last executing test programs: 3m32.315818236s ago: executing program 1 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x8, 0x0, {{0x1c, 0x4, 0x3, 0x7, 0x70, 0x65, 0x0, 0x8, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xee, 0x3, 0x8, [{@private=0xa010102, 0x100}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x8}]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x2, 0xa, "1c050201caa6c799"}, {0x6, 0xd, "5241878301726d8ed21d24"}, {0x1, 0xb, "e4598656d7666b0f9d"}, {0x6, 0x7, "00e93699fd"}, {0x7, 0xe, "22ca9398709ca9f18abe89fd"}]}, @generic={0xd0, 0x8, "d9ae3dc3c88f"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x80, 0x5, 0x8, {{0x2c, 0x4, 0x1, 0x1, 0xb0, 0x48, 0x0, 0xf9, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0x1f, 0x57, [@multicast2, @broadcast, @multicast2, @multicast2, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @loopback]}, @lsrr={0x83, 0x27, 0x46, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @broadcast]}, @cipso={0x86, 0x39, 0x2, [{0x2, 0xa, "08b8d16b1572f809"}, {0x7, 0xd, "1acd1e42aa450bf29ee17f"}, {0x2, 0xe, "3ee1ea5b23bd2fb77cd79013"}, {0x5, 0x8, "cbaed7f3f02b"}, {0x0, 0x6, "4b8aed05"}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000380)={@empty, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast2, @initdev}, &(0x7f0000000540)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@empty, @loopback, 0x0}, &(0x7f0000000600)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) r12 = syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r12, 0xd, &(0x7f0000000000)={0x7, 0x40}, 0x0) r13 = syz_open_procfs(r12, &(0x7f0000000a40)='net/tcp\x00') sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYRESHEX=r6, @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf250f0000003000018008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468316c766c616e0000000000000800030001009a52a9470000000800030002000000080003000300b221c31103000000000008000300000000000800010000000000b21a21970a000000000000", @ANYRESHEX=r4, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="140002006d6163767461703000000000000000003c00018014000200766c616e31000000000000000000000008000300020000001400020069705f7674693000000000000000000008000100", @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r4, @ANYRES16=r7, @ANYRES32=r5, @ANYBLOB="140002007465616d5f736c6176655f30000000000800030001000000140002006272696467653000000000000000000008000100", @ANYRES16=r3, @ANYBLOB="400001801400020062617461647630000000000000000000140002006970766c616e300000000000000000001400020076657468305f746f5f6272696467650028000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r7, @ANYBLOB="0800030003000000400001801400020070696d36726567000000000000000000080003000300000008000100", @ANYRESOCT=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0800030001000000"], 0x230}, 0x1, 0x0, 0x0, 0x4000}, 0x20004880) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x700, 0x80, 0x9, 0xfffffff1}}) r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r15, 0x89f2, &(0x7f0000000900)={'gre0\x00', &(0x7f00000009c0)={'sit0\x00', r3, 0x10, 0x80, 0x2, 0x2, {{0xe, 0x4, 0x1, 0x36, 0x38, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @remote, {[@generic={0x82, 0x9, "57af0832144946"}, @ssrr={0x89, 0x17, 0x54, [@remote, @private=0xa010101, @multicast1, @multicast2, @rand_addr=0x64010101]}, @noop]}}}}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r13, 0xae80, 0x0) 3m32.24752608s ago: executing program 1 (id=901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4010000100001002dbd700000000000fe880000000000000000000000000101fe88000000210000000023000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c000000000000000009000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000aa0e00006d001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801"], 0x1c4}}, 0x0) 3m32.186474103s ago: executing program 1 (id=902): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000000)={0x14}, 0x14) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @multicast1}, &(0x7f0000000140)=0xc) 3m31.342313345s ago: executing program 1 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) keyctl$set_reqkey_keyring(0xe, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',rootmode=00000000000000008040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRES64=r0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) 3m31.341979495s ago: executing program 1 (id=910): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4010000100001002dbd700000000000fe880000000000000000000000000101fe88000000001100000023000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe80000000000000000000000000002c000000000000000009000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000025bd7000000000000000000028bd7000aa0e00006d001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801"], 0x1c4}}, 0x0) 3m31.338222035s ago: executing program 1 (id=911): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)="3cb56c3b2fcbf90950699c6957a9c2ab78827a45a7b7ee450d2b17aba94dfc9a958a58f1168474058ffc916a95bf445e8ac82fe906d86c6df64775d19d425933b3c40f15a18a3dc42f1ce80d75d79a14c71e3fb80ddb0418df8bff4ee6d8649c11d3fb5f88773d5afade97be6b3e64986cc93dfde845ab3e8b27b0e01be518f022f841ad1d69af25c918ee854962a71f410b0cfb86b881019004430cbb285ab0eb48c76627e828ea513fc5ef9f4c89d01bb884870e9d4016bf962baeb3e6f59b8cc1092e51bb5019ad3a74f9e584cc1f588037bc2297c78b1abdf8f21c6f458e6ec9ff08b6679f3136fd23ef6198d23b868a3b2411fa64f30be8c8e756aae1637a97f1c4279178a397889d6e1daf7d1706d11e0ec794fddd9d010491623104d19c8ecf30c99aed8edfadf9435ba30626b67b1490437fed126f19378f01512931a58309b4063bf97936e90f4075848b94cbb87ffc877fd6a6970c4e0032ca75067ae7e8f46296bf1c4138e70b8bb5ea32fea67442ec246024f71f1a8d53c3855ebf51c29962171e17e483f63cd3fca1356c06dd874736cad4c37150c66c4f72051a0062b3c39e5947826ffa3bd98d3b29cae722e370cd42b88ef40f5f2459f2e5017c22d685eb373c764c9e1039c77159ad469d4d76a1b856acfdf68a3d60e62f3abf70cc8af18428175168787422c8467b7fa113f4a7993fe80300df27f3959977a44bd66bff1346afbe1550e90377c1c030fa0fa024fb07275a714d7a1c5a37bea1186ef0671df413d06a7fe36f88974709ad636ce1a34f87f3c4ad1cf08b6e58f64d927cdd695947f778f2c6cbde4732d82122248b2116cef11861180f00c74938f4aec7818827103376a6aaf475ed89f52c8fab51dccc4859e3905988507fbc56988bc76129ef208889af4c98220f26ee3ac971ce84145e5a55937e2c2f55f97c1b7e1185fbfaf0ac7fc69e06643a245ab9708fc7b739d382bde0133d294cfcc646ab5aae273d9726b27a9d88f15eae3e790a1c3129c264272db9f551b89352eff4bbb625c6826e9a823fede57f273a47baf7850bf3152d5a5e23a1cfd2b38e43e6c9fb1c92ea7fadf3a02cb1c3b052fb2c5a73ab16d2dcdb6cc936de9e0382c95e4ccaf13ea8429c5357d1473cb2b7f55d3b05b7f338b10bc286ef29fef661461263ca0c13d94cabe32646ef2c11f8941a5f8de1d074410fdfce9da72f58de249c49b39d2fb99e6c5f3610962606996847bc42c45e252814c5d9d7aec5127b5825f62999e0bc7a419c3e3460af06fbd1e7dc0ab574980958178b0176cac7922fa341046b48bafd6e9aca1809c1fb0e7879a3fde72c93063facb190130ddf210c4e1c074ee4f971bb8e4995fe6f28f3710832cfbbd21e5cb1b3063e23e6b1af71d7db223a480e455a6301b59786259a2f763cf281fa8af3bf60ee8f60eb9a289dfa7d96de537584289537b1dcf99d9ab02657973dd520df8e0d17fa1e96c52c74d2b145aae78d1f7beba590a8384c4a2017d5ed8247eaa5382691b7b877767128c1e72d89e00a8a198337a8b76f7976035a060a634bfcdd4d8a0a19db88a4b6446a855ea02880335760c9d11568ef89d9333d6daea5571310bada536acde5a7b2d6372360b971f69294a94860450d1b29bc92d7cce867b03fefb92fc0ce07fd496364b9740ebb90814ade57dfbdfda0b452c8cc258217ac16cfb3d918d10a3302274024850e3cc67de556a6060197d44d9cfa6de41b2c53554be7d1e67e2c7e8bfdcf94f9aaf3a7e660009e60330da0ea3a49aaa74fa7689beee22ee5ed7fa1b5ad87c1ee7bea367285fef5f49a0ff4e20e89454d1726f74208a975da28f663e15c8105bf7a6c469209aa9feb7c4403a67fefe26f6d4cb44d34e1f7493b8a3c3edccefbb405b6852878147736e0b1be2c1f46f3209e0e64e83d24077b6bfdbd5ccd55239c4ecbaad1eeb7bcdd8bdb9fe39edd307573055b9f2097a77018ebb8e725fe2eac57e7f366688c218f1d85da05eddbef16986a7db91983d24656a7542e8d869eeaa63412936636a9", 0x5ad}], 0x1}, 0x11000000}], 0x1, 0x400c484) 3m31.306486617s ago: executing program 32 (id=911): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)="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", 0x5ad}], 0x1}, 0x11000000}], 0x1, 0x400c484) 9.096601834s ago: executing program 3 (id=2681): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) dup2(r0, r1) 9.077351836s ago: executing program 3 (id=2682): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f701020301090224"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) r2 = inotify_init() prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x3300, 0x4) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) fchdir(r3) chdir(&(0x7f0000000000)='./file0\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)={0x29, 0x4, 0x0, {0x3, 0x2, 0x1, 0x0, [0x0]}}, 0x29) 6.050935537s ago: executing program 3 (id=2705): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2001000012001307"], 0x120}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000040)=0x7, 0x4) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.955917922s ago: executing program 2 (id=2710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x714, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 5.409852289s ago: executing program 2 (id=2715): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = dup(r3) getdents64(r4, 0x0, 0x1b) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r5, 0x40000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0xffff) 5.353703902s ago: executing program 2 (id=2716): r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='.\x02\x00', 0x102) renameat2(0xffffffffffffff9c, &(0x7f0000000680)='.\x02\x00', r0, &(0x7f0000000000)='./file1\x00', 0x2) read$hidraw(r0, &(0x7f0000000780)=""/193, 0xc1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000000)=0x4800008, 0x4) fcntl$setlease(r2, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x7) fcntl$setlease(r1, 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x808000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) r7 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000000c0)=0x27b2, 0x4) sendmmsg(r7, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/148, 0x94}], 0x1}, 0x4}], 0x1, 0x2002, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYRES16=r7, @ANYRES16=r6, @ANYRES64, @ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x844) utimensat(r1, &(0x7f00000001c0)='.\x02\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) syz_usb_connect(0x0, 0x44, &(0x7f0000000880)=ANY=[@ANYRESHEX=r2], &(0x7f0000001380)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0xdd, 0x0, 0xa, 0x8, 0x8}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="f1a02019b3"]}) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000014000100000400df250000000000000000000000000000000164010102000000000000000000000000000000004e210000020080dfc4000000000000caca970ac593f01c2373fd6e8da2ea099341a3848f6627497ed0a4c5aca318138c5fc02ee940951ce6ac98ac57f9bf7e9be1476c03fe84d34566fdb3355063a101ca785032c1cecc8d1f4bb56b37efa4369d04bb4388235fa18c2f0c36d84815705f1940b0f3da7d9df1bb60", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000000"], 0x50}}, 0x4004040) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x40, r10, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf1}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4060044) 3.604964219s ago: executing program 3 (id=2726): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (fail_nth: 1) dup2(r0, r1) 3.542019702s ago: executing program 3 (id=2728): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="080e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "020a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x20, 0xd, 0x39, "c3b8c0e2f3eab6b0aebec9bc2d863863d643de4b90186a11d9cdb74b99a05d20ade771a3ca038e1c8fb40ee8c436ac06577b3f219edc45b844"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0xc0, 0xa1, 0x4}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "afbf40e030c54a16a170102fd1989664dc5c6a80c1ed788641e5b0a290a4bf43a3bf4cd888f63993ced922913a9cf0"}}) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x83) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.361699471s ago: executing program 0 (id=2737): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2.361535971s ago: executing program 0 (id=2738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x44000) 2.361156181s ago: executing program 0 (id=2739): r0 = fcntl$getown(0xffffffffffffffff, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(r0, 0x6, &(0x7f0000000140), 0x0) clock_nanosleep(0x4, 0xca9a3b, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x4a9) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x1100001c) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='hybla', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d00000000000077"], 0x28}], 0x1}, 0x14008010) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.294546815s ago: executing program 2 (id=2740): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0xfffffffffffffffc) 1.513767054s ago: executing program 0 (id=2745): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {{0xa, 0x0, 0x0, @mcast1, 0xa}}}, 0x108) sendmmsg(r2, &(0x7f00000000c0), 0x0, 0x400c0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}]}) fchown(r4, 0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x6100) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0x1000, 0x2120, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @empty, 0x1}, 0x1c) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) 1.513485734s ago: executing program 4 (id=2746): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_fd(0x0, 0x0, 0x0, 0x200040, &(0x7f0000000340)=ANY=[@ANYBLOB='tra']) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x7, 0x8, 0xc5, 0x0, 0x5, 0x9, 0x4, 0x6, 0x1, 0xfa, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfa, '\x00', 0x6, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) fallocate(r1, 0x0, 0x3, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) pidfd_send_signal(r1, 0x59, &(0x7f0000000380)={0x3e, 0x2, 0xc}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xf) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000003e00)='./binderfs\x00', 0x0, 0x104000, 0x0) 1.479584706s ago: executing program 2 (id=2747): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000011000000"], 0x22}}], 0x1, 0x800) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030d00"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003000000400e0bffff40000102030109022400010105104009040001010301020409210200100122e30e090581030004070110920fdd212cbe5eee24c1bcd7e73472196eceff5b1b290b6068608190623f286462d3e65a87c8bbe2fccdebce3cf1e6a1c4c9317fdc01e87cbefa7be41838003bb4811cc3c065bc97b6c53fe8d0c5222c6044555bbd46f853b8ad35e3bbce02a8202ae63be3b7a8c8afa7ac1e9540285022772c991a9e63c8a53038393aa7157122b0560d2e60aad1794b31d92af11a0d90b3b8b80c1b6fe4e249ace27d910c6157d9b0404751001d934287b49f8f883705dac0b24a688ffd12"], &(0x7f0000000740)={0xffffffffffffff69, 0x0, 0x0, 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r3) syz_open_procfs(r3, &(0x7f0000000040)='sched\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x201, 0x4) 1.406573029s ago: executing program 4 (id=2748): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030009160000002cbd7000fbdbdf250300090080000000af0000000000b1000000000000000000030006000000000002004e22ac1414bb000000000000000002000100ffffffff0000070201000000030005000000000002004e21ac1e010100000000000000000900180013053c"], 0xb0}, 0x1, 0x7}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x6c4100, 0x0) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) syz_clone3(&(0x7f0000000380)={0xe0000080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x36}, &(0x7f0000000540)=""/177, 0xb1, &(0x7f0000000600)=""/163, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) sched_setscheduler(r4, 0x3, &(0x7f0000000300)=0x10000) dup2(r2, r3) 1.372881651s ago: executing program 4 (id=2749): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x15c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x108, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400000068001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 1.19490461s ago: executing program 0 (id=2750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000080)={0x8000000, 0x11a000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x714, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.19481218s ago: executing program 4 (id=2751): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) dup2(r0, r1) 1.135398452s ago: executing program 0 (id=2753): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000aff2000000000000000000014000180200100005827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x40, 0x12, 0x1d, {0x1d, 0xc, "7ba778cb8f77b829f181d952eeff84d189c2652f55ec42980585d6"}}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x7, 0xe9, 0xc0, 0x4, 0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.130717583s ago: executing program 4 (id=2754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000080)={0x8000000, 0x11a000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) memfd_create(&(0x7f0000000bc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb<\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7\xa8\xeeo\xdd5U\x9c34HU\x87v\b\x00\x00\x00\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e3v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<\xbe\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xe5\xe0\x92!