last executing test programs: 44.259135019s ago: executing program 0 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d2) write(r4, &(0x7f0000000600)='1', 0x1) 44.165797492s ago: executing program 0 (id=43): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 44.163553681s ago: executing program 0 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r2, 0x0) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a455529f100357457d4f0f5c91105a3c58131bf10de83dc9ee9d239e5e89e59edb35abbf64c1a92109f8eb01bf689b90055bd51506423f4e456274a778c228aeb5d65e191f1bbb21f0f6dd25edc276f1264580344fed0ee32709a73a160c7578465757b87291dcefc84e58ae39e56fb10d42fd5a34aa4fca42ff53e3c9467d8dc1278a34d406df142092ed6661092ce85816f8e6a119860c3314d0e13f5d50a266f738b71fd531396d768c35bc45c042ee7d69b0b7b90da2aab111667ef006593c99c27c67bc3812dbc9f1994b4830ed54ed1f0bdf4966c1d20bddeb83972b15a86ed5fdef279ce58447059a2ba491d21120dc7e0a1d8cc5eff2deedec41057e178eb95ff00fed1e7095decea9cfd52c0a7438dbfc135c796bfa2bb290ab03f35ea2f2d72b8b0503f4972d6d7c60bf5a80981c4f9826007fdcaad959e1c90cace1664480e98069a86f1c059d112e9da27fa71716f530c2a5bf2296d09e5fcc726a8e5287499f563089bdcb6bf3779298dc9b6f739190f434983651f5f29857cbf62faac8c20bc7ac69334fe99e70c29a1294d0ee89dd6c9cd57845e64b289f84220b6e1fe9e81381cf688fa945a68eed3ebc0e8c1efa403b5a4cde68a24a863c17c9f8ad6d24a09e60d83fcf2beb51e6faac173ac98bb2269d7523f8654417ffe70ab87b477045715ad6aa3db39d3f32760fe25bdc0f3e083232ea6a55da3986cbdbd654ed71a4780f7dc3edb628e14287963c3b5f7f177a35071d7f1169351863516fc96f8cce8781439de06c9f76d6e303518493676b3b135900b89eeac40d994936e3a5a6bbc2f2cf6a2a8ed0ad2f81386f8c327cf9b15f8039df0a950641f7d14728194d7640f4cf7e28e1f89b2485857f5f70866844cead5b29f5d9166dce885bd4343bb1fd2c8437105e8e295c27cb44b10a01590c0fdddbc8abc71f777171adef0a45fe5c92b39e32a9c119c6c9a340be0df8cb3b8b77a2a6b5ba1ed4449674811dfae90889b3fb174e11fb947e15232d57bdeee29db4bc0816a878120e84e0ec40a99fd2b88bdb8502922d7015dff05a94ce7c79852bb7ea9a043fa629afc702300d49ac7fbe67a7b0161d2703348b8d0efb144f2920e341debd821ddc4a12a3f89891f24427a169c741568a06825d4f12d64da0935f2f217798b41f44b90140ac2f4cf08219f42b5d30bdd52e76c74100326babb4d1bc576c944fc5bd3a985f9b209a6a473e4fe3afe0c110b630ac443b75c6e13b20810fd3e5ecf9c6785dabeb758a5ddcfb1ad889b5349606ead8f3fa34ba8ea706de19da6b3a0bc36c4c2e3173a9c929157aedf649699f1f8887a31fccebbd7f28843c91753483541b2b895e642855f856e3951e4853fb70b4090512112e813edaa8edb0a5ddf2c329dde5381e6a5716ec9d5a79d9438ba6de736ac9ad45754bfe7227ada116507c84ffd942a84f4ce115d4fd9029f17e62383ce5fc7048a3f85d2709f2375334f1fce2f8b1af99742869f00f2d2fa37ccaf385dc2eaabe2f67671f06addf403d94bffda4bf5747a8773e9ce3beb7ca2b2e2714dd50eb387e226d834a0696b689b004cbb5b3a5aa7a2878be737f4dd7d65bf976f8deb39ad07265be604ce4f9246225f91cd10afd4725d800eeae4abcd0fd17fdf11257b19db7dcb4b9c34dc3cee03dce7d9ab6f7ac5e12316ce9879abb4432f87faa2b25094963f48582fc8a617067b1a0f0960ddf8cfd5065352d9aba09d37b9b10c7a8f702547fd86f34b62183cc883e41c40f5b0676eb077bda0204bd08dae7e7922b7934f2b449229950b4fc54cd7dafc709d828e9301be8c767e0f3bc420cd10ee3dac383bb8ab8aefe3515d6b959dfe578d256f375751beecbd24a152939b59f913728e47207b8a642b100aadfc685cd7d77ba43ec2298db4f551d851991723cd1cdd42f2837e7fd5df3dbf52945ea9a97b73d8915336023beb9bd3c91d9b1c7f5d49b0cba9c30016bb3216e9d6e9070a5dff813ce85a2a36fffa6bf750cf21eaa91a754f9788663690189fe58a9205e4733b6ac0711e98123f145a87eceb00561ac7d1a699d00384c57f6dc92939f45956d489946a365440d40911dabed15b67748000e0d244b21276032667f66119a2485f31d2c098da4cbbd0c5bbf8373fb53b662e48fc572b6e6c5700a360c5b905b548eaee0aa928b38703c84f7ed4a9a858801ad26c2911d4bbbfc1f46a070fa64db31a619dad30ba96eea1edccc6b0e67b7acffe1261af8e08ffb27fb625820f7a823c63febe0fb32e8907415a973cb42c8752d6a9ac3af2bcbd91d5e5c3ac288b2e2a92cb860d97cbf2b17da25b5333d90156493076ab457afb59f3443894a3c1d3d8b1ce7cbd47d36a7a64bcb194ea00d46181a7b65e3e104bea46434643ac722d04437b72f518e98289edba99559dd6aa03af60da7a00ad4f6105d31745b808a243c8ee9ebd70fa8516cd471473a1608d206fa93885e696f668a397cf713fe9c2001fdbb6e07f124782f5891bdc238db61a7d7f0575072abfadad9593a6ba8b1c89351784d0c722af86989e137809aa5b7833462a71ceca8d7ee24e883577a128652125bef2bd7558f77bb566719f2672fb07f890f892d2d3a725d1d907a696d2d97065c001cfd9e97d60fe2f584992b9bd80f618531af2f3d5df2c5717da36bb2a64853612b8f1f881c2a306b1e9c4c369e33e5675e0f9195e570ba0b2e0594838ad9aef53686a2c4dfd9eae21a826501af92d48e0d857ee0876cd09996c65b50333ab256b439fe89d836d77135079c51f87b1fb58c446a8d52e3c6432c111af4b66d57306659c81088ea0ef96a2f1b97dfd8beeb578b3016eedb65e2ec190e1ba08c9c37f85e102fdc972c9ba2a4a6f11a79831ed8087a22d1d978f005f6ee8869b8c1717a42b75378a98a5f9b1725cc323151b1996468068afd2827ccede23ffe279aa7b45d7dc683db3a9efb9f7b2093765d7c178c09bc0edeccf18c9ee5845cba0c2dda463989faf6d018e330cb52bc5d7913e6e26ea8cde26b7251d828da7b83a1ecbda1ecb3344b3c60f606a419d868da70ade78c3ecebd9b2bcff9cef2507907f011cdf9b072b1dcc872e5b29365b0f4a7d6c581c9bf42320ad9c3a52b419b73d0c0f616f2f630df9bdb5f3b88bbcdfe618180131be8357099f9e8ea457eb1dcf9324c7081687899fa81bc267e87bdd80b88150f6745cb735936876ca6b3c7a492698d32d762baf5b482fa5f26351cf18018fc1cb49411fb6663c474ea29d2a9d4ad703119fe7a6ed2ce6f97287e7660617c4e38c7b1aa1ee5df253c625a1b1d29c042b6d5dbfb44633dd4c0e93992aff81024c408ff00d24d9c98c07c1d4fe5656e3b053914a09b8f2968008c5c4c115d9f8640136254303cc095f95fa335aa858510dad731af19eb0df690ab0edd2bbed96679dad71ccf94da088cf62b34580548027703f92525b41d36297e71d988901e3e086c0d8f425732e0134a9ac2b111a5745c57d9a138b6a4055e7e3ba220a47fef3474e5bba15d3f4711e1d00f2e29f1a1082f4518a08e36451e887963193b08c3e255f22383c7001540b05836b30e912adaef4130ae8edb9c891c398855b218e76eb94332538b7add4b9261e873a6b91785f5ea6c82306dff166d654987361917fe83fcc5be9be3e8644d96d5a7c7bb445fc1b2c0a48814fabc1b3a190674b5f159a5b041dd317c4cf06076d6c9a7572054a09f2b9b74f14289daf5a16dbe6de85ed6128c91a18518f069451dbe8b9f57dab9bcecb4cc53e6612b90f5e644eaed1765d45ad6e6d9f0358fd3a885df1c572cfdb511bbca345628206d89b16f9251be85e1c617b15302bb86397e0763d757c70362dea82688fe32d0a714d598f3131c2a3a4414898fccdfd901dc8fde466ca269bf211b9863e360ea4aab7fdc107ddfd7ede043708804386e0180542a0802745407ceecf6adb2a9a5614cde89d413f49a32733b875281c8cab7ac5815a92fda65ea23ce2feab66606605f49f526cc336d2a5a067c185845941e4142ba82899966fc95bf40570967ec0a6fe130dccbaca48d251adb0f81a170e3dfac6f02e7c8bb5fa6f5602bdc73267c6756e1a374d5e8b19a92ff39662db3ac9f761b2e9e015c51815e5f111d416ee0a67f3adad81f8c64dad193f19048bb46ad1fa786a0c3f36119bd14bb9ad96f2182a19504e15f2cfd885e5862f4d2467053ee1faa978bd2267d56401a548f17d34adba7e9186a2a58931a69bb815dd50552995aa8ceeb4eda5330227f2078eeb72c9b6845c04679868eb5f6a0f0da8c1ea2b0c7de8781d9fc129561a7b283aa488a117269116f81e44a261ed6c0fc4467125d83fd306bce3c6a29df8db000036cd851d805dda3bf218c800d77fc9837158f883b962efc7886cbe93cc137e0bff8387c4b7d64df8b89805dbf5698babf22be7d735bb7baedd43bb3f577989ddaf83892c55771a10beeb2326f3e766fd40eef0d0ff82969bf5534cbffff4fd493fc34d58f322d22fe21101c4248756ad844876d3a7f3999d14c0962e68eaeac83d44d22d498e04673343f4a3a60abfa4f45ea2af9b65982ff5899fd509beccfc8e7dd125c08096e9e5fb71edc590abdd53592d67afec4d227170c5f6e4f1daceecaec968448c033c0a9b0390a12b5af4b973c0cb7c072bdfc8b4158ea4cc9114816cf1242199d0d62a013c4e9646338bd284fede8c93114d2608c71ae1d0891a3583daa51971a5ba51251f3b9ac6d8a02e0fcb69744a74762e13c24e3f1d8e6e3e2956b99b97506e959ca3c7141faa5e2404c62854ef2b9e75a75760a71003e1b0c004752864f51ed600fc306773f635587504e3cf432d68c2fbce21c26a47dcf3358e434dc2b97941a5bb0e35744e4f3d53fee5719cc931f93e150744baf61754726b84a052bde27f666e472672f1f8f6381bd25bc619ba51a", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='-:_ygroup/myeve', 0xf) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 43.910017888s ago: executing program 0 (id=50): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 43.909742068s ago: executing program 0 (id=51): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r1, 0x80000001, 0x4) 43.793869241s ago: executing program 0 (id=55): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x2, 0x0, 0x2, 0x419, 0x401}, 0x20) 28.763048997s ago: executing program 32 (id=55): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x2, 0x0, 0x2, 0x419, 0x401}, 0x20) 22.032880187s ago: executing program 1 (id=171): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x2000) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x41, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0x53, {0x53, 0xc, "824e10b7dfb420b792964648b4a93e607c348c2a80a725ebb25f39e0ad666e97526f49424cd071ccd326ea908e3875c5a7c2138ea75d47bd61486fdb4a3f39ef8701752152e4e042c948ef3637d69660cb"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000000c0)={0x0, 0xf, 0x6c, {0x5, 0xf, 0x6c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x3}, @generic={0x2d, 0x10, 0x0, "e074fbfaab9ec6624f44ff9d1acb04eefdfe559f47373f64c00b85ed0f490ac81d3c502329e99d0a6f8b"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "45bbca9fc2a27d64ceb281601160130a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x32, 0x8, 0x7, 0xea3, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "9b744014e6acea0b41202ffc537e9cad"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x51, 0x2, 0xf, 0x5, "c8e8f86c", "08959c54"}}, &(0x7f00000005c0)={0x20, 0x2a, 0x3d, {0xc, 0x2a, 0x70, 0x8, 0xa, 0x30, 0xaf, 0x9, 0x800}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0xf2, "5298c249654063d6233881f919ee7e00fc401dc9c1ece96ef3dd5ee17fec69029dac925fbfeee4375817e90e8cfe79419a203ee860a03f3aafa816d80af4acb7d6ee70dbc1a1847cd74dfc0eb7a2cb75c4536312f5e0243c833aaffd7929ca42bc602dcb6bd4d2a5f960945dc7f13415599ba270295eaf8fb671e1cf6ee724a1cde8918d6d41d5adb114f9e26e0af5f8b73e7219f6674ec32127a0b5cc0f1ff5986e2ca07d11d7cf91af83e7f2096d34577fe21c30116ddadd80f5713ecb84fdd3383230ee9982a4b3e535a66dd2041955822cd44fb4fc3d364f017d6f4465875a075455716c8b5333a9b2c6a540b2d8b755"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x140, 0x2, [0xf0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a63d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @random="0cbe56032b3e"}, &(0x7f0000000980)={0x40, 0x17, 0x6, @random="0641e2527607"}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "f186"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x1}}) close(0x3) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f010000000000000000000624080000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_connect$uac2(0x0, 0x10b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x5, 0x38, 0x7, 0x20, 0x8}, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="040f190001141004a5263e9aaae862dc3f17e2b99e0fcb3c46a8127d30b6a349bc9218f02a0d"], 0x3, [{0xd2, &(0x7f0000000240)=@string={0xd2, 0x3, "762615ba6e4f4176d2131a05012c78870ddb133e612f6f4a2661a56fc423ff1fa7fee1f273a82962c57789f3eab0e0cdf7d3ca648cb49a9aa159fc1424190e10a3066a44236166df4102ae33ff8f5c4bb1edd5db510adbdd87963bd9398c4cc98571c1c10b383b2c0361b43be4ba75b219b8b9d46798bdb798671bc9f13504c2a63840c45507877f6ce9a2248fdf126e48d4f4202455e084e91f1028cf982ad77663d5b9b7e5078acf83e6d2699c5206a9fc7b03c99996e7d65e60f43192a3119ebb779ca77316ed42cd152e12e5db92"}}, {0x5d, &(0x7f0000000340)=ANY=[@ANYBLOB="5d0370e5525e50e51286b5b1fc6c774d7860a505e93e2376641e2c92d3baebbaf08659e6ef697a04c87b32c1b12fba4c9a3d3a3a9cbec44ad34f46bef170c53f362d35933d7e90c535f75190535c040f85394dc5a0e78213"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42a}}]}) 21.48560361s ago: executing program 2 (id=173): syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000002100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x8, 0x80, 0x9b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2c}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x1, 0x4, 0x101, 0x4, 0xdb}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x2, 0x1, 0x6], 0xa8}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x6, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x6, 0x7, {0x7, 0x25, 0x1, 0xc, 0xf, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0xff, 0x26, {0x7, 0x25, 0x1, 0x4, 0x8, 0x144}}}}}}}}]}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r4, &(0x7f0000000140), 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x4040004) r5 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(r5, 0x8913, &(0x7f00000001c0)={'veth0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x19) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r10, 0x4010ae74, &(0x7f00000001c0)={0x4, 0x3ff, 0x9}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x48, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc091) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="b2bdb235", @ANYRESDEC=r4, @ANYBLOB="0100abbd7008fedbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 20.073012043s ago: executing program 4 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) ftruncate(r0, 0x800) syz_usb_connect$uac2(0x5, 0xa4, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000401e04203016d30102030109029200030107000b080b010101ff20050904000000010120000924010180041c000707240c040d06020c240305ff01070200ec000609040100000102200009040101010102200006240201023e10240105010303e1ffff0209000000cd09050109000224ff0e"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x11, 