0ff0aba2551e9c8ac29f3a5aa1bc5b8"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f229071882d3b464605515e233dd4423cb855193f2779b82135abc1b8eb2e9257e7dd8e0dfa64467e9e68b182b5447d8b3be2b6beb713ba51f0df6897627f26c0ff0aba2551e9c8ac29f3a5aa1bc5b8"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) socket$nl_audit(0x10, 0x3, 0x9) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(r7, &(0x7f0000000e00)={0x2020}, 0x2020) (async) read$FUSE(r7, &(0x7f0000000e00)={0x2020}, 0x2020) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000001940)) (async) getsockopt$netlink(r6, 0x10e, 0x9, 0x0, &(0x7f0000001940)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x43e}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) 390.988112ms ago: executing program 2 (id=429): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setfsgid(r4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) writev(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x203}], 0x1) 389.624522ms ago: executing program 2 (id=430): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)="4d33169fbf87671ede1e6a59df4b72a12c8f17fb7f4c3bea15aa54ec6f5b8fdb8e0e67dde39e8ca4e2d691c00625521b0a2b0e4e565d6d16627f30b07983f8379ca1b9240b1b6022a63fc25222f9c67adf1ad2c08f7fb822cdf6e9d6cced30c457a3280debdfe6355af044268973250762b2e2bce7f48138aacfaeaf8c80e2252fbea7b088af0d7178cf0e", 0x8b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="d7", 0x1}, {&(0x7f0000001040)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001440)="e95f", 0x2}], 0x1}}], 0x3, 0x840) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}], 0x3, 0x608d850) 386.413251ms ago: executing program 2 (id=431): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1e3161f64ecd772b7df57d150b317800f3940000", @ANYRES16=r1, @ANYBLOB="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"], 0x23f8}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x80, 0x0, 0xffff040e, 0x2, 0x69, 0x4, 0x7, 0x5, 0xa5, 0x4, 0x0, 0x4, 0x0, 0x7, 0x7, 0x1, 0x10, '\x00', 0x2, 0xfffffffffffffe01}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x7f, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 373.727102ms ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x4) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 235.345349ms ago: executing program 2 (id=433): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x0, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect(0x5, 0x59, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202b1f9b27f24f3fce5d6edc242b2c98fb1ef70860c9d1980d1690476fa422a85a9daf65025b4175a5a796e6b9a930f96d0afd3f4d143660b5152a19ed815a48f16e07c73f3896c67309dd2cf96bdef04e7128a918c1d2dec856a37d72fe908ea33582f244606b41e2448dfa24475621373c0832b6501000dab38405929f552c94d0443e0"], 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000400)='.\x00', 0x200) timerfd_gettime(r3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000600)={0xa}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x6, {0x4e23, 0x3}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x48) close(0x3) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x7, 0x9, 0x6, 0x7}, {0x9, 0x80, 0x9, 0x7}, {0x24, 0x0, 0x6, 0x7}, {0x7, 0x42, 0x7, 0x10000}, {0x3, 0xf5, 0x10, 0x5}]}) sendmsg$can_bcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x2, 0x0, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0xfffffffffffffe02}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x5, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x2) r10 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402"], 0x0) syz_usb_connect(0x2, 0x2cc, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xe9, 0xbc, 0x3c, 0x40, 0x984, 0x301, 0x128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ba, 0x2, 0x4, 0x4, 0x0, 0xe, "", [{{0x9, 0x4, 0x48, 0x9, 0x9, 0xf1, 0xfc, 0x56, 0x0, [@hid_hid={0x9, 0x21, 0x4, 0xfb, 0x1, {0x22, 0x345}}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x9, 0x0, 0x80}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x52, 0x4}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x9, 0x9, 0x1, [@generic={0x98, 0xe50f9c42256cf3eb, "a4edb64eb44bab3b2889b02da4d463cc75a7188016c0eb6ac3f9bdf2c8be280f1a7a65262c44e98b3915aa2cdb929e7e417f9ca05e20c6cd46296aad14e34e626d19fea06d855038cf42095ebaeb8338d1fdbac09859012e5ec6c0f26aabf454967bf7c730d7c3c8b55b2abd0d2e372c15c6f2db185d04caa9967582a7470f6e1227dfe548df55446a63969319b5c88869c450cae65d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xc1}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7b, 0x8, 0x2}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x3, 0x6, [@generic={0xf2, 0x11, "cb854a26cfb6d4d2e28395824c8fd38c33dd89e563d8b97e763ef0ac251cf96349563731a6f3ac9c2b323927d20e34a8eae39462145bb75c8052ad5351227a6b1e14983d58a590c49f3b5e7698c18a223e352d9b8a7691cf513a6dd9f87393e5f187560ec8b013b1e95245181a0daa24c9ec5a0a169413dd20c401f67a7847e247d5fbcb0695ee6acbdebf2d941cbec419dbbd1a62e76fe217134284e490addc61c62422a249fe52d1782cde5b6b615d89ce4d11743e71ef91b231853e4105f096c82619c6b9e4ba9ccb50afeab7873848d765725a9829061250f76a4ec9d330f7eb79eb64093010af47dd0511d86a17"}, @generic={0x4, 0x7, "3de2"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0xd, 0x32, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1}, @generic={0x58, 0x22, "b711d07dd88f6b270ecc24ace6035d5c5e7c670ff80373ec732088e9f31d66f90e39c89cd0f20c9692321f10006955483a53772d025d3524fb68175ff46b027ef50b5b85a4f0cbf751cd4cee048e40fb67ce595660f2"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x80, 0xa4}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x1, 0x7, 0xc, [@generic={0x19, 0x30, "b0eb46d69b071ff48fe60c3064d90f324748771a8f4b01"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x44, 0x43, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2ab4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x6}]}}]}}, {{0x9, 0x4, 0xd8, 0x60, 0x0, 0x93, 0xf3, 0x52, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x2a}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0xfd, 0x8, 0x9, 0x5}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x1, "0a8b4398fcb4"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x5, 0x4, 0xff}]}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x66, 0x2, 0x6, 0x30, 0xb}, 0x5, &(0x7f0000000880)=ANY=[@ANYRESDEC=r4], 0x1, [{0x41, &(0x7f0000000500)=ANY=[@ANYRES64=r10]}]}) 21.2079ms ago: executing program 1 (id=434): r0 = socket(0x1d, 0x6, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000038}, 0x0) socket(0x1d, 0x6, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00'}) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) prctl$PR_CAPBSET_DROP(0x18, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000038}, 0x0) (async) 0s ago: executing program 1 (id=435): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = userfaultfd(0x801) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c80)={{r0, &(0x7f00000000c0)='/selinux/policy\x00', 0x2000, &(0x7f0000000280)={@_ha_fsid={[0x5, 0x2]}, {0xffff, 0x9, 0x8001, 0x8}}, 0xfffffffe, &(0x7f00000002c0), &(0x7f0000000300)=0x5}, 0x9, &(0x7f0000000b40)=[{0x1, 0x81, &(0x7f0000000d40)='/selinux/policy\x00', &(0x7f0000000380)="93641bde8b3e934b865ec7871c2edf74ea152023efaeb460a138c524c87799a3a21027c87409a432b75c80ad756c530f0b3ca85cb964c0ea7c4d8090381a15fa9ca472c84025dc2084ee2d0fdbb9a68dc185c6e5fa02d38ca352381c7eb9d3eed64a1e49edb5249f020395db7344f09ba4256f64956653bcd0995c56035651db15c3744739a85469626128ac538584d5aebf9b274e15fe36d331445de44da5fbda87aae3c1b1301e4b96145113408ce08dffdf34248e8dcf7b01dc9795bad1dc0b42d1ca50f6077d5836a58db256b11f9687e619164eb41ebc6db2684f", 0xdd, 0x20}, {0x0, 0x5, &(0x7f0000000480)='\xd4', &(0x7f00000004c0)="0f80c5c63f741d49d617d2103dd172af3270dfbf6c97c090bbc3c5792445cc3a64801d8fad2274da40a1649c3d2605b5f1cedf90f6616522526f7e07", 0x3c, 0x10}, {0x1, 0x3, &(0x7f0000000340)='\xd9|\xf4Qxn\xd7<\x88\x9a\x93\x1e\xc59\xf7l8V\xc2w\x06\xbd\xea\xd0\xd73\xe9\xbe\x87r\xe4\xffD\xb8\xf6\xa3\x8a\xec?\xda\\\xe4\xb31 \x99.<\xb1\xfc\xd0\xffyE\x05', &(0x7f0000000540)="a959ad44c5629b74c5519080a5fe45c6ddac131e9ca6aa0255de353d5346d0c2b5df5a2666147101b9f1f800db983800c6948962682e5a220a87e277cb2daaa92aa217ebc7021306caa61d885eb4aa3feb6860c5edf65e87c4b87f839312095d83499ce9f47c18d37b0ba720a7f054770df73d144d15894541dbd473d5a54f2b60c3b9480c203ec5f15cb5059e2cbc893709600d2318cbb0298d681ea55ff3e46b8e4debdc383d20945314e2be4f12a8abf27fa39eab1a006596512171e69d65e36db132", 0xc4, 0x10}, {0x2, 0xe, &(0x7f0000000500)='\x00', &(0x7f0000000680)="6a9f42ac6fc276db9756ce1d0c07b3face7c1cb22f084a40e66da63124c5028d39eddc46a41cd751a8e443e9", 0x2c, 0x20}, {0x2, 0x66, &(0x7f00000006c0)='\xfb{)@\x00', &(0x7f0000000700)="df70261e56cfe0f556f78a29e9fe591e70f1ae2e5e4c10e7d4e05d80f8494de57bdbb242a1f87168d11d716ac7f40b4bf14116a660c4151f3a7025e66a", 0x3d}, {0x2, 0x3, &(0x7f0000000740)='/selinux/load\x00', &(0x7f0000000780)="5098bc4c15c4dba25e91d11daee59b4432264eeb69c372996c0db16e81667245e239da4deb57b1861e5e44f649100d0edb0e1980e69ec82d407d0927cf5172a893a0c34b4ef2ddcf810d7219adf697fb5123fe7d296f2f3464b8b0f1cdd39ca5aa0b486347fc33c971b0c51b8c4f707b208af382c85ec0216a3ea43979a4f338e2c45e2e3f07902fd82ae341a58bc9cdae0b261cbcefe88f7a56f31cdfc4b087f9f0b13402a0a9c77a647bf4ccdff2a804f4493431770327f3607c700cbe011d80bbf13364d5ff40304855d0f3bfd14267d93fe8ab839b3aa2f2098b5d24e94cde4d6e862c7b771eaf8d56a7bfb793", 0xef, 0x10}, {0x3, 0x7, &(0x7f0000000880)='/selinux/policy\x00', &(0x7f00000008c0)="c499422c1207019866d6faf83a9fa7f02b30f54cdc586505c6bf2c40b96d7dbbfd54f99494668a843310c5744c0d8fcd40ee858dd7c0124b0b55a37e0dc98d916e2023dd6ae7641735fa21fa4a5d1ac93b9017c35ce91ae4ce22fc5eefd26c6f26c94da88932e87c70d8eeb6be3051ab493804ed7f0593d795c991ccb6ddd99a", 0x80, 0x8}, {0x1, 0x4, &(0x7f0000000940)='%*\x00', &(0x7f0000000980)="12ee212ad3180ab0c6afc64db5c3a66ed98418fcf84992ebb0640cab0c0f5af5106c8424078c7d3932ebfa7da5bc6ce6626c1bd380f9be1fad7e5bc0fd2b807d8b61ee7d78861a6c578c49b6d0b00f5f3fd91709ba9913161b94d6c1d0e478008344ba6cb9bccca860b9f03ab73bf000f18447eca769fdf4001204d6aa5d51ae52ac3a08f2fc0f752c65261706ff2d7e907f02078af36d54e26029f6b2bd2b459d9c9e3a22503be003d87e4a84dce626a02d7acea93aadb28687a6db9ffe48abb6eb", 0xc2, 0x20}, {0x1, 0x1, &(0x7f0000000a80)='/selinux/policy\x00', &(0x7f0000000ac0)="2904138b8596235c9f0524f21b8b12a1d9c4b9e7b345d0862f612d8b166e4633ccb78ca8deec6263b4ba7b1c458f84f4d905733eed9d1b33b1d3c0527204bbf5c679c316f82af7c2817e355734f510686d74691cdf", 0x55, 0x12}]}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000d00)={0x10000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="0f01c5ea00012c0126660f38818a4baab87d000f00d86766c7442400a40000006766c7442402978c00006766c744240600000000670f011c240fc7585166b80500000066b9000000000f01c181370060260fc7b9000066b9590200000f32", 0x5e}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x87, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x2, 0x3, 0x5c}, 0x2c) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000072b000/0x2000)=nil, 0x2000}, 0x1}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) kernel console output (not intermixed with test programs): dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.503149][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.512070][ T36] audit: type=1400 audit(1774621626.949:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.537528][ T36] audit: type=1400 audit(1774621626.959:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.594474][ T36] audit: type=1400 audit(1774621627.039:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.595783][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.619996][ T36] audit: type=1400 audit(1774621627.039:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.403624][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.410767][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.418069][ T292] bridge_slave_0: entered allmulticast mode [ 21.424309][ T292] bridge_slave_0: entered promiscuous mode [ 21.431769][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.438858][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.446006][ T292] bridge_slave_1: entered allmulticast mode [ 21.452274][ T292] bridge_slave_1: entered promiscuous mode [ 21.481541][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.488636][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.495774][ T289] bridge_slave_0: entered allmulticast mode [ 21.501994][ T289] bridge_slave_0: entered promiscuous mode [ 21.508696][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.515858][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.522983][ T289] bridge_slave_1: entered allmulticast mode [ 21.529222][ T289] bridge_slave_1: entered promiscuous mode [ 21.583283][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.590329][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.597438][ T291] bridge_slave_0: entered allmulticast mode [ 21.603770][ T291] bridge_slave_0: entered promiscuous mode [ 21.610356][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.617621][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.624739][ T290] bridge_slave_0: entered allmulticast mode [ 21.630890][ T290] bridge_slave_0: entered promiscuous mode [ 21.637399][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.644498][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.651571][ T290] bridge_slave_1: entered allmulticast mode [ 21.657935][ T290] bridge_slave_1: entered promiscuous mode [ 21.664011][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.671029][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.678161][ T291] bridge_slave_1: entered allmulticast mode [ 21.684391][ T291] bridge_slave_1: entered promiscuous mode [ 