last executing test programs: 36.596384646s ago: executing program 3 (id=44): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000100)) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000000c0)={0x40, 0x3, 0x6, "810570f9ed26"}, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 34.991123126s ago: executing program 3 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000180)="89e7ee2c7edad9b4b47380c988", 0xd}, {&(0x7f0000000440)="fb10ab", 0x3}, {&(0x7f0000000140)="c7095a40", 0x4}], 0x3) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='(!\xef(.(\\-]\x00', &(0x7f0000000440)='\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) getgroups(0x7, &(0x7f0000000440)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0x0]) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) 34.347628351s ago: executing program 3 (id=53): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0xf0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xc, 0x5, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x3ff, 0x2, 0xcd8, 0x7, 0x1, 'macvlan1\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x2}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0xc, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x80200, 0x89, 0x33}, 0x18) mkdirat(r2, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="00000000c823a6dd07", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 34.303917752s ago: executing program 3 (id=55): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x1c9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 34.228122094s ago: executing program 32 (id=55): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x1c9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 4.773116122s ago: executing program 4 (id=275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000200000000000000000020000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.713225613s ago: executing program 4 (id=276): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x73, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0x7, 0xe4, {0xe4, 0x5, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5540c1a1d959ad58fe59444ec9a4134e73a678399591d9b4b9ed022895afe458932c272c6f00cddbf27049aeefd293ee545d9ab0e1d9cd8f0c12ddfd1e4ee4aa6628d39f2cd3cac9197f9ed8a17051cf5bf96cf7deb14f244edde93075ba3ed9713c3f14299b6655c677e3105a91008be2baff1e45f10a963d39a8dd5e2e04bb63fb7c07b1960130f775c456dec7fe032ad1b4296165d02275c18c1d7f0535375f9c5cd91dc221fda1c0aee0fb33cddee1ed0458a119c1bc8c294b0085c5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.097184573s ago: executing program 4 (id=283): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x40000, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') pread64(r0, &(0x7f0000033240)=""/102395, 0x18ffb, 0x8000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket(0x10, 0x3, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r3], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 2.938688947s ago: executing program 1 (id=284): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x8000) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000002940)) r1 = syz_io_uring_setup(0x730b, &(0x7f0000000140)={0x0, 0x8ca, 0x400, 0x2, 0x2e1}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)) r2 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xcae, 0x2, 0x103, 0x331, 0x0, r1}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000005c0)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x88be}, @val={0x2, 0x0, 0x7fff, 0x422, 0x4, 0x6}, @llc={@snap={0xaa, 0xaa, 'X', "a68bac", 0x8146}}}, 0x16) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x2, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000800)={{r5, &(0x7f00000004c0)='ethtool\x00', 0x81000, &(0x7f0000000580)={@_ha_fsid={[0xf05e, 0x7]}, {0x1, 0x8, 0x0, 0x8}}, 0x7ff, &(0x7f00000006c0), &(0x7f0000000700)=0x7}, {[0x1, 0x1, 0x79, 0xfffffffa]}, 0x1, 0x8b, &(0x7f0000000740)=""/139}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r6, 0x8, &(0x7f0000000240)={0x1, 0x1, 0x32, 0xffffffff80000001}) syz_io_uring_setup(0x6fcc, &(0x7f0000000500)={0x0, 0x1000001c, 0x40, 0x2, 0x24f, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) 2.902935778s ago: executing program 1 (id=285): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) (async) personality(0x5400004) (async) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) r1 = getpid() (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) readahead(r2, 0xfffffffffffffffb, 0x7) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) mmap(&(0x7f00001ea000/0x1000)=nil, 0x1000, 0x200000a, 0x80010, r0, 0x0) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00') (async) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x20) 2.635574994s ago: executing program 1 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f00000023c0)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) 2.589220516s ago: executing program 1 (id=287): ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) recvfrom(r0, &(0x7f0000000080)=""/247, 0xf7, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000011) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000480)={0x79, 0x0, 0xe54}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000500)=0x8) tee(r4, r4, 0x3ff, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000540)='team_slave_1\x00') bind$tipc(r3, &(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x1}}, 0x10) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f00000005c0)={0x2, [0x50d0fc37, 0x6]}) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000600)=0xffc00000) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000680)={@loopback, @private, 0x0}, &(0x7f00000006c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x128, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7a9b802972db21f4}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040880) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc1000008}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x9c, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd523}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x5c}}, 0xc085) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000c00), 0x121000, 0x0) close(r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r9, &(0x7f0000000c40)={0x2, 0x4e22, @private=0xa010100}, 0x10) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000c80)={0x1, 0x200, 0x7, 0x2, 0x7ff, 0xf}) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000cc0)=""/203) 2.487956878s ago: executing program 1 (id=288): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000005c0)=0x4000, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xffffff, 0x0, 0x0, 0x2ff6}, 0x10) write(r3, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001500014084000000fedbdf250a0000000400000004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) 2.42167421s ago: executing program 1 (id=291): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0x9, 0xff, 0x3, 0x8, 0x2, 0x1, 'syz1\x00'}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) (async) listen(r2, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$packet(0x11, 0x1, 0x300) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket(0x2, 0x80805, 0x0) r5 = accept4$unix(r2, 0x0, 0x0, 0x180800) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000000)="ee547fbc124c45", 0x7}, {&(0x7f0000000040)="d11f7a0257b085d5e5bafae3dd36b0460a3434b903479591b06efbf8dc5aba3fb67b3892eb47e27061042bd9753d664b0b74b5b1f3660f43bdf3efffb53f8993077d90a4b91a4ffff3687e2e0bfd352a92edeb5d21edf489400fe17fa4cd", 0x5e}, {&(0x7f0000000140)="4fbcd0eb17813cb975bbd8152ebe0c93815f9f1e1e60667b7de60d3d55cd0e2c9ec3f127b1e1fdd58f32b50e852830bb5e789a6e4ad95925a5d8dc35793a52df48c88c36da5a585da83bcc333d2a6d20f009b3d33b6cf13926942b739426e45ee9c5ccd9f071b61ae807fbe8cd9b7d8b16cab64d0353e39f556299744b22fa19181c1fb7", 0x84}], 0x3) (async) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000000)="ee547fbc124c45", 0x7}, {&(0x7f0000000040)="d11f7a0257b085d5e5bafae3dd36b0460a3434b903479591b06efbf8dc5aba3fb67b3892eb47e27061042bd9753d664b0b74b5b1f3660f43bdf3efffb53f8993077d90a4b91a4ffff3687e2e0bfd352a92edeb5d21edf489400fe17fa4cd", 0x5e}, {&(0x7f0000000140)="4fbcd0eb17813cb975bbd8152ebe0c93815f9f1e1e60667b7de60d3d55cd0e2c9ec3f127b1e1fdd58f32b50e852830bb5e789a6e4ad95925a5d8dc35793a52df48c88c36da5a585da83bcc333d2a6d20f009b3d33b6cf13926942b739426e45ee9c5ccd9f071b61ae807fbe8cd9b7d8b16cab64d0353e39f556299744b22fa19181c1fb7", 0x84}], 0x3) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff95}], 0x1}, 0x10010) (async) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff95}], 0x1}, 0x10010) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x804, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301010100"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) close_range(r7, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004090054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c2403"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) dup2(r4, r5) 2.396329781s ago: executing program 0 (id=292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4010) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ptrace(0x4207, r5) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x401, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x0, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d1, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x3, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0xc, 0x13fff, 0x1, 0x9]}, 0x45c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000002c0)) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fe862a18179e057eccd1e5aa2d"], 0x30}}, 0x8004) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001a662ca40fd07040034860000000109021200000000007f0904800000ff"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = socket$inet6(0xa, 0x802, 0x0) (async) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000001, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r10, 0x401870cc, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES64=r9], 0x20}}, 0x40816) 2.336135042s ago: executing program 0 (id=293): r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "27d2ad069f36bd0d", "7dfeca6137c7a7378106d1e0ec50f5a1b29d7971ae557883af3ffa57e744d825", "9bce1d96", "080e0fbb16095253"}, 0x38) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x10001) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000083, 0x0, 0x1001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x1, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r10, r11, 0x8f6, 0x0) vmsplice(r10, &(0x7f0000000700)=[{0x0}], 0x1, 0x4) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write(r0, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) 1.440671335s ago: executing program 0 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1002c, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}, 0x3a}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit}], 0x2f}) 1.399012705s ago: executing program 4 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0xfffffffe, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r10, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7973, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff8001}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x20002000}, 0x45) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000080)={0xc000, 0x8000}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f00000002c0)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0ae0"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) 1.337255597s ago: executing program 0 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x440c2, 0x0) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)}], 0x1}}], 0x1, 0x20080058) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='X'], 0x58}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.293882958s ago: executing program 2 (id=302): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x6, 0xffffffffffffffff, 'id0\x00'}) readv(r0, &(0x7f0000003900)=[{&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000001440)=""/248, 0xf8}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/65, 0x41}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/253, 0xfd}, {&(0x7f0000003880)=""/72, 0x48}], 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000000)="20b7c29ce5b6a092ce3ca91e31394f05e986288efd73f60154e3bf2d9072b961afe6988df373c69cf6dc6333883161", 0x2f}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="1a1c7a4ae8d1063901962884d15df5679113c1e7e35538e694f64cc2550c39a384da1099dad18509bd6e3c5e3ff576f632ade9cdeede43c22c4476598ed963b885de7f269ae8f986ae528195550faf9be50fb2dc985d3951ddb91e6a34a430e3ca842a67ff60659753", 0x69}, {&(0x7f0000000040)="45ff0edd773fd766bdce96d0cb1f13fc1fc0b314917fe25ac5b938bd54089c1970f8ed212c0f1ef9d290c04710aee8f679fdb0573e2a640a01fce8d4a7b0aa3b354c61c160cecfa586949f34ed3b96014f6f2d62244066fc7089af6ef87c6635f3aa87b5c1bdf8f0d7cc48ab0be61d725743d8ed378a23a8ea3c17e41b2e541279a1ee1d7065cba30a7dfc77041418308f7f4c84f65737dd7a0827b119e61ac7df8a6aea6b586ef75c87a7ddfe2645c2c87764128e3c99b0d2413ffad3f59076ade6c2bfa14ad34b3a2691df1f658416434cc62ca2eb3f6dc1d4d566ae2eeb5d61f1bec25fd2e5b498bd28d63e495e2ee93d4f59e53b724c5f9b0a6f0000000000000028fc0d2f", 0x107}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="7e98779fea8359ff6d3bbba9d13f560bd542edcd82511be23eaf256b43fe3aa9c352a30e4ec9a824529bdb9f57b4b5b0d7c800d660fb9d14a4e6154c0710f60deb75fd55ffa64f63f166785b49accddee0d4acc98d3a", 0x56}], 0x6, 0x0) 1.250744789s ago: executing program 2 (id=303): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4c05, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x81, 0x6, 0x1, 0xfffffffffffffc01, 0x7, 0x2, 0x6, 0x8, 0x9, 0x1, 0x3, 0xbe83, 0xffff, 0x0, 0x2, 0xd], 0x54000, 0x10000}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='/\x00'], 0x10) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(r0, 0x80207501, &(0x7f00000000c0)={0x0, 0xffff, 0x8, &(0x7f0000000080)}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000)={0xfff, "58ac15"}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4, 0x0, @loopback}, 0x1c) r5 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x1cb) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) 1.20024596s ago: executing program 2 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f00000023c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) 1.19993866s ago: executing program 4 (id=305): r0 = socket$pptp(0x18, 0x1, 0x2) read(r0, &(0x7f0000000000)=""/91, 0x5b) syz_usb_connect$uac2(0x3, 0x9f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x6, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4001, 0x0, 0x15, 0xb}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x402, 0x6, 0x4, 0xe, 0x8e3d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x2, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0xf7, 0x9}, @as_header={0x10, 0x24, 0x1, 0xd6, 0x1, 0x2, 0x5, 0xf, 0x175c, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0x80, 0x6}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x8, @mcast1, 0xba12}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 1.19892126s ago: executing program 2 (id=306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000200000000000000000020000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.137211362s ago: executing program 2 (id=307): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0x544f2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000321000/0x400000)=nil) fadvise64(r0, 0x5, 0x4, 0x2) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x70, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x71f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x14, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x9, 0x1}}]}}}]}}]}}, 0x0) 894.491208ms ago: executing program 0 (id=308): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCCONS(r0, 0x541d) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80) (async) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e2, 0x0, r4}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x1e2, 0x0, r4}}], 0x1, 0x0, 0x0) 154.507036ms ago: executing program 