\x92-F\xe2\x05\x00\x00\x00\x00\x00\x00\x00\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\xee\"\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9a\xfe\xd4B$\xd3=x\xf1\x84\xf2\xdc\xf8\a\x00\x00\x00\x00\x00\x00\x00w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc9\x00\x84\xa4?y\x87\xcb\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~>\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4z\x84\xe4+A\xb7\xa2\x8f\xc9\xee\xff3xn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\f\xc8`\xa6s\xad&IP:\x0e\x9c\xeeg:\xb3i\xe9\x90D\xe7\x83\r\x8fR\xcb\x88\x19?\xb7m2\x85\x9e\xef\x9di\x1b/\xdf#\x99\xf1\x99\xb1W\'\v\xdf\xb9\x9a\t\x8d*%\xbe*\xb3\xd1A\xbdj\xbb\xd0\xdeq\x13\x8d\x94\v\xce\xaaqg\xe1e\x18\xd6\a\x17\x7f\x00\x01\x00\x00\x19S\xfe\xce\x1f3:\t\xe9Go\xe9\x1a\xa8\xd9\xe6\x9d\x99j\xccN\xb9%Ah;\xa5\xea\x1f;B\x1e\x97\xf8hy#\xd4\xec\xc0\xf7c-\x02\xa4\vk\xe8f\xd8\x8e\xce\xfb2\xa7\v?Pa\xdbe\xbd\x900W4\x17\xff|f\xec^\xa5S\xbb@\xc5[\"?DcA\xab\x13\xce*\xa9\xaa\x909f\x8et]\xb6\x06\x04\x81\xe66\xae', 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x8000, 0x2, 0x2, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x68, 0x0, 0xc, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}}}}}) recvfrom(r3, 0x0, 0x0, 0x40000140, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x100000001, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x14, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x8200}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x6, 0xd88, 0xff, 0x3, 0x3ff, 0x80000001, 0x4, 0x5, 0x8, 0x4, 0xfffffffffffffffa, 0x2, 0x6, 0x6709, 0x7ff, 0x10001], 0xeeee7000, 0x2a514b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000240)=0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f0000000280)={r5, r1, 0x1}) 284.964635ms ago: executing program 4 (id=2755): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190003000400000007fd17e5ffff", 0x2e}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x18, 0x2c, 0x0, @private2, @mcast2, {[@hopopts={0x88, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x8, {0x0, 0x0, 0x6, 0x4b3e}}]}]}}}}}}, 0x52) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) ioctl$NILFS_IOCTL_SET_SUINFO(r9, 0x40186e8d, &(0x7f0000000240)={&(0x7f00000001c0)=[{0x100000001, 0x2, 0x0, {0x2, 0x2040, 0x2}}, {0x9, 0x1, 0x0, {0x1, 0x2, 0x1}}], 0x2, 0x20, 0x9, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000000)={0x438, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) 186.73378ms ago: executing program 2 (id=2756): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0xfffffffffffffffc) 0s ago: executing program 3 (id=2757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121b43, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r3 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x7fff, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x7, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x9, 0x9, 0x1, 0xfffff801, 0x0, 0xe261, 0x7fff, 0x4000b, 0x3, 0x7f7f, 0x4c74, 0x1, 0xc, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x7fff, 0x8f, 0x4b, 0x6, 0x5, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x5, 0x0, 0x3, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2b, 0x5a04, 0x312, 0x2, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x83fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x3, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x40a, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x31d13d16, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x1, 0xb, 0x3, 0x5, 0x1007, 0x0, 0xa40, 0xfffffffd, 0x2, 0x83, 0x1, 0x3, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x39, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x3, 0xc0, 0x10002, 0x403, 0x7fd, 0x3, 0x0, 0x8, 0x400ffff, 0x5, 0xe, 0x1c, 0x120000, 0x3, 0x7, 0xaaed, 0x1000004, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x100001ff, 0x6f, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xb, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x0, 0x5, 0xb1c, 0x1, 0x20000200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x2000c010) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) getrandom(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000000)=0x10001, 0x8) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000140)={0x200, 0x3, 0x2, 0x2, 0x13, "cb57f0f8c4a487e99003ee39743b4ea228ba2b"}) ppoll(&(0x7f0000000180)=[{r9, 0x90}, {r0, 0x2609}, {r8}], 0x3, &(0x7f00000001c0), &(0x7f0000000200)={[0x722fecd]}, 0x8) kernel console output (not intermixed with test programs): T9] usb 1-1: config 0 has no interface number 0 [ 290.222181][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 290.234053][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 290.243234][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.251406][ T9] usb 1-1: Product: syz [ 290.256232][ T687] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 290.257546][ T9] usb 1-1: Manufacturer: syz [ 290.267924][ T687] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 290.282424][ T687] asix 4-1:0.188: probe with driver asix failed with error -71 [ 290.294318][ T687] usb 4-1: USB disconnect, device number 56 [ 290.300034][ T9] usb 1-1: SerialNumber: syz [ 290.308937][ T9] usb 1-1: config 0 descriptor?? [ 290.314541][ T749] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 290.325410][ T749] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 290.337138][ T6296] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 290.346524][ T749] asix 3-1:0.188: probe with driver asix failed with error -61 [ 290.547890][ T6296] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 290.891787][ T36] audit: type=1400 audit(7095545273.242:558): avc: denied { watch } for pid=6307 comm="syz.4.2040" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 291.888507][ T749] usb 3-1: USB disconnect, device number 109 [ 292.140551][ T45] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 292.300326][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 292.315622][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.324224][ T45] usb 4-1: config 0 has no interface number 0 [ 292.331232][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.342922][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.353433][ T45] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 292.363045][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.372281][ T45] usb 4-1: config 0 descriptor?? [ 292.430309][ T404] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 292.583603][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.592675][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.600511][ T404] usb 3-1: Using ep0 maxpacket: 16 [ 292.608074][ T404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.620711][ T404] usb 3-1: config 0 has no interfaces? [ 292.627061][ T404] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.637406][ T404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.647649][ T404] usb 3-1: config 0 descriptor?? [ 293.180905][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.210341][ T9] asix 1-1:0.188: probe with driver asix failed with error -71 [ 293.224197][ T9] usb 1-1: USB disconnect, device number 112 [ 293.535127][ T45] uclogic 0003:28BD:0071.0018: failed retrieving string descriptor #100: -71 [ 293.555426][ T45] uclogic 0003:28BD:0071.0018: failed retrieving pen parameters: -71 [ 293.565657][ T45] uclogic 0003:28BD:0071.0018: pen probing failed: -71 [ 293.577343][ T45] uclogic 0003:28BD:0071.0018: failed probing parameters: -71 [ 293.585206][ T45] uclogic 0003:28BD:0071.0018: probe with driver uclogic failed with error -71 [ 293.596503][ T45] usb 4-1: USB disconnect, device number 57 [ 293.910395][ T45] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 294.060328][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 294.066988][ T45] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 294.075775][ T45] usb 4-1: config 250 has an invalid interface number: 0 but max is -1 [ 294.084390][ T45] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 294.095112][ T45] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 294.105802][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 294.115980][ T45] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 294.125093][ T45] usb 4-1: Product: syz [ 294.129474][ T45] usb 4-1: SerialNumber: syz [ 294.143068][ T45] hub 4-1:250.0: bad descriptor, ignoring hub [ 294.149678][ T45] hub 4-1:250.0: probe with driver hub failed with error -5 [ 294.361761][ T6382] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 294.601173][ T9] usb 4-1: USB disconnect, device number 58 [ 294.900440][ T9] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 295.052263][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.061454][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 295.069245][ T9] usb 4-1: can't read configurations, error -71 [ 295.139481][ T45] usb 3-1: USB disconnect, device number 110 [ 295.580364][ T749] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 295.745879][ T749] usb 3-1: config 162 has an invalid interface number: 79 but max is 1 [ 295.757756][ T6399] fuse: Unknown parameter 'ÿ0x000000000000000600000000000000000003ÿÿÿÿ' [ 295.766255][ T749] usb 3-1: config 162 has an invalid interface number: 183 but max is 1 [ 295.776393][ T749] usb 3-1: config 162 has an invalid descriptor of length 134, skipping remainder of the config [ 295.788712][ T749] usb 3-1: config 162 has no interface number 0 [ 295.795273][ T749] usb 3-1: config 162 has no interface number 1 [ 295.802149][ T749] usb 3-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 295.815947][ T749] usb 3-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 295.827708][ T749] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 295.839972][ T749] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 295.851896][ T749] usb 3-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 295.864495][ T749] usb 3-1: config 162 interface 79 has no altsetting 0 [ 295.871633][ T749] usb 3-1: config 162 interface 183 has no altsetting 0 [ 295.880560][ T749] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 295.890642][ T749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.898688][ T749] usb 3-1: Product: syz [ 295.903395][ T749] usb 3-1: Manufacturer: syz [ 295.908584][ T749] usb 3-1: SerialNumber: syz [ 295.913585][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 296.080325][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 296.091147][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 296.099769][ T9] usb 4-1: config 0 has no interface number 0 [ 296.106223][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 296.118614][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 296.127832][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.137057][ T9] usb 4-1: Product: syz [ 296.141507][ T9] usb 4-1: Manufacturer: syz [ 296.146586][ T9] usb 4-1: SerialNumber: syz [ 296.156963][ T9] usb 4-1: config 0 descriptor?? [ 296.164618][ T6397] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 296.379268][ T6397] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 297.170313][ T404] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 297.330286][ T404] usb 1-1: Using ep0 maxpacket: 16 [ 297.337126][ T404] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.347989][ T404] usb 1-1: config 0 has no interfaces? [ 297.354104][ T404] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 297.363709][ T404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.375946][ T404] usb 1-1: config 0 descriptor?? [ 298.231894][ T749] pl2303 3-1:162.79: required endpoints missing [ 298.240823][ T749] pl2303 3-1:162.183: required interrupt-in endpoint missing [ 298.251346][ T749] usb 3-1: USB disconnect, device number 111 [ 298.780325][ T749] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 298.931874][ T749] usb 3-1: config 4 has an invalid interface number: 63 but max is 1 [ 298.940134][ T749] usb 3-1: config 4 has an invalid interface number: 97 but max is 1 [ 298.948587][ T749] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 298.958858][ T749] usb 3-1: config 4 has no interface number 0 [ 298.965204][ T749] usb 3-1: config 4 has no interface number 1 [ 298.971452][ T749] usb 3-1: config 4 interface 63 has no altsetting 0 [ 298.979827][ T749] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 298.989043][ T749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.997249][ T749] usb 3-1: Product: syz [ 299.001530][ T749] usb 3-1: Manufacturer: syz [ 299.006360][ T749] usb 3-1: SerialNumber: syz [ 299.013318][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 299.023738][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 299.033160][ T9] usb 4-1: USB disconnect, device number 60 [ 299.236185][ T749] usb 3-1: USB disconnect, device number 112 [ 299.249031][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 299.760379][ T687] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 299.862986][ T31] usb 1-1: USB disconnect, device number 113 [ 299.911785][ T687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 299.920933][ T687] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 151, changing to 11 [ 299.953202][ T687] usb 4-1: config 1 interface 0 has no altsetting 0 [ 299.971820][ T687] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 299.991313][ T687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.999910][ T687] usb 4-1: Product: syz [ 300.004493][ T687] usb 4-1: Manufacturer: syz [ 300.009476][ T687] usb 4-1: SerialNumber: syz [ 300.110682][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 300.223096][ T687] usbhid 4-1:1.0: can't add hid device: -71 [ 300.229423][ T687] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 300.249773][ T687] usb 4-1: USB disconnect, device number 61 [ 300.260930][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 300.420293][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 300.430006][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 300.439259][ T9] usb 3-1: config 0 has no interface number 0 [ 300.445858][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 300.458381][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 300.468115][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.476577][ T9] usb 3-1: Product: syz [ 300.481227][ T9] usb 3-1: Manufacturer: syz [ 300.485937][ T9] usb 3-1: SerialNumber: syz [ 300.493022][ T9] usb 3-1: config 0 descriptor?? [ 300.498431][ T6458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 300.708312][ T6458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 300.994449][ T6480] netlink: 'syz.0.2105': attribute type 4 has an invalid length. [ 301.002495][ T6480] netlink: 'syz.0.2105': attribute type 21 has an invalid length. [ 301.010678][ T6480] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2105'. [ 301.101844][ T6483] kvm: kvm [6481]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 301.110696][ T6483] kvm: kvm [6481]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 301.122858][ T6483] kvm: kvm [6481]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 301.135749][ T6483] kvm: kvm [6481]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 301.145612][ T6483] kvm: kvm [6481]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 301.162020][ T6483] kvm_intel: kvm [6481]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 301.206702][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2109'. [ 301.528563][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 301.538892][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 301.549628][ T9] asix 3-1:0.188: probe with driver asix failed with error -32 [ 301.610320][ T404] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 301.741084][ T404] usb 4-1: device descriptor read/64, error -71 [ 301.980316][ T404] usb 4-1: device descriptor read/64, error -71 [ 302.220290][ T404] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 302.350287][ T404] usb 4-1: device descriptor read/64, error -71 [ 302.590295][ T404] usb 4-1: device descriptor read/64, error -71 [ 302.705751][ T404] usb usb4-port1: attempt power cycle [ 303.026787][ T31] usb 3-1: USB disconnect, device number 113 [ 303.044230][ T36] audit: type=1400 audit(7095545285.392:559): avc: denied { map } for pid=6517 comm="syz.2.2117" path="pipe:[189193]" dev="pipefs" ino=189193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 303.050550][ T404] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 303.106377][ T404] usb 4-1: device descriptor read/8, error -71 [ 303.193318][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'. [ 303.251939][ T404] usb 4-1: device descriptor read/8, error -71 [ 303.490392][ T404] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 303.511688][ T404] usb 4-1: device descriptor read/8, error -71 [ 303.641702][ T404] usb 4-1: device descriptor read/8, error -71 [ 303.750589][ T404] usb usb4-port1: unable to enumerate USB device [ 304.250434][ T687] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 304.420402][ T687] usb 3-1: Using ep0 maxpacket: 32 [ 304.427427][ T687] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 304.436610][ T687] usb 3-1: config 0 has no interface number 0 [ 304.443554][ T687] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 304.455533][ T687] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 304.464975][ T687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.473413][ T687] usb 3-1: Product: syz [ 304.477873][ T687] usb 3-1: Manufacturer: syz [ 304.482631][ T687] usb 3-1: SerialNumber: syz [ 304.488027][ T687] usb 3-1: config 0 descriptor?? [ 304.493847][ T6539] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 304.704896][ T6539] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 304.820350][ T404] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 304.970356][ T404] usb 1-1: Using ep0 maxpacket: 16 [ 304.977202][ T404] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.987799][ T404] usb 1-1: config 0 has no interfaces? [ 304.993351][ T404] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 305.002655][ T404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.011686][ T404] usb 1-1: config 0 descriptor?? [ 305.417082][ T6571] SELinux: security_context_str_to_sid (syste_uÝGй ‰:) failed with errno=-22 [ 305.514426][ T687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 305.524788][ T687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 305.535463][ T687] asix 3-1:0.188: probe with driver asix failed with error -32 [ 306.604547][ T6593] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 306.628489][ T36] audit: type=1400 audit(7095545288.972:560): avc: denied { create } for pid=6594 comm="syz.4.