last executing test programs: 25.114105887s ago: executing program 2 (id=101): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x32874000) write(r3, &(0x7f0000000000)='3', 0x4e) close_range(r2, 0xffffffffffffffff, 0x0) 25.052149029s ago: executing program 2 (id=102): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x9c0c}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) 24.975464711s ago: executing program 2 (id=103): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="90aad6fafedd513a57c0da06655c28a93f29038cf0c5d33547a1c916e8bbcb769ab9ae957d890986f1ad23699643b3ca155b57b4cd48a9d66c9512765658e859b6b993590977020fc7058f90fc20692efdbb65b0d77564bd098b7822de5cc7c8dff43e82b2d2034b1b1d24b347adedc96de34a965a8599f435b00d99703658a7f7d78b28a4624a41aae1d13854833b3120761399442f55d399e15fa0282784dc0b45595df7852a58f0a710c059f729b4726051d94c44884c9305cf312456db53b3f84184a3690c534eb1fbb584fe5787113026b9373a128c6efa66e043fe802a4b14468acc7822bfc8f7784991", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x40) 24.975250581s ago: executing program 2 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42, 0x44) copy_file_range(r0, 0x0, r0, &(0x7f0000000340)=0x100000000, 0x8, 0x0) 24.974355931s ago: executing program 2 (id=105): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) (fail_nth: 7) 24.943601612s ago: executing program 2 (id=106): unshare(0x60000600) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\b']) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0xf, 0x4a, [@remote, @private=0xa010101, @multicast2]}]}}}}}) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x14004}, 0x20048004) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x0) recvmmsg(r6, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) 9.336810487s ago: executing program 32 (id=106): unshare(0x60000600) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\b']) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0xf, 0x4a, [@remote, @private=0xa010101, @multicast2]}]}}}}}) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x14004}, 0x20048004) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CHECK_EXTENSION_VM(r9, 0xae03, 0x0) recvmmsg(r6, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) 8.731540203s ago: executing program 4 (id=171): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581030511ff59164edaeaf03dd0945bd8ad00227a1c39e965b4d992bdf9f151ecc55cb591656921eece408675eaddd9561d84069afac4e93eb83c4acd121091ea1c1c54dd71c09647c0a9dc3655"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004402, &(0x7f00000000c0)) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00030c0000000c03"], 0x0, 0x0, 0x0}, 0x0) socket(0xf, 0x803, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000344000000"], 0x0, 0x0}, 0x0) 6.700768346s ago: executing program 4 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44, 0xa, 0xd, 0xa0, 0x8, 0x11, 0x0, 0x2, 0x9, 0xff, 0x3, 0x6, 0x5, '\x00', 0x1, 0xffffffffffffff83}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x200000007, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x4, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000001010101000000000000198008000100"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000014c0), 0x800, 0x0) sendfile(r0, r6, &(0x7f0000001500)=0x46, 0x5) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000000)={0xc, 0x2, 0x1, 0x47}) recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2, 0x0) 6.5462189s ago: executing program 4 (id=183): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e20, @broadcast}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x46f14fff, 0x4, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7fd, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002222000000b318ef940b06e53f93d49c7dcf2a9000070900be0083"], 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e20, @broadcast}}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x46f14fff, 0x4, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7fd, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002222000000b318ef940b06e53f93d49c7dcf2a9000070900be0083"], 0x0}, 0x0) (async) 4.723824847s ago: executing program 3 (id=189): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0, 0xc9c}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) 4.668585849s ago: executing program 0 (id=191): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) (fail_nth: 15) 4.571530811s ago: executing program 3 (id=192): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x32874000) write(r3, &(0x7f0000000000)='3', 0x4e) close_range(r2, 0xffffffffffffffff, 0x0) 4.571351942s ago: executing program 0 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x32874000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000500)='\x00\xc5j\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xcd\xf0\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbj\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x00\x00\x00\x00\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\x00\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xed\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x994\xc8\xc2|2\xee\xb4W8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7lS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/452) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close_range(r2, 0xffffffffffffffff, 0x0) 3.525754909s ago: executing program 4 (id=199): r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x143802, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80140006"], 0x2c}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0xb522f000) syz_ublk_setup_io_uring(0x5fe9, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000740)={[{@nfs_export_on}, {@index_off}], [], 0x2c}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x101000) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)) timer_create(0x0, 0x0, &(0x7f0000000380)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x12) 3.283046505s ago: executing program 3 (id=201): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff00000007058102400000070502024000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000500)='\x00\xc5j\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xcd\xf0\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbj\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x00\x00\x00\x00\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\x00\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xed\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x994\xc8\xc2|2\xee\xb4W8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7lS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/452) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.244094086s ago: executing program 0 (id=202): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0, 0x9c0c}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) 3.171453347s ago: executing program 0 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRESHEX=r0], 0x24}}, 0x20044040) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000000040)={0x7f, 0x2, 0xd, 0x6, 0x1}) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000002c0)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000340)={0x4, 0x0, [{}, {}, {}, {}]}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x16, 0x1, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) signalfd(r0, &(0x7f0000000300)={[0x5]}, 0x8) syz_usb_connect$rtl8150(0x3, 0x32, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200000000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x40881) 2.824984497s ago: executing program 1 (id=207): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r0, 0x0, 0x0, 0x1) (async) syz_usb_connect$uac1(0x5, 0xc6, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x3, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3d}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0xfeff, 0x64, "094c5fd2b86a"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x3, 0x8, "9c"}, @feature_unit={0x7, 0x24, 0x6, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x3, 0x4, 0x41}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x87}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x405, 0x1, 0x6, 0xfe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0xf, "", "9f40"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xe, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x4, "1cc121493c6975ef"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x42, 0x1, 0x1, {0x7, 0x25, 0x1, 0xc, 0xff, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0x9, 0x4, {0x7, 0x25, 0x1, 0x8, 0x1, 0xfffd}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000740)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) (async) syz_usb_control_io$hid(r3, &(0x7f0000000440)={0x24, &(0x7f0000000100)={0x20, 0x11, 0xd1, {0xd1, 0x30, "e10076e74aac9a1b44e6559247abededc646c63a9cae394bbb7233cf5ddce21d65fc04cf910b839a2b250d1a311b5ba33564dc57d76f1f26627a493f6ed7e4f206ef66371dab3e79bd79f85462951bf52d117dc3b20e96df693c95e059915c4bda629d636502ef0616c5fd7c80d3d1a34a206126b9c12f133359d99954ebd44e5030a1b3e36e70147b75e5923d5d9724cc367305d5c125874f7b57aa6e1299cb2a0fe9fea93fb8e57c973b7ca14f9a2ef6614975084bb7ea5af99e52cf14a685e264ee23b34b8e01447d575e1d6dad"}}, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003f1000000f10374a687a8083e6fa20a086acfc983654f3ed209d4f709fa0406d36de4551d82950f744cacf2fe8bd6fc099999c162d2a32620c282a91dab7a83510fb29d9d8bd88faf5fe6b5fcb465de365d4eb5e151fe460327a2c913bbf9e961d1ce37c110f90e3733da1129858906f06ac582cfb54cb06d36c9ca80293b35b9236b1e88d45ce39898be0dad5a51c43a68715482894332315b8fc9abe0ae5541437db3d1f7af0643950edcba136853c3361a0f4bd3341f412b9f1f79daebf887054e935f940c71ad38ff07e779bee9d6a599ccf0f0e4e53ab6a2238bc16f6992256ac5931fd6a736a3f79ff20373bec04cd2a3b281"], &(0x7f00000003c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xb, 0x1, {0x22, 0xd94}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x20, 0x3, 0xe9, "830c393357b4fa8c7f2cdf43623168f63bf1fe9797966e0a3045fdfa50724bbdcd48d15234df464b15e63cfbb7b230d152ef109a716b5032b82cbc35d9c76a72a6538fa89c2324a107f9344c842e03d5f6f0e98b3b1fcfd0065f55a8b477d222a17c04517fed0c2d6717f037d859a358db056c95701f097eb3dda5633fa1fdb1282fb81abc26f26c7c1602fc7b3e8b375ea879b7a089ba89ddc134ead54483ae676b7eeba2aba33e678d1a68b849c3dd7a0b3df996b2b7b027f679003cdc5404cbd2ab49b3a3f27c1920dfb96c1b00c5de00cd62f684d9963cb9bc9d6e83478f6497f204d83ad5e9fb"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000600)={0x20, 0x1, 0x83, "1d5d1a5a5e3573f09d1bb3c98164f3e459256c977538ae1b223100f4b372fbc41abf038103253252480c9fe125f58a3e9b4d1f87f242afacbf76e72ad44c5a64935ad520ddedb9819200e512d8daf06c07f2e3d0d4426fd6f4f7daf52e76fe022f518b0270b94b0e6c204a941b7cf95ee17fb1816cbc62ded7f5a50ecfb010359cb25b"}, &(0x7f00000006c0)={0x20, 0x3, 0xfffffffffffffeaa, 0xbd}}) 1.969208619s ago: executing program 3 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66baf80cb81206eb8bef66bafc0c66edc744240000000000c7442402369f0000c7442406000000000f011c24460f01cb0f18c7420f01c90f955c84b1c421a016f5c744240000000000c744240201700000c7442406000000000f0114242e66460f38807b0566baf80cb81eb88f89ef66bafc0c66b8ee0066ef", 0x79}], 0x1, 0x64, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66baf80cb81206eb8bef66bafc0c66edc744240000000000c7442402369f0000c7442406000000000f011c24460f01cb0f18c7420f01c90f955c84b1c421a016f5c744240000000000c744240201700000c7442406000000000f0114242e66460f38807b0566baf80cb81eb88f89ef66bafc0c66b8ee0066ef", 0x79}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001580)={{'\x00', 0x2}, {0x2}, 0x24, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)="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", 0x12b, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x10e3}) (async) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001580)={{'\x00', 0x2}, {0x2}, 0x24, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)="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", 0x12b, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x10e3}) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r11, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r11, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x20000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000002, 0x40000000009, 0x8000000000005, 0x800040068], 0x22271fff, 0x547d1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.882991471s ago: executing program 0 (id=209): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x32874000) write(r3, &(0x7f0000000000)='3', 0x4e) close_range(r2, 0xffffffffffffffff, 0x0) 1.802224563s ago: executing program 3 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x131) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x32874000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000500)='\x00\xc5j\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xcd\xf0\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbj\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x00\x00\x00\x00\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\x00\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xed\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x994\xc8\xc2|2\xee\xb4W8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7lS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/452) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close_range(r2, 0xffffffffffffffff, 0x0) 1.574816209s ago: executing program 1 (id=211): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.412660024s ago: executing program 4 (id=212): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a445000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x24028044}, 0x4044080) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4a6, 0xec6b, 0x54}}, 0x30) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r4, &(0x7f0000002280)=""/148, 0x94) read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) socket(0x0, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000002340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!\\['}}, {@fsname={'fsname', 0x3d, '\\#f@'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@euid_lt}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, ']'}}, {@pcr={'pcr', 0x3d, 0x8031}}, {@euid_gt}]}) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x10000, 0xa4) mkdirat(r7, &(0x7f0000000040)='./dev\x00', 0x95a6c3f5c743b236) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="019849ee2d6e8aff8919b71d8b75c3d64269db0033178d978dea10"], 0x18}, 0x1, 0x0, 0x0, 0x8c51}, 0x4040140) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r11 = dup(r10) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, 0x0, 0x0) 1.389766994s ago: executing program 1 (id=213): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000086, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc9c}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000001ac0)=""/288, 0x120}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001980)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x40010002, 0x0) 1.279302297s ago: executing program 1 (id=214): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xae, 0xee, 0xae, 0x20, 0x403, 0xea90, 0x27a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x7, 0xc0, 0x1, "", [{{0x9, 0x4, 0xb9, 0x9, 0x1, 0x38, 0x99, 0x38, 0x5, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x50, 0xd0}}]}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 662.940423ms ago: executing program 0 (id=215): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_ep_read(r0, 0x80, 0x42, &(0x7f0000000000)=""/66) 579.651875ms ago: executing program 3 (id=216): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff00000007058102400000070502024000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000500)='\x00\xc5j\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xcd\xf0\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbj\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x00\x00\x00\x00\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\x00\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xed\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x994\xc8\xc2|2\xee\xb4W8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7lS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/452) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 51.454739ms ago: executing program 1 (id=217): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f7, 0x2}, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000080)={0x4, 0x0, [{0x7, 0x0, 0x6, 0x7095, 0xfffffc14, 0xa9, 0x9}, {0x80000000, 0x6, 0x5, 0x7e, 0x2, 0x8, 0xfffffff8}, {0xc0000001, 0x7, 0x1, 0x7, 0x9, 0x2427, 0xe}, {0xc0000000, 0x5, 0x1, 0xa, 0x3ff, 0x1, 