last executing test programs: 41.05599878s ago: executing program 0 (id=34): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000, 0x2000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) (async) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x88841, 0x0) (async) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x88841, 0x0) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r3}, [@verity={0x0, 0x888, 0x0, 0xa8, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '1024', 0x20, '512', 0x20, 0x61, 0x20, 0xfa, 0x20, 'sha512', 0x20, @hex4=[0x5, 0x64, 0x66, 0x35, 0x37, 0x37, 0x39, 0x61], 0x20, @none, ' 1 check_at_most_once'}}]}) (async) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x1e0, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r3}, [@verity={0x0, 0x888, 0x0, 0xa8, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '1024', 0x20, '512', 0x20, 0x61, 0x20, 0xfa, 0x20, 'sha512', 0x20, @hex4=[0x5, 0x64, 0x66, 0x35, 0x37, 0x37, 0x39, 0x61], 0x20, @none, ' 1 check_at_most_once'}}]}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x17) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x17) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x101501, 0x0) r6 = open(&(0x7f0000000b40)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b80)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0) ioctl$DM_LIST_DEVICES(r5, 0xc138fd02, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138}) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r5, 0xc138fd0e, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0xa1001, 0x0, 0x0, @by_dev={r8}, {0x2000, @stats_create={'@stats_create ', '8+16', 0x20, '8', ' 1 precise_timestamps'}}}) preadv2(r0, &(0x7f0000000780)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000680)=""/200, 0xc8}], 0x3, 0x80000000, 0x101, 0x11) 40.945912891s ago: executing program 0 (id=35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000200)='.\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000a081000418e00000004fcff", 0x58}], 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='fscontext', &(0x7f0000000280)='measure', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 40.936546342s ago: executing program 0 (id=36): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x8080, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r1, 0x8, 0xc, 0x7fffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r3, &(0x7f0000000540)='27', 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000580)=ANY=[], 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdir(&(0x7f0000000000)='./control\x00', 0x111) r4 = inotify_init1(0x800) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./control\x00', 0x80000100) inotify_add_watch(r4, &(0x7f0000000080)='./control\x00', 0xa4000960) rmdir(&(0x7f00000000c0)='./control\x00') r6 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0x80a0000, 0x5, 0x60, 0x7fffffff, 0x0, [{0x41, 0x9, 0x40, '\x00', 0xd7}, {0x51, 0x7, 0x5, '\x00', 0x9}, {0x72, 0xfb, 0x80, '\x00', 0x5}, {0x40, 0x0, 0xe9, '\x00', 0xd}, {0x1, 0x9c, 0x7f, '\x00', 0x30}, {0xfe, 0x4, 0x8, '\x00', 0x9}, {0xb, 0x0, 0x8, '\x00', 0x2}, {0x4, 0x2, 0x75}, {0x5, 0x0, 0x10, '\x00', 0x8}, {0x8, 0x18, 0x6, '\x00', 0xb0}, {0x4, 0x7, 0x7, '\x00', 0x2}, {0x5, 0x3, 0x65, '\x00', 0xfe}, {0x10, 0x9, 0x1, '\x00', 0x4}, {0x80, 0xaa, 0x8}, {0x7f, 0x1, 0x8, '\x00', 0x8}, {0x8, 0x4, 0x5, '\x00', 0xfb}, {0x3, 0x5, 0x80, '\x00', 0x2}, {0xe8, 0x6, 0x80, '\x00', 0x5}, {0x8, 0x8, 0x4, '\x00', 0xfd}, {0x8, 0x9, 0xa, '\x00', 0x47}, {0x9, 0xfe, 0x9}, {0x7, 0x6, 0x7, '\x00', 0x40}, {0x10, 0xff, 0x7, '\x00', 0x6}, {0x9, 0xbc, 0x3, '\x00', 0x1}]}}) 39.754252452s ago: executing program 0 (id=40): r0 = socket(0xa, 0x2400000001, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0xfffffffffffffffc) shutdown(0xffffffffffffffff, 0x1000000) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x2, 0x4) (async) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000240)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r3) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r3) (async) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) keyctl$setperm(0x5, r4, 0x80000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1f81, 0x14}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4044094) (async) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x30, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x0}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @desc1}, &(0x7f0000000e40)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r3) add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x2}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x38, 0x61, 0x31, 0x66, 0x65, 0x65, 0x32, 0x5b, 0x30, 0x64, 0x30, 0x36, 0x32, 0x38, 0x62, 0x57]}, &(0x7f0000000fc0)={0x0, "001182874455669d8899aabbccbde6ff001119aabbccddceef00112233445566778899aabbccddeee4e1400000000000000000000000000000008000", 0x34}, 0x48, r3) (async) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @auto=[0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x39, 0x30, 0x31, 0x61]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) (async) keyctl$unlink(0x9, r2, r3) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4621, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x50) 39.743346743s ago: executing program 0 (id=41): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 39.639749624s ago: executing program 0 (id=43): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="309f24894d6f8e261ecf9f58c64c403d", @ANYRESHEX=r1, @ANYBLOB="2c642d5680f0e706fa6add60312fc05d57f4d744946500"]) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) setns(0xc9, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000380)={0x0, 0x0}, 0x0) (rerun: 64) pipe2$9p(&(0x7f00000003c0)={0x0, 0x0}, 0x0) (async, rerun: 32) r5 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32) bind$pptp(r5, &(0x7f0000000500)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async, rerun: 32) connect$pptp(r5, &(0x7f0000000a40)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) (async, rerun: 32) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000ac0)=0x1) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000540)={'bridge0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}}) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async, rerun: 64) write$P9_RVERSION(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff0001000008003950323030302e75fe7efff71fd0"], 0x15) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000010008100000000000080000000060000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) timer_create(0xa, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 32) syslog(0x2, &(0x7f0000000200)=""/146, 0x92) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f00000006c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000700)={0x0, 0xc3, 0x80, 0x2, 0x35e}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x200, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x1, 0x3aa, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x40000, 0x4003bfff, 0x277}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0x1, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x183802, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f0000000a00)={'ip6erspan0\x00', @broadcast}) 37.49821051s ago: executing program 1 (id=64): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x40000, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="1c0000001a005f0014f9f40700090400810080ff0001400000000000", 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@empty, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x3ffffffb}, {}, 0x0, 0x0, 0xa, 0x3, 0x30, 0x40}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000004c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x410) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a100", 0x29}, {&(0x7f0000000200)="8bcceb216f624c06f5ff84087509000000006558f2", 0x15}], 0x2) syz_clone3(&(0x7f0000000040)={0x200800000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 37.410531329s ago: executing program 1 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480402, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2fdc) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r1, 0x8, 0x100000000, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x202, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000001c0)=0xf160, 0x4, 0x0) 37.400696091s ago: executing program 1 (id=67): rt_sigprocmask(0x1, &(0x7f0000000000)={[0x1000]}, 0x0, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x1000]}, 0x0, 0x8) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) 34.339901801s ago: executing program 1 (id=71): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001a00000128bd71000400000002000000"], 0x14}}, 0x880) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e21, 0x8, @private1, 0xfffffff7}}, 0x0, 0x0, 0x47, 0x0, "adbf6d986279f7164a4b9c9591dac7d8fd92277fe18a9d1f1bf4a5ea0cbae28507acefab7ec9a6cf244c3d107af08324563c11f6317b8a1f60198cef3c9123c6b2c9d173cfffb9a450892c101fcc7da9"}, 0xd8) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x58, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x6}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x2000c090) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/4, 0x4}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x101, &(0x7f0000003700)={0x77359400}) 34.339503211s ago: executing program 1 (id=72): r0 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x40000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='10', 0x2) openat(0xffffffffffffffff, 0x0, 0x200, 0x4) (async) unshare(0x62020680) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@wr_crn={0x67, 0x20, {0x0, 0x4}}, @enable_nested={0x12c, 0x18}], 0x38}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setsig(0x4203, r6, 0x80, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000240)) ptrace(0x10, r0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x9, 0x2001) (async) waitid(0x1, r0, 0x0, 0x4, 0x0) getpriority(0x1, r0) 33.895194936s ago: executing program 1 (id=74): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002) io_setup(0x7f, &(0x7f00000000c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) write$cgroup_devices(r2, 0x0, 0xfffffeff) r3 = eventfd(0x8e) io_submit(r1, 0x2, &(0x7f0000000740)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x6, r0, 0x0, 0x0, 0x8}]) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) 23.801723838s ago: executing program 32 (id=43): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="309f24894d6f8e261ecf9f58c64c403d", @ANYRESHEX=r1, @ANYBLOB="2c642d5680f0e706fa6add60312fc05d57f4d744946500"]) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) setns(0xc9, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000380)={0x0, 0x0}, 0x0) (rerun: 64) pipe2$9p(&(0x7f00000003c0)={0x0, 0x0}, 0x0) (async, rerun: 32) r5 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32) bind$pptp(r5, &(0x7f0000000500)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async, rerun: 32) connect$pptp(r5, &(0x7f0000000a40)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) (async, rerun: 32) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000ac0)=0x1) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000540)={'bridge0\x00', &(0x7f0000000580)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}}) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async, rerun: 64) write$P9_RVERSION(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1500000065ffff0001000008003950323030302e75fe7efff71fd0"], 0x15) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000010008100000000000080000000060000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) timer_create(0xa, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 32) syslog(0x2, &(0x7f0000000200)=""/146, 0x92) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f00000006c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000700)={0x0, 0xc3, 0x80, 0x2, 0x35e}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x200, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x1, 0x3aa, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x40000, 0x4003bfff, 0x277}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0x1, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x183802, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f0000000a00)={'ip6erspan0\x00', @broadcast}) 18.587687947s ago: executing program 33 (id=74): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002) io_setup(0x7f, &(0x7f00000000c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) write$cgroup_devices(r2, 0x0, 0xfffffeff) r3 = eventfd(0x8e) io_submit(r1, 0x2, &(0x7f0000000740)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x6, r0, 0x0, 0x0, 0x8}]) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) 5.361884957s ago: executing program 4 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r0, &(0x7f00000049c0)=[{&(0x7f00000001c0)="ff7a", 0x2}, {&(0x7f00000048c0)="ab75446c2fb77f603cbb6b9d24eeae3439caea9f876fe06a8c07ba909551e9034023270628715fb1f395f65eef434c0ba97f2898f36a4be30c2eb80e1f3f054564a19194e140fe98e02aa9d033fdd45e83260e6211714721c570b05a552ade9a17fd81fa3488c3d7ebc4b59eebe520d94eeb27385f0309f42387692998acc35a8ee663df0ef0dc8ba9e614e2f3f739b0144e576c3d9a4828c7518eb99663a370443ce3f806a9fbb7420fb89de49f6d62446e8fab3bd33a2f461e8626d44a423945a6301a205478a31c090c2475e7ac82ab4d3c6ecd495c23e16765c66c", 0xdd}], 0x2, 0x5, 0x4, 0xc) 5.33041276s ago: executing program 4 (id=245): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x6) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x5) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) 5.272093146s ago: executing program 4 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x52f4f5e883585527, 0x0, {[0x3, 0x3, 0x2, 0x83a, 0x6, 0x80d9, 0x1ac4924a, 0x80]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004cc0)=[@text32={0x20, &(0x7f0000001640)="d8df0f23b3fab9ce000000ac00ac000000ba000000000f1b8154fea900c121068032000f23ea0f01c9c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101224f019a", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.258778748s ago: executing program 4 (id=247): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040a306d00c000000008c597011927f79ea00a0020904000502030084000921000040010c1800090581034000001587"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000700), 0x82, 0x2) syz_usb_ep_write(r2, 0x81, 0xffffffffffffff6d, &(0x7f0000000740)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x10, 0x7fff0000}]}) r4 = syz_ublk_setup_io_uring(0x2c29, &(0x7f0000000380)={0x0, 0x2462, 0x1, 0x3, 0x356}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000500)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0x527, 0x0, 0x0, 0x1000, 0x962, 0x0, 0x0, 0x1b0}}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.631916742s ago: executing program 5 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bae000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0xa5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x4, 0x3723, 0x5, 0x3, 0x12, 0x1, 0xfffffffffffffffc, 0x9, 0x10000002, 0x8003, 0x80000001, 0x200000000, 0x4, 0x3, 0x800000008c], 0x1ffc, 0x3c4210}) r7 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.510365305s ago: executing program 5 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) pwritev2(r0, &(0x7f00000049c0)=[{&(0x7f00000001c0)="ff7a", 0x2}, {&(0x7f00000048c0)="ab75446c2fb77f603cbb6b9d24eeae3439caea9f876fe06a8c07ba909551e9034023270628715fb1f395f65eef434c0ba97f2898f36a4be30c2eb80e1f3f054564a19194e140fe98e02aa9d033fdd45e83260e6211714721c570b05a552ade9a17fd81fa3488c3d7ebc4b59eebe520d94eeb27385f0309f42387692998acc35a8ee663df0ef0dc8ba9e614e2f3f739b0144e576c3d9a4828c7518eb99663a370443ce3f806a9fbb7420fb89de49f6d62446e8fab3bd33a2f461e8626d44a423945a6301a205478a31c090c2475e7ac82ab4d3c6ecd495c23e16765c66c", 0xdd}], 0x2, 0x5, 0x4, 0xc) 3.491282817s ago: executing program 5 (id=263): syz_usb_connect$uac2(0x2, 0xab, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000401e0400304000010203010902990003010360f8080b0102010c200909040000000101200009240109000a290009102402060001010b3d020000000054081024020301020603a9f9ffffff0f09080904010000010220000904010101010220001024010308000500000004080000007f090501090002050674082501040c06000009040200000102200009040201010102200009058209400008081008250101037f040085deb9b66b2e469e024a3b61440b89f469cedbcfff34217667a5f05956d765eb6e621fbdb3d60379206776b3d508deabfd441561d2c94f13"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 3.490126757s ago: executing program 2 (id=264): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000180)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x48}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)=@x86={0x7, 0xb2, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x8, 0xf8, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@wr_crn={0x67, 0x20, {0x8, 0xc}}], 0x20}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000480)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1}, {}, {0x16}]}) 3.344448062s ago: executing program 2 (id=265): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="2c00000000010101000000000000000005000000180016400000000400000fff040000020000000100000002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8004) 3.343862662s ago: executing program 2 (id=266): syz_usb_connect$uac2(0x3, 0x8d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a0401010000090401000001022000090401010101022000102401010001010000000203000000000624020102100705010540"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000c40)='./trace\x00', &(0x7f0000000c80)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./trace/set_event\x00', 0x2, 0x0) syz_usb_connect$uac1(0x6, 0xc4, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0xff, 0x40, 0x7b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x12}, [@mixer_unit={0x8, 0x24, 0x4, 0x3, 0x5, "dd133d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x6, 0xcf, 0x5, 0x80}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x8, 0x6, 0x8, "66dd"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x1001}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x44, 0x4, 0xb, 0x80, "c06ed9ed77ba7828"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x9, "64aa", "73bb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xaf, 