0x3, 0x0) getsockopt$packet_int(r2, 0x107, 0xf, 0x0, &(0x7f0000000080)) getrandom(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) socket$inet(0x2, 0x5, 0x200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x70bd2d, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}]}, 0x50}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 20.036175224s ago: executing program 2 (id=182): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000740)=0xff) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r2, 0x19, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044090}, 0x40080) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKGETDISKSEQ(r6, 0x80081280, &(0x7f0000000700)) r7 = dup2(r5, r3) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000780)={{0x6000, 0x10000, 0x0, 0x9, 0x6, 0x2, 0xb, 0xbc, 0xfb, 0xc, 0x8, 0x59}, {0x1, 0xeeee8000, 0x0, 0x5, 0x2, 0x15, 0x6a, 0x7, 0x4, 0x3c, 0x7, 0x8}, {0x10000, 0x26000, 0xe, 0x7, 0x2, 0x8, 0x7, 0xd, 0x7, 0x20, 0x6, 0x4}, {0x9000, 0xc000, 0x10, 0x3, 0x4, 0x6, 0xcc, 0x5, 0x81, 0x81, 0x7, 0x11}, {0xefd61ffb, 0x9000, 0x3, 0x7, 0x40, 0xe, 0x1, 0xd1, 0xf, 0x30, 0x3, 0x9}, {0x30000, 0xfec00000, 0x4, 0xf, 0x3, 0x8, 0x2, 0x6, 0xd4, 0xc, 0xa1, 0x3}, {0x200000, 0xb000, 0xf, 0x1, 0xe, 0xfe, 0x9, 0x1, 0x5, 0x9, 0x4, 0x1}, {0xeeee0000, 0x100000, 0xe, 0x0, 0x8, 0x1, 0x2, 0xb, 0x62, 0xae, 0x7, 0xae}, {0x8000000, 0xffff}, {0x0, 0x8}, 0x40000009, 0x0, 0x4000, 0x20, 0x3, 0xa400, 0x70000, [0x4, 0x5, 0x1, 0x3cb]}) setns(0xc9, 0x0) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x85, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x9, 0x80, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x502, 0x2, 0x0, 0x2, 0x89, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x6, 0xa0, {0x7, 0x25, 0x1, 0xc, 0x7, 0x4959}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x8, 0x3, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0x7, 0x6, 0xe, 0x0, 0x8}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x74, 0x6, 0x7, 0x7, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xb, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x94, "c807d77d573ead8d37b56f5558524500"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe0, 0x40, 0x6a, 0x22, 0x7}]}, 0x6, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x455}}, {0x9f, &(0x7f00000000c0)=@string={0x9f, 0x3, "efea257b7af206bf87b854acc73f0cd250a04de58d1d84bfda623962515d8889f07cce9d4cdfda487f25452668a78f32fe5468acaa330aefadf6fb5d15fd66a49997ab669c8f0d69b086ad760a5d342a3dfb772eedc06ff7a67e6732304df2639e8628330f98f4cc3b2424f6c8ebd95e14ed59cfcb5ed41b81dd99c55ab3f64dcd6c040ad077e3ccc0f58c6443cb6860f943af9fe0441124b991bac3fa"}}, {0xd6, &(0x7f0000000180)=@string={0xd6, 0x3, "5ea493fbf330f7e9c130c435a37d05fc6eb5f8f881d379ae3e51fea69e467cf17a6dad3e07a127ad81cf92e448b3c9b774aec89ba91b50b91a7a0e8fa0328479fd555ee66f6159f01127f872b30a7234556eb137bd390863cc2245913a90de5095cb1e90b8e68909b83e92c8e4b845feba7f0a7117e203547ea285670bd8d3fc4249a3ec326d92ed419d5f66c9369bbac7d504754b9ce4ae045703027b59044ab9c5a926cc4ef30f89efd33be996a4b998593fc7da5b0d0f442d0082993967ab357609e52c4c810eb13c8c7a55b4db24a282c4f0"}}, {0x20, &(0x7f0000000280)=@string={0x20, 0x3, "ee3f9d50fbeea5069feb24e7418f7eef6dcd6e50d7e7a994f44d122863ab"}}, {0xf3, &(0x7f00000002c0)=@string={0xf3, 0x3, "a7bbdd5390988076a6f462d23d22f667cf6d60adcaa7e40809f7b7f2c0b98fa0a29c6436cbfa38a85dd95a6122ce3e0f9ed17a8299cff428b9059af1e9b2ec7cfa010557e16486f1dbed377cac35554899630e33c1eab926abf23142e605403a0b44cf9cc496df7f5fd0b04781c5826cd0368f97bc430f2890fb2feacfbfd0477a85acd82ed3f98cd7325e0b1f5c8ab066650e57770a517a698aab3f7b7852cfbc2288e0bb46423e86aa274272f11ac438cd15948a76f4e36289b2d9d571466bc6d981ca35134b4686611361bb0c6d0c55eadab490c3948da506aebb71029a14034531aac2ee619e38943e1db55896cfd0"}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "d2f61494378bdc056b3313ea6f930f31835a7cd9ea5859b3f5eb9ee4b655817d58ef6d4d72ca046d70"}}]}) 18.9659086s ago: executing program 1 (id=186): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500000000008ac05028100000000000109022400010000402c090400d80a030000000921fe7fe90122180009058103e707008981673a24145bbfc6ce65171bab93e2ffbe316f8ba2db3c34a1e7e78b6feb47e5733e0be6c2a668f57b5ce56e5deef57c55"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x23, {0x23, 0x36, "970b9fb819fb0da4bdac1d0d5a5bd51f02e133a359e7e397aca6c11b6768607f64"}}, 0x0}, 0x0) 18.746141545s ago: executing program 2 (id=187): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x18, r3}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") 18.719607666s ago: executing program 4 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x141440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000140)={0x0, 0x106e, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626e, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x41000, 0x7ff, 0x6, 0x5, 0x0, [{0x8, 0x7, 0x3, '\x00', 0x3}, {0x40, 0xc, 0x7f, '\x00', 0xf7}, {0x38, 0x8, 0x6, '\x00', 0xd}, {0x9, 0x3, 0x3f, '\x00', 0x2}, {0x1, 0x6, 0x8, '\x00', 0xda}, {0x5, 0xf, 0x12, '\x00', 0x7}, {0x0, 0x30, 0x2, '\x00', 0x3}, {0x5, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x4, 0x4, '\x00', 0xff}, {0xf, 0x7, 0xf5, '\x00', 0x34}, {0xbc, 0x7f, 0x80, '\x00', 0x8}, {0x65, 0x1, 0x2, '\x00', 0xff}, {0x5, 0x3a, 0x9, '\x00', 0x2}, {0x9, 0x7, 0x7f, '\x00', 0xb7}, {0x1, 0x6, 0x1, '\x00', 0x6}, {0x3, 0xc, 0xdc, '\x00', 0xd}, {0x2, 0x40, 0x9a, '\x00', 0x1}, {0x9, 0x9, 0x76, '\x00', 0x4}, {0x1, 0x5, 0x2, '\x00', 0x2}, {0x9, 0x2, 0x4, '\x00', 0x5}, {0xac, 0x2d, 0x44, '\x00', 0x88}, {0x6, 0xb, 0x4, '\x00', 0x9}, {0x7, 0xd, 0x1e, '\x00', 0x5}, {0x9, 0xff, 0x3, '\x00', 0xf8}]}}) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x41000, 0x7ff, 0x6, 0x5, 0x0, [{0x8, 0x7, 0x3, '\x00', 0x3}, {0x40, 0xc, 0x7f, '\x00', 0xf7}, {0x38, 0x8, 0x6, '\x00', 0xd}, {0x9, 0x3, 0x3f, '\x00', 0x2}, {0x1, 0x6, 0x8, '\x00', 0xda}, {0x5, 0xf, 0x12, '\x00', 0x7}, {0x0, 0x30, 0x2, '\x00', 0x3}, {0x5, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x4, 0x4, '\x00', 0xff}, {0xf, 0x7, 0xf5, '\x00', 0x34}, {0xbc, 0x7f, 0x80, '\x00', 0x8}, {0x65, 0x1, 0x2, '\x00', 0xff}, {0x5, 0x3a, 0x9, '\x00', 0x2}, {0x9, 0x7, 0x7f, '\x00', 0xb7}, {0x1, 0x6, 0x1, '\x00', 0x6}, {0x3, 0xc, 0xdc, '\x00', 0xd}, {0x2, 0x40, 0x9a, '\x00', 0x1}, {0x9, 0x9, 0x76, '\x00', 0x4}, {0x1, 0x5, 0x2, '\x00', 0x2}, {0x9, 0x2, 0x4, '\x00', 0x5}, {0xac, 0x2d, 0x44, '\x00', 0x88}, {0x6, 0xb, 0x4, '\x00', 0x9}, {0x7, 0xd, 0x1e, '\x00', 0x5}, {0x9, 0xff, 0x3, '\x00', 0xf8}]}}) 17.744625288s ago: executing program 4 (id=190): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="d9df739ea4f9ef3038eee37208f1bfe6c29ffe54809c62fa1409e0a8d7cfd349ebdffe7ea593bd2667f4fd7d9505a83d60660643ed43511bb8fb469a9f73217337634f60d122341077f049ef8f01b648bb3c15b6fe9bdc42aa6a487b171a8a15f98dc186abc77c56c1634dff3e26b4950fdcaee2b4893bec9b5aa7d6dbf29d6cf0e5e7cc2399d2bd00c2647ca39b5180bea51e279cd7cd15634044d7f2e61022559eaf1a3fc72d58573171ffff760ca17d8cf8e6ed9d2daf3c3aaaa7d13e50e72104c9609d4bcba32965252a9276e53e8e5d97196748395973161af097bdbc135892e40e6f798ad4"], 0x0) 17.212155171s ago: executing program 3 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0xfffffffc, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x1c, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e", @generic="15c76bc0"]}, 0x1c}], 0x1}, 0x4000080) 17.211834601s ago: executing program 3 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x1811}) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async, rerun: 64) keyctl$session_to_parent(0x12) (rerun: 64) 17.144132933s ago: executing program 3 (id=194): mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x800000, &(0x7f0000006240)={[{}]}) socket$inet6_icmp(0xa, 0x2, 0x3a) 17.123239114s ago: executing program 3 (id=195): r0 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async, rerun: 32) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}, 0x300}, 0x0) (rerun: 32) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="07000000470200000000800000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="050000060200000000000000000000003fd313bc00000000044b6c422507930d6da0365fd6f80ac06925a2a2ff7ebf0e1a"], 0x48}, 0x300}, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000040), 0x4) (async) close(r3) (async, rerun: 32) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) rename(0x0, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x200, 0x4) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, 0x0, 0x0) (async) close(0x3) (async, rerun: 32) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000040), 0x4) (rerun: 32) 16.993691896s ago: executing program 1 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x42}]}, 0x10) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001877a23c05b61ef432a022ead523bec5a82d2ce8283ff280ffbffe4025cb9fc5acfbc825248c5ade07c1eb5b1c350c5bdafddcb50652630d4e7ff26f183521669d84fe04db81e857621d6cfccbaf263f8e1621f418a0c88ccb2df152e04fa7b83bf768cadaa96e098e01cabd450f5836a804e726d1d25443cdb8b2f78a37d3e50b256d1fd2f0551cc56a3a5a6d0c1c8ce869302b67ab3fd3e25f74bf6de5fcc19d0e0e42495233555415", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000004000380"], 0x18}}, 0x0) 16.923810308s ago: executing program 2 (id=197): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_connect$cdc_ecm(0x3, 0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000402505a1a4400001020301090254000101f7880e0904000503020e0003052406"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 14.557265924s ago: executing program 4 (id=198): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2040) socket$inet6(0xa, 0x6, 0xffffcc87) 13.388506702s ago: executing program 1 (id=199): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0402, 0x101) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000580)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7df30", 0x48, 0x40001, 0x0, 0x0) 11.988019725s ago: executing program 3 (id=200): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0xee01) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{0x200}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) 11.535930816s ago: executing program 2 (id=201): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x9d6e, 0x7, 0x1, 0x1}, {0x6, 0x3, 0x5, 0x3}, {0x5, 0xf, 0x65, 0x3}, {0x8000, 0x0, 0x6, 0xf}, {0x3, 0x5, 0xd, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 6.625416672s ago: executing program 1 (id=202): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1000000, 0x1000000000000}) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000140)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0x11084080, &(0x7f0000000180)="f9bae0ee56264381c2a6fe9020d18d1d4dc39ae9966d75142817e3aee559b063e1f62ee65ff6e3d79006bb093ca51c0f1391dd20d07d877f6e398fc76670d8c5f2974265c5f2f75d915ae2", 0x4b, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="31e2ff5506ce9813e67c6453c7de45915b08525457654efa5b081c446ba67d4b64256a89be9379c7f735d9fcc955e62a6ee91143b193b3171c0bc35048bc6df50a2d31d55c66cedd72e6099434546af0dadcc37289a508d7e14a8ed7928fcc927d206246eb07754953d6ae132105d4f38ee02db67f6f767e1c26f8a472c244f982fa84966252f2d08ad81e07c6c33fc2513fed91e7d04d85e31e49ccccfa0f") sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200"/33, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c"], 0x23c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=@migrate={0x58, 0x21, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@loopback, @in=@empty, 0x4e21, 0x1, 0x4e22, 0x2694, 0x2, 0xa0, 0x80, 0xff}, 0x6e6bb7}, [@sa_dir={0x5, 0x21, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d4) 5.696339234s ago: executing program 4 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000280)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x84}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4044004) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b', @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000100)="8102") 4.701464148s ago: executing program 3 (id=204): r0 = socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a91000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 3.38833s ago: executing program 2 (id=205): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @local}, &(0x7f0000000300)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@initdev, @multicast1, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000400)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x154, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r9, 0x0, &(0x7f0000000680)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x2f, 0x0}}], 0x1, 0x800) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r12, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000010000000000000000800060000000000100007000000000020"], 0x24, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.008621472s ago: executing program 1 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x171) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r1, 0xa, 