21.803703][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.810749][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.818053][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.825095][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.836301][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.843361][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.850604][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.857639][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.875015][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.882061][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.889339][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.896366][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.909244][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.916305][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.923576][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.930584][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.968934][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.976261][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.983937][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.991200][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.998821][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.006409][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.013840][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.021030][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.033659][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.040705][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.068803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.075867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.083863][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.090884][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.098918][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.105964][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.113526][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.120540][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.128431][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.135489][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.143098][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.150113][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.164288][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.171316][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.217207][ T289] veth0_vlan: entered promiscuous mode [ 22.224571][ T292] veth0_vlan: entered promiscuous mode [ 22.234377][ T290] veth0_vlan: entered promiscuous mode [ 22.246541][ T289] veth1_macvtap: entered promiscuous mode [ 22.265832][ T291] veth0_vlan: entered promiscuous mode [ 22.273310][ T290] veth1_macvtap: entered promiscuous mode [ 22.281580][ T292] veth1_macvtap: entered promiscuous mode [ 22.308161][ T291] veth1_macvtap: entered promiscuous mode [ 22.319708][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.388975][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.612378][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.662221][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.772227][ T314] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.780815][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 22.791070][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 22.800793][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 22.809855][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 22.812172][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 22.817871][ T31] usb 2-1: SerialNumber: syz [ 22.824556][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 22.836027][ T9] usb 4-1: config 0 has no interface number 0 [ 22.844128][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 22.853434][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.861429][ T9] usb 4-1: Product: syz [ 22.865851][ T9] usb 4-1: Manufacturer: syz [ 22.870467][ T9] usb 4-1: SerialNumber: syz [ 22.875934][ T9] usb 4-1: config 0 descriptor?? [ 22.881986][ T9] smsc95xx v2.0.0 [ 22.932377][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 22.938576][ T314] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 22.949057][ T314] usb 1-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 22.958143][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.966176][ T314] usb 1-1: Product: syz [ 22.970340][ T314] usb 1-1: Manufacturer: syz [ 22.974967][ T314] usb 1-1: SerialNumber: syz [ 23.237940][ T325] kvm: kvm [324]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 23.247035][ T325] kvm: kvm [324]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 23.274877][ T31] usb 2-1: 0:2 : does not exist [ 23.289660][ T31] usb 2-1: USB disconnect, device number 2 [ 23.289964][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 23.307617][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 23.312553][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.403928][ T45] usb 1-1: USB disconnect, device number 2 [ 23.502223][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.652196][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 23.658312][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 23.667066][ T10] usb 3-1: string descriptor 0 read error: -22 [ 23.673394][ T10] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.42 [ 23.682503][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.154600][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.164449][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.202772][ T331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.363226][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 24.371695][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.385062][ T331] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 24.395677][ T331] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 24.404945][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.413118][ T331] usb 1-1: Product: syz [ 24.417320][ T331] usb 1-1: Manufacturer: syz [ 24.421955][ T331] usb 1-1: SerialNumber: syz [ 24.629966][ T331] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 24.643310][ T331] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 24.653756][ T331] usb 1-1: USB disconnect, device number 3 [ 24.661294][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.202030][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 25.202047][ T36] audit: type=1400 audit(1774621631.639:127): avc: denied { ioctl } for pid=350 comm="syz.0.11" path="mnt:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.276050][ T355] cannot load conntrack support for proto=3 [ 25.299238][ T36] audit: type=1400 audit(1774621631.739:128): avc: denied { create } for pid=354 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.426511][ T36] audit: type=1400 audit(1774621631.869:129): avc: denied { create } for pid=357 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.446852][ T36] audit: type=1400 audit(1774621631.869:130): avc: denied { write } for pid=357 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.472564][ T36] audit: type=1400 audit(1774621631.869:131): avc: denied { read } for pid=357 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.553384][ T36] audit: type=1400 audit(1774621631.999:132): avc: denied { block_suspend } for pid=361 comm="syz.0.15" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.591065][ T366] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.602149][ T36] audit: type=1400 audit(1774621632.009:133): avc: denied { read } for pid=363 comm="syz.0.16" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.652314][ T36] audit: type=1400 audit(1774621632.009:134): avc: denied { open } for pid=363 comm="syz.0.16" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.675242][ T36] audit: type=1400 audit(1774621632.009:135): avc: denied { map } for pid=363 comm="syz.0.16" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.697994][ T36] audit: type=1400 audit(1774621632.019:136): avc: denied { execute } for pid=363 comm="syz.0.16" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 25.902177][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 26.063279][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.074107][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.085332][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.095276][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 26.108271][ T31] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 26.117468][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.127063][ T31] usb 1-1: config 0 descriptor?? [ 26.323388][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 26.332232][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 26.350947][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 26.352231][ T10] usb 3-1: USB disconnect, device number 2 [ 26.359478][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 26.374313][ T31] usb 1-1: USB disconnect, device number 4 [ 26.439081][ T382] tipc: Enabling of bearer rejected, failed to enable media [ 26.451047][ T382] incfs: Options parsing error. -22 [ 26.456359][ T382] incfs: mount failed -22 [ 26.548356][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 26.559809][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 26.570470][ T9] usb 4-1: USB disconnect, device number 2 [ 26.802142][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.932173][ T31] usb 1-1: device descriptor read/64, error -71 [ 27.052176][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.164034][ T390] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 27.172173][ T31] usb 1-1: device descriptor read/64, error -71 [ 27.172490][ T390] overlayfs: missing 'lowerdir' [ 27.206062][ T9] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 27.214217][ T9] usb 2-1: config 1 has no interface number 0 [ 27.220338][ T9] usb 2-1: config 1 interface 93 has no altsetting 0 [ 27.227054][ T9] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 27.236141][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.270693][ T397] 9pnet_fd: Insufficient options for proto=fd [ 27.412161][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 27.450514][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.459530][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.472198][ T384] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 27.542292][ T31] usb 1-1: device descriptor read/64, error -71 [ 27.782193][ T31] usb 1-1: device descriptor read/64, error -71 [ 27.892264][ T31] usb usb1-port1: attempt power cycle [ 28.146148][ T432] tipc: Can't bind to reserved service type 0 [ 28.187744][ T443] netlink: 51 bytes leftover after parsing attributes in process `syz.1.39'. [ 28.236499][ T443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.244970][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 28.245916][ T443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.262472][ T443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.271067][ T443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.273218][ T31] usb 1-1: device descriptor read/8, error -71 [ 28.413288][ T31] usb 1-1: device descriptor read/8, error -71 [ 28.492165][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.643552][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.651963][ T307] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 28.663086][ T307] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 28.674216][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 28.684329][ T307] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 28.693410][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.697256][ T452] mmap: syz.0.42 (452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.701412][ T307] usb 3-1: Product: syz [ 28.701431][ T307] usb 3-1: Manufacturer: syz [ 28.701445][ T307] usb 3-1: SerialNumber: syz [ 28.733088][ T454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 28.919358][ T458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.927981][ T458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.942127][ T307] usb 3-1: Can't get UAC3 power state for id 10 [ 28.953098][ T307] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 28.963975][ T307] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 28.975307][ T307] usb 3-1: USB disconnect, device number 3 [ 29.102148][ T31] usb 1-1: device not accepting address 8, error -71 [ 29.108954][ T31] usb usb1-port1: unable to enumerate USB device [ 29.202160][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.402249][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 29.532687][ T31] usb 1-1: device descriptor read/64, error -71 [ 29.772166][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.022165][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 30.172165][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.422144][ T31] usb 1-1: device descriptor read/64, error -71 [ 30.478175][ T513] FAULT_INJECTION: forcing a failure. [ 30.478175][ T513] name failslab, interval 1, probability 0, space 0, times 1 [ 30.493130][ T513] CPU: 1 UID: 0 PID: 513 Comm: syz.2.57 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 30.493161][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 30.493172][ T513] Call Trace: [ 30.493178][ T513] [ 30.493186][ T513] __dump_stack+0x21/0x30 [ 30.493221][ T513] dump_stack_lvl+0x140/0x1c0 [ 30.493243][ T513] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.493265][ T513] ? selinux_file_open+0x46c/0x630 [ 30.493288][ T513] dump_stack+0x19/0x20 [ 30.493308][ T513] should_fail_ex+0x3d7/0x530 [ 30.493330][ T513] should_failslab+0xac/0x100 [ 30.493347][ T513] kmem_cache_alloc_noprof+0x42/0x410 [ 30.493370][ T513] ? vm_area_dup+0x42/0x570 [ 30.493388][ T513] vm_area_dup+0x42/0x570 [ 30.493405][ T513] __split_vma+0x1ce/0xc10 [ 30.493430][ T513] ? __kernel_text_address+0x11/0x40 [ 30.493451][ T513] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 30.493476][ T513] ? _parse_integer_limit+0x195/0x1e0 [ 30.493497][ T513] vms_gather_munmap_vmas+0x273/0xdd0 [ 30.493522][ T513] ? _parse_integer+0x2e/0x40 [ 30.493543][ T513] do_vmi_align_munmap+0x251/0x610 [ 30.493570][ T513] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 30.493594][ T513] ? mas_walk+0x3f7/0x650 [ 30.493614][ T513] ? mas_find+0x358/0x5f0 [ 30.493631][ T513] ? __kasan_check_write+0x18/0x20 [ 30.493654][ T513] do_vmi_munmap+0x245/0x2e0 [ 30.493678][ T513] __vm_munmap+0x23e/0x390 [ 30.493702][ T513] ? vm_munmap+0x40/0x40 [ 30.493724][ T513] ? __kasan_check_write+0x18/0x20 [ 30.493748][ T513] ? __cfi_ksys_write+0x10/0x10 [ 30.493770][ T513] ? blocking_notifier_call_chain+0x7c/0x90 [ 30.493797][ T513] __se_sys_munmap+0xc0/0x380 [ 30.493821][ T513] __x64_sys_munmap+0x5f/0x80 [ 30.493844][ T513] x64_sys_call+0x9c6/0x2ee0 [ 30.493868][ T513] do_syscall_64+0x57/0xf0 [ 30.493890][ T513] ? clear_bhb_loop+0x50/0xa0 [ 30.493913][ T513] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.493936][ T513] RIP: 0033:0x7f17cdd9c799 [ 30.493962][ T513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.493976][ T513] RSP: 002b:00007f17cec4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 30.494001][ T513] RAX: ffffffffffffffda RBX: 00007f17ce015fa0 RCX: 00007f17cdd9c799 [ 30.494015][ T513] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 30.494027][ T513] RBP: 00007f17cec4f090 R08: 0000000000000000 R09: 0000000000000000 [ 30.494039][ T513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.494050][ T513] R13: 00007f17ce016038 R14: 00007f17ce015fa0 R15: 00007ffed5afdd88 [ 30.494072][ T513] [ 30.884018][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 30.884035][ T36] audit: type=1400 audit(1774621637.319:172): avc: denied { accept } for pid=521 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 31.011241][ T31] usb usb1-port1: attempt power cycle [ 31.153510][ T36] audit: type=1400 audit(1774621637.599:173): avc: denied { write } for pid=523 comm="syz.3.61" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.296435][ T532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.321798][ T532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.352167][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 31.373118][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.439688][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.468480][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.503146][ T31] usb 1-1: device descriptor read/8, error -71 [ 31.743899][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 31.864448][ T541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.870754][ T36] audit: type=1400 audit(1774621638.299:174): avc: denied { create } for pid=538 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.882436][ T541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.920054][ T36] audit: type=1400 audit(1774621638.309:175): avc: denied { ioctl } for pid=538 comm="syz.2.66" path="socket:[4679]" dev="sockfs" ino=4679 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.962318][ T541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 31.990542][ T541] fuse: Bad value for 'group_id' [ 31.995581][ T541] fuse: Bad value for 'group_id' [ 32.003134][ T541] syzkaller1: entered allmulticast mode [ 32.027626][ T36] audit: type=1400 audit(1774621638.469:176): avc: denied { create } for pid=547 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.099268][ T36] audit: type=1400 audit(1774621638.499:177): avc: denied { connect } for pid=547 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.122149][ T36] audit: type=1400 audit(1774621638.499:178): avc: denied { shutdown } for pid=547 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.143856][ T36] audit: type=1400 audit(1774621638.539:179): avc: denied { lock } for pid=547 comm="syz.2.69" path="socket:[4774]" dev="sockfs" ino=4774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 32.172203][ T31] usb 1-1: device not accepting address 12, error -71 [ 32.179145][ T31] usb usb1-port1: unable to enumerate USB device [ 32.282880][ T9] usb 2-1: string descriptor 0 read error: -32 [ 32.289452][ T9] gl620a 2-1:1.93: probe with driver gl620a failed with error -22 [ 32.772211][ T36] audit: type=1400 audit(1774621639.209:180): avc: denied { ioctl } for pid=555 comm="syz.0.72" path="socket:[5498]" dev="sockfs" ino=5498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.822127][ T36] audit: type=1400 audit(1774621639.259:181): avc: denied { ioctl } for pid=558 comm="syz.0.73" path="socket:[5504]" dev="sockfs" ino=5504 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.878636][ T564] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 33.262162][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.314751][ T483] syz.1.53 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 33.343549][ T483] CPU: 0 UID: 0 PID: 483 Comm: syz.1.53 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 33.343580][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.343591][ T483] Call Trace: [ 33.343597][ T483] [ 33.343604][ T483] __dump_stack+0x21/0x30 [ 33.343634][ T483] dump_stack_lvl+0x140/0x1c0 [ 33.343655][ T483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.343676][ T483] ? ___ratelimit+0x40e/0x5b0 [ 33.343704][ T483] dump_stack+0x19/0x20 [ 33.343725][ T483] dump_header+0xd6/0x490 [ 33.343744][ T483] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 33.343766][ T483] oom_kill_process+0x35d/0x640 [ 33.343783][ T483] out_of_memory+0x624/0xa30 [ 33.343806][ T483] ? __cfi_out_of_memory+0x10/0x10 [ 33.343829][ T483] ? mutex_lock_killable+0x97/0x1d0 [ 33.343848][ T483] ? __cfi_mutex_lock_killable+0x10/0x10 [ 33.343868][ T483] mem_cgroup_out_of_memory+0x2c8/0x390 [ 33.343892][ T483] ? css_next_descendant_pre+0x202/0x230 [ 33.343911][ T483] ? drain_obj_stock+0xed0/0xed0 [ 33.343935][ T483] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 33.343959][ T483] try_charge_memcg+0x91c/0xe10 [ 33.343981][ T483] ? __cfi_try_charge_memcg+0x10/0x10 [ 33.344001][ T483] ? __alloc_pages_noprof+0x35f/0x7e0 [ 33.344022][ T483] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.344043][ T483] __mem_cgroup_charge+0xfc/0x420 [ 33.344066][ T483] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 33.344087][ T483] ? do_pte_missing+0x1937/0x44f0 [ 33.344107][ T483] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 33.344127][ T483] ? put_swap_device+0x130/0x130 [ 33.344153][ T483] ? shmem_huge_global_enabled+0x2da/0x360 [ 33.344179][ T483] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 33.344204][ T483] ? __kasan_check_write+0x18/0x20 [ 33.344227][ T483] ? _raw_spin_lock+0x92/0x120 [ 33.344250][ T483] shmem_get_folio_gfp+0x607/0x1390 [ 33.344277][ T483] ? shmem_get_folio+0xc0/0xc0 [ 33.344300][ T483] ? follow_page_pte+0x90f/0xbc0 [ 33.344321][ T483] ? inode_to_bdi+0x6d/0x100 [ 33.344341][ T483] shmem_write_begin+0xf4/0x270 [ 33.344360][ T483] generic_perform_write+0x328/0x970 [ 33.344382][ T483] ? __cfi_generic_perform_write+0x10/0x10 [ 33.344402][ T483] ? down_write+0xee/0x2b0 [ 33.344421][ T483] ? file_update_time+0xa3/0x210 [ 33.344443][ T483] shmem_file_write_iter+0x105/0x130 [ 33.344463][ T483] __kernel_write_iter+0x42c/0x8a0 [ 33.344487][ T483] ? __cfi___kernel_write_iter+0x10/0x10 [ 33.344510][ T483] ? get_dump_page+0x165/0x220 [ 33.344528][ T483] ? __asan_memset+0x39/0x50 [ 33.344551][ T483] ? iov_iter_bvec+0xc0/0x180 [ 33.344576][ T483] dump_user_range+0xb8b/0xe60 [ 33.344602][ T483] ? __cfi_dump_user_range+0x10/0x10 [ 33.344625][ T483] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 33.344649][ T483] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 33.344671][ T483] ? elf_core_dump+0x24c0/0x3960 [ 33.344686][ T483] elf_core_dump+0x2e7e/0x3960 [ 33.344704][ T483] ? __cfi_elf_core_dump+0x10/0x10 [ 33.344726][ T483] ? dump_interrupted+0xf0/0xf0 [ 33.344748][ T483] ? filp_open+0x199/0x1f0 [ 33.344767][ T483] ? 0xffffffffff600000 [ 33.344783][ T483] do_coredump+0x208a/0x2fe0 [ 33.344808][ T483] ? __cfi_do_coredump+0x10/0x10 [ 33.344829][ T483] ? asm_exc_page_fault+0x2b/0x30 [ 33.344858][ T483] ? __kasan_slab_free+0x6a/0x80 [ 33.344875][ T483] ? kmem_cache_free+0x1bd/0x4f0 [ 33.344898][ T483] ? get_signal+0xa74/0x14e0 [ 33.344919][ T483] get_signal+0x11f8/0x14e0 [ 33.344943][ T483] arch_do_signal_or_restart+0xbc/0x760 [ 33.344969][ T483] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.344997][ T483] irqentry_exit_to_user_mode+0x4d/0xb0 [ 33.345018][ T483] irqentry_exit+0x16/0x60 [ 33.345037][ T483] exc_page_fault+0x65/0xc0 [ 33.345055][ T483] asm_exc_page_fault+0x2b/0x30 [ 33.345076][ T483] RIP: 0033:0x7fdef899c7a1 [ 33.345092][ T483] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 33.345107][ T483] RSP: 002b:00000000fffffdf0 EFLAGS: 00010217 [ 33.345124][ T483] RAX: 0000000000000000 RBX: 00007fdef8c15fa0 RCX: 00007fdef899c799 [ 33.345137][ T483] RDX: 0000000000000000 RSI: 00000000fffffdf0 RDI: 0000000000000000 [ 33.345156][ T483] RBP: 00007fdef8a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 33.345168][ T483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.345180][ T483] R13: 00007fdef8c16038 R14: 00007fdef8c15fa0 R15: 00007ffc836e0558 [ 33.345195][ T483] [ 33.346653][ T483] memory: usage 307200kB, limit 307200kB, failcnt 20317 [ 33.794953][ T483] memory+swap: usage 431792kB, limit 9007199254740988kB, failcnt 0 [ 33.803186][ T483] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 33.810131][ T483] Memory cgroup stats for /syz1: [ 33.810278][ T483] cache 314081280 [ 33.812157][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 33.815608][ T483] rss 102400 [ 33.820754][ T64] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.824157][ T483] rss_huge 0 [ 33.827225][ T64] usb 3-1: config 0 has no interface number 0 [ 33.836077][ T483] shmem 314073088 [ 33.839895][ T64] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.845157][ T483] mapped_file 10113024 [ 33.848513][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.857682][ T483] dirty 4096 [ 33.861544][ T64] usb 3-1: Product: syz [ 33.869939][ T483] writeback 0 [ 33.872951][ T64] usb 3-1: Manufacturer: syz [ 33.877115][ T483] workingset_refault_anon 57 [ 33.880230][ T64] usb 3-1: SerialNumber: syz [ 33.885023][ T483] workingset_refault_file 1744 [ 33.897046][ T64] usb 3-1: config 0 descriptor?? [ 33.906546][ T483] swap 127582208 [ 33.908745][ T64] smsc95xx v2.0.0 [ 33.910113][ T483] swapcached 413696 [ 33.910123][ T483] pgpgin 129295 [ 33.910129][ T483] pgpgout 52495 [ 33.910135][ T483] pgfault 13185 [ 33.915666][ T586] mJ: renamed from bond_slave_0 [ 33.918092][ T483] pgmajfault 49 [ 33.936621][ T483] inactive_anon 48975872 [ 33.940856][ T483] active_anon 265588736 [ 33.945194][ T483] inactive_file 0 [ 33.949039][ T483] active_file 8192 [ 33.954222][ T483] unevictable 0 [ 33.957688][ T483] hierarchical_memory_limit 314572800 [ 33.963120][ T483] hierarchical_memsw_limit 9223372036854771712 [ 33.969274][ T483] total_cache 314081280 [ 33.973482][ T483] total_rss 102400 [ 33.977199][ T483] total_rss_huge 0 [ 33.981282][ T483] total_shmem 314073088 [ 33.989500][ T483] total_mapped_file 10113024 [ 33.995025][ T483] total_dirty 4096 [ 33.999135][ T483] total_writeback 0 [ 34.003166][ T483] total_workingset_refault_anon 57 [ 34.008320][ T483] total_workingset_refault_file 1744 [ 34.013692][ T483] total_swap 127582208 [ 34.017993][ T483] total_swapcached 413696 [ 34.022525][ T483] total_pgpgin 129295 [ 34.026516][ T483] total_pgpgout 52495 [ 34.030489][ T483] total_pgfault 13185 [ 34.034548][ T483] total_pgmajfault 49 [ 34.038517][ T483] total_inactive_anon 48975872 [ 34.043351][ T483] total_active_anon 265588736 [ 34.048038][ T483] total_inactive_file 0 [ 34.052264][ T483] total_active_file 8192 [ 34.056556][ T483] total_unevictable 0 [ 34.060622][ T483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.53,pid=482,uid=0 [ 34.075458][ T483] Memory cgroup out of memory: Killed process 482 (syz.1.53) total-vm:90168kB, anon-rss:1224kB, file-rss:53648kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 34.246576][ T495] syz.1.53 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 34.324081][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 34.350387][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.361150][ T495] CPU: 1 UID: 0 PID: 495 Comm: syz.1.53 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 34.361179][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.361190][ T495] Call Trace: [ 34.361196][ T495] [ 34.361203][ T495] __dump_stack+0x21/0x30 [ 34.361231][ T495] dump_stack_lvl+0x140/0x1c0 [ 34.361253][ T495] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.361275][ T495] ? ___ratelimit+0x40e/0x5b0 [ 34.361301][ T495] dump_stack+0x19/0x20 [ 34.361322][ T495] dump_header+0xd6/0x490 [ 34.361342][ T495] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 34.361364][ T495] oom_kill_process+0x35d/0x640 [ 34.361382][ T495] out_of_memory+0x624/0xa30 [ 34.361407][ T495] ? __cfi_out_of_memory+0x10/0x10 [ 34.361431][ T495] ? mutex_lock_killable+0x97/0x1d0 [ 34.361449][ T495] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.361469][ T495] mem_cgroup_out_of_memory+0x2c8/0x390 [ 34.361492][ T495] ? css_next_descendant_pre+0x202/0x230 [ 34.361512][ T495] ? drain_obj_stock+0xed0/0xed0 [ 34.361536][ T495] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 34.361560][ T495] try_charge_memcg+0x91c/0xe10 [ 34.361582][ T495] ? __cfi_try_charge_memcg+0x10/0x10 [ 34.361602][ T495] ? __alloc_pages_noprof+0x35f/0x7e0 [ 34.361623][ T495] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.361645][ T495] __mem_cgroup_charge+0xfc/0x420 [ 34.361667][ T495] ? folio_add_lru+0x116/0x400 [ 34.361683][ T495] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 34.361704][ T495] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 34.361724][ T495] ? put_swap_device+0x130/0x130 [ 34.361741][ T495] ? shmem_huge_global_enabled+0x2da/0x360 [ 34.361765][ T495] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 34.361789][ T495] ? __kasan_check_write+0x18/0x20 [ 34.361832][ T495] ? _raw_spin_lock+0x92/0x120 [ 34.361854][ T495] shmem_get_folio_gfp+0x607/0x1390 [ 34.361881][ T495] ? shmem_get_folio+0xc0/0xc0 [ 34.361904][ T495] ? follow_page_pte+0x90f/0xbc0 [ 34.361924][ T495] ? inode_to_bdi+0x6d/0x100 [ 34.361944][ T495] shmem_write_begin+0xf4/0x270 [ 34.361962][ T495] generic_perform_write+0x328/0x970 [ 34.361984][ T495] ? __cfi_generic_perform_write+0x10/0x10 [ 34.362003][ T495] ? down_write+0xee/0x2b0 [ 34.362023][ T495] ? file_update_time+0xa3/0x210 [ 34.362043][ T495] shmem_file_write_iter+0x105/0x130 [ 34.362063][ T495] __kernel_write_iter+0x42c/0x8a0 [ 34.362090][ T495] ? __cfi___kernel_write_iter+0x10/0x10 [ 34.362111][ T495] ? get_dump_page+0x165/0x220 [ 34.362130][ T495] ? __asan_memset+0x39/0x50 [ 34.362151][ T495] ? iov_iter_bvec+0xc0/0x180 [ 34.362176][ T495] dump_user_range+0xb8b/0xe60 [ 34.362202][ T495] ? __cfi_dump_user_range+0x10/0x10 [ 34.362225][ T495] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 34.362250][ T495] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 34.362274][ T495] ? elf_core_dump+0x24c0/0x3960 [ 34.362292][ T495] elf_core_dump+0x2e7e/0x3960 [ 34.362313][ T495] ? __cfi_elf_core_dump+0x10/0x10 [ 34.362337][ T495] ? dump_interrupted+0xf0/0xf0 [ 34.362359][ T495] ? filp_open+0x199/0x1f0 [ 34.362378][ T495] ? 