0x1a, 0x3, {0x7, 0x25, 0x1, 0x8, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7f, 0x3, '1', 'S/'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x40, 0x40, 0x8, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x43, 0x40, {0x7, 0x25, 0x1, 0xc, 0x5, 0xf}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x80, 0x6b, 0x3, 0x40, 0x4}, 0xc, &(0x7f0000000380)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x6, 0x1}]}, 0x1, [{0x14, &(0x7f00000003c0)=@string={0x14, 0x3, "e12c2063f621ebd862379d8e65de82e54303"}}]}) r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x1000000, &(0x7f0000000600)={[0x8]}, 0x0, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d0021000000000000000000070000000500000009000000090002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) sigaltstack(&(0x7f0000000200)={0x0, 0x80000002}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r2, &(0x7f0000000480)={0xb, 0x75, 0x2}, 0xb) syz_usb_connect$uac1(0x6, 0xcd, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x10, 0xa0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2c}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x5, 0xd6, 0x0, 0xff, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x404, 0x5, 0x4c, 0x6, 0x11, 0xc8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xd}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0xa2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xb, 0x6e}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0x6, 0xb, "41362399d1a6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x2105, 0x1a, 0xf}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x3, "49bbdc227bf0dd2f"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x1, 0xe, {0x7, 0x25, 0x1, 0x8, 0x5, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x2, 0x1, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x0, 0x2, 0x6, 0x6, 0xff, 0x2}, 0x6f, &(0x7f0000000900)={0x5, 0xf, 0x6f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0xff, 0x9}, @ptm_cap={0x3}, @generic={0x48, 0x10, 0x3, "bc93cf749d5d171d2c2ba06fff61581af2849fde882d35e042915da2293feeb5267a124331b1bd02ee35a052e1bdd8306fe1a3620e8b0ba656ac5ddaa6a016c42f371afb8a"}, @wireless={0xb, 0x10, 0x1, 0x12, 0x0, 0x2, 0x4, 0x3, 0x3}]}, 0x4, [{0xf1, &(0x7f0000000980)=@string={0xf1, 0x3, "7a22268d45880f42aef35156ee37d3fae230445533c6b853669460b4da7a388bfa6b94c5c23c2bc3c005978d7da2d3c45b67e8af5ec29933825cda20fe1089012be7889f8ce8ec99d2c5500b111f26391a825ff2f0f6459477fc65e73835c6a965023d752adab601c46924f2d40607d2a34a763a24cef2d3d2f34cd7f382cb6e25e664fe5bba6d284d12af8f7b3a44ca2f4f6e73d79f2b16d9824555c1408ac420dd077d04557f110a22cb3354a92cacd7b740b3a1633fc9f1e0e1deea86d0a06fb89f1ae0ade7e4f14f722e7a152ab9263ca239d17cdea59786c319c6f65629277c144cce9bde14c17297ebbca4ac"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x446}}, {0x4f, &(0x7f0000000ac0)=@string={0x4f, 0x3, "d023f31d84411a793b852b6edc9811103600b0d41270431c1fea679485d5efa9a19a11cb5a4febbf5f51211ba4f19915d3d5a81b8ef8d486b3b82ae3f6f0e6cc25b7170478b482af38493415cb"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x280a}}]}) io_setup(0x3, &(0x7f00000004c0)=0x0) pselect6(0x40, &(0x7f0000000640)={0xfffffffffffffffc, 0x4, 0x3, 0x3, 0x2, 0x7, 0x40, 0xfffffffffffffffc}, &(0x7f0000000680)={0x0, 0x4, 0x18, 0x4, 0x1000, 0x7, 0x8, 0x3}, &(0x7f00000006c0)={0x8, 0x7, 0x9, 0x7, 0x8, 0x2, 0x6, 0x49dbee2d}, &(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000780)={&(0x7f0000000740)={[0x8]}, 0x8}) io_destroy(r3) io_submit(r3, 0x2, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000580)={0x0, 0x0, 0x9, 0x1, 0x0, r2, &(0x7f00000005c0)='m', 0xfffffdfc}]) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac2(0x3, 0x8d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a0401010000090401000001022000090401010101022000102401010001010000000203000000000624020102100705010540"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000c40)='./trace\x00', &(0x7f0000000c80)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./trace/set_event\x00', 0x2, 0x0) (async) syz_usb_connect$uac1(0x6, 0xc4, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0xff, 0x40, 0x7b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x12}, [@mixer_unit={0x8, 0x24, 0x4, 0x3, 0x5, "dd133d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x6, 0xcf, 0x5, 0x80}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x8, 0x6, 0x8, "66dd"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x1001}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x44, 0x4, 0xb, 0x80, "c06ed9ed77ba7828"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x9, "64aa", "73bb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xaf, 0x1a, 0x3, {0x7, 0x25, 0x1, 0x8, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7f, 0x3, '1', 'S/'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x40, 0x40, 0x8, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x43, 0x40, {0x7, 0x25, 0x1, 0xc, 0x5, 0xf}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x80, 0x6b, 0x3, 0x40, 0x4}, 0xc, &(0x7f0000000380)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x6, 0x1}]}, 0x1, [{0x14, &(0x7f00000003c0)=@string={0x14, 0x3, "e12c2063f621ebd862379d8e65de82e54303"}}]}) (async) socket$netlink(0x10, 0x3, 0x0) (async) rt_sigprocmask(0x1000000, &(0x7f0000000600)={[0x8]}, 0x0, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d0021000000000000000000070000000500000009000000090002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) (async) sigaltstack(&(0x7f0000000200)={0x0, 0x80000002}, 0x0) (async) pipe(&(0x7f0000000440)) (async) write$P9_RREAD(r2, &(0x7f0000000480)={0xb, 0x75, 0x2}, 0xb) (async) syz_usb_connect$uac1(0x6, 0xcd, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x10, 0xa0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2c}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x5, 0xd6, 0x0, 0xff, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x404, 0x5, 0x4c, 0x6, 0x11, 0xc8}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xd}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0xa2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xb, 0x6e}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0x6, 0xb, "41362399d1a6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x2105, 0x1a, 0xf}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x3, "49bbdc227bf0dd2f"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x1, 0xe, {0x7, 0x25, 0x1, 0x8, 0x5, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x2, 0x1, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x0, 0x2, 0x6, 0x6, 0xff, 0x2}, 0x6f, &(0x7f0000000900)={0x5, 0xf, 0x6f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0xff, 0x9}, @ptm_cap={0x3}, @generic={0x48, 0x10, 0x3, "bc93cf749d5d171d2c2ba06fff61581af2849fde882d35e042915da2293feeb5267a124331b1bd02ee35a052e1bdd8306fe1a3620e8b0ba656ac5ddaa6a016c42f371afb8a"}, @wireless={0xb, 0x10, 0x1, 0x12, 0x0, 0x2, 0x4, 0x3, 0x3}]}, 0x4, [{0xf1, &(0x7f0000000980)=@string={0xf1, 0x3, "7a22268d45880f42aef35156ee37d3fae230445533c6b853669460b4da7a388bfa6b94c5c23c2bc3c005978d7da2d3c45b67e8af5ec29933825cda20fe1089012be7889f8ce8ec99d2c5500b111f26391a825ff2f0f6459477fc65e73835c6a965023d752adab601c46924f2d40607d2a34a763a24cef2d3d2f34cd7f382cb6e25e664fe5bba6d284d12af8f7b3a44ca2f4f6e73d79f2b16d9824555c1408ac420dd077d04557f110a22cb3354a92cacd7b740b3a1633fc9f1e0e1deea86d0a06fb89f1ae0ade7e4f14f722e7a152ab9263ca239d17cdea59786c319c6f65629277c144cce9bde14c17297ebbca4ac"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x446}}, {0x4f, &(0x7f0000000ac0)=@string={0x4f, 0x3, "d023f31d84411a793b852b6edc9811103600b0d41270431c1fea679485d5efa9a19a11cb5a4febbf5f51211ba4f19915d3d5a81b8ef8d486b3b82ae3f6f0e6cc25b7170478b482af38493415cb"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) io_setup(0x3, &(0x7f00000004c0)) (async) pselect6(0x40, &(0x7f0000000640)={0xfffffffffffffffc, 0x4, 0x3, 0x3, 0x2, 0x7, 0x40, 0xfffffffffffffffc}, &(0x7f0000000680)={0x0, 0x4, 0x18, 0x4, 0x1000, 0x7, 0x8, 0x3}, &(0x7f00000006c0)={0x8, 0x7, 0x9, 0x7, 0x8, 0x2, 0x6, 0x49dbee2d}, &(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000780)={&(0x7f0000000740)={[0x8]}, 0x8}) (async) io_destroy(r3) (async) io_submit(r3, 0x2, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000580)={0x0, 0x0, 0x9, 0x1, 0x0, r2, &(0x7f00000005c0)='m', 0xfffffdfc}]) (async) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) 2.252016062s ago: executing program 5 (id=273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) mount(0x0, &(0x7f0000000140)='myproc\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='myproc/iomem\x00', 0x0, 0x0) read(r4, &(0x7f0000000240), 0xfa0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r6, &(0x7f0000000840)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) ioctl$FIOCLEX(r1, 0x5451) symlinkat(&(0x7f00000008c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) socket(0x1e, 0x4, 0x0) syz_ublk_setup_queues(r7, r2, &(0x7f00000002c0)={0x0, 0x3a98, 0x1000, 0xffffffff, 0x2f6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x0, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb66c, 0x20000, 0x3, 0x20c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52ef, 0x2000, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x5, 0xffffbff7, 0x0, r7}}], 0x1, 0x0, 0x0) 2.236124644s ago: executing program 5 (id=274): pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000) rename(&(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00') pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f00000006c0)='/dev/kvm\x00', 0x880, &(0x7f0000000080)={@align=0x1, {0x0, 0x2, 0x10000, 0x4}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}, {[0x3, 0x248, 0x3, 0x69b]}, 0x9, 0xc8, &(0x7f0000000300)=""/200}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) setns(r1, 0x4000000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@rdmsr={0x66, 0x18, {0x40000093}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040961b090000000000000109022400010000190109040008020300000009211400000122180009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0022180000000a02dee81afb3a6e889256124f046ceb7ee02222"], 0x0}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000280)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ef7c9db2ade4a827b46b3e8e0a2c29a41f32387f6f4bf8bd13442b7c205d13c6784eb6655002ec4696fcd778f318a38ca4745972c524caf68e3c188ef5b83db9c8d6b7e3c9f5b69761135310c886b04b6e7de088d906980aade2c81e91e7f1b826d3f34281634fa59a436a8ca4a247bd72d5355e6c5fa638a8603b817cd2e9321f", @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40054) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.07093118s ago: executing program 2 (id=277): mount$fuse(0x0, 0x0, 0x0, 0x2ac809, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x0, {0x11, 0x3, 0x5, 0xb2, 0xff}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, &(0x7f00000001c0)={0xc9, 0xc, r1, 0x1, 0xd, 0x6, @broadcast}, 0x14) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000240)) prlimit64(0x0, 0xe, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x6, 0x414401) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000200)=0x1) syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0x8200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write(r4, &(0x7f0000004a00)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) close_range(r3, r3, 0x2) 2.003563038s ago: executing program 2 (id=278): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0xa, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x40, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x1, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x80000001, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x9, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1003]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) clock_getres(0xfffffffffffffff1, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x1000000, 0x112, r1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {0x7ff, 0x7, 0x0, 0x5}, 0x14, [0x0, 0x9b, 0x7, 0x7, 0x7, 0x1, 0x400, 0x8, 0x7, 0x6, 0x464c, 0xe, 0xfffffff9, 0x7, 0x40, 0x7, 0x7, 0x1, 0x3, 0x8, 0x4, 0x5, 0xad, 0x0, 0x8001, 0x7ff, 0x3ff, 0x3, 0xffffffff, 0x5, 0x80000000, 0x9, 0x8, 0x7, 0x3, 0x6, 0x6, 0x1, 0x3, 0x1f4, 0x5, 0x9, 0x7, 0x2, 0x5964, 0x8, 0x9, 0xcc, 0x9, 0x4, 0x3, 0x9, 0x7, 0x7, 0x3, 0x7fff, 0x2, 0x1, 0x7, 0x2, 0x6, 0x7, 0x6, 0x80000001], [0x78, 0xd, 0xfffffeff, 0x62d, 0x8000, 0x8001, 0x4, 0x0, 0x4, 0x4, 0x4, 0x40, 0x0, 0x10000, 0x400, 0x2, 0x6, 0x2, 0x8001, 0xfffffffa, 0xae, 0x7fff, 0xffff, 0x3, 0x1, 0x6, 0x4, 0x5, 0x101, 0x4, 0x40, 0x1, 0x5, 0x80000000, 0x5, 0x3, 0x7, 0x80000000, 0xfffffffe, 0x1, 0x80000001, 0x530, 0x200, 0x7, 0x1, 0x7fff, 0x0, 0x4, 0x3, 0xfffff917, 0x80000000, 0xf29, 0x0, 0x4, 0x7, 0x9, 0x50d, 0x6, 0x0, 0x6, 0x5, 0xffffff7f, 0x357762bd, 0x4], [0x1000, 0x0, 0x8, 0x5a, 0xe, 0x9, 0x80000000, 0xb67e, 0x18e, 0x4, 0x8, 0x3, 0x2, 0xc, 0x0, 0xb, 0x4, 0xbbc0, 0x3, 0x5, 0x66df70cb, 0xde2, 0x7e9, 0x8c5, 0x81, 0xc, 0x8001, 0x7, 0x8, 0x5, 0x4, 0x0, 0x3, 0x1710, 0x10000, 0x5, 0x7f, 0x0, 0x10, 0x800, 0x9, 0x83, 0x9, 0x3, 0x0, 0x6, 0xf, 0x1, 0x7, 0x800, 0x1d, 0x1, 0xf5, 0x0, 0x80000000, 0x1ff, 0x4, 0x40e947b3, 0x9, 0x2, 0xc, 0x2, 0x1000, 0xffffffff], [0x7, 0x7fff, 0x0, 0x1add, 0x40, 0x3, 0x7f, 0x80000001, 0x5, 0xffff, 0x0, 0x8001, 0x7, 0x80000000, 0x8001, 0xfffff801, 0x6, 0xffff, 0x8001, 0x9, 0xfff, 0x3, 0x3, 0x7, 0x476, 0x7, 0x9b, 0x2, 0x800, 0x4, 0xfffffffd, 0x6, 0x9, 0x5, 0xfff, 0xfffff800, 0x0, 0x4, 0x3, 0x3, 0xfffffff9, 0x5a3f6c98, 0x8, 0x4, 0x4, 0x7fff, 0x101, 0x4, 0xe, 0x4, 0x10000, 0x7, 0x2, 0x5, 0xc622, 0x5391, 0x3, 0xc608, 0x3, 0x8, 0x25, 0x7, 0xcd, 0xfffffff9]}, 0x45c) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0xa, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x40, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x1, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x80000001, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x9, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x1003]}, 0x45c) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) (async) clock_getres(0xfffffffffffffff1, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x1000000, 0x112, r1, 0x0) (async) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {0x7ff, 0x7, 0x0, 0x5}, 0x14, [0x0, 0x9b, 0x7, 0x7, 0x7, 0x1, 0x400, 0x8, 0x7, 0x6, 0x464c, 0xe, 0xfffffff9, 0x7, 0x40, 0x7, 0x7, 0x1, 0x3, 0x8, 0x4, 0x5, 0xad, 0x0, 0x8001, 0x7ff, 0x3ff, 0x3, 0xffffffff, 0x5, 0x80000000, 0x9, 0x8, 0x7, 0x3, 0x6, 0x6, 0x1, 0x3, 0x1f4, 0x5, 0x9, 0x7, 0x2, 0x5964, 0x8, 0x9, 0xcc, 0x9, 0x4, 0x3, 0x9, 0x7, 0x7, 0x3, 0x7fff, 0x2, 0x1, 0x7, 0x2, 0x6, 0x7, 0x6, 0x80000001], [0x78, 0xd, 0xfffffeff, 0x62d, 0x8000, 0x8001, 0x4, 0x0, 0x4, 0x4, 0x4, 0x40, 0x0, 0x10000, 0x400, 0x2, 0x6, 0x2, 0x8001, 0xfffffffa, 0xae, 0x7fff, 0xffff, 0x3, 0x1, 0x6, 0x4, 0x5, 0x101, 0x4, 0x40, 0x1, 0x5, 0x80000000, 0x5, 0x3, 0x7, 0x80000000, 0xfffffffe, 0x1, 0x80000001, 0x530, 0x200, 0x7, 0x1, 0x7fff, 0x0, 0x4, 0x3, 0xfffff917, 0x80000000, 0xf29, 0x0, 0x4, 0x7, 0x9, 0x50d, 0x6, 0x0, 0x6, 0x5, 0xffffff7f, 0x357762bd, 0x4], [0x1000, 0x0, 0x8, 0x5a, 0xe, 0x9, 0x80000000, 0xb67e, 0x18e, 0x4, 0x8, 0x3, 0x2, 0xc, 0x0, 0xb, 0x4, 0xbbc0, 0x3, 0x5, 0x66df70cb, 0xde2, 0x7e9, 0x8c5, 0x81, 0xc, 0x8001, 0x7, 0x8, 0x5, 0x4, 0x0, 0x3, 0x1710, 0x10000, 0x5, 0x7f, 0x0, 0x10, 0x800, 0x9, 0x83, 0x9, 0x3, 0x0, 0x6, 0xf, 0x1, 0x7, 0x800, 0x1d, 0x1, 0xf5, 0x0, 0x80000000, 0x1ff, 0x4, 0x40e947b3, 0x9, 0x2, 0xc, 0x2, 0x1000, 0xffffffff], [0x7, 0x7fff, 0x0, 0x1add, 0x40, 0x3, 0x7f, 0x80000001, 0x5, 0xffff, 0x0, 0x8001, 0x7, 0x80000000, 0x8001, 0xfffff801, 0x6, 0xffff, 0x8001, 0x9, 0xfff, 0x3, 0x3, 0x7, 0x476, 0x7, 0x9b, 0x2, 0x800, 0x4, 0xfffffffd, 0x6, 0x9, 0x5, 0xfff, 0xfffff800, 0x0, 0x4, 0x3, 0x3, 0xfffffff9, 0x5a3f6c98, 0x8, 0x4, 0x4, 0x7fff, 0x101, 0x4, 0xe, 0x4, 0x10000, 0x7, 0x2, 0x5, 0xc622, 0x5391, 0x3, 0xc608, 0x3, 0x8, 0x25, 0x7, 0xcd, 0xfffffff9]}, 0x45c) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) 1.939928384s ago: executing program 2 (id=279): connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0xe24, 0x0, @empty, 0x80002}, 0x1c) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f00000001c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x8000}) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x10, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x8b, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x0, 0x7, 0x2, 0x0, 0x8}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x1, [{0x23, &(0x7f0000000440)=@string={0x23, 0x3, "60c9b01389d4ab890d59c0ed300863c0ad0d8f3f779d16fd851766af0be73b34d5"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x40, 0x4, 0xe8, {0xe8, 0x21, "24cb2a37512076677a6441fe4b5cceb8c6be5e73a745c29535a6a3a529be68861db7eab5c99fb7052115e42185139fd71332ba10b829dfc13eea3d1bddcc1312aca0085d0b24278aa7ae52fdaafa01017234ac2cade2214c671ac70627fc7b26c6b5e9f6b5dcf6dc4da995f9db63318cc6ab6cbf5b00ca059086c9b3dc185ffc51944a43609afb0636cead1d5c1060b4b58bb7bf35fbcdfca5ead9aaddb11cdeda35a4a5da8321822e311256fe802b779cc82bb63242af4bd4182d25504ebc30368dba2b385851570c1b771c49446cc3e74f0244fdb5dbe93fda22b98970bbcdae62ed15f089"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000800)={0x34, &(0x7f0000000640)={0x40, 0x3, 0x48, "9a1bf2063a5e25f196a8d5b4abada7cf642e202e52ace6b3fc8342134337b3ed5891d6c03d9d81680bd9c58d3570b8f62cdc3dff6a8a9dcf9bda6cb80f6855e6cbd0dc096d68649c"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x28, {0x26, "eb9926c0442ca2de1e4dd65e32f8387ef05cab20c14cf561055cda24e8feb2f759b32a2436b5"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0xe}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x3}}) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ff9000/0x6000)=nil, 0x6000}, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000140)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") 1.570645541s ago: executing program 3 (id=281): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18) 1.510783877s ago: executing program 3 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket(0x1a, 0xa, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1.509225948s ago: executing program 3 (id=283): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x28201, 0xeb) (async) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='8', 0x1, 