2 (id=309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x40000, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') pread64(r0, &(0x7f0000033240)=""/102395, 0x18ffb, 0x8000000000000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket(0x10, 0x3, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r3], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 1.03752ms ago: executing program 0 (id=310): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000002200)=""/4100, 0x1004}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000cc0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f00000004c0)=""/39, 0x27}], 0x9}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x16c, r1, 0x6296e0546638aa25, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x539}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29da}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x623}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa31}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000980)=ANY=[@ANYBLOB="12010102000000088205820540000102030109026e000301016004080b0002011130030904000000010130000a2401000a00080000000904010000010230000904010101010230000905010940000406300a2525d86d00000812000904020000010230000904020101010230000905820908000301020a25250001000e0300"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=311): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="300100", 0x3) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000000)=""/58, &(0x7f0000000080)=0x3a) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="240000001c005f02941d00fffffffff802000000dd00000000000000080008000d000000", 0x24) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r3, 0x0, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000298f000000000000008f3157d700308214ac46f8af9fdccdcf1251100336b4f3f9096b806bad79db5f376b150b76601df39f1c472c55c16101e5dc16fc0b8160a82280250658e478b358c89a6ecb055cf56b3125494bc40a177618e26c82b95b8e0475b0fd7d5145b7ac057b9aa92f1727a62c", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000500)={'icmp6\x00'}, &(0x7f0000000540)=0x1e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'pimreg0\x00'}) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) syz_usb_connect(0x3, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) kernel console output (not intermixed with test programs): ve_0: left promiscuous mode [ 32.335814][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.404650][ T624] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.411806][ T624] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.420747][ T624] bridge_slave_0: entered allmulticast mode [ 32.427213][ T624] bridge_slave_0: entered promiscuous mode [ 32.434642][ T624] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.441734][ T624] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.448898][ T624] bridge_slave_1: entered allmulticast mode [ 32.453084][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 32.455304][ T624] bridge_slave_1: entered promiscuous mode [ 32.461182][ T45] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 32.476021][ T45] usb 1-1: config 0 has no interface number 0 [ 32.482167][ T45] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 32.482283][ T377] veth1_macvtap: left promiscuous mode [ 32.500031][ T45] usb 1-1: config 0 interface 196 has no altsetting 0 [ 32.500831][ T377] veth0_vlan: left promiscuous mode [ 32.509149][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 32.522189][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.530420][ T45] usb 1-1: Product: syz [ 32.534721][ T45] usb 1-1: Manufacturer: syz [ 32.539457][ T45] usb 1-1: SerialNumber: syz [ 32.548979][ T45] usb 1-1: config 0 descriptor?? [ 32.557368][ T514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.562892][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 32.576305][ T31] cdc_ncm 2-1:1.0: bind() failure [ 32.585342][ T629] FAULT_INJECTION: forcing a failure. [ 32.585342][ T629] name failslab, interval 1, probability 0, space 0, times 0 [ 32.594947][ T31] usb 2-1: USB disconnect, device number 4 [ 32.606706][ T629] CPU: 0 UID: 0 PID: 629 Comm: syz.2.58 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 32.606738][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.606749][ T629] Call Trace: [ 32.606755][ T629] [ 32.606763][ T629] __dump_stack+0x21/0x30 [ 32.606792][ T629] dump_stack_lvl+0x140/0x1c0 [ 32.606816][ T629] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.606840][ T629] ? __kmalloc_node_noprof+0x252/0x500 [ 32.606861][ T629] ? __kvmalloc_node_noprof+0x128/0x300 [ 32.606888][ T629] dump_stack+0x19/0x20 [ 32.606911][ T629] should_fail_ex+0x3c2/0x510 [ 32.606931][ T629] ? shmem_initxattrs+0x2a8/0x530 [ 32.606955][ T629] should_failslab+0xac/0x100 [ 32.606977][ T629] __kmalloc_noprof+0x69/0x510 [ 32.606995][ T629] ? shmem_initxattrs+0x2a8/0x530 [ 32.607019][ T629] ? simple_xattr_alloc+0xa2/0x140 [ 32.607040][ T629] shmem_initxattrs+0x2a8/0x530 [ 32.607065][ T629] security_inode_init_security+0x434/0x600 [ 32.607088][ T629] ? __cfi_shmem_initxattrs+0x10/0x10 [ 32.607113][ T629] ? __cfi_security_inode_init_security+0x10/0x10 [ 32.607136][ T629] ? shmem_get_inode+0x81c/0xc10 [ 32.607159][ T629] shmem_tmpfile+0x9a/0x150 [ 32.607192][ T629] vfs_tmpfile+0x37e/0x580 [ 32.607216][ T629] kernel_tmpfile_open+0x54/0x90 [ 32.607239][ T629] ovl_copy_up_flags+0x224b/0x2d10 [ 32.607260][ T629] ? unwind_get_return_address+0x51/0x90 [ 32.607286][ T629] ? ovl_maybe_copy_up+0x170/0x170 [ 32.607303][ T629] ? stack_trace_save+0xaa/0x100 [ 32.607325][ T629] ? stack_depot_save_flags+0x38/0x800 [ 32.607348][ T629] ? kasan_save_track+0x4f/0x80 [ 32.607367][ T629] ? kasan_save_track+0x3e/0x80 [ 32.607387][ T629] ? kasan_save_free_info+0x44/0x50 [ 32.607412][ T629] ? __kasan_slab_free+0x5f/0x80 [ 32.607432][ T629] ? kfree+0x158/0x440 [ 32.607448][ T629] ? inode_doinit_use_xattr+0x2a8/0x550 [ 32.607470][ T629] ? inode_doinit_with_dentry+0x7c3/0xde0 [ 32.607492][ T629] ? selinux_d_instantiate+0x2b/0x40 [ 32.607511][ T629] ? security_d_instantiate+0xb8/0xf0 [ 32.607533][ T629] ? lookup_one_qstr_excl+0x12c/0x280 [ 32.607554][ T629] ? do_renameat2+0x44e/0xc30 [ 32.607571][ T629] ? do_syscall_64+0x57/0xf0 [ 32.607591][ T629] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.607615][ T629] ? avc_has_perm_noaudit+0x26b/0x360 [ 32.607636][ T629] ? __asan_memcpy+0x5a/0x80 [ 32.607654][ T629] ? avc_has_perm_noaudit+0x289/0x360 [ 32.607681][ T629] ? __cfi_ovl_lower_positive+0x10/0x10 [ 32.607704][ T629] ? avc_has_perm+0x155/0x240 [ 32.607725][ T629] ovl_copy_up+0x1b/0x30 [ 32.607743][ T629] ovl_rename+0x51f/0x1550 [ 32.607769][ T629] ? down_write+0xee/0x2b0 [ 32.607785][ T629] ? __cfi_down_write+0x10/0x10 [ 32.607801][ T629] ? lockref_get+0x131/0x1c0 [ 32.607828][ T629] ? __cfi_ovl_rename+0x10/0x10 [ 32.607851][ T629] ? __cfi_lockref_get+0x10/0x10 [ 32.607892][ T629] ? try_break_deleg+0x7c/0x130 [ 32.607916][ T629] ? __cfi_ovl_rename+0x10/0x10 [ 32.607939][ T629] vfs_rename+0xd59/0x1100 [ 32.607955][ T629] ? hook_file_free_security+0xc0/0xc0 [ 32.607980][ T629] ? __cfi_vfs_rename+0x10/0x10 [ 32.607997][ T629] ? hook_path_rename+0x44/0x60 [ 32.608019][ T629] ? bpf_lsm_path_rename+0xd/0x20 [ 32.608038][ T629] ? security_path_rename+0x143/0x2a0 [ 32.608060][ T629] do_renameat2+0x85d/0xc30 [ 32.608079][ T629] ? __cfi_do_renameat2+0x10/0x10 [ 32.608096][ T629] ? getname_flags+0x203/0x6b0 [ 32.608114][ T629] __x64_sys_rename+0x86/0xa0 [ 32.608130][ T629] x64_sys_call+0x150b/0x2ee0 [ 32.608148][ T629] do_syscall_64+0x57/0xf0 [ 32.608167][ T629] ? clear_bhb_loop+0x50/0xa0 [ 32.608198][ T629] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.608221][ T629] RIP: 0033:0x7fbb71f9e0d9 [ 32.608237][ T629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.608253][ T629] RSP: 002b:00007fbb72e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 32.608274][ T629] RAX: ffffffffffffffda RBX: 00007fbb72225fa0 RCX: 00007fbb71f9e0d9 [ 32.608288][ T629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 32.608301][ T629] RBP: 00007fbb72e83090 R08: 0000000000000000 R09: 0000000000000000 [ 32.608314][ T629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.608325][ T629] R13: 00007fbb72226038 R14: 00007fbb72225fa0 R15: 00007fffa52b31e8 [ 32.608341][ T629] [ 32.609689][ T36] audit: type=1400 audit(1786132762.859:192): avc: denied { read write } for pid=630 comm="syz.1.59" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.067187][ T36] audit: type=1400 audit(1786132762.859:193): avc: denied { open } for pid=630 comm="syz.1.59" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.090767][ T36] audit: type=1400 audit(1786132762.859:194): avc: denied { ioctl } for pid=630 comm="syz.1.59" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.115970][ T45] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 33.125011][ T45] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 33.146664][ T36] audit: type=1400 audit(1786132763.389:195): avc: denied { getopt } for pid=633 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.184763][ T640] capability: warning: `syz.2.62' uses 32-bit capabilities (legacy support in use) [ 33.198330][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.205457][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.215592][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.222681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.254505][ T624] veth0_vlan: entered promiscuous mode [ 33.267757][ T624] veth1_macvtap: entered promiscuous mode [ 33.306453][ T646] UDC core: g1: couldn't find an available UDC or it's busy [ 33.385746][ T652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=652 comm=syz.4.66 [ 33.396799][ T654] FAULT_INJECTION: forcing a failure. [ 33.396799][ T654] name failslab, interval 1, probability 0, space 0, times 0 [ 33.410712][ T654] CPU: 0 UID: 0 PID: 654 Comm: syz.2.67 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 33.410742][ T654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.410753][ T654] Call Trace: [ 33.410758][ T654] [ 33.410764][ T654] __dump_stack+0x21/0x30 [ 33.410791][ T654] dump_stack_lvl+0x140/0x1c0 [ 33.410811][ T654] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.410830][ T654] ? __kmalloc_node_noprof+0x252/0x500 [ 33.410848][ T654] ? __kvmalloc_node_noprof+0x128/0x300 [ 33.410873][ T654] dump_stack+0x19/0x20 [ 33.410892][ T654] should_fail_ex+0x3c2/0x510 [ 33.410910][ T654] ? shmem_initxattrs+0x2a8/0x530 [ 33.410929][ T654] should_failslab+0xac/0x100 [ 33.410942][ T654] __kmalloc_noprof+0x69/0x510 [ 33.410952][ T654] ? shmem_initxattrs+0x2a8/0x530 [ 33.410965][ T654] ? simple_xattr_alloc+0xa2/0x140 [ 33.410977][ T654] shmem_initxattrs+0x2a8/0x530 [ 33.410994][ T654] security_inode_init_security+0x434/0x600 [ 33.411009][ T654] ? __cfi_shmem_initxattrs+0x10/0x10 [ 33.411023][ T654] ? __cfi_security_inode_init_security+0x10/0x10 [ 33.411035][ T654] ? shmem_get_inode+0x81c/0xc10 [ 33.411048][ T654] shmem_tmpfile+0x9a/0x150 [ 33.411061][ T654] vfs_tmpfile+0x37e/0x580 [ 33.411075][ T654] kernel_tmpfile_open+0x54/0x90 [ 33.411087][ T654] ovl_copy_up_flags+0x224b/0x2d10 [ 33.411099][ T654] ? unwind_get_return_address+0x51/0x90 [ 33.411113][ T654] ? ovl_maybe_copy_up+0x170/0x170 [ 33.411122][ T654] ? stack_trace_save+0xaa/0x100 [ 33.411134][ T654] ? stack_depot_save_flags+0x38/0x800 [ 33.411146][ T654] ? kasan_save_track+0x4f/0x80 [ 33.411157][ T654] ? kasan_save_track+0x3e/0x80 [ 33.411168][ T654] ? kasan_save_free_info+0x44/0x50 [ 33.411182][ T654] ? __kasan_slab_free+0x5f/0x80 [ 33.411198][ T654] ? kfree+0x158/0x440 [ 33.411207][ T654] ? inode_doinit_use_xattr+0x2a8/0x550 [ 33.411219][ T654] ? inode_doinit_with_dentry+0x7c3/0xde0 [ 33.411231][ T654] ? selinux_d_instantiate+0x2b/0x40 [ 33.411242][ T654] ? security_d_instantiate+0xb8/0xf0 [ 33.411254][ T654] ? lookup_one_qstr_excl+0x12c/0x280 [ 33.411265][ T654] ? do_renameat2+0x44e/0xc30 [ 33.411274][ T654] ? do_syscall_64+0x57/0xf0 [ 33.411286][ T654] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.411300][ T654] ? avc_has_perm_noaudit+0x26b/0x360 [ 33.411311][ T654] ? __asan_memcpy+0x5a/0x80 [ 33.411321][ T654] ? avc_has_perm_noaudit+0x289/0x360 [ 33.411336][ T654] ? __cfi_ovl_lower_positive+0x10/0x10 [ 33.411350][ T654] ? avc_has_perm+0x155/0x240 [ 33.411361][ T654] ovl_copy_up+0x1b/0x30 [ 33.411370][ T654] ovl_rename+0x51f/0x1550 [ 33.411385][ T654] ? down_write+0xee/0x2b0 [ 33.411394][ T654] ? __cfi_down_write+0x10/0x10 [ 33.411402][ T654] ? lockref_get+0x131/0x1c0 [ 33.411418][ T654] ? __cfi_ovl_rename+0x10/0x10 [ 33.411431][ T654] ? __cfi_lockref_get+0x10/0x10 [ 33.411445][ T654] ? try_break_deleg+0x7c/0x130 [ 33.411458][ T654] ? __cfi_ovl_rename+0x10/0x10 [ 33.411471][ T654] vfs_rename+0xd59/0x1100 [ 33.411480][ T654] ? hook_file_free_security+0xc0/0xc0 [ 33.411505][ T654] ? __cfi_vfs_rename+0x10/0x10 [ 33.411514][ T654] ? hook_path_rename+0x44/0x60 [ 33.411526][ T654] ? bpf_lsm_path_rename+0xd/0x20 [ 33.411537][ T654] ? security_path_rename+0x143/0x2a0 [ 33.411550][ T654] do_renameat2+0x85d/0xc30 [ 33.411559][ T654] ? __cfi_do_renameat2+0x10/0x10 [ 33.411569][ T654] ? getname_flags+0x203/0x6b0 [ 33.411580][ T654] __x64_sys_rename+0x86/0xa0 [ 33.411589][ T654] x64_sys_call+0x150b/0x2ee0 [ 33.411598][ T654] do_syscall_64+0x57/0xf0 [ 33.411608][ T654] ? clear_bhb_loop+0x50/0xa0 [ 33.411621][ T654] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.411634][ T654] RIP: 0033:0x7fbb71f9e0d9 [ 33.411644][ T654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.411652][ T654] RSP: 002b:00007fbb72e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 33.411664][ T654] RAX: ffffffffffffffda RBX: 00007fbb72225fa0 RCX: 00007fbb71f9e0d9 [ 33.411672][ T654] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 33.411679][ T654] RBP: 00007fbb72e83090 R08: 0000000000000000 R09: 0000000000000000 [ 33.411685][ T654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.411692][ T654] R13: 00007fbb72226038 R14: 00007fbb72225fa0 R15: 00007fffa52b31e8 [ 33.411700][ T654] [ 33.633109][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.014636][ T45] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 34.023798][ T45] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 34.031898][ T45] usb 5-1: Product: syz [ 34.038209][ T45] ftdi_sio 5-1:5.0: FTDI USB Serial Device converter detected [ 34.046136][ T45] usb 5-1: Detected FT4233HP [ 34.239513][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 34.246600][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 34.253953][ T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 34.264484][ T45] usb 5-1: USB disconnect, device number 2 [ 34.271245][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 34.280965][ T45] ftdi_sio 5-1:5.0: device disconnected [ 34.380740][ T672] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure [ 34.605192][ T676] sock: sock_set_timeout: `syz.1.75' (pid 676) tries to set negative timeout [ 34.636448][ T680] FAULT_INJECTION: forcing a failure. [ 34.636448][ T680] name failslab, interval 1, probability 0, space 0, times 0 [ 34.649245][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.649237][ T680] CPU: 1 UID: 0 PID: 680 Comm: syz.1.77 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 34.649271][ T680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.649281][ T680] Call Trace: [ 34.649288][ T680] [ 34.649295][ T680] __dump_stack+0x21/0x30 [ 34.649325][ T680] dump_stack_lvl+0x140/0x1c0 [ 34.649348][ T680] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.649373][ T680] ? avc_has_perm+0x155/0x240 [ 34.649396][ T680] dump_stack+0x19/0x20 [ 34.649417][ T680] should_fail_ex+0x3c2/0x510 [ 34.649439][ T680] should_failslab+0xac/0x100 [ 34.649462][ T680] __kmalloc_node_noprof+0x69/0x500 [ 34.649480][ T680] ? __kvmalloc_node_noprof+0x128/0x300 [ 34.649507][ T680] ? __cfi_simple_xattr_list+0x10/0x10 [ 34.649527][ T680] ? avc_has_perm_noaudit+0x289/0x360 [ 34.649548][ T680] __kvmalloc_node_noprof+0x128/0x300 [ 34.649574][ T680] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 34.649603][ T680] ? vfs_listxattr+0xd1/0x140 [ 34.649620][ T680] ovl_copy_xattr+0x171/0xb90 [ 34.649640][ T680] ovl_copy_up_metadata+0x1c6/0xbe0 [ 34.649659][ T680] ? ovl_copy_up_file+0x6a0/0x6a0 [ 34.649676][ T680] ? __kasan_check_write+0x18/0x20 [ 34.649694][ T680] ? generic_permission+0x1ec/0x590 [ 34.649715][ T680] ? __kasan_check_write+0x18/0x20 [ 34.649732][ T680] ? _raw_spin_lock+0x92/0x120 [ 34.649752][ T680] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.649772][ T680] ? bpf_lsm_inode_post_create_tmpfile+0xd/0x20 [ 34.649793][ T680] ? security_inode_post_create_tmpfile+0x6d/0xe0 [ 34.649816][ T680] ? vfs_tmpfile+0x4dd/0x580 [ 34.649839][ T680] ovl_copy_up_flags+0x250d/0x2d10 [ 34.649859][ T680] ? unwind_get_return_address+0x51/0x90 [ 34.649884][ T680] ? ovl_maybe_copy_up+0x170/0x170 [ 34.649901][ T680] ? stack_trace_save+0xaa/0x100 [ 34.649929][ T680] ? stack_depot_save_flags+0x38/0x800 [ 34.649952][ T680] ? kasan_save_track+0x4f/0x80 [ 34.649972][ T680] ? kasan_save_track+0x3e/0x80 [ 34.649991][ T680] ? kasan_save_free_info+0x44/0x50 [ 34.650015][ T680] ? __kasan_slab_free+0x5f/0x80 [ 34.650034][ T680] ? kfree+0x158/0x440 [ 34.650050][ T680] ? inode_doinit_use_xattr+0x2a8/0x550 [ 34.650071][ T680] ? inode_doinit_with_dentry+0x7c3/0xde0 [ 34.650091][ T680] ? selinux_d_instantiate+0x2b/0x40 [ 34.650113][ T680] ? security_d_instantiate+0xb8/0xf0 [ 34.650133][ T680] ? lookup_one_qstr_excl+0x12c/0x280 [ 34.650153][ T680] ? do_renameat2+0x44e/0xc30 [ 34.650170][ T680] ? do_syscall_64+0x57/0xf0 [ 34.650190][ T680] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.650215][ T680] ? avc_has_perm_noaudit+0x26b/0x360 [ 34.650234][ T680] ? __asan_memcpy+0x5a/0x80 [ 34.650252][ T680] ? avc_has_perm_noaudit+0x289/0x360 [ 34.650278][ T680] ? __cfi_ovl_lower_positive+0x10/0x10 [ 34.650301][ T680] ? avc_has_perm+0x155/0x240 [ 34.650321][ T680] ovl_copy_up+0x1b/0x30 [ 34.650337][ T680] ovl_rename+0x51f/0x1550 [ 34.650363][ T680] ? down_write+0xee/0x2b0 [ 34.650379][ T680] ? __cfi_down_write+0x10/0x10 [ 34.650394][ T680] ? lockref_get+0x131/0x1c0 [ 34.650417][ T680] ? __cfi_ovl_rename+0x10/0x10 [ 34.650440][ T680] ? __cfi_lockref_get+0x10/0x10 [ 34.650464][ T680] ? try_break_deleg+0x7c/0x130 [ 34.650487][ T680] ? __cfi_ovl_rename+0x10/0x10 [ 34.650510][ T680] vfs_rename+0xd59/0x1100 [ 34.650525][ T680] ? hook_file_free_security+0xc0/0xc0 [ 34.650550][ T680] ? __cfi_vfs_rename+0x10/0x10 [ 34.650566][ T680] ? hook_path_rename+0x44/0x60 [ 34.650588][ T680] ? bpf_lsm_path_rename+0xd/0x20 [ 34.650606][ T680] ? security_path_rename+0x143/0x2a0 [ 34.650628][ T680] do_renameat2+0x85d/0xc30 [ 34.650645][ T680] ? __cfi_do_renameat2+0x10/0x10 [ 34.650663][ T680] ? getname_flags+0x203/0x6b0 [ 34.650682][ T680] __x64_sys_rename+0x86/0xa0 [ 34.650699][ T680] x64_sys_call+0x150b/0x2ee0 [ 34.650715][ T680] do_syscall_64+0x57/0xf0 [ 34.650733][ T680] ? clear_bhb_loop+0x50/0xa0 [ 34.650756][ T680] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.650778][ T680] RIP: 0033:0x7f043c39e0d9 [ 34.650795][ T680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.650811][ T680] RSP: 002b:00007f043d1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 34.650831][ T680] RAX: ffffffffffffffda RBX: 00007f043c625fa0 RCX: 00007f043c39e0d9 [ 34.650844][ T680] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 34.650856][ T680] RBP: 00007f043d1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 34.650868][ T680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.650879][ T680] R13: 00007f043c626038 R14: 00007f043c625fa0 R15: 00007ffeca022df8 [ 34.650894][ T680] [ 34.768189][ T682] SELinux: failed to load policy [ 34.934189][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.962219][ T687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.80'. [ 34.963860][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.989082][ T689] netlink: 1344 bytes leftover after parsing attributes in process `syz.1.78'. [ 34.992626][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 35.017290][ T693] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.022118][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.066729][ T45] usb 1-1: USB disconnect, device number 4 [ 35.086428][ T9] usb 3-1: config 0 descriptor?? [ 35.097153][ T698] x_tables: duplicate entry at hook 2 [ 35.108602][ T687] tipc: Started in network mode [ 35.211001][ T687] tipc: Node identity ac14140f, cluster identity 4711 [ 35.218288][ T687] tipc: Enabled bearer , priority 10 [ 35.696837][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 35.705300][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 35.712878][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 35.720670][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 35.728286][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 35.737621][ T9] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 35.803658][ T9] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 9: -71 [ 35.813511][ T9] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -71 [ 35.823132][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.833243][ T9] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 35.842018][ T9] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 35.886170][ T9] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 35.903858][ T9] usb 3-1: USB disconnect, device number 4 [ 36.003449][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 36.020464][ T10] usb 2-1: config 64 has an invalid interface number: 238 but max is 0 [ 36.033524][ T10] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 36.058941][ T10] usb 2-1: config 64 has no interface number 0 [ 36.070984][ T10] usb 2-1: config 64 interface 238 has no altsetting 0 [ 36.084692][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 36.094921][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.102937][ T10] usb 2-1: Product: syz [ 36.107295][ T10] usb 2-1: Manufacturer: syz [ 36.111900][ T10] usb 2-1: SerialNumber: syz [ 36.333141][ T404] tipc: Node number set to 2886997007 [ 36.413098][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.463227][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 36.563088][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 36.569217][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 36.577487][ T9] usb 3-1: config 0 has no interface number 0 [ 36.583627][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 36.593681][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 36.601984][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 36.603108][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.611298][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.625580][ T9] usb 3-1: Product: syz [ 36.629740][ T9] usb 3-1: Manufacturer: syz [ 36.634350][ T9] usb 3-1: SerialNumber: syz [ 36.639452][ T9] usb 3-1: config 0 descriptor?? [ 36.644827][ T722] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.823880][ T10] uvcvideo 2-1:64.238: Found Unit with invalid ID 0 [ 36.830677][ T10] usb 2-1: Found UVC 0.00 device syz (046d:087c) [ 36.837131][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 36.837146][ T36] audit: type=1400 audit(1786132767.079:226): avc: denied { create } for pid=733 comm="syz.1.96" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.863777][ T36] audit: type=1400 audit(1786132767.079:227): avc: denied { setopt } for pid=733 comm="syz.1.96" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.863802][ T10] usb 2-1: No valid video chain found. [ 36.887107][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.894032][ T10] usb 2-1: USB disconnect, device number 5 [ 36.903909][ T36] audit: type=1400 audit(1786132767.089:228): avc: denied { connect } for pid=733 comm="syz.1.96" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.929541][ T36] audit: type=1400 audit(1786132767.139:229): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.064063][ T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 37.073138][ T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 37.153105][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 37.273202][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.283148][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.423092][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 37.429288][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.440352][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.450112][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 37.462937][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 37.472009][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.480524][ T10] usb 2-1: config 0 descriptor?? [ 37.523094][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.633235][ T45] usb usb1-port1: attempt power cycle [ 37.897207][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input6 [ 37.909280][ T36] audit: type=1400 audit(1786132768.159:230): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=475 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.909708][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input7 [ 37.932171][ T36] audit: type=1400 audit(1786132768.159:231): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=475 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.966222][ T10] kye 0003:0458:5011.0003: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 37.975534][ T36] audit: type=1400 audit(1786132768.219:232): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=475 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.004453][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 38.024101][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.123014][ T36] audit: type=1400 audit(1786132768.369:233): avc: denied { name_bind } for pid=746 comm="syz.4.100" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.144716][ T36] audit: type=1400 audit(1786132768.379:234): avc: denied { node_bind } for pid=746 comm="syz.4.100" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.174207][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.298591][ T10] usb 2-1: USB disconnect, device number 6 [ 38.390850][ T758] FAULT_INJECTION: forcing a failure. [ 38.390850][ T758] name failslab, interval 1, probability 0, space 0, times 0 [ 38.403630][ T758] CPU: 1 UID: 0 PID: 758 Comm: syz.4.104 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 38.403661][ T758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.403674][ T758] Call Trace: [ 38.403680][ T758] [ 38.403688][ T758] __dump_stack+0x21/0x30 [ 38.403719][ T758] dump_stack_lvl+0x140/0x1c0 [ 38.403743][ T758] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.403769][ T758] dump_stack+0x19/0x20 [ 38.403790][ T758] should_fail_ex+0x3c2/0x510 [ 38.403811][ T758] should_failslab+0xac/0x100 [ 38.403833][ T758] __kmalloc_node_noprof+0x69/0x500 [ 38.403853][ T758] ? __kvmalloc_node_noprof+0x128/0x300 [ 38.403881][ T758] __kvmalloc_node_noprof+0x128/0x300 [ 38.403905][ T758] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 38.403931][ T758] ? avc_has_perm_noaudit+0x289/0x360 [ 38.403954][ T758] simple_xattr_alloc+0x67/0x140 [ 38.403974][ T758] simple_xattr_set+0x45/0x300 [ 38.403995][ T758] shmem_xattr_handler_set+0x198/0x2d0 [ 38.404019][ T758] ? __cfi_shmem_xattr_handler_set+0x10/0x10 [ 38.404042][ T758] __vfs_setxattr+0x453/0x4a0 [ 38.404070][ T758] __vfs_setxattr_noperm+0x12d/0x670 [ 38.404105][ T758] __vfs_setxattr_locked+0x212/0x240 [ 38.404122][ T758] vfs_setxattr+0x16b/0x2f0 [ 38.404139][ T758] ? __cfi_vfs_setxattr+0x10/0x10 [ 38.404156][ T758] ? kvfree+0x39/0x50 [ 38.404171][ T758] ? ovl_copy_xattr+0xa82/0xb90 [ 38.404190][ T758] ovl_check_setxattr+0x132/0x270 [ 38.404211][ T758] ovl_copy_up_metadata+0x576/0xbe0 [ 38.404231][ T758] ? ovl_copy_up_file+0x6a0/0x6a0 [ 38.404249][ T758] ? __kasan_check_write+0x18/0x20 [ 38.404267][ T758] ? generic_permission+0x1ec/0x590 [ 38.404289][ T758] ? __kasan_check_write+0x18/0x20 [ 38.404307][ T758] ? _raw_spin_lock+0x92/0x120 [ 38.404327][ T758] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.404348][ T758] ? bpf_lsm_inode_post_create_tmpfile+0xd/0x20 [ 38.404369][ T758] ? security_inode_post_create_tmpfile+0x6d/0xe0 [ 38.404394][ T758] ? vfs_tmpfile+0x4dd/0x580 [ 38.404419][ T758] ovl_copy_up_flags+0x250d/0x2d10 [ 38.404439][ T758] ? unwind_get_return_address+0x51/0x90 [ 38.404464][ T758] ? ovl_maybe_copy_up+0x170/0x170 [ 38.404482][ T758] ? stack_trace_save+0xaa/0x100 [ 38.404504][ T758] ? stack_depot_save_flags+0x38/0x800 [ 38.404527][ T758] ? kasan_save_track+0x4f/0x80 [ 38.404547][ T758] ? kasan_save_track+0x3e/0x80 [ 38.404570][ T758] ? kasan_save_free_info+0x44/0x50 [ 38.404595][ T758] ? __kasan_slab_free+0x5f/0x80 [ 38.404616][ T758] ? kfree+0x158/0x440 [ 38.404632][ T758] ? inode_doinit_use_xattr+0x2a8/0x550 [ 38.404654][ T758] ? inode_doinit_with_dentry+0x7c3/0xde0 [ 38.404676][ T758] ? selinux_d_instantiate+0x2b/0x40 [ 38.404697][ T758] ? security_d_instantiate+0xb8/0xf0 [ 38.404718][ T758] ? lookup_one_qstr_excl+0x12c/0x280 [ 38.404740][ T758] ? do_renameat2+0x44e/0xc30 [ 38.404757][ T758] ? do_syscall_64+0x57/0xf0 [ 38.404777][ T758] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.404802][ T758] ? avc_has_perm_noaudit+0x26b/0x360 [ 38.404822][ T758] ? __asan_memcpy+0x5a/0x80 [ 38.404839][ T758] ? avc_has_perm_noaudit+0x289/0x360 [ 38.404868][ T758] ? __cfi_ovl_lower_positive+0x10/0x10 [ 38.404891][ T758] ? avc_has_perm+0x155/0x240 [ 38.404912][ T758] ovl_copy_up+0x1b/0x30 [ 38.404929][ T758] ovl_rename+0x51f/0x1550 [ 38.404956][ T758] ? down_write+0xee/0x2b0 [ 38.404972][ T758] ? __cfi_down_write+0x10/0x10 [ 38.404988][ T758] ? lockref_get+0x131/0x1c0 [ 38.405015][ T758] ? __cfi_ovl_rename+0x10/0x10 [ 38.405038][ T758] ? __cfi_lockref_get+0x10/0x10 [ 38.405062][ T758] ? try_break_deleg+0x7c/0x130 [ 38.405087][ T758] ? __cfi_ovl_rename+0x10/0x10 [ 38.405117][ T758] vfs_rename+0xd59/0x1100 [ 38.405133][ T758] ? hook_file_free_security+0xc0/0xc0 [ 38.405160][ T758] ? __cfi_vfs_rename+0x10/0x10 [ 38.405176][ T758] ? hook_path_rename+0x44/0x60 [ 38.405217][ T758] ? bpf_lsm_path_rename+0xd/0x20 [ 38.405235][ T758] ? security_path_rename+0x143/0x2a0 [ 38.405258][ T758] do_renameat2+0x85d/0xc30 [ 38.405277][ T758] ? __cfi_do_renameat2+0x10/0x10 [ 38.405295][ T758] ? getname_flags+0x203/0x6b0 [ 38.405315][ T758] __x64_sys_rename+0x86/0xa0 [ 38.405333][ T758] x64_sys_call+0x150b/0x2ee0 [ 38.405350][ T758] do_syscall_64+0x57/0xf0 [ 38.405370][ T758] ? clear_bhb_loop+0x50/0xa0 [ 38.405394][ T758] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.405417][ T758] RIP: 0033:0x7fdf0d79e0d9 [ 38.405434][ T758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.405449][ T758] RSP: 002b:00007fdf0e6f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 38.405469][ T758] RAX: ffffffffffffffda RBX: 00007fdf0da25fa0 RCX: 00007fdf0d79e0d9 [ 38.405484][ T758] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 38.405497][ T758] RBP: 00007fdf0e6f3090 R08: 0000000000000000 R09: 0000000000000000 [ 38.405509][ T758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.405521][ T758] R13: 00007fdf0da26038 R14: 00007fdf0da25fa0 R15: 00007ffdca7aa038 [ 38.405537][ T758] [ 38.753461][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.760270][ T45] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 38.914439][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.934161][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.938818][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 38.959175][ T9] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 38.968232][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.976291][ T9] usb 5-1: Product: syz [ 38.980459][ T9] usb 5-1: Manufacturer: syz [ 38.985834][ T9] usb 5-1: SerialNumber: syz [ 38.992404][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 39.000254][ T9] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 39.008361][ T9] scsi host1: usb-storage 5-1:1.0 [ 39.074117][ T45] usb 1-1: device descriptor read/8, error -71 [ 39.113309][ T404] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.185164][ T31] usb 3-1: USB disconnect, device number 5 [ 39.192422][ T45] usb usb1-port1: unable