0xffffffffff600000 [ 34.362393][ T495] do_coredump+0x208a/0x2fe0 [ 34.362417][ T495] ? __cfi_do_coredump+0x10/0x10 [ 34.362438][ T495] ? asm_exc_page_fault+0x2b/0x30 [ 34.362467][ T495] ? __kasan_slab_free+0x6a/0x80 [ 34.362483][ T495] ? kmem_cache_free+0x1bd/0x4f0 [ 34.362507][ T495] ? get_signal+0xa74/0x14e0 [ 34.362528][ T495] get_signal+0x11f8/0x14e0 [ 34.362551][ T495] arch_do_signal_or_restart+0xbc/0x760 [ 34.362576][ T495] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.362603][ T495] irqentry_exit_to_user_mode+0x4d/0xb0 [ 34.362623][ T495] irqentry_exit+0x16/0x60 [ 34.362640][ T495] exc_page_fault+0x65/0xc0 [ 34.362658][ T495] asm_exc_page_fault+0x2b/0x30 [ 34.362680][ T495] RIP: 0033:0x7fdef899c7a1 [ 34.362695][ T495] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 34.362710][ T495] RSP: 002b:00000000fffffdf0 EFLAGS: 00010217 [ 34.362728][ T495] RAX: 0000000000000000 RBX: 00007fdef8c15fa0 RCX: 00007fdef899c799 [ 34.362741][ T495] RDX: 0000000000000000 RSI: 00000000fffffdf0 RDI: 0000000000000000 [ 34.362752][ T495] RBP: 00007fdef8a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 34.362763][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.362774][ T495] R13: 00007fdef8c16038 R14: 00007fdef8c15fa0 R15: 00007ffc836e0558 [ 34.362789][ T495] [ 34.372199][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.582189][ T495] memory: usage 306176kB, limit 307200kB, failcnt 23026 [ 34.626971][ T10] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 34.656634][ T495] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 34.682152][ T10] usb 4-1: chopping to 0 config(s) [ 34.820888][ T495] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.827976][ T10] usb 4-1: can't read configurations, error -32 [ 34.854651][ T495] Memory cgroup stats for /syz1: [ 34.854831][ T495] cache 307195904 [ 34.867123][ T495] rss 135168 [ 34.870744][ T495] rss_huge 0 [ 34.874312][ T495] shmem 304308224 [ 34.878014][ T495] mapped_file 9150464 [ 34.887757][ T495] dirty 0 [ 34.890761][ T495] writeback 0 [ 34.894091][ T495] workingset_refault_anon 71 [ 34.898679][ T495] workingset_refault_file 4534 [ 34.903460][ T495] swap 126922752 [ 34.908462][ T495] swapcached 81920 [ 34.939073][ T495] pgpgin 139185 [ 34.942646][ T495] pgpgout 64147 [ 34.946126][ T495] pgfault 13554 [ 34.949593][ T495] pgmajfault 82 [ 34.953108][ T495] inactive_anon 267341824 [ 34.957441][ T495] active_anon 36720640 [ 34.961515][ T495] inactive_file 0 [ 34.965218][ T495] active_file 2887680 [ 34.969216][ T495] unevictable 0 [ 34.972710][ T495] hierarchical_memory_limit 314572800 [ 34.978129][ T495] hierarchical_memsw_limit 9223372036854771712 [ 34.984358][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.015335][ T495] total_cache 307195904 [ 35.019531][ T495] total_rss 135168 [ 35.031980][ T495] total_rss_huge 0 [ 35.040187][ T495] total_shmem 304308224 [ 35.048861][ T495] total_mapped_file 9150464 [ 35.058772][ T495] total_dirty 0 [ 35.062290][ T495] total_writeback 0 [ 35.066160][ T495] total_workingset_refault_anon 71 [ 35.071310][ T495] total_workingset_refault_file 4534 [ 35.076850][ T495] total_swap 126922752 [ 35.080968][ T495] total_swapcached 81920 [ 35.085326][ T495] total_pgpgin 139185 [ 35.089379][ T495] total_pgpgout 64147 [ 35.093409][ T495] total_pgfault 13554 [ 35.097421][ T495] total_pgmajfault 82 [ 35.101456][ T495] total_inactive_anon 267341824 [ 35.106364][ T495] total_active_anon 36720640 [ 35.110983][ T495] total_inactive_file 0 [ 35.116330][ T495] total_active_file 2887680 [ 35.125217][ T495] total_unevictable 0 [ 35.132144][ T10] usb 4-1: device descriptor read/64, error -32 [ 35.140605][ T495] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.53,pid=491,uid=0 [ 35.171429][ T495] Memory cgroup out of memory: Killed process 491 (syz.1.53) total-vm:90300kB, anon-rss:1224kB, file-rss:53636kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 35.392172][ T10] usb 4-1: device descriptor read/64, error -32 [ 35.440904][ T550] FAULT_INJECTION: forcing a failure. [ 35.440904][ T550] name failslab, interval 1, probability 0, space 0, times 0 [ 35.502211][ T10] usb usb4-port1: attempt power cycle [ 35.516295][ T550] CPU: 0 UID: 0 PID: 550 Comm: syz.1.70 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 35.516325][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.516336][ T550] Call Trace: [ 35.516342][ T550] [ 35.516350][ T550] __dump_stack+0x21/0x30 [ 35.516377][ T550] dump_stack_lvl+0x140/0x1c0 [ 35.516402][ T550] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.516424][ T550] ? kasan_save_track+0x4f/0x80 [ 35.516449][ T550] ? kasan_save_track+0x3e/0x80 [ 35.516472][ T550] ? kasan_save_alloc_info+0x40/0x50 [ 35.516493][ T550] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 35.516517][ T550] dump_stack+0x19/0x20 [ 35.516537][ T550] should_fail_ex+0x3d7/0x530 [ 35.516560][ T550] should_failslab+0xac/0x100 [ 35.516577][ T550] kmem_cache_alloc_noprof+0x42/0x410 [ 35.516600][ T550] ? mas_alloc_nodes+0x254/0x9d0 [ 35.516621][ T550] mas_alloc_nodes+0x254/0x9d0 [ 35.516641][ T550] mas_preallocate+0x783/0xcb0 [ 35.516660][ T550] ? kasan_save_alloc_info+0x40/0x50 [ 35.516681][ T550] ? __cfi_mas_preallocate+0x10/0x10 [ 35.516700][ T550] ? __kasan_check_read+0x15/0x20 [ 35.516722][ T550] ? anon_vma_name+0x51/0xa0 [ 35.516750][ T550] ? vm_area_dup+0x41c/0x570 [ 35.516768][ T550] __split_vma+0x449/0xc10 [ 35.516793][ T550] ? __kernel_text_address+0x11/0x40 [ 35.516814][ T550] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 35.516839][ T550] ? _parse_integer_limit+0x195/0x1e0 [ 35.516860][ T550] vms_gather_munmap_vmas+0x273/0xdd0 [ 35.516884][ T550] ? _parse_integer+0x2e/0x40 [ 35.516905][ T550] do_vmi_align_munmap+0x251/0x610 [ 35.516932][ T550] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 35.516957][ T550] ? mas_walk+0x3f7/0x650 [ 35.516975][ T550] ? mas_find+0x358/0x5f0 [ 35.516992][ T550] ? __kasan_check_write+0x18/0x20 [ 35.517015][ T550] do_vmi_munmap+0x245/0x2e0 [ 35.517039][ T550] __vm_munmap+0x23e/0x390 [ 35.517063][ T550] ? vm_munmap+0x40/0x40 [ 35.517085][ T550] ? __kasan_check_write+0x18/0x20 [ 35.517109][ T550] ? __cfi_ksys_write+0x10/0x10 [ 35.517131][ T550] ? blocking_notifier_call_chain+0x7c/0x90 [ 35.517156][ T550] __se_sys_munmap+0xc0/0x380 [ 35.517180][ T550] __x64_sys_munmap+0x5f/0x80 [ 35.517203][ T550] x64_sys_call+0x9c6/0x2ee0 [ 35.517226][ T550] do_syscall_64+0x57/0xf0 [ 35.517248][ T550] ? clear_bhb_loop+0x50/0xa0 [ 35.517272][ T550] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.517294][ T550] RIP: 0033:0x7fdef899c799 [ 35.517310][ T550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.517325][ T550] RSP: 002b:00007fdef9912028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 35.517344][ T550] RAX: ffffffffffffffda RBX: 00007fdef8c15fa0 RCX: 00007fdef899c799 [ 35.517359][ T550] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 35.517371][ T550] RBP: 00007fdef9912090 R08: 0000000000000000 R09: 0000000000000000 [ 35.517383][ T550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.517395][ T550] R13: 00007fdef8c16038 R14: 00007fdef8c15fa0 R15: 00007ffc836e0558 [ 35.517411][ T550] [ 35.912904][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 35.912921][ T36] audit: type=1400 audit(1774621642.359:198): avc: denied { map } for pid=615 comm="syz.3.91" path="socket:[5776]" dev="sockfs" ino=5776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.948636][ T36] audit: type=1400 audit(1774621642.359:199): avc: denied { read } for pid=615 comm="syz.3.91" path="socket:[5776]" dev="sockfs" ino=5776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.112156][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.132664][ T10] usb 4-1: device descriptor read/8, error -32 [ 36.262679][ T10] usb 4-1: device descriptor read/8, error -32 [ 36.317331][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.363382][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.502174][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.522661][ T10] usb 4-1: device descriptor read/8, error -32 [ 36.606101][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.623877][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.662738][ T10] usb 4-1: device descriptor read/8, error -32 [ 36.772149][ T10] raw-gadget.3 gadget.3: failed to queue suspend event [ 36.779085][ T10] usb usb4-port1: unable to enumerate USB device [ 37.232995][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 37.243977][ T64] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 37.351231][ T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.359758][ T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.542389][ T64] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 37.571505][ T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.580734][ T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.599485][ T36] audit: type=1400 audit(1774621644.039:200): avc: denied { read } for pid=632 comm="syz.3.98" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.599943][ T633] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 37.622860][ T36] audit: type=1400 audit(1774621644.039:201): avc: denied { open } for pid=632 comm="syz.3.98" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.654398][ T36] audit: type=1400 audit(1774621644.039:202): avc: denied { ioctl } for pid=632 comm="syz.3.98" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.697443][ T36] audit: type=1400 audit(1774621644.139:203): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.740847][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.751096][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.760987][ T64] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.770190][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.778361][ T64] usb 1-1: SerialNumber: syz [ 37.799257][ T638] FAULT_INJECTION: forcing a failure. [ 37.799257][ T638] name failslab, interval 1, probability 0, space 0, times 0 [ 37.811992][ T638] CPU: 1 UID: 0 PID: 638 Comm: syz.3.100 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 37.812019][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.812031][ T638] Call Trace: [ 37.812037][ T638] [ 37.812045][ T638] __dump_stack+0x21/0x30 [ 37.812072][ T638] dump_stack_lvl+0x140/0x1c0 [ 37.812092][ T638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.812105][ T638] dump_stack+0x19/0x20 [ 37.812116][ T638] should_fail_ex+0x3d7/0x530 [ 37.812136][ T638] should_failslab+0xac/0x100 [ 37.812153][ T638] kmem_cache_alloc_noprof+0x42/0x410 [ 37.812176][ T638] ? vm_area_dup+0x42/0x570 [ 37.812194][ T638] vm_area_dup+0x42/0x570 [ 37.812208][ T638] __split_vma+0x1ce/0xc10 [ 37.812222][ T638] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 37.812236][ T638] ? mas_find+0x3f1/0x5f0 [ 37.812246][ T638] ? __kasan_check_write+0x18/0x20 [ 37.812259][ T638] vms_gather_munmap_vmas+0x428/0xdd0 [ 37.812280][ T638] do_vmi_align_munmap+0x251/0x610 [ 37.812307][ T638] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 37.812338][ T638] ? mas_walk+0x3f7/0x650 [ 37.812351][ T638] ? mas_find+0x358/0x5f0 [ 37.812360][ T638] ? __kasan_check_write+0x18/0x20 [ 37.812373][ T638] do_vmi_munmap+0x245/0x2e0 [ 37.812385][ T638] __vm_munmap+0x23e/0x390 [ 37.812399][ T638] ? vm_munmap+0x40/0x40 [ 37.812413][ T638] ? __kasan_check_write+0x18/0x20 [ 37.812437][ T638] ? __cfi_ksys_write+0x10/0x10 [ 37.812459][ T638] ? blocking_notifier_call_chain+0x7c/0x90 [ 37.812490][ T638] __se_sys_munmap+0xc0/0x380 [ 37.812507][ T638] __x64_sys_munmap+0x5f/0x80 [ 37.812519][ T638] x64_sys_call+0x9c6/0x2ee0 [ 37.812532][ T638] do_syscall_64+0x57/0xf0 [ 37.812545][ T638] ? clear_bhb_loop+0x50/0xa0 [ 37.812565][ T638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.812588][ T638] RIP: 0033:0x7f1ebe19c799 [ 37.812603][ T638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.812618][ T638] RSP: 002b:00007f1ebf09b028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 37.812635][ T638] RAX: ffffffffffffffda RBX: 00007f1ebe415fa0 RCX: 00007f1ebe19c799 [ 37.812643][ T638] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 37.812649][ T638] RBP: 00007f1ebf09b090 R08: 0000000000000000 R09: 0000000000000000 [ 37.812656][ T638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.812662][ T638] R13: 00007f1ebe416038 R14: 00007f1ebe415fa0 R15: 00007fff4e26c268 [ 37.812670][ T638] [ 38.074621][ T10] usb 3-1: USB disconnect, device number 4 [ 38.203128][ T36] audit: type=1400 audit(1774621644.639:204): avc: denied { bind } for pid=648 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.236998][ T64] usb 1-1: 0:2 : does not exist [ 38.252744][ T64] usb 1-1: USB disconnect, device number 13 [ 38.530133][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.532159][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.538749][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.692134][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 38.698360][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 38.706746][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 38.715410][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 38.724411][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.734095][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 38.743765][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.756827][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 38.758081][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 38.765907][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.766659][ T10] usb 3-1: config 0 descriptor?? [ 38.991522][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 39.004399][ T10] usb 3-1: USB disconnect, device number 5 [ 39.010826][ T10] usblp0: removed [ 39.042178][ T449] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 39.150570][ T672] FAULT_INJECTION: forcing a failure. [ 39.150570][ T672] name failslab, interval 1, probability 0, space 0, times 0 [ 39.157579][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 39.168797][ T672] CPU: 0 UID: 0 PID: 672 Comm: syz.1.110 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 39.168829][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.168840][ T672] Call Trace: [ 39.168846][ T672] [ 39.168852][ T672] __dump_stack+0x21/0x30 [ 39.168880][ T672] dump_stack_lvl+0x140/0x1c0 [ 39.168901][ T672] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.168923][ T672] ? kasan_save_track+0x4f/0x80 [ 39.168948][ T672] ? kasan_save_track+0x3e/0x80 [ 39.168970][ T672] ? kasan_save_alloc_info+0x40/0x50 [ 39.168991][ T672] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 39.169014][ T672] dump_stack+0x19/0x20 [ 39.169033][ T672] should_fail_ex+0x3d7/0x530 [ 39.169054][ T672] should_failslab+0xac/0x100 [ 39.169071][ T672] kmem_cache_alloc_noprof+0x42/0x410 [ 39.169092][ T672] ? mas_alloc_nodes+0x254/0x9d0 [ 39.169111][ T672] mas_alloc_nodes+0x254/0x9d0 [ 39.169130][ T672] mas_preallocate+0x783/0xcb0 [ 39.169147][ T672] ? mas_next_slot+0xe63/0xf20 [ 39.169164][ T672] ? kasan_save_alloc_info+0x40/0x50 [ 39.169184][ T672] ? __cfi_mas_preallocate+0x10/0x10 [ 39.169202][ T672] ? __kasan_check_read+0x15/0x20 [ 39.169223][ T672] ? anon_vma_name+0x51/0xa0 [ 39.169242][ T672] ? vm_area_dup+0x41c/0x570 [ 39.169259][ T672] __split_vma+0x449/0xc10 [ 39.169283][ T672] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 39.169306][ T672] ? mas_find+0x3f1/0x5f0 [ 39.169323][ T672] ? __kasan_check_write+0x18/0x20 [ 39.169345][ T672] vms_gather_munmap_vmas+0x428/0xdd0 [ 39.169370][ T672] do_vmi_align_munmap+0x251/0x610 [ 39.169396][ T672] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 39.169419][ T672] ? mas_walk+0x3f7/0x650 [ 39.169437][ T672] ? mas_find+0x358/0x5f0 [ 39.169453][ T672] ? __kasan_check_write+0x18/0x20 [ 39.169475][ T672] do_vmi_munmap+0x245/0x2e0 [ 39.169506][ T672] __vm_munmap+0x23e/0x390 [ 39.169529][ T672] ? vm_munmap+0x40/0x40 [ 39.169551][ T672] ? __kasan_check_write+0x18/0x20 [ 39.169573][ T672] ? __cfi_ksys_write+0x10/0x10 [ 39.169595][ T672] ? blocking_notifier_call_chain+0x7c/0x90 [ 39.169621][ T672] __se_sys_munmap+0xc0/0x380 [ 39.169643][ T672] __x64_sys_munmap+0x5f/0x80 [ 39.169665][ T672] x64_sys_call+0x9c6/0x2ee0 [ 39.169688][ T672] do_syscall_64+0x57/0xf0 [ 39.169709][ T672] ? clear_bhb_loop+0x50/0xa0 [ 39.169732][ T672] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.169753][ T672] RIP: 0033:0x7fdef899c799 [ 39.169768][ T672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.169782][ T672] RSP: 002b:00007fdef9912028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 39.169801][ T672] RAX: ffffffffffffffda RBX: 00007fdef8c15fa0 RCX: 00007fdef899c799 [ 39.169814][ T672] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 39.169825][ T672] RBP: 00007fdef9912090 R08: 0000000000000000 R09: 0000000000000000 [ 39.169837][ T672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.169848][ T672] R13: 00007fdef8c16038 R14: 00007fdef8c15fa0 R15: 00007ffc836e0558 [ 39.169862][ T672] [ 39.214761][ T684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.242135][ T449] usb 1-1: Using ep0 maxpacket: 32 [ 39.244597][ T684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.250110][ T449] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 39.254681][ T36] audit: type=1400 audit(1774621645.699:205): avc: denied { read } for pid=681 comm="syz.3.114" path="socket:[6159]" dev="sockfs" ino=6159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.262005][ T449] usb 1-1: config 0 has no interface number 0 [ 39.313261][ T36] audit: type=1400 audit(1774621645.759:206): avc: denied { shutdown } for pid=681 comm="syz.3.114" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.318770][ T449] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 39.569139][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 39.569162][ T449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.578384][ T682] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 39.586017][ T449] usb 1-1: Product: syz [ 39.625483][ T449] usb 1-1: Manufacturer: syz [ 39.630114][ T449] usb 1-1: SerialNumber: syz [ 39.636152][ T449] usb 1-1: config 0 descriptor?? [ 39.642896][ T449] smsc95xx v2.0.0 [ 39.653032][ T36] audit: type=1400 audit(1774621646.099:207): avc: denied { mounton } for pid=690 comm="syz.3.116" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.765099][ T694] rust_binder: validate_parent_fixup: new_min_offset=17, sg_entry.length=0 [ 39.765133][ T694] rust_binder: Error while translating object. [ 39.774005][ T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.780227][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 39.791385][ T694] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.808663][ T694] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 39.817524][ T694] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.825464][ T694] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 39.850761][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.859358][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.043187][ T449] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 40.053991][ T449] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.329193][ T711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'. [ 40.360512][ T713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.481781][ T722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.490492][ T722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.522308][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.530808][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.022186][ T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.173259][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.184292][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.192183][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.199233][ T64] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 41.203259][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.211630][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.227864][ T64] usb 3-1: config 0 descriptor?? [ 41.431909][ T733] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 41.443055][ T733] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 41.468581][ T744] fuse: Bad value for 'fd' [ 41.474859][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 41.474874][ T36] audit: type=1400 audit(1774621647.919:217): avc: denied { unlink } for pid=743 comm="syz.3.136" name="#1" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.503499][ T36] audit: type=1400 audit(1774621647.919:218): avc: denied { mount } for pid=743 comm="syz.3.136" name="/" dev="overlay" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.525686][ T36] audit: type=1400 audit(1774621647.949:219): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.554011][ T36] audit: type=1400 audit(1774621647.999:220): avc: denied { create } for pid=745 comm="syz.3.137" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.559068][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 41.652994][ T64] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x7 [ 41.659849][ T64] arvo 0003:1E7D:30D4.0001: item fetching failed at offset 4/7 [ 41.667607][ T64] arvo 0003:1E7D:30D4.0001: parse failed [ 41.673339][ T64] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -22 [ 41.688772][ T36] audit: type=1400 audit(1774621648.129:221): avc: denied { unlink } for pid=292 comm="syz-executor" name="file5" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.856111][ T64] usb 3-1: USB disconnect, device number 6 [ 42.113322][ T36] audit: type=1400 audit(1774621648.559:222): avc: denied { append } for pid=751 comm="syz.1.139" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.143447][ T754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.151969][ T754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.576748][ T764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.585878][ T764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.602177][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.675204][ T449] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 42.686825][ T449] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 42.752183][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 42.758502][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.766933][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.775609][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.784587][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.794258][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.803933][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.816915][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.825970][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.837484][ T10] usb 3-1: config 0 descriptor?? [ 43.047521][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.059534][ T10] usb 3-1: USB disconnect, device number 7 [ 43.065956][ T10] usblp0: removed [ 43.143224][ T36] audit: type=1400 audit(1774621649.589:223): avc: denied { listen } for pid=775 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.162510][ T36] audit: type=1400 audit(1774621649.589:224): avc: denied { create } for pid=775 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.182349][ T36] audit: type=1400 audit(1774621649.589:225): avc: denied { accept } for pid=775 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.222458][ T36] audit: type=1400 audit(1774621649.669:226): avc: denied { map } for pid=777 comm="syz.3.148" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.223719][ T778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.255800][ T778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.646731][ T780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.655238][ T780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.697240][ T449] usb 1-1: USB disconnect, device number 14 [ 43.732664][ T790] netlink: 'syz.1.152': attribute type 46 has an invalid length. [ 43.740985][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.749527][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.836658][ T795] syz.3.154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.858012][ T797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=797 comm=syz.3.155 [ 43.879464][ T799] netlink: 108 bytes leftover after parsing attributes in process `syz.3.156'. [ 43.899870][ T801] Zero length message leads to an empty skb [ 43.914666][ T803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.923289][ T803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.266628][ T810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.275193][ T810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.302145][ T449] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 44.458586][ T449] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.466806][ T449] usb 3-1: not running at top speed; connect to a high speed hub [ 44.475621][ T449] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.486074][ T449] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.497218][ T449] usb 3-1: string descriptor 0 read error: -22 [ 44.503557][ T449] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.512836][ T449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.525763][ T449] usb 3-1: 0:2 : does not exist [ 44.537343][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.546507][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.554682][ T814] capability: warning: `syz.3.163' uses 32-bit capabilities (legacy support in use) [ 44.568462][ T819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.577639][ T819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.726608][ T837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.735329][ T837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.812193][ T64] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 44.962139][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 44.968608][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.978775][ T64] usb 1-1: config 0 has no interfaces? [ 44.986751][ T64] usb 1-1: string descriptor 0 read error: -71 [ 44.992994][ T64] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 45.002039][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.010957][ T64] usb 1-1: config 0 descriptor?? [ 45.016376][ T64] usb 1-1: can't set config #0, error -71 [ 45.022977][ T64] usb 1-1: USB disconnect, device number 15 [ 45.526941][ T861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.535522][ T861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.550223][ T449] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 45.561292][ T449] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 45.570763][ T449] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 45.581959][ T449] usb 3-1: USB disconnect, device number 8 [ 45.732170][ T64] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 45.883285][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.894267][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.904162][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 45.917020][ T64] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 45.926076][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.938968][ T64] usb 1-1: config 0 descriptor?? [ 46.071056][ T877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.080198][ T877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.082725][ T879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.096435][ T879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.312147][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.347516][ T64] steelseries 0003:1038:1410.0002: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 46.463306][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.473460][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.483056][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.492242][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.500216][ T10] usb 3-1: SerialNumber: syz [ 46.548332][ T64] usb 1-1: USB disconnect, device number 16 [ 46.620836][ T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.630450][ T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.631216][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 46.631230][ T36] audit: type=1400 audit(1774621653.069:235): avc: denied { mount } for pid=882 comm="syz.1.184" name="/" dev="ramfs" ino=7640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.666427][ T36] audit: type=1400 audit(1774621653.089:236): avc: denied { mounton } for pid=882 comm="syz.1.184" path="/file0" dev="ramfs" ino=6979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 46.893818][ T10] usb 3-1: 0:2 : does not exist [ 46.895740][ T896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.902346][ T10] usb 3-1: USB disconnect, device number 9 [ 46.908221][ T896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.920985][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.089391][ T900] netlink: 64 bytes leftover after parsing attributes in process `syz.0.190'. [ 47.352161][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 47.437990][ T908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.446753][ T908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.461981][ T909] tipc: Enabling of bearer rejected, failed to enable media [ 47.502144][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 47.508375][ T45] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.516623][ T45] usb 1-1: config 0 has no interface number 0 [ 47.524308][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.533516][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.541509][ T45] usb 1-1: Product: syz [ 47.545693][ T45] usb 1-1: Manufacturer: syz [ 47.550299][ T45] usb 1-1: SerialNumber: syz [ 47.555594][ T45] usb 1-1: config 0 descriptor?? [ 47.561271][ T45] smsc95xx v2.0.0 [ 47.962685][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 47.973985][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 48.048990][ T915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.057563][ T915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.069624][ T916] fuse: Bad value for 'fd' [ 48.076390][ T36] audit: type=1400 audit(1774621654.519:237): avc: denied { getopt } for pid=914 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.105308][ T36] audit: type=1400 audit(1774621654.549:238): avc: denied { append } for pid=919 comm="syz.1.198" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.107627][ T920] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 48.156691][ T36] audit: type=1400 audit(1774621654.599:239): avc: denied { create } for pid=922 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.177334][ T36] audit: type=1400 audit(1774621654.599:240): avc: denied { getopt } for pid=922 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.193386][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.198472][ T36] audit: type=1400 audit(1774621654.599:241): avc: denied { listen } for pid=922 comm="syz.1.199" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 48.207865][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.592158][ T64] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.742143][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 