last executing test programs: 2m40.345382883s ago: executing program 0 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="66baa100ed48b80c2585af011f180d0f23d80f21f835c00000a00f23f8410f001b48b8dfdc0000000000000f23d80f21f835400000800f23f8450f01c866b855008ee0f3470fc7b4ea4400000048b8e4000000000000000f23c00f21f835030002000f23f80f235ff3400f7e9646000000", 0x71}], 0x1, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000080)={{0x9b, @multicast1, 0x4e23, 0x2, 'nq\x00', 0x8, 0x5, 0x30}, {@loopback, 0x4e26, 0x4, 0xffffffff, 0xffffffff, 0x85}}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x6621, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit$UBLK(0x0, r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000280)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x202, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r5, 0x0, 0x1ff) clock_gettime(0xa, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m40.291702894s ago: executing program 0 (id=425): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$9p(r2, &(0x7f0000000600)="dbde45c32cab6d5cb8cd151d72b9aca11a2b55b9bdb3fb01b0e8c6e1aa5e434cefcfe0d5c22de44c3c39607d50087b559c46146df9677f706f53d2f34c479f50d1fdc8d75750d6f0c147c4e330af4fb173b881fe5feb9357757f19421d26b91bb27f1a37c0c54378c586f9af5344dcb636996d988203ad5930bc229ee4c1ec2862bd349194c739d81c5a08b4c0c320", 0x8f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) symlink(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$pppl2tp(0x18, 0x1, 0x1) 2m40.290940094s ago: executing program 0 (id=426): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'rose0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x4, r2, 0x2}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x808}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='10', 0x2) setsockopt$inet_int(r3, 0x0, 0x22, 0x0, 0x0) (async) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r6, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0xe) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x198, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x400}, @NL80211_ATTR_IE={0x140, 0x2a, [@supported_rates, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x5, 0x0, {0x2, 0x4, 0x0, 0x4, 0x0, 0x1}, 0x6, 0x460, 0x4}}, @ibss={0x6, 0x2, 0xa000}, @ssid={0x0, 0x6, @default_ap_ssid}, @preq={0x82, 0x25, {{0x1, 0x1, 0x1}, 0x0, 0x7, 0x8, @device_a, 0x2, @void, 0x7, 0x0, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x8}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x5, @device_a, 0x6, @value=@broadcast, 0x8, 0x6, @device_b, 0x2c}}, @measure_req={0x26, 0xc2, {0x8, 0x5, 0x2, "2278fbbbf4a0cd508004a175efd12939c52ab9850d7701e725815cc21b705fc12ebc7367581daca43f3128cf753d684c105420a96afdcc637c928342aade00e5e3d060451e1c37fa47da549aed8647b2ebf4eadd9fdfb18e64d004c6a20ac6af417a379485aea28d027718c56bb07d2141029adc948d354ea57fc039af12a38fe8107398fd2d9d8fa24b8e30efe47c2333dc559d0233cefaad3681ac4e214e5ff3196b68bf2ccc15b1d32e3543070c6ad5d701e09f9318e95ddb0b60be06bf"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0xe8, @broadcast, 0x80000000, 0x9, 0x7}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}]}, 0x198}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20000000) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)) 2m40.279301955s ago: executing program 0 (id=427): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, &(0x7f0000000000), 0x0, 0x22, &(0x7f0000000040)={0xa, 0x4e24, 0x76, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x8880) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x4000, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x801) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x121d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e26}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x965}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x24004844) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd4, r6, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x93e2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_ublk_setup_io_uring(0x7a7a, &(0x7f00000008c0)={0x0, 0x52b, 0x400, 0x1, 0x153, 0x0, r1}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x19}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11c1fd82a03f9dba}, 0x4040) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r7) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004805}, 0x20000800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(r4, &(0x7f0000000cc0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x7, 0x8, {{0x9, 0x4, 0x3, 0x11, 0x24, 0x67, 0x0, 0x95, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@rr={0x7, 0xf, 0x26, [@private=0xa010102, @local, @empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000e00)={'veth0_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'pimreg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x7, 0x4, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x66, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0xf, 0x4b, [@rand_addr=0x64010101, @remote, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xfc, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r16 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001580)={0x0, &(0x7f00000010c0)=[@wrmsr={0x65, 0x20, {0x189, 0x33299f8b}}, @set_irq_handler={0xc8, 0x20, {0xb8, 0x1}}, @in_dx={0x69, 0x20, {0xc342, 0x2}}, @cpuid={0x64, 0x18, {0x3ff, 0x7}}, @uexit={0x0, 0x18, 0xa6a}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0xf7, {0x1, 0x6bccdde1, [@nested_load_code={0x12e, 0x67, {0x1, "43dcf1c4a199ec4700b974020000b85aed0000ba000000000f30b975080000b80f000000ba000000000f3066b839018ed8c441f85a708666420f38315989c4017d707eb1002667660f12790142dbe2"}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x66a, 0x8000000000000000, 0xfffffffffffffff7, 0x6}}, @wr_drn={0x68, 0x20, {0x4, 0xffff}}]}}, @nested_amd_vmload={0x182, 0x18}, @code={0xa, 0x4d, {"430f232cc402f9db7975f08356ef02400f01c566b89e008ed8b96a090000b827000000ba000000000f30640f32400f09c442a1f71b66b8fe000f00d0"}}, @wrmsr={0x65, 0x20, {0x0, 0xfffffffffffffffc}}, @rdmsr={0x66, 0x18, {0x38f}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_load_syzos={0x136, 0xe8, {0x3, 0x401, [@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_load_syzos={0x136, 0x20}, @in_dx={0x69, 0x20, {0xbbe8, 0x4}}, @wrmsr={0x65, 0x20, {0x2a4, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x67d, 0x6, 0x1, 0x8}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x18, 0x6, 0xe, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x5, 0xffffffffffffffff}}, @wr_crn={0x67, 0x20, {0x3, 0xde}}, @nested_vmresume={0x130, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xb35}}, @out_dx={0x6a, 0x28, {0x4e0e, 0x2, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xc5, 0x4, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x279, 0xbc}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x4bc}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r16, 0xf50f, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4094) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'TIPCv2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x5) 2m39.403917688s ago: executing program 0 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x5, 0x2}) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x5, 0x2}) r2 = eventfd2(0x2, 0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x1000002, 0xffffeffffffff7fb, 0xfffffffffffffff8, 0xfffc, 0x9, 0x4002004c1, 0xa, 0x5, 0x0, 0x1f, 0x5, 0x402, 0x4, 0x10, 0x7], 0x200000, 0x180403}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x40002, &(0x7f0000000180)) (async) ptrace$setregs(0xd, r4, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) write(r3, &(0x7f00000002c0)="6f6e6c696e650abeb8", 0x9) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x8, 0x2, 0x8, r2, 0xc}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x8, 0x2, 0x8, r2, 0xc}) 2m39.403550868s ago: executing program 0 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x3000007, 0x4000913, r0, 0x1fe0a000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001680)="a905000000017464000100000000000000e5c064", 0x14}, {&(0x7f0000000100)="ca65abd05ca5e7f705719952667e2a5019deb07a68a250e9", 0x18}], 0x2}}], 0x1, 0x24040000) eventfd(0x40048c67) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) 2m24.337933637s ago: executing program 32 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap(&(0x7f00000df000/0x3000)=nil, 0x3000, 0x3000007, 0x4000913, r0, 0x1fe0a000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001680)="a905000000017464000100000000000000e5c064", 0x14}, {&(0x7f0000000100)="ca65abd05ca5e7f705719952667e2a5019deb07a68a250e9", 0x18}], 0x2}}], 0x1, 0x24040000) eventfd(0x40048c67) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) 2m2.692759626s ago: executing program 1 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x451}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000080)={[0xb000, 0xdddd0000, 0x70000, 0x200000], 0x6, 0x58, 0x7}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\n\x00`'], 0x23) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m2.56779396s ago: executing program 1 (id=654): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r1, &(0x7f0000000140)=0x24f4000000000000, r2, 0x0, 0x403, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0xe7cf000) pipe(&(0x7f00000000c0)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000013f000/0x400000)=nil) fadvise64(r3, 0x2, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='algo=zstd dict=di', 0x11) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x70) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) stat(&(0x7f0000000300)='sys_mnt/block/zram0/algorithm_params\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='sys_mnt\x00', 0x0, r9) 2m2.521004411s ago: executing program 1 (id=655): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54200010880cc000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff060005000b0a00001400040002000000ac1414aa00000000000000008000098028000080060001000a00000014000200ff02000000000000000000000000000105000300"], 0x15c}}, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x8008770b, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b0001000000000904"], 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54200010880cc000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff060005000b0a00001400040002000000ac1414aa00000000000000008000098028000080060001000a00000014000200ff02000000000000000000000000000105000300"], 0x15c}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x8008770b, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x4) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b0001000000000904"], 0x0) (async) 2m1.304605291s ago: executing program 1 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0xb000, 0xdddd0000, 0x70000, 0x200000], 0x6, 0x58, 0x7}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='\n\x00`'], 0x23) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffe}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001200000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a028202eeffccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a9862b5d6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m1.206772114s ago: executing program 1 (id=666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x46, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x0, 0x8f6c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m1.047590648s ago: executing program 1 (id=667): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x104e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0xa0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x76}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0xde}, [@output_terminal={0xc, 0x24, 0x3, 0xfd, 0x302, 0xa8, 0x4, 0x6, 0x6, 0x22}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x1, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x4, 0x2, {0x8, 0x25, 0x1, 0x3, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect$midi(0x6, 0xe0, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0x0, 0x20, 0xb0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x4, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0xf6, 0x6, [{0x9}, {0x9, 0xf5}, {0x8}, {0xff, 0x3}, {0x3, 0x4}, {0x1, 0x4}], 0x37}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xb, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x3e, 0x3, [{0x38, 0x5}, {0xc, 0x81}, {0x7, 0x81}], 0x3}, @midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0x9e, 0xa, [{0xfb, 0xf}, {0x80, 0x7}, {0x8, 0x9}, {0x9, 0xfd}, {0x5, 0xc0}, {0xf, 0x8}, {0x4, 0x3}, {0x3, 0xc}, {0xd, 0x10}, {0x1, 0x8}], 0x81}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x5, 0x3, [{0x4, 0x8}, {0x0, 0x4}, {0x81, 0x1}], 0x9}], [{{0x9, 0x5, 0xa, 0x6, 0x3ff, 0x10, 0x1, 0x0, {0xc, 0x25, 0x1, 0x8, "958af68bd94bedda"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x6, 0x9, 0x2, {0xc, 0x25, 0x1, 0x8, "fd4730010a592512"}}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xef, 0xcd, 0x3, {0x13, 0x25, 0x1, 0xf, "d2aa6a0ad15691fadb10d249370633"}}}, {{0x9, 0x5, 0x2, 0xc, 0x220, 0x1, 0x4, 0x80, {0x12, 0x25, 0x1, 0xe, "e94ad4e9583dd16db09e3ed0791a"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x5, 0x4, 0x2, 0x40, 0x6}, 0x38, &(0x7f0000000200)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb, 0x6, 0x4, 0x7fff, 0xfa}, @ss_container_id={0x14, 0x10, 0x4, 0xb5, "0ea8346453a4f9cd5e59a585dca2c885"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ec061992b88b35559fabe6f2227df470"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x47, &(0x7f00000002c0)=@string={0x47, 0x3, "a381376ee98cf9bdd6be253dcaf7bf4ca83f38d4f9cbff82aea1b3fad13c24d1124632d2c05103653ed9b5edaac2f08760fdd53523b8107f9ce65da4badbf5084b7b99fece"}}]}) 2m1.015844619s ago: executing program 33 (id=667): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x104e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0xa0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x76}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0xde}, [@output_terminal={0xc, 0x24, 0x3, 0xfd, 0x302, 0xa8, 0x4, 0x6, 0x6, 0x22}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x1, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x4, 0x2, {0x8, 0x25, 0x1, 0x3, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect$midi(0x6, 0xe0, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0x0, 0x20, 0xb0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x4, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0xf6, 0x6, [{0x9}, {0x9, 0xf5}, {0x8}, {0xff, 0x3}, {0x3, 0x4}, {0x1, 0x4}], 0x37}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xb, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x3e, 0x3, [{0x38, 0x5}, {0xc, 0x81}, {0x7, 0x81}], 0x3}, @midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0x9e, 0xa, [{0xfb, 0xf}, {0x80, 0x7}, {0x8, 0x9}, {0x9, 0xfd}, {0x5, 0xc0}, {0xf, 0x8}, {0x4, 0x3}, {0x3, 0xc}, {0xd, 0x10}, {0x1, 0x8}], 0x81}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x5, 0x3, [{0x4, 0x8}, {0x0, 0x4}, {0x81, 0x1}], 0x9}], [{{0x9, 0x5, 0xa, 0x6, 0x3ff, 0x10, 0x1, 0x0, {0xc, 0x25, 0x1, 0x8, "958af68bd94bedda"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x6, 0x9, 0x2, {0xc, 0x25, 0x1, 0x8, "fd4730010a592512"}}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xef, 0xcd, 0x3, {0x13, 0x25, 0x1, 0xf, "d2aa6a0ad15691fadb10d249370633"}}}, {{0x9, 0x5, 0x2, 0xc, 0x220, 0x1, 0x4, 0x80, {0x12, 0x25, 0x1, 0xe, "e94ad4e9583dd16db09e3ed0791a"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x5, 0x4, 0x2, 0x40, 0x6}, 0x38, &(0x7f0000000200)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xb, 0x6, 0x4, 0x7fff, 0xfa}, @ss_container_id={0x14, 0x10, 0x4, 0xb5, "0ea8346453a4f9cd5e59a585dca2c885"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ec061992b88b35559fabe6f2227df470"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x47, &(0x7f00000002c0)=@string={0x47, 0x3, "a381376ee98cf9bdd6be253dcaf7bf4ca83f38d4f9cbff82aea1b3fad13c24d1124632d2c05103653ed9b5edaac2f08760fdd53523b8107f9ce65da4badbf5084b7b99fece"}}]}) 36.881090552s ago: executing program 4 (id=1232): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000b02000000020e88c7860d48e54bd33586be2f0d8407495c44067a9129e5f86f5a6745d2ca872499e04edbebc4c1d9c4c0e347563f5066c7b464899a360576d169038c1999f166d38e622476d32f34e86bfb40ae3cd11d00f531216bd0eca7e8353da16a105ec29b961cec69d77516705511f06b4ba117d0fe11b86f53a48c89721b961bbd50019bb603089802aebed4b5094b967b3fc8c3d334b5ae032ebd37df089857c7c76c129f8cd240f9bf28c43d5ce93f4592939abdc0898a3aecf7ca225daf95d3ebe59f855d5f8c583963"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000008c0)={0x0, 0xec46ae420f2f2a13, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1f38, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xbb, 0xa0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x25}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x62, 0x35, 0xf, 0x2, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x620, 0x9, 0x40, 0xbe, {0xa, 0x25, 0x25, 0x7ffdffff, 0x2f, 0xbd9}}}}}}}}]}}, 0x0) r2 = syz_usb_connect$uac2(0x2, 0xb9, &(0x7f0000000340)={{0x12, 0x1, 0x410, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xfa, 0x40, 0x40, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xcf55, 0x6, 0x10}, [@multiply_unit={0x7, 0x24, 0xc, 0x6, 0x3, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x3, 