to enumerate USB device [ 39.199160][ T9] usb 5-1: USB disconnect, device number 3 [ 39.253900][ T36] audit: type=1400 audit(1786132769.509:235): avc: denied { ioctl } for pid=775 comm="syz.0.111" path="socket:[5025]" dev="sockfs" ino=5025 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.278351][ T404] usb 2-1: Using ep0 maxpacket: 16 [ 39.290281][ T404] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 39.306996][ T404] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.310535][ T780] FAULT_INJECTION: forcing a failure. [ 39.310535][ T780] name failslab, interval 1, probability 0, space 0, times 0 [ 39.320074][ T404] usb 2-1: config 1 interface 0 has no altsetting 0 [ 39.333244][ T780] CPU: 1 UID: 0 PID: 780 Comm: syz.0.113 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 39.333272][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.333284][ T780] Call Trace: [ 39.333290][ T780] [ 39.333297][ T780] __dump_stack+0x21/0x30 [ 39.333328][ T780] dump_stack_lvl+0x140/0x1c0 [ 39.333351][ T780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.333374][ T780] ? __kasan_kmalloc+0x96/0xb0 [ 39.333396][ T780] dump_stack+0x19/0x20 [ 39.333417][ T780] should_fail_ex+0x3c2/0x510 [ 39.333437][ T780] should_failslab+0xac/0x100 [ 39.333459][ T780] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 39.333479][ T780] ? simple_xattr_set+0x5e/0x300 [ 39.333500][ T780] ? __asan_memcpy+0x5a/0x80 [ 39.333518][ T780] kstrdup+0x4d/0x130 [ 39.333543][ T780] simple_xattr_set+0x5e/0x300 [ 39.333562][ T780] shmem_xattr_handler_set+0x198/0x2d0 [ 39.333585][ T780] ? __cfi_shmem_xattr_handler_set+0x10/0x10 [ 39.333608][ T780] __vfs_setxattr+0x453/0x4a0 [ 39.333634][ T780] __vfs_setxattr_noperm+0x12d/0x670 [ 39.333660][ T780] __vfs_setxattr_locked+0x212/0x240 [ 39.333677][ T780] vfs_setxattr+0x16b/0x2f0 [ 39.333693][ T780] ? __cfi_vfs_setxattr+0x10/0x10 [ 39.333709][ T780] ? kvfree+0x39/0x50 [ 39.333724][ T780] ? ovl_copy_xattr+0xa82/0xb90 [ 39.333742][ T780] ovl_check_setxattr+0x132/0x270 [ 39.333762][ T780] ovl_copy_up_metadata+0x576/0xbe0 [ 39.333780][ T780] ? ovl_copy_up_file+0x6a0/0x6a0 [ 39.333798][ T780] ? __kasan_check_write+0x18/0x20 [ 39.333816][ T780] ? generic_permission+0x1ec/0x590 [ 39.333836][ T780] ? __kasan_check_write+0x18/0x20 [ 39.333853][ T780] ? _raw_spin_lock+0x92/0x120 [ 39.333880][ T780] ? __cfi__raw_spin_lock+0x10/0x10 [ 39.333900][ T780] ? bpf_lsm_inode_post_create_tmpfile+0xd/0x20 [ 39.333922][ T780] ? security_inode_post_create_tmpfile+0x6d/0xe0 [ 39.333946][ T780] ? vfs_tmpfile+0x4dd/0x580 [ 39.333969][ T780] ovl_copy_up_flags+0x250d/0x2d10 [ 39.333988][ T780] ? unwind_get_return_address+0x51/0x90 [ 39.334013][ T780] ? ovl_maybe_copy_up+0x170/0x170 [ 39.334030][ T780] ? stack_trace_save+0xaa/0x100 [ 39.334052][ T780] ? stack_depot_save_flags+0x38/0x800 [ 39.334074][ T780] ? kasan_save_track+0x4f/0x80 [ 39.334093][ T780] ? kasan_save_track+0x3e/0x80 [ 39.334113][ T780] ? kasan_save_free_info+0x44/0x50 [ 39.334137][ T780] ? __kasan_slab_free+0x5f/0x80 [ 39.334156][ T780] ? kfree+0x158/0x440 [ 39.334172][ T780] ? inode_doinit_use_xattr+0x2a8/0x550 [ 39.334193][ T780] ? inode_doinit_with_dentry+0x7c3/0xde0 [ 39.334214][ T780] ? selinux_d_instantiate+0x2b/0x40 [ 39.334234][ T780] ? security_d_instantiate+0xb8/0xf0 [ 39.334254][ T780] ? lookup_one_qstr_excl+0x12c/0x280 [ 39.334274][ T780] ? do_renameat2+0x44e/0xc30 [ 39.334290][ T780] ? do_syscall_64+0x57/0xf0 [ 39.334309][ T780] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.334333][ T780] ? avc_has_perm_noaudit+0x26b/0x360 [ 39.334353][ T780] ? __asan_memcpy+0x5a/0x80 [ 39.334369][ T780] ? avc_has_perm_noaudit+0x289/0x360 [ 39.334392][ T780] ? __cfi_ovl_lower_positive+0x10/0x10 [ 39.334414][ T780] ? avc_has_perm+0x155/0x240 [ 39.334434][ T780] ovl_copy_up+0x1b/0x30 [ 39.334451][ T780] ovl_rename+0x51f/0x1550 [ 39.334476][ T780] ? down_write+0xee/0x2b0 [ 39.334491][ T780] ? __cfi_down_write+0x10/0x10 [ 39.334506][ T780] ? lockref_get+0x131/0x1c0 [ 39.334530][ T780] ? __cfi_ovl_rename+0x10/0x10 [ 39.334553][ T780] ? __cfi_lockref_get+0x10/0x10 [ 39.334577][ T780] ? try_break_deleg+0x7c/0x130 [ 39.334599][ T780] ? __cfi_ovl_rename+0x10/0x10 [ 39.334622][ T780] vfs_rename+0xd59/0x1100 [ 39.334638][ T780] ? hook_file_free_security+0xc0/0xc0 [ 39.334664][ T780] ? __cfi_vfs_rename+0x10/0x10 [ 39.334680][ T780] ? hook_path_rename+0x44/0x60 [ 39.334701][ T780] ? bpf_lsm_path_rename+0xd/0x20 [ 39.334718][ T780] ? security_path_rename+0x143/0x2a0 [ 39.334740][ T780] do_renameat2+0x85d/0xc30 [ 39.334758][ T780] ? __cfi_do_renameat2+0x10/0x10 [ 39.334776][ T780] ? getname_flags+0x203/0x6b0 [ 39.334795][ T780] __x64_sys_rename+0x86/0xa0 [ 39.334811][ T780] x64_sys_call+0x150b/0x2ee0 [ 39.334827][ T780] do_syscall_64+0x57/0xf0 [ 39.334847][ T780] ? clear_bhb_loop+0x50/0xa0 [ 39.334869][ T780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.334898][ T780] RIP: 0033:0x7f760579e0d9 [ 39.334914][ T780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.334929][ T780] RSP: 002b:00007f76066df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 39.334948][ T780] RAX: ffffffffffffffda RBX: 00007f7605a25fa0 RCX: 00007f760579e0d9 [ 39.334962][ T780] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 39.334975][ T780] RBP: 00007f76066df090 R08: 0000000000000000 R09: 0000000000000000 [ 39.334986][ T780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.334997][ T780] R13: 00007f7605a26038 R14: 00007f7605a25fa0 R15: 00007ffc3b0bb308 [ 39.335012][ T780] [ 39.844871][ T404] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40 [ 39.854256][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.862563][ T404] usb 2-1: Product: И [ 39.866838][ T404] usb 2-1: Manufacturer: Й [ 39.871413][ T404] usb 2-1: SerialNumber: ᠉ [ 40.113089][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.153089][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 40.264121][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.275058][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.283855][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.284829][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 40.293872][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.302374][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.316019][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.319797][ T9] usb 5-1: config 0 descriptor?? [ 40.330710][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.339661][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.346584][ T404] usbhid 2-1:1.0: can't add hid device: -71 [ 40.349843][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 40.356055][ T404] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 40.368099][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 40.377310][ T404] usb 2-1: USB disconnect, device number 7 [ 40.385474][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.397753][ T31] usb 1-1: Product: syz [ 40.401925][ T31] usb 1-1: Manufacturer: syz [ 40.406727][ T31] usb 1-1: SerialNumber: syz [ 40.473206][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.536089][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 40.543705][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 40.551104][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 40.558531][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 40.566529][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 40.574738][ T9] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 40.623759][ T31] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 40.624082][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 40.638644][ T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 40.647328][ T10] usb 3-1: config 0 has no interface number 0 [ 40.653589][ T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 40.663813][ T10] usb 3-1: config 0 interface 196 has no altsetting 0 [ 40.672037][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 40.674286][ T31] usb 1-1: USB disconnect, device number 9 [ 40.683080][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.705013][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.720837][ T10] usb 3-1: Product: syz [ 40.725096][ T10] usb 3-1: Manufacturer: syz [ 40.729816][ T10] usb 3-1: SerialNumber: syz [ 40.735888][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.744480][ T10] usb 3-1: config 0 descriptor?? [ 40.744567][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.752831][ T805] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 40.757968][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.772936][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.781267][ T9] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -71 [ 40.790643][ T9] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -71 [ 40.799921][ T9] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 40.808670][ T9] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 40.816812][ T9] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -71 [ 40.828053][ T9] usb 5-1: USB disconnect, device number 4 [ 41.168346][ T10] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 41.177472][ T10] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 41.403800][ T823] Invalid ELF header magic: != ELF [ 41.523140][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.674382][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.682870][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 41.696893][ T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 41.706013][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.714286][ T10] usb 1-1: Product: syz [ 41.718466][ T10] usb 1-1: Manufacturer: syz [ 41.727403][ T10] usb 1-1: SerialNumber: syz [ 41.735561][ T836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 41.769468][ T843] syz.1.131 uses obsolete (PF_INET,SOCK_PACKET) [ 41.776832][ T843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.843094][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 41.994083][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.005138][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.014924][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 42.024129][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.032832][ T9] usb 5-1: config 0 descriptor?? [ 42.153105][ T31] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 42.283095][ T31] usb 2-1: device descriptor read/64, error -71 [ 42.440376][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.447293][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.454137][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.460995][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.467926][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.474760][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.481606][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 42.489186][ T9] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 42.523090][ T31] usb 2-1: device descriptor read/64, error -71 [ 42.741732][ T9] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 42.749238][ T9] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 42.756868][ T9] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -5 [ 42.773096][ T31] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 42.903097][ T31] usb 2-1: device descriptor read/64, error -71 [ 42.945972][ T313] usb 5-1: USB disconnect, device number 5 [ 43.153096][ T31] usb 2-1: device descriptor read/64, error -71 [ 43.239040][ T313] usb 3-1: USB disconnect, device number 6 [ 43.263221][ T31] usb usb2-port1: attempt power cycle [ 43.279790][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 43.279803][ T36] audit: type=1400 audit(1786132773.529:256): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.288621][ T856] batadv_slave_0: entered allmulticast mode [ 43.317691][ T856] netlink: 148 bytes leftover after parsing attributes in process `syz.2.135'. [ 43.328600][ T856] batadv_slave_0 (unregistering): left allmulticast mode [ 43.459891][ T36] audit: type=1400 audit(1786132773.709:257): avc: denied { getopt } for pid=859 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.575180][ T36] audit: type=1400 audit(1786132773.829:258): avc: denied { read } for pid=864 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.607343][ T36] audit: type=1400 audit(1786132773.859:259): avc: denied { mount } for pid=866 comm="syz.4.140" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 43.633248][ T31] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 43.664058][ T31] usb 2-1: device descriptor read/8, error -71 [ 43.693139][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.794170][ T31] usb 2-1: device descriptor read/8, error -71 [ 43.843089][ T313] usb 3-1: Using ep0 maxpacket: 16 [ 43.849336][ T313] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 43.860231][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 43.871222][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 43.884233][ T313] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 43.893296][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.901868][ T313] usb 3-1: config 0 descriptor?? [ 43.933093][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 44.033086][ T31] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 44.054113][ T31] usb 2-1: device descriptor read/8, error -71 [ 44.093104][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 44.099310][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 44.107711][ T9] usb 5-1: config 0 has no interface number 0 [ 44.109350][ T858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.114903][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 44.123137][ T858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.133089][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 44.148571][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 44.152023][ T858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.158371][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.167348][ T858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.174798][ T9] usb 5-1: Product: syz [ 44.186168][ T9] usb 5-1: Manufacturer: syz [ 44.190810][ T9] usb 5-1: SerialNumber: syz [ 44.194155][ T31] usb 2-1: device descriptor read/8, error -71 [ 44.200023][ T9] usb 5-1: config 0 descriptor?? [ 44.206847][ T873] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 44.302719][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.309487][ T31] usb usb2-port1: unable to enumerate USB device [ 44.316756][ T10] usb 1-1: USB disconnect, device number 10 [ 44.329902][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.591841][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 44.598453][ T313] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.607767][ T313] usb 3-1: USB disconnect, device number 7 [ 44.616140][ T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 44.625224][ T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 44.723104][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.823075][ T36] audit: type=1400 audit(1786132775.069:260): avc: denied { bpf } for pid=878 comm="syz.1.145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.873111][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 44.879603][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.887972][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.898127][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.912340][ T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 44.921562][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.929653][ T10] usb 1-1: Product: syz [ 44.933852][ T10] usb 1-1: Manufacturer: syz [ 44.938431][ T10] usb 1-1: SerialNumber: syz [ 45.148040][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.158590][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 45.172935][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 45.185826][ T10] usb 1-1: USB disconnect, device number 11 [ 45.186002][ T36] audit: type=1400 audit(1786132775.439:261): avc: denied { map } for pid=889 comm="syz.2.148" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 