48.748339][ T64] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 48.757444][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.766056][ T64] usb 3-1: config 0 descriptor?? [ 48.771988][ T64] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 48.972715][ T64] usb 3-1: Detected FT232B [ 49.026945][ T947] fuseblk: Bad value for 'user_id' [ 49.028094][ T948] fuseblk: Bad value for 'user_id' [ 49.032194][ T947] fuseblk: Bad value for 'user_id' [ 49.037310][ T948] fuseblk: Bad value for 'user_id' [ 49.047856][ T36] audit: type=1400 audit(1774621655.489:242): avc: denied { remount } for pid=946 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.091973][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.100961][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.102727][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.117236][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.126609][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.135239][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.173634][ T64] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 49.180710][ T64] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 49.188199][ T64] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.197627][ T64] usb 3-1: USB disconnect, device number 10 [ 49.205584][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.215141][ T64] ftdi_sio 3-1:0.0: device disconnected [ 49.661380][ T958] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 49.667415][ T958] syzkaller0: group set to 0 [ 49.672304][ T958] syzkaller0: tun_chr_ioctl cmd 35111 [ 49.698781][ T964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.707640][ T964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.721556][ T964] ======================================================= [ 49.721556][ T964] WARNING: The mand mount option has been deprecated and [ 49.721556][ T964] and is ignored by this kernel. Remove the mand [ 49.721556][ T964] option from the mount to silence this warning. [ 49.721556][ T964] ======================================================= [ 49.747637][ T968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.765629][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.832375][ T970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 49.935519][ T36] audit: type=1400 audit(1774621656.379:243): avc: denied { listen } for pid=973 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.955265][ T36] audit: type=1400 audit(1774621656.379:244): avc: denied { connect } for pid=973 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.979398][ T976] overlayfs: missing 'lowerdir' [ 49.980325][ T977] overlayfs: missing 'lowerdir' [ 50.242155][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 50.294564][ T986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.303538][ T986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.392168][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 50.402186][ T10] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 50.419337][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 50.428541][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 50.432189][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.436779][ T10] usb 3-1: Product: syz [ 50.445884][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.449351][ T10] usb 3-1: Manufacturer: syz [ 50.462803][ T10] usb 3-1: SerialNumber: syz [ 50.467184][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.476596][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.610920][ T45] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 50.621867][ T45] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 50.688849][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.699404][ T10] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 50.732187][ T10] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 50.741805][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.754194][ T10] usb 3-1: USB disconnect, device number 11 [ 50.773175][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.043965][ T1002] FAULT_INJECTION: forcing a failure. [ 51.043965][ T1002] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.057183][ T1002] CPU: 1 UID: 0 PID: 1002 Comm: syz.3.226 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 51.057215][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.057228][ T1002] Call Trace: [ 51.057234][ T1002] [ 51.057241][ T1002] __dump_stack+0x21/0x30 [ 51.057268][ T1002] dump_stack_lvl+0x140/0x1c0 [ 51.057290][ T1002] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.057313][ T1002] ? check_stack_object+0x12b/0x150 [ 51.057338][ T1002] dump_stack+0x19/0x20 [ 51.057359][ T1002] should_fail_ex+0x3d7/0x530 [ 51.057381][ T1002] should_fail+0xf/0x20 [ 51.057400][ T1002] should_fail_usercopy+0x1e/0x30 [ 51.057423][ T1002] _copy_to_user+0x24/0xa0 [ 51.057448][ T1002] simple_read_from_buffer+0xed/0x160 [ 51.057469][ T1002] proc_fail_nth_read+0x1aa/0x220 [ 51.057491][ T1002] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.057510][ T1002] ? mas_walk+0x3f7/0x650 [ 51.057529][ T1002] ? bpf_lsm_file_permission+0xd/0x20 [ 51.057547][ T1002] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.057565][ T1002] vfs_read+0x289/0xcb0 [ 51.057584][ T1002] ? __cfi_vfs_read+0x10/0x10 [ 51.057605][ T1002] ? __kasan_check_write+0x18/0x20 [ 51.057628][ T1002] ? mutex_lock+0x97/0x1d0 [ 51.057645][ T1002] ? __cfi_mutex_lock+0x10/0x10 [ 51.057662][ T1002] ? __fget_files+0x2c5/0x340 [ 51.057680][ T1002] ksys_read+0x145/0x260 [ 51.057702][ T1002] ? xfd_validate_state+0x68/0x140 [ 51.057724][ T1002] ? __cfi_ksys_read+0x10/0x10 [ 51.057746][ T1002] ? __kasan_check_write+0x18/0x20 [ 51.057768][ T1002] ? fpregs_restore_userregs+0x11c/0x260 [ 51.057788][ T1002] __x64_sys_read+0x7f/0x90 [ 51.057920][ T1002] x64_sys_call+0x2638/0x2ee0 [ 51.057945][ T1002] do_syscall_64+0x57/0xf0 [ 51.057968][ T1002] ? clear_bhb_loop+0x50/0xa0 [ 51.057992][ T1002] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.058014][ T1002] RIP: 0033:0x7f1ebe15cfce [ 51.058030][ T1002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.058045][ T1002] RSP: 002b:00007f1ebf09afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.058065][ T1002] RAX: ffffffffffffffda RBX: 00007f1ebf09b6c0 RCX: 00007f1ebe15cfce [ 51.058080][ T1002] RDX: 000000000000000f RSI: 00007f1ebf09b0a0 RDI: 0000000000000003 [ 51.058092][ T1002] RBP: 00007f1ebf09b090 R08: 0000000000000000 R09: 0000000000000000 [ 51.058105][ T1002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.058117][ T1002] R13: 00007f1ebe416038 R14: 00007f1ebe415fa0 R15: 00007fff4e26c268 [ 51.058133][ T1002] [ 51.225630][ T1008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.279763][ T1013] 9pnet_fd: p9_fd_create_tcp (1013): problem connecting socket to 127.0.0.1 [ 51.280193][ T1011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.299521][ T1008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.304207][ T1011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.438580][ T1023] tipc: Started in network mode [ 51.443553][ T1023] tipc: Node identity 7f000001, cluster identity 4711 [ 51.450538][ T1023] tipc: Enabling of bearer rejected, failed to enable media [ 51.626662][ T45] usb 1-1: USB disconnect, device number 17 [ 51.781822][ T1030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 51.793085][ T1031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.802046][ T1031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.814545][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 51.814568][ T36] audit: type=1400 audit(1774621658.259:250): avc: denied { bind } for pid=1028 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.815940][ T1029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.835872][ T1033] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.845342][ T1029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.848170][ T1033] overlayfs: failed to set xattr on upper [ 51.868378][ T1033] overlayfs: ...falling back to redirect_dir=nofollow. [ 51.875432][ T1033] overlayfs: ...falling back to metacopy=off. [ 51.880817][ T1035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.881577][ T1033] overlayfs: ...falling back to uuid=null. [ 51.891002][ T1035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.906147][ T36] audit: type=1400 audit(1774621658.349:251): avc: denied { ioctl } for pid=1034 comm="syz.3.237" path="socket:[8182]" dev="sockfs" ino=8182 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.933710][ T1035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.935144][ T36] audit: type=1400 audit(1774621658.349:252): avc: denied { write } for pid=1034 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.962881][ T1035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.963819][ T36] audit: type=1400 audit(1774621658.379:253): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.008070][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.016711][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.122146][ T45] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 52.273486][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.281923][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.292117][ T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.301075][ T45] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.316341][ T45] usb 1-1: string descriptor 0 read error: -22 [ 52.322601][ T45] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 52.331774][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.343095][ T45] usb 1-1: low speed audio streaming not supported [ 52.349722][ T45] usb 1-1: 0:2 : does not exist [ 52.539375][ T1048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.547987][ T1048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.556800][ T307] usb 1-1: USB disconnect, device number 18 [ 52.668276][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.676903][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.686428][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.694983][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.703570][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.712293][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.078447][ T1054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.090061][ T1054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.113981][ T36] audit: type=1400 audit(1774621659.559:254): avc: denied { getopt } for pid=1057 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.133626][ T36] audit: type=1400 audit(1774621659.559:255): avc: denied { write } for pid=1057 comm="syz.2.246" name="tcp6" dev="proc" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.323059][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 53.352154][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 53.472171][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 53.478656][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 53.486881][ T10] usb 1-1: config 0 has no interface number 0 [ 53.493022][ T9] usb 3-1: device descriptor read/64, error -71 [ 53.499281][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 53.509289][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 53.517419][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 53.526545][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.534606][ T10] usb 1-1: Product: syz [ 53.538752][ T10] usb 1-1: Manufacturer: syz [ 53.543365][ T10] usb 1-1: SerialNumber: syz [ 53.548507][ T10] usb 1-1: config 0 descriptor?? [ 53.553795][ T1056] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 53.621568][ T1066] tipc: Started in network mode [ 53.626503][ T1066] tipc: Node identity ee77036f357, cluster identity 4711 [ 53.633761][ T1066] tipc: Enabled bearer , priority 10 [ 53.676905][ T1072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.685516][ T1072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.732167][ T9] usb 3-1: device descriptor read/64, error -71 [ 53.820989][ T36] audit: type=1400 audit(1774621660.259:256): avc: denied { ioctl } for pid=1077 comm="syz.3.254" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.854692][ T1081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.863491][ T1081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.888211][ T1089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.896770][ T1089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.972174][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.102142][ T9] usb 3-1: device descriptor read/64, error -71 [ 54.212012][ T1092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.220552][ T1092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.314217][ T10] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 54.323283][ T10] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 54.342183][ T9] usb 3-1: device descriptor read/64, error -71 [ 54.419047][ T1094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.427560][ T1094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.452264][ T9] usb usb3-port1: attempt power cycle [ 54.746183][ T36] audit: type=1400 audit(1774621661.189:257): avc: denied { write } for pid=1097 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.746245][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.772269][ T307] tipc: Node number set to 3674669935 [ 54.792172][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.813101][ T9] usb 3-1: device descriptor read/8, error -71 [ 54.943409][ T9] usb 3-1: device descriptor read/8, error -71 [ 55.202142][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 55.206102][ T1109] SELinux: failed to load policy [ 55.209766][ T36] audit: type=1400 audit(1774621661.649:258): avc: denied { append } for pid=1108 comm="syz.3.261" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.238399][ T36] audit: type=1400 audit(1774621661.649:259): avc: denied { load_policy } for pid=1108 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.259750][ T9] usb 3-1: device descriptor read/8, error -71 [ 55.304251][ T1114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.312893][ T1114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.323286][ T1114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 55.393271][ T9] usb 3-1: device descriptor read/8, error -71 [ 55.502247][ T9] usb usb3-port1: unable to enumerate USB device [ 55.860310][ T1118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.869514][ T1118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.104076][ T9] usb 1-1: USB disconnect, device number 19 [ 56.363368][ T1137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 56.393429][ T1141] fuse: Bad value for 'fd' [ 56.402297][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 56.417190][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.425683][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.552225][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 