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 306.714517][ T6606] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2148'. [ 307.023139][ T31] usb 3-1: USB disconnect, device number 114 [ 307.080673][ T6609] kvm: kvm [6608]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 307.089372][ T6609] kvm: kvm [6608]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 307.100320][ T6609] kvm: kvm [6608]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 307.113344][ T6609] kvm: kvm [6608]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 307.123256][ T6609] kvm: kvm [6608]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 307.138147][ T6609] kvm_intel: kvm [6608]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 307.171562][ T36] audit: type=1400 audit(7095545289.522:561): avc: denied { attach_queue } for pid=6615 comm="syz.2.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 307.246656][ T36] audit: type=1326 audit(7095545289.592:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.4.2152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f287cb9c799 code=0x0 [ 307.551237][ T31] usb 1-1: USB disconnect, device number 114 [ 307.640315][ T9] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 307.791750][ T9] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 307.802918][ T9] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.814322][ T9] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 307.828981][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.838137][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.846380][ T9] usb 3-1: SerialNumber: syz [ 307.960326][ T31] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 308.057218][ T9] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 308.063669][ T9] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 308.073944][ T9] usb 3-1: USB disconnect, device number 115 [ 308.121603][ T31] usb 1-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 308.132510][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.143895][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 27814, setting to 1024 [ 308.155810][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 308.166264][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.180911][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.190077][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.198468][ T31] usb 1-1: Product: syz [ 308.202761][ T31] usb 1-1: Manufacturer: syz [ 308.207651][ T31] usb 1-1: SerialNumber: syz [ 308.416483][ T6634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.612858][ T36] audit: type=1400 audit(7095545290.962:563): avc: denied { mount } for pid=6646 comm="syz.4.2161" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 308.830283][ T687] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 308.990300][ T687] usb 3-1: Using ep0 maxpacket: 32 [ 308.996516][ T687] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 309.004923][ T687] usb 3-1: config 0 has no interface number 0 [ 309.011382][ T687] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 309.023983][ T687] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 309.033228][ T687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.038984][ T6634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.041589][ T687] usb 3-1: Product: syz [ 309.053263][ T687] usb 3-1: Manufacturer: syz [ 309.057995][ T687] usb 3-1: SerialNumber: syz [ 309.063492][ T687] usb 3-1: config 0 descriptor?? [ 309.068962][ T6644] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.160351][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 309.253416][ T31] cdc_ncm 1-1:1.0: bind() failure [ 309.259982][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 309.267185][ T31] cdc_ncm 1-1:1.1: bind() failure [ 309.281102][ T6644] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.320313][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 309.328020][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 309.336352][ T9] usb 4-1: config 0 has no interface number 0 [ 309.342523][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 309.352797][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 309.361397][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 309.370899][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.379060][ T9] usb 4-1: Product: syz [ 309.384205][ T9] usb 4-1: Manufacturer: syz [ 309.388879][ T9] usb 4-1: SerialNumber: syz [ 309.394466][ T9] usb 4-1: config 0 descriptor?? [ 309.399796][ T6661] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 309.460682][ T31] usb 1-1: USB disconnect, device number 115 [ 309.490591][ T6644] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2160'. [ 309.674665][ T9] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 309.688659][ T9] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 309.698590][ T9] usb 4-1: USB disconnect, device number 66 [ 309.906690][ T687] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 310.160332][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 310.270361][ T331] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 310.310306][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 310.317262][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.329037][ T9] usb 4-1: config 0 has no interfaces? [ 310.334740][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 310.344643][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.353763][ T9] usb 4-1: config 0 descriptor?? [ 310.420356][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 310.426636][ T331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.437313][ T331] usb 1-1: config 0 has no interfaces? [ 310.443024][ T331] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 310.452463][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.461544][ T331] usb 1-1: config 0 descriptor?? [ 311.111182][ T687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 311.121635][ T687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 311.132133][ T687] asix 3-1:0.188: probe with driver asix failed with error -71 [ 311.141327][ T687] usb 3-1: USB disconnect, device number 116 [ 311.375535][ T687] usb 1-1: USB disconnect, device number 116 [ 311.940456][ T404] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 312.090298][ T404] usb 3-1: Using ep0 maxpacket: 16 [ 312.097075][ T404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.107860][ T404] usb 3-1: config 0 has no interfaces? [ 312.113769][ T404] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.123371][ T404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.132681][ T404] usb 3-1: config 0 descriptor?? [ 312.144369][ T6744] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2198'. [ 312.693349][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.702274][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.801143][ T404] usb 4-1: USB disconnect, device number 67 [ 313.130327][ T404] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 313.280308][ T404] usb 4-1: Using ep0 maxpacket: 8 [ 313.286892][ T404] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 313.295563][ T404] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 313.306086][ T404] usb 4-1: config 135 has no interface number 0 [ 313.312786][ T404] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 313.324673][ T404] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 313.338909][ T404] usb 4-1: config 135 interface 230 has no altsetting 0 [ 313.348057][ T404] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 313.357560][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.366139][ T404] usb 4-1: Product: syz [ 313.370537][ T404] usb 4-1: Manufacturer: syz [ 313.375444][ T404] usb 4-1: SerialNumber: syz [ 313.383139][ T404] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 313.389827][ T404] usb 4-1: No valid video chain found. [ 313.405953][ T6764] incfs: Options parsing error. -22 [ 313.411604][ T6764] incfs: mount failed -22 [ 313.416712][ T36] audit: type=1400 audit(7095545295.762:564): avc: denied { map } for pid=6763 comm="syz.0.2205" path="socket:[190006]" dev="sockfs" ino=190006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.584610][ T404] usb 4-1: USB disconnect, device number 68 [ 314.118915][ T6776] tipc: Started in network mode [ 314.124000][ T6776] tipc: Node identity , cluster identity 4711 [ 314.130208][ T6776] tipc: Failed to obtain node identity [ 314.136217][ T6776] tipc: Enabling of bearer rejected, failed to enable media [ 314.398863][ T6788] syzkaller1: entered promiscuous mode [ 314.404645][ T6788] syzkaller1: entered allmulticast mode [ 314.600311][ T31] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 314.673888][ T331] usb 3-1: USB disconnect, device number 117 [ 314.702674][ T36] audit: type=1326 audit(7095545297.052:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.2.2219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x0 [ 314.750289][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 314.757042][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.767805][ T31] usb 1-1: config 0 has no interfaces? [ 314.773741][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.783220][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.792515][ T31] usb 1-1: config 0 descriptor?? [ 315.225695][ T6806] fuse: Bad value for 'fd' [ 315.790358][ T331] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 315.948506][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 315.957929][ T331] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 315.965907][ T331] usb 3-1: can't read configurations, error -71 [ 316.800312][ T331] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 316.950312][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 316.956995][ T331] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 316.965653][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.976067][ T331] usb 3-1: config 0 has no interface number 0 [ 316.984206][ T331] usb 3-1: New USB device found, idVendor=2f33, idProduct=92f7, bcdDevice=7f.1c [ 316.993463][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.001781][ T331] usb 3-1: Product: syz [ 317.005955][ T331] usb 3-1: Manufacturer: syz [ 317.010634][ T331] usb 3-1: SerialNumber: syz [ 317.016469][ T331] usb 3-1: config 0 descriptor?? [ 317.225942][ T331] cdc_acm 3-1:0.6: More than one union descriptor, skipping ... [ 317.233902][ T331] cdc_acm 3-1:0.6: skipping garbage [ 317.240264][ T331] usb 3-1: USB disconnect, device number 119 [ 317.324989][ T661] usb 1-1: USB disconnect, device number 117 [ 317.716333][ T36] audit: type=1400 audit(7095545300.062:566): avc: denied { setopt } for pid=6831 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.819285][ T36] audit: type=1400 audit(7095545300.162:567): avc: denied { setattr } for pid=6843 comm="syz.3.2233" name="XDP" dev="sockfs" ino=191452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 317.956431][ T6851] kvm: kvm [6850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 317.965428][ T6851] kvm: kvm [6850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 317.976494][ T6851] kvm: kvm [6850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 317.987567][ T6851] kvm: kvm [6850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 317.996594][ T6851] kvm: kvm [6850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 318.009730][ T6851] kvm_intel: kvm [6850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 318.170303][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 318.300308][ T9] usb 4-1: device descriptor read/64, error -71 [ 318.350306][ T331] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 318.500333][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 318.507041][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.517340][ T331] usb 3-1: config 0 has no interfaces? [ 318.522940][ T331] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.532140][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.540329][ T9] usb 4-1: device descriptor read/64, error -71 [ 318.542304][ T331] usb 3-1: config 0 descriptor?? [ 318.780327][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 318.910293][ T9] usb 4-1: device descriptor read/64, error -71 [ 319.150324][ T9] usb 4-1: device descriptor read/64, error -71 [ 319.260454][ T9] usb usb4-port1: attempt power cycle [ 319.600306][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 319.621863][ T9] usb 4-1: device descriptor read/8, error -71 [ 319.751894][ T9] usb 4-1: device descriptor read/8, error -71 [ 319.990318][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 320.011741][ T9] usb 4-1: device descriptor read/8, error -71 [ 320.141795][ T9] usb 4-1: device descriptor read/8, error -71 [ 320.255551][ T9] usb usb4-port1: unable to enumerate USB device [ 320.280101][ T6885] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2246'. [ 321.072048][ T661] usb 3-1: USB disconnect, device number 120 [ 321.410348][ T331] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 321.418602][ T661] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 321.570297][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 321.575642][ T661] usb 3-1: Using ep0 maxpacket: 32 [ 321.582013][ T331] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 321.590416][ T331] usb 4-1: config 0 has no interface number 0 [ 321.596629][ T331] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 321.609047][ T661] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 321.618593][ T661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.618709][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 321.630422][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 321.644050][ T661] usb 3-1: Product: syz [ 321.648257][ T661] usb 3-1: Manufacturer: syz [ 321.652939][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.661119][ T661] usb 3-1: SerialNumber: syz [ 321.666098][ T331] usb 4-1: Product: syz [ 321.670802][ T331] usb 4-1: Manufacturer: syz [ 321.675494][ T331] usb 4-1: SerialNumber: syz [ 321.681378][ T331] usb 4-1: config 0 descriptor?? [ 321.687018][ T6905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.770447][ T9] usb 1-1: device descriptor read/64, error -71 [ 321.884235][ T661] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 321.896156][ T6905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.908153][ T661] usb 3-1: USB disconnect, device number 121 [ 321.921668][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 322.010384][ T9] usb 1-1: device descriptor read/64, error -71 [ 322.105184][ T6905] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2255'. [ 322.250337][ T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 322.380411][ T9] usb 1-1: device descriptor read/64, error -71 [ 322.401008][ T6921] No source specified [ 322.431508][ T6921] No source specified [ 322.463385][ T6928] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2264'. [ 322.516212][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 322.630454][ T9] usb 1-1: device descriptor read/64, error -71 [ 322.740594][ T9] usb usb1-port1: attempt power cycle [ 322.750457][ T404] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 322.900369][ T404] usb 3-1: Using ep0 maxpacket: 16 [ 322.906968][ T404] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.915169][ T404] usb 3-1: config 0 has no interface number 0 [ 322.921347][ T404] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 12408, setting to 64 [ 322.934087][ T404] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 322.943318][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.951508][ T404] usb 3-1: Product: syz [ 322.955736][ T404] usb 3-1: Manufacturer: syz [ 322.960512][ T404] usb 3-1: SerialNumber: syz [ 322.966077][ T404] usb 3-1: config 0 descriptor?? [ 322.974283][ T404] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 322.998373][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.080516][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 323.101564][ T9] usb 1-1: device descriptor read/8, error -71 [ 323.179407][ T404] usb 3-1: USB disconnect, device number 122 [ 323.231626][ T9] usb 1-1: device descriptor read/8, error -71 [ 323.470471][ T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 323.491661][ T9] usb 1-1: device descriptor read/8, error -71 [ 323.521425][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 323.534600][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 323.545619][ T331] asix 4-1:0.188: probe with driver asix failed with error -71 [ 323.554353][ T331] usb 4-1: USB disconnect, device number 73 [ 323.623161][ T9] usb 1-1: device descriptor read/8, error -71 [ 