0x80}]) (async) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x3, [{r0, 0x0, 0x0, 0x10000}, {r0, 0x0, 0x8000, 0x1000000}, {r0, 0x0, 0x0, 0xfffff000}]}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xd, @multicast1}, {0x2, 0x4e22, @remote}, {0x2, 0x5e24, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x47}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4ea9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, 0x1c) (async) sendmsg(r3, &(0x7f0000000280)={0x0, 0x9584, &(0x7f00000002c0)=[{&(0x7f0000000300)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) fchmod(r2, 0x10d) 1.469631161s ago: executing program 3 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x7e) (async, rerun: 64) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 64) clock_gettime(0x3, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)='n', 0x1}], 0x1}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000004c0)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x304}, "608d77a9b70d876f", "8f0abac5c77c7ccc0049c8d1a83ef37b", "8cbe0bfe", "f06432a835b478c3"}, 0x28) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r3) (async, rerun: 32) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) (async, rerun: 32) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x0, 0x21) write(r0, &(0x7f00000000c0)="a5eec01fa3b5a64d46d4bc1d891911808b01fe8264c3805926ec9f12503f76f2995ab0d29f16c352fdd11fbc2679c432d23af0976173d0da597c00e3b49d158979091a0d1cbf297650e2f2ed2164bcbfc93131555b0896f415a583878fc1bb1449bb2dc830d24febbb0751fe86", 0x6d) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x40086607, 0x0) 1.380476511s ago: executing program 4 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac3(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff023000090402010101023000090506"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000dc0)="660f3881a000006766c744240085e5ee666766c74424029891e1486766c744240600000000670f0114240f8f0000f20f00d80f01c5ae0f9bdf66b8000001000f23d80f21f86635c00000900f23f8f3d2911500baf80c66b85602b68c66efbafc0cb00dee", 0x64}], 0x1, 0x1c, &(0x7f00000003c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 572.052292ms ago: executing program 3 (id=286): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000020ac05490200000000000109022d00010000900409040002120300000009210700400122180009058103000000140f0905020900"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r1 = open(&(0x7f0000000640)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000680)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000007c0)='./file1\x00', 0x4) renameat2(r1, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000880)='./file0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0xc8442, 0x80) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x0, 0x1, 0xd5, {0xd5, 0x21, "f91c481a3d6c578d709915423148a099f2b2fda1ca9307fdadf2ee5ceb2b96feafcf51b54ee59089ef01f1dfc695a6c6102dd9ffb649bd8e46e577d4caa6af91c795799b1417babfb49f2492b2ab55fe8ce9dc9d63d2cabff0dfffaacf7ea334489549acc21c745bc2f1e62a94868d6dc3d3b339b0d036e1beac4e612756fba5c877d9c7a47106a9173f7eb1519e230b3914534ae07acaa6a1e6b2848785622046427bad57fc5fbb84313d56c78cf095253e1849c208fd874202950ea9b3d8a50b1739db1b00"/211}}, &(0x7f00000008c0)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "173f2e86d601afdcd8ebb9be0d4456e78b822b1d6bf6b1fb0fc73a567f90c5c8912dcfcd36916e05eeac0d1e07908e0109c828a20300b96fcb1b32b5ecbe55b2ffd0785ec8b16a676ed6"}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x20, 0xc, 0x6d, "46cf372527559ceca303ae4f70d26259be369e8b98d71aba4a77f56971d1ed72fb1429256a997ac3bc729dbd7d5a01c07b2c3db0b555cad5c0507d4412e816b408b3efe7620210bd00a75a2bd25343b239bb3a4371652e36f37fc58ba551a9687b790632e523cb87d03bab97de"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540), &(0x7f0000000580)={0x40, 0x5, 0x5, "55c2a249be"}}) r6 = syz_usb_connect(0x3, 0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_usb_ep_write(r6, 0x81, 0x8, &(0x7f0000000380)="a101000000000000") syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x12, &(0x7f0000000940)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8ed82a3", {0x3, 0x107, 0x0, 0x1, 0x6, 0x2, 0x8}}) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x31857717b80f31eb}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) write$cgroup_int(r3, &(0x7f0000000080)=0x100000000, 0x12) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xfffffffffffffee8, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 500.79009ms ago: executing program 5 (id=287): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a00209041005020300840009210000400122180009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040a306d00c4b000000000109022400010000a00209041005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$hiddev(&(0x7f0000000480), 0xa, 0x62080) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000005c80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000005c00)=ANY=[@ANYBLOB="20010800000044d794967e"], 0x0}) 57.501455ms ago: executing program 4 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x1000, 0x36000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x3000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000002000010002000000000000000200000008001600", @ANYRES32=0x0, @ANYBLOB="2c00168014"], 0x48}, 0x1, 0x0, 0x0, 0x40940}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x0, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x1000, 0x36000, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x3000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000002000010002000000000000000200000008001600", @ANYRES32=0x0, @ANYBLOB="2c00168014"], 0x48}, 0x1, 0x0, 0x0, 0x40940}, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 0s ago: executing program 3 (id=289): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@perr={0x84, 0x22, {0xfd, 0x2, [{{0x0, 0x1}, @broadcast, 0x401, @value, 0x31}, {{}, @device_a, 0xa4ad, @void, 0x1f}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020028bd7000fedbf74cc2327fe06bf87f00090000001700000080000000060095007f00000000000000c8716afbbc512c327b9e12edf0243bceadbf526c95afc162ac22c149d0bd2586bfdbe8bd90fa6fac39eb5254f42728b59536d47b28b3629f568e96cec803b59b846c3ca2f247f16286ab384eb2dbe6033f3d8f8b266f9b87bc775fb1c01bef07ad2d5e64049f540035d94e340caae9a6fed879996ea8527491f7b3d8b045731f3aa415"], 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x30, r5, 0x8de13c6b70ae92d3, 0x41003, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x50}}}}, [@NL80211_ATTR_TID_CONFIG={0x7, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.343713][ T36] audit: type=1400 audit(1793564098.980:63): avc: denied { siginh } for pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 20.282152][ T36] audit: type=1400 audit(1793564105.930:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.283439][ T286] cgroup: Unknown subsys name 'net' [ 20.306585][ T36] audit: type=1400 audit(1793564105.930:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.334901][ T36] audit: type=1400 audit(1793564105.990:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.335052][ T286] cgroup: Unknown subsys name 'devices' [ 20.456149][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.461868][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.554450][ T36] audit: type=1400 audit(1793564106.210:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.578285][ T36] audit: type=1400 audit(1793564106.210:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.603298][ T36] audit: type=1400 audit(1793564106.210:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.613164][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.636100][ T36] audit: type=1400 audit(1793564106.290:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.661756][ T36] audit: type=1400 audit(1793564106.290:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.672209][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.687810][ T36] audit: type=1400 audit(1793564106.330:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.721903][ T36] audit: type=1400 audit(1793564106.330:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.520932][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.528081][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.535454][ T293] bridge_slave_0: entered allmulticast mode [ 21.541748][ T293] bridge_slave_0: entered promiscuous mode [ 21.549446][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.556997][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.564189][ T293] bridge_slave_1: entered allmulticast mode [ 21.570358][ T293] bridge_slave_1: entered promiscuous mode [ 21.640863][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.648004][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.655785][ T294] bridge_slave_0: entered allmulticast mode [ 21.662078][ T294] bridge_slave_0: entered promiscuous mode [ 21.669642][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.676900][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.683987][ T294] bridge_slave_1: entered allmulticast mode [ 21.690313][ T294] bridge_slave_1: entered promiscuous mode [ 21.757598][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.764871][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.772306][ T296] bridge_slave_0: entered allmulticast mode [ 21.778618][ T296] bridge_slave_0: entered promiscuous mode [ 21.785022][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.792164][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.799293][ T295] bridge_slave_0: entered allmulticast mode [ 21.806134][ T295] bridge_slave_0: entered promiscuous mode [ 21.813961][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.821038][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.828538][ T295] bridge_slave_1: entered allmulticast mode [ 21.834815][ T295] bridge_slave_1: entered promiscuous mode [ 21.845939][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.852989][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.860667][ T296] bridge_slave_1: entered allmulticast mode [ 21.866839][ T296] bridge_slave_1: entered promiscuous mode [ 21.950174][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.957246][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.964587][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.971600][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.990382][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.997623][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.005074][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.012270][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.037530][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.044607][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.051857][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.058924][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.085149][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.092443][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.101121][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.108531][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.116616][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.123904][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.134405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.141636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.152337][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.159507][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.185553][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.192619][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.203839][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.210950][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.241459][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.248522][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.256571][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.263645][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.277039][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.284133][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.300169][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.307240][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.316216][ T293] veth0_vlan: entered promiscuous mode [ 22.351735][ T294] veth0_vlan: entered promiscuous mode [ 22.367905][ T295] veth0_vlan: entered promiscuous mode [ 22.375119][ T296] veth0_vlan: entered promiscuous mode [ 22.385969][ T293] veth1_macvtap: entered promiscuous mode [ 22.397920][ T295] veth1_macvtap: entered promiscuous mode [ 22.410189][ T294] veth1_macvtap: entered promiscuous mode [ 22.434323][ T296] veth1_macvtap: entered promiscuous mode [ 22.461136][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.517378][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.578408][ T320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.614377][ T315] usb usb1: usbfs: process 315 (syz.2.3) did not claim interface 0 before use [ 22.631950][ T320] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 22.641247][ T320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 22.804165][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.954363][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 22.960316][ T339] capability: warning: `syz.2.9' uses deprecated v2 capabilities in a way that may be insecure [ 22.971883][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.983435][ T339] overlay: ./bus is not a directory [ 22.988889][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 22.999148][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 23.010508][ T339] overlay: ./bus is not a directory [ 23.016617][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.030987][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.040342][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 23.049370][ T31] usb 2-1: SerialNumber: syz [ 23.057631][ T323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.065075][ T323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.072937][ T31] hub 2-1:1.0: bad descriptor, ignoring hub [ 23.079591][ T31] hub 2-1:1.0: probe with driver hub failed with error -5 [ 23.104914][ T343] kvm_intel: kvm [340]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 23.115897][ T343] kvm: kvm [340]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 23.127718][ T343] kvm: kvm [340]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 23.276717][ T323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.287561][ T323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.698636][ T31] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 23.955449][ C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68! [ 24.004178][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.135389][ T380] overlayfs: conflicting options: nfs_export=on,index=off [ 24.165352][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 24.173848][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.187961][ T31] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 24.197902][ T31] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 24.206633][ T31] usb 3-1: Product: syz [ 24.210961][ T31] usb 3-1: Manufacturer: syz [ 24.218864][ T31] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 24.218960][ T381] usb 2-1: USB disconnect, device number 2 [ 24.231934][ T381] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 24.419029][ T31] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 24.431078][ T31] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 24.434152][ T310] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.440121][ T31] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 24.458258][ T31] usb 3-1: USB disconnect, device number 2 [ 24.594928][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 24.603509][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.614905][ T310] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 24.624038][ T310] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 24.632420][ T310] usb 1-1: Product: syz [ 24.636829][ T310] usb 1-1: Manufacturer: syz [ 24.644060][ T310] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 24.758828][ T416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16'. [ 24.844183][ T310] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 24.853866][ T310] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 24.862960][ T310] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 24.874681][ T310] usb 1-1: USB disconnect, device number 2 [ 25.012243][ T433] Zero length message leads to an empty skb [ 25.362584][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 25.362600][ T36] audit: type=1400 audit(1793564111.010:174): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 25.476239][ T36] audit: type=1400 audit(1793564111.130:175): avc: denied { ioctl } for pid=448 comm="syz.3.26" path="socket:[4837]" dev="sockfs" ino=4837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.523402][ T36] audit: type=1400 audit(1793564111.170:176): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 25.559862][ T36] audit: type=1400 audit(1793564111.210:177): avc: denied { read write } for pid=454 comm="syz.2.28" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 25.560142][ T455] netlink: 'syz.2.28': attribute type 12 has an invalid length. [ 25.584338][ T36] audit: type=1400 audit(1793564111.210:178): avc: denied { open } for pid=454 comm="syz.2.28" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 25.595882][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.626419][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.637962][ T456] UHID_CREATE from different security context by process 25 (syz.2.28), this is not allowed. [ 25.650791][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.658949][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.663295][ T36] audit: type=1400 audit(1793564111.320:179): avc: denied { read } for pid=458 comm="syz.3.29" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.666726][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.690783][ T36] audit: type=1400 audit(1793564111.320:180): avc: denied { open } for pid=458 comm="syz.3.29" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.706774][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.721178][ T36] audit: type=1400 audit(1793564111.350:181): avc: denied { ioctl } for pid=458 comm="syz.3.29" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.731122][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.758379][ T36] audit: type=1400 audit(1793564111.360:182): avc: denied { read write } for pid=458 comm="syz.3.29" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.765024][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.793116][ T36] audit: type=1400 audit(1793564111.360:183): avc: denied { open } for pid=458 comm="syz.3.29" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.800789][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.848883][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.853025][ T472] process 'syz.1.32' launched './file0' with NULL argv: empty string added [ 25.857547][ T310] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 25.873827][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.881811][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.891485][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.899330][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.907021][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.914572][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.922234][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.930343][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.937837][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.945841][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.945963][ T502] random: crng reseeded on system resumption [ 25.953741][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.967610][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.979382][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.988728][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.996365][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.003766][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.011347][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.018890][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.026893][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.034583][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.042534][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.050026][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.051106][ T511] capability: warning: `syz.0.35' uses 32-bit capabilities (legacy support in use) [ 26.057668][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 26.069716][ T511] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 26.072829][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.088681][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.098180][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.104716][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.105906][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.115145][ T513] FAULT_INJECTION: forcing a failure. [ 26.115145][ T513] name failslab, interval 1, probability 0, space 0, times 1 [ 26.121039][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.134201][ T513] CPU: 1 UID: 0 PID: 513 Comm: syz.0.36 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 26.134230][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.134247][ T513] Call Trace: [ 26.134253][ T513] [ 26.134261][ T513] __dump_stack+0x21/0x30 [ 26.134286][ T513] dump_stack_lvl+0x140/0x1c0 [ 26.134303][ T513] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.134323][ T513] dump_stack+0x19/0x20 [ 26.134338][ T513] should_fail_ex+0x3c2/0x510 [ 26.134366][ T513] should_failslab+0xac/0x100 [ 26.134386][ T513] kmem_cache_alloc_noprof+0x42/0x410 [ 26.134410][ T513] ? __kernfs_new_node+0xf1/0x740 [ 26.134439][ T513] __kernfs_new_node+0xf1/0x740 [ 26.134460][ T513] ? kernfs_new_node+0x280/0x280 [ 26.134481][ T513] ? bus_add_driver+0x18c/0x730 [ 26.134499][ T513] kernfs_new_node+0x154/0x280 [ 26.134518][ T513] kernfs_create_dir_ns+0x4b/0x130 [ 26.134539][ T513] sysfs_create_dir_ns+0x127/0x210 [ 26.134566][ T513] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 26.134591][ T513] ? kstrdup+0x7b/0x130 [ 26.134613][ T513] kobject_add_internal+0x71f/0xc20 [ 26.134632][ T513] kobject_init_and_add+0x12c/0x1a0 [ 26.134650][ T513] ? __cfi_kobject_init_and_add+0x10/0x10 [ 26.134666][ T513] ? __kasan_kmalloc+0x96/0xb0 [ 26.134684][ T513] ? __kmalloc_cache_noprof+0x23c/0x470 [ 26.134709][ T513] ? klist_init+0x29/0xe0 [ 26.134732][ T513] bus_add_driver+0x2a2/0x730 [ 26.134748][ T513] driver_register+0x2b7/0x3c0 [ 26.134771][ T513] usb_gadget_register_driver_owner+0xfc/0x270 [ 26.134796][ T513] raw_ioctl+0x144c/0x37a0 [ 26.134818][ T513] ? __cfi_raw_ioctl+0x10/0x10 [ 26.134837][ T513] ? selinux_file_ioctl+0x732/0x1480 [ 26.134863][ T513] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 26.134888][ T513] ? hook_file_ioctl+0x1ef/0x590 [ 26.134911][ T513] ? __cfi_hook_file_ioctl+0x10/0x10 [ 26.134933][ T513] ? __fget_files+0x2bc/0x330 [ 26.134958][ T513] ? bpf_lsm_file_ioctl+0xd/0x20 [ 26.134977][ T513] ? security_file_ioctl+0x3e/0x110 [ 26.135043][ T513] ? __cfi_raw_ioctl+0x10/0x10 [ 26.135065][ T513] __se_sys_ioctl+0x126/0x1b0 [ 26.135085][ T513] __x64_sys_ioctl+0x7f/0xa0 [ 26.135104][ T513] x64_sys_call+0x1878/0x2ee0 [ 26.135124][ T513] do_syscall_64+0x57/0xf0 [ 26.135141][ T513] ? clear_bhb_loop+0x50/0xa0 [ 26.135163][ T513] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.135185][ T513] RIP: 0033:0x7f24d379f1eb [ 26.135209][ T513] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 26.135224][ T513] RSP: 002b:00007f24d4720f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.135249][ T513] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f24d379f1eb [ 26.135264][ T513] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 26.135275][ T513] RBP: 00007f24d4721fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 26.135288][ T513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.135300][ T513] R13: 0000200000000580 R14: 0000000000000000 R15: 0000000000000000 [ 26.135315][ T513] [ 26.135418][ T513] kobject: kobject_add_internal failed for raw-gadget.3 (error: -12 parent: drivers) [ 26.142127][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.156971][ T513] UDC core: USB Raw Gadget: driver registration failed: -12 [ 26.163681][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.167343][ T513] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 26.170349][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.304147][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 26.305461][ T310] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 26.312178][ T31] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.316778][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.322190][ T31] usb 4-1: config 0 has no interface number 0 [ 26.327242][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.332625][ T31] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 26.337088][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.343140][ T31] usb 4-1: config 0 interface 2 has no altsetting 0 [ 26.347619][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.354236][ T31] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 26.356908][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.368226][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.370638][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.377043][ T31] usb 4-1: Product: syz [ 26.381062][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.401106][ T31] usb 4-1: Manufacturer: syz [ 26.409816][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.417904][ T31] usb 4-1: SerialNumber: syz [ 26.425612][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.436804][ T31] usb 4-1: config 0 descriptor?? [ 26.441653][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.659737][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.661385][ T466] netlink: 80 bytes leftover after parsing attributes in process `syz.3.31'. [ 26.668484][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.681903][ T466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.684709][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 26.694808][ T466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.698608][ T310] usb usb3-port1: attempt power cycle [ 26.711988][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.719441][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.727086][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.734800][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.742433][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.749932][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.757360][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.763409][ T516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.764819][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.776078][ T516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.780862][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.796218][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.803827][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.811333][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.819044][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.826498][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.833344][ T31] usb 4-1: USB disconnect, device number 2 [ 26.848317][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.856118][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.863546][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.871075][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.880005][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.887972][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.895845][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.903754][ T382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.912691][ T382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 27.044127][ T310] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 27.064577][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 27.194170][ T310] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 27.214517][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 27.219951][ T310] usb usb3-port1: unable to enumerate USB device [ 27.350571][ T542] 9pnet_fd: Insufficient options for proto=fd [ 27.351712][ T543] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 27.367058][ T545] netlink: 'syz.0.43': attribute type 27 has an invalid length. [ 27.385851][ T543] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 27.830256][ T560] netlink: 'syz.1.47': attribute type 7 has an invalid length. [ 27.837866][ T560] netlink: 'syz.1.47': attribute type 5 has an invalid length. [ 27.994052][ T578] netlink: 'syz.3.51': attribute type 3 has an invalid length. [ 28.124184][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.285327][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 28.295290][ T310] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 28.307070][ T310] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 28.316288][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.325042][ T310] usb 2-1: Product: syz [ 28.329480][ T310] usb 2-1: Manufacturer: syz [ 28.334123][ T310] usb 2-1: SerialNumber: syz [ 28.339662][ T310] usb 2-1: config 0 descriptor?? [ 28.345016][ T575] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.352309][ T575] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.560481][ T575] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.568706][ T575] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 28.614131][ T583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 28.651204][ T592] ======================================================= [ 28.651204][ T592] WARNING: The mand mount option has been deprecated and [ 28.651204][ T592] and is ignored by this kernel. Remove the mand [ 28.651204][ T592] option from the mount to silence this warning. [ 28.651204][ T592] ======================================================= [ 28.777940][ T575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.786853][ T575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.980801][ T310] Error reading MAC address [ 28.988712][ T310] usb 2-1: USB disconnect, device number 3 [ 29.287525][ T609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=609 comm=syz.2.58 [ 29.393289][ T614] base or size exceeds the MTRR width [ 29.393289][ T615] base or size exceeds the MTRR width [ 29.539717][ T627] netlink: 'syz.1.64': attribute type 27 has an invalid length. [ 29.563322][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.564544][ T629] input: syz0 as /devices/virtual/input/input4 [ 29.570866][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.824235][ T382] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 29.874249][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.975713][ T382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.984456][ T382] usb 3-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 29.995475][ T382] usb 3-1: config 50 has 1 interface, different from the descriptor's value: 2 [ 30.004163][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.006056][ T382] usb 3-1: New USB device found, idVendor=152d, idProduct=0578, bcdDevice=6a.b8 [ 30.014274][ T31] usb 2-1: device descriptor read/64, error -71 [ 30.021326][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.036236][ T382] usb 3-1: Product: syz [ 30.040496][ T382] usb 3-1: Manufacturer: syz [ 30.045168][ T382] usb 3-1: SerialNumber: syz [ 30.154161][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 30.161549][ T312] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 30.170183][ T312] usb 4-1: config 0 has no interface number 0 [ 30.176406][ T312] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 30.188628][ T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 30.197886][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.206035][ T312] usb 4-1: Product: syz [ 30.210236][ T312] usb 4-1: Manufacturer: syz [ 30.214976][ T312] usb 4-1: SerialNumber: syz [ 30.220199][ T312] usb 4-1: config 0 descriptor?? [ 30.225488][ T637] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.252087][ T382] usb-storage 3-1:50.0: USB Mass Storage device detected [ 30.260535][ T382] usb-storage 3-1:50.0: Quirks match for vid 152d pid 0578: 1000000 [ 30.274186][ T31] usb 2-1: device descriptor read/64, error -71 [ 30.306587][ T382] usb 3-1: USB disconnect, device number 7 [ 30.437292][ T637] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.514183][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.644291][ T31] usb 2-1: device descriptor read/64, error -71 [ 30.777781][ T641] kvm: user requested TSC rate below hardware speed [ 30.884613][ T31] usb 2-1: device descriptor read/64, error -71 [ 30.994506][ T31] usb usb2-port1: attempt power cycle [ 31.052825][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.054145][ T48] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 31.065937][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.070731][ T312] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 31.087428][ T312] asix 4-1:0.188: probe with driver asix failed with error -32 [ 31.224280][ T48] usb 3-1: device descriptor read/64, error -71 [ 31.334246][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.355518][ T31] usb 2-1: device descriptor read/8, error -71 [ 31.474200][ T48] usb 3-1: device descriptor read/64, error -71 [ 31.485571][ T31] usb 2-1: device descriptor read/8, error -71 [ 31.714188][ T48] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 31.724332][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.745256][ T31] usb 2-1: device descriptor read/8, error -71 [ 31.854204][ T48] usb 3-1: device descriptor read/64, error -71 [ 31.875407][ T31] usb 2-1: device descriptor read/8, error -71 [ 31.984228][ T31] usb usb2-port1: unable to enumerate USB device [ 32.094167][ T48] usb 3-1: device descriptor read/64, error -71 [ 32.204237][ T48] usb usb3-port1: attempt power cycle [ 32.554208][ T48] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 32.575256][ T48] usb 3-1: device descriptor read/8, error -71 [ 32.652477][ T653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=653 comm=syz.1.71 [ 32.679648][ T655] FAULT_INJECTION: forcing a failure. [ 32.679648][ T655] name failslab, interval 1, probability 0, space 0, times 0 [ 32.694825][ T655] CPU: 0 UID: 0 PID: 655 Comm: syz.1.72 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 32.694875][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.694886][ T655] Call Trace: [ 32.694891][ T655] [ 32.694898][ T655] __dump_stack+0x21/0x30 [ 32.694921][ T655] dump_stack_lvl+0x140/0x1c0 [ 32.694938][ T655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.694956][ T655] dump_stack+0x19/0x20 [ 32.694971][ T655] should_fail_ex+0x3c2/0x510 [ 32.695001][ T655] should_failslab+0xac/0x100 [ 32.695019][ T655] __kmalloc_node_noprof+0x69/0x500 [ 32.695044][ T655] ? __kvmalloc_node_noprof+0x128/0x300 [ 32.695068][ T655] __kvmalloc_node_noprof+0x128/0x300 [ 32.695089][ T655] ? kasan_save_alloc_info+0x3a/0x50 [ 32.695112][ T655] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 32.695134][ T655] ? __kmalloc_cache_noprof+0x220/0x470 [ 32.695158][ T655] ? alloc_fdtable+0xd2/0x4f0 [ 32.695174][ T655] alloc_fdtable+0x11b/0x4f0 [ 32.695188][ T655] dup_fd+0x6af/0x9c0 [ 32.695201][ T655] ? copy_fs_struct+0x160/0x2d0 [ 32.695236][ T655] ksys_unshare+0x46a/0x920 [ 32.695260][ T655] ? fput+0x1a4/0x230 [ 32.695278][ T655] ? __cfi_ksys_unshare+0x10/0x10 [ 32.695302][ T655] ? __kasan_check_write+0x18/0x20 [ 32.695325][ T655] __x64_sys_unshare+0x3c/0x50 [ 32.695347][ T655] x64_sys_call+0x2998/0x2ee0 [ 32.695363][ T655] do_syscall_64+0x57/0xf0 [ 32.695377][ T655] ? clear_bhb_loop+0x50/0xa0 [ 32.695395][ T655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.695413][ T655] RIP: 0033:0x7fee3cd9f559 [ 32.695425][ T655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.695437][ T655] RSP: 002b:00007fee3dc2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 32.695453][ T655] RAX: ffffffffffffffda RBX: 00007fee3d025fa0 RCX: 00007fee3cd9f559 [ 32.695464][ T655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 32.695473][ T655] RBP: 00007fee3ce36b50 R08: 0000000000000000 R09: 