0x22) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000190000000000000000001d0109004d001280080021000000", @ANYRES32=0x0, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db000000080005800bad07e0"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=ANY=[], 0x14}], 0x1}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0xea60}}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000, 0x1}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r6, 0x540a, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 4 (id=207): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) setresuid(0xee00, 0xee00, 0x0) setpriority(0x1, 0x0, 0xfffffffffffff000) mkdir(0x0, 0x19e) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x9, 0xff, 0x9, 0xffffff7f, 0x4000b}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x4000009b}, {0xc0010115, 0x0, 0x3}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000040)={0x15, 0x7, 0x2, {{0x8, 'tracefs\x00'}, 0x6}}, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRESDEC=r5], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64=r5], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xb8}}, 0x14) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) recvmmsg(r8, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r8, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e196003", 0x10}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 22.140234][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 22.140253][ T36] audit: type=1400 audit(1787628732.330:59): avc: denied { transition } for pid=273 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.145362][ T36] audit: type=1400 audit(1787628732.330:60): avc: denied { noatsecure } for pid=273 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.149840][ T36] audit: type=1400 audit(1787628732.340:61): avc: denied { write } for pid=273 comm="sh" path="pipe:[1951]" dev="pipefs" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.153820][ T36] audit: type=1400 audit(1787628732.340:62): avc: denied { rlimitinh } for pid=273 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.156991][ T36] audit: type=1400 audit(1787628732.340:63): avc: denied { siginh } for pid=273 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 29.914329][ T36] audit: type=1400 audit(1787628740.110:64): avc: denied { mounton } for pid=285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.917840][ T285] cgroup: Unknown subsys name 'net' [ 29.937014][ T36] audit: type=1400 audit(1787628740.110:65): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.964387][ T36] audit: type=1400 audit(1787628740.140:66): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.964991][ T285] cgroup: Unknown subsys name 'devices' [ 30.086337][ T285] cgroup: Unknown subsys name 'hugetlb' [ 30.091970][ T285] cgroup: Unknown subsys name 'rlimit' [ 30.207871][ T36] audit: type=1400 audit(1787628740.400:67): avc: denied { setattr } for pid=285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.231173][ T36] audit: type=1400 audit(1787628740.400:68): avc: denied { mounton } for pid=285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.256106][ T36] audit: type=1400 audit(1787628740.400:69): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.280476][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.289340][ T36] audit: type=1400 audit(1787628740.480:70): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.314888][ T36] audit: type=1400 audit(1787628740.480:71): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.348785][ T36] audit: type=1400 audit(1787628740.540:72): avc: denied { read } for pid=285 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.374480][ T36] audit: type=1400 audit(1787628740.540:73): avc: denied { open } for pid=285 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.375303][ T285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.681423][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.688595][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.697420][ T294] bridge_slave_0: entered allmulticast mode [ 31.703743][ T294] bridge_slave_0: entered promiscuous mode [ 31.712293][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.719405][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.726563][ T294] bridge_slave_1: entered allmulticast mode [ 31.732892][ T294] bridge_slave_1: entered promiscuous mode [ 31.801205][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.808415][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.815534][ T295] bridge_slave_0: entered allmulticast mode [ 31.821861][ T295] bridge_slave_0: entered promiscuous mode [ 31.831385][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.838711][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.845854][ T295] bridge_slave_1: entered allmulticast mode [ 31.852333][ T295] bridge_slave_1: entered promiscuous mode [ 31.866667][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.873858][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.881053][ T292] bridge_slave_0: entered allmulticast mode [ 31.887536][ T292] bridge_slave_0: entered promiscuous mode [ 31.896853][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.904004][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.911197][ T292] bridge_slave_1: entered allmulticast mode [ 31.917591][ T292] bridge_slave_1: entered promiscuous mode [ 31.926589][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.933662][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.940791][ T293] bridge_slave_0: entered allmulticast mode [ 31.947162][ T293] bridge_slave_0: entered promiscuous mode [ 31.953671][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.960779][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.967969][ T293] bridge_slave_1: entered allmulticast mode [ 31.974367][ T293] bridge_slave_1: entered promiscuous mode [ 32.131880][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.139003][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.146423][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.153464][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.162029][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.169117][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.183417][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.190518][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.197940][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.205009][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.224636][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.231723][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.239051][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.246115][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.306696][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.314001][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.322212][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.329944][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.339231][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.346335][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.358665][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.365761][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.388157][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.395352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.420607][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.427808][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.441317][ T294] veth0_vlan: entered promiscuous mode [ 32.454486][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.461571][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.488000][ T292] veth0_vlan: entered promiscuous mode [ 32.502272][ T294] veth1_macvtap: entered promiscuous mode [ 32.517490][ T292] veth1_macvtap: entered promiscuous mode [ 32.537556][ T295] veth0_vlan: entered promiscuous mode [ 32.561691][ T293] veth0_vlan: entered promiscuous mode [ 32.586421][ T295] veth1_macvtap: entered promiscuous mode [ 32.602490][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.620572][ T293] veth1_macvtap: entered promiscuous mode [ 32.639621][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.735398][ T320] random: crng reseeded on system resumption [ 32.749704][ T318] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 32.863778][ T334] FAULT_INJECTION: forcing a failure. [ 32.863778][ T334] name fail_futex, interval 1, probability 0, space 0, times 1 [ 32.881641][ T334] CPU: 0 UID: 0 PID: 334 Comm: syz.2.10 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 32.881680][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.881705][ T334] Call Trace: [ 32.881713][ T334] [ 32.881723][ T334] __dump_stack+0x21/0x30 [ 32.881776][ T334] dump_stack_lvl+0x140/0x1c0 [ 32.881810][ T334] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.881845][ T334] dump_stack+0x19/0x20 [ 32.881882][ T334] should_fail_ex+0x3c2/0x510 [ 32.881912][ T334] should_fail+0xf/0x20 [ 32.881937][ T334] get_futex_key+0x178/0x940 [ 32.881971][ T334] ? __sched_text_start+0x10/0x10 [ 32.882008][ T334] ? __cfi_get_futex_key+0x10/0x10 [ 32.882039][ T334] futex_wait_setup+0xae/0x260 [ 32.882062][ T334] ? __cfi___futex_queue+0x10/0x10 [ 32.882092][ T334] ? __cfi_futex_wait_setup+0x10/0x10 [ 32.882115][ T334] ? __asan_memcpy+0x5a/0x80 [ 32.882145][ T334] __futex_wait+0x12c/0x3d0 [ 32.882162][ T334] ? __cfi___futex_wait+0x10/0x10 [ 32.882178][ T334] ? __cfi_futex_wake_mark+0x10/0x10 [ 32.882193][ T334] ? __kasan_check_read+0x15/0x20 [ 32.882210][ T334] ? futex_wake+0x627/0x950 [ 32.882224][ T334] ? futex_setup_timer+0xb4/0xd0 [ 32.882244][ T334] futex_wait+0x128/0x7c0 [ 32.882259][ T334] ? __cfi_futex_wait+0x10/0x10 [ 32.882275][ T334] ? vfs_write+0xbcf/0xfd0 [ 32.882294][ T334] do_futex+0x32a/0x510 [ 32.882316][ T334] ? __cfi_do_futex+0x10/0x10 [ 32.882337][ T334] ? mutex_unlock+0x90/0x240 [ 32.882354][ T334] __se_sys_futex+0x13c/0x320 [ 32.882377][ T334] ? fput+0x1a4/0x230 [ 32.882399][ T334] ? __x64_sys_futex+0x110/0x110 [ 32.882421][ T334] ? __cfi_ksys_write+0x10/0x10 [ 32.882439][ T334] __x64_sys_futex+0xe9/0x110 [ 32.882462][ T334] x64_sys_call+0x227f/0x2ee0 [ 32.882477][ T334] do_syscall_64+0x57/0xf0 [ 32.882499][ T334] ? clear_bhb_loop+0x50/0xa0 [ 32.882516][ T334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.882543][ T334] RIP: 0033:0x7f359ef9e0d9 [ 32.882557][ T334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.882571][ T334] RSP: 002b:00007f359fda50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.882597][ T334] RAX: ffffffffffffffda RBX: 00007f359f225fa8 RCX: 00007f359ef9e0d9 [ 32.882609][ T334] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f359f225fa8 [ 32.882620][ T334] RBP: 00007f359f225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 32.882631][ T334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.882640][ T334] R13: 00007f359f226038 R14: 00007ffc7b3e3e30 R15: 00007ffc7b3e3f18 [ 32.882655][ T334] [ 33.154232][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.294095][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.304300][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 33.311537][ T45] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 33.338546][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.352338][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 33.361843][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.370273][ T45] usb 4-1: Product: syz [ 33.374764][ T45] usb 4-1: Manufacturer: syz [ 33.379481][ T45] usb 4-1: SerialNumber: syz [ 33.444074][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 33.450425][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.460935][ T9] usb 1-1: config 0 has no interfaces? [ 33.468033][ T9] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 33.484107][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.492169][ T9] usb 1-1: Product: syz [ 33.498243][ T9] usb 1-1: Manufacturer: syz [ 33.503262][ T9] usb 1-1: SerialNumber: syz [ 33.513575][ T9] usb 1-1: config 0 descriptor?? [ 33.601885][ T45] usb 4-1: USB disconnect, device number 2 [ 33.723661][ T31] usb 1-1: USB disconnect, device number 2 [ 33.889099][ T383] device-mapper: ioctl: Invalid target message parameters. [ 33.960389][ T392] device-mapper: ioctl: Invalid target message parameters. [ 33.998103][ T397] syzkaller1: entered promiscuous mode [ 34.003633][ T397] syzkaller1: entered allmulticast mode [ 34.094304][ T401] FAULT_INJECTION: forcing a failure. [ 34.094304][ T401] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.107666][ T401] CPU: 0 UID: 0 PID: 401 Comm: syz.1.39 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 34.107693][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.107703][ T401] Call Trace: [ 34.107708][ T401] [ 34.107714][ T401] __dump_stack+0x21/0x30 [ 34.107743][ T401] dump_stack_lvl+0x140/0x1c0 [ 34.107788][ T401] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.107823][ T401] ? vfs_write+0xbcf/0xfd0 [ 34.107849][ T401] dump_stack+0x19/0x20 [ 34.107879][ T401] should_fail_ex+0x3c2/0x510 [ 34.107899][ T401] should_fail+0xf/0x20 [ 34.107916][ T401] should_fail_usercopy+0x1e/0x30 [ 34.107936][ T401] _copy_from_user+0x20/0xa0 [ 34.107960][ T401] __se_sys_io_uring_setup+0x170/0x2b0 [ 34.107984][ T401] ? __se_sys_futex+0x13c/0x320 [ 34.108007][ T401] ? __x64_sys_io_uring_setup+0x80/0x80 [ 34.108033][ T401] ? __kasan_check_write+0x18/0x20 [ 34.108050][ T401] __x64_sys_io_uring_setup+0x5f/0x80 [ 34.108073][ T401] x64_sys_call+0x22c0/0x2ee0 [ 34.108088][ T401] do_syscall_64+0x57/0xf0 [ 34.108117][ T401] ? clear_bhb_loop+0x50/0xa0 [ 34.108134][ T401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.108162][ T401] RIP: 0033:0x7f466519e0d9 [ 34.108176][ T401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.108190][ T401] RSP: 002b:00007f466607bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 34.108208][ T401] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f466519e0d9 [ 34.108220][ T401] RDX: 0000200000000540 RSI: 0000200000000040 RDI: 00000000000007c0 [ 34.108231][ T401] RBP: 00007f4665235024 R08: 0000000000000000 R09: 0000000000000000 [ 34.108242][ T401] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000540 [ 34.108253][ T401] R13: 0000200000000140 R14: 0000200000000500 R15: 00007fff10550028 [ 34.108267][ T401] [ 34.631031][ T428] tmpfs: Unknown parameter 'usrquota' [ 34.997614][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 34.997634][ T36] audit: type=1400 audit(1787628745.190:158): avc: denied { read } for pid=447 comm="syz.3.60" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.058411][ T36] audit: type=1400 audit(1787628745.220:159): avc: denied { open } for pid=447 comm="syz.3.60" path="/dev/usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.104102][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.111715][ T36] audit: type=1400 audit(1787628745.230:160): avc: denied { ioctl } for pid=447 comm="syz.3.60" path="/dev/usbmon1" dev="devtmpfs" ino=91 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.164111][ T36] audit: type=1400 audit(1787628745.280:161): avc: denied { write } for pid=449 comm="syz.3.61" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.207642][ T36] audit: type=1400 audit(1787628745.280:162): avc: denied { open } for pid=449 comm="syz.3.61" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.241582][ T36] audit: type=1400 audit(1787628745.420:163): avc: denied { ioctl } for pid=453 comm="syz.1.63" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.305170][ T309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.315341][ T309] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 35.324362][ T309] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 35.333456][ T36] audit: type=1400 audit(1787628745.520:164): avc: denied { setopt } for pid=459 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.352733][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.362390][ T309] usb 3-1: config 0 descriptor?? [ 35.634137][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 35.764133][ T31] usb 2-1: device descriptor read/64, error -71 [ 35.920902][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.932311][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.004109][ T31] usb 2-1: device descriptor read/64, error -71 [ 36.142454][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.151979][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.161264][ T36] audit: type=1400 audit(1787628746.350:165): avc: denied { read } for pid=441 comm="syz.2.57" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.254102][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 36.395617][ T31] usb 2-1: device descriptor read/64, error -71 [ 36.644112][ T31] usb 2-1: device descriptor read/64, error -71 [ 36.766078][ T31] usb usb2-port1: attempt power cycle [ 37.104105][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 37.126803][ T31] usb 2-1: device descriptor read/8, error -71 [ 37.255321][ T31] usb 2-1: device descriptor read/8, error -71 [ 37.324511][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.354789][ T36] audit: type=1400 audit(1787628747.550:166): avc: denied { create } for pid=466 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.374835][ T36] audit: type=1400 audit(1787628747.570:167): avc: denied { connect } for pid=466 comm="syz.3.66" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.492198][ T474] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.514110][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 37.535272][ T31] usb 2-1: device descriptor read/8, error -71 [ 37.607115][ T483] overlayfs: missing 'lowerdir' [ 37.665154][ T31] usb 2-1: device descriptor read/8, error -71 [ 37.776053][ T31] usb usb2-port1: unable to enumerate USB device [ 37.787601][ T490] device-mapper: ioctl: Empty message received. [ 37.842829][ T493] device-mapper: ioctl: Invalid target message parameters. [ 37.908486][ T309] usb 3-1: USB disconnect, device number 2 [ 37.947440][ T498] Zero length message leads to an empty skb [ 38.204138][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 38.334119][ T310] usb 4-1: device descriptor read/64, error -71 [ 38.364274][ T309] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.534128][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 38.544865][ T309] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 38.553002][ T309] usb 3-1: config 0 has no interface number 0 [ 38.575597][ T309] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 38.594098][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.594117][ T310] usb 4-1: device descriptor read/64, error -71 [ 38.624090][ T309] usb 3-1: Product: syz [ 38.628306][ T309] usb 3-1: Manufacturer: syz [ 38.632926][ T309] usb 3-1: SerialNumber: syz [ 38.638705][ T309] usb 3-1: config 0 descriptor?? [ 38.654612][ T309] smsc95xx v2.0.0 [ 38.744109][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 38.834150][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.895317][ T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.906583][ T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.919612][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 38.928977][ T31] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 38.937534][ T31] usb 2-1: Product: syz [ 38.941851][ T31] usb 2-1: Manufacturer: syz [ 38.952310][ T31] hub 2-1:4.0: USB hub found [ 38.974072][ T310] usb 4-1: device descriptor read/64, error -71 [ 39.159321][ T31] hub 2-1:4.0: 1 port detected [ 39.214097][ T310] usb 4-1: device descriptor read/64, error -71 [ 39.334253][ T310] usb usb4-port1: attempt power cycle [ 39.365744][ T513] netlink: 5892 bytes leftover after parsing attributes in process `syz.1.81'. [ 39.445582][ T309] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 39.463840][ T309] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.473411][ T309] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 39.484343][ T309] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 39.493984][ T309] usb 3-1: USB disconnect, device number 3 [ 39.520758][ T31] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 39.534069][ T31] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 39.564542][ T31] usb 2-1: USB disconnect, device number 6 [ 39.684105][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.705227][ T310] usb 4-1: device descriptor read/8, error -71 [ 39.835246][ T310] usb 4-1: device descriptor read/8, error -71 [ 40.022393][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 40.022413][ T36] audit: type=1400 audit(1787628750.210:190): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.061623][ T36] audit: type=1400 audit(1787628750.250:191): avc: denied { name_bind } for pid=524 comm="syz.1.84" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.104337][ T36] audit: type=1400 audit(1787628750.300:192): avc: denied { write } for pid=524 comm="syz.1.84" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.127390][ T310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.174462][ T310] usb 4-1: device descriptor read/8, error -71 [ 40.189278][ T36] audit: type=1400 audit(1787628750.340:193): avc: denied { setattr } for pid=524 comm="syz.1.84" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 40.215273][ T529] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=529 comm=syz.1.85 [ 40.228364][ T36] audit: type=1400 audit(1787628750.340:194): avc: denied { ioctl } for pid=524 comm="syz.1.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5125 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.261030][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.279399][ T36] audit: type=1400 audit(1787628750.410:195): avc: denied { create } for pid=528 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.300078][ T36] audit: type=1400 audit(1787628750.410:196): avc: denied { write } for pid=528 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.334056][ T310] usb 4-1: device descriptor read/8, error -71 [ 40.350611][ T36] audit: type=1400 audit(1787628750.420:197): avc: denied { ioctl } for pid=528 comm="syz.1.85" path="socket:[5131]" dev="sockfs" ino=5131 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.380914][ T533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'. [ 40.444246][ T310] usb usb4-port1: unable to enumerate USB device [ 40.464279][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.472918][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.484968][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.495462][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 40.504653][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.512690][ T45] usb 3-1: Product: syz [ 40.519431][ T45] usb 3-1: Manufacturer: syz [ 40.531520][ T45] usb 3-1: SerialNumber: syz [ 40.549464][ T45] usb 3-1: selecting invalid altsetting 1 [ 40.557989][ T45] usb 3-1: unit 6 not found! [ 40.637800][ T36] audit: type=1400 audit(1787628750.830:198): avc: denied { watch watch_reads } for pid=534 comm="syz.1.88" path="/29" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.784783][ T36] audit: type=1400 audit(1787628750.980:199): avc: denied { create } for pid=538 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 41.004472][ T551] 9pnet_fd: Insufficient options for proto=fd [ 41.110100][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.116203][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.121802][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.127711][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.133563][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.141925][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.147669][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.153404][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.160544][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.166337][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.171886][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.177864][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.183410][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.189312][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.194999][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.200639][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.206431][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.212052][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.218095][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.223711][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.229478][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.235237][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.240769][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.246693][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.252219][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.258124][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.263650][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.269533][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.275344][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.280979][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.288333][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.293964][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.299736][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.305531][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.311067][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.317013][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.322551][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.328445][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.333977][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.339842][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.345333][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.353286][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.359416][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.365236][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.370766][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.376644][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.382171][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.388023][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.393570][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.399435][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.405097][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.410849][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.420862][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.428024][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.433643][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.439421][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.445199][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.450741][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.456608][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.462161][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.468048][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.473571][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.479445][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.485282][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.491014][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.496817][ T557] tmpfs: Unsupported parameter 'mpol' [ 41.515580][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.533711][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.558003][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.574099][ T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 41.589277][ T31] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 41.602768][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 41.617476][ T31] usb 4-1: config 1 interface 1 has no altsetting 0 [ 41.626571][ T31] usb 4-1: string descriptor 0 read error: -22 [ 41.632877][ T31] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 41.642320][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.776526][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.788458][ T45] usb 3-1: USB disconnect, device number 4 [ 41.800920][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.894105][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.065215][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.076451][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.085578][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.096695][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.115236][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 42.124360][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.132382][ T9] usb 2-1: Product: syz [ 42.136797][ T9] usb 2-1: Manufacturer: syz [ 42.141429][ T9] usb 2-1: SerialNumber: syz [ 42.157979][ T9] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 42.164472][ T9] usb 2-1: No streaming interface found for terminal 2. [ 42.263846][ T31] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 42.274421][ T31] usb 4-1: Warning! Unlikely big volume range (=28515), cval->res is probably wrong. [ 42.291053][ T31] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/28515/1 [ 42.318493][ T31] usb 4-1: USB disconnect, device number 7 [ 42.326546][ T564] SELinux: policydb table sizes (8,255) do not match mine (8,7) [ 42.334590][ T564] SELinux: failed to load policy [ 42.359259][ T560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.371624][ T564] process 'syz.2.96' launched './file0' with NULL argv: empty string added [ 42.378814][ T560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.388806][ T45] usb 2-1: USB disconnect, device number 7 [ 43.054110][ T309] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 43.233541][ T309] usb 4-1: config 0 has no interfaces? [ 43.240600][ T309] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 43.249811][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.264060][ T309] usb 4-1: SerialNumber: syz [ 43.269664][ T309] usb 4-1: config 0 descriptor?? [ 43.338084][ T592] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure [ 43.594118][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 43.754495][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.765582][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.778082][ T45] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.787478][ T45] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 43.795695][ T45] usb 3-1: Manufacturer: syz [ 43.805455][ T45] usb 3-1: config 0 descriptor?? [ 43.988147][ T598] can: request_module (can-proto-0) failed. [ 44.414935][ T594] input: syz1 as /devices/virtual/input/input4 [ 44.445544][ T605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.455923][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 44.466508][ T605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.477651][ T45] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 44.486745][ T605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.491016][ T45] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 44.502868][ T45] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 44.505609][ T606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.523083][ T45] usb 3-1: USB disconnect, device number 5 [ 44.534296][ T605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.555120][ T606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.694162][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.845241][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.857921][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.868087][ T310] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 44.877369][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.887792][ T310] usb 2-1: config 0 descriptor?? [ 45.101697][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 45.109789][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.121388][ T310] usb 2-1: USB disconnect, device number 8 [ 45.364102][ T465] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.514126][ T465] usb 3-1: device descriptor read/64, error -71 [ 45.704000][ T299] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.711046][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 45.711065][ T36] audit: type=1400 audit(1787628755.900:220): avc: denied { setopt } for pid=617 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.737775][ T36] audit: type=1400 audit(1787628755.930:221): avc: denied { bind } for pid=617 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.754301][ T465] usb 3-1: device descriptor read/64, error -71 [ 45.815752][ T31] usb 4-1: USB disconnect, device number 8 [ 45.842141][ T36] audit: type=1400 audit(1787628756.030:222): avc: denied { create } for pid=619 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.896627][ T36] audit: type=1400 audit(1787628756.090:223): avc: denied { nlmsg_write } for pid=622 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.014128][ T465] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 46.154081][ T465] usb 3-1: device descriptor read/64, error -71 [ 46.211938][ T36] audit: type=1400 audit(1787628756.400:224): avc: denied { write } for pid=691 comm="syz.3.117" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.258042][ T36] audit: type=1400 audit(1787628756.400:225): avc: denied { open } for pid=691 comm="syz.3.117" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.284495][ T36] audit: type=1400 audit(1787628756.430:226): avc: denied { ioctl } for pid=691 comm="syz.3.117" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.310564][ T36] audit: type=1400 audit(1787628756.430:227): avc: denied { ioctl } for pid=691 comm="syz.3.117" path="socket:[5470]" dev="sockfs" ino=5470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.353718][ T36] audit: type=1400 audit(1787628756.430:228): avc: denied { ioctl } for pid=691 comm="syz.3.117" path="socket:[5468]" dev="sockfs" ino=5468 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.378486][ T36] audit: type=1400 audit(1787628756.440:229): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.414721][ T465] usb 3-1: device descriptor read/64, error -71 [ 46.524216][ T465] usb usb3-port1: attempt power cycle [ 46.884114][ T465] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.925154][ T465] usb 3-1: device descriptor read/8, error -71 [ 47.055151][ T465] usb 3-1: device descriptor read/8, error -71 [ 47.304129][ T465] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.325142][ T465] usb 3-1: device descriptor read/8, error -71 [ 47.455155][ T465] usb 3-1: device descriptor read/8, error -71 [ 47.574132][ T465] usb usb3-port1: unable to enumerate USB device [ 47.714087][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.714096][ T458] Bluetooth: hci0: command 0x1003 tx timeout [ 47.907981][ T703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.039828][ T710] SELinux: security policydb version 15 (MLS) not backwards compatible [ 48.054112][ T710] SELinux: failed to load policy [ 48.276064][ T723] netlink: 316 bytes leftover after parsing attributes in process `syz.2.128'. [ 48.295780][ T723] netlink: 316 bytes leftover after parsing attributes in process `syz.2.128'. [ 48.366323][ T727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.385714][ T727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.654103][ T309] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.774148][ T465] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.824110][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 48.836724][ T309] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.849649][ T309] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.856493][ T309] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 48.865843][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.875998][ T309] usb 2-1: config 0 descriptor?? [ 48.924117][ T465] usb 3-1: Using ep0 maxpacket: 16 [ 48.931205][ T465] usb 3-1: config 1 interface 0 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 16 [ 48.954078][ T465] usb 3-1: config 1 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.984074][ T465] usb 3-1: config 1 interface 0 has no altsetting 0 [ 48.992242][ T465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 49.001429][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.009533][ T465] usb 3-1: Product: syz [ 49.013771][ T465] usb 3-1: Manufacturer: Ь [ 49.018375][ T465] usb 3-1: SerialNumber: syz [ 49.025554][ T731] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.244501][ T465] usb 3-1: USB disconnect, device number 10 [ 49.286600][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.293698][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.314183][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.321293][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.344127][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.351231][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.374109][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.381177][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.394199][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.401301][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.408429][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.415600][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.422687][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.429811][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.437197][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.444387][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.451556][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.458678][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.465810][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.472886][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.480009][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.487122][ T309] uclogic 0003:5543:0522.0002: unknown main item tag 0x0 [ 49.495086][ T309] uclogic 0003:5543:0522.0002: No inputs registered, leaving [ 49.503240][ T309] uclogic 0003:5543:0522.0002: hidraw0: USB HID vd.8f Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 49.525203][ T309] usb 2-1: USB disconnect, device number 9 [ 49.550641][ T732] fido_id[732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 49.912579][ T663] bridge_slave_1: left allmulticast mode [ 49.928503][ T663] bridge_slave_1: left promiscuous mode [ 49.938857][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.949464][ T663] bridge_slave_0: left allmulticast mode [ 49.955425][ T663] bridge_slave_0: left promiscuous mode [ 49.961149][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.034229][ T743] bridge0: port 3(veth0_to_bridge) entered blocking state [ 50.041565][ T743] bridge0: port 3(veth0_to_bridge) entered disabled state [ 50.049723][ T743] veth0_to_bridge: entered allmulticast mode [ 50.056549][ T743] veth0_to_bridge: entered promiscuous mode [ 50.062665][ T743] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.075726][ T743] bridge0: port 3(veth0_to_bridge) entered