45.202586][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.216734][ T890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=890 comm=syz.2.148 [ 45.230729][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.414481][ T9] usb 2-1: config 11 has an invalid interface number: 153 but max is 0 [ 45.422871][ T9] usb 2-1: config 11 has no interface number 0 [ 45.429129][ T9] usb 2-1: config 11 interface 153 has no altsetting 0 [ 45.437401][ T9] usb 2-1: New USB device found, idVendor=19d2, idProduct=f3ab, bcdDevice=b5.bd [ 45.446515][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.454550][ T9] usb 2-1: Product: syz [ 45.458726][ T9] usb 2-1: Manufacturer: syz [ 45.463362][ T9] usb 2-1: SerialNumber: syz [ 45.662454][ T36] audit: type=1400 audit(1786132775.909:262): avc: denied { read } for pid=892 comm="syz.0.149" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.685812][ T36] audit: type=1400 audit(1786132775.909:263): avc: denied { read } for pid=892 comm="syz.0.149" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.715023][ T36] audit: type=1400 audit(1786132775.909:264): avc: denied { open } for pid=892 comm="syz.0.149" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.738202][ T36] audit: type=1400 audit(1786132775.909:265): avc: denied { open } for pid=892 comm="syz.0.149" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.761854][ T9] usb 2-1: bad CDC descriptors [ 45.770443][ T9] usb 2-1: USB disconnect, device number 12 [ 46.073093][ T847] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.218889][ T917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 46.227906][ T847] usb 1-1: Using ep0 maxpacket: 32 [ 46.228201][ T916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 46.241042][ T847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.252929][ T847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 46.262899][ T847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 46.272891][ T847] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.283941][ T919] FAULT_INJECTION: forcing a failure. [ 46.283941][ T919] name failslab, interval 1, probability 0, space 0, times 0 [ 46.286829][ T847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.299248][ T919] CPU: 1 UID: 0 PID: 919 Comm: syz.1.157 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 46.299280][ T919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.299292][ T919] Call Trace: [ 46.299298][ T919] [ 46.299306][ T919] __dump_stack+0x21/0x30 [ 46.299336][ T919] dump_stack_lvl+0x140/0x1c0 [ 46.299359][ T919] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.299384][ T919] dump_stack+0x19/0x20 [ 46.299406][ T919] should_fail_ex+0x3c2/0x510 [ 46.299426][ T919] should_failslab+0xac/0x100 [ 46.299448][ T919] kmem_cache_alloc_noprof+0x42/0x410 [ 46.299467][ T919] ? security_inode_alloc+0x51/0x230 [ 46.299489][ T919] ? __cfi_make_kgid+0x10/0x10 [ 46.299511][ T919] security_inode_alloc+0x51/0x230 [ 46.299532][ T919] inode_init_always_gfp+0x756/0x9e0 [ 46.299553][ T919] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 46.299583][ T919] alloc_inode+0xc5/0x270 [ 46.299605][ T919] ? __cfi__raw_spin_lock+0x10/0x10 [ 46.299625][ T919] new_inode+0x25/0x1e0 [ 46.299646][ T919] shmem_get_inode+0x352/0xc10 [ 46.299669][ T919] shmem_mknod+0x63/0x200 [ 46.299693][ T919] shmem_rename2+0x258/0x3c0 [ 46.299716][ T919] ? __cfi_shmem_rename2+0x10/0x10 [ 46.299740][ T919] vfs_rename+0xd59/0x1100 [ 46.299758][ T919] ? __cfi_vfs_rename+0x10/0x10 [ 46.299774][ T919] ? __lookup_slow+0x31f/0x420 [ 46.299795][ T919] ? lookup_one_len+0x300/0x300 [ 46.299816][ T919] ovl_do_rename+0x1a8/0x210 [ 46.299842][ T919] ? ovl_cleanup_and_whiteout+0x6e0/0x6e0 [ 46.299866][ T919] ? lookup_one+0x19e/0x2f0 [ 46.299887][ T919] ? ovl_path_type+0x340/0x3f0 [ 46.299912][ T919] ovl_rename+0xfdf/0x1550 [ 46.299938][ T919] ? __cfi_ovl_rename+0x10/0x10 [ 46.299960][ T919] ? __cfi_lockref_get+0x10/0x10 [ 46.299985][ T919] ? try_break_deleg+0x7c/0x130 [ 46.300008][ T919] ? __cfi_ovl_rename+0x10/0x10 [ 46.300033][ T919] vfs_rename+0xd59/0x1100 [ 46.300049][ T919] ? hook_file_free_security+0xc0/0xc0 [ 46.300074][ T919] ? __cfi_vfs_rename+0x10/0x10 [ 46.300091][ T919] ? hook_path_rename+0x44/0x60 [ 46.300113][ T919] ? bpf_lsm_path_rename+0xd/0x20 [ 46.300131][ T919] ? security_path_rename+0x143/0x2a0 [ 46.300153][ T919] do_renameat2+0x85d/0xc30 [ 46.300171][ T919] ? __cfi_do_renameat2+0x10/0x10 [ 46.300189][ T919] ? getname_flags+0x203/0x6b0 [ 46.300208][ T919] __x64_sys_rename+0x86/0xa0 [ 46.300225][ T919] x64_sys_call+0x150b/0x2ee0 [ 46.300241][ T919] do_syscall_64+0x57/0xf0 [ 46.300260][ T919] ? clear_bhb_loop+0x50/0xa0 [ 46.300284][ T919] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.300306][ T919] RIP: 0033:0x7f043c39e0d9 [ 46.300322][ T919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.300338][ T919] RSP: 002b:00007f043d1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 46.300357][ T919] RAX: ffffffffffffffda RBX: 00007f043c625fa0 RCX: 00007f043c39e0d9 [ 46.300372][ T919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 46.300385][ T919] RBP: 00007f043d1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.300397][ T919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.300409][ T919] R13: 00007f043c626038 R14: 00007f043c625fa0 R15: 00007ffeca022df8 [ 46.300425][ T919] [ 46.634283][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.642304][ T847] usb 1-1: SerialNumber: syz [ 46.654296][ T912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.663871][ T912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.675076][ T847] hub 1-1:1.0: bad descriptor, ignoring hub [ 46.680999][ T847] hub 1-1:1.0: probe with driver hub failed with error -5 [ 46.688405][ T847] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 46.705810][ T10] usb 5-1: USB disconnect, device number 6 [ 47.003093][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 47.043117][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.154177][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.164436][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.174743][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.183859][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.191906][ T31] usb 3-1: Product: syz [ 47.196107][ T31] usb 3-1: Manufacturer: syz [ 47.200695][ T31] usb 3-1: SerialNumber: syz [ 47.203073][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 47.212050][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.220529][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 47.231637][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 47.242755][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 47.251866][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.259906][ T10] usb 5-1: Product: syz [ 47.264115][ T10] usb 5-1: Manufacturer: syz [ 47.268708][ T10] usb 5-1: SerialNumber: syz [ 47.301642][ T945] FAULT_INJECTION: forcing a failure. [ 47.301642][ T945] name failslab, interval 1, probability 0, space 0, times 0 [ 47.314414][ T945] CPU: 1 UID: 0 PID: 945 Comm: syz.1.166 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 47.314444][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.314491][ T945] Call Trace: [ 47.314497][ T945] [ 47.314505][ T945] __dump_stack+0x21/0x30 [ 47.314536][ T945] dump_stack_lvl+0x140/0x1c0 [ 47.314553][ T945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.314567][ T945] ? x64_sys_call+0x150b/0x2ee0 [ 47.314576][ T945] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.314591][ T945] dump_stack+0x19/0x20 [ 47.314607][ T945] should_fail_ex+0x3c2/0x510 [ 47.314628][ T945] should_failslab+0xac/0x100 [ 47.314651][ T945] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 47.314671][ T945] ? shmem_alloc_inode+0x3b/0xd0 [ 47.314693][ T945] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 47.314721][ T945] shmem_alloc_inode+0x3b/0xd0 [ 47.314733][ T945] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 47.314745][ T945] alloc_inode+0x7d/0x270 [ 47.314763][ T945] ? __cfi__raw_spin_lock+0x10/0x10 [ 47.314785][ T945] new_inode+0x25/0x1e0 [ 47.314807][ T945] shmem_get_inode+0x352/0xc10 [ 47.314830][ T945] shmem_mknod+0x63/0x200 [ 47.314845][ T945] shmem_rename2+0x258/0x3c0 [ 47.314859][ T945] ? __cfi_shmem_rename2+0x10/0x10 [ 47.314873][ T945] vfs_rename+0xd59/0x1100 [ 47.314883][ T945] ? __cfi_vfs_rename+0x10/0x10 [ 47.314892][ T945] ? __lookup_slow+0x31f/0x420 [ 47.314913][ T945] ? lookup_one_len+0x300/0x300 [ 47.314936][ T945] ovl_do_rename+0x1a8/0x210 [ 47.314960][ T945] ? ovl_cleanup_and_whiteout+0x6e0/0x6e0 [ 47.314981][ T945] ? lookup_one+0x19e/0x2f0 [ 47.314993][ T945] ? ovl_path_type+0x340/0x3f0 [ 47.315007][ T945] ovl_rename+0xfdf/0x1550 [ 47.315022][ T945] ? __cfi_ovl_rename+0x10/0x10 [ 47.315035][ T945] ? __cfi_lockref_get+0x10/0x10 [ 47.315060][ T945] ? try_break_deleg+0x7c/0x130 [ 47.315084][ T945] ? __cfi_ovl_rename+0x10/0x10 [ 47.315109][ T945] vfs_rename+0xd59/0x1100 [ 47.315122][ T945] ? hook_file_free_security+0xc0/0xc0 [ 47.315137][ T945] ? __cfi_vfs_rename+0x10/0x10 [ 47.315146][ T945] ? hook_path_rename+0x44/0x60 [ 47.315158][ T945] ? bpf_lsm_path_rename+0xd/0x20 [ 47.315168][ T945] ? security_path_rename+0x143/0x2a0 [ 47.315184][ T945] do_renameat2+0x85d/0xc30 [ 47.315202][ T945] ? __cfi_do_renameat2+0x10/0x10 [ 47.315221][ T945] ? getname_flags+0x203/0x6b0 [ 47.315242][ T945] __x64_sys_rename+0x86/0xa0 [ 47.315259][ T945] x64_sys_call+0x150b/0x2ee0 [ 47.315269][ T945] do_syscall_64+0x57/0xf0 [ 47.315280][ T945] ? clear_bhb_loop+0x50/0xa0 [ 47.315293][ T945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.315306][ T945] RIP: 0033:0x7f043c39e0d9 [ 47.315316][ T945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.315327][ T945] RSP: 002b:00007f043d1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 47.315348][ T945] RAX: ffffffffffffffda RBX: 00007f043c625fa0 RCX: 00007f043c39e0d9 [ 47.315363][ T945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 47.315377][ T945] RBP: 00007f043d1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 47.315390][ T945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.315402][ T945] R13: 00007f043c626038 R14: 00007f043c625fa0 R15: 00007ffeca022df8 [ 47.315412][ T945] [ 47.401143][ T847] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 47.411263][ T947] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 47.445371][ T847] usb 1-1: USB disconnect, device number 12 [ 47.452218][ T31] usb 3-1: 0:2 : does not exist [ 47.572752][ T955] mmap: syz.1.170 (955): VmData 29323264 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 47.693064][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 47.704544][ T10] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 47.706019][ T31] usb 3-1: USB disconnect, device number 8 [ 47.737383][ T10] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 47.749852][ T10] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 47.758491][ T10] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 47.786287][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.787396][ T10] usb 5-1: USB disconnect, device number 7 [ 47.905411][ T970] FAULT_INJECTION: forcing a failure. [ 47.905411][ T970] name failslab, interval 1, probability 0, space 0, times 0 [ 47.918122][ T970] CPU: 0 UID: 0 PID: 970 Comm: syz.0.175 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 47.918149][ T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.918156][ T970] Call Trace: [ 47.918161][ T970] [ 47.918166][ T970] __dump_stack+0x21/0x30 [ 47.918187][ T970] dump_stack_lvl+0x140/0x1c0 [ 47.918201][ T970] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.918216][ T970] dump_stack+0x19/0x20 [ 47.918228][ T970] should_fail_ex+0x3c2/0x510 [ 47.918240][ T970] should_failslab+0xac/0x100 [ 47.918253][ T970] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 47.918265][ T970] ? ovl_rename+0xfdf/0x1550 [ 47.918279][ T970] ? do_renameat2+0x85d/0xc30 [ 47.918289][ T970] ? sidtab_sid2str_get+0x135/0x360 [ 47.918303][ T970] ? x64_sys_call+0x150b/0x2ee0 [ 47.918312][ T970] ? do_syscall_64+0x57/0xf0 [ 47.918324][ T970] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.918338][ T970] kmemdup_noprof+0x31/0x80 [ 47.918353][ T970] sidtab_sid2str_get+0x135/0x360 [ 47.918368][ T970] security_sid_to_context_core+0x30d/0x5d0 [ 47.918389][ T970] security_sid_to_context_force+0x31/0x40 [ 47.918402][ T970] selinux_inode_init_security+0x659/0x950 [ 47.918418][ T970] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 47.918432][ T970] ? security_inode_init_security+0x11c/0x600 [ 47.918445][ T970] ? __cfi_shmem_initxattrs+0x10/0x10 [ 47.918459][ T970] ? __cfi_shmem_initxattrs+0x10/0x10 [ 47.918473][ T970] security_inode_init_security+0x1ab/0x600 [ 47.918485][ T970] ? current_umask+0x1a/0x80 [ 47.918497][ T970] ? __cfi_security_inode_init_security+0x10/0x10 [ 47.918509][ T970] ? __kasan_check_write+0x18/0x20 [ 47.918518][ T970] ? set_cached_acl+0xe1/0x1a0 [ 47.918534][ T970] ? simple_acl_create+0x190/0x1c0 [ 47.918544][ T970] shmem_mknod+0xd5/0x200 [ 47.918557][ T970] shmem_rename2+0x258/0x3c0 [ 47.918570][ T970] ? __cfi_shmem_rename2+0x10/0x10 [ 47.918584][ T970] vfs_rename+0xd59/0x1100 [ 47.918594][ T970] ? __cfi_vfs_rename+0x10/0x10 [ 47.918603][ T970] ? __lookup_slow+0x31f/0x420 [ 47.918615][ T970] ? lookup_one_len+0x300/0x300 [ 47.918627][ T970] ovl_do_rename+0x1a8/0x210 [ 47.918641][ T970] ? ovl_cleanup_and_whiteout+0x6e0/0x6e0 [ 47.918655][ T970] ? lookup_one+0x19e/0x2f0 [ 47.918667][ T970] ? ovl_path_type+0x340/0x3f0 [ 47.918681][ T970] ovl_rename+0xfdf/0x1550 [ 47.918696][ T970] ? __cfi_ovl_rename+0x10/0x10 [ 47.918710][ T970] ? __cfi_lockref_get+0x10/0x10 [ 47.918725][ T970] ? try_break_deleg+0x7c/0x130 [ 47.918738][ T970] ? __cfi_ovl_rename+0x10/0x10 [ 47.918751][ T970] vfs_rename+0xd59/0x1100 [ 47.918760][ T970] ? hook_file_free_security+0xc0/0xc0 [ 47.918775][ T970] ? __cfi_vfs_rename+0x10/0x10 [ 47.918784][ T970] ? hook_path_rename+0x44/0x60 [ 47.918796][ T970] ? bpf_lsm_path_rename+0xd/0x20 [ 47.918807][ T970] ? security_path_rename+0x143/0x2a0 [ 47.918820][ T970] do_renameat2+0x85d/0xc30 [ 47.918830][ T970] ? __cfi_do_renameat2+0x10/0x10 [ 47.918840][ T970] ? getname_flags+0x203/0x6b0 [ 47.918850][ T970] __x64_sys_rename+0x86/0xa0 [ 47.918860][ T970] x64_sys_call+0x150b/0x2ee0 [ 47.918868][ T970] do_syscall_64+0x57/0xf0 [ 47.918880][ T970] ? clear_bhb_loop+0x50/0xa0 [ 47.918895][ T970] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.918908][ T970] RIP: 0033:0x7f760579e0d9 [ 47.918919][ T970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.918927][ T970] RSP: 002b:00007f76066df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 47.918940][ T970] RAX: ffffffffffffffda RBX: 00007f7605a25fa0 RCX: 00007f760579e0d9 [ 47.918948][ T970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 47.918955][ T970] RBP: 00007f76066df090 R08: 0000000000000000 R09: 0000000000000000 [ 47.918961][ T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.918968][ T970] R13: 00007f7605a26038 R14: 00007f7605a25fa0 R15: 00007ffc3b0bb308 [ 47.918976][ T970] [ 47.983110][ T323] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.343158][ T847] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 48.359690][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 48.359706][ T36] audit: type=1400 audit(1786132778.609:273): avc: denied { write } for pid=995 comm="syz.2.182" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.363372][ T996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 48.462936][ T1001] FAULT_INJECTION: forcing a failure. [ 48.462936][ T1001] name failslab, interval 1, probability 0, space 0, times 0 [ 48.473115][ T323] usb 2-1: Using ep0 maxpacket: 32 [ 48.475778][ T1001] CPU: 0 UID: 0 PID: 1001 Comm: syz.2.184 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 48.475807][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.475819][ T1001] Call Trace: [ 48.475826][ T1001] [ 48.475835][ T1001] __dump_stack+0x21/0x30 [ 48.475873][ T1001] dump_stack_lvl+0x140/0x1c0 [ 48.475896][ T1001] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.475920][ T1001] ? x64_sys_call+0x150b/0x2ee0 [ 48.475937][ T1001] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.475962][ T1001] dump_stack+0x19/0x20 [ 48.475984][ T1001] should_fail_ex+0x3c2/0x510 [ 48.476005][ T1001] should_failslab+0xac/0x100 [ 48.476027][ T1001] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 48.476047][ T1001] ? shmem_alloc_inode+0x3b/0xd0 [ 48.476069][ T1001] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 48.476091][ T1001] shmem_alloc_inode+0x3b/0xd0 [ 48.476112][ T1001] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 48.476134][ T1001] alloc_inode+0x7d/0x270 [ 48.476156][ T1001] ? __cfi__raw_spin_lock+0x10/0x10 [ 48.476175][ T1001] new_inode+0x25/0x1e0 [ 48.476197][ T1001] shmem_get_inode+0x352/0xc10 [ 48.476219][ T1001] shmem_mknod+0x63/0x200 [ 48.476242][ T1001] shmem_rename2+0x258/0x3c0 [ 48.476265][ T1001] ? __cfi_shmem_rename2+0x10/0x10 [ 48.476289][ T1001] vfs_rename+0xd59/0x1100 [ 48.476308][ T1001] ? __cfi_vfs_rename+0x10/0x10 [ 48.476324][ T1001] ? __lookup_slow+0x31f/0x420 [ 48.476344][ T1001] ? lookup_one_len+0x300/0x300 [ 48.476366][ T1001] ovl_do_rename+0x1a8/0x210 [ 48.476390][ T1001] ? ovl_cleanup_and_whiteout+0x6e0/0x6e0 [ 48.476414][ T1001] ? lookup_one+0x19e/0x2f0 [ 48.476435][ T1001] ? ovl_path_type+0x340/0x3f0 [ 48.476459][ T1001] ovl_rename+0xfdf/0x1550 [ 48.476485][ T1001] ? __cfi_ovl_rename+0x10/0x10 [ 48.476508][ T1001] ? __cfi_lockref_get+0x10/0x10 [ 48.476532][ T1001] ? try_break_deleg+0x7c/0x130 [ 48.476556][ T1001] ? __cfi_ovl_rename+0x10/0x10 [ 48.476579][ T1001] vfs_rename+0xd59/0x1100 [ 48.476595][ T1001] ? hook_file_free_security+0xc0/0xc0 [ 48.476621][ T1001] ? __cfi_vfs_rename+0x10/0x10 [ 48.476637][ T1001] ? hook_path_rename+0x44/0x60 [ 48.476659][ T1001] ? bpf_lsm_path_rename+0xd/0x20 [ 48.476678][ T1001] ? security_path_rename+0x143/0x2a0 [ 48.476700][ T1001] do_renameat2+0x85d/0xc30 [ 48.476719][ T1001] ? __cfi_do_renameat2+0x10/0x10 [ 48.476737][ T1001] ? getname_flags+0x203/0x6b0 [ 48.476756][ T1001] __x64_sys_rename+0x86/0xa0 [ 48.476773][ T1001] x64_sys_call+0x150b/0x2ee0 [ 48.476789][ T1001] do_syscall_64+0x57/0xf0 [ 48.476809][ T1001] ? clear_bhb_loop+0x50/0xa0 [ 48.476831][ T1001] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.476860][ T1001] RIP: 0033:0x7fbb71f9e0d9 [ 48.476876][ T1001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.476891][ T1001] RSP: 002b:00007fbb72e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 48.476912][ T1001] RAX: ffffffffffffffda RBX: 00007fbb72225fa0 RCX: 00007fbb71f9e0d9 [ 48.476926][ T1001] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 48.476939][ T1001] RBP: 00007fbb72e83090 R08: 0000000000000000 R09: 0000000000000000 [ 48.476951][ T1001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.476963][ T1001] R13: 00007fbb72226038 R14: 00007fbb72225fa0 R15: 00007fffa52b31e8 [ 48.476979][ T1001] [ 48.515665][ T847] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 48.519576][ T323] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 48.523771][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.528556][ T323] usb 2-1: config 0 has no interface number 0 [ 48.535039][ T847] usb 5-1: Product: syz [ 48.538746][ T323] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 48.551659][ T36] audit: type=1400 audit(1786132778.799:274): avc: denied { setopt } for pid=1002 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.553918][ T323] usb 2-1: config 0 interface 196 has no altsetting 0 [ 48.558943][ T847] usb 5-1: Manufacturer: syz [ 48.565755][ T323] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 48.573849][ T847] usb 5-1: SerialNumber: syz [ 48.574536][ T313] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 48.799898][ T847] usb 5-1: Can't get UAC3 power state for id 10 [ 48.802321][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.811493][ T847] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 48.813399][ T323] usb 2-1: Product: syz [ 48.822750][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.830579][ T323] usb 2-1: Manufacturer: syz [ 48.849190][ T847] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.858848][ T323] usb 2-1: SerialNumber: syz [ 48.888377][ T847] usb 5-1: USB disconnect, device number 8 [ 48.892989][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.982848][ T323] usb 2-1: config 0 descriptor?? [ 48.990243][ T965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.023083][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 49.029271][ T10] usb 3-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.042336][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 49.043114][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.050462][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.40 [ 49.064640][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.072634][ T10] usb 3-1: Product: ␉ [ 49.076822][ T10] usb 3-1: Manufacturer: ꙯煂嘳ṫꌄ㔙ग鮚✚ꖎ뵫渍肌ꢸ杅㪯맚퀡砗﵌疩浄廓性䵯䥲餮耝ᰮ⨖ඡ螽໗빤촁籑몠웮꾱ꬪ쪰ꄋ萼ꆈ遶伣鳎໼棯䫷 [ 49.095306][ T10] usb 3-1: SerialNumber: ㅞ蹰⋜䤝Ṝᡋ뇖❬ᄰ⿐ﺯ콞쾀ꂖ룄㌬괥姭حᆖ䗵얲駗긎캣紎킨㽈㬐喸悝༐윯싹慴鬙㔒嗨䲁簶绤窨┦땥ॿ㞸蚗੓婎苃鴟␉豌箑륡嗻Ꙟ貎㊆ꇡ왓얝㺬⎢쪹ฟ睽፮䵆穌 [ 49.293089][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.519862][ T36] audit: type=1400 audit(1786132779.769:275): avc: denied { ioctl } for pid=1004 comm="syz.4.186" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.553256][ T313] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.601597][ T323] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 49.610671][ T323] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 49.621316][ T323] usb 2-1: USB disconnect, device number 13 [ 49.663567][ T323] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 49.672940][ T36] audit: type=1400 audit(1786132779.919:276): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.703386][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.763102][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 49.915801][ T31] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 49.924972][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.932993][ T31] usb 5-1: Product: syz [ 49.937235][ T31] usb 5-1: Manufacturer: syz [ 49.941859][ T31] usb 5-1: SerialNumber: syz [ 49.946535][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.954923][ T31] pl2303 5-1:1.0: pl2303 converter detected [ 49.962105][ T31] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 50.053910][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 50.054154][ T313] usb usb1-port1: attempt power cycle [ 50.060050][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 50.075952][ T10] usb 3-1: USB disconnect, device number 9 [ 50.103657][ T1007] kvm: pic: non byte write [ 50.156725][ T31] usb 5-1: USB disconnect, device number 9 [ 50.165445][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 50.173774][ T31] pl2303 5-1:1.0: device disconnected [ 50.199846][ T1021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 50.216958][ T1025] FAULT_INJECTION: forcing a failure. [ 50.216958][ T1025] name failslab, interval 1, probability 0, space 0, times 0 [ 50.229794][ T1025] CPU: 0 UID: 0 PID: 1025 Comm: syz.1.194 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 50.229827][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.229839][ T1025] Call Trace: [ 50.229845][ T1025] [ 50.229853][ T1025] __dump_stack+0x21/0x30 [ 50.229883][ T1025] dump_stack_lvl+0x140/0x1c0 [ 50.229907][ T1025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.229937][ T1025] ? __kmalloc_node_noprof+0x252/0x500 [ 50.229957][ T1025] ? __kvmalloc_node_noprof+0x128/0x300 [ 50.229983][ T1025] dump_stack+0x19/0x20 [ 50.230009][ T1025] should_fail_ex+0x3c2/0x510 [ 50.230034][ T1025] ? shmem_initxattrs+0x2a8/0x530 [ 50.230059][ T1025] should_failslab+0xac/0x100 [ 50.230081][ T1025] __kmalloc_noprof+0x69/0x510 [ 50.230099][ T1025] ? shmem_initxattrs+0x2a8/0x530 [ 50.230124][ T1025] ? simple_xattr_alloc+0xa2/0x140 [ 50.230236][ T1025] shmem_initxattrs+0x2a8/0x530 [ 50.230266][ T1025] security_inode_init_security+0x434/0x600 [ 50.230291][ T1025] ? __cfi_shmem_initxattrs+0x10/0x10 [ 50.230325][ T1025] ? __cfi_security_inode_init_security+0x10/0x10 [ 50.230348][ T1025] ? __kasan_check_write+0x18/0x20 [ 50.230367][ T1025] ? set_cached_acl+0xe1/0x1a0 [ 50.230393][ T1025] ? simple_acl_create+0x190/0x1c0 [ 50.230413][ T1025] shmem_mknod+0xd5/0x200 [ 50.230444][ T1025] shmem_rename2+0x258/0x3c0 [ 50.230474][ T1025] ? __cfi_shmem_rename2+0x10/0x10 [ 50.230497][ T1025] vfs_rename+0xd59/0x1100 [ 50.230515][ T1025] ? __cfi_vfs_rename+0x10/0x10 [ 50.230532][ T1025] ? __lookup_slow+0x31f/0x420 [ 50.230556][ T1025] ? lookup_one_len+0x300/0x300 [ 50.230579][ T1025] ovl_do_rename+0x1a8/0x210 [ 50.230605][ T1025] ? ovl_cleanup_and_whiteout+0x6e0/0x6e0 [ 50.230629][ T1025] ? lookup_one+0x19e/0x2f0 [ 50.230653][ T1025] ? ovl_path_type+0x340/0x3f0 [ 50.230677][ T1025] ovl_rename+0xfdf/0x1550 [ 50.230706][ T1025] ? __cfi_ovl_rename+0x10/0x10 [ 50.230732][ T1025] ? __cfi_lockref_get+0x10/0x10 [ 50.230760][ T1025] ? try_break_deleg+0x7c/0x130 [ 50.230785][ T1025] ? __cfi_ovl_rename+0x10/0x10 [ 50.230812][ T1025] vfs_rename+0xd59/0x1100 [ 50.230827][ T1025] ? hook_file_free_security+0xc0/0xc0 [ 50.230850][ T1025] ? __cfi_vfs_rename+0x10/0x10 [ 50.230865][ T1025] ? hook_path_rename+0x44/0x60 [ 50.230886][ T1025] ? bpf_lsm_path_rename+0xd/0x20 [ 50.230905][ T1025] ? security_path_rename+0x143/0x2a0 [ 50.230927][ T1025] do_renameat2+0x85d/0xc30 [ 50.230946][ T1025] ? __cfi_do_renameat2+0x10/0x10 [ 50.230964][ T1025] ? getname_flags+0x203/0x6b0 [ 50.230984][ T1025] __x64_sys_rename+0x86/0xa0 [ 50.231000][ T1025] x64_sys_call+0x150b/0x2ee0 [ 50.231019][ T1025] do_syscall_64+0x57/0xf0 [ 50.231039][ T1025] ? clear_bhb_loop+0x50/0xa0 [ 50.231062][ T1025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.231085][ T1025] RIP: 0033:0x7f043c39e0d9 [ 50.231102][ T1025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.231118][ T1025] RSP: 002b:00007f043d1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 50.231140][ T1025] RAX: ffffffffffffffda RBX: 00007f043c625fa0 RCX: 00007f043c39e0d9 [ 50.231151][ T1025] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000580 [ 50.231163][ T1025] RBP: 00007f043d1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.231174][ T1025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.231185][ T1025] R13: 00007f043c626038 R14: 00007f043c625fa0 R15: 00007ffeca022df8 [ 50.231200][ T1025] [ 50.403105][ T313] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 50.604082][ T313] usb 1-1: device descriptor read/8, error -71 [ 50.685224][ T36] audit: type=1400 audit(1786132780.939:277): avc: denied { name_bind } for pid=1031 comm="syz.1.196" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 50.713117][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 50.737592][ T313] usb 1-1: device descriptor read/8, error -71 [ 50.864148][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.875194][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.884952][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 50.897897][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 50.906952][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.915467][ T10] usb 3-1: config 0 descriptor?? [ 50.921522][ T10] usbhid 3-1:0.0: can't add hid device: -22 [ 50.927753][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 50.983099][ T404] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 50.984812][ T313] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 51.143088][ T404] usb 5-1: Using ep0 maxpacket: 32 [ 51.149384][ T404] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 51.157905][ T404] usb 5-1: config 0 has no interface number 0 [ 51.164153][ T404] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 51.174297][ T404] usb 5-1: config 0 interface 196 has no altsetting 0 [ 51.182498][ T404] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 51.191919][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.199996][ T404] usb 5-1: Product: syz [ 51.204195][ T404] usb 5-1: Manufacturer: syz [ 51.208872][ T404] usb 5-1: SerialNumber: syz [ 51.214787][ T404] usb 5-1: config 0 descriptor?? [ 51.222698][ T1038] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 51.293918][ T1112] FAULT_INJECTION: forcing a failure. [ 51.293918][ T1112] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.307143][ T1112] CPU: 1 UID: 0 PID: 1112 Comm: syz.1.203 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 51.307184][ T1112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.307196][ T1112] Call Trace: [ 51.307202][ T1112] [ 51.307210][ T1112] __dump_stack+0x21/0x30 [ 51.307239][ T1112] dump_stack_lvl+0x140/0x1c0 [ 51.307261][ T1112] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.307285][ T1112] ? check_stack_object+0x138/0x150 [ 51.307305][ T1112] dump_stack+0x19/0x20 [ 51.307326][ T1112] should_fail_ex+0x3c2/0x510 [ 51.307345][ T1112] should_fail+0xf/0x20 [ 51.307362][ T1112] should_fail_usercopy+0x1e/0x30 [ 51.307381][ T1112] _copy_to_user+0x24/0xa0 [ 51.307403][ T1112] simple_read_from_buffer+0xed/0x160 [ 51.307427][ T1112] proc_fail_nth_read+0x1aa/0x220 [ 51.307451][ T1112] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.307474][ T1112] ? bpf_lsm_file_permission+0xd/0x20 [ 51.307496][ T1112] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.307519][ T1112] vfs_read+0x288/0xc70 [ 51.307536][ T1112] ? __cfi_vfs_read+0x10/0x10 [ 51.307553][ T1112] ? __kasan_check_write+0x18/0x20 [ 51.307570][ T1112] ? mutex_lock+0x97/0x1d0 [ 51.307592][ T1112] ? __cfi_mutex_lock+0x10/0x10 [ 51.307616][ T1112] ksys_read+0x145/0x260 [ 51.307632][ T1112] ? __cfi_ksys_read+0x10/0x10 [ 51.307649][ T1112] ? __cfi_task_work_run+0x10/0x10 [ 51.307670][ T1112] ? __kasan_check_read+0x15/0x20 [ 51.307687][ T1112] __x64_sys_read+0x7f/0x90 [ 51.307704][ T1112] x64_sys_call+0x2638/0x2ee0 [ 51.307720][ T1112] do_syscall_64+0x57/0xf0 [ 51.307738][ T1112] ? clear_bhb_loop+0x50/0xa0 [ 51.307760][ T1112] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.307782][ T1112] RIP: 0033:0x7f043c35e90e [ 51.307798][ T1112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.307813][ T1112] RSP: 002b:00007f043d1befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.307834][ T1112] RAX: ffffffffffffffda RBX: 00007f043d1bf6c0 RCX: 00007f043c35e90e [ 51.307847][ T1112] RDX: 000000000000000f RSI: 00007f043d1bf0a0 RDI: 0000000000000004 [ 51.307858][ T1112] RBP: 00007f043d1bf090 R08: 0000000000000000 R09: 0000000000000000 [ 51.307870][ T1112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.307880][ T1112] R13: 00007f043c626038 R14: 00007f043c625fa0 R15: 00007ffeca022df8 [ 51.307896][ T1112] [ 51.554203][ T313] usb 1-1: device not accepting address 16, error -71 [ 51.561110][ T313] usb usb1-port1: unable to enumerate USB device [ 51.576536][ T36] audit: type=1400 audit(1786132781.829:278): avc: denied { ioctl } for pid=1113 comm="syz.1.204" path="socket:[8191]" dev="sockfs" ino=8191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.597542][ T1116] netlink: 'syz.0.205': attribute type 4 has an invalid length. [ 51.601931][ T36] audit: type=1400 audit(1786132781.829:279): avc: denied { read } for pid=1113 comm="syz.1.204" laddr=::1 lport=58 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.635872][ T36] audit: type=1400 audit(1786132781.889:280): avc: denied { associate } for pid=1115 comm="syz.0.205" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.676960][ T36] audit: type=1400 audit(1786132781.929:281): avc: denied { ioctl } for pid=1121 comm="syz.1.206" path="/56/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 51.857936][ T10] usb 3-1: USB disconnect, device number 10 [ 51.953088][ T313] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 51.961386][ T404] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 51.970003][ T404] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 51.977545][ T847] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 51.986244][ T404] usb 5-1: USB disconnect, device number 10 [ 52.034318][ T404] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 52.083103][ T313] usb 1-1: device descriptor read/64, error -71 [ 52.134107][ T847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.144320][ T847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 52.153989][ T847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.168343][ T847] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.177443][ T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.185575][ T847] usb 2-1: Product: syz [ 52.189724][ T847] usb 2-1: Manufacturer: syz [ 52.194383][ T847] usb 2-1: SerialNumber: syz [ 52.199490][ T847] usb 2-1: config 0 descriptor?? [ 52.323100][ T313] usb 1-1: device descriptor read/64, error -71 [ 52.416411][ T323] usb 2-1: USB disconnect, device number 14 [ 52.439103][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.573100][ T313] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 52.714163][ T313] usb 1-1: device descriptor read/64, error -71 [ 52.783350][ T1145] FAULT_INJECTION: forcing a failure. [ 52.783350][ T1145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.796669][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: syz.1.211 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 52.796702][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.796716][ T1145] Call Trace: [ 52.796723][ T1145] [ 52.796731][ T1145] __dump_stack+0x21/0x30 [ 52.796765][ T1145] dump_stack_lvl+0x140/0x1c0 [ 52.796791][ T1145] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.796819][ T1145] ? check_stack_object+0x138/0x150 [ 52.796842][ T1145] dump_stack+0x19/0x20 [ 52.796865][ T1145] should_fail_ex+0x3c2/0x510 [ 52.796888][ T1145] should_fail+0xf/0x20 [ 52.796908][ T1145] should_fail_usercopy+0x1e/0x30 [ 52.796931][ T1145] _copy_to_user+0x24/0xa0 [ 52.796957][ T1145] simple_read_from_buffer+0xed/0x160 [ 52.796985][ T1145] proc_fail_nth_read+0x1aa/0x220 [ 52.797013][ T1145] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.797035][ T1145] ? bpf_lsm_file_permission+0xd/0x20 [ 52.797057][ T1145] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.797082][ T1145] vfs_read+0x288/0xc70 [ 52.797104][ T1145] ? __cfi_vfs_read+0x10/0x10 [ 52.797123][ T1145] ? __kasan_check_write+0x18/0x20 [ 52.797143][ T1145] ? mutex_lock+0x97/0x1d0 [ 52.797170][ T1145] ? __cfi_mutex_lock+0x10/0x10 [ 52.797197][ T1145] ksys_read+0x145/0x260 [ 52.797216][ T1145] ? __cfi_ksys_read+0x10/0x10 [ 52.797236][ T1145] ? __kasan_check_read+0x15/0x20 [ 52.797255][ T1145] __x64_sys_read+0x7f/0x90 [ 52.797277][ T1145] x64_sys_call+0x2638/0x2ee0 [ 52.797295][ T1145] do_syscall_64+0x57/0xf0 [ 52.797319][ T1145] ? clear_bhb_loop+0x50/0xa0 [ 52.797344][ T1145] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.797368][ T1145] RIP: 0033:0x7f043c35e90e [ 52.797386][ T1145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.797404][ T1145] RSP: 002b:00007f043d19dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.797427][ T1145] RAX: ffffffffffffffda RBX: 00007f043d19e6c0 RCX: 00007f043c35e90e [ 52.797442][ T1145] RDX: 000000000000000f RSI: 00007f043d19e0a0 RDI: 0000000000000004 [ 52.797456][ T1145] RBP: 00007f043d19e090 R08: 0000000000000000 R09: 0000000000000000 [ 52.797470][ T1145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.797483][ T1145] R13: 00007f043c626128 R14: 00007f043c626090 R15: 00007ffeca022df8 [ 52.797501][ T1145] [ 53.074860][ T36] audit: type=1400 audit(1786132783.329:282): avc: denied { bind } for pid=1154 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.094051][ T313] usb 1-1: device descriptor read/64, error -71 [ 53.120331][ T1158] overlay: Unknown parameter 'mask' [ 53.173109][ T404] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.203207][ T313] usb usb1-port1: attempt power cycle [ 53.333140][ T404] usb 3-1: Using ep0 maxpacket: 8 [ 53.340258][ T404] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.350812][ T404] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.361502][ T404] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 53.367274][ T1165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1165 comm=syz.1.221 [ 53.375955][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.402930][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 53.402952][ T36] audit: type=1400 audit(1786132783.649:285): avc: denied { connect } for pid=1167 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.406098][ T404] usb 3-1: Product: syz [ 53.432828][ T404] usb 3-1: Manufacturer: syz [ 53.437466][ T404] usb 3-1: SerialNumber: syz [ 53.543109][ T313] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 53.583752][ T313] usb 1-1: device descriptor read/8, error -71 [ 53.643106][ T323] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 53.646432][ T1151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.659290][ T1151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.683977][ T36] audit: type=1400 audit(1786132783.939:286): avc: denied { connect } for pid=1150 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.711812][ T404] usb 3-1: unit 3 not found! [ 53.724545][ T313] usb 1-1: device descriptor read/8, error -71 [ 53.726585][ T404] usb 3-1: USB disconnect, device number 11 [ 53.757749][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.793129][ T323] usb 2-1: Using ep0 maxpacket: 32 [ 53.799865][ T323] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 53.808187][ T323] usb 2-1: config 0 has no interface number 0 [ 53.814459][ T323] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 53.824611][ T323] usb 2-1: config 0 interface 196 has no altsetting 0 [ 53.826555][ T1178] &nr: renamed from bond_slave_1 [ 53.842769][ T323] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 53.852241][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.861061][ T323] usb 2-1: Product: syz [ 53.865374][ T323] usb 2-1: Manufacturer: syz [ 53.870065][ T323] usb 2-1: SerialNumber: syz [ 53.877787][ T323] usb 2-1: config 0 descriptor?? [ 53.883756][ T1171] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 53.987843][ T313] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 54.119451][ T313] usb 1-1: device descriptor read/8, error -71 [ 54.254623][ T313] usb 1-1: device descriptor read/8, error -71 [ 54.363685][ T313] usb usb1-port1: unable to enumerate USB device [ 54.479979][ T1187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1187 comm=syz.4.227 [ 54.499455][ T1187] rust_binder: Write failure EINVAL in pid:93 [ 54.502972][ T36] audit: type=1400 audit(1786132784.749:287): avc: denied { mounton } for pid=1188 comm="syz.2.228" path="/73/file0" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 54.518958][ T1189] SELinux: Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped). [ 54.534349][ T36] audit: type=1400 audit(1786132784.759:288): avc: granted { setsecparam } for pid=1188 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 54.544585][ T323] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 54.561093][ T36] audit: type=1400 audit(1786132784.809:289): avc: denied { relabelto } for pid=1188 comm="syz.2.228" name="file0" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:udev_tbl_t:s0" [ 54.596169][ T323] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 54.614157][ T323] usb 2-1: USB disconnect, device number 15 [ 54.663090][ T36] audit: type=1400 audit(1786132784.809:290): avc: denied { associate } for pid=1188 comm="syz.2.228" name="file0" dev="tmpfs" ino=425 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_tbl_t:s0" [ 54.691434][ T323] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 54.744194][ T36] audit: type=1400 audit(1786132784.999:291): avc: denied { nlmsg_tty_audit } for pid=1203 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 55.003094][ T847] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 55.083157][ T313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 55.164085][ T847] usb 1-1: Using ep0 maxpacket: 16 [ 55.171721][ T847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.181715][ T36] audit: type=1400 audit(1786132785.429:292): avc: denied { map } for pid=1221 comm="syz.1.238" path="socket:[8639]" dev="sockfs" ino=8639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.187158][ T847] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 55.218702][ T36] audit: type=1400 audit(1786132785.429:293): avc: denied { read } for pid=1221 comm="syz.1.238" path="socket:[8639]" dev="sockfs" ino=8639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.223109][ T847] usb 1-1: can't read configurations, error -61 [ 55.243261][ T313] usb 5-1: device descriptor read/64, error -71 [ 55.258588][ T1225] netlink: 'syz.1.239': attribute type 16 has an invalid length. [ 55.268338][ T1225] netlink: 'syz.1.239': attribute type 3 has an invalid length. [ 55.276294][ T1225] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.239'. [ 55.341630][ T1232] tipc: Started in network mode [ 55.347197][ T1232] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 55.367082][ T1232] tipc: Enabled bearer , priority 10 [ 55.403110][ T847] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 55.503193][ T313] usb 5-1: device descriptor read/64, error -71 [ 55.563103][ T847] usb 1-1: Using ep0 maxpacket: 16 [ 55.569737][ T847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.578454][ T847] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 55.586092][ T847] usb 1-1: can't read configurations, error -61 [ 55.592456][ T847] usb usb1-port1: attempt power cycle [ 55.693185][ T328] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 55.763113][ T313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 55.783101][ T404] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 55.844142][ T328] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 55.855056][ T328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.866069][ T328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 55.875737][ T328] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 55.889566][ T328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.898781][ T313] usb 5-1: device descriptor read/64, error -71 [ 55.905527][ T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.913611][ T328] usb 2-1: SerialNumber: syz [ 55.923092][ T404] usb 3-1: device descriptor read/64, error -71 [ 55.943151][ T847] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 55.963450][ T847] usb 1-1: Using ep0 maxpacket: 16 [ 55.969920][ T847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.978732][ T847] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 55.986466][ T847] usb 1-1: can't read configurations, error -61 [ 56.113091][ T847] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 56.121576][ T328] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 56.130673][ T328] usb 2-1: USB disconnect, device number 16 [ 56.135058][ T847] usb 1-1: Using ep0 maxpacket: 16 [ 56.143227][ T847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.151879][ T847] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 56.159630][ T847] usb 1-1: can't read configurations, error -61 [ 56.163083][ T313] usb 5-1: device descriptor read/64, error -71 [ 56.165939][ T404] usb 3-1: device descriptor read/64, error -71 [ 56.178458][ T847] usb usb1-port1: unable to enumerate USB device [ 56.273282][ T313] usb usb5-port1: attempt power cycle [ 56.433159][ T404] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 56.483123][ T328] tipc: Node number set to 4269801492 [ 56.573126][ T404] usb 3-1: device descriptor read/64, error -71 [ 56.613109][ T313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 56.634158][ T313] usb 5-1: device descriptor read/8, error -71 [ 56.675138][ T36] audit: type=1400 audit(1786132786.929:294): avc: denied { read } for pid=1248 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.764157][ T313] usb 5-1: device descriptor read/8, error -71 [ 56.843303][ T404] usb 3-1: device descriptor read/64, error -71 [ 56.953209][ T404] usb usb3-port1: attempt power cycle [ 57.003103][ T313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 57.024104][ T313] usb 5-1: device descriptor read/8, error -71 [ 57.154108][ T313] usb 5-1: device descriptor read/8, error -71 [ 57.263242][ T313] usb usb5-port1: unable to enumerate USB device [ 57.303121][ T404] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.324059][ T404] usb 3-1: device descriptor read/8, error -71 [ 57.454093][ T404] usb 3-1: device descriptor read/8, error -71 [ 57.693101][ T404] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 57.714130][ T404] usb 3-1: device descriptor read/8, error -71 [ 57.844356][ T404] usb 3-1: device descriptor read/8, error -71 [ 57.885121][ T1282] batadv_slave_0: entered allmulticast mode [ 57.909190][ T1283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 57.911301][ T1285] netlink: 260 bytes leftover after parsing attributes in process `syz.1.259'. [ 57.953208][ T404] usb usb3-port1: unable to enumerate USB device [ 58.143185][ T847] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 58.243124][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 58.294300][ T847] usb 1-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 58.305476][ T847] usb 1-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.318482][ T847] usb 1-1: config 0 interface 0 has no altsetting 0 [ 58.325225][ T847] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 58.334290][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.343223][ T847] usb 1-1: config 0 descriptor?? [ 58.348659][ T1282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.394157][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.404447][ T31] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 58.413548][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.422201][ T31] usb 5-1: config 0 descriptor?? [ 58.428070][ T31] usb 5-1: unsupported MDLM descriptors [ 58.549198][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 58.549215][ T36] audit: type=1400 audit(1786132788.799:303): avc: denied { ioctl } for pid=1290 comm="syz.2.261" path="socket:[9530]" dev="sockfs" ino=9530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.580160][ T36] audit: type=1400 audit(1786132788.799:304): avc: denied { bind } for pid=1290 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.589749][ T71] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 58.613215][ T71] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.780989][ T847] hid (null): unknown global tag 0xe [ 58.792762][ T847] waltop 0003:172F:0038.0007: unknown main item tag 0x2 [ 58.799910][ T847] waltop 0003:172F:0038.0007: unknown global tag 0xe [ 58.808397][ T847] waltop 0003:172F:0038.0007: item 0 2 1 14 parsing failed [ 58.816074][ T847] waltop 0003:172F:0038.0007: probe with driver waltop failed with error -22 [ 58.933153][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.988681][ T1282] netlink: 148 bytes leftover after parsing attributes in process `syz.0.258'. [ 58.998176][ T313] usb 1-1: USB disconnect, device number 25 [ 58.998898][ T1281] batadv_slave_0: left allmulticast mode [ 59.104331][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.114528][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.127976][ T31] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 59.137074][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.145105][ T31] usb 3-1: Product: syz [ 59.149272][ T31] usb 3-1: Manufacturer: syz [ 59.153887][ T31] usb 3-1: SerialNumber: syz [ 59.203142][ T847] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 59.333084][ T847] usb 2-1: device descriptor read/64, error -71 [ 59.362446][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 59.369393][ T31] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 59.377302][ T31] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 59.385744][ T31] usb 3-1: 2:1: cannot set freq 16122032 to ep 0x82 [ 59.396044][ T31] usb 3-1: USB disconnect, device number 16 [ 59.524877][ T36] audit: type=1400 audit(1786132789.779:305): avc: denied { ioctl } for pid=1309 comm="syz.0.268" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.549457][ T36] audit: type=1400 audit(1786132789.779:306): avc: denied { connect } for pid=1309 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.583116][ T847] usb 2-1: device descriptor read/64, error -71 [ 59.803125][ T313] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 59.833091][ T847] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.963091][ T313] usb 1-1: Using ep0 maxpacket: 16 [ 59.963107][ T847] usb 2-1: device descriptor read/64, error -71 [ 59.975510][ T313] usb 1-1: config 32 has an invalid interface number: 64 but max is 0 [ 59.983759][ T313] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 59.994263][ T313] usb 1-1: config 32 has no interface number 0 [ 60.000456][ T313] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 60.009503][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.020621][ T313] usb 1-1: Found UVC 0.00 device (0bd3:0569) [ 60.027557][ T313] usb 1-1: No valid video chain found. [ 60.113112][ T404] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 60.203116][ T847] usb 2-1: device descriptor read/64, error -71 [ 60.220451][ T313] usb 1-1: USB disconnect, device number 26 [ 60.264171][ T404] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 60.272448][ T404] usb 3-1: config 0 has no interface number 0 [ 60.279979][ T404] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 60.289155][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.297176][ T404] usb 3-1: Product: syz [ 60.301385][ T404] usb 3-1: Manufacturer: syz [ 60.306128][ T404] usb 3-1: SerialNumber: syz [ 60.311340][ T404] usb 3-1: config 0 descriptor?? [ 60.316638][ T847] usb usb2-port1: attempt power cycle [ 60.653102][ T847] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.674057][ T847] usb 2-1: device descriptor read/8, error -71 [ 60.803187][ T36] audit: type=1400 audit(1786132791.059:307): avc: denied { execute } for pid=1322 comm="syz.0.272" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.803256][ T1325] process 'syz.0.272' launched '/dev/fd/6' with NULL argv: empty string added [ 60.825247][ T847] usb 2-1: device descriptor read/8, error -71 [ 60.833849][ T36] audit: type=1400 audit(1786132791.089:308): avc: denied { execute_no_trans } for pid=1322 comm="syz.0.272" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.860740][ T71] usb 5-1: USB disconnect, device number 15 [ 60.868913][ T36] audit: type=1326 audit(1786132791.099:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 60.894365][ T1327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.273'. [ 60.900011][ T36] audit: type=1326 audit(1786132791.099:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 60.909183][ T1327] netlink: 43 bytes leftover after parsing attributes in process `syz.4.273'. [ 60.941480][ T36] audit: type=1326 audit(1786132791.099:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 60.942443][ T404] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 60.968351][ T36] audit: type=1326 audit(1786132791.099:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 60.977991][ T1327] netlink: 'syz.4.273': attribute type 5 has an invalid length. [ 61.033392][ T404] asix 3-1:0.251: probe with driver asix failed with error -524 [ 61.043504][ T1327] netlink: 43 bytes leftover after parsing attributes in process `syz.4.273'. [ 61.133085][ T847] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.153475][ T404] usb 3-1: USB disconnect, device number 17 [ 61.161709][ T847] usb 2-1: device descriptor read/8, error -71 [ 61.294006][ T847] usb 2-1: device descriptor read/8, error -71 [ 61.403166][ T847] usb usb2-port1: unable to enumerate USB device [ 61.883076][ T847] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 62.033069][ T847] usb 5-1: Using ep0 maxpacket: 8 [ 62.041051][ T847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 62.048065][ T847] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 62.053173][ T328] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.061842][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.113512][ T847] usb 5-1: config 0 descriptor?? [ 62.213093][ T328] usb 3-1: device descriptor read/64, error -71 [ 62.443073][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.453071][ T328] usb 3-1: device descriptor read/64, error -71 [ 62.527478][ T847] hid (null): unknown global tag 0xe [ 62.536029][ T847] logitech-djreceiver 0003:046D:C534.0008: unknown global tag 0xe [ 62.549761][ T847] logitech-djreceiver 0003:046D:C534.0008: item 0 0 1 14 parsing failed [ 62.567123][ T847] logitech-djreceiver 0003:046D:C534.0008: logi_dj_probe: parse failed [ 62.581167][ T847] logitech-djreceiver 0003:046D:C534.0008: probe with driver logitech-djreceiver failed with error -22 [ 62.613080][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 62.619669][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 62.628169][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 240, changing to 11 [ 62.641816][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 62.653359][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.661915][ T9] usb 2-1: Product: ю [ 62.666557][ T9] usb 2-1: Manufacturer: 喞湿冉鶍⹪峈㫴鉯ꁱ맶욦㶌ꭘⳒ䯼䬈㣘凩锣瀿᥈푰ᨓ觀ର䆶呻뢪驒㧌ﺢ瘄欮쇭탇ꁮ櫯获꾀湆匩灒埴霂Ḃ६泧칄䵠둴瀝㉛❛홻袆⾴ꉟ붭ⴙ⦏䜋蔄࿱ꗕ࣏쁤䧩ꮰ뺟濪苒䈆䐦氹ᗟ䡂㻰.영ꖒ䫒ᘟ圂黔⹵椕叛欘뵷敠ꒉ叩ᝁꑣﵹ̟꽭塟㲵뻦ﾥ龶疝ᐢⵢ擑 [ 62.702076][ T9] usb 2-1: SerialNumber: 䯧翧彠럝씩嫯弁㚴ᮅ嵬쾳뎵훘碥ὔ狵࡮酪鯃扚챣䜥ﲅ㔦ᗚ㑡襃耡脞鏮넁檶ﱯ薔怕舘巭V퓤檢⹋惬㡪Ꞝ形娤ᎌⓆಜ鋂宱呃㎊4᪍㻹鴉릹玿࿙壞ᯗ뗆ퟭ마̎䝉䞥鄆㚨ህ⼟눖 [ 62.703100][ T328] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 62.737560][ T847] usb 5-1: USB disconnect, device number 16 [ 62.873081][ T328] usb 3-1: device descriptor read/64, error -71 [ 62.947272][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 62.956835][ T9] usb 2-1: USB disconnect, device number 22 [ 62.969461][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.123071][ T328] usb 3-1: device descriptor read/64, error -71 [ 63.233206][ T328] usb usb3-port1: attempt power cycle [ 63.500245][ T1357] mmap: syz.1.285 (1357) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.533079][ T313] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 63.553483][ T36] kauditd_printk_skb: 35738 callbacks suppressed [ 63.553500][ T36] audit: type=1326 audit(1786132793.809:36051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.586452][ T328] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 63.604331][ T36] audit: type=1326 audit(1786132793.809:36052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.643122][ T36] audit: type=1326 audit(1786132793.809:36053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.668470][ T36] audit: type=1326 audit(1786132793.809:36054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.693939][ T36] audit: type=1326 audit(1786132793.809:36055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.721534][ T328] usb 3-1: device descriptor read/8, error -71 [ 63.733112][ T36] audit: type=1326 audit(1786132793.809:36056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.760502][ T313] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 63.769058][ T36] audit: type=1326 audit(1786132793.809:36057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.769181][ T313] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 63.799122][ T36] audit: type=1326 audit(1786132793.809:36058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.809243][ T313] usb 5-1: config 220 has no interface number 2 [ 63.829905][ T36] audit: type=1326 audit(1786132793.819:36060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.835695][ T313] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 63.860968][ T36] audit: type=1326 audit(1786132793.819:36061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1322 comm="syz.0.272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760579e0d9 code=0x50000 [ 63.879222][ T313] usb 5-1: config 220 interface 0 has no altsetting 0 [ 63.915543][ T328] usb 3-1: device descriptor read/8, error -71 [ 63.929704][ T313] usb 5-1: config 220 interface 76 has no altsetting 0 [ 63.940951][ T313] usb 5-1: config 220 interface 1 has no altsetting 0 [ 63.941534][ T1372] tipc: Started in network mode [ 63.949630][ T313] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 63.952934][ T1372] tipc: Node identity 8, cluster identity 1 [ 63.962392][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.967938][ T1372] tipc: Node number set to 8 [ 63.976490][ T313] usb 5-1: Product: syz [ 63.984752][ T313] usb 5-1: Manufacturer: syz [ 63.989424][ T313] usb 5-1: SerialNumber: syz [ 64.173100][ T328] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 64.194014][ T328] usb 3-1: device descriptor read/8, error -71 [ 64.283089][ T847] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.324102][ T328] usb 3-1: device descriptor read/8, error -71 [ 64.382483][ T313] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 64.391955][ T313] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 64.398388][ T313] usb 5-1: No valid video chain found. [ 64.403932][ T313] usb 5-1: selecting invalid altsetting 0 [ 64.413519][ T313] usb 5-1: USB disconnect, device number 17 [ 64.433212][ T328] usb usb3-port1: unable to enumerate USB device [ 64.444879][ T847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.453331][ T847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.463875][ T847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.474216][ T847] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 64.483373][ T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.491381][ T847] usb 2-1: Product: syz [ 64.495623][ T847] usb 2-1: Manufacturer: syz [ 64.500241][ T847] usb 2-1: SerialNumber: syz [ 64.907201][ T1398] rust_binder: Read failure Err(EAGAIN) in pid:385 [ 64.980280][ T1402] overlayfs: failed to resolve './file1': -2 [ 65.057620][ T1407] dummy_hcd dummy_hcd.0: remove, state 4 [ 65.063613][ T1407] usb usb1: USB disconnect, device number 1 [ 65.076637][ T1407] dummy_hcd dummy_hcd.0: stopped [ 65.081649][ T1407] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 65.108228][ T1407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 65.453122][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 65.483084][ T328] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 65.614340][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.624195][ T9] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 65.633297][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.641276][ T9] usb 5-1: Product: syz [ 65.643075][ T328] usb 3-1: Using ep0 maxpacket: 16 [ 65.645662][ T9] usb 5-1: Manufacturer: syz [ 65.652131][ T328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.657265][ T9] usb 5-1: SerialNumber: syz [ 65.665776][ T328] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 65.676790][ T328] usb 3-1: can't read configurations, error -71 [ 65.880307][ T9] usb 5-1: unit 4 not found! [ 65.885001][ T9] usb 5-1: unit 14 not found! [ 65.893386][ T9] usb 5-1: USB disconnect, device number 18 [ 65.904955][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.355607][ T1432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1432 comm=syz.0.310 [ 66.370353][ T1432] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 66.382966][ T1432] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 66.391381][ T1432] CPU: 0 UID: 0 PID: 1432 Comm: syz.0.310 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 66.402872][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.412947][ T1432] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 66.418417][ T1432] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 24 05 ce fd eb 0c e8 1d 05 ce fd eb 05 e8 16 05 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 70 c9 26 fe 4d 8b 36 4c 89 f7 e8 [ 66.438033][ T1432] RSP: 0018:ffffc900029af818 EFLAGS: 00010246 [ 66.444126][ T1432] RAX: 0000000000000000 RBX: ffff888100092010 RCX: 0000000000080000 [ 66.452110][ T1432] RDX: ffffc900019c2000 RSI: 000000000000067c RDI: 000000000000067d [ 66.460082][ T1432] RBP: ffffc900029af840 R08: ffff88810d70b900 R09: 0000000000000004 [ 66.468065][ T1432] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 66.476039][ T1432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 66.484008][ T1432] FS: 00007f76066df6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 66.492930][ T1432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.499501][ T1432] CR2: 00007f7605b50300 CR3: 000000011760c000 CR4: 00000000003526b0 [ 66.507466][ T1432] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 66.515433][ T1432] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 66.523398][ T1432] Call Trace: [ 66.526669][ T1432] [ 66.529606][ T1432] ? __cfi_dummy_udc_start+0x10/0x10 [ 66.534917][ T1432] gadget_bind_driver+0x3e1/0x9c0 [ 66.539942][ T1432] ? __cfi_gadget_bind_driver+0x10/0x10 [ 66.545483][ T1432] really_probe+0x2e1/0x8b0 [ 66.549978][ T1432] __driver_probe_device+0x193/0x280 [ 66.555276][ T1432] driver_probe_device+0x54/0x3f0 [ 66.560311][ T1432] __driver_attach+0x422/0x5e0 [ 66.565081][ T1432] bus_for_each_dev+0x249/0x2d0 [ 66.569928][ T1432] ? __cfi___driver_attach+0x10/0x10 [ 66.575231][ T1432] ? __cfi_bus_for_each_dev+0x10/0x10 [ 66.580611][ T1432] ? __kasan_kmalloc+0x96/0xb0 [ 66.585385][ T1432] ? _raw_spin_unlock+0x45/0x60 [ 66.590234][ T1432] ? klist_add_tail+0x1dd/0x220 [ 66.595075][ T1432] driver_attach+0x46/0x50 [ 66.599512][ T1432] bus_add_driver+0x393/0x730 [ 66.604191][ T1432] driver_register+0x2b7/0x3c0 [ 66.608947][ T1432] usb_gadget_register_driver_owner+0xfc/0x270 [ 66.615096][ T1432] raw_ioctl+0x144c/0x37a0 [ 66.619518][ T1432] ? __cfi_raw_ioctl+0x10/0x10 [ 66.624300][ T1432] ? selinux_file_ioctl+0x732/0x1480 [ 66.629575][ T1432] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 66.635120][ T1432] ? bpf_lsm_file_ioctl+0xd/0x20 [ 66.640054][ T1432] ? security_file_ioctl+0x3e/0x110 [ 66.645255][ T1432] ? __cfi_raw_ioctl+0x10/0x10 [ 66.650011][ T1432] __se_sys_ioctl+0x135/0x1b0 [ 66.654681][ T1432] __x64_sys_ioctl+0x7f/0xa0 [ 66.659260][ T1432] x64_sys_call+0x1878/0x2ee0 [ 66.663925][ T1432] do_syscall_64+0x57/0xf0 [ 66.668362][ T1432] ? clear_bhb_loop+0x50/0xa0 [ 66.673035][ T1432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.678932][ T1432] RIP: 0033:0x7f760579dd6b [ 66.683354][ T1432] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 66.702946][ T1432] RSP: 002b:00007f76066dcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.711352][ T1432] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f760579dd6b [ 66.713132][ T313] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 66.719317][ T1432] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 66.719336][ T1432] RBP: 00007f76066ddfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 66.719349][ T1432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.750845][ T1432] R13: 0000200000000980 R14: 0000000000000003 R15: 0000000000000000 [ 66.758814][ T1432] [ 66.761824][ T1432] Modules linked in: [ 66.765951][ T1432] ---[ end trace 0000000000000000 ]--- [ 66.771802][ T1432] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 66.777367][ T1432] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 24 05 ce fd eb 0c e8 1d 05 ce fd eb 05 e8 16 05 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 70 c9 26 fe 4d 8b 36 4c 89 f7 e8 [ 66.783106][ T328] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 66.797289][ T1432] RSP: 0018:ffffc900029af818 EFLAGS: 00010246 [ 66.810845][ T1432] RAX: 0000000000000000 RBX: ffff888100092010 RCX: 0000000000080000 [ 66.818858][ T1432] RDX: ffffc900019c2000 RSI: 000000000000067c RDI: 000000000000067d [ 66.826875][ T1432] RBP: ffffc900029af840 R08: ffff88810d70b900 R09: 0000000000000004 [ 66.834903][ T1432] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 66.842894][ T1432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 66.850899][ T1432] FS: 00007f76066df6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 66.859876][ T1432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.866499][ T1432] CR2: 00007f7605b50300 CR3: 000000011760c000 CR4: 00000000003526b0 [ 66.874551][ T1432] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 66.882537][ T1432] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 66.890559][ T1432] Kernel panic - not syncing: Fatal exception [ 66.896902][ T1432] Kernel Offset: disabled [ 66.901251][ T1432] Rebooting in 86400 seconds..