0x9, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xfe}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xffff, 0x7, 0x6d, "f2275216bae77cafaa"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x5, 0x7, {0x8, 0x25, 0x1, 0x0, 0x33, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xf, 0x2, 0x2, 0x1000, 0x5, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x638, 0xba, 0x1, 0xb, {0x8, 0x25, 0x1, 0x0, 0x33, 0x7, 0x1}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x5, 0x2, 0x7, 0xff, 0x4}, 0x1a, &(0x7f0000000440)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xe, 0xf7, 0x200, 0x3}]}, 0x4, [{0x89, &(0x7f00000004c0)=@string={0x89, 0x3, "f141cc4971e4c855b38d15aec0431f73f90bc1447c8d76ded3212083147688ce8e247d2886cd858b14138a4742022511490e046b22047244344f064631e35246d94d9e4bbf6f8497e5642c310c7eeabaa6c47d7f4dff6a4cae2af652fc5753b5ecc311c04ed8604876be520827a2dd6ae01b5fc01fa7c541d6a3ed21eb2ead2b232abac4d85f49"}}, {0xcb, &(0x7f0000000580)=@string={0xcb, 0x3, "be40905980a5e1c2d07d2dd9b22ea0ce7fe16429dca1c5f311aae00cdff16bb5abcc31b5872e210e5ef10aa54406d2c94653ae5d727821c53b7a0c57312d4820e15066317c347a98afd8ec19f79fa4d4a2f8ae2d4015cb384d53026363e29185266aca5e704633e9525aab2df80601fdf1471fcfe2cc3d6d183cd8f82d8e7837dc9ca4b79c4e27f8832db3010fe03962c9a6efcd8979ab73effe287faa4a5c8e845c82cd410839d33f0ebd0e23b3d8802d062957004709b5433a308d292a4b37fba7ea8d3dd3d157bb"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x1d, &(0x7f0000000700)=@string={0x1d, 0x3, "7debdce2f8da3766c9ae1599020b846fcfa6c8f6432bde51a9cb08"}}]}) syz_usb_ep_read(r2, 0x3, 0xee, &(0x7f00000007c0)=""/238) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x4300, 0x0) read$snapshot(r3, &(0x7f00000000c0)=""/188, 0xbc) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 33.862284901s ago: executing program 4 (id=1252): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010000000020450c0b7600000000000109022400010000302009040009030300030009fe0010ff012206000905810310007f0108"], 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x0, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) sendfile(r1, r2, 0x0, 0x6) fchdir(r0) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 32.554365875s ago: executing program 4 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x300}, 0x0) 32.541445075s ago: executing program 4 (id=1259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20}, {0x40000001, 0x486, 0x0, 0x7f, 0x97d, 0x15}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0xffd}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280000000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x20) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x10001, 0x0}) kcmp(r3, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f80013240306020603040703"], 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 31.779874035s ago: executing program 4 (id=1261): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="96bc1480", 0x4}], 0x1}, 0x24048804) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x3f8, 0x400, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40810}, 0x20000010) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x1, 0xffffffff, 0x22, 0xc, 0x2}]}) syz_io_uring_setup(0xf7c, &(0x7f0000000140)={0x0, 0x8dff, 0x2, 0x1, 0x24f}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) 31.769544625s ago: executing program 4 (id=1262): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x3e41, 0x12) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x2707, 0x8, 0x10) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x40) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="fb8985981cbec44b909a42ca8ecbc488d76edcf609d9477cecfa668573", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x0) 31.678771627s ago: executing program 34 (id=1262): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x3e41, 0x12) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x2707, 0x8, 0x10) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x40) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="fb8985981cbec44b909a42ca8ecbc488d76edcf609d9477cecfa668573", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x0) 18.763455113s ago: executing program 6 (id=1434): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x2c, {0x2, 0x4e22, @empty}}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x40000099}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) (async, rerun: 64) write(r4, &(0x7f0000000080)='4', 0x1) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r5 = socket(0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) (async) readv(r5, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r8) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, r8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x4, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x3, 0x28, 0x29, 0x0, @remote, @loopback}}}}) 18.760187633s ago: executing program 6 (id=1435): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$addseals(r0, 0x409, 0x8) socket$nl_audit(0x10, 0x3, 0x9) socket(0x2b, 0x806, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x38f680, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000030c0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@uncond, 0xffffff99, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private=0xa010100, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0xff9b) socket$key(0xf, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x8cc1d000) accept(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write(r4, &(0x7f0000000000)="01", 0x1) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000140)=ANY=[], 0x0) 18.248277536s ago: executing program 6 (id=1441): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x12, 0x0, 0xffffffffffffffff}]}) 18.231336306s ago: executing program 6 (id=1442): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) mincore(&(0x7f0000b36000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/195) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket$key(0xf, 0x3, 0x2) r3 = socket$unix(0x1, 0x5, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x1, r2}) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r7 = fsmount(r5, 0x0, 0x0) fchdir(r7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r8, &(0x7f00000004c0)='./file1\x00', 0x5) 18.159899338s ago: executing program 6 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r3]) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000940)={0x0, &(0x7f0000000480)=[@code={0xa, 0x57, {"450f07c7442400a6000000c7442402b61f0000ff2c243636400f781266baf80cb8ce76be82ef66bafc0c66ed440f01d08f6978c7450d440fc73341d1c166ba4000ec410f01d1"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0xbd8b, 0x6, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xab03}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x4b, 0x5, 0x2, 0x3}}, @out_dx={0x6a, 0x28, {0xfde9, 0x2, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0x4942}}, @rdmsr={0x66, 0x18, {0x29}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc0a, 0x3, 0x1000, 0x8}}, @wr_drn={0x68, 0x20, {0x5, 0x2c}}, @nested_create_vm={0x12d, 0x18, 0x7fff}, @in_dx={0x69, 0x20, {0x2afc, 0x1}}, @wrmsr={0x65, 0x20, {0x183, 0x81}}, @set_irq_handler={0xc8, 0x20, {0x84}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0xe403}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xb4, 0xaf}}, @nested_load_syzos={0x136, 0xf4, {0x3, 0x7, [@code={0xa, 0x49, {"c4c2fd32737e66baa100ec66ba4200b000eeb9180b00000f32dbd9440f0766b800008ec866baa100ed364d0fc76892653636f3420fc77302"}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @code={0xa, 0x53, {"66b813010f00d0c4a1fae6a24800c0fe4584c266b8cb000f00d82e66660f58b9f82be7de66ba210066b8d30066ef66ba200066b8987366efdce4f30f0ff1a646d8e3"}}, @nested_amd_vmsave={0x183, 0x18}]}}, @cpuid={0x64, 0x18, {0x9, 0xc}}, @nested_load_syzos={0x136, 0x38, {0x0, 0x1, [@nested_amd_vmsave={0x183, 0x18}]}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0x1d1c}}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x100, 0x4600, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xf046, 0x3}}, @wr_crn={0x67, 0x20, {0x0, 0x9}}], 0x4bb}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x4, 0x9, '\x00', 0x6}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000a08000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.150216128s ago: executing program 6 (id=1445): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000080)=[0x0]}) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r1, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000c80)={0x0, 0xa, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x17, 0x2, "fd84"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0xe0, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0xc2, 0x2a, [@perr={0x84, 0xbc, {0x5, 0xc, [{{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x1c}, {{}, @device_a, 0x6, @void, 0x9}, {{}, @device_a, 0x80081, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x10, @value=@device_b, 0x34}, {{}, @device_b, 0x81, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x32}, {{}, @device_b, 0x4, @void, 0x32}, {{}, @device_b, 0xa, @void, 0x1e}, {{}, @device_a, 0x7, @void, 0x1c}, {{}, @device_a, 0x7, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x21}]}}]}]]}, 0xe0}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x4080) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x82, 0x2, "db05"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0xe73a6c3fe2897294, 0x8, 0x2, '\\K'}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.069954281s ago: executing program 35 (id=1445): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000080)=[0x0]}) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r1, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000c80)={0x0, 0xa, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x0, 0x17, 0x2, "fd84"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0xe0, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0xc2, 0x2a, [@perr={0x84, 0xbc, {0x5, 0xc, [{{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x1c}, {{}, @device_a, 0x6, @void, 0x9}, {{}, @device_a, 0x80081, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x10, @value=@device_b, 0x34}, {{}, @device_b, 0x81, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x32}, {{}, @device_b, 0x4, @void, 0x32}, {{}, @device_b, 0xa, @void, 0x1e}, {{}, @device_a, 0x7, @void, 0x1c}, {{}, @device_a, 0x7, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x21}]}}]}]]}, 0xe0}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x4080) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x82, 0x2, "db05"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000640)={0xe73a6c3fe2897294, 0x8, 0x2, '\\K'}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.407983569s ago: executing program 7 (id=1526): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x80000001, 0x714, r0}) 5.327419911s ago: executing program 5 (id=1528): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000}) 5.311348422s ago: executing program 5 (id=1529): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(r0) 4.538973651s ago: executing program 7 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000340)=""/8, 0x8, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 4.505474023s ago: executing program 7 (id=1534): unshare(0x8040480) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 4.435977154s ago: executing program 7 (id=1535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4.435645944s ago: executing program 7 (id=1536): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="3f010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x239, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x44, 0x43, 0x5f, 0x10, 0x695c, 0x3829, 0x42d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0x30, 0x8, "", [{{0x9, 0x4, 0x8f, 0x4, 0x0, 0x66, 0x81, 0x57}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_ep_read(r1, 0xf, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800000005"], 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 3.985983456s ago: executing program 5 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000a40)=""/4107, 0x100b}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000100)=""/21, 0x15}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40, 0x0) 3.985572996s ago: executing program 5 (id=1545): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 3.984982096s ago: executing program 5 (id=1547): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x2188}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x220) r3 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 3.109973389s ago: executing program 2 (id=1553): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000001540)=""/93, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 3.107849509s ago: executing program 2 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x20044840) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 3.096469579s ago: executing program 2 (id=1555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x701, 0x70bd3a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) 3.0716046s ago: executing program 2 (id=1556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x20000ba) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) 3.07108331s ago: executing program 2 (id=1557): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b0002000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.911704554s ago: executing program 3 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1,0x400000,0x401000,0,-]*', 0x19) 2.891425914s ago: executing program 3 (id=1567): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.037257017s ago: executing program 3 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0427bd7000000000001300000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 1.971902698s ago: executing program 3 (id=1569): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000280)="40fa72135804927f6b8054c86b0d14dbfc0464800d75c48d1fd8ad33ad4369af440078a13e3069", 0x27}, {&(0x7f0000000300)="ee440c2a02a994beef3b7ef914a977eb", 0x10}], 0x2) 1.971677708s ago: executing program 3 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x7ff, 0x12) 1.970962648s ago: executing program 3 (id=1571): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.454479032s ago: executing program 7 (id=1572): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6deda47dc829c0f8005fec0f1f88d7547f05", 0x19}) 971.268594ms ago: executing program 5 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000040)="20c879ebbdc50bcd6d000000", 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 0s ago: executing program 2 (id=1574): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000a7, 0x2000819c) kernel console output (not intermixed with test programs): 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.394500][ T4779] RSP: 002b:00007f67ab089028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.394518][ T4779] RAX: ffffffffffffffda RBX: 00007f67aa425fa0 RCX: 00007f67aa19e0d9 [ 180.394531][ T4779] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 180.394542][ T4779] RBP: 00007f67ab089090 R08: 0000000000000000 R09: 0000000000000000 [ 180.394552][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.394562][ T4779] R13: 00007f67aa426038 R14: 00007f67aa425fa0 R15: 00007ffe56934058 [ 180.394577][ T4779] [ 180.683296][ T4782] cgroup: Invalid name [ 180.700585][ T319] usb 4-1: USB disconnect, device number 99 [ 180.856415][ T653] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.866667][ T653] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.879617][ T653] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 180.888712][ T653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.025345][ T319] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 181.176386][ T319] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.185174][ T319] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.195591][ T319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.204664][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 181.215850][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 181.233525][ T319] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.249178][ T319] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.259145][ T319] usb 4-1: Product: syz [ 181.263485][ T319] usb 4-1: Manufacturer: syz [ 181.270808][ T319] cdc_wdm 4-1:1.0: skipping garbage [ 181.276153][ T319] cdc_wdm 4-1:1.0: skipping garbage [ 181.282133][ T319] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 181.288314][ T319] cdc_wdm 4-1:1.0: Unknown control protocol [ 181.304217][ T653] lg-g15 0003:046D:C222.0020: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 181.375903][ T653] lg-g15 0003:046D:C222.0020: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 181.472145][ T653] usb 4-1: USB disconnect, device number 100 [ 181.495382][ T2057] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 181.646413][ T2057] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.657635][ T2057] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.670692][ T2057] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.677442][ T2057] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 181.686999][ T2057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.695852][ T2057] usb 3-1: config 0 descriptor?? [ 