56.558472][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.569379][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.579131][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.588163][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.596663][ T9] usb 1-1: config 0 descriptor?? [ 56.602866][ T9] hub 1-1:0.0: USB hub found [ 56.622181][ T307] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 56.762216][ T1100] Bluetooth: hci0: command 0x1003 tx timeout [ 56.762219][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.775671][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.786797][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.797202][ T1145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.805593][ T307] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 56.807190][ T1145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.814677][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.822770][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 56.830996][ T307] usb 3-1: config 0 descriptor?? [ 56.843163][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 56.843178][ T36] audit: type=1400 audit(1774621663.289:314): avc: denied { map } for pid=1144 comm="syz.1.277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.843560][ T1145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.849256][ T36] audit: type=1400 audit(1774621663.289:315): avc: denied { read write } for pid=1144 comm="syz.1.277" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.906848][ T1145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.955065][ T1148] overlayfs: overlapping lowerdir path [ 57.069036][ T1158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.077639][ T1158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.227239][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 57.233296][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 57.253248][ T9] usb 1-1: USB disconnect, device number 20 [ 57.262651][ T307] usbhid 3-1:0.0: can't add hid device: -71 [ 57.268882][ T307] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.277842][ T36] audit: type=1400 audit(1774621663.719:316): avc: denied { mount } for pid=1162 comm="syz.2.283" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.279462][ T307] usb 3-1: USB disconnect, device number 16 [ 57.308232][ T36] audit: type=1400 audit(1774621663.749:317): avc: denied { mounton } for pid=1162 comm="syz.2.283" path="/50/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.330796][ T36] audit: type=1400 audit(1774621663.749:318): avc: denied { read } for pid=1162 comm="syz.2.283" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.352420][ T36] audit: type=1400 audit(1774621663.749:319): avc: denied { open } for pid=1162 comm="syz.2.283" path="/50/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.374582][ T36] audit: type=1400 audit(1774621663.749:320): avc: denied { ioctl } for pid=1162 comm="syz.2.283" path="/50/file0" dev="overlay" ino=2 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.398331][ T36] audit: type=1400 audit(1774621663.749:321): avc: denied { accept } for pid=1162 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 57.418301][ T36] audit: type=1400 audit(1774621663.829:322): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.478807][ T1167] 9pnet_fd: Insufficient options for proto=fd [ 57.501398][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.509904][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.713056][ T1184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.721602][ T1184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.731044][ T36] audit: type=1400 audit(1774621664.169:323): avc: denied { connect } for pid=1183 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.050694][ T1189] netlink: 'syz.1.293': attribute type 3 has an invalid length. [ 58.077209][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.086819][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.097256][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.106653][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.146023][ T1196] overlayfs: conflicting lowerdir path [ 58.152055][ T1196] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 58.161247][ T1196] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 58.170315][ T1196] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 58.179403][ T1196] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 58.189232][ T1196] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 58.232070][ T1201] can0: slcan on ttyS3. [ 58.352165][ T1200] can0 (unregistered): slcan off ttyS3. [ 58.364031][ T1226] capability: warning: `syz.2.300' uses deprecated v2 capabilities in a way that may be insecure [ 58.652146][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 58.692209][ T64] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 58.802129][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 58.808478][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.816837][ T9] usb 3-1: config 11 has an invalid interface number: 9 but max is 0 [ 58.824987][ T9] usb 3-1: config 11 has no interface number 0 [ 58.831200][ T9] usb 3-1: config 11 interface 9 has no altsetting 0 [ 58.839290][ T9] usb 3-1: New USB device found, idVendor=4d03, idProduct=3a39, bcdDevice=ef.de [ 58.848393][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.856504][ T9] usb 3-1: Product: syz [ 58.860742][ T9] usb 3-1: Manufacturer: syz [ 58.865364][ T9] usb 3-1: SerialNumber: syz [ 58.870310][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.880537][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.890476][ T64] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 58.899552][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.907547][ T64] usb 1-1: SerialNumber: syz [ 59.091655][ T1226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.100301][ T1226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.110639][ T1226] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 59.122003][ T9] cdc_eem 3-1:11.9: probe with driver cdc_eem failed with error -22 [ 59.131824][ T9] usb 3-1: USB disconnect, device number 17 [ 59.170018][ T64] usb 1-1: 0:2 : does not exist [ 59.176864][ T64] usb 1-1: USB disconnect, device number 21 [ 59.185118][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.584992][ T1273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.593569][ T1273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.604149][ T1273] SELinux: Context system_u:object_r:zero_device_t:s0 is not valid (left unmapped). [ 59.982236][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 60.092133][ T64] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 60.126297][ T1289] overlayfs: overlapping lowerdir path [ 60.133607][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.144404][ T9] usb 1-1: too many configurations: 207, using maximum allowed: 8 [ 60.153313][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 60.161033][ T9] usb 1-1: can't read configurations, error -71 [ 60.170791][ T1293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.180008][ T1293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.188878][ T1293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.242127][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 60.248271][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.259288][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.269147][ T64] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 60.278209][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.286987][ T64] usb 3-1: config 0 descriptor?? [ 60.371011][ T1295] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 60.400142][ T1298] netlink: 'syz.3.320': attribute type 32 has an invalid length. [ 60.408121][ T1298] netlink: 'syz.3.320': attribute type 32 has an invalid length. [ 60.499401][ T64] kye 0003:0458:5016.0003: control desc unexpectedly large [ 60.512347][ T64] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0003/input/input6 [ 60.531937][ T64] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0003/input/input7 [ 60.553070][ T64] kye 0003:0458:5016.0003: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 60.695185][ T345] usb 3-1: USB disconnect, device number 18 [ 60.726348][ T1305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.735721][ T1305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.744856][ T1305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1305 comm=syz.1.322 [ 60.938510][ T1307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.948205][ T1307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.992155][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 61.143220][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.153447][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.163205][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.172319][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.180281][ T9] usb 1-1: SerialNumber: syz [ 61.281943][ T1314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.291070][ T1314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.317760][ T1316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.443870][ T9] usb 1-1: 0:2 : does not exist [ 61.454356][ T9] usb 1-1: USB disconnect, device number 23 [ 61.526258][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.535529][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.540460][ T1332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 61.744913][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.753477][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.802166][ T450] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 61.831085][ T1340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.962181][ T450] usb 3-1: Using ep0 maxpacket: 16 [ 61.970415][ T450] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 61.989397][ T1351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.992146][ T450] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.997995][ T1351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.016374][ T450] usb 3-1: config 0 has no interface number 0 [ 62.030769][ T450] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 62.040016][ T450] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 62.048086][ T450] usb 3-1: Product: syz [ 62.053305][ T450] usb 3-1: Manufacturer: syz [ 62.057963][ T450] usb 3-1: SerialNumber: syz [ 62.073779][ T450] usb 3-1: config 0 descriptor?? [ 62.086756][ T450] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 62.093246][ T450] uvcvideo 3-1:0.105: Entity type for entity Output 1 was not initialized! [ 62.101850][ T450] usb 3-1: Failed to create links for entity 1 [ 62.108289][ T450] usb 3-1: Failed to register entities (-22). [ 62.272280][ T1364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.280849][ T1364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.322143][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 62.343851][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 62.343866][ T36] audit: type=1400 audit(1774621668.789:360): avc: denied { create } for pid=1335 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.345442][ T64] usb 3-1: USB disconnect, device number 19 [ 62.472131][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 62.478430][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 62.486560][ T9] usb 1-1: config 0 has no interface number 0 [ 62.494068][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 62.503151][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.511131][ T9] usb 1-1: Product: syz [ 62.515303][ T9] usb 1-1: Manufacturer: syz [ 62.519887][ T9] usb 1-1: SerialNumber: syz [ 62.525002][ T9] usb 1-1: config 0 descriptor?? [ 62.530628][ T9] smsc95xx v2.0.0 [ 62.803224][ T36] audit: type=1400 audit(1774621669.249:361): avc: denied { write } for pid=1365 comm="syz.3.346" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:zero_device_t:s0" [ 62.932476][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 62.942505][ T1373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.944154][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 62.951732][ T1373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.996589][ T36] audit: type=1400 audit(1774621669.439:362): avc: denied { mount } for pid=1369 comm="syz.1.348" name="/" dev="configfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.019178][ T36] audit: type=1400 audit(1774621669.439:363): avc: denied { search } for pid=1369 comm="syz.1.348" name="/" dev="configfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.112147][ T64] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 63.242131][ T64] usb 3-1: device descriptor read/64, error -71 [ 63.482168][ T64] usb 3-1: device descriptor read/64, error -71 [ 63.667491][ T36] audit: type=1400 audit(1774621670.109:364): avc: denied { checkpoint_restore } for pid=1391 comm="syz.3.356" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.722729][ T64] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 63.737450][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.746070][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.746282][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.755415][ T36] audit: type=1400 audit(1774621670.199:365): avc: denied { getopt } for pid=1400 comm="syz.3.359" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.763632][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.795399][ T36] audit: type=1400 audit(1774621670.239:366): avc: denied { create } for pid=1401 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.798093][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.823177][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.852168][ T64] usb 3-1: device descriptor read/64, error -71 [ 64.092147][ T64] usb 3-1: device descriptor read/64, error -71 [ 64.202230][ T64] usb usb3-port1: attempt power cycle [ 64.348419][ T1406] netlink: 'syz.1.361': attribute type 64 has an invalid length. [ 64.356331][ T1406] netlink: 5 bytes leftover after parsing attributes in process `syz.1.361'. [ 64.365189][ T1406] gretap0: entered allmulticast mode [ 64.370715][ T1406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.388110][ T36] audit: type=1400 audit(1774621670.829:367): avc: denied { bind } for pid=1405 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.408468][ T36] audit: type=1400 audit(1774621670.829:368): avc: denied { getopt } for pid=1405 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.442689][ T1409] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.552132][ T64] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 64.573989][ T64] usb 3-1: device descriptor read/8, error -71 [ 64.640967][ T36] audit: type=1400 