0x8db}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd07, &(0x7f0000000000)="0400000000000000000004003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000100)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_existing}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000180)={r4}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f40)={0x2c, r6, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x2c}}, 0x4000844) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) 47.846599ms ago: executing program 1 (id=218): rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x1955, 0x4) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) (async) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvfrom(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) recvfrom(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) (async) listen(r1, 0x1) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) (async) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) 0s ago: executing program 4 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) io_setup(0x5, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="2002dd000000dd0432c2d429fcebfbdaaf2bff755f2da3a3350d12dbf6cda29230072fd2e9b12e3784aedb5a8d69bce4732c9edd0d1c804bb7fa672b7dd83fb5a345529469641ab2ab0311d389cf565f0d489747db6b5c7ef0aa12b848adc353c443fd9ee08890a799ae147c185162651c3878afe771bc8bba924e66d10c72c4f8fa5387f09dd15fc3a0d223b07da6065ce4f4f101cd40fac0b96972df302464cba2e487f9c33624cc08470c01dba2e19cacdf4f030c377b9f7c3795fc15f6a4e6b4a710006763d5d90890f61e1c1c8404f172a7a3187817d24fdb0c8f39438627d20e"], 0x0}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf8, 0x4, 0xb, '\x00', 0x1}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xfffe, 0x7, @loopback, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2, 0x20000000}, 0x1c) write(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1\x00', &(0x7f0000000080)={0x0, 0x0, 0x20}, 0x18) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): ve_1) entered disabled state [ 33.280563][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.288030][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.295536][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.302806][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.320730][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.327845][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.338290][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.345393][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.378369][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.385484][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.404862][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.411983][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.419709][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.426753][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.434631][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.441716][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.450115][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.457183][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.465134][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.472206][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.524097][ T297] veth0_vlan: entered promiscuous mode [ 33.548034][ T296] veth0_vlan: entered promiscuous mode [ 33.563318][ T295] veth0_vlan: entered promiscuous mode [ 33.570615][ T297] veth1_macvtap: entered promiscuous mode [ 33.582950][ T298] veth0_vlan: entered promiscuous mode [ 33.604968][ T296] veth1_macvtap: entered promiscuous mode [ 33.617975][ T295] veth1_macvtap: entered promiscuous mode [ 33.643583][ T298] veth1_macvtap: entered promiscuous mode [ 33.652404][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.757180][ T320] ======================================================= [ 33.757180][ T320] WARNING: The mand mount option has been deprecated and [ 33.757180][ T320] and is ignored by this kernel. Remove the mand [ 33.757180][ T320] option from the mount to silence this warning. [ 33.757180][ T320] ======================================================= [ 33.759524][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.797952][ T320] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 33.839019][ T320] overlayfs: missing 'lowerdir' [ 33.877535][ T325] Bluetooth: hci0: sending frame failed (-49) [ 33.877571][ T322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.892914][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 33.929713][ T322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.979257][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.062353][ T332] loop7: detected capacity change from 0 to 16384 [ 34.140801][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 34.150800][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 34.174588][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.200281][ T46] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 34.233551][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.253517][ T314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.261364][ T314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.272920][ T46] pl2303 1-1:1.0: pl2303 converter detected [ 34.286580][ T46] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 34.293701][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.310028][ T337] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 34.320503][ T337] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6'. [ 34.331150][ T334] loop7: detected capacity change from 16384 to 16383 [ 34.555115][ T46] usb 1-1: USB disconnect, device number 2 [ 34.570664][ T46] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 34.602699][ T46] pl2303 1-1:1.0: device disconnected [ 34.921038][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.039257][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.100743][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.112306][ T31] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 35.124449][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.134101][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.142424][ T31] usb 3-1: Product: syz [ 35.147284][ T31] usb 3-1: Manufacturer: syz [ 35.155080][ T31] usb 3-1: SerialNumber: syz [ 35.163838][ T31] cdc_mbim 3-1:1.0: skipping garbage [ 35.199461][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 35.206321][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.215670][ T46] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 35.224476][ T46] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 35.239319][ T46] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 35.248700][ T46] usb 4-1: config 128 has no interface number 0 [ 35.255789][ T46] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 35.267685][ T46] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 35.278344][ T46] usb 4-1: config 128 interface 127 has no altsetting 0 [ 35.287103][ T46] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 35.298064][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.306403][ T46] usb 4-1: Product: syz [ 35.313798][ T46] usb 4-1: Manufacturer: syz [ 35.318537][ T46] usb 4-1: SerialNumber: syz [ 35.365238][ T341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.535020][ T350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11'. [ 35.554443][ T46] usb 4-1: USB disconnect, device number 2 [ 35.581706][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.669290][ T67] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.761069][ T364] rust_binder: 363:364 got transaction to invalid handle 2 [ 35.768414][ T364] rust_binder: 363:364 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 35.778102][ T9] rust_binder: 363: undelivered TRANSACTION_ERROR: 29201 [ 35.822003][ T67] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.842929][ T67] usb 1-1: not running at top speed; connect to a high speed hub [ 35.860292][ T67] usb 1-1: config 1 has an invalid interface number: 116 but max is 0 [ 35.868650][ T67] usb 1-1: config 1 has no interface number 0 [ 35.876297][ T67] usb 1-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 35.887819][ T67] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 35.899156][ T67] usb 1-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 35.911223][ T67] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 35.922991][ T67] usb 1-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid wMaxPacketSize 0 [ 35.933549][ T67] usb 1-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.950158][ T368] tipc: Started in network mode [ 35.955146][ T368] tipc: Node identity ac1414aa, cluster identity 4711 [ 35.962980][ T67] usb 1-1: config 1 interface 116 has no altsetting 0 [ 35.979719][ T368] tipc: New replicast peer: 0.0.0.0 [ 35.981522][ T67] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 35.985842][ T368] tipc: Enabled bearer , priority 10 [ 35.995714][ T341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.002895][ T368] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16'. [ 36.016601][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.030962][ T31] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 36.039861][ T67] usb 1-1: Product: syz [ 36.044127][ T67] usb 1-1: Manufacturer: syz [ 36.049168][ T67] usb 1-1: SerialNumber: syz [ 36.055885][ T357] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.069331][ T357] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.088631][ T370] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 36.097133][ T370] tipc: Enabled bearer , priority 10 [ 36.108297][ T374] tipc: Enabling of bearer rejected, already enabled [ 36.128499][ T373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16'. [ 36.138901][ T382] tipc: Enabling of bearer rejected, already enabled [ 36.227303][ T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.241841][ T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.252219][ T31] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 36.270583][ T31] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 36.277815][ T31] wwan wwan0: port wwan0mbim0 attached [ 36.293703][ T31] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 46:ee:7a:3c:7e:50 [ 36.330526][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.337975][ T385] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 36.362338][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 36.362374][ T36] audit: type=1400 audit(1788383759.260:144): avc: denied { read } for pid=151 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.371303][ T385] netlink: 9 bytes leftover after parsing attributes in process `syz.3.18'. [ 36.479226][ T9] usb 3-1: USB disconnect, device number 2 [ 36.489453][ T9] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 36.505806][ T67] ums-usbat 1-1:1.116: USB Mass Storage device detected [ 36.539595][ T36] audit: type=1400 audit(1788383759.440:145): avc: denied { mount } for pid=394 comm="syz.1.21" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.584023][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 36.597312][ T36] audit: type=1400 audit(1788383759.490:146): avc: denied { getattr } for pid=397 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.637856][ T36] audit: type=1400 audit(1788383759.530:147): avc: denied { read } for pid=399 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.660605][ T36] audit: type=1400 audit(1788383759.530:148): avc: denied { open } for pid=399 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.687318][ T67] ums-usbat 1-1:1.116: probe with driver ums-usbat failed with error -5 [ 36.711121][ T67] usb 1-1: USB disconnect, device number 3 [ 36.746586][ T36] audit: type=1400 audit(1788383759.640:149): avc: denied { create } for pid=396 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.782826][ T36] audit: type=1400 audit(1788383759.640:150): avc: denied { write } for pid=396 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.827086][ T36] audit: type=1400 audit(1788383759.640:151): avc: denied { append } for pid=396 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" dev="tmpfs" ino=577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.859403][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.877136][ T36] audit: type=1400 audit(1788383759.720:152): avc: denied { unlink } for pid=407 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.009291][ T31] usb 2-1: device descriptor read/64, error -71 [ 37.061276][ T421] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 37.070610][ T36] audit: type=1400 audit(1788383759.960:153): avc: denied { checkpoint_restore } for pid=417 comm="syz.2.22" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.083561][ T421] overlayfs: missing 'lowerdir' [ 37.102094][ T64] tipc: Node number set to 2886997162 [ 37.124649][ T325] Bluetooth: hci0: sending frame failed (-49) [ 37.130938][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 37.289278][ T31] usb 2-1: device descriptor read/64, error -71 [ 37.569291][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.699235][ T31] usb 2-1: device descriptor read/64, error -71 [ 37.755507][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.765166][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.939266][ T31] usb 2-1: device descriptor read/64, error -71 [ 37.969294][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.989281][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 38.049456][ T31] usb usb2-port1: attempt power cycle [ 38.099289][ T64] usb 3-1: device descriptor read/64, error -71 [ 38.147907][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 38.156615][ T10] usb 4-1: config 6 has an invalid interface number: 6 but max is 0 [ 38.164728][ T10] usb 4-1: config 6 has no interface number 0 [ 38.171099][ T10] usb 4-1: config 6 interface 6 has no altsetting 0 [ 38.179918][ T10] usb 4-1: string descriptor 0 read error: -22 [ 38.186246][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 38.195384][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.207935][ T10] usb 4-1: Found UVC 0.00 device (174f:8a12) [ 38.215386][ T10] usb 4-1: No valid video chain found. [ 38.359272][ T64] usb 3-1: device descriptor read/64, error -71 [ 38.369361][ T362] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.399296][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.408661][ T10] usb 4-1: USB disconnect, device number 3 [ 38.420408][ T31] usb 2-1: device descriptor read/8, error -71 [ 38.520414][ T362] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 38.530457][ T362] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 38.540290][ T362] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 38.551306][ T362] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 38.560454][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.569568][ T31] usb 2-1: device descriptor read/8, error -71 [ 38.576619][ T443] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 38.583945][ T443] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 38.592489][ T362] pl2303 1-1:1.0: pl2303 converter detected [ 38.599405][ T362] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 38.601897][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.749356][ T64] usb 3-1: device descriptor read/64, error -71 [ 38.809326][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.831189][ T31] usb 2-1: device descriptor read/8, error -71 [ 38.860649][ T362] usb 1-1: USB disconnect, device number 4 [ 38.867841][ T362] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 38.876006][ T362] pl2303 1-1:1.0: device disconnected [ 38.973915][ T31] usb 2-1: device descriptor read/8, error -71 [ 38.985493][ T451] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 38.990297][ T64] usb 3-1: device descriptor read/64, error -71 [ 38.998854][ T451] overlayfs: missing 'lowerdir' [ 39.010760][ T344] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.089402][ T31] usb usb2-port1: unable to enumerate USB device [ 39.109413][ T64] usb usb3-port1: attempt power cycle [ 39.449270][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.470685][ T64] usb 3-1: device descriptor read/8, error -71 [ 39.600583][ T64] usb 3-1: device descriptor read/8, error -71 [ 39.839322][ T64] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.860510][ T64] usb 3-1: device descriptor read/8, error -71 [ 39.929305][ T362] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.990295][ T64] usb 3-1: device descriptor read/8, error -71 [ 40.080386][ T362] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.091432][ T362] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 40.099815][ T64] usb usb3-port1: unable to enumerate USB device [ 40.103651][ T362] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.117008][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.125061][ T362] usb 2-1: Product: syz [ 40.129273][ T362] usb 2-1: Manufacturer: syz [ 40.133890][ T362] usb 2-1: SerialNumber: syz [ 40.140141][ T362] cdc_mbim 2-1:1.0: skipping garbage [ 40.349365][ T457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.443063][ T471] FAULT_INJECTION: forcing a failure. [ 40.443063][ T471] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.456598][ T471] CPU: 0 UID: 0 PID: 471 Comm: syz.0.39 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 40.456624][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.456659][ T471] Call Trace: [ 40.456668][ T471] [ 40.456678][ T471] __dump_stack+0x21/0x30 [ 40.456719][ T471] dump_stack_lvl+0x140/0x1c0 [ 40.456751][ T471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.456773][ T471] ? kernel_text_address+0xa9/0xe0 [ 40.456812][ T471] ? unwind_get_return_address+0x51/0x90 [ 40.456842][ T471] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 40.456869][ T471] dump_stack+0x19/0x20 [ 40.456900][ T471] should_fail_ex+0x3c2/0x510 [ 40.456919][ T471] should_fail+0xf/0x20 [ 40.456935][ T471] should_fail_usercopy+0x1e/0x30 [ 40.456974][ T471] _copy_from_user+0x20/0xa0 [ 40.457005][ T471] ___sys_recvmsg+0x174/0x590 [ 40.457041][ T471] ? kstrtoull+0x13b/0x1e0 [ 40.457057][ T471] ? __sys_recvmsg+0x260/0x260 [ 40.457078][ T471] ? kstrtouint_from_user+0x117/0x170 [ 40.457111][ T471] ? __x64_sys_openat+0x13a/0x170 [ 40.457149][ T471] ? __kasan_check_read+0x15/0x20 [ 40.457171][ T471] do_recvmmsg+0x328/0x790 [ 40.457203][ T471] ? __sys_recvmmsg+0x2a0/0x2a0 [ 40.457224][ T471] ? __cfi_vfs_write+0x10/0x10 [ 40.457240][ T471] ? __kasan_slab_free+0x6a/0x80 [ 40.457284][ T471] ? putname+0x113/0x150 [ 40.457311][ T471] __x64_sys_recvmmsg+0x199/0x250 [ 40.457345][ T471] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 40.457368][ T471] ? __kasan_check_read+0x15/0x20 [ 40.457384][ T471] x64_sys_call+0x292c/0x2ee0 [ 40.457414][ T471] do_syscall_64+0x57/0xf0 [ 40.457447][ T471] ? clear_bhb_loop+0x50/0xa0 [ 40.457484][ T471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.457502][ T471] RIP: 0033:0x7fe61d19e159 [ 40.457521][ T471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.457533][ T471] RSP: 002b:00007fe61df85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 40.457577][ T471] RAX: ffffffffffffffda RBX: 00007fe61d425fa0 RCX: 00007fe61d19e159 [ 40.457594][ T471] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 40.457607][ T471] RBP: 00007fe61df85090 R08: 0000000000000000 R09: 0000000000000000 [ 40.457621][ T471] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 40.457640][ T471] R13: 00007fe61d426038 R14: 00007fe61d425fa0 R15: 00007ffe15f1afb8 [ 40.457654][ T471] [ 40.959293][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.009262][ T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.069250][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 41.069287][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.100816][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 41.125443][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 41.135499][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 41.145638][ T457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 41.156688][ T64] usb 1-1: device descriptor read/64, error -71 [ 41.163131][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.181627][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 41.181683][ T362] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 41.197662][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.212299][ T474] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 41.225209][ T474] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 41.234648][ T10] pl2303 3-1:1.0: pl2303 converter detected [ 41.249329][ T10] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 41.382503][ T457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.391932][ T457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.402571][ T362] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 41.409249][ T64] usb 1-1: device descriptor read/64, error -71 [ 41.417094][ T362] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 41.426058][ T491] FAULT_INJECTION: forcing a failure. [ 41.426058][ T491] name failslab, interval 1, probability 0, space 0, times 0 [ 41.438896][ T362] wwan wwan0: port wwan0mbim0 attached [ 41.447306][ T491] CPU: 1 UID: 0 PID: 491 Comm: syz.3.49 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 41.447343][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.447358][ T491] Call Trace: [ 41.447374][ T491] [ 41.447382][ T491] __dump_stack+0x21/0x30 [ 41.447415][ T491] dump_stack_lvl+0x140/0x1c0 [ 41.447439][ T491] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.447466][ T491] dump_stack+0x19/0x20 [ 41.447489][ T491] should_fail_ex+0x3c2/0x510 [ 41.447511][ T491] should_failslab+0xac/0x100 [ 41.447534][ T491] kmem_cache_alloc_node_noprof+0x45/0x420 [ 41.447554][ T491] ? __alloc_skb+0x10c/0x360 [ 41.447573][ T491] ? __kasan_check_write+0x18/0x20 [ 41.447591][ T491] ? mutex_lock+0x97/0x1d0 [ 41.447612][ T491] __alloc_skb+0x10c/0x360 [ 41.447631][ T491] netlink_dump+0x3b7/0x10d0 [ 41.447654][ T491] ? __check_object_size+0xe6/0x870 [ 41.447674][ T491] ? refcount_inc+0x90/0x90 [ 41.447695][ T491] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 41.447724][ T491] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 41.447748][ T491] ? consume_skb+0x7e/0x1a0 [ 41.447767][ T491] netlink_recvmsg+0x693/0xe60 [ 41.447792][ T491] ? __cfi_netlink_recvmsg+0x10/0x10 [ 41.447816][ T491] ? __cfi_selinux_file_open+0x10/0x10 [ 41.447837][ T491] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 41.447857][ T491] ? security_socket_recvmsg+0x44/0x130 [ 41.447883][ T491] ? __cfi_netlink_recvmsg+0x10/0x10 [ 41.447907][ T491] sock_recvmsg+0x185/0x1e0 [ 41.447925][ T491] ____sys_recvmsg+0x1e7/0x4a0 [ 41.447951][ T491] ? __sys_recvmsg_sock+0x60/0x60 [ 41.447977][ T491] ? import_iovec+0x80/0xb0 [ 41.448004][ T491] ___sys_recvmsg+0x214/0x590 [ 41.448028][ T491] ? kstrtoull+0x13b/0x1e0 [ 41.448046][ T491] ? __sys_recvmsg+0x260/0x260 [ 41.448070][ T491] ? kstrtouint_from_user+0x117/0x170 [ 41.448090][ T491] ? __x64_sys_openat+0x13a/0x170 [ 41.448120][ T491] ? __kasan_check_read+0x15/0x20 [ 41.448139][ T491] do_recvmmsg+0x328/0x790 [ 41.448164][ T491] ? __sys_recvmmsg+0x2a0/0x2a0 [ 41.448188][ T491] ? __cfi_vfs_write+0x10/0x10 [ 41.448206][ T491] ? __kasan_slab_free+0x6a/0x80 [ 41.448229][ T491] ? putname+0x113/0x150 [ 41.448251][ T491] __x64_sys_recvmmsg+0x199/0x250 [ 41.448276][ T491] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 41.448301][ T491] ? __kasan_check_read+0x15/0x20 [ 41.448320][ T491] x64_sys_call+0x292c/0x2ee0 [ 41.448336][ T491] do_syscall_64+0x57/0xf0 [ 41.448369][ T491] ? clear_bhb_loop+0x50/0xa0 [ 41.448390][ T491] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.448410][ T491] RIP: 0033:0x7f0a0b99e159 [ 41.448425][ T491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.448440][ T491] RSP: 002b:00007f0a0c859028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 41.448460][ T491] RAX: ffffffffffffffda RBX: 00007f0a0bc25fa0 RCX: 00007f0a0b99e159 [ 41.448473][ T491] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000003 [ 41.448485][ T491] RBP: 00007f0a0c859090 R08: 0000000000000000 R09: 0000000000000000 [ 41.448496][ T491] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 41.448507][ T491] R13: 00007f0a0bc26038 R14: 00007f0a0bc25fa0 R15: 00007ffc5957e388 [ 41.448522][ T491] [ 41.792770][ T362] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 16:3a:27:96:e1:8c [ 41.806076][ T362] usb 2-1: USB disconnect, device number 6 [ 41.813077][ T362] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 41.830464][ T474] FAULT_INJECTION: forcing a failure. [ 41.830464][ T474] name failslab, interval 1, probability 0, space 0, times 0 [ 41.843969][ T31] usb 3-1: USB disconnect, device number 7 [ 41.851029][ T474] CPU: 1 UID: 0 PID: 474 Comm: syz.2.41 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 41.851067][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.851082][ T474] Call Trace: [ 41.851096][ T474] [ 41.851103][ T474] __dump_stack+0x21/0x30 [ 41.851135][ T474] dump_stack_lvl+0x140/0x1c0 [ 41.851160][ T474] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.851186][ T474] dump_stack+0x19/0x20 [ 41.851209][ T474] should_fail_ex+0x3c2/0x510 [ 41.851230][ T474] should_failslab+0xac/0x100 [ 41.851252][ T474] kmem_cache_alloc_node_noprof+0x45/0x420 [ 41.851270][ T474] ? __alloc_skb+0x10c/0x360 [ 41.851291][ T474] __alloc_skb+0x10c/0x360 [ 41.851307][ T474] ? mutex_lock+0x97/0x1d0 [ 41.851327][ T474] alloc_uevent_skb+0x85/0x240 [ 41.851344][ T474] kobject_uevent_net_broadcast+0x356/0x5e0 [ 41.851363][ T474] kobject_uevent_env+0x551/0x7e0 [ 41.851380][ T474] kobject_uevent+0x21/0x40 [ 41.851395][ T474] __kobject_del+0xd3/0x2c0 [ 41.851428][ T474] kobject_put+0x1ff/0x2a0 [ 41.851452][ T474] bus_remove_driver+0x27c/0x2b0 [ 41.851476][ T474] driver_unregister+0x79/0xb0 [ 41.851494][ T474] usb_gadget_unregister_driver+0x52/0x80 [ 41.851539][ T474] raw_release+0xdb/0x280 [ 41.851574][ T474] ? __cfi_raw_release+0x10/0x10 [ 41.851613][ T474] __fput+0x20b/0xa30 [ 41.851639][ T474] ____fput+0x20/0x30 [ 41.851660][ T474] task_work_run+0x1e5/0x260 [ 41.851683][ T474] ? __cfi_task_work_run+0x10/0x10 [ 41.851705][ T474] ? __secure_computing+0xee/0x2b0 [ 41.851727][ T474] resume_user_mode_work+0x35/0x50 [ 41.851742][ T474] syscall_exit_to_user_mode+0x63/0xb0 [ 41.851763][ T474] do_syscall_64+0x63/0xf0 [ 41.851787][ T474] ? clear_bhb_loop+0x50/0xa0 [ 41.851807][ T474] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.851825][ T474] RIP: 0033:0x7fcc8d39e159 [ 41.851839][ T474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.851852][ T474] RSP: 002b:00007fcc8e2ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 41.851870][ T474] RAX: 0000000000000000 RBX: 00007fcc8d625fa0 RCX: 00007fcc8d39e159 [ 41.851882][ T474] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 41.851893][ T474] RBP: 00007fcc8d435024 R08: 0000000000000000 R09: 0000000000000000 [ 41.851903][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.851913][ T474] R13: 00007fcc8d626038 R14: 00007fcc8d625fa0 R15: 00007ffda5830678 [ 41.851929][ T474] [ 41.852441][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 41.899433][ T64] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.905787][ T31] pl2303 3-1:1.0: device disconnected [ 42.039451][ T64] usb 1-1: device descriptor read/64, error -71 [ 42.136690][ T438] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.145378][ T362] wwan wwan0: port wwan0mbim0 disconnected [ 42.279311][ T438] usb 4-1: device descriptor read/64, error -71 [ 42.354294][ T496] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 42.366137][ T496] overlayfs: missing 'lowerdir' [ 42.374264][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.380884][ T64] usb 1-1: device descriptor read/64, error -71 [ 42.387811][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.440900][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 42.440920][ T36] audit: type=1400 audit(1788383765.340:166): avc: denied { watch } for pid=497 comm="syz.2.52" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 42.489568][ T64] usb usb1-port1: attempt power cycle [ 42.519259][ T438] usb 4-1: device descriptor read/64, error -71 [ 42.677155][ T36] audit: type=1400 audit(1788383765.570:167): avc: denied { cmd } for pid=504 comm="syz.2.55" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 42.769383][ T438] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.829246][ T64] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.860822][ T64] usb 1-1: device descriptor read/8, error -71 [ 42.899230][ T36] audit: type=1400 audit(1788383765.790:168): avc: denied { write } for pid=511 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.899474][ T514] netlink: 'syz.2.58': attribute type 32 has an invalid length. [ 42.919635][ T36] audit: type=1400 audit(1788383765.800:169): avc: denied { nlmsg_write } for pid=511 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.947442][ T438] usb 4-1: device descriptor read/64, error -71 [ 42.990259][ T64] usb 1-1: device descriptor read/8, error -71 [ 43.199375][ T438] usb 4-1: device descriptor read/64, error -71 [ 43.229901][ T64] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.250653][ T64] usb 1-1: device descriptor read/8, error -71 [ 43.309406][ T438] usb usb4-port1: attempt power cycle [ 43.380373][ T64] usb 1-1: device descriptor read/8, error -71 [ 43.489379][ T64] usb usb1-port1: unable to enumerate USB device [ 43.649358][ T438] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.670471][ T438] usb 4-1: device descriptor read/8, error -71 [ 43.800601][ T438] usb 4-1: device descriptor read/8, error -71 [ 43.825847][ T36] audit: type=1400 audit(1788383766.720:170): avc: denied { ioctl } for pid=521 comm="syz.0.62" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.929272][ T64] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.049331][ T438] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.070733][ T438] usb 4-1: device descriptor read/8, error -71 [ 44.090959][ T64] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 44.100947][ T64] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 44.111796][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 44.122961][ T64] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 44.132148][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.141762][ T518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.149029][ T518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.157133][ T64] pl2303 3-1:1.0: pl2303 converter detected [ 44.165349][ T64] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 44.200611][ T438] usb 4-1: device descriptor read/8, error -71 [ 44.219349][ T439] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.309434][ T438] usb usb4-port1: unable to enumerate USB device [ 44.369373][ T439] usb 1-1: Using ep0 maxpacket: 16 [ 44.376020][ T439] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.387117][ T439] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.397100][ T439] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 44.410231][ T439] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.416908][ T439] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 44.418137][ T518] FAULT_INJECTION: forcing a failure. [ 44.418137][ T518] name failslab, interval 1, probability 0, space 0, times 0 [ 44.431574][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.443855][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 44.446637][ T439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.453079][ T31] usb 3-1: USB disconnect, device number 8 [ 44.469355][ T518] CPU: 0 UID: 0 PID: 518 Comm: syz.2.60 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 44.469395][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.469410][ T518] Call Trace: [ 44.469417][ T518] [ 44.469426][ T518] __dump_stack+0x21/0x30 [ 44.469468][ T518] dump_stack_lvl+0x140/0x1c0 [ 44.469503][ T518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.469538][ T518] dump_stack+0x19/0x20 [ 44.469568][ T518] should_fail_ex+0x3c2/0x510 [ 44.469596][ T518] ? kobject_get_path+0xc3/0x2d0 [ 44.469631][ T518] should_failslab+0xac/0x100 [ 44.469662][ T518] __kmalloc_noprof+0x69/0x510 [ 44.469688][ T518] ? kasan_save_alloc_info+0x3a/0x50 [ 44.469710][ T518] ? kobject_get_path+0xc3/0x2d0 [ 44.469743][ T518] ? __kasan_kmalloc+0x96/0xb0 [ 44.469781][ T518] kobject_get_path+0xc3/0x2d0 [ 44.469818][ T518] kobject_uevent_env+0x2bc/0x7e0 [ 44.469844][ T518] kobject_uevent+0x21/0x40 [ 44.469868][ T518] __kobject_del+0xd3/0x2c0 [ 44.469903][ T518] kobject_put+0x1ff/0x2a0 [ 44.469936][ T518] bus_remove_driver+0x27c/0x2b0 [ 44.469967][ T518] driver_unregister+0x79/0xb0 [ 44.469991][ T518] usb_gadget_unregister_driver+0x52/0x80 [ 44.470018][ T518] raw_release+0xdb/0x280 [ 44.470053][ T518] ? __cfi_raw_release+0x10/0x10 [ 44.470085][ T518] __fput+0x20b/0xa30 [ 44.470118][ T518] ____fput+0x20/0x30 [ 44.470149][ T518] task_work_run+0x1e5/0x260 [ 44.470181][ T518] ? __cfi_task_work_run+0x10/0x10 [ 44.470212][ T518] ? __secure_computing+0xee/0x2b0 [ 44.470249][ T518] resume_user_mode_work+0x35/0x50 [ 44.470273][ T518] syscall_exit_to_user_mode+0x63/0xb0 [ 44.470305][ T518] do_syscall_64+0x63/0xf0 [ 44.470341][ T518] ? clear_bhb_loop+0x50/0xa0 [ 44.470369][ T518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.470399][ T518] RIP: 0033:0x7fcc8d39e159 [ 44.470420][ T518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.470440][ T518] RSP: 002b:00007fcc8e2ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 44.470467][ T518] RAX: 0000000000000000 RBX: 00007fcc8d625fa0 RCX: 00007fcc8d39e159 [ 44.470483][ T518] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 44.470498][ T518] RBP: 00007fcc8d435024 R08: 0000000000000000 R09: 0000000000000000 [ 44.470513][ T518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.470527][ T518] R13: 00007fcc8d626038 R14: 00007fcc8d625fa0 R15: 00007ffda5830678 [ 44.470547][ T518] [ 44.470631][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 44.477240][ T439] usb 1-1: config 0 descriptor?? [ 44.489023][ T31] pl2303 3-1:1.0: device disconnected [ 44.711821][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.758378][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.769021][ T439] hid (null): unknown global tag 0xe [ 44.774429][ T439] hid (null): global environment stack underflow [ 44.781423][ T439] hid (null): invalid report_count 1106939437 [ 44.787643][ T439] hid (null): unknown global tag 0xd [ 44.813272][ T535] capability: warning: `syz.1.67' uses deprecated v2 capabilities in a way that may be insecure [ 44.933886][ T547] FAULT_INJECTION: forcing a failure. [ 44.933886][ T547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.947642][ T547] CPU: 1 UID: 0 PID: 547 Comm: syz.1.70 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 44.947669][ T547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.947680][ T547] Call Trace: [ 44.947685][ T547] [ 44.947692][ T547] __dump_stack+0x21/0x30 [ 44.947722][ T547] dump_stack_lvl+0x140/0x1c0 [ 44.947744][ T547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.947767][ T547] ? __sys_recvmsg_sock+0x60/0x60 [ 44.947791][ T547] dump_stack+0x19/0x20 [ 44.947812][ T547] should_fail_ex+0x3c2/0x510 [ 44.947832][ T547] should_fail+0xf/0x20 [ 44.947849][ T547] should_fail_usercopy+0x1e/0x30 [ 44.947868][ T547] _copy_from_user+0x20/0xa0 [ 44.947892][ T547] ___sys_recvmsg+0x174/0x590 [ 44.947913][ T547] ? kstrtoull+0x13b/0x1e0 [ 44.947930][ T547] ? __sys_recvmsg+0x260/0x260 [ 44.947951][ T547] ? kstrtouint_from_user+0x117/0x170 [ 44.947969][ T547] ? __x64_sys_openat+0x13a/0x170 [ 44.947996][ T547] ? __kasan_check_read+0x15/0x20 [ 44.948013][ T547] do_recvmmsg+0x328/0x790 [ 44.948036][ T547] ? __sys_recvmmsg+0x2a0/0x2a0 [ 44.948058][ T547] ? __cfi_vfs_write+0x10/0x10 [ 44.948074][ T547] ? __kasan_slab_free+0x6a/0x80 [ 44.948095][ T547] ? putname+0x113/0x150 [ 44.948126][ T547] __x64_sys_recvmmsg+0x199/0x250 [ 44.948148][ T547] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 44.948170][ T547] ? __kasan_check_read+0x15/0x20 [ 44.948186][ T547] x64_sys_call+0x292c/0x2ee0 [ 44.948201][ T547] do_syscall_64+0x57/0xf0 [ 44.948225][ T547] ? clear_bhb_loop+0x50/0xa0 [ 44.948244][ T547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.948261][ T547] RIP: 0033:0x7f4c3459e159 [ 44.948275][ T547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.948288][ T547] RSP: 002b:00007f4c354ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 44.948305][ T547] RAX: ffffffffffffffda RBX: 00007f4c34825fa0 RCX: 00007f4c3459e159 [ 44.948316][ T547] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 44.948327][ T547] RBP: 00007f4c354ba090 R08: 0000000000000000 R09: 0000000000000000 [ 44.948336][ T547] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 44.948346][ T547] R13: 00007f4c34826038 R14: 00007f4c34825fa0 R15: 00007fff478b9298 [ 44.948360][ T547] [ 45.200063][ T46] usb 1-1: USB disconnect, device number 9 [ 45.244755][ T36] audit: type=1400 audit(1788383768.140:171): avc: denied { create } for pid=552 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.264330][ T36] audit: type=1400 audit(1788383768.160:172): avc: denied { connect } for pid=552 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.303646][ T36] audit: type=1400 audit(1788383768.200:173): avc: denied { name_bind } for pid=552 comm="syz.1.72" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.341252][ T36] audit: type=1400 audit(1788383768.200:174): avc: denied { node_bind } for pid=552 comm="syz.1.72" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 45.374356][ T557] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 45.409792][ T557] overlayfs: missing 'lowerdir' [ 45.417224][ T347] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.423769][ T362] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.560290][ T362] usb 4-1: device descriptor read/64, error -71 [ 45.759288][ T438] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.799269][ T362] usb 4-1: device descriptor read/64, error -71 [ 45.899324][ T438] usb 3-1: device descriptor read/64, error -71 [ 46.009288][ T439] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.039305][ T362] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.139380][ T438] usb 3-1: device descriptor read/64, error -71 [ 46.160623][ T439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.171669][ T439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.179341][ T362] usb 4-1: device descriptor read/64, error -71 [ 46.182199][ T439] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 46.197599][ T439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.206643][ T439] usb 1-1: config 0 descriptor?? [ 46.379301][ T438] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.414012][ T36] audit: type=1326 audit(1788383769.310:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=565 comm="syz.0.78" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe61d19e159 code=0x0 [ 46.439787][ T362] usb 4-1: device descriptor read/64, error -71 [ 46.509314][ T438] usb 3-1: device descriptor read/64, error -71 [ 46.549340][ T362] usb usb4-port1: attempt power cycle [ 46.666728][ T439] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 46.674410][ T439] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 46.681925][ T439] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 46.689552][ T439] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 46.696972][ T439] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 46.705404][ T439] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 46.759263][ T438] usb 3-1: device descriptor read/64, error -71 [ 46.869411][ T438] usb usb3-port1: attempt power cycle [ 46.899267][ T362] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.920463][ T362] usb 4-1: device descriptor read/8, error -71 [ 47.050602][ T362] usb 4-1: device descriptor read/8, error -71 [ 47.209324][ T438] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.231573][ T438] usb 3-1: device descriptor read/8, error -71 [ 47.289262][ T362] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.310410][ T362] usb 4-1: device descriptor read/8, error -71 [ 47.360360][ T438] usb 3-1: device descriptor read/8, error -71 [ 47.440391][ T362] usb 4-1: device descriptor read/8, error -71 [ 47.469249][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 47.475323][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.550327][ T362] usb usb4-port1: unable to enumerate USB device [ 47.559629][ T572] FAULT_INJECTION: forcing a failure. [ 47.559629][ T572] name failslab, interval 1, probability 0, space 0, times 0 [ 47.572415][ T572] CPU: 1 UID: 0 PID: 572 Comm: syz.1.80 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 47.572457][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.572468][ T572] Call Trace: [ 47.572473][ T572] [ 47.572495][ T572] __dump_stack+0x21/0x30 [ 47.572533][ T572] dump_stack_lvl+0x140/0x1c0 [ 47.572563][ T572] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.572596][ T572] dump_stack+0x19/0x20 [ 47.572617][ T572] should_fail_ex+0x3c2/0x510 [ 47.572651][ T572] should_failslab+0xac/0x100 [ 47.572681][ T572] kmem_cache_alloc_node_noprof+0x45/0x420 [ 47.572706][ T572] ? __alloc_skb+0x10c/0x360 [ 47.572733][ T572] ? __kasan_check_write+0x18/0x20 [ 47.572749][ T572] ? mutex_lock+0x97/0x1d0 [ 47.572767][ T572] __alloc_skb+0x10c/0x360 [ 47.572797][ T572] netlink_dump+0x3b7/0x10d0 [ 47.572834][ T572] ? __check_object_size+0xe6/0x870 [ 47.572857][ T572] ? refcount_inc+0x90/0x90 [ 47.572901][ T572] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 47.572937][ T572] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 47.572967][ T572] ? consume_skb+0x7e/0x1a0 [ 47.572992][ T572] netlink_recvmsg+0x693/0xe60 [ 47.573023][ T572] ? __cfi_netlink_recvmsg+0x10/0x10 [ 47.573073][ T572] ? __cfi_selinux_file_open+0x10/0x10 [ 47.573100][ T572] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 47.573126][ T572] ? security_socket_recvmsg+0x44/0x130 [ 47.573156][ T572] ? __cfi_netlink_recvmsg+0x10/0x10 [ 47.573188][ T572] sock_recvmsg_nosec+0x122/0x160 [ 47.573205][ T572] ____sys_recvmsg+0x3e2/0x4a0 [ 47.573251][ T572] ? __sys_recvmsg_sock+0x60/0x60 [ 47.573283][ T572] ? import_iovec+0x80/0xb0 [ 47.573318][ T572] ___sys_recvmsg+0x214/0x590 [ 47.573339][ T572] ? kstrtoull+0x13b/0x1e0 [ 47.573356][ T572] ? __sys_recvmsg+0x260/0x260 [ 47.573400][ T572] ? kstrtouint_from_user+0x117/0x170 [ 47.573425][ T572] ? __x64_sys_openat+0x13a/0x170 [ 47.573463][ T572] ? __kasan_check_read+0x15/0x20 [ 47.573480][ T572] do_recvmmsg+0x328/0x790 [ 47.573502][ T572] ? __sys_recvmmsg+0x2a0/0x2a0 [ 47.573545][ T572] ? __cfi_vfs_write+0x10/0x10 [ 47.573567][ T572] ? __kasan_slab_free+0x6a/0x80 [ 47.573601][ T572] ? putname+0x113/0x150 [ 47.573620][ T572] __x64_sys_recvmmsg+0x199/0x250 [ 47.573642][ T572] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 47.573683][ T572] ? __kasan_check_read+0x15/0x20 [ 47.573706][ T572] x64_sys_call+0x292c/0x2ee0 [ 47.573726][ T572] do_syscall_64+0x57/0xf0 [ 47.573761][ T572] ? clear_bhb_loop+0x50/0xa0 [ 47.573779][ T572] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.573796][ T572] RIP: 0033:0x7f4c3459e159 [ 47.573828][ T572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.573846][ T572] RSP: 002b:00007f4c354ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 47.573871][ T572] RAX: ffffffffffffffda RBX: 00007f4c34825fa0 RCX: 00007f4c3459e159 [ 47.573887][ T572] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 47.573901][ T572] RBP: 00007f4c354ba090 R08: 0000000000000000 R09: 0000000000000000 [ 47.573915][ T572] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 47.573935][ T572] R13: 00007f4c34826038 R14: 00007f4c34825fa0 R15: 00007fff478b9298 [ 47.573949][ T572] [ 47.669451][ T438] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 47.731457][ T36] audit: type=1400 audit(1788383770.630:176): avc: denied { mount } for pid=573 comm="syz.1.81" name="/" dev="ramfs" ino=4973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.781929][ T438] usb 3-1: device descriptor read/8, error -71 [ 47.805309][ T36] audit: type=1400 audit(1788383770.700:177): avc: denied { setopt } for pid=573 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.811276][ T36] audit: type=1400 audit(1788383770.710:178): avc: denied { create } for pid=573 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.971325][ T438] usb 3-1: device descriptor read/8, error -71 [ 47.987372][ T36] audit: type=1400 audit(1788383770.800:179): avc: denied { write } for pid=573 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.116858][ T36] audit: type=1400 audit(1788383771.010:180): avc: denied { accept } for pid=580 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 48.119691][ T438] usb usb3-port1: unable to enumerate USB device [ 48.207893][ T36] audit: type=1400 audit(1788383771.100:181): avc: denied { create } for pid=586 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.236830][ T36] audit: type=1400 audit(1788383771.120:182): avc: denied { ioctl } for pid=586 comm="syz.1.86" path="socket:[5059]" dev="sockfs" ino=5059 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.261387][ T36] audit: type=1400 audit(1788383771.120:183): avc: denied { create } for pid=586 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.285347][ T36] audit: type=1400 audit(1788383771.120:184): avc: denied { lock } for pid=586 comm="syz.1.86" path="socket:[5062]" dev="sockfs" ino=5062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.311264][ T589] mmap: syz.1.87 (589): VmData 29077504 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 48.389321][ T591] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 48.401196][ T591] overlayfs: missing 'lowerdir' [ 48.656002][ T36] audit: type=1400 audit(1788383771.550:185): avc: denied { rename } for pid=601 comm="syz.2.93" name="file1" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.749270][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.783506][ T439] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 32: -71 [ 48.799374][ T439] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense firmware info: -71 [ 48.808760][ T439] playstation 0003:054C:0DF2.0002: Failed to get firmware info from DualSense [ 48.818044][ T439] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 48.832181][ T439] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 48.899260][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.929343][ T362] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 49.091509][ T362] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 49.108446][ T362] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.122946][ T362] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 49.132658][ T362] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 49.140948][ T31] usb 2-1: device descriptor read/64, error -71 [ 49.147391][ T362] usb 3-1: Manufacturer: syz [ 49.160014][ T362] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 49.389325][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 49.519320][ T31] usb 2-1: device descriptor read/64, error -71 [ 49.679311][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 49.759258][ T31] usb 2-1: device descriptor read/64, error -71 [ 49.809269][ T9] usb 1-1: device descriptor read/64, error -71 [ 49.861000][ T362] usb 3-1: USB disconnect, device number 13 [ 49.869787][ T31] usb usb2-port1: attempt power cycle [ 50.026733][ T628] FAULT_INJECTION: forcing a failure. [ 50.026733][ T628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.040064][ T628] CPU: 1 UID: 0 PID: 628 Comm: syz.2.105 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 50.040100][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.040118][ T628] Call Trace: [ 50.040125][ T628] [ 50.040132][ T628] __dump_stack+0x21/0x30 [ 50.040164][ T628] dump_stack_lvl+0x140/0x1c0 [ 50.040186][ T628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.040209][ T628] ? __sys_recvmsg_sock+0x60/0x60 [ 50.040232][ T628] dump_stack+0x19/0x20 [ 50.040253][ T628] should_fail_ex+0x3c2/0x510 [ 50.040272][ T628] should_fail+0xf/0x20 [ 50.040288][ T628] should_fail_usercopy+0x1e/0x30 [ 50.040308][ T628] _copy_from_user+0x20/0xa0 [ 50.040330][ T628] ___sys_recvmsg+0x174/0x590 [ 50.040351][ T628] ? kstrtoull+0x13b/0x1e0 [ 50.040367][ T628] ? __sys_recvmsg+0x260/0x260 [ 50.040388][ T628] ? kstrtouint_from_user+0x117/0x170 [ 50.040405][ T628] ? __x64_sys_openat+0x13a/0x170 [ 50.040432][ T628] ? __kasan_check_read+0x15/0x20 [ 50.040449][ T628] do_recvmmsg+0x328/0x790 [ 50.040472][ T628] ? __sys_recvmmsg+0x2a0/0x2a0 [ 50.040493][ T628] ? __cfi_vfs_write+0x10/0x10 [ 50.040509][ T628] ? __kasan_slab_free+0x6a/0x80 [ 50.040530][ T628] ? putname+0x113/0x150 [ 50.040549][ T628] __x64_sys_recvmmsg+0x199/0x250 [ 50.040571][ T628] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 50.040593][ T628] ? __kasan_check_read+0x15/0x20 [ 50.040623][ T628] x64_sys_call+0x292c/0x2ee0 [ 50.040637][ T628] do_syscall_64+0x57/0xf0 [ 50.040660][ T628] ? clear_bhb_loop+0x50/0xa0 [ 50.040679][ T628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.040696][ T628] RIP: 0033:0x7fcc8d39e159 [ 50.040710][ T628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.040723][ T628] RSP: 002b:00007fcc8e2ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 50.040744][ T628] RAX: ffffffffffffffda RBX: 00007fcc8d625fa0 RCX: 00007fcc8d39e159 [ 50.040756][ T628] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 50.040766][ T628] RBP: 00007fcc8e2ca090 R08: 0000000000000000 R09: 0000000000000000 [ 50.040776][ T628] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 50.040785][ T628] R13: 00007fcc8d626038 R14: 00007fcc8d625fa0 R15: 00007ffda5830678 [ 50.040799][ T628] [ 50.049354][ T9] usb 1-1: device descriptor read/64, error -71 [ 50.209331][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.310374][ T31] usb 2-1: device descriptor read/8, error -71 [ 