181.999782][ T319] usb 5-1: USB disconnect, device number 51 [ 182.021417][ T4796] batadv_slave_0: entered promiscuous mode [ 182.033676][ T4796] batadv_slave_0: left promiscuous mode [ 182.060969][ T4803] netlink: 'syz.3.1131': attribute type 19 has an invalid length. [ 182.102420][ T2057] hid (null): unknown global tag 0xd [ 182.115859][ T2057] magicmouse 0003:05AC:0324.0021: unknown global tag 0xd [ 182.130266][ T2057] magicmouse 0003:05AC:0324.0021: item 0 1 1 13 parsing failed [ 182.145939][ T2057] magicmouse 0003:05AC:0324.0021: magicmouse hid parse failed [ 182.156168][ T2057] magicmouse 0003:05AC:0324.0021: probe with driver magicmouse failed with error -22 [ 182.303870][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 182.303890][ T36] audit: type=1400 audit(1787775774.381:686): avc: denied { read append } for pid=4789 comm="syz.2.1127" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.305126][ T653] usb 3-1: USB disconnect, device number 90 [ 182.465343][ T2057] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 182.616396][ T2057] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.625197][ T2057] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 182.635573][ T2057] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.644656][ T2057] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 182.656053][ T2057] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 182.668312][ T2057] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.677702][ T2057] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.685814][ T2057] usb 4-1: Product: syz [ 182.690116][ T2057] usb 4-1: Manufacturer: syz [ 182.696726][ T2057] cdc_wdm 4-1:1.0: skipping garbage [ 182.702172][ T2057] cdc_wdm 4-1:1.0: skipping garbage [ 182.708191][ T2057] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 182.714425][ T2057] cdc_wdm 4-1:1.0: Unknown control protocol [ 182.868867][ T36] audit: type=1400 audit(1787775774.951:687): avc: denied { read write } for pid=4820 comm="syz.2.1139" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 182.878991][ T2057] hid-generic 0005:0006:0005.0022: item fetching failed at offset 7/103 [ 182.897273][ T36] audit: type=1400 audit(1787775774.951:688): avc: denied { open } for pid=4820 comm="syz.2.1139" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 182.922004][ T653] usb 4-1: USB disconnect, device number 101 [ 182.943187][ T2057] hid-generic 0005:0006:0005.0022: probe with driver hid-generic failed with error -22 [ 183.160427][ T653] usb 6-1: USB disconnect, device number 48 [ 183.195365][ T319] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 183.346439][ T319] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.357750][ T319] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.370829][ T319] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.377729][ T319] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 183.387010][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.395829][ T319] usb 5-1: config 0 descriptor?? [ 183.433621][ T4845] 9pnet_fd: Insufficient options for proto=fd [ 183.505336][ T653] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 183.656344][ T653] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 183.666972][ T653] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.680899][ T653] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 183.690057][ T653] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.698291][ T653] usb 6-1: Manufacturer: syz [ 183.704870][ T653] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 183.802985][ T319] usbhid 5-1:0.0: can't add hid device: -71 [ 183.809143][ T319] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.818027][ T319] usb 5-1: USB disconnect, device number 52 [ 183.827334][ T36] audit: type=1326 audit(1787775775.911:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 183.853118][ T36] audit: type=1326 audit(1787775775.911:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 183.878523][ T36] audit: type=1326 audit(1787775775.911:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 183.906115][ T4851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.908742][ T36] audit: type=1326 audit(1787775775.911:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 183.929183][ T4851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.943387][ T36] audit: type=1326 audit(1787775775.911:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 183.973295][ T36] audit: type=1326 audit(1787775775.911:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 183.998897][ T36] audit: type=1326 audit(1787775775.911:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4838 comm="syz.2.1143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa19e0d9 code=0x7fc00000 [ 184.033048][ T319] usb 6-1: USB disconnect, device number 49 [ 184.091231][ T4854] netlink: 'syz.2.1148': attribute type 27 has an invalid length. [ 184.099274][ T4855] netlink: 'syz.2.1148': attribute type 27 has an invalid length. [ 184.555208][ T4877] FAULT_INJECTION: forcing a failure. [ 184.555208][ T4877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.575640][ T2057] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 184.583306][ T319] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 184.601350][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.5.1155 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 184.601387][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.601407][ T4877] Call Trace: [ 184.601412][ T4877] [ 184.601419][ T4877] __dump_stack+0x21/0x30 [ 184.601447][ T4877] dump_stack_lvl+0x140/0x1c0 [ 184.601471][ T4877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 184.601494][ T4877] ? vsnprintf+0x7b4/0x1ad0 [ 184.601515][ T4877] ? check_stack_object+0x10f/0x150 [ 184.601534][ T4877] dump_stack+0x19/0x20 [ 184.601556][ T4877] should_fail_ex+0x3c2/0x510 [ 184.601575][ T4877] should_fail+0xf/0x20 [ 184.601593][ T4877] should_fail_usercopy+0x1e/0x30 [ 184.601613][ T4877] _copy_from_user+0x20/0xa0 [ 184.601636][ T4877] kstrtouint_from_user+0xde/0x170 [ 184.601655][ T4877] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 184.601674][ T4877] ? selinux_file_permission+0x318/0xb60 [ 184.601692][ T4877] ? __cfi_selinux_file_permission+0x10/0x10 [ 184.601709][ T4877] proc_fail_nth_write+0x8f/0x220 [ 184.601734][ T4877] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 184.601758][ T4877] ? bpf_lsm_file_permission+0xd/0x20 [ 184.601780][ T4877] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 184.601810][ T4877] vfs_write+0x3c4/0xfd0 [ 184.601827][ T4877] ? __cfi_vfs_write+0x10/0x10 [ 184.601843][ T4877] ? __kasan_check_write+0x18/0x20 [ 184.601860][ T4877] ? mutex_lock+0x97/0x1d0 [ 184.601876][ T4877] ? __cfi_mutex_lock+0x10/0x10 [ 184.601895][ T4877] ksys_write+0x145/0x260 [ 184.601914][ T4877] ? __cfi_ksys_write+0x10/0x10 [ 184.601931][ T4877] ? __kasan_check_read+0x15/0x20 [ 184.601947][ T4877] __x64_sys_write+0x7f/0x90 [ 184.601964][ T4877] x64_sys_call+0x271c/0x2ee0 [ 184.601979][ T4877] do_syscall_64+0x57/0xf0 [ 184.602002][ T4877] ? clear_bhb_loop+0x50/0xa0 [ 184.602021][ T4877] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.602039][ T4877] RIP: 0033:0x7f890ab5e90e [ 184.602054][ T4877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.602068][ T4877] RSP: 002b:00007f890badcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.602087][ T4877] RAX: ffffffffffffffda RBX: 00007f890badd6c0 RCX: 00007f890ab5e90e [ 184.602099][ T4877] RDX: 0000000000000001 RSI: 00007f890badd0a0 RDI: 0000000000000004 [ 184.602110][ T4877] RBP: 00007f890badd090 R08: 0000000000000000 R09: 0000000000000000 [ 184.602120][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.602130][ T4877] R13: 00007f890ae26038 R14: 00007f890ae25fa0 R15: 00007fffc70cb018 [ 184.602144][ T4877] [ 184.888828][ T653] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 185.018640][ T4879] SELinux: security_context_str_to_sid () failed with errno=-22 [ 185.087783][ T2057] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.097263][ T319] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.108054][ T319] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 185.117156][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.131040][ T2057] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.151959][ T2057] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.166493][ T653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.182236][ T2057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 185.204185][ T653] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 185.215956][ T2057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 185.231222][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.245417][ T653] usb 3-1: Product: syz [ 185.254764][ T653] usb 3-1: Manufacturer: syz [ 185.260387][ T2057] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.273311][ T2057] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.284157][ T653] usb 3-1: SerialNumber: syz [ 185.290013][ T2057] usb 5-1: Product: syz [ 185.294997][ T2057] usb 5-1: Manufacturer: syz [ 185.302294][ T2057] cdc_wdm 5-1:1.0: skipping garbage [ 185.307711][ T2057] cdc_wdm 5-1:1.0: skipping garbage [ 185.313583][ T2057] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 185.319702][ T2057] cdc_wdm 5-1:1.0: Unknown control protocol [ 185.504893][ T2057] usb 5-1: USB disconnect, device number 53 [ 185.515251][ T653] usb 3-1: USB disconnect, device number 91 [ 185.526152][ T318] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 185.533603][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.554645][ T319] lg-g15 0003:046D:C222.0023: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 185.625464][ T319] lg-g15 0003:046D:C222.0023: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 185.686473][ T318] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.696557][ T318] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 185.707837][ T318] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 185.717477][ T318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.725615][ T318] usb 6-1: Product: syz [ 185.730060][ T318] usb 6-1: Manufacturer: syz [ 185.734666][ T318] usb 6-1: SerialNumber: syz [ 185.949244][ T318] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 186.275336][ T318] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 186.426420][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.437550][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.447417][ T318] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 186.456687][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.465572][ T318] usb 5-1: config 0 descriptor?? [ 186.875647][ T318] arvo 0003:1E7D:30D4.0024: unknown main item tag 0x1 [ 186.882489][ T318] arvo 0003:1E7D:30D4.0024: item fetching failed at offset 2/7 [ 186.901085][ T318] arvo 0003:1E7D:30D4.0024: parse failed [ 186.906966][ T318] arvo 0003:1E7D:30D4.0024: probe with driver arvo failed with error -22 [ 187.103036][ T318] usb 5-1: USB disconnect, device number 54 [ 187.135619][ T653] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 187.285327][ T653] usb 3-1: Invalid ep0 maxpacket: 16 [ 187.320535][ T318] usb 4-1: USB disconnect, device number 102 [ 187.386838][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 187.386859][ T36] audit: type=1400 audit(1787775779.471:699): avc: denied { ioctl } for pid=4909 comm="syz.3.1166" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.415527][ T653] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 187.491428][ T4912] bridge0: port 3(dummy0) entered blocking state [ 187.498157][ T4912] bridge0: port 3(dummy0) entered disabled state [ 187.504591][ T4912] dummy0: entered allmulticast mode [ 187.510446][ T4912] dummy0: entered promiscuous mode [ 187.515761][ T4912] bridge0: port 3(dummy0) entered blocking state [ 187.522132][ T4912] bridge0: port 3(dummy0) entered forwarding state [ 187.529463][ T4912] dummy0: left allmulticast mode [ 187.534477][ T4912] dummy0: left promiscuous mode [ 187.539632][ T4912] bridge0: port 3(dummy0) entered disabled state [ 187.575348][ T653] usb 3-1: Invalid ep0 maxpacket: 16 [ 187.580983][ T653] usb usb3-port1: attempt power cycle [ 187.865341][ T318] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 187.925404][ T653] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 187.945759][ T653] usb 3-1: Invalid ep0 maxpacket: 16 [ 188.015334][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 188.022271][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.033395][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.043291][ T318] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 188.052581][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.061364][ T318] usb 5-1: config 0 descriptor?? [ 188.068282][ T318] hub 5-1:0.0: USB hub found [ 188.075385][ T653] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 188.095741][ T653] usb 3-1: Invalid ep0 maxpacket: 16 [ 188.101234][ T653] usb usb3-port1: unable to enumerate USB device [ 188.268535][ T318] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 188.301515][ T319] usb 6-1: USB disconnect, device number 50 [ 188.308592][ T319] usblp0: removed [ 188.525313][ T653] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 188.655326][ T653] usb 4-1: device descriptor read/64, error -71 [ 188.685233][ T36] audit: type=1400 audit(1787775780.761:700): avc: denied { setopt } for pid=4915 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 188.690138][ T318] hid-generic 0003:046D:C31C.0025: unknown main item tag 0x0 [ 188.713959][ T318] hid-generic 0003:046D:C31C.0025: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 188.895579][ T653] usb 4-1: device descriptor read/64, error -71 [ 189.135436][ T653] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 189.265388][ T653] usb 4-1: device descriptor read/64, error -71 [ 189.505335][ T653] usb 4-1: device descriptor read/64, error -71 [ 189.525405][ T2057] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 189.615430][ T653] usb usb4-port1: attempt power cycle [ 189.675336][ T2057] usb 6-1: Using ep0 maxpacket: 32 [ 189.681960][ T2057] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.690781][ T2057] usb 6-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 189.701431][ T2057] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 7 [ 189.712607][ T2057] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 26487, setting to 1024 [ 189.725332][ T2057] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 189.734917][ T318] usb 5-1: USB disconnect, device number 55 [ 189.741710][ T2057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.751057][ T2057] usb 6-1: Product: syz [ 189.756297][ T2057] usb 6-1: Manufacturer: syz [ 189.761014][ T2057] usb 6-1: SerialNumber: syz [ 189.920761][ T36] audit: type=1400 audit(1787775782.001:701): avc: denied { setopt } for pid=4933 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.956903][ T653] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 189.969154][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.984324][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.993832][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.004679][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.012740][ T653] usb 4-1: device descriptor read/8, error -71 [ 190.046572][ T36] audit: type=1400 audit(1787775782.131:702): avc: denied { write } for pid=4944 comm="syz.2.1177" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.046599][ T4945] random: crng reseeded on system resumption [ 190.069513][ T2057] usb 6-1: USB disconnect, device number 51 [ 190.072591][ T36] audit: type=1400 audit(1787775782.131:703): avc: denied { open } for pid=4944 comm="syz.2.1177" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.116134][ T36] audit: type=1400 audit(1787775782.191:704): avc: denied { sqpoll } for pid=4944 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.137108][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.156970][ T653] usb 4-1: device descriptor read/8, error -71 [ 190.405372][ T653] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 190.435411][ T318] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 190.448913][ T653] usb 4-1: device descriptor read/8, error -71 [ 190.586323][ T653] usb 4-1: device descriptor read/8, error -71 [ 190.606386][ T318] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.616237][ T318] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.637406][ T318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.656208][ T318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.678180][ T318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.699250][ T653] usb usb4-port1: unable to enumerate USB device [ 190.708957][ T318] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.721413][ T318] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.738586][ T318] usb 3-1: Product: syz [ 190.747177][ T318] usb 3-1: Manufacturer: syz [ 190.758062][ T318] cdc_wdm 3-1:1.0: skipping garbage [ 190.769927][ T318] cdc_wdm 3-1:1.0: skipping garbage [ 190.781202][ T318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 190.793800][ T318] cdc_wdm 3-1:1.0: Unknown control protocol [ 190.959991][ T318] usb 3-1: USB disconnect, device number 96 [ 191.268121][ T36] audit: type=1400 