0000000000000000 [ 32.695482][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.695490][ T655] R13: 00007fee3d026038 R14: 00007fee3d025fa0 R15: 00007ffc9f374ee8 [ 32.695502][ T655] [ 32.705362][ T48] usb 3-1: device descriptor read/8, error -71 [ 32.822226][ T310] usb 4-1: USB disconnect, device number 3 [ 33.068653][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 33.095318][ T48] usb 3-1: device descriptor read/8, error -71 [ 33.235183][ T48] usb 3-1: device descriptor read/8, error -71 [ 33.264190][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.354133][ T48] usb usb3-port1: unable to enumerate USB device [ 33.414118][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 33.420730][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.434485][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.444857][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 33.455868][ T310] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 33.466800][ T310] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 33.486330][ T310] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 33.505243][ T310] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 33.514427][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.522975][ T310] usb 4-1: Product: syz [ 33.527465][ T310] usb 4-1: Manufacturer: syz [ 33.532211][ T310] usb 4-1: SerialNumber: syz [ 33.746973][ T662] virtio-fs: tag not found [ 33.753419][ T662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.762462][ T662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.773964][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.785047][ T310] usb 4-1: USB disconnect, device number 4 [ 33.805306][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.254161][ T381] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 34.352046][ T670] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac14:1414 with DS=0x31 [ 34.414136][ T381] usb 3-1: Using ep0 maxpacket: 32 [ 34.425214][ T381] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 34.427570][ T672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=672 comm=syz.3.78 [ 34.444125][ T381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.446580][ T672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 34.470452][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 34.470467][ T36] audit: type=1400 audit(1810341563.145:242): avc: denied { write } for pid=671 comm="syz.3.78" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.474121][ T381] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.508819][ T381] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.523201][ T381] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.532473][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.540712][ T381] usb 3-1: Product: syz [ 34.545049][ T381] usb 3-1: Manufacturer: syz [ 34.549681][ T381] usb 3-1: SerialNumber: syz [ 34.765240][ T36] audit: type=1400 audit(1810341563.445:243): avc: denied { setopt } for pid=663 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.840650][ T381] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 34.853463][ T381] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 34.861075][ T381] cdc_ncm 3-1:1.0: bind() failure [ 34.867861][ T381] usb 3-1: USB disconnect, device number 12 [ 34.884181][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.044938][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 35.051536][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.060537][ T31] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 35.071081][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7 [ 35.086942][ T31] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 35.100706][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.109110][ T31] usb 4-1: Product: syz [ 35.114606][ T31] usb 4-1: Manufacturer: syz [ 35.121156][ T31] usb 4-1: SerialNumber: syz [ 35.345070][ T31] usb 4-1: USB disconnect, device number 5 [ 35.994144][ T381] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 36.154109][ T381] usb 3-1: Using ep0 maxpacket: 16 [ 36.160396][ T381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.170933][ T381] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.181750][ T381] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.191070][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.199283][ T381] usb 3-1: Product: syz [ 36.203561][ T381] usb 3-1: Manufacturer: syz [ 36.208417][ T381] usb 3-1: SerialNumber: syz [ 36.284165][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.415494][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.425166][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.434157][ T381] usb 3-1: 0:2 : does not exist [ 36.435962][ T31] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.451349][ T31] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 36.452550][ T381] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 36.464720][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.478538][ T31] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 36.487771][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.498792][ T31] usb 4-1: config 0 descriptor?? [ 36.502233][ T381] usb 3-1: USB disconnect, device number 13 [ 36.908528][ T31] hid-led 0003:1294:1320.0002: hidraw0: USB HID v36.2c Joystick [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 36.935328][ T31] hid-led 0003:1294:1320.0002: Riso Kagaku Webmail Notifier initialized [ 38.104130][ T381] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 38.264141][ T381] usb 3-1: Using ep0 maxpacket: 8 [ 38.272475][ T381] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 38.282538][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.290850][ T381] usb 3-1: Product: syz [ 38.295259][ T381] usb 3-1: Manufacturer: syz [ 38.299995][ T381] usb 3-1: SerialNumber: syz [ 38.517429][ T36] audit: type=1400 audit(1810341567.195:244): avc: denied { getopt } for pid=713 comm="syz.2.87" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.543164][ T381] usb 3-1: Unsupported UAC3 BADD profile [ 38.548143][ T36] audit: type=1400 audit(1810341567.215:245): avc: denied { mount } for pid=713 comm="syz.2.87" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 38.572453][ T381] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.584439][ T381] usb 3-1: USB disconnect, device number 14 [ 38.600490][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.050007][ T36] audit: type=1400 audit(1810341567.725:246): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.076401][ T36] audit: type=1400 audit(1810341567.745:247): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.090272][ T381] usb 4-1: USB disconnect, device number 6 [ 39.115482][ T9] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 39.127077][ T36] audit: type=1400 audit(1810341567.805:248): avc: denied { setopt } for pid=719 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.129449][ T310] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 39.160426][ T722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 39.170725][ T36] audit: type=1400 audit(1810341567.805:249): avc: denied { bind } for pid=719 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.199291][ T310] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 39.199941][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 39.231833][ T722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=722 comm=syz.2.90 [ 39.244260][ T723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=723 comm=syz.2.90 [ 39.257688][ T36] audit: type=1400 audit(1810341567.935:250): avc: denied { getopt } for pid=721 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.277039][ T723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 39.332190][ T36] audit: type=1400 audit(1810341568.005:251): avc: denied { setopt } for pid=728 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.496681][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 39.496695][ T36] audit: type=1400 audit(1810341568.175:254): avc: denied { read } for pid=732 comm="syz.2.93" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.792285][ T743] netlink: 'syz.2.96': attribute type 5 has an invalid length. [ 39.802807][ T743] tipc: Started in network mode [ 39.808014][ T743] tipc: Node identity 921a584b1ee4, cluster identity 4711 [ 39.815968][ T743] tipc: Enabled bearer , priority 0 [ 39.825415][ T742] tipc: Disabling bearer [ 39.961804][ T36] audit: type=1400 audit(1810341568.635:255): avc: denied { write } for pid=750 comm="syz.2.99" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.995181][ T759] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 40.014641][ T759] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 40.149988][ T36] audit: type=1400 audit(1810341568.825:256): avc: denied { ioctl } for pid=760 comm="syz.2.101" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.229656][ T36] audit: type=1400 audit(1810341568.905:257): avc: denied { read append } for pid=767 comm="syz.3.103" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.254257][ T36] audit: type=1400 audit(1810341568.905:258): avc: denied { open } for pid=767 comm="syz.3.103" path="/dev/usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.278236][ T36] audit: type=1400 audit(1810341568.905:259): avc: denied { ioctl } for pid=767 comm="syz.3.103" path="/dev/usbmon1" dev="devtmpfs" ino=91 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.303675][ T36] audit: type=1400 audit(1810341568.905:260): avc: denied { search } for pid=767 comm="syz.3.103" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.384131][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 40.534152][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 40.540893][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 40.549411][ T31] usb 3-1: config 0 has no interface number 0 [ 40.555792][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 40.567839][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 40.577231][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.585496][ T31] usb 3-1: Product: syz [ 40.589778][ T31] usb 3-1: Manufacturer: syz [ 40.594621][ T31] usb 3-1: SerialNumber: syz [ 40.600080][ T31] usb 3-1: config 0 descriptor?? [ 40.605638][ T761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.818936][ T761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.642430][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 41.652815][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 41.663558][ T31] asix 3-1:0.188: probe with driver asix failed with error -61 [ 43.216825][ T31] usb 3-1: USB disconnect, device number 15 [ 43.337668][ T781] kvm: kvm [779]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x14b2 [ 43.389420][ T36] audit: type=1400 audit(1810341572.065:261): avc: denied { mounton } for pid=784 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.447919][ T36] audit: type=1400 audit(1810341572.095:262): avc: denied { create } for pid=784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.482097][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.489311][ T784] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.496712][ T784] bridge_slave_0: entered allmulticast mode [ 43.503195][ T784] bridge_slave_0: entered promiscuous mode [ 43.510046][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.517511][ T784] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.525851][ T784] bridge_slave_1: entered allmulticast mode [ 43.532281][ T784] bridge_slave_1: entered promiscuous mode [ 43.589313][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.596410][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.603699][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.610773][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.636265][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.643887][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.651449][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 43.670047][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.677143][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.693416][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.700628][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.728952][ T784] veth0_vlan: entered promiscuous mode [ 43.743279][ T784] veth1_macvtap: entered promiscuous mode [ 43.765752][ T36] audit: type=1400 audit(1810341572.445:263): avc: denied { mounton } for pid=784 comm="syz-executor" path="/root/syzkaller.4l58pB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.815446][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.823980][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.836224][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.845597][ T31] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 43.858939][ T31] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 43.872576][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.883722][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 43.892748][ T31] usb 3-1: string descriptor 0 read error: -22 [ 43.901148][ T31] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 43.910435][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.045551][ T48] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 44.199226][ T48] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 44.210957][ T48] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 44.222227][ T48] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 44.244626][ T48] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 44.253703][ T48] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 44.262003][ T48] usb 5-1: Manufacturer: syz [ 44.268303][ T800] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 44.478400][ T48] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 44.487401][ T48] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 44.499705][ T48] usb 5-1: USB disconnect, device number 2 [ 44.505676][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 44.583171][ T36] audit: type=1400 audit(1810341573.255:264): avc: denied { mounton } for pid=806 comm="syz.3.111" path="/35/proc/modules" dev="proc" ino=4026532076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 44.854119][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.014145][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 45.020686][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 45.035383][ T9] usb 4-1: config 0 has no interface number 0 [ 45.042632][ T36] audit: type=1400 audit(1810341573.715:265): avc: denied { bind } for pid=815 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.062944][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 45.073912][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 45.084388][ T36] audit: type=1400 audit(1810341573.745:266): avc: denied { map } for pid=815 comm="syz.4.113" path="pipe:[8427]" dev="pipefs" ino=8427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 45.108804][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 45.114186][ T36] audit: type=1400 audit(1810341573.785:267): avc: denied { read } for pid=821 comm="syz.4.114" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.118352][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.169778][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 45.174116][ T9] usb 4-1: Product: syz [ 45.182996][ T9] usb 4-1: Manufacturer: syz [ 45.187752][ T9] usb 4-1: SerialNumber: syz [ 45.204401][ T9] usb 4-1: config 0 descriptor?? [ 45.210037][ T808] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.217863][ T808] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.410710][ T829] FAULT_INJECTION: forcing a failure. [ 45.410710][ T829] name fail_futex, interval 1, probability 0, space 0, times 1 [ 45.424877][ T829] CPU: 1 UID: 0 PID: 829 Comm: syz.4.116 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 45.424910][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.424921][ T829] Call Trace: [ 45.424928][ T829] [ 45.424937][ T829] __dump_stack+0x21/0x30 [ 45.424960][ T829] dump_stack_lvl+0x140/0x1c0 [ 45.424976][ T829] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.424993][ T829] dump_stack+0x19/0x20 [ 45.425008][ T829] should_fail_ex+0x3c2/0x510 [ 45.425034][ T829] should_fail+0xf/0x20 [ 45.425056][ T829] get_futex_key+0x178/0x940 [ 45.425075][ T829] ? __cfi_get_futex_key+0x10/0x10 [ 45.425092][ T829] ? call_rcu+0x14/0x20 [ 45.425116][ T829] futex_wake+0x150/0x950 [ 45.425138][ T829] ? __kasan_check_write+0x18/0x20 [ 45.425161][ T829] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 45.425180][ T829] ? __cfi_futex_wake+0x10/0x10 [ 45.425200][ T829] ? perf_lock_task_context+0x398/0x450 [ 45.425226][ T829] ? __perf_event_period+0x490/0x490 [ 45.425250][ T829] ? mutex_unlock+0x90/0x240 [ 45.425272][ T829] do_futex+0x37d/0x510 [ 45.425290][ T829] ? __kasan_check_read+0x15/0x20 [ 45.425312][ T829] ? __cfi_do_futex+0x10/0x10 [ 45.425330][ T829] ? __kasan_check_write+0x18/0x20 [ 45.425353][ T829] mm_release+0x15f/0x300 [ 45.425375][ T829] ? exit_mm_release+0x50/0x50 [ 45.425397][ T829] ? futex_exit_release+0x11d/0x1f0 [ 45.425415][ T829] exit_mm_release+0x29/0x50 [ 45.425437][ T829] do_exit+0x832/0x2850 [ 45.425461][ T829] ? __kasan_check_read+0x15/0x20 [ 45.425483][ T829] ? futex_wake+0x627/0x950 [ 45.425504][ T829] ? __cfi_do_exit+0x10/0x10 [ 45.425526][ T829] ? futex_wait+0x2b8/0x7c0 [ 45.425547][ T829] ? __cfi_futex_wait+0x10/0x10 [ 45.425568][ T829] ? __kasan_check_write+0x18/0x20 [ 45.425598][ T829] ? _raw_spin_lock_irq+0x93/0x120 [ 45.425615][ T829] do_group_exit+0x21f/0x2f0 [ 45.425637][ T829] ? __kasan_check_write+0x18/0x20 [ 45.425659][ T829] ? recalc_sigpending+0x16c/0x1d0 [ 45.425681][ T829] get_signal+0x134c/0x1490 [ 45.425707][ T829] arch_do_signal_or_restart+0xbc/0x700 [ 45.425728][ T829] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 45.425750][ T829] syscall_exit_to_user_mode+0x57/0xb0 [ 45.425774][ T829] do_syscall_64+0x63/0xf0 [ 45.425790][ T829] ? clear_bhb_loop+0x50/0xa0 [ 45.425812][ T829] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.425833][ T829] RIP: 0033:0x7f7f1519f559 [ 45.425850][ T829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.425864][ T829] RSP: 002b:00007f7f160570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.425884][ T829] RAX: fffffffffffffe00 RBX: 