audit(1774621671.079:369): avc: denied { create } for pid=1421 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 64.703084][ T64] usb 3-1: device descriptor read/8, error -71 [ 64.942287][ T64] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 64.963134][ T64] usb 3-1: device descriptor read/8, error -71 [ 65.093145][ T64] usb 3-1: device descriptor read/8, error -71 [ 65.188053][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 65.198921][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 65.208497][ T64] usb usb3-port1: unable to enumerate USB device [ 65.520684][ T1430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.561687][ T1434] netlink: 'syz.1.372': attribute type 27 has an invalid length. [ 65.572373][ T1434] gretap0: left allmulticast mode [ 65.581988][ T1434] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.589156][ T1434] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.604924][ T1434] tipc: Resetting bearer [ 65.631204][ T1436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.640705][ T1436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.790494][ T1444] netlink: 'syz.3.375': attribute type 9 has an invalid length. [ 65.798211][ T1444] netlink: 'syz.3.375': attribute type 2 has an invalid length. [ 66.072061][ T1458] netlink: 393 bytes leftover after parsing attributes in process `syz.2.379'. [ 66.205582][ T64] usb 1-1: USB disconnect, device number 24 [ 66.312141][ T450] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 66.379648][ T1462] kvm: kvm [1461]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xbe702111 [ 66.424580][ T1464] rust_binder: Write failure EFAULT in pid:351 [ 66.463390][ T450] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.478361][ T450] usb 3-1: config 2 has an invalid interface number: 223 but max is 0 [ 66.486844][ T450] usb 3-1: config 2 has no interface number 0 [ 66.500906][ T450] usb 3-1: config 2 interface 223 has no altsetting 0 [ 66.509300][ T450] usb 3-1: New USB device found, idVendor=32a7, idProduct=0000, bcdDevice=86.90 [ 66.512130][ T64] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 66.518631][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.534198][ T450] usb 3-1: Product: ᢜ夦軠繁隺臲ᠯ鱅왬垸ꈑꍚ汽䡻㐵跽袚ᒗ䝴温紑헿袐ﰅ散瑧쵆鞬鱯쵒勐꓆ե胷䟟冬츃禳 [ 66.549224][ T450] usb 3-1: Manufacturer: 惵싲脤趓⧓㮞䁤欫뚁췤鉲᪙෣뛳폗喝犞䅲㓴啺룿ꦸ̺艂熼㨞ҕ채ぼ딡ᑢ嘮⋯褓瀡쬊䕒䯫鑣鬞탁u∙躙ࢣ⠸騖⇢⁣⪭韤끑߸롅岘 [ 66.562672][ T1470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.569551][ T450] usb 3-1: SerialNumber: 刪 [ 66.578041][ T1470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.662142][ T64] usb 1-1: device descriptor read/64, error -71 [ 66.797906][ T450] usb 3-1: USB disconnect, device number 24 [ 66.902186][ T64] usb 1-1: device descriptor read/64, error -71 [ 67.142155][ T64] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 67.200480][ T1478] netlink: 100 bytes leftover after parsing attributes in process `syz.1.388'. [ 67.264879][ T1488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.273442][ T1488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.282846][ T64] usb 1-1: device descriptor read/64, error -71 [ 67.522151][ T64] usb 1-1: device descriptor read/64, error -71 [ 67.542147][ T450] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 67.632228][ T64] usb usb1-port1: attempt power cycle [ 67.692173][ T450] usb 3-1: Using ep0 maxpacket: 32 [ 67.698453][ T450] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 67.706811][ T450] usb 3-1: config 0 has no interface number 0 [ 67.714311][ T450] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 67.723360][ T450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.731330][ T450] usb 3-1: Product: syz [ 67.735497][ T450] usb 3-1: Manufacturer: syz [ 67.740172][ T450] usb 3-1: SerialNumber: syz [ 67.745355][ T450] usb 3-1: config 0 descriptor?? [ 67.750992][ T450] smsc95xx v2.0.0 [ 67.868165][ T1492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.969203][ T1495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.977688][ T64] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 67.979120][ T1495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.003210][ T64] usb 1-1: device descriptor read/8, error -71 [ 68.133236][ T64] usb 1-1: device descriptor read/8, error -71 [ 68.152477][ T450] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 68.163287][ T450] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 68.372164][ T64] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 68.403097][ T64] usb 1-1: device descriptor read/8, error -71 [ 68.515505][ T1504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.524721][ T1504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.533532][ T64] usb 1-1: device descriptor read/8, error -71 [ 68.584490][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 68.584508][ T36] audit: type=1400 audit(1774621675.029:382): avc: denied { map } for pid=1509 comm="syz.3.401" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.652278][ T64] usb usb1-port1: unable to enumerate USB device [ 69.247095][ T36] audit: type=1400 audit(1774621675.689:383): avc: denied { ioctl } for pid=1515 comm="syz.0.403" path="socket:[11760]" dev="sockfs" ino=11760 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.459425][ T36] audit: type=1400 audit(1774621675.899:384): avc: denied { create } for pid=1527 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.480609][ T36] audit: type=1400 audit(1774621675.929:385): avc: denied { connect } for pid=1521 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.487759][ T1532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1532 comm=syz.0.409 [ 69.783920][ T450] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 69.794907][ T450] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 69.942121][ T64] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 70.092109][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 70.098313][ T64] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 70.106777][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.117165][ T64] usb 1-1: config 0 has no interface number 0 [ 70.125048][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 70.134895][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.143084][ T64] usb 1-1: Product: syz [ 70.147383][ T64] usb 1-1: Manufacturer: syz [ 70.152013][ T64] usb 1-1: SerialNumber: syz [ 70.158089][ T64] usb 1-1: config 0 descriptor?? [ 70.164441][ T64] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 70.171092][ T64] usb 1-1: No valid video chain found. [ 70.272238][ T1553] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 70.281768][ T1553] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 70.291643][ T1553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.300600][ T1553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.366674][ T450] usb 1-1: USB disconnect, device number 29 [ 70.809517][ T449] usb 3-1: USB disconnect, device number 25 [ 70.850521][ T1567] incfs: Can't find or create .index dir in ./cgroup [ 70.857474][ T1567] incfs: mount failed -22 [ 70.862117][ T36] audit: type=1400 audit(1774621677.289:386): avc: denied { getattr } for pid=1561 comm="syz.2.417" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=11890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.947550][ T1574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.947585][ T1574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 70.989205][ T36] audit: type=1400 audit(1774621677.429:387): avc: denied { append } for pid=1577 comm="syz.2.423" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.061414][ T36] audit: type=1400 audit(1774621677.469:388): avc: denied { setopt } for pid=1577 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.082188][ T36] audit: type=1400 audit(1774626029.485:389): avc: denied { mounton } for pid=1580 comm="syz.1.424" path="/137/file0" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 71.162128][ T64] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 71.284367][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.292821][ T1594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.293796][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.301820][ T1594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.313124][ T64] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 71.325367][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.336787][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.345756][ T64] usb 1-1: config 1 has no interface number 0 [ 71.351869][ T64] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 71.362606][ T64] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 71.376931][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.386021][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.394018][ T64] usb 1-1: Product: syz [ 71.398324][ T64] usb 1-1: Manufacturer: syz [ 71.403053][ T64] usb 1-1: SerialNumber: syz [ 71.420495][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.429765][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.610941][ T64] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 71.621951][ T64] usb 1-1: USB disconnect, device number 30 [ 71.812188][ T449] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 71.830599][ T1614] can: request_module (can-proto-5) failed. [ 71.837053][ T1614] can: request_module (can-proto-5) failed. [ 71.858428][ T1619] ------------[ cut here ]------------ [ 71.863934][ T1619] WARNING: CPU: 1 PID: 1619 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 71.873431][ T1619] Modules linked in: [ 71.877328][ T1619] CPU: 1 UID: 0 PID: 1619 Comm: syz.1.435 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 71.888810][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.898950][ T1619] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 71.904970][ T1619] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a 7f 0b 06 00 0f 85 c2 00 00 00 c6 05 fd 7e 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 71.924623][ T1619] RSP: 0018:ffffc9000f3df560 EFLAGS: 00010246 [ 71.930680][ T1619] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 71.938768][ T1619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f3df618 [ 71.946780][ T1619] RBP: ffffc9000f3df6a0 R08: ffffc9000f3df617 R09: 0000000000000000 [ 71.954786][ T1619] R10: ffffc9000f3df600 R11: fffff52001e7bec3 R12: ffffc9000f3df5a0 [ 71.962792][ T1619] R13: dffffc0000000000 R14: 1ffff92001e7beb0 R15: 0000000000000000 [ 71.970774][ T1619] FS: 00007fdef99126c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 71.979737][ T1619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.986410][ T1619] CR2: 0000200000002000 CR3: 000000013f57c000 CR4: 00000000003526b0 [ 71.994453][ T1619] Call Trace: [ 71.997735][ T1619] [ 72.000652][ T1619] ? vfs_write+0x3c5/0xf90 [ 72.005084][ T1619] ? ksys_write+0x145/0x260 [ 72.009601][ T1619] ? x64_sys_call+0x271c/0x2ee0 [ 72.014494][ T1619] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 72.020222][ T1619] ? hashtab_init+0xdb/0x1f0 [ 72.024823][ T1619] ___kmalloc_large_node+0x81/0x210 [ 72.030031][ T1619] ? hashtab_init+0xdb/0x1f0 [ 72.034642][ T1619] __kmalloc_large_node_noprof+0x1e/0xd0 [ 72.040282][ T1619] ? hashtab_init+0xdb/0x1f0 [ 72.044917][ T1619] __kmalloc_noprof+0x326/0x500 [ 72.049779][ T1619] ? kasan_save_alloc_info+0x40/0x50 [ 72.055087][ T1619] hashtab_init+0xdb/0x1f0 [ 72.059504][ T1619] ? common_read+0x175/0x490 [ 72.064125][ T1619] symtab_init+0x44/0x70 [ 72.068372][ T1619] common_read+0x1e6/0x490 [ 72.072804][ T1619] ? __cfi_ebitmap_read+0x10/0x10 [ 72.077830][ T1619] ? __cfi_common_read+0x10/0x10 [ 72.082782][ T1619] ? hashtab_init+0x105/0x1f0 [ 72.087458][ T1619] policydb_read+0xab8/0x28b0 [ 72.092159][ T1619] ? __kasan_kmalloc+0x96/0xb0 [ 72.096919][ T1619] ? __cfi_policydb_read+0x10/0x10 [ 72.102012][ T1619] ? security_load_policy+0x130/0x12d0 [ 72.107495][ T1619] security_load_policy+0x16a/0x12d0 [ 72.112807][ T1619] ? irqentry_exit+0x4a/0x60 [ 72.117396][ T1619] ? asm_exc_page_fault+0x2b/0x30 [ 72.122442][ T1619] ? __cfi_security_load_policy+0x10/0x10 [ 72.128176][ T1619] ? rep_movs_alternative+0x4a/0xa0 [ 72.133410][ T1619] sel_write_load+0x2a7/0x5f0 [ 72.138102][ T1619] ? __cfi_sel_write_load+0x10/0x10 [ 72.143324][ T1619] ? security_file_alloc+0x49/0x220 [ 72.148526][ T1619] ? bpf_lsm_file_permission+0xd/0x20 [ 72.153922][ T1619] ? __cfi_sel_write_load+0x10/0x10 [ 72.159129][ T1619] vfs_write+0x3c5/0xf90 [ 72.163413][ T1619] ? __cfi_vfs_write+0x10/0x10 [ 72.168190][ T1619] ? __kasan_check_write+0x18/0x20 [ 72.173325][ T1619] ? mutex_lock+0x97/0x1d0 [ 72.177745][ T1619] ? __cfi_mutex_lock+0x10/0x10 [ 72.182619][ T1619] ? __fget_files+0x2c5/0x340 [ 72.187301][ T1619] ksys_write+0x145/0x260 [ 72.191623][ T1619] ? __cfi_ksys_write+0x10/0x10 [ 72.196500][ T1619] ? __kasan_check_write+0x18/0x20 [ 72.201618][ T1619] ? fpregs_restore_userregs+0x11c/0x260 [ 72.207266][ T1619] __x64_sys_write+0x7f/0x90 [ 72.211866][ T1619] x64_sys_call+0x271c/0x2ee0 [ 72.216561][ T1619] do_syscall_64+0x57/0xf0 [ 72.220986][ T1619] ? clear_bhb_loop+0x50/0xa0 [ 72.225688][ T1619] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.231584][ T1619] RIP: 0033:0x7fdef899c799 [ 72.236021][ T1619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.255657][ T1619] RSP: 002b:00007fdef9912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.264094][ T1619] RAX: ffffffffffffffda RBX: 00007fdef8c15fa0 RCX: 00007fdef899c799 [ 72.272113][ T1619] RDX: 0000000000002046 RSI: 0000200000000000 RDI: 0000000000000003 [ 72.280097][ T1619] RBP: 00007fdef8a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 72.288139][ T1619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.296135][ T1619] R13: 00007fdef8c16038 R14: 00007fdef8c15fa0 R15: 00007ffc836e0558 [ 72.304145][ T1619] [ 72.307162][ T1619] ---[ end trace 0000000000000000 ]--- [ 72.313221][ T1619] SELinux: failed to load policy [ 72.392125][ T449] usb 3-1: Using ep0 maxpacket: 16 [ 72.398261][ T449] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 72.406449][ T449] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 72.416726][ T449] usb 3-1: config 0 has no interface number 0 [ 72.424159][ T449] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 72.433221][ T449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.441200][ T449] usb 3-1: Product: syz [ 72.445377][ T449] usb 3-1: Manufacturer: syz [ 72.449956][ T449] usb 3-1: SerialNumber: syz [ 72.455147][ T449] usb 3-1: config 0 descriptor?? [ 72.663574][ T36] audit: type=1400 audit(1774626031.115:390): avc: denied { setattr } for pid=1610 comm="syz.2.433" name="TIPC" dev="sockfs" ino=12240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.664164][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.694856][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.706142][ T64] usb 3-1: USB disconnect, device number 26