audit(1787775783.351:705): avc: denied { read } for pid=4963 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.275581][ T653] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 191.343809][ T4971] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1187'. [ 191.365644][ T36] audit: type=1400 audit(1787775783.451:706): avc: denied { read } for pid=4972 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.416849][ T36] audit: type=1400 audit(1787775783.501:707): avc: denied { write } for pid=4972 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.465608][ T653] usb 6-1: Using ep0 maxpacket: 32 [ 191.483290][ T653] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 191.495667][ T36] audit: type=1400 audit(1787775783.581:708): avc: denied { mounton } for pid=4975 comm="syz.2.1189" path="/277/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 191.527118][ T653] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 159, changing to 11 [ 191.557378][ T653] usb 6-1: config 1 interface 0 has no altsetting 0 [ 191.574744][ T653] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.40 [ 191.583978][ T2057] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 191.599729][ T653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.617253][ T653] usb 6-1: Product: syz [ 191.621562][ T653] usb 6-1: Manufacturer: syz [ 191.626248][ T653] usb 6-1: SerialNumber: syz [ 191.755306][ T2057] usb 5-1: Using ep0 maxpacket: 16 [ 191.761562][ T2057] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 191.769903][ T2057] usb 5-1: config 0 has no interface number 0 [ 191.776198][ T2057] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 191.786469][ T2057] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 191.797976][ T2057] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 191.807276][ T2057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.815417][ T2057] usb 5-1: Product: syz [ 191.819822][ T2057] usb 5-1: Manufacturer: syz [ 191.824477][ T2057] usb 5-1: SerialNumber: syz [ 191.830164][ T2057] usb 5-1: config 0 descriptor?? [ 191.836790][ T4967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 191.844219][ T4967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 191.853371][ T653] usbhid 6-1:1.0: can't add hid device: -71 [ 191.859505][ T653] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 191.868887][ T653] usb 6-1: USB disconnect, device number 52 [ 192.052634][ T4967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 192.060167][ T4967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 192.268366][ T2057] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 192.439739][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 192.439759][ T36] audit: type=1400 audit(1787775784.521:711): avc: denied { map } for pid=4988 comm="syz.2.1194" path="socket:[32740]" dev="sockfs" ino=32740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.481273][ T2057] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 192.521512][ T2057] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 192.563151][ T2057] asix 5-1:0.34: probe with driver asix failed with error -32 [ 192.625384][ T653] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 192.736755][ T319] usb 5-1: USB disconnect, device number 56 [ 192.749822][ T318] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 192.776481][ T653] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.787438][ T653] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 192.796856][ T653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.855374][ T2057] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 192.905401][ T318] usb 3-1: Using ep0 maxpacket: 8 [ 192.911572][ T318] usb 3-1: config 1 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.925123][ T318] usb 3-1: config 1 interface 0 has no altsetting 0 [ 192.933269][ T318] usb 3-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.40 [ 192.942522][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.950615][ T318] usb 3-1: Product: 혶䣻꾠갞炢挙꣄霂誤욷æ»ç§‘降䧜å¾ç´î®¶îŸ¾ì½½â¨¸ì„™ë‘žîˆ¤çªê¬‘墵݊ꂬá‚䑞䞵郑塶爐è¡å‹€ê¸®Ï´ë‡‚淞Ắ㡬⮱⾎뛕ꅳ抬䢂ᄊᦄ핹뼓෱ᚲｅꬉ⠅駟â€êª—☵駴ౖ䬔㬉둌씱꿙被 [ 192.974419][ T318] usb 3-1: Manufacturer: îƒâŸ†å²¬å¼½íƒ’䌫æ–ë­…ë½á¹²è†¾à¢¼î¢œî£…₲絤쮳í¯ç±¶î¥§å­‡â‡ºï†¹ìš¢êŒ“á¹½ç²á´¡è›Ÿä€¾ëœ”Ｎ悙ꯅ瑑蟥褹춘鄪掠ï–㹀馚䔌뙛ì˜æ–¹ì‡³çš±êª‚㌮궺诬螒巶罡ㇵ姠凣ཱུë¢é©¥ç¤®ì†©ë±£ë¼¦áœ¦ [ 192.996913][ T318] usb 3-1: SerialNumber: syz [ 193.016393][ T2057] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.025245][ T2057] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.035728][ T2057] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.044758][ T2057] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 193.055924][ T2057] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 193.068177][ T2057] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.077475][ T2057] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.085552][ T2057] usb 4-1: Product: syz [ 193.089846][ T2057] usb 4-1: Manufacturer: syz [ 193.096157][ T2057] cdc_wdm 4-1:1.0: skipping garbage [ 193.101877][ T2057] cdc_wdm 4-1:1.0: skipping garbage [ 193.107879][ T2057] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 193.113991][ T2057] cdc_wdm 4-1:1.0: Unknown control protocol [ 193.212708][ T318] usbhid 3-1:1.0: can't add hid device: -71 [ 193.218843][ T653] lg-g15 0003:046D:C222.0026: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 193.231167][ T318] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 193.240844][ T318] usb 3-1: USB disconnect, device number 97 [ 193.295567][ T653] lg-g15 0003:046D:C222.0026: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 193.311566][ T319] usb 4-1: USB disconnect, device number 107 [ 193.343329][ T4999] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1198'. [ 193.352798][ T5000] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1198'. [ 193.361813][ T5000] z00ªX¹¦: renamed from gretap0 (while UP) [ 193.368883][ T5000] z00ªX¹¦: entered allmulticast mode [ 193.374512][ T4999] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1198'. [ 193.396153][ T4999] z01ªX¹¦: renamed from z00ªX¹¦ (while UP) [ 193.414077][ T36] audit: type=1400 audit(1787775785.491:712): avc: denied { ioctl } for pid=4988 comm="syz.2.1194" path="socket:[32818]" dev="sockfs" ino=32818 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.590339][ T5007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54486 sclass=netlink_route_socket pid=5007 comm=syz.4.1200 [ 193.614383][ T36] audit: type=1400 audit(1787775785.691:713): avc: denied { accept } for pid=5008 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 193.634413][ T36] audit: type=1400 audit(1787775785.701:714): avc: denied { getopt } for pid=5008 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.846270][ T36] audit: type=1400 audit(1787775785.931:715): avc: denied { unlink } for pid=5024 comm="syz.3.1206" name="#20" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.850614][ T5025] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 193.941229][ T36] audit: type=1400 audit(1787775786.021:716): avc: denied { cmd } for pid=5031 comm="syz.2.1209" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 193.984285][ T5032] kvm: kvm [5031]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 193.993325][ T5032] kvm: kvm [5031]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 194.044727][ T36] audit: type=1400 audit(1787775786.121:717): avc: denied { map } for pid=5031 comm="syz.2.1209" path="/dev/ublkc0" dev="devtmpfs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.145443][ T319] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 194.193810][ T5038] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1210'. [ 194.295370][ T319] usb 4-1: Using ep0 maxpacket: 16 [ 194.301811][ T319] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 194.310452][ T319] usb 4-1: config 0 has no interface number 0 [ 194.316755][ T319] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 194.327033][ T319] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 194.338864][ T319] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 194.348201][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.356373][ T319] usb 4-1: Product: syz [ 194.360709][ T319] usb 4-1: Manufacturer: syz [ 194.365418][ T319] usb 4-1: SerialNumber: syz [ 194.370838][ T319] usb 4-1: config 0 descriptor?? [ 194.376256][ T5027] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.383549][ T5027] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.465338][ T318] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 194.591770][ T5027] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.606233][ T5027] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 194.616362][ T318] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.625122][ T318] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.635534][ T318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.644608][ T318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 194.655827][ T318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 194.668139][ T318] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.677460][ T318] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.685590][ T318] usb 3-1: Product: syz [ 194.689914][ T318] usb 3-1: Manufacturer: syz [ 194.696357][ T318] cdc_wdm 3-1:1.0: skipping garbage [ 194.701790][ T318] cdc_wdm 3-1:1.0: skipping garbage [ 194.707681][ T318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 194.713765][ T318] cdc_wdm 3-1:1.0: Unknown control protocol [ 194.814048][ T319] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 194.845327][ T653] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 194.898117][ T318] usb 3-1: USB disconnect, device number 98 [ 195.006342][ T653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.025198][ T319] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 195.036247][ T653] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.054098][ T319] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 195.064955][ T653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.086423][ T653] usb 5-1: config 0 descriptor?? [ 195.092794][ T319] asix 4-1:0.34: probe with driver asix failed with error -32 [ 195.219083][ T319] usb 4-1: USB disconnect, device number 108 [ 195.308508][ T653] usbhid 5-1:0.0: can't add hid device: -71 [ 195.314624][ T653] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 195.323485][ T653] usb 5-1: USB disconnect, device number 57 [ 195.378785][ T318] usb 6-1: USB disconnect, device number 53 [ 195.398330][ T5054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.412090][ T5054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.705351][ T319] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 195.745378][ T653] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 195.855354][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 195.863123][ T319] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 195.872599][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.880935][ T319] usb 3-1: Product: syz [ 195.885518][ T319] usb 3-1: Manufacturer: syz [ 195.890211][ T319] usb 3-1: SerialNumber: syz [ 195.906385][ T653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.917671][ T653] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 195.927051][ T653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.936116][ T653] usb 5-1: config 0 descriptor?? [ 196.025339][ T318] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 196.176382][ T318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.188038][ T318] usb 4-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 196.197376][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.205522][ T318] usb 4-1: Product: syz [ 196.209880][ T318] usb 4-1: Manufacturer: syz [ 196.214553][ T318] usb 4-1: SerialNumber: syz [ 196.428148][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.436885][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.445837][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.455297][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.470715][ T318] usb 4-1: USB disconnect, device number 109 [ 196.575442][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 196.700754][ T319] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 196.710889][ T319] usb 3-1: USB disconnect, device number 99 [ 196.725436][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 196.731866][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 196.741170][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.749910][ T653] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 196.757794][ T10] usb 6-1: config 0 descriptor?? [ 196.763742][ T653] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 196.774007][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 196.815341][ T318] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 196.966589][ T318] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.975740][ T318] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 196.986313][ T10] usb 6-1: Detected FT232B [ 196.990877][ T318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.000259][ T318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 197.011518][ T318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 197.023944][ T318] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.033328][ T318] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.041426][ T318] usb 4-1: Product: syz [ 197.045769][ T318] usb 4-1: Manufacturer: syz [ 197.052846][ T318] cdc_wdm 4-1:1.0: skipping garbage [ 197.058670][ T318] cdc_wdm 4-1:1.0: skipping garbage [ 197.064846][ T318] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 197.073327][ T319] usb 5-1: USB disconnect, device number 58 [ 197.073487][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 197.079533][ T318] cdc_wdm 4-1:1.0: Unknown control protocol [ 197.186443][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 197.194900][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 197.256449][ T319] usb 4-1: USB disconnect, device number 110 [ 197.306375][ T36] audit: type=1400 audit(1787775789.391:718): avc: denied { bind } for pid=5088 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.325797][ T36] audit: type=1400 audit(1787775789.391:719): avc: denied { connect } for pid=5088 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.345653][ T36] audit: type=1400 audit(1787775789.391:720): avc: denied { listen } for pid=5088 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.396141][ T10] usb 6-1: USB disconnect, device number 54 [ 197.406187][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 197.425622][ T10] ftdi_sio 6-1:0.0: device disconnected [ 197.619738][ T5093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5093 comm=syz.4.1228 [ 197.777822][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 197.777842][ T36] audit: type=1400 audit(1787775789.861:723): avc: denied { wake_alarm } for pid=5106 comm="syz.3.1233" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.902879][ T36] audit: type=1400 audit(1787775789.981:724): avc: denied { bind } for pid=5111 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.932875][ T36] audit: type=1400 audit(1787775790.011:725): avc: denied { accept } for pid=5113 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.985443][ T319] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 197.993118][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 198.129962][ T5127] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1240'. [ 198.165428][ T318] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 198.173185][ T319] usb 5-1: Using ep0 maxpacket: 32 [ 198.178483][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 198.185146][ T319] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 198.193654][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 198.202235][ T319] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 198.211137][ T10] usb 3-1: config 0 has no interface number 0 [ 198.217380][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 198.227583][ T319] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 198.236678][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 198.246790][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.257013][ T319] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 198.266845][ T319] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.280285][ T319] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 198.289645][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.298059][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 198.307354][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.315881][ T10] usb 3-1: Product: syz [ 198.320315][ T319] usb 5-1: config 0 descriptor?? [ 198.325567][ T10] usb 3-1: Manufacturer: syz [ 198.330305][ T10] usb 3-1: SerialNumber: syz [ 198.336874][ T10] usb 3-1: config 0 descriptor?? [ 198.336942][ T318] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 198.351080][ T318] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 198.361480][ T5102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.368950][ T5102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.376291][ T318] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 198.390042][ T653] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 198.397743][ T318] usb 4-1: config 1 interface 0 has no