323.730384][ T9] usb usb1-port1: unable to enumerate USB device [ 323.940635][ T661] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 324.090331][ T661] usb 3-1: Using ep0 maxpacket: 32 [ 324.096957][ T661] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 324.105619][ T661] usb 3-1: config 0 has no interface number 0 [ 324.112123][ T661] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 324.123684][ T661] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 324.132844][ T661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.140915][ T661] usb 3-1: Product: syz [ 324.145201][ T661] usb 3-1: Manufacturer: syz [ 324.149975][ T661] usb 3-1: SerialNumber: syz [ 324.155823][ T661] usb 3-1: config 0 descriptor?? [ 324.161459][ T6947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.280343][ T331] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 324.370847][ T6947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.430315][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 324.438338][ T331] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 324.452682][ T331] usb 4-1: config 0 has no interface number 0 [ 324.459029][ T331] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 324.471427][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 324.480655][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.488735][ T331] usb 4-1: Product: syz [ 324.493640][ T331] usb 4-1: Manufacturer: syz [ 324.498441][ T331] usb 4-1: SerialNumber: syz [ 324.505413][ T331] usb 4-1: config 0 descriptor?? [ 324.511201][ T6949] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 324.702513][ T2533] tipc: Subscription rejected, illegal request [ 324.720066][ T6949] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 324.928582][ T6949] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2274'. [ 324.953447][ T6977] batadv_slave_0: entered promiscuous mode [ 324.962553][ T6977] selinux_netlink_send: 23 callbacks suppressed [ 324.962578][ T6977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6977 comm=syz.4.2287 [ 324.982842][ T6976] batadv_slave_0: left promiscuous mode [ 325.050302][ T9] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 325.200359][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 325.206988][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.217269][ T9] usb 1-1: config 0 has no interfaces? [ 325.223352][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.232957][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.241935][ T9] usb 1-1: config 0 descriptor?? [ 325.340135][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 325.741671][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 325.752013][ T331] asix 4-1:0.188: probe with driver asix failed with error -71 [ 325.762597][ T331] usb 4-1: USB disconnect, device number 74 [ 326.564387][ T6993] fuse: Bad value for 'group_id' [ 326.569551][ T6993] fuse: Bad value for 'group_id' [ 326.645987][ T36] audit: type=1326 audit(7095545308.992:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.648290][ T661] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 326.671847][ T36] audit: type=1326 audit(7095545308.992:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.699888][ T661] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 326.708011][ T36] audit: type=1326 audit(7095545308.992:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.723866][ T661] asix 3-1:0.188: probe with driver asix failed with error -71 [ 326.743604][ T36] audit: type=1326 audit(7095545308.992:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.756867][ T661] usb 3-1: USB disconnect, device number 123 [ 326.771635][ T36] audit: type=1326 audit(7095545308.992:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.800150][ T36] audit: type=1326 audit(7095545308.992:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.824377][ T36] audit: type=1326 audit(7095545308.992:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.849145][ T36] audit: type=1326 audit(7095545308.992:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.873763][ T36] audit: type=1326 audit(7095545308.992:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 326.898293][ T36] audit: type=1326 audit(7095545308.992:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda85f9c799 code=0x7fc00000 [ 327.061940][ T7013] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2301'. [ 327.540277][ T661] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 327.594210][ T7020] fuse: Bad value for 'fd' [ 327.691359][ T661] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 327.710258][ T661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.730556][ T661] usb 4-1: config 0 descriptor?? [ 327.741608][ T661] usb 4-1: selecting invalid altsetting 1 [ 327.766627][ T661] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 327.833445][ T9] usb 1-1: USB disconnect, device number 122 [ 328.001635][ T661] usb 4-1: USB disconnect, device number 75 [ 328.440549][ T661] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 328.590332][ T661] usb 3-1: Using ep0 maxpacket: 32 [ 328.601112][ T661] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 328.609819][ T661] usb 3-1: config 0 has no interface number 0 [ 328.617353][ T661] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 328.634503][ T661] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 328.645566][ T661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.655667][ T661] usb 3-1: Product: syz [ 328.660497][ T661] usb 3-1: Manufacturer: syz [ 328.665662][ T661] usb 3-1: SerialNumber: syz [ 328.679946][ T661] usb 3-1: config 0 descriptor?? [ 328.686130][ T7043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.896873][ T7043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 328.987661][ T7072] fuse: Bad value for 'fd' [ 329.130654][ T7043] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2312'. [ 329.550376][ T661] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 329.937407][ T7149] 9pnet_fd: Insufficient options for proto=fd [ 329.952739][ T661] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 329.963455][ T661] asix 3-1:0.188: probe with driver asix failed with error -71 [ 329.980337][ T661] usb 3-1: USB disconnect, device number 124 [ 330.013361][ T7157] fuse: Bad value for 'fd' [ 330.413252][ T7180] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 330.479125][ T7184] netlink: 'syz.0.2365': attribute type 4 has an invalid length. [ 330.487168][ T7184] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2365'. [ 330.810325][ T45] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 330.872672][ T7213] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2376'. [ 330.950323][ T9] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 330.961859][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.970161][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 330.978862][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.989501][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 330.998553][ T45] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 331.009629][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.019224][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.027537][ T45] usb 4-1: Product: syz [ 331.031884][ T45] usb 4-1: Manufacturer: syz [ 331.036615][ T45] usb 4-1: SerialNumber: syz [ 331.101933][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 331.110312][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 331.118971][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 331.131617][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 331.140759][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.148975][ T9] usb 3-1: Product: syz [ 331.153305][ T9] usb 3-1: Manufacturer: syz [ 331.158009][ T9] usb 3-1: SerialNumber: syz [ 331.163904][ T7207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.171663][ T7207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.244662][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.253397][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.262138][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.270946][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.282207][ T45] usb 4-1: 0:2 : does not exist [ 331.290904][ T45] usb 4-1: USB disconnect, device number 76 [ 331.301160][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 331.383335][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 331.390852][ T9] usb 3-1: too many endpoints [ 331.403877][ T9] usb 3-1: USB disconnect, device number 125 [ 332.130277][ T45] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 332.280402][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 332.288921][ T45] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 332.297677][ T45] usb 3-1: config 0 has no interface number 0 [ 332.304094][ T45] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 332.316701][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 332.326096][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.334551][ T45] usb 3-1: Product: syz [ 332.338761][ T45] usb 3-1: Manufacturer: syz [ 332.343557][ T45] usb 3-1: SerialNumber: syz [ 332.349100][ T45] usb 3-1: config 0 descriptor?? [ 332.354804][ T7233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 332.563831][ T7233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 332.581149][ T7252] overlayfs: empty lowerdir [ 332.772796][ T7233] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2385'. [ 332.970385][ T9] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 333.100369][ T9] usb 1-1: device descriptor read/64, error -71 [ 333.183722][ T45] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 333.340409][ T9] usb 1-1: device descriptor read/64, error -71 [ 333.580354][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 333.594181][ T45] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.604593][ T45] asix 3-1:0.188: probe with driver asix failed with error -71 [ 333.613259][ T45] usb 3-1: USB disconnect, device number 126 [ 333.710381][ T9] usb 1-1: device descriptor read/64, error -71 [ 333.950330][ T9] usb 1-1: device descriptor read/64, error -71 [ 334.060431][ T9] usb usb1-port1: attempt power cycle [ 334.172845][ T7271] fuse: Bad value for 'fd' [ 334.400327][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 334.420340][ T45] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 334.422157][ T9] usb 1-1: device descriptor read/8, error -71 [ 334.561695][ T9] usb 1-1: device descriptor read/8, error -71 [ 334.570359][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 334.577270][ T45] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 334.585740][ T45] usb 3-1: config 0 has no interface number 0 [ 334.592135][ T45] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 334.603745][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 334.613225][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.621285][ T45] usb 3-1: Product: syz [ 334.625603][ T45] usb 3-1: Manufacturer: syz [ 334.630539][ T45] usb 3-1: SerialNumber: syz [ 334.635988][ T45] usb 3-1: config 0 descriptor?? [ 334.641910][ T7273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 334.800421][ T9] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 334.823671][ T9] usb 1-1: device descriptor read/8, error -71 [ 334.851038][ T7273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 334.952857][ T9] usb 1-1: device descriptor read/8, error -71 [ 335.060444][ T9] usb usb1-port1: unable to enumerate USB device [ 335.190427][ T331] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 335.340274][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 335.347138][ T331] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 335.355782][ T331] usb 4-1: config 0 has no interface number 0 [ 335.362398][ T331] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 335.375598][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 335.386132][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.394337][ T331] usb 4-1: Product: syz [ 335.398601][ T331] usb 4-1: Manufacturer: syz [ 335.403449][ T331] usb 4-1: SerialNumber: syz [ 335.408933][ T331] usb 4-1: config 0 descriptor?? [ 335.414895][ T7287] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 335.624175][ T7287] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 335.945859][ T7310] FAULT_INJECTION: forcing a failure. [ 335.945859][ T7310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.959316][ T7310] CPU: 0 UID: 0 PID: 7310 Comm: syz.0.2418 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 335.959362][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.959378][ T7310] Call Trace: [ 335.959387][ T7310] [ 335.959398][ T7310] __dump_stack+0x21/0x30 [ 335.959449][ T7310] dump_stack_lvl+0x140/0x1c0 [ 335.959490][ T7310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 335.959522][ T7310] dump_stack+0x19/0x20 [ 335.959548][ T7310] should_fail_ex+0x3d7/0x530 [ 335.959581][ T7310] should_fail+0xf/0x20 [ 335.959599][ T7310] should_fail_usercopy+0x1e/0x30 [ 335.959620][ T7310] _copy_from_user+0x20/0xa0 [ 335.959665][ T7310] evdev_ioctl_handler+0x5bc/0x1f60 [ 335.959700][ T7310] ? proc_fail_nth_write+0x184/0x220 [ 335.959730][ T7310] ? evdev_fasync+0x70/0x70 [ 335.959755][ T7310] ? selinux_file_ioctl+0x732/0x1480 [ 335.959792][ T7310] ? vfs_write+0x9a4/0xf90 [ 335.959823][ T7310] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 335.959849][ T7310] ? __cfi_vfs_write+0x10/0x10 [ 335.959882][ T7310] ? __kasan_check_write+0x18/0x20 [ 335.959903][ T7310] ? mutex_unlock+0x90/0x240 [ 335.959918][ T7310] ? __fget_files+0x2c5/0x340 [ 335.959964][ T7310] ? __fget_files+0x2c5/0x340 [ 335.960005][ T7310] evdev_ioctl+0x2b/0x40 [ 335.960038][ T7310] ? __cfi_evdev_ioctl+0x10/0x10 [ 335.960064][ T7310] __se_sys_ioctl+0x132/0x1b0 [ 335.960107][ T7310] __x64_sys_ioctl+0x7f/0xa0 [ 335.960140][ T7310] x64_sys_call+0x1878/0x2ee0 [ 335.960172][ T7310] do_syscall_64+0x57/0xf0 [ 335.960197][ T7310] ? clear_bhb_loop+0x50/0xa0 [ 335.960224][ T7310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 335.960264][ T7310] RIP: 0033:0x7f610239c799 [ 335.960290][ T7310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.960309][ T7310] RSP: 002b:00007f610330e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.960339][ T7310] RAX: ffffffffffffffda RBX: 00007f6102615fa0 RCX: 00007f610239c799 [ 335.960356][ T7310] RDX: 0000200000000080 RSI: 00000000400445a0 RDI: 0000000000000003 [ 335.960371][ T7310] RBP: 00007f610330e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.960391][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.960401][ T7310] R13: 00007f6102616038 R14: 00007f6102615fa0 R15: 00007ffed220cd88 [ 335.960437][ T7310] [ 336.435726][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 336.446412][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 336.457016][ T331] asix 4-1:0.188: probe with driver asix failed with error -61 [ 337.470299][ T31] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 337.611710][ T45] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 337.622618][ T45] asix 3-1:0.188: probe with driver asix failed with error -71 [ 337.631755][ T31] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 337.643863][ T45] usb 3-1: USB disconnect, device number 127 [ 337.651014][ T31] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.663356][ T31] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 337.680707][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.690375][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.698764][ T31] usb 1-1: SerialNumber: syz [ 337.908238][ T31] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 337.914618][ T31] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 337.924891][ T31] usb 1-1: USB disconnect, device number 127 [ 338.001858][ T9] usb 4-1: USB disconnect, device number 77 [ 338.477870][ T7386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 338.486500][ T7386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 338.495055][ T36] kauditd_printk_skb: 8366 callbacks suppressed [ 338.495074][ T36] audit: type=1400 audit(7095545320.842:8944): avc: denied { read } for pid=7385 comm="syz.0.2449" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 338.509804][ T7386] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 338.524674][ T36] audit: type=1400 audit(7095545320.842:8945): avc: denied { open } for pid=7385 comm="syz.0.2449" path="/550/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 338.532345][ T7386] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 338.557672][ T36] audit: type=1400 audit(7095545320.842:8946): avc: denied { search } for pid=7385 comm="syz.0.2449" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 338.569086][ T7386] overlayfs: d_ino too big (550, ino=9223372036854778784, xinobits=3) [ 338.586970][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 338.595593][ T7386] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 338.603879][ T36] audit: type=1400 audit(7095545320.852:8947): avc: denied { getattr } for pid=7385 comm="syz.0.2449" name="saved_tgids" dev="tracefs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 338.612067][ T7386] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 338.757973][ T7390] overlayfs: failed to clone upperpath [ 338.780316][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 338.787324][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 338.796061][ T9] usb 4-1: config 0 has no interface number 0 [ 338.802641][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 