50.429276][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 50.429276][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.449442][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 50.450940][ T31] usb 2-1: device descriptor read/8, error -71 [ 50.589273][ T9] usb 1-1: device descriptor read/64, error -71 [ 50.699315][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 50.720325][ T31] usb 2-1: device descriptor read/8, error -71 [ 50.729294][ T362] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.829439][ T9] usb 1-1: device descriptor read/64, error -71 [ 50.850462][ T31] usb 2-1: device descriptor read/8, error -71 [ 50.879276][ T362] usb 4-1: Using ep0 maxpacket: 8 [ 50.886186][ T362] usb 4-1: config 3 has an invalid interface number: 193 but max is 0 [ 50.894433][ T362] usb 4-1: config 3 has no interface number 0 [ 50.900651][ T362] usb 4-1: config 3 interface 193 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 50.911631][ T362] usb 4-1: config 3 interface 193 has no altsetting 0 [ 50.920722][ T362] usb 4-1: string descriptor 0 read error: -22 [ 50.927058][ T362] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=7d.90 [ 50.936168][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.947606][ T362] usbhid 4-1:3.193: couldn't find an input interrupt endpoint [ 50.959358][ T31] usb usb2-port1: unable to enumerate USB device [ 51.069321][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 51.090373][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.220516][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.459295][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 51.480520][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.610771][ T9] usb 1-1: device descriptor read/8, error -71 [ 51.719537][ T439] usb 1-1: USB disconnect, device number 10 [ 51.849392][ T439] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.909263][ T438] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.979264][ T439] usb 1-1: device descriptor read/64, error -71 [ 52.060501][ T438] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 52.070461][ T438] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 52.080412][ T438] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.091549][ T438] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 52.100689][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.110149][ T641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.117377][ T641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.125429][ T438] pl2303 2-1:1.0: pl2303 converter detected [ 52.132964][ T438] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 52.239756][ T439] usb 1-1: device descriptor read/64, error -71 [ 52.426431][ T656] FAULT_INJECTION: forcing a failure. [ 52.426431][ T656] name failslab, interval 1, probability 0, space 0, times 0 [ 52.430464][ T641] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 52.442227][ T656] CPU: 0 UID: 0 PID: 656 Comm: syz.0.115 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 52.442328][ T656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.442367][ T656] Call Trace: [ 52.442388][ T656] [ 52.442412][ T656] __dump_stack+0x21/0x30 [ 52.442512][ T656] dump_stack_lvl+0x140/0x1c0 [ 52.442584][ T656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.442662][ T656] dump_stack+0x19/0x20 [ 52.442739][ T656] should_fail_ex+0x3c2/0x510 [ 52.442812][ T656] ? iovec_from_user+0x94/0x310 [ 52.442894][ T656] should_failslab+0xac/0x100 [ 52.442973][ T656] __kmalloc_noprof+0x69/0x510 [ 52.443042][ T656] ? iovec_from_user+0x94/0x310 [ 52.443133][ T656] ? ____sys_recvmsg+0x361/0x4a0 [ 52.443212][ T656] iovec_from_user+0x94/0x310 [ 52.443299][ T656] __import_iovec+0x154/0x7d0 [ 52.443394][ T656] import_iovec+0x80/0xb0 [ 52.443503][ T656] ___sys_recvmsg+0x4bb/0x590 [ 52.443580][ T656] ? kstrtoull+0x13b/0x1e0 [ 52.443645][ T656] ? __sys_recvmsg+0x260/0x260 [ 52.443724][ T656] ? kstrtouint_from_user+0x117/0x170 [ 52.443789][ T656] ? __x64_sys_openat+0x13a/0x170 [ 52.443880][ T656] ? __kasan_check_read+0x15/0x20 [ 52.443937][ T656] do_recvmmsg+0x328/0x790 [ 52.444015][ T656] ? __sys_recvmmsg+0x2a0/0x2a0 [ 52.444109][ T656] ? __cfi_vfs_write+0x10/0x10 [ 52.444165][ T656] ? __kasan_slab_free+0x6a/0x80 [ 52.444236][ T656] ? putname+0x113/0x150 [ 52.444312][ T656] __x64_sys_recvmmsg+0x199/0x250 [ 52.444392][ T656] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 52.444478][ T656] ? __kasan_check_read+0x15/0x20 [ 52.444536][ T656] x64_sys_call+0x292c/0x2ee0 [ 52.444585][ T656] do_syscall_64+0x57/0xf0 [ 52.444664][ T656] ? clear_bhb_loop+0x50/0xa0 [ 52.444740][ T656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.444817][ T656] RIP: 0033:0x7fe61d19e159 [ 52.444885][ T656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.444938][ T656] RSP: 002b:00007fe61df85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 52.445006][ T656] RAX: ffffffffffffffda RBX: 00007fe61d425fa0 RCX: 00007fe61d19e159 [ 52.445053][ T656] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 52.445096][ T656] RBP: 00007fe61df85090 R08: 0000000000000000 R09: 0000000000000000 [ 52.445132][ T656] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 52.445173][ T656] R13: 00007fe61d426038 R14: 00007fe61d425fa0 R15: 00007ffe15f1afb8 [ 52.445219][ T656] [ 52.526317][ T658] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 52.548019][ T31] usb 2-1: USB disconnect, device number 11 [ 52.553388][ T658] overlayfs: missing 'lowerdir' [ 52.562590][ T641] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 52.731839][ T641] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 52.738903][ T641] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 52.747230][ T641] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 52.754700][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 52.765168][ T31] pl2303 2-1:1.0: device disconnected [ 53.499599][ T31] usb 4-1: USB disconnect, device number 12 [ 53.539254][ T439] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 53.690476][ T439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.700698][ T439] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 53.709730][ T439] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 53.718873][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.839340][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.940532][ T439] usb 2-1: USB disconnect, device number 12 [ 53.990512][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.000741][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 54.009785][ T31] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 54.018898][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.234051][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 54.234070][ T36] audit: type=1400 audit(1788383777.130:192): avc: denied { ioctl } for pid=665 comm="syz.3.119" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6536 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.310323][ T362] usb 4-1: USB disconnect, device number 13 [ 54.462401][ T36] audit: type=1400 audit(1788383777.360:193): avc: denied { bind } for pid=667 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.481824][ T36] audit: type=1400 audit(1788383777.380:194): avc: denied { setopt } for pid=667 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.501208][ T36] audit: type=1400 audit(1788383777.380:195): avc: denied { getopt } for pid=667 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.669647][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.719906][ T439] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 54.740369][ T36] audit: type=1400 audit(1788383777.640:196): avc: denied { ioctl } for pid=673 comm="syz.0.123" path="socket:[6548]" dev="sockfs" ino=6548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.740518][ T674] batadv_slave_1: entered promiscuous mode [ 54.870035][ T439] usb 2-1: not running at top speed; connect to a high speed hub [ 54.878646][ T439] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.889756][ T439] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 1.00 [ 54.898994][ T439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.019267][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 55.089287][ T359] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.169270][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 55.177264][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 55.186399][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.194569][ T31] usb 1-1: Product: syz [ 55.198774][ T31] usb 1-1: Manufacturer: syz [ 55.203434][ T31] usb 1-1: SerialNumber: syz [ 55.240422][ T359] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 55.250377][ T359] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 55.260198][ T359] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.271172][ T359] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 55.280295][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.289710][ T678] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 55.296932][ T678] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 55.305088][ T359] pl2303 4-1:1.0: pl2303 converter detected [ 55.313375][ T359] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 55.410617][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.419548][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.429027][ T36] audit: type=1400 audit(1788383778.320:197): avc: denied { create } for pid=673 comm="syz.0.123" name="#15" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.445029][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.451549][ T36] audit: type=1400 audit(1788383778.330:198): avc: denied { link } for pid=673 comm="syz.0.123" name="#15" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.478586][ T673] batadv_slave_1: left promiscuous mode [ 55.506861][ T31] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -71 [ 55.511838][ T668] netlink: 92 bytes leftover after parsing attributes in process `syz.1.120'. [ 55.524564][ T31] usb 1-1: USB disconnect, device number 13 [ 55.532328][ T36] audit: type=1400 audit(1788383778.430:199): avc: denied { read write } for pid=667 comm="syz.1.120" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.558192][ T36] audit: type=1400 audit(1788383778.430:200): avc: denied { open } for pid=667 comm="syz.1.120" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.583325][ T439] usbhid 2-1:1.0: can't add hid device: -71 [ 55.592042][ T439] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 55.593280][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.615227][ T439] usb 2-1: USB disconnect, device number 13 [ 55.622173][ T678] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 55.630574][ T36] audit: type=1400 audit(1788383778.450:201): avc: denied { ioctl } for pid=667 comm="syz.1.120" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.655546][ T678] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 55.664080][ T678] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 55.672484][ T678] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 55.680743][ T678] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 55.738263][ T31] usb 4-1: USB disconnect, device number 14 [ 55.738267][ C0] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19 [ 55.949312][ T678] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19 [ 55.956571][ T678] pl2303 ttyUSB0: error sending break = -19 [ 55.964271][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 55.972367][ T31] pl2303 4-1:1.0: device disconnected [ 56.044469][ T681] FAULT_INJECTION: forcing a failure. [ 56.044469][ T681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.057813][ T681] CPU: 1 UID: 0 PID: 681 Comm: syz.0.126 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 56.057851][ T681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.057872][ T681] Call Trace: [ 56.057878][ T681] [ 56.057884][ T681] __dump_stack+0x21/0x30 [ 56.057912][ T681] dump_stack_lvl+0x140/0x1c0 [ 56.057934][ T681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.057958][ T681] dump_stack+0x19/0x20 [ 56.057979][ T681] should_fail_ex+0x3c2/0x510 [ 56.057999][ T681] should_fail+0xf/0x20 [ 56.058016][ T681] should_fail_usercopy+0x1e/0x30 [ 56.058036][ T681] _copy_to_iter+0x3b6/0x1520 [ 56.058058][ T681] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 56.058084][ T681] ? __cfi__copy_to_iter+0x10/0x10 [ 56.058105][ T681] ? __check_object_size+0x54c/0x870 [ 56.058122][ T681] ? __cfi___check_object_size+0x10/0x10 [ 56.058139][ T681] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.058169][ T681] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 56.058191][ T681] __skb_datagram_iter+0x103/0x940 [ 56.058211][ T681] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 56.058231][ T681] skb_copy_datagram_iter+0x44/0x160 [ 56.058251][ T681] netlink_recvmsg+0x2d4/0xe60 [ 56.058274][ T681] ? __cfi_netlink_recvmsg+0x10/0x10 [ 56.058298][ T681] ? kasan_save_alloc_info+0x3a/0x50 [ 56.058314][ T681] ? __cfi_netlink_recvmsg+0x10/0x10 [ 56.058335][ T681] sock_recvmsg_nosec+0x122/0x160 [ 56.058351][ T681] ____sys_recvmsg+0x3e2/0x4a0 [ 56.058374][ T681] ? __sys_recvmsg_sock+0x60/0x60 [ 56.058398][ T681] ? import_iovec+0x80/0xb0 [ 56.058421][ T681] ___sys_recvmsg+0x214/0x590 [ 56.058442][ T681] ? kstrtoull+0x13b/0x1e0 [ 56.058459][ T681] ? __sys_recvmsg+0x260/0x260 [ 56.058480][ T681] ? kstrtouint_from_user+0x117/0x170 [ 56.058498][ T681] ? __x64_sys_openat+0x13a/0x170 [ 56.058525][ T681] ? __kasan_check_read+0x15/0x20 [ 56.058541][ T681] do_recvmmsg+0x328/0x790 [ 56.058564][ T681] ? __sys_recvmmsg+0x2a0/0x2a0 [ 56.058585][ T681] ? __cfi_vfs_write+0x10/0x10 [ 56.058601][ T681] ? __kasan_slab_free+0x6a/0x80 [ 56.058622][ T681] ? putname+0x113/0x150 [ 56.058641][ T681] __x64_sys_recvmmsg+0x199/0x250 [ 56.058666][ T681] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 56.058688][ T681] ? __kasan_check_read+0x15/0x20 [ 56.058704][ T681] x64_sys_call+0x292c/0x2ee0 [ 56.058719][ T681] do_syscall_64+0x57/0xf0 [ 56.058742][ T681] ? clear_bhb_loop+0x50/0xa0 [ 56.058760][ T681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.058778][ T681] RIP: 0033:0x7fe61d19e159 [ 56.058792][ T681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.058806][ T681] RSP: 002b:00007fe61df85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 56.058824][ T681] RAX: ffffffffffffffda RBX: 00007fe61d425fa0 RCX: 00007fe61d19e159 [ 56.058836][ T681] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 56.058847][ T681] RBP: 00007fe61df85090 R08: 0000000000000000 R09: 0000000000000000 [ 56.058858][ T681] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000001 [ 56.058868][ T681] R13: 00007fe61d426038 R14: 00007fe61d425fa0 R15: 00007ffe15f1afb8 [ 56.058882][ T681] [ 56.639301][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 56.649283][ T523] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 56.794483][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.806115][ T46] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 56.809348][ T523] usb 2-1: Using ep0 maxpacket: 8 [ 56.815925][ T46] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 56.825516][ T523] usb 2-1: New USB device found, idVendor=0e41, idProduct=4252, bcdDevice= 0.40 [ 56.830683][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.847623][ T523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.855769][ T523] usb 2-1: Product: syz [ 56.860538][ T523] usb 2-1: Manufacturer: syz [ 56.865331][ T523] usb 2-1: SerialNumber: syz [ 56.865889][ T689] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 56.886842][ T689] overlayfs: missing 'lowerdir' [ 56.902002][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.908500][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.066874][ T46] usb 1-1: USB disconnect, device number 14 [ 57.083101][ T523] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 57.090196][ T523] usb 2-1: unit 2 not found! [ 57.099541][ T523] usb 2-1: USB disconnect, device number 14 [ 57.111794][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.859286][ T523] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.869259][ T439] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 58.009267][ T523] usb 2-1: Using ep0 maxpacket: 16 [ 58.015645][ T523] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 58.024667][ T523] usb 2-1: config 0 has no interface number 0 [ 58.030943][ T523] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 58.041093][ T523] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 58.052890][ T439] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.063158][ T439] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 58.072225][ T523] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 58.081335][ T439] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 58.090415][ T523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.098429][ T523] usb 2-1: Product: syz [ 58.102656][ T439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.110720][ T523] usb 2-1: Manufacturer: syz [ 58.115331][ T523] usb 2-1: SerialNumber: syz [ 58.124801][ T523] usb 2-1: config 0 descriptor?? [ 58.130182][ T694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.137389][ T694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.345378][ T694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.352694][ T694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.362396][ T9] usb 1-1: USB disconnect, device number 15 [ 58.574516][ T523] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 58.585438][ T523] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 58.595219][ T523] asix 2-1:0.251: probe with driver asix failed with error -5 [ 58.603751][ T523] usb 2-1: USB disconnect, device number 15 [ 58.909258][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.104511][ T712] FAULT_INJECTION: forcing a failure. [ 59.104511][ T712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.117992][ T712] CPU: 1 UID: 0 PID: 712 Comm: syz.1.139 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 59.118017][ T712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.118041][ T712] Call Trace: [ 59.118046][ T712] [ 59.118052][ T712] __dump_stack+0x21/0x30 [ 59.118081][ T712] dump_stack_lvl+0x140/0x1c0 [ 59.118103][ T712] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.118126][ T712] ? inet6_fill_ifla6_attrs+0x11ab/0x2300 [ 59.118152][ T712] dump_stack+0x19/0x20 [ 59.118172][ T712] should_fail_ex+0x3c2/0x510 [ 59.118192][ T712] should_fail_alloc_page+0xec/0x110 [ 59.118213][ T712] __alloc_pages_noprof+0x1c0/0x7e0 [ 59.118237][ T712] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 59.118260][ T712] ? rtnl_fill_link_af+0x413/0x490 [ 59.118277][ T712] ? rtnl_fill_ifinfo+0x127b/0x1d10 [ 59.118300][ T712] ? if_nlmsg_size+0x840/0x840 [ 59.118328][ T712] __folio_alloc_noprof+0x14/0x80 [ 59.118351][ T712] folio_prealloc+0x46/0x220 [ 59.118372][ T712] do_pte_missing+0x16af/0x4440 [ 59.118393][ T712] ? xas_start+0x317/0x3e0 [ 59.118409][ T712] ? xas_load+0x3a6/0x3d0 [ 59.118424][ T712] ? pte_marker_clear+0x1b0/0x1b0 [ 59.118444][ T712] ? xas_find+0x158/0x820 [ 59.118460][ T712] ? xa_find+0x11b/0x170 [ 59.118477][ T712] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 59.118493][ T712] handle_mm_fault+0x1189/0x1ba0 [ 59.118515][ T712] ? __cfi_handle_mm_fault+0x10/0x10 [ 59.118534][ T712] ? find_vma+0xd3/0x120 [ 59.118552][ T712] ? lock_mm_and_find_vma+0xb8/0x390 [ 59.118571][ T712] do_user_addr_fault+0x4ee/0x1230 [ 59.118598][ T712] exc_page_fault+0x58/0xc0 [ 59.118617][ T712] asm_exc_page_fault+0x2b/0x30 [ 59.118634][ T712] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 59.118656][ T712] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 3f 6d 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 59.118669][ T712] RSP: 0018:ffffc9000e7874b8 EFLAGS: 00050206 [ 59.118684][ T712] RAX: ffffffff82ad0501 RBX: ffff8881358b2000 RCX: 000000000000061c [ 59.118696][ T712] RDX: 0000000000000000 RSI: ffff8881358b2680 RDI: 0000200000001000 [ 59.118707][ T712] RBP: ffffc9000e787610 R08: ffff8881358b2c9b R09: 1ffff11026b16593 [ 59.118720][ T712] R10: dffffc0000000000 R11: ffffed1026b16594 R12: 0000200000000980 [ 59.118731][ T712] R13: 0000000000000000 R14: 0000000000000c9c R15: ffffc9000e787d48 [ 59.118744][ T712] ? _copy_to_iter+0x371/0x1520 [ 59.118766][ T712] ? _copy_to_iter+0x43f/0x1520 [ 59.118787][ T712] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 59.118828][ T712] ? __cfi__copy_to_iter+0x10/0x10 [ 59.118849][ T712] ? __check_object_size+0x54c/0x870 [ 59.118865][ T712] ? __cfi___check_object_size+0x10/0x10 [ 59.118882][ T712] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 59.118906][ T712] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 59.118927][ T712] __skb_datagram_iter+0x103/0x940 [ 59.118946][ T712] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 59.118967][ T712] skb_copy_datagram_iter+0x44/0x160 [ 59.118987][ T712] netlink_recvmsg+0x2d4/0xe60 [ 59.119010][ T712] ? __cfi_netlink_recvmsg+0x10/0x10 [ 59.119034][ T712] ? kasan_save_alloc_info+0x3a/0x50 [ 59.119049][ T712] ? __cfi_netlink_recvmsg+0x10/0x10 [ 59.119070][ T712] sock_recvmsg_nosec+0x122/0x160 [ 59.119087][ T712] ____sys_recvmsg+0x3e2/0x4a0 [ 59.119110][ T712] ? __sys_recvmsg_sock+0x60/0x60 [ 59.119133][ T712] ? import_iovec+0x80/0xb0 [ 59.119157][ T712] ___sys_recvmsg+0x214/0x590 [ 59.119209][ T712] ? kstrtoull+0x13b/0x1e0 [ 59.119238][ T712] ? __sys_recvmsg+0x260/0x260 [ 59.119260][ T712] ? kstrtouint_from_user+0x117/0x170 [ 59.119277][ T712] ? __x64_sys_openat+0x13a/0x170 [ 59.119304][ T712] ? __kasan_check_read+0x15/0x20 [ 59.119326][ T712] do_recvmmsg+0x328/0x790 [ 59.119349][ T712] ? __sys_recvmmsg+0x2a0/0x2a0 [ 59.119370][ T712] ? __cfi_vfs_write+0x10/0x10 [ 59.119386][ T712] ? __kasan_slab_free+0x6a/0x80 [ 59.119407][ T712] ? putname+0x113/0x150 [ 59.119426][ T712] __x64_sys_recvmmsg+0x199/0x250 [ 59.119449][ T712] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 59.119472][ T712] ? __kasan_check_read+0x15/0x20 [ 59.119488][ T712] x64_sys_call+0x292c/0x2ee0 [ 59.119503][ T712] do_syscall_64+0x57/0xf0 [ 59.119525][ T712] ? clear_bhb_loop+0x50/0xa0 [ 59.119544][ T712] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.119561][ T712] RIP: 0033:0x7f4c3459e159 [ 59.119574][ T712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.119587][ T712] RSP: 002b:00007f4c354ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 59.119603][ T712] RAX: ffffffffffffffda RBX: 00007f4c34825fa0 RCX: 00007f4c3459e159 [ 59.119614][ T712] RDX: 0000000000000003 RSI: 0000200000002180 RDI: 0000000000000004 [ 59.119625][ T712] RBP: 00007f4c354ba090 R08: 0000000000000000 R09: 0000000000000000 [ 59.119634][ T712] R10: 0000000040010002 R11: 0000000000000246 R12: 0000000000000002 [ 59.119644][ T712] R13: 00007f4c34826038 R14: 00007f4c34825fa0 R15: 00007fff478b9298 [ 59.119658][ T712] [ 59.642510][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 59.642529][ T36] audit: type=1400 audit(1788383782.540:213): avc: denied { setattr } for pid=713 comm="syz.1.140" name="fib_trie" dev="proc" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.671614][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 59.679455][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 59.840577][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.850748][ T46] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 59.859763][ T46] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 59.868845][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.878108][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 59.888123][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 59.898521][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.909523][ T31] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 59.918698][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.927778][ T708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.935157][ T708] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.943191][ T31] pl2303 4-1:1.0: pl2303 converter detected [ 59.950824][ T31] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 59.969278][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 60.121985][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 60.131177][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.139345][ T9] usb 2-1: Product: syz [ 60.143570][ T9] usb 2-1: Manufacturer: syz [ 60.148367][ T9] usb 2-1: SerialNumber: syz [ 60.172614][ T9] usb 1-1: USB disconnect, device number 16 [ 60.199392][ T710] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 60.207806][ T710] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 60.216886][ T710] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 60.225493][ T710] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 60.233911][ T710] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 60.241817][ T708] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 60.251559][ T31] usb 4-1: USB disconnect, device number 15 [ 60.251766][ C0] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19 [ 60.265217][ T723] FAULT_INJECTION: forcing a failure. [ 60.265217][ T723] name failslab, interval 1, probability 0, space 0, times 0 [ 60.280620][ T723] CPU: 1 UID: 0 PID: 723 Comm: syz.3.137 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 60.280648][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.280662][ T723] Call Trace: [ 60.280667][ T723] [ 60.280673][ T723] __dump_stack+0x21/0x30 [ 60.280703][ T723] dump_stack_lvl+0x140/0x1c0 [ 60.280727][ T723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.280753][ T723] dump_stack+0x19/0x20 [ 60.280784][ T723] should_fail_ex+0x3c2/0x510 [ 60.280806][ T723] should_failslab+0xac/0x100 [ 60.280827][ T723] kmem_cache_alloc_node_noprof+0x45/0x420 [ 60.280847][ T723] ? __alloc_skb+0x10c/0x360 [ 60.280866][ T723] __alloc_skb+0x10c/0x360 [ 60.280882][ T723] ? mutex_lock+0x97/0x1d0 [ 60.280902][ T723] alloc_uevent_skb+0x85/0x240 [ 60.280919][ T723] kobject_uevent_net_broadcast+0x356/0x5e0 [ 60.280937][ T723] kobject_uevent_env+0x551/0x7e0 [ 60.280954][ T723] kobject_uevent+0x21/0x40 [ 60.280970][ T723] __kobject_del+0xd3/0x2c0 [ 60.280995][ T723] kobject_put+0x1ff/0x2a0 [ 60.281019][ T723] bus_remove_driver+0x27c/0x2b0 [ 60.281041][ T723] driver_unregister+0x79/0xb0 [ 60.281057][ T723] usb_gadget_unregister_driver+0x52/0x80 [ 60.281076][ T723] raw_release+0xdb/0x280 [ 60.281101][ T723] ? __cfi_raw_release+0x10/0x10 [ 60.281125][ T723] __fput+0x20b/0xa30 [ 60.281149][ T723] ____fput+0x20/0x30 [ 60.281171][ T723] task_work_run+0x1e5/0x260 [ 60.281194][ T723] ? __cfi_task_work_run+0x10/0x10 [ 60.281215][ T723] ? __secure_computing+0xee/0x2b0 [ 60.281237][ T723] resume_user_mode_work+0x35/0x50 [ 60.281252][ T723] syscall_exit_to_user_mode+0x63/0xb0 [ 60.281276][ T723] do_syscall_64+0x63/0xf0 [ 60.281300][ T723] ? clear_bhb_loop+0x50/0xa0 [ 60.281319][ T723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.281337][ T723] RIP: 0033:0x7f0a0b99e159 [ 60.281351][ T723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.281366][ T723] RSP: 002b:00007f0a0c838028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 60.281384][ T723] RAX: 0000000000000000 RBX: 00007f0a0bc26090 RCX: 00007f0a0b99e159 [ 60.281396][ T723] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 60.281407][ T723] RBP: 00007f0a0ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.281418][ T723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.281428][ T723] R13: 00007f0a0bc26128 R14: 00007f0a0bc26090 R15: 00007ffc5957e388 [ 60.281443][ T723] [ 60.509536][ T708] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19 [ 60.551394][ T708] pl2303 ttyUSB0: error sending break = -19 [ 60.558617][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 60.566741][ T31] pl2303 4-1:1.0: device disconnected [ 61.108077][ T731] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 61.119844][ T731] overlayfs: missing 'lowerdir' [ 61.127125][ T344] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.134922][ T344] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.189318][ T523] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 61.340280][ T523] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.350537][ T523] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 61.359997][ T523] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 61.369241][ T523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.610571][ T523] usb 1-1: USB disconnect, device number 17 [ 62.160354][ T736] netlink: 'syz.0.148': attribute type 21 has an invalid length. [ 62.168673][ T36] audit: type=1400 audit(1788383785.060:214): avc: denied { bind } for pid=735 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.188339][ T36] audit: type=1400 audit(1788383785.060:215): avc: denied { getopt } for pid=735 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.729887][ T46] usb 2-1: USB disconnect, device number 16 [ 63.019283][ T523] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 63.109316][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 63.149253][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 63.149253][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.183528][ T523] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.196017][ T523] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 63.205964][ T523] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 63.218856][ T523] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 63.230456][ T523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.239964][ T745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.248008][ T523] pl2303 1-1:1.0: required endpoints missing [ 63.260687][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 63.272226][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 63.282892][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.294068][ T46] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 63.303330][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.312504][ T747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.319767][ T747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.327696][ T46] pl2303 2-1:1.0: pl2303 converter detected [ 63.335198][ T46] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 63.511424][ T9] usb 1-1: USB disconnect, device number 18 [ 63.529259][ T523] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 63.549414][ T745] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 63.557713][ T745] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 63.565485][ T745] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 63.572791][ T745] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 63.581001][ T745] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 63.650387][ T46] usb 2-1: USB disconnect, device number 17 [ 63.650558][ C0] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19 [ 63.665850][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 63.690548][ T523] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.700923][ T523] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 63.711293][ T523] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 63.724455][ T523] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 63.733586][ T523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.745553][ T754] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 63.753746][ T523] pl2303 4-1:1.0: required endpoints missing [ 63.849306][ T745] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19 [ 63.856583][ T745] pl2303 ttyUSB0: error sending break = -19 [ 63.864844][ T46] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 63.872952][ T46] pl2303 2-1:1.0: device disconnected [ 64.000719][ T67] usb 4-1: USB disconnect, device number 16 [ 64.427763][ T36] audit: type=1400 audit(1788383787.320:216): avc: denied { mounton } for pid=761 comm="syz.0.159" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 64.515555][ T768] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.531139][ T768] overlayfs: missing 'lowerdir' [ 64.544849][ T770] overlayfs: failed to resolve './file0': -2 [ 64.552682][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.829280][ T523] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 64.869280][ T438] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 64.980565][ T523] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.991223][ T523] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.004401][ T523] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 65.013592][ T523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.026436][ T523] pl2303 4-1:1.0: required endpoints missing [ 65.040384][ T438] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 65.050296][ T438] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 65.060127][ T438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.071528][ T438] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 65.080686][ T438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.089830][ T778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 65.097051][ T778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 65.105053][ T438] pl2303 1-1:1.0: pl2303 converter detected [ 65.112425][ T438] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 65.290313][ T31] usb 4-1: USB disconnect, device number 17 [ 65.329471][ T774] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 