blocking state [ 50.082897][ T743] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 50.105943][ T663] veth1_macvtap: left promiscuous mode [ 50.111726][ T663] veth0_vlan: left promiscuous mode [ 50.151810][ T749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 50.173836][ T753] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.238856][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.245956][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.253027][ T740] bridge_slave_0: entered allmulticast mode [ 50.259521][ T740] bridge_slave_0: entered promiscuous mode [ 50.266892][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.273957][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.281159][ T740] bridge_slave_1: entered allmulticast mode [ 50.287731][ T740] bridge_slave_1: entered promiscuous mode [ 50.359556][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.366649][ T740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.373986][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.381109][ T740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.409666][ T659] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.417751][ T659] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.437731][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.444854][ T674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.461793][ T674] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.468914][ T674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.476411][ T309] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 50.521734][ T740] veth0_vlan: entered promiscuous mode [ 50.550004][ T740] veth1_macvtap: entered promiscuous mode [ 50.635212][ T309] usb 3-1: No LPM exit latency info found, disabling LPM. [ 50.643202][ T309] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 50.655763][ T309] usb 3-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 50.676503][ T309] usb 3-1: string descriptor 0 read error: -22 [ 50.682774][ T309] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 50.704081][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.916260][ T45] usb 3-1: USB disconnect, device number 11 [ 51.304121][ T309] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.465236][ T309] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 51.475142][ T309] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 51.486680][ T309] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 51.495859][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.503894][ T309] usb 4-1: Product: syz [ 51.508112][ T309] usb 4-1: Manufacturer: syz [ 51.512723][ T309] usb 4-1: SerialNumber: syz [ 51.624112][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.694101][ T465] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.720577][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 51.720595][ T36] audit: type=1400 audit(1787628761.910:239): avc: denied { create } for pid=774 comm="syz.3.141" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.747467][ T36] audit: type=1400 audit(1787628761.920:240): avc: denied { read write } for pid=774 comm="syz.3.141" name="file2" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.770288][ T309] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 51.783880][ T36] audit: type=1400 audit(1787628761.920:241): avc: denied { ioctl open } for pid=774 comm="syz.3.141" path="/33/file0/file2" dev="overlay" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.808385][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 51.812503][ T783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 51.827749][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 51.836245][ T9] usb 2-1: config 0 has no interface number 0 [ 51.842376][ T9] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 51.852624][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 51.860635][ T465] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.870907][ T465] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 51.880305][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 51.889395][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.897496][ T465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.905531][ T9] usb 2-1: Product: syz [ 51.909707][ T9] usb 2-1: Manufacturer: syz [ 51.914812][ T9] usb 2-1: SerialNumber: syz [ 51.919676][ T465] usb 3-1: config 0 descriptor?? [ 51.925636][ T9] usb 2-1: config 0 descriptor?? [ 51.930929][ T779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 51.936058][ T465] usb 3-1: bad CDC descriptors [ 51.948850][ T31] usb 4-1: USB disconnect, device number 9 [ 51.956730][ T31] usblp0: removed [ 52.064217][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.128354][ T781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.137217][ T781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.146940][ T781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.156558][ T781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.165110][ T465] usb 3-1: USB disconnect, device number 12 [ 52.208325][ T785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.217125][ T785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.225764][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.236794][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.245906][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.255043][ T45] usb 5-1: config 0 descriptor?? [ 52.461887][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 52.472161][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 52.481211][ T45] usb 5-1: USB disconnect, device number 2 [ 52.489108][ T36] audit: type=1400 audit(1787628762.690:242): avc: denied { unlink } for pid=292 comm="syz-executor" name="file2" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.539366][ T789] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.794098][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.944083][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 52.950435][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.961058][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.971762][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 52.981332][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.989439][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.997600][ T31] usb 4-1: Product: syz [ 53.002726][ T31] usb 4-1: Manufacturer: syz [ 53.007664][ T31] usb 4-1: SerialNumber: syz [ 53.155453][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.166531][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 53.175941][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.185156][ T45] usb 5-1: config 0 descriptor?? [ 53.219102][ T31] usb 4-1: 0:1 : does not exist [ 53.224098][ T31] usb 4-1: unit 6 not found! [ 53.233147][ T31] usb 4-1: USB disconnect, device number 10 [ 53.244298][ T515] udevd[515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.729315][ T36] audit: type=1400 audit(1787628763.920:243): avc: denied { read } for pid=802 comm="syz.2.151" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.754627][ T36] audit: type=1400 audit(1787628763.920:244): avc: denied { open } for pid=802 comm="syz.2.151" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.787968][ T36] audit: type=1400 audit(1787628763.980:245): avc: denied { create } for pid=807 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.794950][ T783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.830418][ T783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.846388][ T36] audit: type=1400 audit(1787628764.040:246): avc: denied { ioctl } for pid=782 comm="syz.4.145" path="mnt:[4026532905]" dev="nsfs" ino=4026532905 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.871896][ T36] audit: type=1400 audit(1787628764.070:247): avc: denied { accept } for pid=813 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.898027][ T36] audit: type=1400 audit(1787628764.070:248): avc: denied { ioctl } for pid=813 comm="syz.2.154" path="socket:[6854]" dev="sockfs" ino=6854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.064071][ T309] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 54.215621][ T309] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.226769][ T309] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.228297][ T825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.245260][ T310] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 54.245524][ T309] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.262187][ T825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.270862][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.278979][ T309] usb 4-1: Product: syz [ 54.283255][ T309] usb 4-1: Manufacturer: syz [ 54.287925][ T309] usb 4-1: SerialNumber: syz [ 54.294907][ T309] cdc_mbim 4-1:1.0: skipping garbage [ 54.374078][ T310] usb 3-1: device descriptor read/64, error -71 [ 54.387726][ T9] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 54.398791][ T9] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 54.421050][ T9] usb 2-1: USB disconnect, device number 10 [ 54.504333][ T812] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 54.614078][ T310] usb 3-1: device descriptor read/64, error -71 [ 54.854143][ T310] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 54.913047][ T829] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 54.920917][ T309] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 54.984084][ T310] usb 3-1: device descriptor read/64, error -71 [ 55.004100][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 55.127339][ T309] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 55.136452][ T309] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 55.143561][ T309] wwan wwan0: port wwan0mbim0 attached [ 55.151407][ T309] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:e1:7a:a9:02:76 [ 55.162098][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 55.169390][ T309] usb 4-1: USB disconnect, device number 11 [ 55.176766][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.183454][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 55.193268][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.201623][ T309] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 55.213426][ T9] usb 2-1: config 0 descriptor?? [ 55.225021][ T310] usb 3-1: device descriptor read/64, error -71 [ 55.236154][ T309] wwan wwan0: port wwan0mbim0 disconnected [ 55.300183][ T45] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 55.314125][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 55.328201][ T45] usb 5-1: USB disconnect, device number 3 [ 55.334114][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 55.342373][ T310] usb usb3-port1: attempt power cycle [ 55.421267][ T9] logitech 0003:046D:C293.0003: unknown global tag 0xc [ 55.428333][ T9] logitech 0003:046D:C293.0003: item 0 0 1 12 parsing failed [ 55.435932][ T9] logitech 0003:046D:C293.0003: parse failed [ 55.442038][ T9] logitech 0003:046D:C293.0003: probe with driver logitech failed with error -22 [ 55.620973][ T833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.631614][ T833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.639974][ T848] usb 2-1: USB disconnect, device number 11 [ 55.694124][ T310] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 55.714113][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.722998][ T310] usb 3-1: device descriptor read/8, error -71 [ 55.855157][ T310] usb 3-1: device descriptor read/8, error -71 [ 55.914119][ T562] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 56.044129][ T562] usb 4-1: device descriptor read/64, error -71 [ 56.094131][ T310] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 56.115420][ T310] usb 3-1: device descriptor read/8, error -71 [ 56.202707][ T858] capability: warning: `syz.4.164' uses 32-bit capabilities (legacy support in use) [ 56.245245][ T310] usb 3-1: device descriptor read/8, error -71 [ 56.254436][ T858] UHID_CREATE from different security context by process 32 (syz.4.164), this is not allowed. [ 56.278804][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 56.287814][ T562] usb 4-1: device descriptor read/64, error -71 [ 56.341780][ T868] tipc: Failed to remove unknown binding: 66,0,0/0:2564424429/2564424431 [ 56.350323][ T868] tipc: Failed to remove unknown binding: 66,0,0/0:2564424429/2564424430 [ 56.358533][ T310] usb usb3-port1: unable to enumerate USB device [ 56.359031][ T867] tipc: Failed to remove unknown binding: 66,0,0/0:2564424429/2564424431 [ 56.378584][ T867] tipc: Failed to remove unknown binding: 66,0,0/0:2564424429/2564424430 [ 56.393344][ T867] tipc: Failed to remove unknown binding: 66,0,0/0:2564424429/2564424431 [ 56.401994][ T867] tipc: Failed to remove unknown binding: 66,0,0/0:2564424429/2564424430 [ 56.534129][ T562] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 56.664098][ T562] usb 4-1: device descriptor read/64, error -71 [ 56.724099][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 56.875361][ T9] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.886351][ T9] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.899187][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.905830][ T9] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 56.914187][ T562] usb 4-1: device descriptor read/64, error -71 [ 56.914947][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.921243][ T45] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 56.932430][ T9] usb 2-1: config 0 descriptor?? [ 57.044166][ T562] usb usb4-port1: attempt power cycle [ 57.085585][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.094099][ T45] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 57.102226][ T45] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 57.112574][ T45] usb 5-1: config 0 has no interface number 0 [ 57.118790][ T45] usb 5-1: too many endpoints for config 0 interface 88 altsetting 169: 123, using maximum allowed: 30 [ 57.130142][ T45] usb 5-1: config 0 interface 88 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 57.143507][ T45] usb 5-1: config 0 interface 88 has no altsetting 0 [ 57.152469][ T45] usb 5-1: string descriptor 0 read error: -22 [ 57.158920][ T45] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 57.168021][ T45] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 57.177071][ T45] usb 5-1: config 0 descriptor?? [ 57.346151][ T9] input: HID 2006:0118 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:2006:0118.0004/input/input8 [ 57.364283][ T9] hkems 0003:2006:0118.0004: input,hidraw0: USB HID v20.00 Joystick [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 57.376222][ T464] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 57.383749][ T45] usb 5-1: USB disconnect, device number 5 [ 57.399915][ T562] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 57.404410][ T9] hkems 0003:2006:0118.0004: no output reports found [ 57.414521][ T9] hkems 0003:2006:0118.0004: force feedback init failed [ 57.436290][ T562] usb 4-1: device descriptor read/8, error -71 [ 57.545383][ T464] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 57.556837][ T464] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 57.566017][ T464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.574113][ T464] usb 3-1: Product: syz [ 57.576139][ T562] usb 4-1: device descriptor read/8, error -71 [ 57.578544][ T464] usb 3-1: Manufacturer: syz [ 57.589200][ T464] usb 3-1: SerialNumber: syz [ 57.797905][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 57.797924][ T36] audit: type=1400 audit(1787628767.990:266): avc: denied { mount } for pid=879 comm="syz.2.173" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.826326][ T562] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 57.835468][ T36] audit: type=1400 audit(1787628767.990:267): avc: denied { write } for pid=879 comm="syz.2.173" name="buffer_subbuf_size_kb" dev="tracefs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.859149][ T36] audit: type=1400 audit(1787628767.990:268): avc: denied { open } for pid=879 comm="syz.2.173" path="/47/tracefs_dir/buffer_subbuf_size_kb" dev="tracefs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.860732][ T562] usb 4-1: device descriptor read/8, error -71 [ 57.898347][ T464] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 57.903447][ T883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.913677][ T883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.918463][ T464] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 57.926343][ T883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.930455][ T36] audit: type=1400 audit(1787628768.110:269): avc: denied { create } for pid=872 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.938071][ T883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.965232][ T464] usb 3-1: 4:0: failed to get current value for ch 1 (-22) [ 57.985795][ T464] usb 3-1: USB disconnect, device number 17 [ 57.997405][ T36] audit: type=1400 audit(1787628768.190:270): avc: denied { read } for pid=884 comm="syz.4.174" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.009443][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.030939][ T36] audit: type=1400 audit(1787628768.190:271): avc: denied { open } for pid=884 comm="syz.4.174" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.066991][ T562] usb 4-1: device descriptor read/8, error -71 [ 58.134557][ T891] netlink: 'syz.4.176': attribute type 4 has an invalid length. [ 58.144136][ T891] netlink: 'syz.4.176': attribute type 21 has an invalid length. [ 58.152027][ T891] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.176'. [ 58.165355][ T892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=892 comm=syz.4.176 [ 58.178277][ T562] usb usb4-port1: unable to enumerate USB device [ 58.209147][ T899] netlink: 9 bytes leftover after parsing attributes in process `syz.4.178'. [ 58.218625][ T899] gretap0: entered promiscuous mode [ 58.227261][ T36] audit: type=1400 audit(1787628768.420:272): avc: denied { connect } for pid=898 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.458027][ T36] audit: type=1400 audit(1787628768.650:273): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.487475][ T36] audit: type=1400 audit(1787628768.680:274): avc: denied { ioctl } for pid=908 comm="syz.2.182" path="socket:[7251]" dev="sockfs" ino=7251 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.684097][ T562] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.754251][ T848] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 58.768853][ T36] audit: type=1400 audit(1787628768.960:275): avc: denied { execute } for pid=913 comm="syz.3.184" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.835619][ T562] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.844209][ T562] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.854361][ T562] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.863392][ T562] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 58.875809][ T562] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice=d3.16 [ 58.885014][ T562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.893088][ T562] usb 5-1: Product: syz [ 58.897328][ T562] usb 5-1: Manufacturer: syz [ 58.901948][ T562] usb 5-1: SerialNumber: syz [ 58.909984][ T848] usb 3-1: not running at top speed; connect to a high speed hub [ 58.918599][ T848] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 58.930988][ T848] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 58.940098][ T848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.948143][ T848] usb 3-1: Product: ꑞﮓンチ㗄綣ﰅ땮펁깹儾꛾䚞浺㺭ꄇ괧쾁덈량깴鯈ᮩ륐稚輎㊠禄嗽慯✑狸ળ㑲湕㞱㦽挈⋌酅逺僞쮕逞উ㺸좒룤﹅羺焊吃ꉾ枅ﳓ䥂洲鵁晟㛉몛헇甄鱋껤圄ȃ奻䨄얹⚩仌࿳㯓雩릤妘윿寚།ⵄ舀㦙ꭧ瘵䰬ກ㲱窌둕ⓛ芢 [ 58.979415][ T848] usb 3-1: Manufacturer: 笥뼆뢇걔㿇툌ꁐᶍ뾄拚戹嵑覈糰鷎䣚╿♅Ꝩ㊏哾걨㎪巻ﴕꑦ鞙暫辜植蚰皭崊⨴﬽⹷샭约㉧䴰揲蚞㌨頏쳴␻廙콙廋ᯔ얙덚䷶泍਄矐쳣撌쭃恨䏹龯䓠␑醹쎺 [ 59.003659][ T848] usb 3-1: SerialNumber: 㿮傝ڥ轁쵭偮钩䷴⠒ꭣ [ 59.054104][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 59.110914][ T907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 59.119885][ T907] bridge_slave_1: left allmulticast mode [ 59.125838][ T907] bridge_slave_1: left promiscuous mode [ 59.131533][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.139373][ T907] bridge_slave_0: left allmulticast mode [ 59.145198][ T907] bridge_slave_0: left promiscuous mode [ 59.150856][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.205246][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.216621][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.219263][ T848] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 59.229837][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.235263][ T848] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 59.250407][ T9] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 59.261865][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.271025][ T848] usb 3-1: USB disconnect, device number 18 [ 59.285531][ T9] usb 4-1: config 0 descriptor?? [ 59.286847][ T562] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 59.298582][ T562] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 59.306099][ T562] usb 5-1: 1:1 : unsupported format bits 0xffffc206 [ 59.312791][ T562] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 59.322905][ T562] usb 5-1: unit 2 not found! [ 59.327717][ T562] usb 5-1: unit 0 not found! [ 59.338492][ T562] usb 5-1: USB disconnect, device number 6 [ 59.355236][ T515] udevd[515]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 59.499375][ T45] usb 2-1: USB disconnect, device number 12 [ 59.866790][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 59.900476][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 59.915497][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.928434][ T9] usb 4-1: USB disconnect, device number 16 [ 60.014463][ T464] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 60.106789][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 60.131142][ T45] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.164069][ T464] usb 3-1: Using ep0 maxpacket: 16 [ 60.165363][ T45] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has invalid maxpacket 2023, setting to 1024 [ 60.172041][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.191831][ T464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 60.198272][ T45] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 60.203562][ T464] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 60.228886][ T464] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 60.238159][ T464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.248557][ T464] usb 3-1: config 0 descriptor?? [ 60.254937][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.261594][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 60.294513][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.305504][ T45] usb 2-1: config 0 descriptor?? [ 60.315253][ T918] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.679525][ T464] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 60.732846][ T45] apple 0003:05AC:8102.0006: unknown main item tag 0x2 [ 60.758532][ T45] apple 0003:05AC:8102.0006: hidraw1: USB HID v7f.fe Device [HID 05ac:8102] on usb-dummy_hcd.1-1/input0 [ 60.936465][ T934] usb 2-1: USB disconnect, device number 13 [ 61.064149][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.074495][ T464] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 61.092731][ T464] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 61.105785][ T936] kvm: kvm [935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 61.115047][ T464] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 61.125698][ T936] kvm: kvm [935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 61.144895][ T936] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 61.153588][ T464] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 61.160455][ T464] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 61.183070][ T464] usb 3-1: USB disconnect, device number 19 [ 61.214109][ T9] usb 5-1: device descriptor read/64, error -71 [ 61.278210][ T939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 61.454078][ T9] usb 5-1: device descriptor read/64, error -71 [ 61.601523][ T955] overlayfs: workdir and upperdir must be separate subtrees [ 61.634587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.646890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.659022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.671127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.683233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.695322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.707413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.719511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.731629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.743722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 61.758861][ T464] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 61.826265][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 61.916536][ T934] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 61.996333][ T9] usb 5-1: device descriptor read/64, error -71 [ 62.004631][ T464] usb 4-1: device descriptor read/64, error -71 [ 62.264464][ T934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.543185][ T934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.597275][ T9] usb 5-1: device descriptor read/64, error -71 [ 62.603616][ T464] usb 4-1: device descriptor read/64, error -71 [ 62.655751][ T934] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.044710][ T9] usb usb5-port1: attempt power cycle [ 63.197208][ T464] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 63.312553][ T934] usb 3-1: config 1 interface 0 has no altsetting 0 [ 63.558065][ T458] Bluetooth: hci0: command 0x1003 tx timeout [ 63.686861][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.745463][ T934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.768093][ T464] usb 4-1: device descriptor read/64, error -71 [ 63.776361][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 64.115878][ T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.123936][ T934] usb 3-1: Product: syz [ 66.298210][ T9] usb 5-1: device not accepting address 9, error -71 [ 66.644075][ C0] net_ratelimit: 108902 callbacks suppressed [ 66.644097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 66.644666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.650305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 66.662382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.674232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 66.686562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 66.698469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 66.710767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.722403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 66.734380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 66.849693][ C1] sched: DL replenish lagged too much [ 67.684150][ T934] usb 3-1: Manufacturer: syz [ 67.905937][ T934] usb 3-1: SerialNumber: syz [ 68.171226][ T934] usb 3-1: can't set config #1, error -71 [ 68.191930][ T934] usb 3-1: USB disconnect, device number 20 [ 71.476896][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 71.476920][ T36] audit: type=1400 audit(1787628780.660:280): avc: denied { create } for pid=961 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.654052][ C1] net_ratelimit: 128969 callbacks suppressed [ 71.654076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.654091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 71.654271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 71.660609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 71.672372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 71.684685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.696414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 71.708343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 71.720277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 71.732457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.797175][ T848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 75.987729][ T848] usb 5-1: Using ep0 maxpacket: 16 [ 76.065447][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.096310][ T974] netlink: 388 bytes leftover after parsing attributes in process `syz.1.202'. [ 76.275397][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 76.378218][ T976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 76.401082][ T848] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 76.664070][ C0] net_ratelimit: 128487 callbacks suppressed [ 76.664090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 76.664131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.670251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 76.682471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.694314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 76.706520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 76.718289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 76.730477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.742174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 76.754285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.823459][ T848] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 76.904472][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.316517][ T848] usb 5-1: config 0 descriptor?? [ 78.391092][ T848] usb 5-1: can't set config #0, error -71 [ 78.856523][ T981] BUG: scheduling while atomic: syz.1.206/981/0x00000002 [ 78.863643][ T981] Modules linked in: [ 78.870292][ T981] CPU: 1 UID: 0 PID: 981 Comm: syz.1.206 Not tainted syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 78.870335][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.870352][ T981] Call Trace: [ 78.870360][ T981] [ 78.870370][ T981] __dump_stack+0x21/0x30 [ 78.870411][ T981] dump_stack_lvl+0x140/0x1c0 [ 78.870447][ T981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.870482][ T981] ? is_bpf_text_address+0x17b/0x1a0 [ 78.870523][ T981] dump_stack+0x19/0x20 [ 78.870556][ T981] __schedule_bug+0x12b/0x200 [ 78.870583][ T981] ? find_proxy_task+0x2460/0x2460 [ 78.870629][ T981] __schedule+0xb85/0x20b0 [ 78.870683][ T981] ? is_bpf_text_address+0x17b/0x1a0 [ 78.870720][ T981] ? kernel_text_address+0xa9/0xe0 [ 78.870755][ T981] ? __kernel_text_address+0x11/0x40 [ 78.870790][ T981] ? __sched_text_start+0x10/0x10 [ 78.870827][ T981] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 78.870861][ T981] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 78.870898][ T981] ? __kasan_check_write+0x18/0x20 [ 78.870924][ T981] ? _raw_spin_lock+0x92/0x120 [ 78.870956][ T981] ? __cfi__raw_spin_lock+0x10/0x10 [ 78.870989][ T981] ? stack_depot_save_flags+0x399/0x800 [ 78.871021][ T981] schedule+0xc5/0x240 [ 78.871056][ T981] schedule_preempt_disabled+0x14/0x30 [ 78.871094][ T981] __mutex_lock+0x902/0x1b90 [ 78.871121][ T981] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 78.871151][ T981] ? pointer+0xe10/0xe10 [ 78.871184][ T981] ? vsnprintf+0x19ef/0x1ad0 [ 78.871218][ T981] __mutex_lock_slowpath+0xe/0x20 [ 78.871243][ T981] mutex_lock+0x113/0x1d0 [ 78.871266][ T981] ? __cfi_mutex_lock+0x10/0x10 [ 78.871289][ T981] ? kobject_uevent_env+0x4fd/0x7e0 [ 78.871333][ T981] ? class_dir_child_ns_type+0x1d/0x70 [ 78.871363][ T981] ? __cfi_class_dir_child_ns_type+0x10/0x10 [ 78.871393][ T981] kobject_uevent_net_broadcast+0x2c6/0x5e0 [ 78.871433][ T981] kobject_uevent_env+0x551/0x7e0 [ 78.871472][ T981] kobject_uevent+0x21/0x40 [ 78.871509][ T981] device_del+0xb7f/0xcf0 [ 78.871547][ T981] ? __cfi_device_del+0x10/0x10 [ 78.871584][ T981] ? __kasan_check_write+0x18/0x20 [ 78.871609][ T981] ? kobject_put+0x1cc/0x2a0 [ 78.871642][ T981] device_destroy+0xb0/0x100 [ 78.871664][ T981] ? __cfi_device_destroy+0x10/0x10 [ 78.871687][ T981] ? __kasan_check_write+0x18/0x20 [ 78.871713][ T981] android_device_destroy+0x118/0x180 [ 78.871750][ T981] gadgets_drop+0x1d/0x30 [ 78.871773][ T981] ? __cfi_gadgets_drop+0x10/0x10 [ 78.871797][ T981] configfs_rmdir+0x8b7/0x9b0 [ 78.871834][ T981] vfs_rmdir+0x3db/0x560 [ 78.871870][ T981] do_rmdir+0x29a/0x590 [ 78.871904][ T981] ? __cfi_do_rmdir+0x10/0x10 [ 78.871940][ T981] ? __kasan_check_write+0x18/0x20 [ 78.871966][ T981] __x64_sys_rmdir+0x4b/0x60 [ 78.872002][ T981] x64_sys_call+0xaf7/0x2ee0 [ 78.872025][ T981] do_syscall_64+0x57/0xf0 [ 78.872057][ T981] ? clear_bhb_loop+0x50/0xa0 [ 78.872083][ T981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.872122][ T981] RIP: 0033:0x7f466519e0d9 [ 78.872144][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.872167][ T981] RSP: 002b:00007f466607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 78.872193][ T981] RAX: ffffffffffffffda RBX: 00007f4665425fa0 RCX: 00007f466519e0d9 [ 78.872213][ T981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 78.872229][ T981] RBP: 00007f4665235024 R08: 0000000000000000 R09: 0000000000000000 [ 78.872245][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.872260][ T981] R13: 00007f4665426038 R14: 00007f4665425fa0 R15: 00007fff10550028 [ 78.872281][ T981] [ 78.872426][ T36] audit: type=1400 audit(1787628789.050:281): avc: denied { mount } for pid=979 comm="syz.1.206" name="/" dev="configfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.632565][ T981] ------------[ cut here ]------------ [ 81.674069][ C1] net_ratelimit: 124631 callbacks suppressed [ 81.674092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.674223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 81.680586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.692289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 81.704342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.716155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 81.728305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.740141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 81.752325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.764078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 82.296389][ T981] WARNING: CPU: 1 PID: 981 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 82.308678][ T981] Modules linked in: [ 82.312648][ T981] CPU: 1 UID: 0 PID: 981 Comm: syz.1.206 Tainted: G W syzkaller #0 f2f9be0cb5819eb91f3cdfab905957d5e4b40d7b [ 82.328264][ T981] Tainted: [W]=WARN [ 82.332105][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.344847][ T981] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 82.351063][ T981] Code: 48 83 3d b4 f8 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 69 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 82.373416][ T981] RSP: 0018:ffffc9000b7df980 EFLAGS: 00010206 [ 82.382111][ T981] RAX: 000000007fffffff RBX: ffff8881f5e8ea10 RCX: 0000000000c8ea10 [ 82.392706][ T981] RDX: ffff8881f5e8ea10 RSI: 0000000000000001 RDI: 000000008df43d8d [ 82.403322][ T981] RBP: ffffc9000b7df9e0 R08: 000000007b61c6d6 R09: 00000000c61f2355 [ 82.413933][ T981] R10: 000000000000000d R11: ffffffff81759ed0 R12: 00000000465c8ea1 [ 82.424521][ T981] R13: 0000000000000000 R14: ffffc9000b7df9f0 R15: 000000000000000d [ 82.432534][ T981] FS: 00007f466607c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 82.444128][ T981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.450748][ T981] CR2: 000000110c34f2b2 CR3: 000000013e0f2000 CR4: 00000000003526b0 [ 82.461475][ T981] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 82.472032][ T981] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 82.482662][ T981] Call Trace: [ 82.488519][ T981] [ 82.491484][ T981] ? do_syscall_64+0x57/0xf0 [ 82.498849][ T981] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.507645][ T981] kasan_save_track+0x4f/0x80 [ 82.512372][ T981] ? kasan_save_track+0x3e/0x80 [ 82.519863][ T981] ? kasan_save_free_info+0x44/0x50 [ 82.527704][ T981] ? __kasan_slab_free+0x5f/0x80 [ 82.532698][ T981] ? kfree+0x158/0x440 [ 82.539416][ T981] ? gadget_info_attr_release+0xcb/0x130 [ 82.547702][ T981] ? config_item_put+0x178/0x240 [ 82.552705][ T981] ? configfs_rmdir+0x8e8/0x9b0 [ 82.560166][ T981] ? vfs_rmdir+0x3db/0x560 [ 82.567633][ T981] ? do_rmdir+0x29a/0x590 [ 82.572032][ T981] ? __x64_sys_rmdir+0x4b/0x60 [ 82.579788][ T981] ? x64_sys_call+0xaf7/0x2ee0 [ 82.587471][ T981] ? do_syscall_64+0x57/0xf0 [ 82.592133][ T981] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.601184][ T981] kasan_save_free_info+0x44/0x50 [ 82.609143][ T981] __kasan_slab_free+0x5f/0x80 [ 82.613970][ T981] kfree+0x158/0x440 [ 82.620972][ T981] ? gadget_info_attr_release+0xcb/0x130 [ 82.629539][ T981] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 82.638544][ T981] gadget_info_attr_release+0xcb/0x130 [ 82.647056][ T981] config_item_put+0x178/0x240 [ 82.651915][ T981] ? __cfi_gadgets_drop+0x10/0x10 [ 82.660078][ T981] configfs_rmdir+0x8e8/0x9b0 [ 82.667876][ T981] vfs_rmdir+0x3db/0x560 [ 82.672194][ T981] do_rmdir+0x29a/0x590 [ 82.679364][ T981] ? __cfi_do_rmdir+0x10/0x10 [ 82.687023][ T981] ? __kasan_check_write+0x18/0x20 [ 82.692207][ T981] __x64_sys_rmdir+0x4b/0x60 [ 82.699791][ T981] x64_sys_call+0xaf7/0x2ee0 [ 82.707664][ T981] do_syscall_64+0x57/0xf0 [ 82.712146][ T981] ? clear_bhb_loop+0x50/0xa0 [ 82.719834][ T981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.728827][ T981] RIP: 0033:0x7f466519e0d9 [ 82.733298][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.755967][ T981] RSP: 002b:00007f466607c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 82.767600][ T981] RAX: ffffffffffffffda RBX: 00007f4665425fa0 RCX: 00007f466519e0d9 [ 82.778553][ T981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 82.789490][ T981] RBP: 00007f4665235024 R08: 0000000000000000 R09: 0000000000000000 [ 82.800448][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.811424][ T981] R13: 00007f4665426038 R14: 00007f4665425fa0 R15: 00007fff10550028 [ 82.822400][ T981] [ 82.828539][ T981] ---[ end trace 0000000000000000 ]--- [ 82.966931][ T36] audit: type=1400 audit(1787628789.050:282): avc: denied { remove_name } for pid=979 comm="syz.1.206" name="g1" dev="configfs" ino=3621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.684073][ C0] net_ratelimit: 122369 callbacks suppressed [ 86.684099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 86.684103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.684398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.690378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 86.702540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.714277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 86.726466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.738337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 86.750314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.762236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:25:14:4b:fa:3c, vlan:0) [ 87.267465][ T36] audit: type=1400 audit(1787628789.050:283): avc: denied { rmdir } for pid=979 comm="syz.1.206" name="g1" dev="configfs" ino=3621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1