338.815360][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 338.824977][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.833428][ T9] usb 4-1: Product: syz [ 338.837973][ T9] usb 4-1: Manufacturer: syz [ 338.842988][ T9] usb 4-1: SerialNumber: syz [ 338.849997][ T9] usb 4-1: config 0 descriptor?? [ 338.856257][ T7379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.917789][ T7402] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2456'. [ 339.065700][ T7379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 339.280358][ T331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 339.435827][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 339.450638][ T331] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 339.458906][ T331] usb 3-1: config 0 has no interface number 0 [ 339.465277][ T331] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 339.477423][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 339.486867][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.495367][ T331] usb 3-1: Product: syz [ 339.499573][ T331] usb 3-1: Manufacturer: syz [ 339.504402][ T331] usb 3-1: SerialNumber: syz [ 339.509980][ T331] usb 3-1: config 0 descriptor?? [ 339.517215][ T7407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.726837][ T7407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.850316][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 340.000305][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 340.006716][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 340.015436][ T31] usb 1-1: config 0 has no interface number 0 [ 340.022142][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 340.032238][ T31] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.043354][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 340.052005][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 340.061159][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.069331][ T31] usb 1-1: Product: syz [ 340.073585][ T31] usb 1-1: Manufacturer: syz [ 340.078318][ T31] usb 1-1: SerialNumber: syz [ 340.083977][ T31] usb 1-1: config 0 descriptor?? [ 340.089274][ T7432] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 340.322769][ T31] ipheth 1-1:0.196: Unable to find endpoints [ 340.340368][ T31] usb 1-1: USB disconnect, device number 2 [ 340.346637][ T36] audit: type=1400 audit(7095545322.692:8948): avc: denied { add_name } for pid=7437 comm="syz.4.2471" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.368464][ T36] audit: type=1400 audit(7095545322.692:8949): avc: denied { create } for pid=7437 comm="syz.4.2471" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 340.536289][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 340.546646][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 340.557340][ T331] asix 3-1:0.188: probe with driver asix failed with error -61 [ 341.090276][ T404] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 341.240256][ T404] usb 1-1: Using ep0 maxpacket: 32 [ 341.246603][ T404] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 341.255011][ T404] usb 1-1: config 0 has no interface number 0 [ 341.261262][ T404] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 341.273232][ T404] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 341.282430][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.290573][ T404] usb 1-1: Product: syz [ 341.294781][ T404] usb 1-1: Manufacturer: syz [ 341.299407][ T404] usb 1-1: SerialNumber: syz [ 341.305073][ T404] usb 1-1: config 0 descriptor?? [ 341.310453][ T7442] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 341.519549][ T7442] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 341.691698][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 341.702257][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 341.713147][ T9] usb 4-1: USB disconnect, device number 78 [ 341.728364][ T7442] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2473'. [ 342.110195][ T31] usb 3-1: USB disconnect, device number 2 [ 342.139172][ T404] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 342.199104][ T7461] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2480'. [ 342.208667][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 342.217990][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2480'. [ 342.339948][ T404] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 342.350303][ T404] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 342.360797][ T404] asix 1-1:0.188: probe with driver asix failed with error -71 [ 342.371245][ T404] usb 1-1: USB disconnect, device number 3 [ 343.050292][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 343.130328][ T331] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 343.176358][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 343.200291][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 343.206713][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 343.215633][ T31] usb 3-1: config 0 has no interface number 0 [ 343.222241][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 343.234233][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 343.243784][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.252082][ T31] usb 3-1: Product: syz [ 343.256332][ T31] usb 3-1: Manufacturer: syz [ 343.261351][ T31] usb 3-1: SerialNumber: syz [ 343.267001][ T31] usb 3-1: config 0 descriptor?? [ 343.274641][ T7477] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 343.282109][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 343.290511][ T331] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 343.298857][ T331] usb 1-1: config 0 has no interface number 0 [ 343.305610][ T331] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 343.318485][ T331] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 343.328730][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.337413][ T331] usb 1-1: Product: syz [ 343.342066][ T331] usb 1-1: Manufacturer: syz [ 343.346727][ T331] usb 1-1: SerialNumber: syz [ 343.357040][ T331] usb 1-1: config 0 descriptor?? [ 343.362793][ T7482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 343.489531][ T7477] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 343.572143][ T7482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 344.330292][ T45] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 344.500252][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 344.506935][ T45] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 344.515595][ T45] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 344.524154][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 344.533590][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 344.545491][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 344.557543][ T45] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 344.567220][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.575674][ T45] usb 4-1: Product: syz [ 344.580160][ T45] usb 4-1: Manufacturer: syz [ 344.585215][ T45] usb 4-1: SerialNumber: syz [ 344.591876][ T45] usb 4-1: config 0 descriptor?? [ 344.597968][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 344.604460][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 344.613354][ T45] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 344.806363][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.816064][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.862725][ T45] usb 4-1: USB disconnect, device number 79 [ 345.487223][ T7520] kvm: kvm [7519]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 345.496366][ T7520] kvm: kvm [7519]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 345.508961][ T7520] kvm: kvm [7519]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 345.522417][ T7520] kvm: kvm [7519]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 345.532162][ T7520] kvm: kvm [7519]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 345.547295][ T7520] kvm_intel: kvm [7519]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 345.719395][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 345.741014][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 345.752987][ T31] asix 3-1:0.188: probe with driver asix failed with error -71 [ 345.763524][ T31] usb 3-1: USB disconnect, device number 3 [ 346.201017][ T331] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 346.214642][ T331] asix 1-1:0.188: probe with driver asix failed with error -71 [ 346.226529][ T331] usb 1-1: USB disconnect, device number 4 [ 346.301639][ T7540] overlayfs: failed to clone upperpath [ 346.348587][ T7546] FAULT_INJECTION: forcing a failure. [ 346.348587][ T7546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.362072][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz.3.2515 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 346.362110][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.362125][ T7546] Call Trace: [ 346.362132][ T7546] [ 346.362142][ T7546] __dump_stack+0x21/0x30 [ 346.362174][ T7546] dump_stack_lvl+0x140/0x1c0 [ 346.362202][ T7546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 346.362230][ T7546] dump_stack+0x19/0x20 [ 346.362255][ T7546] should_fail_ex+0x3d7/0x530 [ 346.362282][ T7546] should_fail+0xf/0x20 [ 346.362305][ T7546] should_fail_usercopy+0x1e/0x30 [ 346.362333][ T7546] _copy_from_user+0x20/0xa0 [ 346.362364][ T7546] evdev_ioctl_handler+0x5bc/0x1f60 [ 346.362398][ T7546] ? proc_fail_nth_write+0x184/0x220 [ 346.362423][ T7546] ? evdev_fasync+0x70/0x70 [ 346.362456][ T7546] ? selinux_file_ioctl+0x732/0x1480 [ 346.362483][ T7546] ? vfs_write+0x9a4/0xf90 [ 346.362510][ T7546] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 346.362536][ T7546] ? __cfi_vfs_write+0x10/0x10 [ 346.362564][ T7546] ? __kasan_check_write+0x18/0x20 [ 346.362592][ T7546] ? mutex_unlock+0x90/0x240 [ 346.362612][ T7546] ? __fget_files+0x2c5/0x340 [ 346.362647][ T7546] ? __fget_files+0x2c5/0x340 [ 346.362679][ T7546] evdev_ioctl+0x2b/0x40 [ 346.362708][ T7546] ? __cfi_evdev_ioctl+0x10/0x10 [ 346.362741][ T7546] __se_sys_ioctl+0x132/0x1b0 [ 346.362773][ T7546] __x64_sys_ioctl+0x7f/0xa0 [ 346.362803][ T7546] x64_sys_call+0x1878/0x2ee0 [ 346.362833][ T7546] do_syscall_64+0x57/0xf0 [ 346.362860][ T7546] ? clear_bhb_loop+0x50/0xa0 [ 346.362890][ T7546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 346.362918][ T7546] RIP: 0033:0x7f09ba59c799 [ 346.363034][ T7546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.363062][ T7546] RSP: 002b:00007f09bb42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.363087][ T7546] RAX: ffffffffffffffda RBX: 00007f09ba815fa0 RCX: 00007f09ba59c799 [ 346.363104][ T7546] RDX: 0000000000000000 RSI: 00000000400445a0 RDI: 0000000000000003 [ 346.363119][ T7546] RBP: 00007f09bb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.363134][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.363148][ T7546] R13: 00007f09ba816038 R14: 00007f09ba815fa0 R15: 00007ffe2cf24818 [ 346.363168][ T7546] [ 346.658487][ T7552] FAULT_INJECTION: forcing a failure. [ 346.658487][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 346.671787][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.2.2517 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 346.671826][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.671843][ T7552] Call Trace: [ 346.671851][ T7552] [ 346.671862][ T7552] __dump_stack+0x21/0x30 [ 346.671896][ T7552] dump_stack_lvl+0x140/0x1c0 [ 346.671930][ T7552] ? __cfi_dump_stack_lvl+0x10/0x10 [ 346.671958][ T7552] ? release_sock+0x171/0x1f0 [ 346.671981][ T7552] dump_stack+0x19/0x20 [ 346.672007][ T7552] should_fail_ex+0x3d7/0x530 [ 346.672036][ T7552] should_failslab+0xac/0x100 [ 346.672058][ T7552] kmem_cache_alloc_node_noprof+0x45/0x420 [ 346.672087][ T7552] ? netlink_data_ready+0x20/0x20 [ 346.672111][ T7552] ? __alloc_skb+0x108/0x370 [ 346.672133][ T7552] __alloc_skb+0x108/0x370 [ 346.672156][ T7552] netlink_alloc_large_skb+0xf7/0x1b0 [ 346.672180][ T7552] netlink_sendmsg+0x594/0xb10 [ 346.672206][ T7552] ? __cfi_netlink_sendmsg+0x10/0x10 [ 346.672235][ T7552] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 346.672266][ T7552] ? security_socket_sendmsg+0x3d/0x100 [ 346.672299][ T7552] ? __cfi_netlink_sendmsg+0x10/0x10 [ 346.672325][ T7552] ____sys_sendmsg+0xa8f/0xae0 [ 346.672354][ T7552] ? __import_iovec+0x5ad/0x7c0 [ 346.672374][ T7552] ? __sys_sendmsg_sock+0x50/0x50 [ 346.672402][ T7552] ? import_iovec+0x80/0xb0 [ 346.672422][ T7552] ___sys_sendmsg+0x2a6/0x370 [ 346.672449][ T7552] ? __sys_sendmsg+0x2a0/0x2a0 [ 346.672477][ T7552] ? proc_fail_nth_write+0x184/0x220 [ 346.672501][ T7552] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 346.672534][ T7552] __x64_sys_sendmsg+0x1fb/0x2d0 [ 346.672560][ T7552] ? fput+0x1a4/0x240 [ 346.672582][ T7552] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 346.672610][ T7552] ? ksys_write+0x1f3/0x260 [ 346.672641][ T7552] ? __kasan_check_read+0x15/0x20 [ 346.672669][ T7552] x64_sys_call+0x2a4c/0x2ee0 [ 346.672699][ T7552] do_syscall_64+0x57/0xf0 [ 346.672725][ T7552] ? clear_bhb_loop+0x50/0xa0 [ 346.672755][ T7552] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 346.672781][ T7552] RIP: 0033:0x7fda85f9c799 [ 346.672801][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.672821][ T7552] RSP: 002b:00007fda86dca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.672847][ T7552] RAX: ffffffffffffffda RBX: 00007fda86215fa0 RCX: 00007fda85f9c799 [ 346.672865][ T7552] RDX: 0000000000044000 RSI: 0000200000000280 RDI: 0000000000000004 [ 346.672881][ T7552] RBP: 00007fda86dca090 R08: 0000000000000000 R09: 0000000000000000 [ 346.672897][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.672919][ T7552] R13: 00007fda86216038 R14: 00007fda86215fa0 R15: 00007fffc9256ae8 [ 346.672940][ T7552] [ 347.080300][ T331] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 347.126300][ T7575] kvm: kvm [7574]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 347.135436][ T7575] kvm: kvm [7574]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 347.147204][ T7575] kvm: kvm [7574]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 347.159194][ T7575] kvm: kvm [7574]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 347.168797][ T7575] kvm: kvm [7574]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 347.186415][ T7575] kvm_intel: kvm [7574]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 347.194914][ T7585] overlayfs: failed to clone upperpath [ 347.232502][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 347.239077][ T331] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 347.247500][ T331] usb 4-1: config 0 has no interface number 0 [ 347.253854][ T331] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 347.271324][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 347.281383][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.289860][ T331] usb 4-1: Product: syz [ 347.294419][ T331] usb 4-1: Manufacturer: syz [ 347.299313][ T331] usb 4-1: SerialNumber: syz [ 347.308909][ T331] usb 4-1: config 0 descriptor?? [ 347.315226][ T7553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.330334][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 347.470372][ T45] usb 3-1: device descriptor read/64, error -71 [ 347.500265][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 347.526405][ T7553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.650354][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 347.657111][ T31] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 347.665404][ T31] usb 1-1: config 0 has no interface number 0 [ 347.671694][ T31] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 347.683727][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 347.693284][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.701694][ T31] usb 1-1: Product: syz [ 347.705994][ T31] usb 1-1: Manufacturer: syz [ 347.710782][ T45] usb 3-1: device descriptor read/64, error -71 [ 347.717318][ T31] usb 1-1: SerialNumber: syz [ 347.723008][ T31] usb 1-1: config 0 descriptor?? [ 347.728375][ T7589] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 347.937640][ T7589] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 347.950299][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.090353][ T45] usb 3-1: device descriptor read/64, error -71 [ 348.330331][ T45] usb 3-1: device descriptor read/64, error -71 [ 348.440397][ T45] usb usb3-port1: attempt power cycle [ 348.538372][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 348.548862][ T331] asix 4-1:0.188: probe with driver asix failed with error -32 [ 348.780301][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 348.801413][ T45] usb 3-1: device descriptor read/8, error -71 [ 348.931599][ T45] usb 3-1: device descriptor read/8, error -71 [ 349.170366][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 349.191569][ T45] usb 3-1: device descriptor read/8, error -71 [ 349.321554][ T45] usb 3-1: device descriptor read/8, error -71 [ 349.430472][ T45] usb usb3-port1: unable to enumerate USB device [ 349.664080][ T9] usb 4-1: USB disconnect, device number 80 [ 350.480298][ T331] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 350.561092][ T31] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 350.571908][ T31] asix 1-1:0.188: probe with driver asix failed with error -71 [ 350.582259][ T31] usb 1-1: USB disconnect, device number 5 [ 350.630361][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 350.637018][ T331] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 350.645386][ T331] usb 3-1: config 0 has no interface number 0 [ 350.651613][ T331] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 350.660472][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 350.666369][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 350.678937][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.687422][ T331] usb 3-1: Product: syz [ 350.691850][ T331] usb 3-1: Manufacturer: syz [ 350.696591][ T331] usb 3-1: SerialNumber: syz [ 350.702865][ T331] usb 3-1: config 0 descriptor?? [ 350.708457][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.820349][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 350.827551][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 350.836331][ T9] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 350.847412][ T9] usb 4-1: config 179 has no interface number 0 [ 350.854330][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 350.868259][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 350.877650][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.918292][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.147539][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.158190][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.187658][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.197436][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.207935][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.217131][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.328176][ T9] usb 4-1: string descriptor 0 read error: -71 [ 351.337824][ T9] usb 4-1: USB disconnect, device number 81 [ 351.343865][ T749] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 351.480328][ T749] usb 1-1: device descriptor read/64, error -71 [ 351.720321][ T749] usb 1-1: device descriptor read/64, error -71 [ 351.928906][ T331] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 351.939525][ T331] asix 3-1:0.188: probe with driver asix failed with error -32 [ 351.960345][ T749] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 352.090304][ T749] usb 1-1: device descriptor read/64, error -71 [ 352.330292][ T749] usb 1-1: device descriptor read/64, error -71 [ 352.375727][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 352.440530][ T749] usb usb1-port1: attempt power cycle [ 352.780498][ T749] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 352.802047][ T749] usb 1-1: device descriptor read/8, error -71 [ 352.932818][ T749] usb 1-1: device descriptor read/8, error -71 [ 352.996365][ T7718] fuse: Bad value for 'group_id' [ 353.001635][ T7718] fuse: Bad value for 'group_id' [ 353.129175][ T9] usb 3-1: USB disconnect, device number 8 [ 353.170374][ T749] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 353.191885][ T749] usb 1-1: device descriptor read/8, error -71 [ 353.280304][ T404] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 353.321988][ T749] usb 1-1: device descriptor read/8, error -71 [ 353.430319][ T404] usb 4-1: Using ep0 maxpacket: 16 [ 353.435825][ T749] usb usb1-port1: unable to enumerate USB device [ 353.443791][ T404] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.454140][ T404] usb 4-1: config 0 has no interfaces? [ 353.459763][ T404] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.469020][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 353.476652][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.485915][ T404] usb 4-1: config 0 descriptor?? [ 353.630314][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 353.636969][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 353.645249][ T9] usb 3-1: config 0 has no interface number 0 [ 353.651730][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 353.663876][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 353.673196][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.681285][ T9] usb 3-1: Product: syz [ 353.685525][ T9] usb 3-1: Manufacturer: syz [ 353.690135][ T9] usb 3-1: SerialNumber: syz [ 353.695756][ T9] usb 3-1: config 0 descriptor?? [ 353.701221][ T7724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.910468][ T7724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.118944][ T7724] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2583'. [ 354.531203][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 354.541674][ T9] asix 3-1:0.188: probe with driver asix failed with error -71 [ 354.555228][ T9] usb 3-1: USB disconnect, device number 9 [ 354.630277][ T331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 354.780260][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 354.789496][ T331] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 354.798314][ T331] usb 1-1: config 0 has no interface number 0 [ 354.804834][ T331] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 354.817173][ T331] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 354.826796][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.835239][ T331] usb 1-1: Product: syz [ 354.839562][ T331] usb 1-1: Manufacturer: syz [ 354.844739][ T331] usb 1-1: SerialNumber: syz [ 354.850810][ T331] usb 1-1: config 0 descriptor?? [ 354.857942][ T7743] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 355.066955][ T7743] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 355.430329][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 355.580257][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 355.587084][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 355.595516][ T31] usb 3-1: config 0 has no interface number 0 [ 355.603610][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 355.613109][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.621531][ T31] usb 3-1: Product: syz [ 355.625846][ T31] usb 3-1: Manufacturer: syz [ 355.630559][ T31] usb 3-1: SerialNumber: syz [ 355.636322][ T31] usb 3-1: config 0 descriptor?? [ 355.642347][ T31] smsc95xx v2.0.0 [ 355.844943][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.853772][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.008117][ T9] usb 4-1: USB disconnect, device number 82 [ 356.070311][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 356.100280][ T331] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 356.110568][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 356.120574][ T7781] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2604'. [ 356.137437][ T331] asix 1-1:0.188: probe with driver asix failed with error -32 [ 356.346338][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.355058][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.363804][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 356.374813][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 356.565393][ T31] usb 3-1: USB disconnect, device number 10 [ 357.107238][ T7794] kvm: kvm [7793]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 357.116201][ T7794] kvm: kvm [7793]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 357.127751][ T7794] kvm: kvm [7793]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 357.139688][ T7794] kvm: kvm [7793]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 357.148479][ T7794] kvm: kvm [7793]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 357.163498][ T7794] kvm_intel: kvm [7793]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 357.180275][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 357.199540][ T36] audit: type=1326 audit(7095545339.542:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.4.2612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f287cb9c799 code=0x0 [ 357.330292][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 357.337651][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 357.347481][ T9] usb 4-1: config 0 has no interface number 0 [ 357.353900][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 357.365692][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 357.375284][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.384453][ T9] usb 4-1: Product: syz [ 357.388657][ T9] usb 4-1: Manufacturer: syz [ 357.393501][ T9] usb 4-1: SerialNumber: syz [ 357.400360][ T9] usb 4-1: config 0 descriptor?? [ 357.406606][ T7792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.415677][ T31] usb 1-1: USB disconnect, device number 10 [ 357.480324][ T404] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 357.615656][ T7792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.623593][ T7815] FAULT_INJECTION: forcing a failure. [ 357.623593][ T7815] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 357.637637][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz.0.2616 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 357.637675][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.637692][ T7815] Call Trace: [ 357.637701][ T7815] [ 357.637710][ T7815] __dump_stack+0x21/0x30 [ 357.637745][ T7815] dump_stack_lvl+0x140/0x1c0 [ 357.637772][ T7815] ? __cfi_dump_stack_lvl+0x10/0x10 [ 357.637800][ T7815] ? stack_depot_save+0x12/0x20 [ 357.637827][ T7815] ? save_stack+0x149/0x240 [ 357.637849][ T7815] dump_stack+0x19/0x20 [ 357.637875][ T7815] should_fail_ex+0x3d7/0x530 [ 357.637902][ T7815] should_fail_alloc_page+0xec/0x110 [ 357.637925][ T7815] __alloc_pages_noprof+0x1c0/0x7e0 [ 357.637953][ T7815] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 357.637978][ T7815] ? __kasan_check_write+0x18/0x20 [ 357.638016][ T7815] ? __set_page_owner+0x3fe/0x600 [ 357.638041][ T7815] ? kasan_unpoison+0x4a/0x70 [ 357.638070][ T7815] __folio_alloc_noprof+0x14/0x80 [ 357.638097][ T7815] folio_prealloc+0x46/0x220 [ 357.638120][ T7815] do_wp_page+0x1895/0x2e90 [ 357.638156][ T7815] ? folio_put+0x90/0x90 [ 357.638187][ T7815] ? __cfi__raw_spin_lock+0x10/0x10 [ 357.638216][ T7815] ? __pte_offset_map+0x1b0/0x230 [ 357.638244][ T7815] ? pte_offset_map_rw_nolock+0xba/0x110 [ 357.638273][ T7815] handle_mm_fault+0x103e/0x1bf0 [ 357.638311][ T7815] ? __cfi_handle_mm_fault+0x10/0x10 [ 357.638344][ T7815] ? find_vma+0xd3/0x120 [ 357.638374][ T7815] ? lock_mm_and_find_vma+0xb8/0x390 [ 357.638408][ T7815] do_user_addr_fault+0x4c9/0x11e0 [ 357.638443][ T7815] exc_page_fault+0x58/0xc0 [ 357.638466][ T7815] asm_exc_page_fault+0x2b/0x30 [ 357.638493][ T7815] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 357.638520][ T7815] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 4f 68 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 357.638540][ T7815] RSP: 0018:ffffc90011047698 EFLAGS: 00050206 [ 357.638563][ T7815] RAX: ffffffff82ad2e01 RBX: ffff888130902000 RCX: 0000000000000080 [ 357.638581][ T7815] RDX: 0000000000000000 RSI: ffff888130902f80 RDI: 0000200000002000 [ 357.638598][ T7815] RBP: ffffc90011047800 R08: ffff888130902fff R09: 1ffff110261205ff [ 357.638616][ T7815] R10: dffffc0000000000 R11: ffffed1026120600 R12: 0000200000001080 [ 357.638634][ T7815] R13: 0000200000002080 R14: 1ffff92002208fb5 R15: 0000000000001000 [ 357.638654][ T7815] ? _copy_to_iter+0x181/0x1510 [ 357.638687][ T7815] ? _copy_to_iter+0x218/0x1510 [ 357.638718][ T7815] ? __cfi__copy_to_iter+0x10/0x10 [ 357.638748][ T7815] ? __kasan_check_read+0x15/0x20 [ 357.638778][ T7815] ? folio_mark_accessed+0x1f0/0x620 [ 357.638801][ T7815] ? __cfi_selinux_file_open+0x10/0x10 [ 357.638828][ T7815] ? __cfi_folio_mark_accessed+0x10/0x10 [ 357.638852][ T7815] copy_page_to_iter+0x20d/0x2f0 [ 357.638885][ T7815] filemap_read+0x9d1/0x1320 [ 357.638910][ T7815] ? __cfi_filemap_read+0x10/0x10 [ 357.638931][ T7815] ? unwind_get_return_address+0x51/0x90 [ 357.638962][ T7815] ? kstrtoull+0x13b/0x1e0 [ 357.638995][ T7815] ? kstrtouint+0x78/0xf0 [ 357.639019][ T7815] generic_file_read_iter+0xaf/0x3c0 [ 357.639042][ T7815] do_iter_readv_writev+0x62f/0x820 [ 357.639076][ T7815] ? vfs_iter_read+0x5f0/0x5f0 [ 357.639123][ T7815] ? bpf_lsm_file_permission+0xd/0x20 [ 357.639149][ T7815] vfs_readv+0x302/0xa10 [ 357.639172][ T7815] ? do_readv+0x2e0/0x2e0 [ 357.639195][ T7815] ? __cfi_mutex_unlock+0x10/0x10 [ 357.639233][ T7815] __x64_sys_preadv+0x1a6/0x2c0 [ 357.639265][ T7815] ? __cfi___x64_sys_preadv+0x10/0x10 [ 357.639298][ T7815] ? __kasan_check_read+0x15/0x20 [ 357.639326][ T7815] x64_sys_call+0x1ee9/0x2ee0 [ 357.639363][ T7815] do_syscall_64+0x57/0xf0 [ 357.639391][ T7815] ? clear_bhb_loop+0x50/0xa0 [ 357.639420][ T7815] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 357.639449][ T7815] RIP: 0033:0x7f610239c799 [ 357.639469][ T7815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.639489][ T7815] RSP: 002b:00007f61032ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 357.639512][ T7815] RAX: ffffffffffffffda RBX: 00007f6102616090 RCX: 00007f610239c799 [ 357.639530][ T7815] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 357.639545][ T7815] RBP: 00007f61032ed090 R08: 0000000000000000 R09: 0000000000000000 [ 357.639562][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.639576][ T7815] R13: 00007f6102616128 R14: 00007f6102616090 R15: 00007ffed220cd88 [ 357.639597][ T7815] [ 357.652352][ T404] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.842121][ T7792] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2608'. [ 357.883236][ T404] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 358.121106][ T404] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.133054][ T404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 358.141269][ T404] usb 3-1: SerialNumber: syz [ 358.158610][ T404] cdc_acm 3-1:1.0: skipping garbage [ 358.321660][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 358.332156][ T9] asix 4-1:0.188: probe with driver asix failed with error -71 [ 358.345015][ T9] usb 4-1: USB disconnect, device number 83 [ 358.363602][ T10] usb 3-1: USB disconnect, device number 11 [ 358.490369][ T404] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 358.512419][ T7839] FAULT_INJECTION: forcing a failure. [ 358.512419][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.525701][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.2.2625 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 358.525738][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.525749][ T7839] Call Trace: [ 358.525756][ T7839] [ 358.525764][ T7839] __dump_stack+0x21/0x30 [ 358.525789][ T7839] dump_stack_lvl+0x140/0x1c0 [ 358.525810][ T7839] ? __cfi_dump_stack_lvl+0x10/0x10 [ 358.525831][ T7839] ? check_stack_object+0x12b/0x150 [ 358.525854][ T7839] dump_stack+0x19/0x20 [ 358.525893][ T7839] should_fail_ex+0x3d7/0x530 [ 358.525913][ T7839] should_fail+0xf/0x20 [ 358.525931][ T7839] should_fail_usercopy+0x1e/0x30 [ 358.525951][ T7839] _copy_to_user+0x24/0xa0 [ 358.525975][ T7839] simple_read_from_buffer+0xed/0x160 [ 358.525993][ T7839] proc_fail_nth_read+0x1aa/0x220 [ 358.526012][ T7839] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 358.526031][ T7839] ? bpf_lsm_file_permission+0xd/0x20 [ 358.526047][ T7839] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 358.526066][ T7839] vfs_read+0x289/0xcb0 [ 358.526087][ T7839] ? __cfi_vfs_read+0x10/0x10 [ 358.526107][ T7839] ? __kasan_check_write+0x18/0x20 [ 358.526129][ T7839] ? mutex_lock+0x97/0x1d0 [ 358.526154][ T7839] ? __cfi_mutex_lock+0x10/0x10 [ 358.526177][ T7839] ? __fget_files+0x2c5/0x340 [ 358.526203][ T7839] ksys_read+0x145/0x260 [ 358.526224][ T7839] ? __cfi_ksys_read+0x10/0x10 [ 358.526246][ T7839] ? __kasan_check_read+0x15/0x20 [ 358.526267][ T7839] __x64_sys_read+0x7f/0x90 [ 358.526288][ T7839] x64_sys_call+0x2638/0x2ee0 [ 358.526311][ T7839] do_syscall_64+0x57/0xf0 [ 358.526330][ T7839] ? clear_bhb_loop+0x50/0xa0 [ 358.526352][ T7839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 358.526371][ T7839] RIP: 0033:0x7fda85f5cfce [ 358.526386][ T7839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.526400][ T7839] RSP: 002b:00007fda86dc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.526418][ T7839] RAX: ffffffffffffffda RBX: 00007fda86dca6c0 RCX: 00007fda85f5cfce [ 358.526430][ T7839] RDX: 000000000000000f RSI: 00007fda86dca0a0 RDI: 0000000000000003 [ 358.526441][ T7839] RBP: 00007fda86dca090 R08: 0000000000000000 R09: 0000000000000000 [ 358.526451][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.526462][ T7839] R13: 00007fda86216038 R14: 00007fda86215fa0 R15: 00007fffc9256ae8 [ 358.526476][ T7839] [ 358.575855][ T7841] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 358.670625][ T404] usb 1-1: Using ep0 maxpacket: 32 [ 358.673143][ T7841] SELinux: failed to load policy [ 358.679861][ T404] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 358.804504][ T404] usb 1-1: config 0 has no interface number 0 [ 358.810782][ T404] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 358.836427][ T404] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 358.845665][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.854109][ T404] usb 1-1: Product: syz [ 358.858318][ T404] usb 1-1: Manufacturer: syz [ 358.862987][ T404] usb 1-1: SerialNumber: syz [ 358.868853][ T404] usb 1-1: config 0 descriptor?? [ 358.874356][ T7829] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 359.030828][ T7872] FAULT_INJECTION: forcing a failure. [ 359.030828][ T7872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.044832][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.2.2637 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 359.044870][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.044896][ T7872] Call Trace: [ 359.044904][ T7872] [ 359.044913][ T7872] __dump_stack+0x21/0x30 [ 359.044948][ T7872] dump_stack_lvl+0x140/0x1c0 [ 359.044976][ T7872] ? __cfi_dump_stack_lvl+0x10/0x10 [ 359.045004][ T7872] ? exc_page_fault+0x65/0xc0 [ 359.045027][ T7872] dump_stack+0x19/0x20 [ 359.045053][ T7872] should_fail_ex+0x3d7/0x530 [ 359.045080][ T7872] should_fail+0xf/0x20 [ 359.045105][ T7872] should_fail_usercopy+0x1e/0x30 [ 359.045133][ T7872] _copy_to_iter+0x1a9/0x1510 [ 359.045166][ T7872] ? __cfi__copy_to_iter+0x10/0x10 [ 359.045198][ T7872] ? __kasan_check_read+0x15/0x20 [ 359.045226][ T7872] ? folio_mark_accessed+0x1f0/0x620 [ 359.045248][ T7872] ? __cfi_selinux_file_open+0x10/0x10 [ 359.045274][ T7872] ? __cfi_folio_mark_accessed+0x10/0x10 [ 359.045297][ T7872] copy_page_to_iter+0x20d/0x2f0 [ 359.045330][ T7872] filemap_read+0x9d1/0x1320 [ 359.045355][ T7872] ? __cfi_filemap_read+0x10/0x10 [ 359.045377][ T7872] ? unwind_get_return_address+0x51/0x90 [ 359.045408][ T7872] ? kstrtoull+0x13b/0x1e0 [ 359.045434][ T7872] ? kstrtouint+0x78/0xf0 [ 359.045458][ T7872] generic_file_read_iter+0xaf/0x3c0 [ 359.045483][ T7872] do_iter_readv_writev+0x62f/0x820 [ 359.045517][ T7872] ? vfs_iter_read+0x5f0/0x5f0 [ 359.045550][ T7872] ? bpf_lsm_file_permission+0xd/0x20 [ 359.045575][ T7872] vfs_readv+0x302/0xa10 [ 359.045598][ T7872] ? do_readv+0x2e0/0x2e0 [ 359.045622][ T7872] ? __cfi_mutex_unlock+0x10/0x10 [ 359.045659][ T7872] __x64_sys_preadv+0x1a6/0x2c0 [ 359.045692][ T7872] ? __cfi___x64_sys_preadv+0x10/0x10 [ 359.045725][ T7872] ? __kasan_check_read+0x15/0x20 [ 359.045756][ T7872] x64_sys_call+0x1ee9/0x2ee0 [ 359.045788][ T7872] do_syscall_64+0x57/0xf0 [ 359.045815][ T7872] ? clear_bhb_loop+0x50/0xa0 [ 359.045845][ T7872] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 359.045884][ T7872] RIP: 0033:0x7fda85f9c799 [ 359.045904][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.045924][ T7872] RSP: 002b:00007fda86da9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 359.045948][ T7872] RAX: ffffffffffffffda RBX: 00007fda86216090 RCX: 00007fda85f9c799 [ 359.045965][ T7872] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 359.045980][ T7872] RBP: 00007fda86da9090 R08: 0000000000000000 R09: 0000000000000000 [ 359.045995][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.046009][ T7872] R13: 00007fda86216128 R14: 00007fda86216090 R15: 00007fffc9256ae8 [ 359.046030][ T7872] [ 359.061514][ T7874] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2640'. [ 359.135775][ T7829] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 359.756247][ T7891] 9pnet_fd: Insufficient options for proto=fd [ 360.322517][ T404] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 360.333323][ T404] asix 1-1:0.188: probe with driver asix failed with error -32 [ 360.530293][ T31] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 360.660319][ T31] usb 3-1: device descriptor read/64, error -71 [ 360.900340][ T31] usb 3-1: device descriptor read/64, error -71 [ 361.140308][ T31] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 361.280281][ T31] usb 3-1: device descriptor read/64, error -71 [ 361.336683][ T331] usb 1-1: USB disconnect, device number 11 [ 361.530285][ T31] usb 3-1: device descriptor read/64, error -71 [ 361.612264][ T36] audit: type=1326 audit(7095545343.962:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.0.2660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610239c799 code=0x0 [ 361.650564][ T31] usb usb3-port1: attempt power cycle [ 361.990511][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 362.011854][ T31] usb 3-1: device descriptor read/8, error -71 [ 362.123999][ T7933] overlayfs: failed to resolve './file1/file0': -2 [ 362.142294][ T31] usb 3-1: device descriptor read/8, error -71 [ 362.390285][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 362.411581][ T31] usb 3-1: device descriptor read/8, error -71 [ 362.541702][ T31] usb 3-1: device descriptor read/8, error -71 [ 362.650385][ T31] usb usb3-port1: unable to enumerate USB device [ 362.736017][ T661] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 362.762892][ T7968] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2677'. [ 362.891682][ T661] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.901797][ T661] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 362.916262][ T661] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.926004][ T661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.934309][ T661] usb 1-1: SerialNumber: syz [ 362.941036][ T661] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 363.156330][ T7954] kvm: kvm [7953]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 363.165044][ T7954] kvm: kvm [7953]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 363.176840][ T7954] kvm: kvm [7953]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 363.188695][ T7954] kvm: kvm [7953]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 363.197881][ T7954] kvm: kvm [7953]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 363.221663][ T7954] kvm_intel: kvm [7953]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 363.284787][ T7976] FAULT_INJECTION: forcing a failure. [ 363.284787][ T7976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.298568][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.3.2679 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 363.298609][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.298625][ T7976] Call Trace: [ 363.298635][ T7976] [ 363.298644][ T7976] __dump_stack+0x21/0x30 [ 363.298679][ T7976] dump_stack_lvl+0x140/0x1c0 [ 363.298707][ T7976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 363.298737][ T7976] ? check_stack_object+0x12b/0x150 [ 363.298768][ T7976] dump_stack+0x19/0x20 [ 363.298795][ T7976] should_fail_ex+0x3d7/0x530 [ 363.298822][ T7976] should_fail+0xf/0x20 [ 363.298847][ T7976] should_fail_usercopy+0x1e/0x30 [ 363.298876][ T7976] _copy_to_user+0x24/0xa0 [ 363.298907][ T7976] simple_read_from_buffer+0xed/0x160 [ 363.298932][ T7976] proc_fail_nth_read+0x1aa/0x220 [ 363.298958][ T7976] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 363.298983][ T7976] ? __kasan_check_write+0x18/0x20 [ 363.299013][ T7976] ? bpf_lsm_file_permission+0xd/0x20 [ 363.299036][ T7976] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 363.299061][ T7976] vfs_read+0x289/0xcb0 [ 363.299092][ T7976] ? __sys_recvmmsg+0x2a0/0x2a0 [ 363.299121][ T7976] ? __cfi_vfs_read+0x10/0x10 [ 363.299149][ T7976] ? __kasan_check_write+0x18/0x20 [ 363.299178][ T7976] ? mutex_lock+0x97/0x1d0 [ 363.299219][ T7976] ? __cfi_mutex_lock+0x10/0x10 [ 363.299252][ T7976] ? __fget_files+0x2c5/0x340 [ 363.299288][ T7976] ksys_read+0x145/0x260 [ 363.299315][ T7976] ? __cfi_ksys_read+0x10/0x10 [ 363.299348][ T7976] ? __x64_sys_recvmmsg+0x199/0x250 [ 363.299388][ T7976] ? __kasan_check_read+0x15/0x20 [ 363.299417][ T7976] __x64_sys_read+0x7f/0x90 [ 363.299447][ T7976] x64_sys_call+0x2638/0x2ee0 [ 363.299478][ T7976] do_syscall_64+0x57/0xf0 [ 363.299506][ T7976] ? clear_bhb_loop+0x50/0xa0 [ 363.299536][ T7976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 363.299564][ T7976] RIP: 0033:0x7f09ba55cfce [ 363.299583][ T7976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.299602][ T7976] RSP: 002b:00007f09bb42efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.299629][ T7976] RAX: ffffffffffffffda RBX: 00007f09bb42f6c0 RCX: 00007f09ba55cfce [ 363.299647][ T7976] RDX: 000000000000000f RSI: 00007f09bb42f0a0 RDI: 0000000000000004 [ 363.299663][ T7976] RBP: 00007f09bb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 363.299679][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.299694][ T7976] R13: 00007f09ba816038 R14: 00007f09ba815fa0 R15: 00007ffe2cf24818 [ 363.299715][ T7976] [ 363.574170][ T661] usb 1-1: USB disconnect, device number 12 [ 363.830362][ T404] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 363.850336][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 363.981541][ T404] usb 4-1: Using ep0 maxpacket: 16 [ 363.986810][ T9] usb 3-1: device descriptor read/64, error -71 [ 363.994576][ T404] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.005103][ T404] usb 4-1: config 0 has no interfaces? [ 364.012856][ T404] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 364.023480][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.043707][ T404] usb 4-1: Product: syz [ 364.048196][ T404] usb 4-1: Manufacturer: syz [ 364.053129][ T404] usb 4-1: SerialNumber: syz [ 364.059592][ T7993] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2687'. [ 364.061348][ T404] usb 4-1: config 0 descriptor?? [ 364.230310][ T9] usb 3-1: device descriptor read/64, error -71 [ 364.470335][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 364.600306][ T9] usb 3-1: device descriptor read/64, error -71 [ 364.642461][ T8005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8005 comm=syz.4.2692 [ 364.840285][ T9] usb 3-1: device descriptor read/64, error -71 [ 364.950428][ T9] usb usb3-port1: attempt power cycle [ 365.185624][ T8019] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2696'. [ 365.290285][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 365.312161][ T9] usb 3-1: device descriptor read/8, error -71 [ 365.441652][ T9] usb 3-1: device descriptor read/8, error -71 [ 365.680299][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 365.702349][ T9] usb 3-1: device descriptor read/8, error -71 [ 365.831494][ T9] usb 3-1: device descriptor read/8, error -71 [ 365.892492][ T8028] netlink: 'syz.0.2700': attribute type 3 has an invalid length. [ 365.900427][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 365.913543][ T36] audit: type=1400 audit(7095545348.262:8952): avc: denied { create } for pid=8027 comm="syz.0.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 365.940611][ T9] usb usb3-port1: unable to enumerate USB device [ 365.954739][ T8028] kvm: kvm [8027]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 365.963826][ T8028] kvm: kvm [8027]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 365.974761][ T8028] kvm: kvm [8027]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 365.985981][ T8028] kvm: kvm [8027]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 365.994768][ T8028] kvm: kvm [8027]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 366.009063][ T8028] kvm_intel: kvm [8027]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 [ 366.604782][ T661] usb 4-1: USB disconnect, device number 84 [ 366.721951][ T8054] FAULT_INJECTION: forcing a failure. [ 366.721951][ T8054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.735656][ T8054] CPU: 0 UID: 0 PID: 8054 Comm: syz.2.2710 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 366.735694][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.735709][ T8054] Call Trace: [ 366.735717][ T8054] [ 366.735727][ T8054] __dump_stack+0x21/0x30 [ 366.735762][ T8054] dump_stack_lvl+0x140/0x1c0 [ 366.735802][ T8054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 366.735838][ T8054] ? __kasan_check_read+0x15/0x20 [ 366.735869][ T8054] dump_stack+0x19/0x20 [ 366.735895][ T8054] should_fail_ex+0x3d7/0x530 [ 366.735925][ T8054] should_fail+0xf/0x20 [ 366.735943][ T8054] should_fail_usercopy+0x1e/0x30 [ 366.735964][ T8054] __kvm_read_guest_page+0x177/0x210 [ 366.735980][ T8054] kvm_vcpu_read_guest_page+0x31a/0x400 [ 366.735996][ T8054] kvm_fetch_guest_virt+0x146/0x190 [ 366.736020][ T8054] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 366.736044][ T8054] __do_insn_fetch_bytes+0x341/0x760 [ 366.736069][ T8054] ? x86_decode_insn+0x5180/0x5180 [ 366.736095][ T8054] x86_decode_insn+0x333/0x5180 [ 366.736119][ T8054] ? make_mmio_spte+0x100/0x1d0 [ 366.736136][ T8054] ? kvm_tdp_mmu_map+0x7c3/0x11f0 [ 366.736156][ T8054] ? __cfi_x86_decode_insn+0x10/0x10 [ 366.736180][ T8054] ? __kasan_check_write+0x18/0x20 [ 366.736200][ T8054] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 366.736219][ T8054] ? __asan_memset+0x39/0x50 [ 366.736239][ T8054] ? init_decode_cache+0x7c/0x90 [ 366.736263][ T8054] ? init_emulate_ctxt+0x421/0x560 [ 366.736280][ T8054] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 366.736297][ T8054] ? __kasan_check_write+0x18/0x20 [ 366.736318][ T8054] ? kvm_release_pfn_clean+0x31/0x60 [ 366.736344][ T8054] x86_decode_emulated_instruction+0x66/0x180 [ 366.736362][ T8054] x86_emulate_instruction+0x2d9/0x1a30 [ 366.736381][ T8054] ? kvm_multiple_exception+0x6d8/0xad0 [ 366.736400][ T8054] kvm_mmu_page_fault+0x336/0x970 [ 366.736419][ T8054] handle_ept_violation+0x256/0x450 [ 366.736435][ T8054] ? vmx_vcpu_run+0x1116/0x1f70 [ 366.736456][ T8054] ? __cfi_handle_ept_violation+0x10/0x10 [ 366.736473][ T8054] vmx_handle_exit+0x12c0/0x1b10 [ 366.736493][ T8054] ? kvm_deliver_exception_payload+0xd7/0x200 [ 366.736513][ T8054] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 366.736535][ T8054] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 366.736557][ T8054] vcpu_run+0x49f7/0x7840 [ 366.736587][ T8054] ? signal_pending+0xc0/0xc0 [ 366.736606][ T8054] ? complete_emulated_mmio+0x4fb/0x790 [ 366.736625][ T8054] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 366.736647][ T8054] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 366.736666][ T8054] ? kstrtoull+0x13b/0x1e0 [ 366.736684][ T8054] ? kstrtouint+0x78/0xf0 [ 366.736701][ T8054] ? ioctl_has_perm+0x1bc/0x500 [ 366.736719][ T8054] ? __asan_memcpy+0x5a/0x80 [ 366.736740][ T8054] ? ioctl_has_perm+0x408/0x500 [ 366.736759][ T8054] ? has_cap_mac_admin+0xd0/0xd0 [ 366.736777][ T8054] ? __kasan_check_write+0x18/0x20 [ 366.736803][ T8054] ? mutex_lock_killable+0x97/0x1d0 [ 366.736819][ T8054] ? __cfi_mutex_lock_killable+0x10/0x10 [ 366.736834][ T8054] ? proc_fail_nth_write+0x184/0x220 [ 366.736852][ T8054] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 366.736872][ T8054] kvm_vcpu_ioctl+0xa48/0x1000 [ 366.736896][ T8054] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 366.736920][ T8054] ? __cfi_vfs_write+0x10/0x10 [ 366.736941][ T8054] ? __kasan_check_write+0x18/0x20 [ 366.736961][ T8054] ? mutex_unlock+0x90/0x240 [ 366.736975][ T8054] ? __cfi_mutex_unlock+0x10/0x10 [ 366.736999][ T8054] ? __fget_files+0x2c5/0x340 [ 366.737025][ T8054] ? __fget_files+0x2c5/0x340 [ 366.737051][ T8054] ? bpf_lsm_file_ioctl+0xd/0x20 [ 366.737067][ T8054] ? security_file_ioctl+0x3e/0x110 [ 366.737085][ T8054] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 366.737106][ T8054] __se_sys_ioctl+0x132/0x1b0 [ 366.737131][ T8054] __x64_sys_ioctl+0x7f/0xa0 [ 366.737154][ T8054] x64_sys_call+0x1878/0x2ee0 [ 366.737176][ T8054] do_syscall_64+0x57/0xf0 [ 366.737195][ T8054] ? clear_bhb_loop+0x50/0xa0 [ 366.737216][ T8054] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 366.737236][ T8054] RIP: 0033:0x7fda85f9c799 [ 366.737251][ T8054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.737266][ T8054] RSP: 002b:00007fda86dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.737284][ T8054] RAX: ffffffffffffffda RBX: 00007fda86215fa0 RCX: 00007fda85f9c799 [ 366.737297][ T8054] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 366.737308][ T8054] RBP: 00007fda86dca090 R08: 0000000000000000 R09: 0000000000000000 [ 366.737319][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.737329][ T8054] R13: 00007fda86216038 R14: 00007fda86215fa0 R15: 00007fffc9256ae8 [ 366.737344][ T8054] [ 367.270417][ T661] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 367.420320][ T661] usb 4-1: Using ep0 maxpacket: 32 [ 367.431036][ T661] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 367.439616][ T661] usb 4-1: config 0 has no interface number 0 [ 367.446292][ T661] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 367.461373][ T661] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 367.475186][ T661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.483402][ T661] usb 4-1: Product: syz [ 367.487951][ T661] usb 4-1: Manufacturer: syz [ 367.492859][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 367.500686][ T661] usb 4-1: SerialNumber: syz [ 367.506719][ T661] usb 4-1: config 0 descriptor?? [ 367.512718][ T8043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.560298][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 367.650395][ T31] usb 1-1: device descriptor read/64, error -71 [ 367.700274][ T45] usb 3-1: device descriptor read/64, error -71 [ 367.724507][ T8043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.890356][ T31] usb 1-1: device descriptor read/64, error -71 [ 367.933378][ T8043] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2705'. [ 367.940555][ T45] usb 3-1: device descriptor read/64, error -71 [ 368.130347][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 368.172026][ T8080] fuse: Unknown parameter 'grou00000000000000000000' [ 368.180338][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 368.260490][ T31] usb 1-1: device descriptor read/64, error -71 [ 368.310321][ T45] usb 3-1: device descriptor read/64, error -71 [ 368.349850][ T661] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 368.500267][ T31] usb 1-1: device descriptor read/64, error -71 [ 368.550310][ T45] usb 3-1: device descriptor read/64, error -71 [ 368.556794][ T661] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 368.567196][ T661] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 368.578450][ T661] asix 4-1:0.188: probe with driver asix failed with error -71 [ 368.589196][ T661] usb 4-1: USB disconnect, device number 85 [ 368.610476][ T31] usb usb1-port1: attempt power cycle [ 368.670412][ T45] usb usb3-port1: attempt power cycle [ 368.950298][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 368.971632][ T31] usb 1-1: device descriptor read/8, error -71 [ 369.010317][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 369.031428][ T45] usb 3-1: device descriptor read/8, error -71 [ 369.067464][ T8089] FAULT_INJECTION: forcing a failure. [ 369.067464][ T8089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.081053][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.3.2726 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 369.081093][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.081108][ T8089] Call Trace: [ 369.081117][ T8089] [ 369.081125][ T8089] __dump_stack+0x21/0x30 [ 369.081160][ T8089] dump_stack_lvl+0x140/0x1c0 [ 369.081188][ T8089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 369.081219][ T8089] dump_stack+0x19/0x20 [ 369.081245][ T8089] should_fail_ex+0x3d7/0x530 [ 369.081274][ T8089] should_fail+0xf/0x20 [ 369.081298][ T8089] should_fail_usercopy+0x1e/0x30 [ 369.081326][ T8089] _copy_from_user+0x20/0xa0 [ 369.081358][ T8089] ___sys_recvmsg+0x176/0x590 [ 369.081385][ T8089] ? __kasan_check_write+0x18/0x20 [ 369.081414][ T8089] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 369.081441][ T8089] ? __sys_recvmsg+0x290/0x290 [ 369.081471][ T8089] ? vfs_write+0x9a4/0xf90 [ 369.081503][ T8089] ? __fget_files+0x2c5/0x340 [ 369.081539][ T8089] __x64_sys_recvmsg+0x1f8/0x2d0 [ 369.081567][ T8089] ? fput+0x1a4/0x240 [ 369.081590][ T8089] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 369.081619][ T8089] ? ksys_write+0x1f3/0x260 [ 369.081651][ T8089] ? __kasan_check_read+0x15/0x20 [ 369.081679][ T8089] x64_sys_call+0xdb5/0x2ee0 [ 369.081707][ T8089] do_syscall_64+0x57/0xf0 [ 369.081734][ T8089] ? clear_bhb_loop+0x50/0xa0 [ 369.081762][ T8089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 369.081789][ T8089] RIP: 0033:0x7f09ba59c799 [ 369.081819][ T8089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.081838][ T8089] RSP: 002b:00007f09bb42f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 369.081863][ T8089] RAX: ffffffffffffffda RBX: 00007f09ba815fa0 RCX: 00007f09ba59c799 [ 369.081881][ T8089] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 369.081897][ T8089] RBP: 00007f09bb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 369.081912][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.081927][ T8089] R13: 00007f09ba816038 R14: 00007f09ba815fa0 R15: 00007ffe2cf24818 [ 369.081947][ T8089] [ 369.169486][ T31] usb 1-1: device descriptor read/8, error -71 [ 369.261105][ T8098] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 369.267597][ T45] usb 3-1: device descriptor read/8, error -71 [ 369.322799][ T8102] fuse: Unknown parameter 'grou00000000000000000000' [ 369.410294][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 369.500440][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 369.521622][ T31] usb 1-1: device descriptor read/8, error -71 [ 369.560309][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 369.560339][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 369.567897][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 369.581709][ T10] usb 4-1: config 0 has no interface number 0 [ 369.587955][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 369.599688][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 369.602347][ T45] usb 3-1: device descriptor read/8, error -71 [ 369.609369][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.624872][ T10] usb 4-1: Product: syz [ 369.629367][ T10] usb 4-1: Manufacturer: syz [ 369.634069][ T10] usb 4-1: SerialNumber: syz [ 369.639432][ T10] usb 4-1: config 0 descriptor?? [ 369.644989][ T8094] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.652280][ T31] usb 1-1: device descriptor read/8, error -71 [ 369.741584][ T45] usb 3-1: device descriptor read/8, error -71 [ 369.760484][ T31] usb usb1-port1: unable to enumerate USB device [ 369.850463][ T45] usb usb3-port1: unable to enumerate USB device [ 369.857318][ T8094] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 370.217073][ T8111] overlayfs: failed to clone upperpath [ 370.237922][ T8113] 9pnet_fd: p9_fd_create_tcp (8113): problem connecting socket to 127.0.0.1 [ 370.333975][ T8121] fuse: Unknown parameter 'grou00000000000000000000' [ 371.378956][ T8145] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 371.389104][ T8145] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 371.400525][ T8145] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 371.440323][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 371.594132][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.610924][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 371.630672][ T9] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 371.650261][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 371.668729][ T9] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 371.687575][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.700262][ T9] usb 3-1: Product: syz [ 371.704518][ T9] usb 3-1: Manufacturer: syz [ 371.719574][ T9] usb 3-1: SerialNumber: syz [ 371.738794][ T8138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 371.790335][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 371.816916][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.826077][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.833801][ T8157] bridge_slave_0: entered allmulticast mode [ 371.842619][ T8157] bridge_slave_0: entered promiscuous mode [ 371.849740][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.857237][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.864901][ T8157] bridge_slave_1: entered allmulticast mode [ 371.871703][ T8157] bridge_slave_1: entered promiscuous mode [ 371.961442][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.969627][ T31] usb 1-1: config 0 has no interface number 0 [ 371.975929][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.987109][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.997194][ T31] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.012150][ T31] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 372.021398][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.031951][ T31] usb 1-1: config 0 descriptor?? [ 372.086112][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.093354][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.094338][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 372.101143][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.114496][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 372.118209][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.130175][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 372.146725][ T10] usb 4-1: USB disconnect, device number 86 [ 372.162529][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 372.168715][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 372.178396][ T9] usb 3-1: USB disconnect, device number 24 [ 372.197315][ T2281] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.205132][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.216047][ T2533] veth1_macvtap: left promiscuous mode [ 372.274456][ T2260] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.281853][ T2260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.293148][ T2281] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.300451][ T2281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.339183][ T8157] veth0_vlan: entered promiscuous mode [ 372.353240][ T8157] veth1_macvtap: entered promiscuous mode [ 372.487085][ T8171] fuse: Unknown parameter 'group_i00000000000000000000' [ 372.622661][ T2533] ------------[ cut here ]------------ [ 372.628391][ T2533] WARNING: CPU: 1 PID: 2533 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 372.638841][ T2533] Modules linked in: [ 372.642948][ T2533] CPU: 1 UID: 0 PID: 2533 Comm: kworker/u8:62 Not tainted syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 372.654956][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.665435][ T2533] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 372.670808][ T2533] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 372.677432][ T2533] Code: e8 61 09 db fc 4b 83 3c 3e 00 75 19 e8 15 e4 82 fc 49 81 ff f8 07 00 00 74 1b e8 07 e4 82 fc 49 83 c7 08 eb c9 e8 fc e3 82 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 372.687221][ T8174] netlink: 'syz.3.2757': attribute type 1 has an invalid length. [ 372.697721][ T2533] RSP: 0018:ffffc9001159fb90 EFLAGS: 00010293 [ 372.697754][ T2533] RAX: ffffffff8504bf54 RBX: ffff88812066d8c0 RCX: ffff88811967cc00 [ 372.719937][ T2533] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811c6680b8 [ 372.728238][ T2533] RBP: ffffc9001159fbb0 R08: ffffffff87d36887 R09: 1ffffffff0fa6d10 [ 372.728932][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 372.736982][ T2533] R10: dffffc0000000000 R11: fffffbfff0fa6d11 R12: dffffc0000000000 [ 372.753371][ T2533] R13: dffffc0000000000 R14: ffff88811c668000 R15: 00000000000000b8 [ 372.761791][ T2533] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 372.770576][ T36] audit: type=1400 audit(7095545355.022:8953): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1719]" dev="pipefs" ino=1719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 372.771283][ T2533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.801055][ T2533] CR2: 00007fda86da8ff8 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 372.809109][ T2533] Call Trace: [ 372.812608][ T2533] [ 372.815594][ T2533] cleanup_net+0x6c0/0xc90 [ 372.820378][ T2533] ? __cfi_cleanup_net+0x10/0x10 [ 372.825599][ T2533] ? __schedule+0x1357/0x1ea0 [ 372.830483][ T2533] ? kick_pool+0xb9/0x550 [ 372.834989][ T2533] process_scheduled_works+0x7d4/0x1020 [ 372.840672][ T2533] worker_thread+0xc70/0x10b0 [ 372.845434][ T2533] ? __cfi_try_to_wake_up+0x10/0x10 [ 372.850729][ T2533] kthread+0x2c6/0x370 [ 372.854855][ T2533] ? __cfi_worker_thread+0x10/0x10 [ 372.860065][ T2533] ? __cfi_kthread+0x10/0x10 [ 372.864781][ T2533] ret_from_fork+0x64/0xa0 [ 372.869283][ T2533] ? __cfi_kthread+0x10/0x10 [ 372.873987][ T2533] ret_from_fork_asm+0x1a/0x30 [ 372.878841][ T2533] [ 372.881936][ T2533] ---[ end trace 0000000000000000 ]--- [ 372.905712][ T31] uclogic 0003:28BD:0042.0019: failed retrieving string descriptor #100: -71 [ 372.914854][ T31] uclogic 0003:28BD:0042.0019: failed retrieving pen parameters: -71 [ 372.923379][ T31] uclogic 0003:28BD:0042.0019: pen probing failed: -71 [ 372.936821][ T31] uclogic 0003:28BD:0042.0019: failed probing parameters: -71 [ 372.944854][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.952092][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.959872][ T31] uclogic 0003:28BD:0042.0019: probe with driver uclogic failed with error -71 [ 372.978685][ T31] usb 1-1: USB disconnect, device number 17 [ 372.985413][ T2533] ------------[ cut here ]------------ [ 372.991079][ T2533] WARNING: CPU: 1 PID: 2533 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 373.001583][ T2533] Modules linked in: [ 373.005880][ T2533] CPU: 1 UID: 0 PID: 2533 Comm: kworker/u8:62 Tainted: G W syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 373.019615][ T2533] Tainted: [W]=WARN [ 373.023761][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.034243][ T2533] Workqueue: netns cleanup_net [ 373.039079][ T2533] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 373.045473][ T2533] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 c0 e3 82 fc 49 81 ff f8 07 00 00 74 1b e8 b2 e3 82 fc 49 83 c7 08 eb c5 e8 a7 e3 82 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 97 e3 82 fc 5b 41 5c 41 5e 41 [ 373.065233][ T2533] RSP: 0018:ffffc9001159fb90 EFLAGS: 00010293 [ 373.071567][ T2533] RAX: ffffffff8504bfa9 RBX: ffff88811c668800 RCX: ffff88811967cc00 [ 373.079588][ T2533] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811c668808 [ 373.087676][ T2533] RBP: ffffc9001159fbb0 R08: ffffffff87d36887 R09: 1ffffffff0fa6d10 [ 373.095778][ T2533] R10: dffffc0000000000 R11: fffffbfff0fa6d11 R12: dffffc0000000000 [ 373.103858][ T2533] R13: dffffc0000000000 R14: ffff88811c668000 R15: 0000000000000008 [ 373.111921][ T2533] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 373.120947][ T2533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.127763][ T2533] CR2: 00007fda86da8ff8 CR3: 000000010cbec000 CR4: 00000000003526b0 [ 373.135854][ T2533] Call Trace: [ 373.139178][ T2533] [ 373.142225][ T2533] cleanup_net+0x6c0/0xc90 [ 373.146810][ T2533] ? __cfi_cleanup_net+0x10/0x10 [ 373.151921][ T2533] ? __schedule+0x1357/0x1ea0 [ 373.156777][ T2533] ? kick_pool+0xb9/0x550 [ 373.161381][ T2533] process_scheduled_works+0x7d4/0x1020 [ 373.167071][ T2533] worker_thread+0xc70/0x10b0 [ 373.171939][ T2533] ? __cfi_try_to_wake_up+0x10/0x10 [ 373.177340][ T2533] kthread+0x2c6/0x370 [ 373.181529][ T2533] ? __cfi_worker_thread+0x10/0x10 [ 373.186706][ T2533] ? __cfi_kthread+0x10/0x10 [ 373.191417][ T2533] ret_from_fork+0x64/0xa0 [ 373.196154][ T2533] ? __cfi_kthread+0x10/0x10 [ 373.201095][ T2533] ret_from_fork_asm+0x1a/0x30 [ 373.206007][ T2533] [ 373.209068][ T2533] ---[ end trace 0000000000000000 ]--- [ 373.254329][ T2533] ------------[ cut here ]------------ [ 373.259875][ T2533] WARNING: CPU: 1 PID: 2533 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 373.269822][ T2533] Modules linked in: [ 373.273900][ T2533] CPU: 1 UID: 0 PID: 2533 Comm: kworker/u8:62 Tainted: G W syzkaller #0 67ca8ba3aa6540f07d3e691c9ce537bd6d0a0d70 [ 373.287438][ T2533] Tainted: [W]=WARN [ 373.291500][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.301864][ T2533] Workqueue: netns cleanup_net [ 373.306705][ T2533] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 373.312467][ T2533] Code: 3c 20 00 74 08 48 89 df e8 0f d3 f5 fc 48 8b 3b e8 f7 ff e0 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 cb b7 00 cc e8 b2 ad 9d fc <0f> 0b e9 b0 fd ff ff e8 a6 ad 9d fc 0f 0b e9 18 fe ff ff e8 9a ad [ 373.333304][ T2533] RSP: 0018:ffffc9001159fb70 EFLAGS: 00010293 [ 373.339516][ T2533] RAX: ffffffff84e9f59e RBX: ffff88812066d8c0 RCX: ffff88811967cc00 [ 373.347878][ T2533] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811967cc00 [ 373.355943][ T2533] RBP: ffffc9001159fb98 R08: ffffffff87d36887 R09: 1ffffffff0fa6d10 [ 373.364089][ T2533] R10: dffffc0000000000 R11: fffffbfff0fa6d11 R12: 1ffffffff0fa6a60 [ 373.372259][ T2533] R13: dffffc0000000000 R14: ffff88812066e4c0 R15: dffffc0000000000 [ 373.380487][ T2533] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 373.390162][ T2533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.396960][ T2533] CR2: 00007fda86da8ff8 CR3: 000000010cbec000 CR4: 00000000003526b0 [ 373.405378][ T2533] Call Trace: [ 373.408886][ T2533] [ 373.411910][ T2533] xfrm_net_exit+0x31/0x80 [ 373.416373][ T2533] cleanup_net+0x6c0/0xc90 [ 373.420880][ T2533] ? __cfi_cleanup_net+0x10/0x10 [ 373.426290][ T2533] ? __schedule+0x1357/0x1ea0 [ 373.431243][ T2533] ? kick_pool+0xb9/0x550 [ 373.436225][ T2533] process_scheduled_works+0x7d4/0x1020 [ 373.442313][ T2533] worker_thread+0xc70/0x10b0 [ 373.447169][ T2533] ? __cfi_try_to_wake_up+0x10/0x10 [ 373.452629][ T2533] kthread+0x2c6/0x370 [ 373.457083][ T2533] ? __cfi_worker_thread+0x10/0x10 [ 373.462316][ T2533] ? __cfi_kthread+0x10/0x10 [ 373.467187][ T2533] ret_from_fork+0x64/0xa0 [ 373.471698][ T2533] ? __cfi_kthread+0x10/0x10 [ 373.476422][ T2533] ret_from_fork_asm+0x1a/0x30 [ 373.481305][ T2533] [ 373.484374][ T2533] ---[ end trace 0000000000000000 ]--- [ 373.526748][ T8174] bridge0: port 3(syz_tun) entered disabled state [ 373.541893][ T8174] syz_tun (unregistering): left allmulticast mode [ 373.548384][ T8174] syz_tun (unregistering): left promiscuous mode [ 373.562233][ T8174] bridge0: port 3(syz_tun) entered disabled state [ 373.666794][ T2533] ip6gretap0: left allmulticast mode [ 373.672275][ T2533] ip6gretap0: left promiscuous mode [ 373.677701][ T2533] bridge0: port 3(ip6gretap0) entered disabled state [ 373.685235][ T2533] bridge_slave_1: left allmulticast mode [ 373.691297][ T2533] bridge_slave_1: left promiscuous mode [ 373.697175][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.705306][ T2533] bridge_slave_0: left allmulticast mode [ 373.711165][ T2533] bridge_slave_0: left promiscuous mode [ 373.717003][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.824738][ T2533] veth0_vlan: left promiscuous mode [ 374.164186][ T2533] bridge_slave_1: left allmulticast mode [ 374.170163][ T2533] bridge_slave_1: left promiscuous mode [ 374.176303][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.185228][ T2533] bridge_slave_0: left allmulticast mode [ 374.191316][ T2533] bridge_slave_0: left promiscuous mode [ 374.196960][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.204901][ T2533] bridge_slave_1: left allmulticast mode [ 374.211019][ T2533] bridge_slave_1: left promiscuous mode [ 374.216876][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.224607][ T2533] bridge_slave_0: left allmulticast mode [ 374.230496][ T2533] bridge_slave_0: left promiscuous mode [ 374.236154][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.244276][ T2533] bridge_slave_1: left allmulticast mode [ 374.250051][ T2533] bridge_slave_1: left promiscuous mode [ 374.255885][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.264028][ T2533] bridge_slave_0: left allmulticast mode [ 374.269864][ T2533] bridge_slave_0: left promiscuous mode [ 374.275894][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.603762][ T2533] tipc: Disabling bearer [ 374.609165][ T2533] tipc: Left network mode [ 374.617252][ T2533] veth1_macvtap: left promiscuous mode [ 374.622874][ T2533] veth0_vlan: left promiscuous mode [ 374.628539][ T2533] veth1_macvtap: left promiscuous mode [ 374.634423][ T2533] veth0_vlan: left promiscuous mode [ 374.640287][ T2533] veth1_macvtap: left promiscuous mode [ 374.645830][ T2533] veth0_vlan: left promiscuous mode