65.337912][ T774] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 65.345194][ T774] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 65.352482][ T774] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 65.360783][ T774] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 65.411374][ T438] usb 1-1: USB disconnect, device number 19 [ 65.411432][ C1] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19 [ 65.427927][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 65.630241][ T774] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19 [ 65.637452][ T774] pl2303 ttyUSB0: error sending break = -19 [ 65.644236][ T438] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 65.656022][ T438] pl2303 1-1:1.0: device disconnected [ 65.723799][ T36] audit: type=1400 audit(1788383788.620:217): avc: denied { mounton } for pid=782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.774830][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.782067][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.789158][ T782] bridge_slave_0: entered allmulticast mode [ 65.796098][ T782] bridge_slave_0: entered promiscuous mode [ 65.803065][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.810182][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.817307][ T782] bridge_slave_1: entered allmulticast mode [ 65.823749][ T782] bridge_slave_1: entered promiscuous mode [ 65.870568][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.877633][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.884974][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.892043][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.913898][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.921550][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.931641][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.938712][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.948618][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.955739][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.984269][ T782] veth0_vlan: entered promiscuous mode [ 65.995537][ T782] veth1_macvtap: entered promiscuous mode [ 66.030757][ T36] audit: type=1400 audit(1788383788.930:218): avc: denied { append } for pid=786 comm="syz.4.167" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.058430][ T36] audit: type=1400 audit(1788383788.950:219): avc: denied { ioctl } for pid=786 comm="syz.4.167" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.181576][ T36] audit: type=1400 audit(1788383789.080:220): avc: denied { setopt } for pid=791 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.459305][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.489281][ T523] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 66.589250][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.620384][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 66.634439][ T46] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.644647][ T523] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.649316][ T46] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 66.656233][ T523] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 66.673963][ T523] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 66.678663][ T802] overlayfs: failed to resolve './file0': -2 [ 66.687297][ T523] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 66.694435][ T46] usb 5-1: Manufacturer: syz [ 66.702556][ T523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.715596][ T46] usb 5-1: config 0 descriptor?? [ 66.727235][ T798] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.736068][ T523] pl2303 1-1:1.0: required endpoints missing [ 66.990700][ T31] usb 1-1: USB disconnect, device number 20 [ 67.019243][ T523] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 67.039247][ T438] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 67.169287][ T523] usb 2-1: Using ep0 maxpacket: 32 [ 67.175840][ T523] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 67.187179][ T523] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 67.196326][ T438] usb 4-1: Using ep0 maxpacket: 8 [ 67.201417][ T523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.209521][ T523] usb 2-1: Product: syz [ 67.213771][ T523] usb 2-1: Manufacturer: syz [ 67.218533][ T523] usb 2-1: SerialNumber: syz [ 67.223916][ T438] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 67.232517][ T438] usb 4-1: config 0 has no interface number 0 [ 67.238817][ T805] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 67.241650][ T438] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 67.255728][ T438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.263841][ T438] usb 4-1: Product: syz [ 67.268039][ T438] usb 4-1: Manufacturer: syz [ 67.272717][ T438] usb 4-1: SerialNumber: syz [ 67.278255][ T438] usb 4-1: config 0 descriptor?? [ 67.463932][ T523] usb 2-1: USB disconnect, device number 18 [ 67.480611][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.498568][ T810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.514122][ T810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.530311][ T810] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 67.540008][ T810] overlayfs: missing 'lowerdir' [ 67.547556][ T46] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input6 [ 67.562176][ T36] audit: type=1400 audit(1788383790.460:221): avc: denied { getopt } for pid=809 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.569713][ T46] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input7 [ 67.597269][ T46] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input8 [ 67.609217][ T36] audit: type=1400 audit(1788383790.460:222): avc: denied { read } for pid=97 comm="acpid" name="event3" dev="devtmpfs" ino=586 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.632708][ T46] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input9 [ 67.646130][ T46] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 67.686865][ T36] audit: type=1400 audit(1788383790.460:223): avc: denied { open } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=586 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.739244][ T36] audit: type=1400 audit(1788383790.520:224): avc: denied { ioctl } for pid=97 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=586 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.770195][ T523] usb 5-1: USB disconnect, device number 2 [ 67.799256][ T67] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 67.836496][ T360] udevd[360]: setting owner of /dev/input/event6 to uid=0, gid=104 failed: No such file or directory [ 67.970355][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.992102][ T67] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.005472][ T67] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 68.014962][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.028025][ T67] pl2303 1-1:1.0: required endpoints missing [ 68.109292][ T818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.117886][ T818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.180845][ T820] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 68.192898][ T820] overlayfs: missing 'lowerdir' [ 68.213710][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.230532][ T438] usb 4-1: USB disconnect, device number 18 [ 68.260484][ T46] usb 1-1: USB disconnect, device number 21 [ 68.316582][ T823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.326884][ T823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 68.679256][ T438] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.721855][ T829] FAULT_INJECTION: forcing a failure. [ 68.721855][ T829] name failslab, interval 1, probability 0, space 0, times 0 [ 68.734618][ T829] CPU: 0 UID: 0 PID: 829 Comm: syz.3.184 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 68.734650][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.734661][ T829] Call Trace: [ 68.734667][ T829] [ 68.734674][ T829] __dump_stack+0x21/0x30 [ 68.734703][ T829] dump_stack_lvl+0x140/0x1c0 [ 68.734727][ T829] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.734752][ T829] dump_stack+0x19/0x20 [ 68.734775][ T829] should_fail_ex+0x3c2/0x510 [ 68.734795][ T829] should_failslab+0xac/0x100 [ 68.734816][ T829] __kmalloc_cache_noprof+0x41/0x470 [ 68.734856][ T829] ? alloc_fs_context+0x6f/0x800 [ 68.734896][ T829] alloc_fs_context+0x6f/0x800 [ 68.734919][ T829] ? __se_sys_fsopen+0x9c/0x390 [ 68.734950][ T829] fs_context_for_mount+0x26/0x40 [ 68.734977][ T829] __se_sys_fsopen+0xab/0x390 [ 68.735003][ T829] __x64_sys_fsopen+0x5f/0x80 [ 68.735028][ T829] x64_sys_call+0x2d40/0x2ee0 [ 68.735043][ T829] do_syscall_64+0x57/0xf0 [ 68.735072][ T829] ? clear_bhb_loop+0x50/0xa0 [ 68.735092][ T829] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.735111][ T829] RIP: 0033:0x7f0a0b99e159 [ 68.735125][ T829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.735141][ T829] RSP: 002b:00007f0a0c859028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 68.735159][ T829] RAX: ffffffffffffffda RBX: 00007f0a0bc25fa0 RCX: 00007f0a0b99e159 [ 68.735173][ T829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 68.735184][ T829] RBP: 00007f0a0ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 68.735194][ T829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.735204][ T829] R13: 00007f0a0bc26038 R14: 00007f0a0bc25fa0 R15: 00007ffc5957e388 [ 68.735219][ T829] [ 68.935321][ T831] overlayfs: failed to resolve './file0': -2 [ 68.962948][ T36] audit: type=1400 audit(1788383791.850:225): avc: denied { create } for pid=832 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.982624][ T36] audit: type=1400 audit(1788383791.850:226): avc: denied { getopt } for pid=832 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.001871][ T438] usb 5-1: Using ep0 maxpacket: 16 [ 69.008118][ T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.019089][ T438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.028986][ T438] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.041856][ T438] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.050956][ T438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.060349][ T438] usb 5-1: config 0 descriptor?? [ 69.239246][ T67] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 69.289243][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 69.390419][ T67] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.400393][ T67] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 69.410367][ T67] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.421374][ T67] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 69.430540][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.439797][ T836] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 69.447012][ T836] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 69.455412][ T67] pl2303 4-1:1.0: pl2303 converter detected [ 69.461467][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.472435][ T438] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 69.472819][ T67] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 69.486473][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.493087][ T438] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 69.496481][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.514102][ T438] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 69.522541][ T46] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 69.532711][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.535515][ T438] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 69.544126][ T838] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 69.556285][ T46] pl2303 1-1:1.0: required endpoints missing [ 69.562538][ T438] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 69.571146][ T438] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 69.579537][ T438] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 69.591096][ T438] microsoft 0003:045E:07DA.0004: no inputs found [ 69.597462][ T438] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 69.671504][ T840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.682594][ T840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.693691][ T46] usb 4-1: USB disconnect, device number 19 [ 69.702626][ T46] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 69.711261][ T46] pl2303 4-1:1.0: device disconnected [ 69.781800][ T67] usb 1-1: USB disconnect, device number 22 [ 70.235116][ T848] fuse: Unknown parameter '0xffffffffffffffff' [ 70.241838][ T846] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.269649][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 70.275724][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.557287][ T866] overlayfs: failed to resolve './file0': -2 [ 70.629259][ T46] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 70.669335][ T67] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 70.800349][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.819276][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 70.820957][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 70.821016][ T36] audit: type=1400 audit(1788383793.710:234): avc: denied { read } for pid=869 comm="syz.1.198" path="socket:[7779]" dev="sockfs" ino=7779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.829388][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 70.835615][ T36] audit: type=1400 audit(1788383793.710:235): avc: denied { shutdown } for pid=869 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.879351][ T46] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 70.909581][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.917889][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.931231][ T859] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.938432][ T859] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.939334][ T67] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.970071][ T46] pl2303 4-1:1.0: pl2303 converter detected [ 70.976803][ T67] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 70.986197][ T46] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 70.993105][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.010725][ T67] pl2303 1-1:1.0: required endpoints missing [ 71.190159][ T438] usb 4-1: USB disconnect, device number 20 [ 71.199753][ T438] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 71.208409][ T438] pl2303 4-1:1.0: device disconnected [ 71.228961][ T67] usb 1-1: USB disconnect, device number 23 [ 71.455864][ T67] usb 5-1: USB disconnect, device number 3 [ 71.473515][ T874] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 71.493515][ T874] overlayfs: missing 'lowerdir' [ 71.502892][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.949571][ T67] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 72.019250][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 72.078002][ T889] overlayfs: failed to resolve './file0': -2 [ 72.100611][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.111135][ T67] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 72.121851][ T67] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 72.131749][ T67] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.144941][ T67] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 72.154978][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.164570][ T881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.174429][ T36] audit: type=1400 audit(1788383795.070:236): avc: denied { create } for pid=893 comm="syz.1.207" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.179387][ T881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.196685][ T36] audit: type=1400 audit(1788383795.080:237): avc: denied { write } for pid=893 comm="syz.1.207" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.213889][ T46] usb 1-1: config index 0 descriptor too short (expected 45, got 32) [ 72.233119][ T36] audit: type=1400 audit(1788383795.080:238): avc: denied { open } for pid=893 comm="syz.1.207" path="/55/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.244745][ T67] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 72.262814][ T46] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 72.275104][ T894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.278951][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 72.287581][ T894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.301835][ T46] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 72.314738][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.322836][ T46] usb 1-1: Product: syz [ 72.327020][ T46] usb 1-1: Manufacturer: syz [ 72.331677][ T46] usb 1-1: SerialNumber: syz [ 72.338398][ T46] rtl8150 1-1:1.0: couldn't find required endpoints [ 72.345130][ T46] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 72.469297][ T438] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 72.501200][ T9] usb 4-1: USB disconnect, device number 21 [ 72.540523][ T523] usb 1-1: USB disconnect, device number 24 [ 72.619369][ T438] usb 2-1: Using ep0 maxpacket: 32 [ 72.626425][ T438] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.634915][ T438] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.645099][ T438] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.655094][ T438] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.670081][ T438] usb 2-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 72.679155][ T438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.687249][ T438] usb 2-1: Product: syz [ 72.691467][ T438] usb 2-1: Manufacturer: syz [ 72.696102][ T438] usb 2-1: SerialNumber: syz [ 72.905913][ T438] usb 2-1: 0:2 : does not exist [ 72.910978][ T438] usb 2-1: unit 4 not found! [ 72.917893][ T438] usb 2-1: USB disconnect, device number 19 [ 72.930205][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.299270][ T523] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 73.412729][ T36] audit: type=1400 audit(1788383796.310:239): avc: denied { unlink } for pid=298 comm="syz-executor" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.448331][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 73.460394][ T523] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 73.470315][ T523] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 73.480365][ T523] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 73.491467][ T523] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 73.500773][ T523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.513766][ T904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.521252][ T904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.530905][ T523] pl2303 1-1:1.0: pl2303 converter detected [ 73.546768][ T523] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 73.553531][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.559671][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 73.612885][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.623090][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.636421][ T46] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 73.646031][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.659534][ T46] pl2303 4-1:1.0: required endpoints missing [ 73.780571][ T46] usb 1-1: USB disconnect, device number 25 [ 73.787455][ T46] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 73.796225][ T46] pl2303 1-1:1.0: device disconnected [ 73.829259][ T523] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.877946][ T31] usb 4-1: USB disconnect, device number 22 [ 73.919336][ T67] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 73.980480][ T523] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.994343][ T523] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.45 [ 74.003680][ T523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.011977][ T523] usb 5-1: SerialNumber: syz [ 74.069237][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 74.075946][ T67] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.084415][ T67] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 74.092669][ T67] usb 2-1: config 0 has no interface number 0 [ 74.098800][ T67] usb 2-1: config 0 interface 185 has no altsetting 0 [ 74.107161][ T67] usb 2-1: New USB device found, idVendor=0403, idProduct=ea90, bcdDevice=27.a1 [ 74.116277][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.124324][ T67] usb 2-1: Product: syz [ 74.128689][ T67] usb 2-1: Manufacturer: syz [ 74.133357][ T67] usb 2-1: SerialNumber: syz [ 74.138840][ T67] usb 2-1: config 0 descriptor?? [ 74.345609][ T914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.362883][ T67] ftdi_sio 2-1:0.185: FTDI USB Serial Device converter detected [ 74.371152][ T67] ftdi_sio ttyUSB0: unknown device type: 0x27a1 [ 74.378630][ T67] usb 2-1: USB disconnect, device number 20 [ 74.385564][ T67] ftdi_sio 2-1:0.185: device disconnected [ 74.421518][ T36] audit: type=1400 audit(1788383797.320:240): avc: denied { read write } for pid=909 comm="syz.4.212" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.445998][ T36] audit: type=1400 audit(1788383797.320:241): avc: denied { open } for pid=909 comm="syz.4.212" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.470951][ T523] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 74.480202][ T523] usb 5-1: USB disconnect, device number 4 [ 74.569296][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 74.649248][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 74.719243][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 74.725824][ T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 74.735008][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.743801][ T31] usb 1-1: config 0 descriptor?? [ 74.750143][ T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 74.800403][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.810653][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 74.820558][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 74.830393][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.843490][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 74.852699][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.862002][ T918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.869343][ T918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.877399][ T9] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 74.900937][ T920] Zero length message leads to an empty skb [ 74.951049][ T31] usb 1-1: Detected FT232A [ 74.956406][ T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 74.967199][ T31] usb 1-1: USB disconnect, device number 26 [ 74.978305][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 74.994134][ T31] ftdi_sio 1-1:0.0: device disconnected [ 75.006851][ T36] audit: type=1400 audit(1788383797.900:242): avc: denied { mount } for pid=927 comm="syz.4.219" name="/" dev="configfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 75.029884][ T36] audit: type=1400 audit(1788383797.930:243): avc: denied { search } for pid=927 comm="syz.4.219" name="/" dev="configfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.086012][ T928] BUG: scheduling while atomic: syz.4.219/928/0x00000002 [ 75.093162][ T928] Modules linked in: [ 75.097108][ T928] CPU: 0 UID: 0 PID: 928 Comm: syz.4.219 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 75.097168][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.097189][ T928] Call Trace: [ 75.097199][ T928] [ 75.097212][ T928] __dump_stack+0x21/0x30 [ 75.097261][ T928] dump_stack_lvl+0x140/0x1c0 [ 75.097302][ T928] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.097345][ T928] ? is_bpf_text_address+0x17b/0x1a0 [ 75.097392][ T928] dump_stack+0x19/0x20 [ 75.097446][ T928] __schedule_bug+0x12b/0x200 [ 75.097480][ T928] ? find_proxy_task+0x2460/0x2460 [ 75.097514][ T928] __schedule+0xb85/0x20b0 [ 75.097544][ T928] ? is_bpf_text_address+0x17b/0x1a0 [ 75.097588][ T928] ? kernel_text_address+0xa9/0xe0 [ 75.097630][ T928] ? __kernel_text_address+0x11/0x40 [ 75.097670][ T928] ? __sched_text_start+0x10/0x10 [ 75.097697][ T928] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 75.097739][ T928] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 75.097785][ T928] ? __kasan_check_write+0x18/0x20 [ 75.097814][ T928] ? _raw_spin_lock+0x92/0x120 [ 75.097856][ T928] ? __cfi__raw_spin_lock+0x10/0x10 [ 75.097897][ T928] ? stack_depot_save_flags+0x399/0x800 [ 75.097932][ T928] schedule+0xc5/0x240 [ 75.097959][ T928] schedule_preempt_disabled+0x14/0x30 [ 75.097998][ T928] __mutex_lock+0x902/0x1b90 [ 75.098036][ T928] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 75.098075][ T928] ? pointer+0xe10/0xe10 [ 75.098117][ T928] ? vsnprintf+0x19ef/0x1ad0 [ 75.098162][ T928] __mutex_lock_slowpath+0xe/0x20 [ 75.098195][ T928] mutex_lock+0x113/0x1d0 [ 75.098225][ T928] ? __cfi_mutex_lock+0x10/0x10 [ 75.098258][ T928] ? kobject_uevent_env+0x4fd/0x7e0 [ 75.098287][ T928] ? class_dir_child_ns_type+0x1d/0x70 [ 75.098332][ T928] ? __cfi_class_dir_child_ns_type+0x10/0x10 [ 75.098367][ T928] kobject_uevent_net_broadcast+0x2c6/0x5e0 [ 75.098400][ T928] kobject_uevent_env+0x551/0x7e0 [ 75.098431][ T928] kobject_uevent+0x21/0x40 [ 75.098458][ T928] device_del+0xb7f/0xcf0 [ 75.098503][ T928] ? __cfi_device_del+0x10/0x10 [ 75.098546][ T928] ? __kasan_check_write+0x18/0x20 [ 75.098576][ T928] ? kobject_put+0x1cc/0x2a0 [ 75.098616][ T928] device_destroy+0xb0/0x100 [ 75.098644][ T928] ? __cfi_device_destroy+0x10/0x10 [ 75.098669][ T928] ? __kasan_check_write+0x18/0x20 [ 75.098702][ T928] android_device_destroy+0x118/0x180 [ 75.098745][ T928] gadgets_drop+0x1d/0x30 [ 75.098772][ T928] ? __cfi_gadgets_drop+0x10/0x10 [ 75.098802][ T928] configfs_rmdir+0x8b7/0x9b0 [ 75.098844][ T928] vfs_rmdir+0x3db/0x560 [ 75.098887][ T928] do_rmdir+0x29a/0x590 [ 75.098928][ T928] ? __cfi_do_rmdir+0x10/0x10 [ 75.098978][ T928] ? __kasan_check_write+0x18/0x20 [ 75.099011][ T928] __x64_sys_rmdir+0x4b/0x60 [ 75.099052][ T928] x64_sys_call+0xaf7/0x2ee0 [ 75.099079][ T928] do_syscall_64+0x57/0xf0 [ 75.099122][ T928] ? clear_bhb_loop+0x50/0xa0 [ 75.099157][ T928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.099190][ T928] RIP: 0033:0x7f25ca39e159 [ 75.099211][ T928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.099234][ T928] RSP: 002b:00007f25c8df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 75.099261][ T928] RAX: ffffffffffffffda RBX: 00007f25ca625fa0 RCX: 00007f25ca39e159 [ 75.099283][ T928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 75.099302][ T928] RBP: 00007f25ca435024 R08: 0000000000000000 R09: 0000000000000000 [ 75.099322][ T928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.099341][ T928] R13: 00007f25ca626038 R14: 00007f25ca625fa0 R15: 00007ffdd4419328 [ 75.099368][ T928] [ 75.468074][ T928] ------------[ cut here ]------------ [ 75.475806][ T928] WARNING: CPU: 0 PID: 928 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 75.485477][ T928] Modules linked in: [ 75.489441][ T928] CPU: 0 UID: 0 PID: 928 Comm: syz.4.219 Tainted: G W syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 75.502379][ T928] Tainted: [W]=WARN [ 75.506256][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.516384][ T928] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 75.522644][ T928] Code: 48 83 3d f4 e5 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c 47 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 75.542326][ T928] RSP: 0018:ffffc900117df980 EFLAGS: 00010206 [ 75.548438][ T928] RAX: 000000007fffffff RBX: ffff8881f5f810e0 RCX: 0000000000d810e0 [ 75.556494][ T928] RDX: ffff8881f5f810e0 RSI: 0000000000000001 RDI: 00000000c37f0fa7 [ 75.564531][ T928] RBP: ffffc900117df9e0 R08: 000000006ed202d5 R09: 0000000072ac2200 [ 75.572579][ T928] R10: 000000000000000d R11: ffffffff8175a5c0 R12: 00000000234d810e [ 75.580642][ T928] R13: 0000000000000000 R14: ffffc900117df9f0 R15: 000000000000000d [ 75.588660][ T928] FS: 00007f25c8df76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 75.597679][ T928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.604321][ T928] CR2: 00007f25ca3eb840 CR3: 00000001110fe000 CR4: 00000000003526b0 [ 75.612399][ T928] Call Trace: [ 75.615720][ T928] [ 75.618683][ T928] ? do_syscall_64+0x57/0xf0 [ 75.623353][ T928] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.629497][ T928] kasan_save_track+0x4f/0x80 [ 75.634241][ T928] ? kasan_save_track+0x3e/0x80 [ 75.639154][ T928] ? kasan_save_free_info+0x44/0x50 [ 75.644457][ T928] ? __kasan_slab_free+0x5f/0x80 [ 75.649467][ T928] ? kfree+0x158/0x440 [ 75.653579][ T928] ? gadget_info_attr_release+0xcb/0x130 [ 75.659300][ T928] ? config_item_put+0x178/0x240 [ 75.664284][ T928] ? configfs_rmdir+0x8e8/0x9b0 [ 75.669227][ T928] ? vfs_rmdir+0x3db/0x560 [ 75.673699][ T928] ? do_rmdir+0x29a/0x590 [ 75.678116][ T928] ? __x64_sys_rmdir+0x4b/0x60 [ 75.682976][ T928] ? x64_sys_call+0xaf7/0x2ee0 [ 75.687791][ T928] ? do_syscall_64+0x57/0xf0 [ 75.692472][ T928] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.698596][ T928] kasan_save_free_info+0x44/0x50 [ 75.703713][ T928] __kasan_slab_free+0x5f/0x80 [ 75.708526][ T928] kfree+0x158/0x440 [ 75.712493][ T928] ? gadget_info_attr_release+0xcb/0x130 [ 75.718172][ T928] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 75.724327][ T928] gadget_info_attr_release+0xcb/0x130 [ 75.729866][ T928] config_item_put+0x178/0x240 [ 75.734768][ T928] ? __cfi_gadgets_drop+0x10/0x10 [ 75.739865][ T928] configfs_rmdir+0x8e8/0x9b0 [ 75.744601][ T928] vfs_rmdir+0x3db/0x560 [ 75.748906][ T928] do_rmdir+0x29a/0x590 [ 75.753140][ T928] ? __cfi_do_rmdir+0x10/0x10 [ 75.757867][ T928] ? __kasan_check_write+0x18/0x20 [ 75.763066][ T928] __x64_sys_rmdir+0x4b/0x60 [ 75.767706][ T928] x64_sys_call+0xaf7/0x2ee0 [ 75.772376][ T928] do_syscall_64+0x57/0xf0 [ 75.776852][ T928] ? clear_bhb_loop+0x50/0xa0 [ 75.781601][ T928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.787543][ T928] RIP: 0033:0x7f25ca39e159 [ 75.792027][ T928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.811684][ T928] RSP: 002b:00007f25c8df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 75.820148][ T928] RAX: ffffffffffffffda RBX: 00007f25ca625fa0 RCX: 00007f25ca39e159 [ 75.828238][ T928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 75.836273][ T928] RBP: 00007f25ca435024 R08: 0000000000000000 R09: 0000000000000000 [ 75.844292][ T928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.852309][ T928] R13: 00007f25ca626038 R14: 00007f25ca625fa0 R15: 00007ffdd4419328 [ 75.860352][ T928] [ 75.863386][ T928] ---[ end trace 0000000000000000 ]--- [ 75.869905][ T928] BUG: scheduling while atomic: syz.4.219/928/0x00000000 [ 75.882318][ T928] Modules linked in: [ 75.882654][ T523] usb 4-1: USB disconnect, device number 23 [ 75.886424][ T928] CPU: 1 UID: 0 PID: 928 Comm: syz.4.219 Tainted: G W syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 75.886523][ T928] Tainted: [W]=WARN [ 75.886544][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.886598][ T928] Call Trace: [ 75.886618][ T928] [ 75.886639][ T928] __dump_stack+0x21/0x30 [ 75.886739][ T928] dump_stack_lvl+0x140/0x1c0 [ 75.886820][ T928] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.886910][ T928] dump_stack+0x19/0x20 [ 75.886984][ T928] __schedule_bug+0x12b/0x200 [ 75.887045][ T928] ? find_proxy_task+0x2460/0x2460 [ 75.887124][ T928] __schedule+0xb85/0x20b0 [ 75.887187][ T928] ? plist_check_list+0x2a1/0x2c0 [ 75.887306][ T928] ? __sched_text_start+0x10/0x10 [ 75.887367][ T928] ? plist_add+0x4d4/0x570 [ 75.887461][ T928] ? __futex_queue+0x19f/0x350 [ 75.887531][ T928] ? __cfi___futex_queue+0x10/0x10 [ 75.887612][ T928] schedule+0xc5/0x240 [ 75.887673][ T928] futex_wait_queue+0xfc/0x240 [ 75.887740][ T928] __futex_wait+0x15b/0x3d0 [ 75.887822][ T928] ? __cfi___futex_wait+0x10/0x10 [ 75.887889][ T928] ? __cfi_futex_wake_mark+0x10/0x10 [ 75.887945][ T928] ? __kasan_check_read+0x15/0x20 [ 75.888015][ T928] ? futex_wake+0x627/0x950 [ 75.888090][ T928] futex_wait+0x128/0x7c0 [ 75.888159][ T928] ? __cfi_futex_wait+0x10/0x10 [ 75.888222][ T928] do_futex+0x32a/0x510 [ 75.888304][ T928] ? __cfi_do_futex+0x10/0x10 [ 75.888380][ T928] ? __kasan_slab_free+0x6a/0x80 [ 75.888454][ T928] ? kmem_cache_free+0x1bd/0x4f0 [ 75.888519][ T928] __se_sys_futex+0x13c/0x320 [ 75.888594][ T928] ? putname+0x113/0x150 [ 75.888664][ T928] ? __x64_sys_futex+0x110/0x110 [ 75.888748][ T928] __x64_sys_futex+0xe9/0x110 [ 75.888840][ T928] x64_sys_call+0x227f/0x2ee0 [ 75.888901][ T928] do_syscall_64+0x57/0xf0 [ 75.889009][ T928] ? clear_bhb_loop+0x50/0xa0 [ 75.889082][ T928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.889167][ T928] RIP: 0033:0x7f25ca39e159 [ 75.889227][ T928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.889285][ T928] RSP: 002b:00007f25c8df70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.889349][ T928] RAX: ffffffffffffffda RBX: 00007f25ca625fa8 RCX: 00007f25ca39e159 [ 75.889394][ T928] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25ca625fa8 [ 75.889437][ T928] RBP: 00007f25ca625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 75.889472][ T928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.889491][ T928] R13: 00007f25ca626038 R14: 00007ffdd4419240 R15: 00007ffdd4419328 [ 75.889549][ T928] [ 76.667893][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 76.667954][ T36] audit: type=1400 audit(1788383799.560:252): avc: denied { unmount } for pid=782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1