00007f7f15426188 RCX: 00007f7f1519f559 [ 45.425898][ T829] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7f15426188 [ 45.425910][ T829] RBP: 00007f7f15426180 R08: 0000000000000000 R09: 0000000000000000 [ 45.425923][ T829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.425934][ T829] R13: 00007f7f15426218 R14: 00007ffdc9bc64a0 R15: 00007ffdc9bc6588 [ 45.425950][ T829] [ 45.426367][ T807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.742698][ T807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.771765][ T833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 46.064117][ T48] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.214126][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 46.220983][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.229713][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.239988][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 46.251346][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 46.261475][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.276117][ T48] usb 5-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 46.286543][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.310732][ T31] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 46.321276][ T48] usb 5-1: Product: syz [ 46.332578][ T48] usb 5-1: Manufacturer: syz [ 46.338931][ T31] usb 3-1: USB disconnect, device number 16 [ 46.354143][ T48] usb 5-1: SerialNumber: syz [ 46.475542][ T838] kvm: pic: non byte write [ 46.572416][ T36] audit: type=1400 audit(1810341575.245:268): avc: denied { read } for pid=834 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.590054][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 46.601868][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 46.612786][ T36] audit: type=1400 audit(1810341575.245:269): avc: denied { read } for pid=834 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.616062][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 46.643337][ T9] usb 4-1: USB disconnect, device number 7 [ 46.644179][ T48] usb 5-1: MIDIStreaming interface descriptor not found [ 46.650462][ T36] audit: type=1400 audit(1810341575.245:270): avc: denied { mounton } for pid=806 comm="syz.3.111" path="/35/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 46.666431][ T48] usb 5-1: USB disconnect, device number 3 [ 47.214466][ T36] audit: type=1400 audit(1810341575.895:271): avc: denied { write } for pid=847 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.286735][ T36] audit: type=1400 audit(1810341575.965:272): avc: denied { setopt } for pid=847 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.354120][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.354956][ T863] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 47.372282][ T36] audit: type=1400 audit(1810341576.045:273): avc: denied { relabelto } for pid=862 comm="syz.3.126" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 47.524115][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 47.530297][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 47.538876][ T9] usb 5-1: config 179 has no interface number 0 [ 47.545369][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 47.556999][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 47.568620][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.580107][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 47.593953][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 47.601113][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 47.610731][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.626348][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 47.644164][ T381] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 47.694310][ T95] input input7: unable to receive magic message: -110 [ 47.704659][ T95] input input7: unable to receive magic message: -32 [ 47.717531][ T95] input input7: unable to receive magic message: -32 [ 47.805233][ T381] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 47.813570][ T381] usb 3-1: config 2 has no interface number 0 [ 47.819932][ T381] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 47.830208][ T381] usb 3-1: config 2 interface 43 altsetting 13 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 47.842852][ T843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.852674][ T381] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x85 has invalid maxpacket 8 [ 47.862955][ T843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.871829][ T381] usb 3-1: config 2 interface 43 has no altsetting 0 [ 47.879233][ T9] usb 5-1: USB disconnect, device number 4 [ 47.885132][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 47.895938][ T381] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 47.905308][ T9] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 47.915481][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.923483][ T381] usb 3-1: Product: syz [ 47.928426][ T381] usb 3-1: Manufacturer: syz [ 47.933318][ T381] usb 3-1: SerialNumber: syz [ 47.945074][ T864] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.954140][ T864] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.021682][ T874] ±ÿ: renamed from lo (while UP) [ 48.551148][ T888] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.558333][ T888] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.565714][ T888] bridge_slave_0: entered allmulticast mode [ 48.572203][ T888] bridge_slave_0: entered promiscuous mode [ 48.578974][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.586129][ T888] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.593242][ T888] bridge_slave_1: entered allmulticast mode [ 48.599687][ T888] bridge_slave_1: entered promiscuous mode [ 48.644105][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.647672][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.658664][ T888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.665935][ T888] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.673030][ T888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.681642][ T498] bridge_slave_1: left allmulticast mode [ 48.687436][ T498] bridge_slave_1: left promiscuous mode [ 48.693030][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.700843][ T498] bridge_slave_0: left allmulticast mode [ 48.706653][ T498] bridge_slave_0: left promiscuous mode [ 48.712244][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.768286][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.775788][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.785515][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.792557][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.802884][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.809974][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.824130][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 48.830333][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 48.839136][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.849324][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 48.858560][ T31] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.873225][ T31] usb 5-1: New USB device found, idVendor=200c, idProduct=0000, bcdDevice= 0.40 [ 48.886547][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.890772][ T888] veth0_vlan: entered promiscuous mode [ 48.897688][ T31] usb 5-1: Product: syz [ 48.904768][ T31] usb 5-1: Manufacturer: syz [ 48.909429][ T31] usb 5-1: SerialNumber: syz [ 48.913010][ T888] veth1_macvtap: entered promiscuous mode [ 49.118676][ T31] usb 5-1: unit 3 not found! [ 49.129109][ T31] usb 5-1: USB disconnect, device number 5 [ 49.145836][ T909] netlink: 'syz.3.140': attribute type 16 has an invalid length. [ 49.153661][ T909] netlink: 'syz.3.140': attribute type 3 has an invalid length. [ 49.154206][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.161366][ T909] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.140'. [ 49.314133][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.334604][ T917] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 49.358476][ T919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.466464][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 49.475179][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.488766][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 49.500095][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 49.513234][ T9] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 49.522535][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.531740][ T9] usb 6-1: config 0 descriptor?? [ 49.549345][ T934] rust_binder: 933:934 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 49.601592][ T935] rust_binder: 933:935 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 49.609690][ T935] rust_binder: Write failure EINVAL in pid:203 [ 49.618259][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 49.618274][ T36] audit: type=1400 audit(1843896464.339:290): avc: denied { create } for pid=933 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.639141][ T937] FAULT_INJECTION: forcing a failure. [ 49.639141][ T937] name failslab, interval 1, probability 0, space 0, times 0 [ 49.656226][ T937] CPU: 0 UID: 0 PID: 937 Comm: syz.4.149 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 49.656256][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.656267][ T937] Call Trace: [ 49.656273][ T937] [ 49.656279][ T937] __dump_stack+0x21/0x30 [ 49.656294][ T937] dump_stack_lvl+0x140/0x1c0 [ 49.656303][ T937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.656316][ T937] dump_stack+0x19/0x20 [ 49.656325][ T937] should_fail_ex+0x3c2/0x510 [ 49.656340][ T937] should_failslab+0xac/0x100 [ 49.656351][ T937] __kmalloc_cache_noprof+0x41/0x470 [ 49.656365][ T937] ? io_wq_create+0xe0/0x9d0 [ 49.656374][ T937] ? __kasan_check_write+0x18/0x20 [ 49.656388][ T937] ? mutex_unlock+0x90/0x240 [ 49.656401][ T937] io_wq_create+0xe0/0x9d0 [ 49.656410][ T937] io_uring_alloc_task_context+0x2a5/0x6b0 [ 49.656422][ T937] ? alloc_file_pseudo+0x191/0x1f0 [ 49.656434][ T937] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 49.656445][ T937] ? __cfi_io_wq_submit_work+0x10/0x10 [ 49.656458][ T937] ? __cfi_io_wq_free_work+0x10/0x10 [ 49.656469][ T937] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 49.656482][ T937] __io_uring_add_tctx_node+0x324/0x590 [ 49.656494][ T937] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 49.656504][ T937] ? anon_inode_create_getfile+0x3f/0x50 [ 49.656516][ T937] io_uring_create+0xc78/0x13f0 [ 49.656527][ T937] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 49.656540][ T937] ? __se_sys_futex+0x13c/0x320 [ 49.656551][ T937] ? __x64_sys_io_uring_setup+0x80/0x80 [ 49.656564][ T937] ? __kasan_check_write+0x18/0x20 [ 49.656577][ T937] __x64_sys_io_uring_setup+0x5f/0x80 [ 49.656589][ T937] x64_sys_call+0x22c0/0x2ee0 [ 49.656599][ T937] do_syscall_64+0x57/0xf0 [ 49.656609][ T937] ? clear_bhb_loop+0x50/0xa0 [ 49.656621][ T937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.656633][ T937] RIP: 0033:0x7f7f1519f559 [ 49.656643][ T937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.656652][ T937] RSP: 002b:00007f7f16098fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 49.656664][ T937] RAX: ffffffffffffffda RBX: 00002000000003c0 RCX: 00007f7f1519f559 [ 49.656672][ T937] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000002 [ 49.656679][ T937] RBP: 00007f7f15236b50 R08: 0000000000000000 R09: 0000000000000000 [ 49.656686][ T937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 49.656692][ T937] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdc9bc6588 [ 49.656700][ T937] [ 49.930551][ T945] fuse: Bad value for 'user_id' [ 49.935494][ T945] fuse: Bad value for 'user_id' [ 49.988706][ T36] audit: type=1400 audit(1843896464.709:291): avc: denied { nlmsg_write } for pid=947 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 50.009903][ T36] audit: type=1400 audit(1843896464.709:292): avc: denied { audit_write } for pid=947 comm="syz.4.151" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.128403][ T9] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 50.350225][ T381] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 50.365810][ T381] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 50.373457][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.413900][ T381] ums-usbat 3-1:2.43: probe with driver ums-usbat failed with error -5 [ 50.425938][ T381] usb 3-1: USB disconnect, device number 17 [ 50.467343][ T36] audit: type=1400 audit(1843896465.189:293): avc: denied { mounton } for pid=965 comm="syz.2.154" path="/42/dev/sda1" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.533129][ T9] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-71 [ 50.541104][ T9] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-71 [ 50.544101][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 50.550019][ T9] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-71 [ 50.557112][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.565447][ T9] nintendo 0003:057E:2019.0003: probe - fail = -71 [ 50.574237][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.580115][ T9] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -71 [ 50.590751][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.604181][ T9] usb 6-1: USB disconnect, device number 2 [ 50.607437][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.620922][ T48] usb 5-1: Product: syz [ 50.625128][ T48] usb 5-1: Manufacturer: syz [ 50.630403][ T48] usb 5-1: SerialNumber: syz [ 50.764111][ T381] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 50.839208][ T48] usb 5-1: 0:2 : does not exist [ 50.845899][ T48] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 50.858081][ T48] usb 5-1: USB disconnect, device number 6 [ 50.865613][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.935106][ T381] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.947307][ T381] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 50.956435][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.965479][ T381] usb 3-1: Product: syz [ 50.969703][ T381] usb 3-1: Manufacturer: syz [ 50.974301][ T381] usb 3-1: SerialNumber: syz [ 50.981126][ T381] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 50.987168][ T381] cdc_wdm 3-1:1.0: Unknown control protocol [ 51.106878][ T36] audit: type=1400 audit(1843896465.829:294): avc: denied { ioctl } for pid=979 comm="syz.5.156" path="socket:[9578]" dev="sockfs" ino=9578 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.107562][ T980] netlink: 'syz.5.156': attribute type 29 has an invalid length. [ 51.234773][ T381] usb 3-1: USB disconnect, device number 18 [ 51.357086][ T36] audit: type=1400 audit(1843896466.079:295): avc: denied { lock } for pid=983 comm="syz.5.158" path="socket:[9658]" dev="sockfs" ino=9658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 51.479896][ T36] audit: type=1400 audit(1843896466.199:296): avc: denied { map } for pid=989 comm="syz.4.159" path="socket:[9663]" dev="sockfs" ino=9663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 51.877814][ T36] audit: type=1400 audit(1843896466.599:297): avc: denied { watch } for pid=1007 comm="syz.2.164" path="/44/dev/sda" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.092604][ T36] audit: type=1400 audit(1843896466.809:298): avc: denied { append } for pid=1015 comm="syz.2.167" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.093771][ T1016] synth uevent: /bus/acpi: unknown uevent action string [ 52.659280][ T36] audit: type=1400 audit(1843896467.379:299): avc: denied { create } for pid=1021 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 52.696760][ T1029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 52.805858][ T1032] SELinux: failed to load policy [ 52.825881][ T1034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.835008][ T1034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.989808][ T1044] overlayfs: upper fs does not support tmpfile. [ 53.314149][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.374160][ T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 53.464106][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 53.470134][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.480294][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.490604][ T31] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 53.499702][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.507825][ T31] usb 3-1: Product: syz [ 53.511987][ T31] usb 3-1: Manufacturer: syz [ 53.516598][ T31] usb 3-1: SerialNumber: syz [ 53.535963][ T1066] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 53.724806][ T31] usb 3-1: unit 255 not found! [ 53.732004][ T31] usb 3-1: USB disconnect, device number 19 [ 53.741337][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.064158][ T48] usb 4-1: device descriptor read/64, error -71 [ 54.325829][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.336154][ T48] usb 4-1: string descriptor 0 read error: -22 [ 54.342376][ T48] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 54.351743][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.363351][ T48] usb 4-1: unit 4 not found! [ 54.368110][ T48] usb 4-1: unit 14 not found! [ 54.464136][ T381] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.474155][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 54.562470][ T48] usb 4-1: USB disconnect, device number 8 [ 54.604248][ T31] usb 3-1: device descriptor read/64, error -71 [ 54.614549][ T381] usb 6-1: Using ep0 maxpacket: 8 [ 54.621054][ T381] usb 6-1: unable to get BOS descriptor or descriptor too short [ 54.629714][ T381] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 2 [ 54.639734][ T381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 54.649858][ T381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 54.660977][ T381] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 54.671024][ T381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 54.680724][ T381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 54.691839][ T381] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 54.700979][ T381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.709046][ T381] usb 6-1: Product: syz [ 54.713212][ T381] usb 6-1: Manufacturer: syz [ 54.717828][ T381] usb 6-1: SerialNumber: syz [ 54.722955][ T381] usb 6-1: config 0 descriptor?? [ 54.728343][ T1081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 54.735700][ T1081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 54.751404][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.854150][ T31] usb 3-1: device descriptor read/64, error -71 [ 54.946908][ T1081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.955466][ T1081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.963666][ T1081] __vm_enough_memory: pid: 1081, comm: syz.5.186, bytes: 11727830564864 not enough memory for the allocation [ 54.975835][ T1081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.984352][ T1081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.993125][ T1081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.002017][ T1081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.010293][ T381] usb 6-1: USB disconnect, device number 3 [ 55.094137][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 55.244114][ T31] usb 3-1: device descriptor read/64, error -71 [ 55.384112][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.484203][ T31] usb 3-1: device descriptor read/64, error -71 [ 55.521507][ T1093] input: syz0 as /devices/virtual/input/input9 [ 55.537014][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 55.546156][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.554184][ T9] usb 5-1: Product: syz [ 55.558337][ T9] usb 5-1: Manufacturer: syz [ 55.562907][ T9] usb 5-1: SerialNumber: syz [ 55.594224][ T31] usb usb3-port1: attempt power cycle [ 55.666789][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 55.666804][ T36] audit: type=1400 audit(1843896470.389:304): avc: denied { write } for pid=1103 comm="syz.5.194" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 55.808228][ T1115] Invalid argument reading file caps for ./file0 [ 55.944159][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 55.948551][ T10] usb 5-1: USB disconnect, device number 7 [ 55.965148][ T31] usb 3-1: device descriptor read/8, error -71 [ 56.095197][ T31] usb 3-1: device descriptor read/8, error -71 [ 56.114149][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 56.276586][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 56.285784][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.293758][ T9] usb 6-1: Product: syz [ 56.297927][ T9] usb 6-1: Manufacturer: syz [ 56.302513][ T9] usb 6-1: SerialNumber: syz [ 56.309274][ T9] ftdi_sio 6-1:4.0: FTDI USB Serial Device converter detected [ 56.317039][ T9] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 56.344119][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 56.365421][ T31] usb 3-1: device descriptor read/8, error -71 [ 56.505247][ T31] usb 3-1: device descriptor read/8, error -71 [ 56.512756][ T48] usb 6-1: USB disconnect, device number 4 [ 56.518989][ T48] ftdi_sio 6-1:4.0: device disconnected [ 56.614241][ T31] usb usb3-port1: unable to enumerate USB device [ 56.724306][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 56.874132][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 56.880504][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.890762][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.900762][ T65] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 56.910132][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.918170][ T65] usb 5-1: SerialNumber: syz [ 56.924595][ T65] usb 5-1: 0:2 : does not exist [ 57.194138][ T1137] netlink: 72 bytes leftover after parsing attributes in process `syz.5.202'. [ 57.212655][ T1143] fuse: Invalid rootmode [ 57.219018][ T36] audit: type=1400 audit(1843896471.939:305): avc: denied { set_context_mgr } for pid=1142 comm="syz.5.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.219671][ T1143] rust_binder: 1142:1143 failed to claim space for a BINDER_TYPE_PTR (offset: 96, limit: 96, size: 1) [ 57.238869][ T36] audit: type=1400 audit(1843896471.939:306): avc: denied { map } for pid=1142 comm="syz.5.203" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.250507][ T1143] rust_binder: 1142:1143 error while translating object: EINVAL [ 57.292453][ T1150] cgroup: Unknown subsys name 'measure' [ 57.298266][ T36] audit: type=1400 audit(1843896471.939:307): avc: denied { call } for pid=1142 comm="syz.5.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.311456][ T1143] rust_binder: 1142:1143 transaction call to 1142:0 failed EINVAL, code 0 size 72-24 line thread.rs:926 [ 57.326252][ T36] audit: type=1400 audit(1843896472.009:308): avc: denied { accept } for pid=1142 comm="syz.5.203" laddr=fe80::e lport=45455 faddr=::ffff:100.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 57.341873][ T65] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 57.364157][ T840] rust_binder: 1142: undelivered TRANSACTION_ERROR: 29201 [ 57.369375][ T36] audit: type=1400 audit(1843896472.089:309): avc: denied { create } for pid=1153 comm="syz.5.205" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.392884][ T36] audit: type=1400 audit(1843896472.109:310): avc: denied { write } for pid=1153 comm="syz.5.205" name="file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.399385][ T65] usb 5-1: USB disconnect, device number 8 [ 57.418631][ T36] audit: type=1400 audit(1843896472.109:311): avc: denied { open } for pid=1153 comm="syz.5.205" path="/16/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.458114][ T1156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1156 comm=syz.5.206 [ 57.798862][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 57.814263][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 57.955666][ T36] audit: type=1326 audit(1843896472.679:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1174 comm="syz.4.213" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1519f559 code=0x7ffc0000 [ 57.965091][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.981074][ T36] audit: type=1326 audit(1843896472.679:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1174 comm="syz.4.213" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1519f559 code=0x7ffc0000 [ 58.006228][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.025961][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.034104][ T9] usb 3-1: Product: syz [ 58.038612][ T9] usb 3-1: Manufacturer: syz [ 58.043228][ T9] usb 3-1: SerialNumber: syz [ 58.069763][ T1184] netlink: 180 bytes leftover after parsing attributes in process `syz.4.216'. [ 58.383471][ T1203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.220'. [ 58.392831][ T1203] veth1_macvtap: left promiscuous mode [ 58.457167][ T9] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 58.474365][ T9] cdc_ncm 3-1:1.0: bind() failure [ 58.480217][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 58.487588][ T9] cdc_ncm 3-1:1.1: bind() failure [ 58.495409][ T9] usb 3-1: USB disconnect, device number 24 [ 58.674137][ T840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.804304][ T840] usb 6-1: device descriptor read/64, error -71 [ 58.914191][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 59.044149][ T840] usb 6-1: device descriptor read/64, error -71 [ 59.065511][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.076577][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 59.088722][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.098600][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.106663][ T9] usb 5-1: Product: syz [ 59.111161][ T9] usb 5-1: Manufacturer: syz [ 59.113997][ T1222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 59.116206][ T9] usb 5-1: SerialNumber: syz [ 59.143258][ T9] cdc_mbim 5-1:1.0: skipping garbage [ 59.192352][ T1224] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 59.284157][ T840] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 59.350457][ T1208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.414114][ T840] usb 6-1: device descriptor read/64, error -71 [ 59.654124][ T840] usb 6-1: device descriptor read/64, error -71 [ 59.764383][ T840] usb usb6-port1: attempt power cycle [ 59.959542][ T1208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.967787][ T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 59.981654][ T9] wwan wwan0: port wwan0mbim0 attached [ 59.994042][ T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 52:ef:bf:ba:a1:75 [ 60.104156][ T840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 60.118653][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 60.126418][ T840] usb 6-1: device descriptor read/8, error -71 [ 60.173013][ T1208] 9pnet_fd: Insufficient options for proto=fd [ 60.181232][ T310] usb 5-1: USB disconnect, device number 9 [ 60.187388][ T310] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 60.260165][ T310] wwan wwan0: port wwan0mbim0 disconnected [ 60.265261][ T840] usb 6-1: device descriptor read/8, error -71 [ 60.324132][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 60.474883][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 60.483412][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.495871][ T9] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 60.505548][ T9] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 60.513892][ T9] usb 3-1: Product: syz [ 60.518092][ T9] usb 3-1: Manufacturer: syz [ 60.524147][ T840] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 60.525206][ T9] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 60.545140][ T840] usb 6-1: device descriptor read/8, error -71 [ 60.675151][ T840] usb 6-1: device descriptor read/8, error -71 [ 60.724367][ T9] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 60.734022][ T9] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 60.742958][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 60.754175][ T9] usb 3-1: USB disconnect, device number 25 [ 60.771683][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 60.771698][ T36] audit: type=1400 audit(1843896475.489:345): avc: denied { lock } for pid=1269 comm="syz.3.231" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.802597][ T840] usb usb6-port1: unable to enumerate USB device [ 60.837154][ T36] audit: type=1400 audit(1843896475.559:346): avc: denied { ioctl } for pid=1276 comm="syz.3.233" path="socket:[12580]" dev="sockfs" ino=12580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.925801][ T36] audit: type=1400 audit(1843896475.649:347): avc: denied { shutdown } for pid=1274 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.971891][ T36] audit: type=1400 audit(1843896475.689:348): avc: denied { create } for pid=1287 comm="syz.3.236" name="dm1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.986813][ T1289] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 61.204118][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 61.279123][ T1297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 61.354127][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 61.360373][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 61.369294][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.379993][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 61.389649][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.405129][ T31] usb 4-1: New USB device found, idVendor=200c, idProduct=0000, bcdDevice= 0.40 [ 61.414257][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.422271][ T31] usb 4-1: Product: syz [ 61.426651][ T31] usb 4-1: Manufacturer: syz [ 61.431309][ T31] usb 4-1: SerialNumber: syz [ 61.639693][ T31] usb 4-1: unit 3 not found! [ 61.649324][ T31] usb 4-1: USB disconnect, device number 9 [ 61.731443][ T1332] kvm: MWAIT instruction emulated as NOP! [ 61.784126][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 61.934796][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 61.943339][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.953656][ T9] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 61.963084][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.975252][ T9] usb 6-1: Found UVC 1.00 device (0000:0000) [ 62.024127][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 62.144095][ T36] audit: type=1400 audit(1843896476.859:349): avc: denied { unlink } for pid=296 comm="syz-executor" name="dm1" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 62.152012][ T1337] cgroup: Unknown subsys name 'measure' [ 62.175310][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.187322][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.195643][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.201588][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.217049][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.217516][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.233203][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.235500][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.245737][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.266966][ T10] usb 5-1: config 0 descriptor?? [ 62.272242][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.282218][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.293097][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.301877][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.309915][ T1348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.318794][ T9] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 62.324729][ T1348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.338636][ T9] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 62.340502][ T36] audit: type=1400 audit(1843896477.059:350): avc: denied { map } for pid=1352 comm="syz.2.254" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 62.348014][ T9] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 62.384997][ T1353] sd 0:0:1:0: PR command failed: 1026 [ 62.389987][ T9] usb 6-1: USB disconnect, device number 9 [ 62.390934][ T1353] sd 0:0:1:0: Sense Key : 0x5 [current] [ 62.403468][ T1353] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 62.415897][ T1353] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 62.416628][ T36] audit: type=1400 audit(1843896477.139:351): avc: denied { watch_reads } for pid=1352 comm="syz.2.254" path="/67/bus" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.482809][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 62.489773][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 62.499470][ T10] usb 5-1: USB disconnect, device number 10 [ 62.524236][ T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.694134][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 62.700380][ T65] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.709011][ T1367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 62.711528][ T65] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.739682][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 62.748776][ T65] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 62.757291][ T65] usb 4-1: Product: syz [ 62.761458][ T65] usb 4-1: Manufacturer: syz [ 62.768044][ T65] hub 4-1:4.0: USB hub found [ 62.968008][ T65] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 62.994113][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 63.005813][ T1370] tipc: Started in network mode [ 63.010728][ T1370] tipc: Node identity 2d0000000000000081, cluster identity 4711 [ 63.037867][ T1372] tipc: Cannot configure node identity twice [ 63.133908][ T36] audit: type=1400 audit(1843896477.849:352): avc: denied { map } for pid=1382 comm="syz.5.259" path="/28/dev/sda" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.169219][ T1349] incfs: Can't find or create .incomplete dir in ./file0 [ 63.176785][ T1349] incfs: mount failed -17 [ 63.181513][ T36] audit: type=1400 audit(1843896477.899:353): avc: denied { unmount } for pid=1347 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.205899][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.210596][ T36] audit: type=1400 audit(1843896477.929:354): avc: denied { create } for pid=1382 comm="syz.5.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.217074][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.247926][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.258123][ T10] usb 5-1: config 0 descriptor?? [ 63.304202][ T65] usb 4-1: USB disconnect, device number 10 [ 63.360468][ T1387] kernel profiling enabled (shift: 63) [ 63.366061][ T1387] profiling shift: 63 too large [ 63.373756][ T1387] kernel profiling enabled (shift: 63) [ 63.381017][ T1387] profiling shift: 63 too large [ 63.665257][ T10] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 63.674870][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input10 [ 63.713379][ T1413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 63.757513][ T10] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 63.774739][ T48] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 63.888926][ T381] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 63.936072][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 63.944302][ T48] usb 6-1: not running at top speed; connect to a high speed hub [ 63.974115][ T48] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 63.983194][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.991242][ T48] usb 6-1: Product: syz [ 63.995460][ T48] usb 6-1: Manufacturer: syz [ 64.000091][ T48] usb 6-1: SerialNumber: syz [ 64.045884][ T381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.057411][ T381] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 64.068594][ T381] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 Stopping sshd: [ 64.077874][ T381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.093626][ T381] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 64.294297][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 64.375891][ T1454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy OK [ 64.399163][ T1454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.408530][ T1454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy Stopping iptable[ 64.421941][ T1462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. s: [ 64.433776][ T1454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 OK [ 64.448362][ T381] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 64.467746][ T48] usb 6-1: 1:1 : bogus bTerminalLink 3 [ 64.473493][ T48] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 64.482437][ T381] usb 3-1: USB disconnect, device number 26 Stopping system message bus: [ 64.502379][ T48] usb 6-1: USB disconnect, device number 10 [ 64.542893][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory done killall: can't kill pid 325: No such process killall: can't kill pid 715: No such process killall: can't kill pid 841: No such process Stopping klogd: OK Stopping acpid: [ 64.968899][ T1499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 65.070151][ T65] usb 5-1: USB disconnect, device number 11 [ 65.114191][ T48] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 65.265306][ T48] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.276244][ T48] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.286535][ T48] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.294102][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 65.299436][ T48] usb 6-1: config 0 interface 0 has no altsetting 0 [ 65.313595][ T48] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 65.322756][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.333199][ T48] usb 6-1: config 0 descriptor?? [ 65.454158][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 65.460786][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.472126][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 65.478689][ T1511] overlayfs: failed to clone upperpath [ 65.482024][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 65.497148][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.510883][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.520192][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.534152][ T9] usb 3-1: SerialNumber: syz [ 65.539741][ T1505] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 65.547464][ T1505] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 65.555188][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 65.561239][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 65.568621][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.573976][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.579541][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.585220][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.590596][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.596018][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.601568][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.606967][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.612403][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.617993][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.623388][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.628712][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.634133][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.639606][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.644981][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.650616][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.656407][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.661825][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.667386][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.672790][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.678180][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.683856][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.689303][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.694724][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.700170][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.705593][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.710939][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.716341][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.721755][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.727175][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.732577][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.738041][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.743471][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.748670][ T48] ntrig 0003:1B96:0009.0005: unknown main item tag 0x0 [ 65.748701][ T48] ntrig 0003:1B96:0009.0005: unknown main item tag 0x0 [ 65.748725][ T48] ntrig 0003:1B96:0009.0005: unknown main item tag 0x0 [ 65.748748][ T48] ntrig 0003:1B96:0009.0005: unknown main item tag 0x0 [ 65.755826][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.770599][ T48] ntrig 0003:1B96:0009.0005: hidraw0: USB HID v0.14 Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0 [ 65.777331][ T1505] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 65.783932][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.793586][ T1505] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 65.801052][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.818626][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.823967][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.829362][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.835021][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.840492][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.846017][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.851487][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.856967][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.862311][ T1517] ./dev/sda1: Can't lookup blockdev OK[ 65.867987][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.873546][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.881081][ T1517] ./dev/sda1: Can't lookup blockdev Stopping syslogd[ 65.886572][ T1517] ./dev/sda1: Can't lookup blockdev : [ 65.893335][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.898619][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.904227][ T1517] ./dev/sda1: Can't lookup blockdev stopped /sbin/sy[ 65.909624][ T1517] ./dev/sda1: Can't lookup blockdev slogd (pid 92)[ 65.917236][ T840] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 65.917311][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.931538][ T1517] ./dev/sda1: Can't lookup blockdev OK[ 65.936851][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.942495][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.947858][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.953306][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.959054][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.964652][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.969238][ T48] usb 6-1: USB disconnect, device number 11 [ 65.970093][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.981225][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.986910][ T1517] ./dev/sda1: Can't lookup blockdev [ 65.992393][ T1517] ./dev/sda1: Can't lookup blockdev [ 66.014275][ T1505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.023235][ T1505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.084257][ T840] usb 5-1: Using ep0 maxpacket: 16 [ 66.090825][ T840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.099976][ T840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.111094][ T840] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 66.122492][ T840] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 66.133464][ T840] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 66.148028][ T840] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 66.159611][ T840] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 66.169762][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.177904][ T840] usb 5-1: Product: syz [ 66.182561][ T840] usb 5-1: Manufacturer: syz [ 66.187290][ T840] usb 5-1: SerialNumber: syz [ 66.234462][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 66.397083][ T840] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 66.408090][ T840] usb 5-1: USB disconnect, device number 12 [ 66.534518][ T1545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.543061][ T1545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.774132][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 66.935366][ T65] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 66.943481][ T65] usb 6-1: config 0 has no interface number 0 [ 66.949768][ T65] usb 6-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.960905][ T65] usb 6-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.970767][ T65] usb 6-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 umount: can't remount debugfs re[ 66.987635][ T65] usb 6-1: config 0 interface 16 has no altsetting 0 ad-only [ 67.004201][ T65] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 67.013404][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.022139][ T65] usb 6-1: config 0 descriptor?? [ 67.060195][ T1549] netlink: 'syz.4.288': attribute type 22 has an invalid length. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 67.126709][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 67.126740][ T36] audit: type=1400 audit(1843896481.849:386): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1653]" dev="pipefs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.0.189 closed by remote host. [ 67.186127][ T65] usbhid 6-1:0.16: can't add hid device: -71 [ 67.192286][ T65] usbhid 6-1:0.16: probe with driver usbhid failed with error -71 Sent SIGTERM to all processes [ 67.245211][ T65] usb 6-1: USB disconnect, device number 12 [ 67.332020][ T310] usb 3-1: USB disconnect, device number 27 [ 67.338767][ T310] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 67.425765][ T398] bridge_slave_1: left allmulticast mode [ 67.431545][ T398] bridge_slave_1: left promiscuous mode [ 67.437166][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.444583][ T398] bridge_slave_0: left allmulticast mode [ 67.450214][ T398] bridge_slave_0: left promiscuous mode [ 67.455978][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.463567][ T398] bridge_slave_1: left allmulticast mode [ 67.469263][ T398] bridge_slave_1: left promiscuous mode [ 67.474907][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.484303][ T398] bridge_slave_0: left allmulticast mode [ 67.489988][ T398] bridge_slave_0: left promiscuous mode [ 67.495607][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.616129][ T398] tipc: Left network mode [ 67.621326][ T398] veth1_macvtap: left promiscuous mode [ 67.626881][ T398] veth0_vlan: left promiscuous mode [ 67.632278][ T398] veth0_vlan: left promiscuous mode [ 68.055262][ T398] bridge_slave_1: left allmulticast mode [ 68.060962][ T398] bridge_slave_1: left promiscuous mode [ 68.066576][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.073898][ T398] bridge_slave_0: left allmulticast mode [ 68.079756][ T398] bridge_slave_0: left promiscuous mode [ 68.085394][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.092911][ T398] bridge_slave_1: left allmulticast mode [ 68.098631][ T398] bridge_slave_1: left promiscuous mode [ 68.104627][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.112001][ T398] bridge_slave_0: left allmulticast mode [ 68.117705][ T398] bridge_slave_0: left promiscuous mode [ 68.123289][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.275825][ T398] tipc: Left network mode [ 68.281358][ T398] veth1_macvtap: left promiscuous mode [ 68.286930][ T398] veth0_vlan: left promiscuous mode [ 68.292269][ T398] veth1_macvtap: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 68.595362][ T398] ------------[ cut here ]------------ [ 68.600937][ T398] WARNING: CPU: 1 PID: 398 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 68.611235][ T398] Modules linked in: [ 68.615187][ T398] CPU: 1 UID: 0 PID: 398 Comm: kworker/u8:6 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 68.627074][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.637310][ T398] Workqueue: netns cleanup_net [ 68.642774][ T398] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 68.649635][ T398] Code: e8 a1 2f d3 fc 4b 83 3c 3e 00 75 19 e8 c5 9c 79 fc 49 81 ff f8 07 00 00 74 1b e8 b7 9c 79 fc 49 83 c7 08 eb c9 e8 ac 9c 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 68.670520][ T398] RSP: 0018:ffffc9000c07fb90 EFLAGS: 00010293 [ 68.676898][ T398] RAX: ffffffff850fba84 RBX: ffff88812f2a0000 RCX: ffff8881159313c0 [ 68.684983][ T398] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881057140b8 [ 68.692941][ T398] RBP: ffffc9000c07fbb0 R08: ffffffff88551f87 R09: 1ffffffff10aa3f0 [ 68.700919][ T398] R10: dffffc0000000000 R11: fffffbfff10aa3f1 R12: dffffc0000000000 [ 68.709456][ T398] R13: dffffc0000000000 R14: ffff888105714000 R15: 00000000000000b8 [ 68.717478][ T398] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 68.726605][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.733272][ T398] CR2: 00007f5e8ce99e9c CR3: 0000000007caa000 CR4: 00000000003526b0 [ 68.741295][ T398] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 68.749386][ T398] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 68.757460][ T398] Call Trace: [ 68.760750][ T398] [ 68.763675][ T398] cleanup_net+0x6bd/0xc90 [ 68.768154][ T398] ? __cfi_cleanup_net+0x10/0x10 [ 68.773108][ T398] ? kick_pool+0xb9/0x540 [ 68.777471][ T398] process_scheduled_works+0x7f7/0x1060 [ 68.783122][ T398] worker_thread+0xc99/0x13f0 [ 68.787945][ T398] kthread+0x2c7/0x360 [ 68.792027][ T398] ? __cfi_worker_thread+0x10/0x10 [ 68.797263][ T398] ? __cfi_kthread+0x10/0x10 [ 68.801853][ T398] ret_from_fork+0x64/0xa0 [ 68.806561][ T398] ? __cfi_kthread+0x10/0x10 [ 68.811546][ T398] ret_from_fork_asm+0x1a/0x30 [ 68.816628][ T398] [ 68.819669][ T398] ---[ end trace 0000000000000000 ]--- [ 68.825809][ T398] ------------[ cut here ]------------ [ 68.831634][ T398] WARNING: CPU: 0 PID: 398 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 68.842708][ T398] Modules linked in: [ 68.846727][ T398] CPU: 0 UID: 0 PID: 398 Comm: kworker/u8:6 Tainted: G W syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 68.860252][ T398] Tainted: [W]=WARN [ 68.864414][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.874686][ T398] Workqueue: netns cleanup_net [ 68.879455][ T398] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 68.885560][ T398] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 70 9c 79 fc 49 81 ff f8 07 00 00 74 1b e8 62 9c 79 fc 49 83 c7 08 eb c5 e8 57 9c 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 47 9c 79 fc 5b 41 5c 41 5e 41 [ 68.905302][ T398] RSP: 0018:ffffc9000c07fb90 EFLAGS: 00010293 [ 68.911403][ T398] RAX: ffffffff850fbad9 RBX: ffff888105714800 RCX: ffff8881159313c0 [ 68.919431][ T398] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888105714808 [ 68.927461][ T398] RBP: ffffc9000c07fbb0 R08: ffffffff88551f87 R09: 1ffffffff10aa3f0 [ 68.935839][ T398] R10: dffffc0000000000 R11: fffffbfff10aa3f1 R12: dffffc0000000000 [ 68.943820][ T398] R13: dffffc0000000000 R14: ffff888105714000 R15: 0000000000000008 [ 68.952125][ T398] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 68.961632][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.968384][ T398] CR2: 00007f65de5f84c0 CR3: 000000010b79c000 CR4: 00000000003526b0 [ 68.976585][ T398] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 68.984606][ T398] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 68.993067][ T398] Call Trace: [ 68.996400][ T398] [ 68.999587][ T398] cleanup_net+0x6bd/0xc90 [ 69.003986][ T398] ? __cfi_cleanup_net+0x10/0x10 [ 69.009137][ T398] ? kick_pool+0xb9/0x540 [ 69.013511][ T398] process_scheduled_works+0x7f7/0x1060 [ 69.019467][ T398] worker_thread+0xc99/0x13f0 [ 69.024220][ T398] kthread+0x2c7/0x360 [ 69.028323][ T398] ? __cfi_worker_thread+0x10/0x10 [ 69.033616][ T398] ? __cfi_kthread+0x10/0x10 [ 69.038944][ T398] ret_from_fork+0x64/0xa0 [ 69.043368][ T398] ? __cfi_kthread+0x10/0x10 [ 69.048114][ T398] ret_from_fork_asm+0x1a/0x30 [ 69.053761][ T398] [ 69.057010][ T398] ---[ end trace 0000000000000000 ]--- [ 69.065807][ T398] ------------[ cut here ]------------ [ 69.071295][ T398] WARNING: CPU: 1 PID: 398 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 69.081382][ T398] Modules linked in: [ 69.085549][ T398] CPU: 1 UID: 0 PID: 398 Comm: kworker/u8:6 Tainted: G W syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 69.099998][ T398] Tainted: [W]=WARN [ 69.103887][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.114264][ T398] Workqueue: netns cleanup_net [ 69.119051][ T398] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 69.124644][ T398] Code: 3c 20 00 74 08 48 89 df e8 3f 0c ee fc 48 8b 3b e8 e7 f8 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 e6 b7 00 cc e8 52 79 94 fc <0f> 0b e9 b0 fd ff ff e8 46 79 94 fc 0f 0b e9 18 fe ff ff e8 3a 79 [ 69.144571][ T398] RSP: 0018:ffffc9000c07fb70 EFLAGS: 00010293 [ 69.150669][ T398] RAX: ffffffff84f4ddde RBX: ffff88812f2a0000 RCX: ffff8881159313c0 [ 69.159292][ T398] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881159313c0 [ 69.167300][ T398] RBP: ffffc9000c07fb98 R08: ffffffff88551f87 R09: 1ffffffff10aa3f0 [ 69.175320][ T398] R10: dffffc0000000000 R11: fffffbfff10aa3f1 R12: 1ffffffff10aa144 [ 69.183555][ T398] R13: dffffc0000000000 R14: ffff88812f2a0c00 R15: dffffc0000000000 [ 69.192885][ T398] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 69.201997][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.209066][ T398] CR2: 00007f5e8ce99e9c CR3: 0000000007caa000 CR4: 00000000003526b0 [ 69.217091][ T398] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 69.226101][ T398] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 69.234393][ T398] Call Trace: [ 69.237788][ T398] [ 69.240923][ T398] xfrm_net_exit+0x31/0x80 [ 69.245400][ T398] cleanup_net+0x6bd/0xc90 [ 69.249914][ T398] ? __cfi_cleanup_net+0x10/0x10 [ 69.254947][ T398] ? kick_pool+0xb9/0x540 [ 69.259410][ T398] process_scheduled_works+0x7f7/0x1060 [ 69.265641][ T398] worker_thread+0xc99/0x13f0 [ 69.270458][ T398] kthread+0x2c7/0x360 [ 69.274944][ T398] ? __cfi_worker_thread+0x10/0x10 [ 69.280087][ T398] ? __cfi_kthread+0x10/0x10 [ 69.284730][ T398] ret_from_fork+0x64/0xa0 [ 69.289594][ T398] ? __cfi_kthread+0x10/0x10 [ 69.294356][ T398] ret_from_fork_asm+0x1a/0x30 [ 69.299137][ T398] [ 69.303002][ T398] ---[ end trace 0000000000000000 ]--- [ 69.422136][ T1555] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 69.428786][ T1555] ACPI: PM: Preparing to enter system sleep state S5 [ 69.435844][ T1555] kvm: exiting hardware virtualization [ 69.441433][ T1555] reboot: Power down serialport: VM disconnected.