altsetting 0 [ 198.405816][ T318] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 198.414994][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.423830][ T318] usb 4-1: Product: syz [ 198.428194][ T318] usb 4-1: Manufacturer: syz [ 198.432861][ T318] usb 4-1: SerialNumber: syz [ 198.439781][ T318] usb-storage 4-1:1.0: USB Mass Storage device detected [ 198.447744][ T318] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 198.537336][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.547048][ T319] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.558167][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.566252][ T653] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.575533][ T653] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.586285][ T5102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.593477][ T5102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.604557][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.613045][ T653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.622366][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.630744][ T653] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 198.642940][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.652308][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.660204][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.668662][ T653] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 198.680067][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.689288][ T653] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.698581][ T653] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.706966][ T653] usb 6-1: Product: syz [ 198.711264][ T653] usb 6-1: Manufacturer: syz [ 198.717708][ T653] cdc_wdm 6-1:1.0: skipping garbage [ 198.723142][ T653] cdc_wdm 6-1:1.0: skipping garbage [ 198.729170][ T653] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 198.735256][ T653] cdc_wdm 6-1:1.0: Unknown control protocol [ 198.830602][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 198.888780][ T36] audit: type=1400 audit(1787775790.971:726): avc: denied { read write } for pid=5104 comm="syz.4.1232" name="lp0" dev="devtmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.912443][ T36] audit: type=1400 audit(1787775790.971:727): avc: denied { open } for pid=5104 comm="syz.4.1232" path="/dev/usb/lp0" dev="devtmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 198.929409][ T653] usb 6-1: USB disconnect, device number 55 [ 198.943491][ C0] usblp0: nonzero read bulk status received: -71 [ 198.950721][ T319] usb 5-1: USB disconnect, device number 59 [ 199.042803][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 199.063856][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 199.085350][ T10] asix 3-1:0.34: probe with driver asix failed with error -32 [ 199.228626][ T319] usb 3-1: USB disconnect, device number 100 [ 199.767832][ T36] audit: type=1400 audit(1787775791.851:728): avc: denied { map } for pid=5146 comm="syz.5.1246" path="socket:[34130]" dev="sockfs" ino=34130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.791679][ T36] audit: type=1400 audit(1787775791.851:729): avc: denied { read accept } for pid=5146 comm="syz.5.1246" path="socket:[34130]" dev="sockfs" ino=34130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.055411][ T319] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 200.151685][ T5156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 200.206591][ T319] usb 3-1: config 3 has an invalid interface number: 3 but max is 0 [ 200.214802][ T319] usb 3-1: config 3 has no interface number 0 [ 200.221468][ T319] usb 3-1: config 3 interface 3 has no altsetting 0 [ 200.230620][ T319] usb 3-1: string descriptor 0 read error: -22 [ 200.237136][ T319] usb 3-1: New USB device found, idVendor=09fb, idProduct=6026, bcdDevice=ae.dc [ 200.246405][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.257203][ T319] ftdi_sio 3-1:3.3: FTDI USB Serial Device converter detected [ 200.265255][ T319] ftdi_sio ttyUSB0: unknown device type: 0xaedc [ 200.425388][ T653] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 200.576787][ T653] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.585670][ T653] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.596098][ T653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.605227][ T653] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 200.616476][ T653] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 200.628841][ T653] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.638241][ T653] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.646423][ T653] usb 6-1: Product: syz [ 200.650769][ T653] usb 6-1: Manufacturer: syz [ 200.657172][ T653] cdc_wdm 6-1:1.0: skipping garbage [ 200.662634][ T653] cdc_wdm 6-1:1.0: skipping garbage [ 200.668781][ T653] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 200.674878][ T653] cdc_wdm 6-1:1.0: Unknown control protocol [ 200.710620][ T5134] usblp0: removed [ 200.858990][ T10] usb 6-1: USB disconnect, device number 56 [ 200.938485][ T319] usb 4-1: USB disconnect, device number 111 [ 200.955581][ T653] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 201.115320][ T653] usb 5-1: Using ep0 maxpacket: 32 [ 201.126982][ T653] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 201.146465][ T653] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.173230][ T653] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.185918][ T36] audit: type=1400 audit(1787775793.271:730): avc: denied { mount } for pid=5169 comm="syz.3.1254" name="/" dev="configfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 201.186631][ T653] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 201.218909][ T36] audit: type=1400 audit(1787775793.301:731): avc: denied { search } for pid=5169 comm="syz.3.1254" name="/" dev="configfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.241503][ T36] audit: type=1400 audit(1787775793.311:732): avc: denied { write } for pid=5169 comm="syz.3.1254" name="fs" dev="configfs" ino=10913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.252609][ T653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.292424][ T653] usb 5-1: config 0 descriptor?? [ 201.511098][ T653] usb 5-1: USB disconnect, device number 60 [ 201.605321][ T319] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 201.765324][ T319] usb 4-1: Using ep0 maxpacket: 16 [ 201.771652][ T319] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 201.779967][ T319] usb 4-1: config 0 has no interface number 0 [ 201.786231][ T319] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 201.796435][ T319] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 201.807940][ T319] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 201.817236][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.825424][ T319] usb 4-1: Product: syz [ 201.829753][ T319] usb 4-1: Manufacturer: syz [ 201.834423][ T319] usb 4-1: SerialNumber: syz [ 201.840025][ T319] usb 4-1: config 0 descriptor?? [ 201.845434][ T5172] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 201.852801][ T5172] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.060630][ T5172] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.068079][ T5172] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.284487][ T319] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 202.496956][ T319] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 202.517188][ T319] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 202.535476][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 202.547563][ T319] asix 4-1:0.34: probe with driver asix failed with error -32 [ 202.702742][ T319] usb 4-1: USB disconnect, device number 112 [ 202.710291][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.720986][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.730756][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 202.740080][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.763313][ T10] usb 6-1: Found UVC 1.00 device (046d:0825) [ 202.807695][ T1136] bridge_slave_1: left allmulticast mode [ 202.813504][ T1136] bridge_slave_1: left promiscuous mode [ 202.819515][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.832254][ T1136] bridge_slave_0: left allmulticast mode [ 202.834638][ T318] usb 3-1: USB disconnect, device number 101 [ 202.844713][ T1136] bridge_slave_0: left promiscuous mode [ 202.844828][ T318] ftdi_sio 3-1:3.3: device disconnected [ 202.855661][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.963202][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.974843][ T1136] veth1_macvtap: left promiscuous mode [ 202.981586][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.986286][ T1136] veth0_vlan: left promiscuous mode [ 202.998346][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.007642][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.016866][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.035899][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.044881][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.046860][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 203.046906][ T36] audit: type=1400 audit(1787775795.121:741): avc: denied { mounton } for pid=5194 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 203.065542][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.089963][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.099806][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.109627][ T10] usb 6-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 203.120600][ T10] usb 6-1: No streaming interface found for terminal 2. [ 203.132645][ T10] usb 6-1: USB disconnect, device number 57 [ 203.193262][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.200450][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.207736][ T5194] bridge_slave_0: entered allmulticast mode [ 203.214153][ T5194] bridge_slave_0: entered promiscuous mode [ 203.221165][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.229011][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.236672][ T5194] bridge_slave_1: entered allmulticast mode [ 203.243080][ T5194] bridge_slave_1: entered promiscuous mode [ 203.297470][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.304618][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.312012][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.319122][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.335501][ T318] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 203.351582][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.359838][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.376684][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.383787][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.391937][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.399054][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.407588][ T36] audit: type=1400 audit(1787775795.491:742): avc: denied { mounton } for pid=5200 comm="syz.3.1266" path="/313/my_tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 203.430674][ T36] audit: type=1400 audit(1787775795.491:743): avc: denied { mount } for pid=5200 comm="syz.3.1266" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 203.459539][ T5194] veth0_vlan: entered promiscuous mode [ 203.470809][ T5194] veth1_macvtap: entered promiscuous mode [ 203.489758][ T36] audit: type=1400 audit(1787775795.571:744): avc: denied { mounton } for pid=5194 comm="syz-executor" path="/root/syzkaller.KESDAP/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 203.515206][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 203.519938][ T36] audit: type=1400 audit(1787775795.571:745): avc: denied { mounton } for pid=5194 comm="syz-executor" path="/root/syzkaller.KESDAP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 203.529177][ T318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.549980][ T36] audit: type=1400 audit(1787775795.601:746): avc: denied { mounton } for pid=5194 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 203.558018][ T318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.588875][ T36] audit: type=1400 audit(1787775795.601:747): avc: denied { mounton } for pid=5194 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 203.596375][ T318] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.644437][ T318] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 203.653779][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.661917][ T10] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 203.674620][ T318] usb 3-1: Product: syz [ 203.692562][ T318] usb 3-1: Manufacturer: syz [ 203.697372][ T318] usb 3-1: SerialNumber: syz [ 203.706282][ T5207] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3795657396 (242922073344 ns) > initial count (53003242880 ns). Using initial count to start timer. [ 203.818534][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.837164][ T10] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 203.854704][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.871170][ T10] usb 4-1: Product: syz [ 203.880804][ T10] usb 4-1: Manufacturer: syz [ 203.887813][ T10] usb 4-1: SerialNumber: syz [ 203.900764][ T10] usb 4-1: config 0 descriptor?? [ 203.914202][ T318] usb 3-1: unit 37 not found! [ 203.922833][ T318] usb 3-1: unit 0 not found! [ 203.945400][ T318] usb 3-1: USB disconnect, device number 102 [ 203.962123][ T2192] udevd[2192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.120201][ T319] usb 4-1: USB disconnect, device number 113 [ 204.195392][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.295436][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 204.355830][ T31] usb 7-1: too many configurations: 185, using maximum allowed: 8 [ 204.364761][ T31] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 204.372471][ T31] usb 7-1: can't read configurations, error -61 [ 204.445370][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 204.451879][ T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 204.460087][ T10] usb 6-1: config 0 has no interface number 0 [ 204.466384][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 204.476573][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 204.487932][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 204.497550][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.505630][ T10] usb 6-1: Product: syz [ 204.509901][ T10] usb 6-1: Manufacturer: syz [ 204.514539][ T10] usb 6-1: SerialNumber: syz [ 204.515493][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 204.526250][ T10] usb 6-1: config 0 descriptor?? [ 204.532596][ T5225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 204.539887][ T5225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 204.638408][ T36] audit: type=1400 audit(1787775796.721:748): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 204.675391][ T319] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 204.676202][ T31] usb 7-1: too many configurations: 185, using maximum allowed: 8 [ 204.692550][ T31] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 204.700212][ T31] usb 7-1: can't read configurations, error -61 [ 204.706680][ T31] usb usb7-port1: attempt power cycle [ 204.748077][ T5225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 204.755640][ T5225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 204.835389][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 204.841655][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.852965][ T319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.866018][ T319] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 204.875110][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.884214][ T319] usb 3-1: config 0 descriptor?? [ 204.905396][ T318] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 204.963532][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 205.045348][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 205.066151][ T31] usb 7-1: too many configurations: 185, using maximum allowed: 8 [ 205.067005][ T318] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.076037][ T31] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 205.083670][ T318] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.090764][ T31] usb 7-1: can't read configurations, error -61 [ 205.105990][ T318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.115944][ T318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 205.127156][ T318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 205.139584][ T318] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.148902][ T318] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.156998][ T318] usb 4-1: Product: syz [ 205.161255][ T318] usb 4-1: Manufacturer: syz [ 205.175402][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 205.195776][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 205.207544][ T318] cdc_wdm 4-1:1.0: skipping garbage [ 205.212874][ T318] cdc_wdm 4-1:1.0: skipping garbage [ 205.226756][ T318] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 205.235491][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 205.236227][ T10] asix 6-1:0.34: probe with driver asix failed with error -32 [ 205.253086][ T318] cdc_wdm 4-1:1.0: Unknown control protocol [ 205.267318][ T31] usb 7-1: too many configurations: 185, using maximum allowed: 8 [ 205.277696][ T31] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 205.285433][ T31] usb 7-1: can't read configurations, error -61 [ 205.291906][ T31] usb usb7-port1: unable to enumerate USB device [ 205.306830][ T5230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.316059][ T5230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.325242][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.332406][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.339397][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.349135][ T10] usb 6-1: USB disconnect, device number 58 [ 205.356171][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.363730][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.370738][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.377870][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.384802][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.391893][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.398928][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.406000][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.413675][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.422929][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.430497][ T318] usb 4-1: USB disconnect, device number 114 [ 205.437166][ T319] acrux 0003:1A34:0802.0027: unknown main item tag 0x0 [ 205.444920][ T319] acrux 0003:1A34:0802.0027: unbalanced collection at end of report description [ 205.454959][ T319] acrux 0003:1A34:0802.0027: parse failed [ 205.460862][ T319] acrux 0003:1A34:0802.0027: probe with driver acrux failed with error -22 [ 205.534450][ T10] usb 3-1: USB disconnect, device number 103 [ 205.961744][ T5238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1278'. [ 206.162638][ T36] audit: type=1404 audit(1787775798.241:749): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 206.178649][ T36] audit: type=1400 audit(1787775798.261:750): avc: denied { read write } for pid=5241 comm="syz.5.1280" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 206.786960][ T5270] futex_atomic_op_inuser: 56 callbacks suppressed [ 206.786977][ T5270] futex_wake_op: syz.2.1288 tries to shift op by 144; fix this program [ 206.983983][ T5295] .N: renamed from veth0_to_bond (while UP) [ 208.052412][ T36] kauditd_printk_skb: 181 callbacks suppressed [ 208.052433][ T36] audit: type=1400 audit(1787775800.131:932): avc: denied { read write } for pid=5335 comm="syz.2.1314" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 208.361459][ T36] audit: type=1400 audit(1787775800.441:933): avc: denied { read write } for pid=297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.385603][ T36] audit: type=1400 audit(1787775800.461:934): avc: denied { create } for pid=5337 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 208.406290][ T36] audit: type=1400 audit(1787775800.461:935): avc: denied { create } for pid=5337 comm="syz.3.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 208.427186][ T36] audit: type=1400 audit(1787775800.481:936): avc: denied { read write } for pid=297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.451350][ T36] audit: type=1400 audit(1787775800.501:937): avc: denied { read append } for pid=5339 comm="syz.3.1316" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 208.474883][ T36] audit: type=1400 audit(1787775800.541:938): avc: denied { create } for pid=5339 comm="syz.3.1316" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 208.496767][ T36] audit: type=1400 audit(1787775800.541:939): avc: denied { read write } for pid=5339 comm="syz.3.1316" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 208.520900][ T36] audit: type=1400 audit(1787775800.561:940): avc: denied { read write } for pid=5339 comm="syz.3.1316" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 208.555307][ T36] audit: type=1400 audit(1787775800.631:941): avc: denied { read write } for pid=5194 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 209.203064][ T5372] netlink: 'syz.2.1329': attribute type 2 has an invalid length. [ 209.211409][ T5372] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1329'. [ 210.336321][ T5426] syzkaller1: entered promiscuous mode [ 210.341839][ T5426] syzkaller1: entered allmulticast mode [ 210.412479][ T5430] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1348'. [ 211.523828][ T5474] netlink: 'syz.6.1364': attribute type 4 has an invalid length. [ 211.531904][ T5474] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1364'. [ 212.507671][ T5498] syzkaller1: entered promiscuous mode [ 212.513333][ T5498] syzkaller1: entered allmulticast mode [ 212.827836][ T5507] futex_wake_op: syz.2.1379 tries to shift op by 144; fix this program [ 213.099524][ T36] kauditd_printk_skb: 355 callbacks suppressed [ 213.099546][ T36] audit: type=1400 audit(1787775805.181:1297): avc: denied { read write } for pid=2503 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.130528][ T36] audit: type=1400 audit(1787775805.201:1298): avc: denied { create } for pid=5523 comm="syz.5.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 213.156551][ T36] audit: type=1400 audit(1787775805.241:1299): avc: denied { read write } for pid=5194 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.186808][ T36] audit: type=1400 audit(1787775805.241:1300): avc: denied { read write } for pid=2503 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.211170][ T36] audit: type=1400 audit(1787775805.271:1301): avc: denied { read write } for pid=5526 comm="syz.6.1386" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 213.234864][ T36] audit: type=1400 audit(1787775805.271:1302): avc: denied { read write } for pid=5528 comm="syz.5.1387" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 213.258578][ T36] audit: type=1400 audit(1787775805.281:1303): avc: denied { read } for pid=5528 comm="syz.5.1387" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 213.279964][ T36] audit: type=1400 audit(1787775805.281:1304): avc: denied { read write } for pid=5526 comm="syz.6.1386" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 213.303650][ T36] audit: type=1400 audit(1787775805.281:1305): avc: denied { read append } for pid=5526 comm="syz.6.1386" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 213.327493][ T36] audit: type=1400 audit(1787775805.281:1306): avc: denied { read write } for pid=5526 comm="syz.6.1386" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 213.747340][ T5553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1397'. [ 215.636418][ T5648] futex_wake_op: syz.5.1430 tries to shift op by 144; fix this program [ 216.254942][ T5678] netlink: 'syz.5.1440': attribute type 16 has an invalid length. [ 216.426284][ T1136] bridge_slave_1: left allmulticast mode [ 216.432049][ T1136] bridge_slave_1: left promiscuous mode [ 216.445387][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.465788][ T1136] bridge_slave_0: left allmulticast mode [ 216.471510][ T1136] bridge_slave_0: left promiscuous mode [ 216.484543][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.588064][ T1136] veth1_macvtap: left promiscuous mode [ 216.593650][ T1136] veth0_vlan: left promiscuous mode [ 218.111453][ T5712] netlink: 'syz.5.1453': attribute type 12 has an invalid length. [ 218.119830][ T36] kauditd_printk_skb: 241 callbacks suppressed [ 218.119850][ T36] audit: type=1400 audit(1787775810.201:1548): avc: denied { read write } for pid=5710 comm="syz.3.1455" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 218.157268][ T36] audit: type=1404 audit(1787775810.201:1549): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 218.172851][ T36] audit: type=1400 audit(1787775810.201:1550): avc: denied { read write } for pid=5710 comm="syz.3.1455" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.196564][ T36] audit: type=1400 audit(1787775810.201:1551): avc: denied { open } for pid=5710 comm="syz.3.1455" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.220036][ T36] audit: type=1400 audit(1787775810.201:1552): avc: denied { ioctl } for pid=5710 comm="syz.3.1455" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.245071][ T36] audit: type=1400 audit(1787775810.211:1553): avc: denied { create } for pid=5711 comm="syz.2.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 218.265550][ T36] audit: type=1400 audit(1787775810.241:1554): avc: denied { read write } for pid=296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.289816][ T36] audit: type=1400 audit(1787775810.241:1555): avc: denied { open } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.313784][ T36] audit: type=1400 audit(1787775810.241:1556): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.365385][ T319] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 218.515437][ T319] usb 4-1: Using ep0 maxpacket: 8 [ 218.521319][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.529835][ T319] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.538693][ T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.548897][ T319] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.557892][ T319] usb 4-1: config 1 has no interface number 1 [ 218.564087][ T319] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 218.577153][ T319] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.590113][ T319] usb 4-1: config 1 interface 2 has no altsetting 0 [ 218.598104][ T319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.607266][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.615324][ T319] usb 4-1: Product: syz [ 218.619582][ T319] usb 4-1: Manufacturer: syz [ 218.624203][ T319] usb 4-1: SerialNumber: syz [ 218.804898][ T36] audit: type=1400 audit(1787775810.881:1557): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 218.855573][ T319] usb 4-1: USB disconnect, device number 115 [ 218.977137][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.984328][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.991761][ T5735] bridge_slave_0: entered allmulticast mode [ 218.998379][ T5735] bridge_slave_0: entered promiscuous mode [ 219.005195][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.012589][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.021897][ T5735] bridge_slave_1: entered allmulticast mode [ 219.028489][ T5735] bridge_slave_1: entered promiscuous mode [ 219.085415][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.092533][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.099897][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.106989][ T5735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.130492][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.138378][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.148825][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.155934][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.175340][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 219.184154][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.191357][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.214820][ T5735] veth0_vlan: entered promiscuous mode [ 219.226935][ T5735] veth1_macvtap: entered promiscuous mode [ 219.347604][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.382894][ T10] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 33715, setting to 1024 [ 219.404762][ T10] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 219.415020][ T10] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.436839][ T10] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 219.451137][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.465331][ T10] usb 6-1: Product: syz [ 219.469959][ T10] usb 6-1: Manufacturer: syz [ 219.474669][ T10] usb 6-1: SerialNumber: syz [ 219.481157][ T10] usb-storage 6-1:1.0: USB Mass Storage device detected [ 219.497127][ T10] scsi host1: usb-storage 6-1:1.0 [ 219.683896][ T319] usb 6-1: USB disconnect, device number 59 [ 219.693236][ T5781] size and base must be multiples of 4 kiB [ 219.725356][ T5781] CPU: 1 UID: 0 PID: 5781 Comm: syz.7.1466 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 219.725394][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.725408][ T5781] Call Trace: [ 219.725416][ T5781] [ 219.725424][ T5781] __dump_stack+0x21/0x30 [ 219.725459][ T5781] dump_stack_lvl+0x140/0x1c0 [ 219.725488][ T5781] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.725517][ T5781] ? __cfi_futex_wait+0x10/0x10 [ 219.725539][ T5781] dump_stack+0x19/0x20 [ 219.725569][ T5781] mtrr_add+0xd8/0x100 [ 219.725595][ T5781] mtrr_ioctl+0xbd8/0x1170 [ 219.725624][ T5781] ? do_futex+0x32a/0x510 [ 219.725655][ T5781] ? __cfi_mtrr_ioctl+0x10/0x10 [ 219.725685][ T5781] ? __cfi_mtrr_ioctl+0x10/0x10 [ 219.725712][ T5781] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 219.725739][ T5781] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 219.725762][ T5781] __se_sys_ioctl+0x135/0x1b0 [ 219.725792][ T5781] __x64_sys_ioctl+0x7f/0xa0 [ 219.725820][ T5781] x64_sys_call+0x1878/0x2ee0 [ 219.725843][ T5781] do_syscall_64+0x57/0xf0 [ 219.725876][ T5781] ? clear_bhb_loop+0x50/0xa0 [ 219.725900][ T5781] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 219.725934][ T5781] RIP: 0033:0x7f5cd699e0d9 [ 219.725954][ T5781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.725974][ T5781] RSP: 002b:00007f5cd78c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.726000][ T5781] RAX: ffffffffffffffda RBX: 00007f5cd6c25fa0 RCX: 00007f5cd699e0d9 [ 219.726018][ T5781] RDX: 0000200000000900 RSI: 0000000040104d01 RDI: 0000000000000003 [ 219.726034][ T5781] RBP: 00007f5cd6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 219.726050][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.726066][ T5781] R13: 00007f5cd6c26038 R14: 00007f5cd6c25fa0 R15: 00007fff42b605b8 [ 219.726087][ T5781] [ 219.776284][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 220.035070][ T5788] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1468'. [ 220.096744][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.107630][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.126195][ T5794] 9pnet: Could not find request transport: xen [ 220.132927][ T10] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 220.142467][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.161744][ T10] usb 4-1: Product: syz [ 220.175389][ T10] usb 4-1: Manufacturer: syz [ 220.180160][ T10] usb 4-1: SerialNumber: syz [ 220.191679][ T10] usb 4-1: unsupported MDLM descriptors [ 220.371475][ T5801] x_tables: duplicate entry at hook 1 [ 220.394797][ T318] usb 4-1: USB disconnect, device number 116 ? [ 220.496580][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 220.646992][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.668120][ T10] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 220.677635][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.687753][ T10] usb 3-1: Product: syz [ 220.691980][ T10] usb 3-1: Manufacturer: syz [ 220.696677][ T319] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 220.711072][ T10] usb 3-1: SerialNumber: syz [ 220.884602][ T319] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.893502][ T319] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 220.903916][ T319] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.936378][ T319] usb 6-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 220.947429][ T10] usb 3-1: USB disconnect, device number 105 [ 220.956963][ T319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.980085][ T319] usb 6-1: Product: syz [ 220.984340][ T319] usb 6-1: Manufacturer: syz [ 220.994801][ T5729] udevd[5729]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.999606][ T319] usb 6-1: SerialNumber: syz [ 221.534537][ T319] usb 6-1: USB disconnect, device number 60 [ 221.604372][ T5717] udevd[5717]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.655356][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 221.785335][ T10] usb 4-1: device descriptor read/64, error -71 [ 222.045327][ T10] usb 4-1: device descriptor read/64, error -71 [ 222.285366][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 222.305400][ T319] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 222.425349][ T10] usb 4-1: device descriptor read/64, error -71 [ 222.445342][ T319] usb 6-1: device descriptor read/64, error -71 [ 222.536982][ T5854] FAULT_INJECTION: forcing a failure. [ 222.536982][ T5854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.565338][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.2.1486 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 222.565383][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.565405][ T5854] Call Trace: [ 222.565415][ T5854] [ 222.565426][ T5854] __dump_stack+0x21/0x30 [ 222.565468][ T5854] dump_stack_lvl+0x140/0x1c0 [ 222.565505][ T5854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.565544][ T5854] dump_stack+0x19/0x20 [ 222.565578][ T5854] should_fail_ex+0x3c2/0x510 [ 222.565609][ T5854] should_fail+0xf/0x20 [ 222.565636][ T5854] should_fail_usercopy+0x1e/0x30 [ 222.565668][ T5854] strncpy_from_user+0x29/0x280 [ 222.565699][ T5854] getname_flags+0x106/0x6b0 [ 222.565731][ T5854] __se_sys_statx+0x19c/0x470 [ 222.565766][ T5854] ? __x64_sys_statx+0xf0/0xf0 [ 222.565801][ T5854] ? vfs_write+0xbcf/0xfd0 [ 222.565831][ T5854] ? __cfi_vfs_write+0x10/0x10 [ 222.565859][ T5854] ? __kasan_check_write+0x18/0x20 [ 222.565886][ T5854] ? mutex_unlock+0x90/0x240 [ 222.565913][ T5854] ? __cfi_mutex_unlock+0x10/0x10 [ 222.565942][ T5854] ? __kasan_check_write+0x18/0x20 [ 222.565968][ T5854] ? fput+0x1a4/0x230 [ 222.566003][ T5854] ? ksys_write+0x1f3/0x260 [ 222.566031][ T5854] ? __cfi_ksys_write+0x10/0x10 [ 222.566061][ T5854] __x64_sys_statx+0xc3/0xf0 [ 222.566096][ T5854] x64_sys_call+0x2e78/0x2ee0 [ 222.566127][ T5854] do_syscall_64+0x57/0xf0 [ 222.566163][ T5854] ? clear_bhb_loop+0x50/0xa0 [ 222.566191][ T5854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 222.566218][ T5854] RIP: 0033:0x7f67aa19e0d9 [ 222.566275][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.566298][ T5854] RSP: 002b:00007f67ab068028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 222.566327][ T5854] RAX: ffffffffffffffda RBX: 00007f67aa426090 RCX: 00007f67aa19e0d9 [ 222.566348][ T5854] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 222.566367][ T5854] RBP: 00007f67ab068090 R08: 0000000000000000 R09: 0000000000000000 [ 222.566385][ T5854] R10: 2dd8806920477201 R11: 0000000000000246 R12: 0000000000000001 [ 222.566403][ T5854] R13: 00007f67aa426128 R14: 00007f67aa426090 R15: 00007ffe56934058 [ 222.566427][ T5854] [ 222.855324][ T10] usb 4-1: device descriptor read/64, error -71 [ 222.861829][ T319] usb 6-1: device descriptor read/64, error -71 [ 222.964074][ T5820] syz.7.1475 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 222.965821][ T10] usb usb4-port1: attempt power cycle [ 222.974000][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.7.1475 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 222.974086][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.974137][ T5820] Call Trace: [ 222.974159][ T5820] [ 222.974168][ T5820] __dump_stack+0x21/0x30 [ 222.974280][ T5820] dump_stack_lvl+0x140/0x1c0 [ 222.974356][ T5820] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.974440][ T5820] ? ___ratelimit+0x41c/0x5c0 [ 222.974495][ T5820] ? __kasan_check_write+0x18/0x20 [ 222.974558][ T5820] dump_stack+0x19/0x20 [ 222.974668][ T5820] dump_header+0xd9/0x460 [ 222.974754][ T5820] oom_kill_process+0x35d/0x640 [ 222.974822][ T5820] out_of_memory+0x5d1/0xa20 [ 222.974893][ T5820] ? __cfi_out_of_memory+0x10/0x10 [ 222.974959][ T5820] ? mutex_lock_killable+0x97/0x1d0 [ 222.975022][ T5820] ? __cfi_mutex_lock_killable+0x10/0x10 [ 222.975093][ T5820] mem_cgroup_out_of_memory+0x2c5/0x390 [ 222.975201][ T5820] ? css_next_descendant_pre+0x1ec/0x210 [ 222.975280][ T5820] ? __kasan_check_write+0x18/0x20 [ 222.975344][ T5820] ? drain_obj_stock+0xec0/0xec0 [ 222.975410][ T5820] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 222.975476][ T5820] try_charge_memcg+0x925/0xe10 [ 222.975590][ T5820] ? static_key_count+0x45/0x70 [ 222.975690][ T5820] ? lruvec_init+0x1a1/0x280 [ 222.975765][ T5820] ? __cfi_try_charge_memcg+0x10/0x10 [ 222.975843][ T5820] ? __alloc_pages_noprof+0x35a/0x7e0 [ 222.975931][ T5820] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 222.976056][ T5820] __mem_cgroup_charge+0xfc/0x420 [ 222.976117][ T5820] ? do_pte_missing+0x3894/0x4440 [ 222.976179][ T5820] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 222.976242][ T5820] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 222.976325][ T5820] ? shmem_replace_folio+0x9b0/0x9b0 [ 222.976399][ T5820] ? shmem_huge_global_enabled+0x2da/0x360 [ 222.976471][ T5820] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 222.976544][ T5820] ? __kasan_check_write+0x18/0x20 [ 222.976600][ T5820] ? _raw_spin_lock+0x92/0x120 [ 222.976705][ T5820] shmem_get_folio_gfp+0x5cd/0x12e0 [ 222.976779][ T5820] ? shmem_get_folio+0xc0/0xc0 [ 222.976843][ T5820] ? follow_page_pte+0x8fb/0xba0 [ 222.976943][ T5820] ? inode_to_bdi+0x6d/0x100 [ 222.977060][ T5820] shmem_write_begin+0xf4/0x260 [ 222.977138][ T5820] generic_perform_write+0x32c/0x970 [ 222.977225][ T5820] ? __cfi_generic_perform_write+0x10/0x10 [ 222.977309][ T5820] ? generic_write_checks_count+0x426/0x540 [ 222.977393][ T5820] ? file_update_time+0xa3/0x210 [ 222.977478][ T5820] shmem_file_write_iter+0x105/0x130 [ 222.977564][ T5820] __kernel_write_iter+0x45f/0x900 [ 222.977628][ T5820] ? __cfi___kernel_write_iter+0x10/0x10 [ 222.977692][ T5820] ? get_dump_page+0x165/0x220 [ 222.977776][ T5820] ? __asan_memset+0x39/0x50 [ 222.977831][ T5820] ? iov_iter_bvec+0xc0/0x180 [ 222.977915][ T5820] dump_user_range+0xb8b/0xe60 [ 222.977989][ T5820] ? __cfi_dump_user_range+0x10/0x10 [ 222.978054][ T5820] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 222.978151][ T5820] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 222.978236][ T5820] ? elf_core_dump+0x23cf/0x3840 [ 222.978343][ T5820] elf_core_dump+0x2d61/0x3840 [ 222.978434][ T5820] ? __cfi_elf_core_dump+0x10/0x10 [ 222.978509][ T5820] ? mas_next_slot+0xf01/0xfd0 [ 222.978592][ T5820] ? dump_interrupted+0xf0/0xf0 [ 222.978665][ T5820] ? 0xffffffffff600000 [ 222.978709][ T5820] ? put_dmabuf_info+0xf5/0x200 [ 222.978797][ T5820] do_coredump+0x20d2/0x3050 [ 222.978873][ T5820] ? __cfi_do_coredump+0x10/0x10 [ 222.978934][ T5820] ? asm_exc_page_fault+0x2b/0x30 [ 222.979011][ T5820] ? __kasan_slab_free+0x6a/0x80 [ 222.979087][ T5820] ? get_signal+0xa2a/0x1490 [ 222.979166][ T5820] get_signal+0x11bf/0x1490 [ 222.979252][ T5820] arch_do_signal_or_restart+0xbc/0x700 [ 222.979316][ T5820] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 222.979408][ T5820] ? __bad_area_nosemaphore+0x2fb/0x680 [ 222.979441][ T5820] irqentry_exit_to_user_mode+0x4d/0xb0 [ 222.979467][ T5820] irqentry_exit+0x16/0x60 [ 222.979489][ T5820] exc_page_fault+0x65/0xc0 [ 222.979512][ T5820] asm_exc_page_fault+0x2b/0x30 [ 222.979534][ T5820] RIP: 0033:0x7f5cd6853bd7 [ 222.979608][ T5820] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 222.979696][ T5820] RSP: 002b:00007f5cd78aa120 EFLAGS: 00010202 [ 222.979756][ T5820] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5cd699e0d9 [ 222.979801][ T5820] RDX: 00007f5cd78aa140 RSI: 00007f5cd78aa270 RDI: 000000000000000b [ 222.979844][ T5820] RBP: 00007f5cd6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 222.979885][ T5820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.979926][ T5820] R13: 00007f5cd6c26038 R14: 00007f5cd6c25fa0 R15: 00007fff42b605b8 [ 222.979980][ T5820] [ 222.981157][ T5820] memory: usage 307200kB, limit 307200kB, failcnt 15270 [ 223.115430][ T319] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 223.118480][ T5820] memory+swap: usage 363796kB, limit 9007199254740988kB, failcnt 0 [ 223.255587][ T319] usb 6-1: device descriptor read/64, error -71 [ 223.259200][ T5820] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 223.331490][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 223.331555][ T36] audit: type=1400 audit(1787775815.411:1626): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 223.334434][ T5820] Memory cgroup stats for /syz7 [ 223.385721][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 223.396378][ T5820] : [ 223.457312][ T10] usb 4-1: device descriptor read/8, error -71 [ 223.460286][ T5820] cache 310673408 [ 223.531420][ T5820] rss 2437120 [ 223.534886][ T5820] rss_huge 2097152 [ 223.538847][ T5820] shmem 310665216 [ 223.542732][ T5820] mapped_file 0 [ 223.546260][ T5820] dirty 0 [ 223.549215][ T5820] writeback 0 [ 223.552504][ T5820] workingset_refault_anon 33 [ 223.557176][ T5820] workingset_refault_file 3850 [ 223.561956][ T5820] swap 57954304 [ 223.565464][ T5820] swapcached 270336 [ 223.569283][ T5820] pgpgin 102395 [ 223.572737][ T5820] pgpgout 26106 [ 223.575396][ T319] usb 6-1: device descriptor read/64, error -71 [ 223.576274][ T5820] pgfault 6440 [ 223.585886][ T5820] pgmajfault 30 [ 223.589372][ T5820] inactive_anon 248193024 [ 223.593721][ T5820] active_anon 66371584 [ 223.597889][ T5820] inactive_file 8192 [ 223.601804][ T5820] active_file 0 [ 223.605353][ T5820] unevictable 0 [ 223.606744][ T10] usb 4-1: device descriptor read/8, error -71 [ 223.608827][ T5820] hierarchical_memory_limit 314572800 [ 223.620926][ T5820] hierarchical_memsw_limit 9223372036854771712 [ 223.627167][ T5820] total_cache 310673408 [ 223.631352][ T5820] total_rss 2437120 [ 223.635222][ T5820] total_rss_huge 2097152 [ 223.639552][ T5820] total_shmem 310665216 [ 223.643735][ T5820] total_mapped_file 0 [ 223.647799][ T5820] total_dirty 0 [ 223.651290][ T5820] total_writeback 0 [ 223.655149][ T5820] total_workingset_refault_anon 33 [ 223.660326][ T5820] total_workingset_refault_file 3850 [ 223.665656][ T5820] total_swap 57954304 [ 223.669662][ T5820] total_swapcached 270336 [ 223.674005][ T5820] total_pgpgin 102395 [ 223.678042][ T5820] total_pgpgout 26106 [ 223.682055][ T5820] total_pgfault 6440 [ 223.686054][ T5820] total_pgmajfault 30 [ 223.690062][ T5820] total_inactive_anon 248193024 [ 223.694942][ T5820] total_active_anon 66371584 [ 223.697362][ T319] usb usb6-port1: attempt power cycle [ 223.699705][ T5820] total_inactive_file 8192 [ 223.709402][ T5820] total_active_file 0 [ 223.713404][ T5820] total_unevictable 0 [ 223.717529][ T5820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1446,pid=5761,uid=0 [ 223.732453][ T5820] Memory cgroup out of memory: Killed process 5761 (syz.7.1446) total-vm:90456kB, anon-rss:1232kB, file-rss:26416kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 223.865327][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 223.914056][ T10] usb 4-1: device descriptor read/8, error -71 [ 223.944251][ T36] audit: type=1400 audit(1787775816.021:1627): avc: denied { setopt } for pid=5868 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.980207][ T36] audit: type=1400 audit(1787775816.021:1628): avc: denied { read } for pid=5868 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.026275][ T5809] syz.7.1474 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 224.041584][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.7.1474 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 224.041622][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.041637][ T5809] Call Trace: [ 224.041645][ T5809] [ 224.041654][ T5809] __dump_stack+0x21/0x30 [ 224.041693][ T5809] dump_stack_lvl+0x140/0x1c0 [ 224.041725][ T5809] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.041756][ T5809] ? ___ratelimit+0x41c/0x5c0 [ 224.041778][ T5809] ? __kasan_check_write+0x18/0x20 [ 224.041803][ T5809] dump_stack+0x19/0x20 [ 224.041832][ T5809] dump_header+0xd9/0x460 [ 224.041862][ T5809] oom_kill_process+0x35d/0x640 [ 224.041890][ T5809] out_of_memory+0x5d1/0xa20 [ 224.041916][ T5809] ? __cfi_out_of_memory+0x10/0x10 [ 224.041941][ T5809] ? mutex_lock_killable+0x97/0x1d0 [ 224.041965][ T5809] ? __cfi_mutex_lock_killable+0x10/0x10 [ 224.042002][ T5809] mem_cgroup_out_of_memory+0x2c5/0x390 [ 224.042028][ T5809] ? css_next_descendant_pre+0x1ec/0x210 [ 224.042056][ T5809] ? __kasan_check_write+0x18/0x20 [ 224.042080][ T5809] ? drain_obj_stock+0xec0/0xec0 [ 224.042106][ T5809] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 224.042132][ T5809] try_charge_memcg+0x925/0xe10 [ 224.042163][ T5809] ? static_key_count+0x45/0x70 [ 224.042194][ T5809] ? lruvec_init+0x1a1/0x280 [ 224.042221][ T5809] ? __cfi_try_charge_memcg+0x10/0x10 [ 224.042254][ T5809] ? __alloc_pages_noprof+0x35a/0x7e0 [ 224.042288][ T5809] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 224.042323][ T5809] __mem_cgroup_charge+0xfc/0x420 [ 224.042345][ T5809] ? do_pte_missing+0x3894/0x4440 [ 224.042375][ T5809] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 224.042399][ T5809] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 224.042429][ T5809] ? shmem_replace_folio+0x9b0/0x9b0 [ 224.042457][ T5809] ? shmem_huge_global_enabled+0x2da/0x360 [ 224.042486][ T5809] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 224.042515][ T5809] ? __kasan_check_write+0x18/0x20 [ 224.042539][ T5809] ? _raw_spin_lock+0x92/0x120 [ 224.042572][ T5809] shmem_get_folio_gfp+0x5cd/0x12e0 [ 224.042602][ T5809] ? shmem_get_folio+0xc0/0xc0 [ 224.042628][ T5809] ? __kasan_check_write+0x18/0x20 [ 224.042652][ T5809] ? inode_to_bdi+0x6d/0x100 [ 224.042688][ T5809] shmem_write_begin+0xf4/0x260 [ 224.042717][ T5809] generic_perform_write+0x32c/0x970 [ 224.042751][ T5809] ? inode_update_timestamps+0x4d1/0x6e0 [ 224.042789][ T5809] ? __cfi_generic_perform_write+0x10/0x10 [ 224.042821][ T5809] ? generic_write_checks_count+0x426/0x540 [ 224.042854][ T5809] ? mnt_get_write_access_file+0x1af/0x3b0 [ 224.042888][ T5809] ? mnt_put_write_access_file+0xc2/0x100 [ 224.042923][ T5809] ? file_update_time+0x1de/0x210 [ 224.042958][ T5809] shmem_file_write_iter+0x105/0x130 [ 224.043000][ T5809] __kernel_write_iter+0x45f/0x900 [ 224.043026][ T5809] ? __cfi___kernel_write_iter+0x10/0x10 [ 224.043052][ T5809] ? get_dump_page+0x165/0x220 [ 224.043085][ T5809] ? __asan_memset+0x39/0x50 [ 224.043109][ T5809] ? iov_iter_bvec+0xc0/0x180 [ 224.043144][ T5809] dump_user_range+0xb8b/0xe60 [ 224.043174][ T5809] ? __cfi_dump_user_range+0x10/0x10 [ 224.043200][ T5809] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 224.043237][ T5809] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 224.043274][ T5809] ? elf_core_dump+0x23cf/0x3840 [ 224.043307][ T5809] elf_core_dump+0x2d61/0x3840 [ 224.043341][ T5809] ? __cfi_elf_core_dump+0x10/0x10 [ 224.043371][ T5809] ? mas_next_slot+0xf01/0xfd0 [ 224.043405][ T5809] ? dump_interrupted+0xf0/0xf0 [ 224.043429][ T5809] ? filp_open+0x199/0x1f0 [ 224.043463][ T5809] ? 0xffffffffff600000 [ 224.043483][ T5809] do_coredump+0x20d2/0x3050 [ 224.043512][ T5809] ? __cfi_do_coredump+0x10/0x10 [ 224.043535][ T5809] ? asm_exc_page_fault+0x2b/0x30 [ 224.043568][ T5809] ? __kasan_slab_free+0x6a/0x80 [ 224.043596][ T5809] ? get_signal+0xa2a/0x1490 [ 224.043628][ T5809] get_signal+0x11bf/0x1490 [ 224.043664][ T5809] arch_do_signal_or_restart+0xbc/0x700 [ 224.043688][ T5809] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 224.043714][ T5809] ? __bad_area_nosemaphore+0x2fb/0x680 [ 224.043739][ T5809] irqentry_exit_to_user_mode+0x4d/0xb0 [ 224.043768][ T5809] irqentry_exit+0x16/0x60 [ 224.043795][ T5809] exc_page_fault+0x65/0xc0 [ 224.043821][ T5809] asm_exc_page_fault+0x2b/0x30 [ 224.043844][ T5809] RIP: 0033:0x7f5cd699e0e1 [ 224.043863][ T5809] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 224.043884][ T5809] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 224.043906][ T5809] RAX: 0000000000000000 RBX: 00007f5cd6c25fa0 RCX: 00007f5cd699e0d9 [ 224.043924][ T5809] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 224.043940][ T5809] RBP: 00007f5cd6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 224.043956][ T5809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.043971][ T5809] R13: 00007f5cd6c26038 R14: 00007f5cd6c25fa0 R15: 00007fff42b605b8 [ 224.044000][ T5809] [ 224.044010][ T5809] memory: usage 307196kB, limit 307200kB, failcnt 19796 [ 224.068644][ T10] usb 4-1: device descriptor read/8, error -71 [ 224.069075][ T5809] memory+swap: usage 362176kB, limit 9007199254740988kB, failcnt 0 [ 224.075413][ T319] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 224.076474][ T5809] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 224.107225][ T319] usb 6-1: device descriptor read/8, error -71 [ 224.145494][ T5809] Memory cgroup stats for [ 224.185921][ T10] usb usb4-port1: unable to enumerate USB device [ 224.239939][ T5809] /syz7 [ 224.295609][ T5874] netlink: 'syz.2.1491': attribute type 27 has an invalid length. [ 224.296437][ T36] audit: type=1400 audit(1787775816.371:1629): avc: denied { append } for pid=5873 comm="syz.2.1491" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.328546][ T319] usb 6-1: device descriptor read/8, error -71 [ 224.345501][ T36] audit: type=1400 audit(1787775816.371:1630): avc: denied { create } for pid=5873 comm="syz.2.1491" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.377125][ T5809] : [ 224.415541][ T36] audit: type=1400 audit(1787775816.431:1631): avc: denied { read } for pid=5873 comm="syz.2.1491" name="file2" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.425180][ T5809] cache 291758080 [ 224.435428][ T36] audit: type=1400 audit(1787775816.431:1632): avc: denied { open } for pid=5873 comm="syz.2.1491" path="/368/file2" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.440402][ T5809] rss 2437120 [ 224.444520][ T36] audit: type=1400 audit(1787775816.431:1633): avc: denied { create } for pid=5873 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.615822][ T319] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 224.619903][ T5809] rss_huge 2097152 [ 224.668163][ T319] usb 6-1: device descriptor read/8, error -71 [ 224.669429][ T36] audit: type=1400 audit(1787775816.431:1634): avc: denied { setopt } for pid=5873 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.735405][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 224.755761][ T5809] shmem 291749888 [ 224.763126][ T5809] mapped_file 0 [ 224.785308][ T5809] dirty 0 [ 224.788390][ T5809] writeback 69632 [ 224.792109][ T5809] workingset_refault_anon 33 [ 224.798760][ T36] audit: type=1400 audit(1787775816.441:1635): avc: denied { ioctl } for pid=5873 comm="syz.2.1491" path="/368/file2" dev="tmpfs" ino=2021 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 224.829037][ T319] usb 6-1: device descriptor read/8, error -71 [ 224.840382][ T5809] workingset_refault_file 3850 [ 224.855718][ T5809] swap 57888768 [ 224.859325][ T5809] swapcached 335872 [ 224.863174][ T5809] pgpgin 102395 [ 224.867041][ T5809] pgpgout 30680 [ 224.870640][ T5809] pgfault 6440 [ 224.874131][ T5809] pgmajfault 30 [ 224.878009][ T5809] inactive_anon 57982976 [ 224.882333][ T5809] active_anon 237584384 [ 224.886780][ T5809] inactive_file 0 [ 224.890517][ T5809] active_file 8192 [ 224.908760][ T5809] unevictable 0 [ 224.912294][ T5809] hierarchical_memory_limit 314572800 [ 224.918031][ T5809] hierarchical_memsw_limit 9223372036854771712 [ 224.924229][ T5809] total_cache 291758080 [ 224.928770][ T5809] total_rss 2437120 [ 224.935419][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 224.940823][ T5809] total_rss_huge 2097152 [ 224.945216][ T5809] total_shmem 291749888 [ 224.946993][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.954671][ T5809] total_mapped_file 0 [ 224.958576][ T319] usb usb6-port1: unable to enumerate USB device [ 224.965435][ T5809] total_dirty 0 [ 224.972014][ T5809] total_writeback 69632 [ 224.981033][ T10] usb 4-1: config 0 has no interface number 0 [ 224.985554][ T5809] total_workingset_refault_anon 33 [ 224.998396][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 225.007878][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.018794][ T10] usb 4-1: Product: syz [ 225.023032][ T10] usb 4-1: Manufacturer: syz [ 225.027749][ T10] usb 4-1: SerialNumber: syz [ 225.034209][ T10] usb 4-1: config 0 descriptor?? [ 225.039502][ T5809] total_workingset_refault_file 3850 [ 225.045089][ T5809] total_swap 57888768 [ 225.049998][ T10] smsc95xx v2.0.0 [ 225.054022][ T5809] total_swapcached 335872 [ 225.058809][ T5809] total_pgpgin 102395 [ 225.062850][ T5809] total_pgpgout 30680 [ 225.068719][ T5809] total_pgfault 6440 [ 225.072767][ T5809] total_pgmajfault 30 [ 225.076839][ T5809] total_inactive_anon 57982976 [ 225.081840][ T5809] total_active_anon 237584384 [ 225.113798][ T5888] futex_wake_op: syz.5.1496 tries to shift op by 144; fix this program [ 225.132344][ T5809] total_inactive_file 0 [ 225.150361][ T5809] total_active_file 8192 [ 225.160951][ T5809] total_unevictable 0 [ 225.165083][ T5809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1446,pid=5763,uid=0 [ 225.180497][ T5809] Memory cgroup out of memory: OOM victim 5763 (syz.7.1446) is already exiting. Skip killing the task [ 225.265370][ T319] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 225.437191][ T319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.446183][ T319] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 225.457673][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 225.476719][ T319] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 225.495326][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 225.504572][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.514749][ T319] usb 3-1: Product: syz [ 225.523148][ T319] usb 3-1: Manufacturer: syz [ 225.535388][ T319] usb 3-1: SerialNumber: syz [ 225.750306][ T319] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 225.920586][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 225.940414][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 225.955386][ T319] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 225.968026][ T10] usb 4-1: USB disconnect, device number 121 [ 225.974851][ T319] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 226.365099][ T319] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 226.383103][ T319] usb 3-1: USB disconnect, device number 106 [ 226.402576][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.805364][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 226.815375][ T653] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 226.956421][ T10] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 226.966923][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.981245][ T653] usb 6-1: Using ep0 maxpacket: 16 [ 226.986658][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.993363][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 227.002826][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.011334][ T653] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 227.020043][ T653] usb 6-1: config 0 has no interface number 0 [ 227.026501][ T10] usb 4-1: config 0 descriptor?? [ 227.031733][ T653] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 227.042088][ T653] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 227.052938][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 227.061950][ T653] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 227.071222][ T653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.079370][ T653] usb 6-1: Product: syz [ 227.083641][ T653] usb 6-1: Manufacturer: syz [ 227.088314][ T653] usb 6-1: SerialNumber: syz [ 227.093818][ T653] usb 6-1: config 0 descriptor?? [ 227.099204][ T5905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.106577][ T5905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.314328][ T5905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.321689][ T5905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 227.581690][ T653] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 227.593916][ T653] asix 6-1:0.34: probe with driver asix failed with error -71 [ 227.602555][ T653] usb 6-1: USB disconnect, device number 65 [ 227.615511][ T5913] input: syz1 as /devices/virtual/input/input43 [ 227.788814][ T5917] FAULT_INJECTION: forcing a failure. [ 227.788814][ T5917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.802174][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: syz.2.1504 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 227.802200][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.802212][ T5917] Call Trace: [ 227.802219][ T5917] [ 227.802226][ T5917] __dump_stack+0x21/0x30 [ 227.802254][ T5917] dump_stack_lvl+0x140/0x1c0 [ 227.802276][ T5917] ? __cfi_dump_stack_lvl+0x10/0x10 [ 227.802298][ T5917] ? vsnprintf+0x7b4/0x1ad0 [ 227.802319][ T5917] ? check_stack_object+0x10f/0x150 [ 227.802337][ T5917] dump_stack+0x19/0x20 [ 227.802358][ T5917] should_fail_ex+0x3c2/0x510 [ 227.802378][ T5917] should_fail+0xf/0x20 [ 227.802395][ T5917] should_fail_usercopy+0x1e/0x30 [ 227.802415][ T5917] _copy_from_user+0x20/0xa0 [ 227.802438][ T5917] kstrtouint_from_user+0xde/0x170 [ 227.802457][ T5917] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 227.802474][ T5917] ? selinux_file_permission+0x318/0xb60 [ 227.802492][ T5917] ? __cfi_selinux_file_permission+0x10/0x10 [ 227.802509][ T5917] proc_fail_nth_write+0x8f/0x220 [ 227.802533][ T5917] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 227.802557][ T5917] ? bpf_lsm_file_permission+0xd/0x20 [ 227.802578][ T5917] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 227.802601][ T5917] vfs_write+0x3c4/0xfd0 [ 227.802619][ T5917] ? __cfi_vfs_write+0x10/0x10 [ 227.802635][ T5917] ? __kasan_check_write+0x18/0x20 [ 227.802651][ T5917] ? mutex_lock+0x97/0x1d0 [ 227.802667][ T5917] ? __cfi_mutex_lock+0x10/0x10 [ 227.802685][ T5917] ksys_write+0x145/0x260 [ 227.802701][ T5917] ? xfd_validate_state+0x68/0x140 [ 227.802724][ T5917] ? __cfi_ksys_write+0x10/0x10 [ 227.802741][ T5917] ? __kasan_check_read+0x15/0x20 [ 227.802757][ T5917] __x64_sys_write+0x7f/0x90 [ 227.802774][ T5917] x64_sys_call+0x271c/0x2ee0 [ 227.802789][ T5917] do_syscall_64+0x57/0xf0 [ 227.802810][ T5917] ? clear_bhb_loop+0x50/0xa0 [ 227.802827][ T5917] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 227.802850][ T5917] RIP: 0033:0x7f67aa15e90e [ 227.802864][ T5917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.802877][ T5917] RSP: 002b:00007f67ab067fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.802895][ T5917] RAX: ffffffffffffffda RBX: 00007f67ab0686c0 RCX: 00007f67aa15e90e [ 227.802908][ T5917] RDX: 0000000000000001 RSI: 00007f67ab0680a0 RDI: 0000000000000004 [ 227.802918][ T5917] RBP: 00007f67ab068090 R08: 0000000000000000 R09: 0000000000000000 [ 227.802928][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.802939][ T5917] R13: 00007f67aa426128 R14: 00007f67aa426090 R15: 00007ffe56934058 [ 227.802953][ T5917] [ 228.671430][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 228.671450][ T36] audit: type=1400 audit(1787775820.751:1668): avc: denied { read } for pid=5931 comm="syz.2.1511" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.700643][ T36] audit: type=1400 audit(1787775820.751:1669): avc: denied { open } for pid=5931 comm="syz.2.1511" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.734491][ T36] audit: type=1400 audit(1787775820.811:1670): avc: denied { append } for pid=5931 comm="syz.2.1511" name="uprobe_events" dev="tracefs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 229.229478][ T36] audit: type=1400 audit(1787775821.311:1671): avc: denied { unmount } for pid=2503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.276223][ T36] audit: type=1400 audit(1787775821.361:1672): avc: denied { lock } for pid=5966 comm="syz.7.1526" path="socket:[38954]" dev="sockfs" ino=38954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 229.295442][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 229.465349][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 229.476529][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.487095][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 254, using maximum allowed: 30 [ 229.498237][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 229.511658][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 229.522626][ T653] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 229.532227][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 229.541692][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.549974][ T10] usb 3-1: Product: syz [ 229.554306][ T10] usb 3-1: Manufacturer: syz [ 229.559251][ T10] usb 3-1: SerialNumber: syz [ 229.567825][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 229.586998][ T318] usb 4-1: USB disconnect, device number 122 [ 229.599299][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 229.626201][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 229.652820][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.696509][ T653] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.705338][ T653] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.715771][ T653] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.724781][ T653] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.736886][ T653] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.746073][ T653] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.754084][ T653] usb 6-1: Product: syz [ 229.758488][ T653] usb 6-1: Manufacturer: syz [ 229.766307][ T653] cdc_wdm 6-1:1.0: skipping garbage [ 229.775404][ T10] usb 3-1: USB disconnect, device number 107 [ 229.788566][ T653] cdc_wdm 6-1:1.0: skipping garbage [ 229.794545][ T653] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 229.800900][ T653] cdc_wdm 6-1:1.0: Unknown control protocol [ 229.968929][ T10] usb 6-1: USB disconnect, device number 66 [ 230.005388][ T318] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 230.045083][ T36] audit: type=1400 audit(1787775822.121:1673): avc: denied { write } for pid=5983 comm="syz.7.1533" name="dynamic_events" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 230.078308][ T36] audit: type=1400 audit(1787775822.161:1674): avc: denied { read } for pid=5985 comm="syz.7.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.177103][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.188501][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.198354][ T318] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.211481][ T318] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.220585][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.229681][ T318] usb 4-1: config 0 descriptor?? [ 230.430170][ T36] audit: type=1400 audit(1787775822.511:1675): avc: denied { remount } for pid=5995 comm="syz.2.1539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 230.482901][ T36] audit: type=1400 audit(1787775822.561:1676): avc: denied { ioctl } for pid=6003 comm="syz.2.1542" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.567379][ T36] audit: type=1400 audit(1787775822.651:1677): avc: denied { create } for pid=6010 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.647432][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.655360][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.662947][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.670593][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.678201][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.685787][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.693281][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.700844][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.708881][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.716504][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.724074][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.731655][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.739209][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.746757][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.754245][ T318] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 230.762731][ T318] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 230.772095][ T318] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 230.915814][ T318] usb 4-1: USB disconnect, device number 123 [ 231.745389][ T318] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 231.905350][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 231.912618][ T318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.927150][ T318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 231.947495][ T318] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 231.959110][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.975487][ T318] usb 3-1: Product: syz [ 231.984064][ T318] usb 3-1: Manufacturer: syz [ 231.994177][ T318] usb 3-1: SerialNumber: syz [ 232.003906][ T318] usb 3-1: config 0 descriptor?? [ 232.547518][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 234.521950][ T318] usb 3-1: USB disconnect, device number 108 [ 358.015495][ T37] INFO: task syz.3.1571:6074 blocked for more than 122 seconds. [ 358.023497][ T37] Not tainted syzkaller #0 [ 358.028580][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.037419][ T37] task:syz.3.1571 state:D stack:0 pid:6074 tgid:6074 ppid:297 flags:0x00000004 [ 358.047743][ T37] Call Trace: [ 358.051123][ T37] [ 358.054078][ T37] __schedule+0x1496/0x20b0 [ 358.058863][ T37] ? asm_exc_page_fault+0x2b/0x30 [ 358.064009][ T37] ? __sched_text_start+0x10/0x10 [ 358.069133][ T37] ? __kasan_check_write+0x18/0x20 [ 358.074554][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 358.080168][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 358.086126][ T37] ? folio_mark_accessed+0x35f/0x620 [ 358.091548][ T37] schedule+0xc5/0x240 [ 358.095714][ T37] io_schedule+0x88/0xe0 [ 358.099992][ T37] bit_wait_io+0x17/0xd0 [ 358.104281][ T37] __wait_on_bit+0xb3/0x2e0 [ 358.108852][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 358.113831][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 358.119369][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 358.124342][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 358.130390][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 358.136076][ T37] do_get_write_access+0x558/0xd70 [ 358.141360][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 358.147430][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 358.153739][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 358.160517][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 358.165783][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 358.171508][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 358.177237][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 358.182665][ T37] ext4_dirty_inode+0xc9/0x110 [ 358.187501][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 358.192910][ T37] __mark_inode_dirty+0x24e/0xc50 [ 358.198087][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 358.203684][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 358.209651][ T37] ? __kasan_check_read+0x15/0x20 [ 358.214715][ T37] file_update_time+0x1d3/0x210 [ 358.219738][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 358.224827][ T37] ? __kasan_check_write+0x18/0x20 [ 358.230078][ T37] ? folio_unlock+0x137/0x1b0 [ 358.234919][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 358.240483][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 358.246046][ T37] do_pte_missing+0x12c4/0x4440 [ 358.250983][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 358.256083][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 358.262055][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 358.267057][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 358.273365][ T37] handle_mm_fault+0x1189/0x1ba0 [ 358.278399][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 358.283812][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 358.289148][ T37] do_user_addr_fault+0x951/0x1230 [ 358.294433][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 358.300716][ T37] exc_page_fault+0x58/0xc0 [ 358.305285][ T37] asm_exc_page_fault+0x2b/0x30 [ 358.310222][ T37] RIP: 0033:0x7f0eeaa6ba23 [ 358.314640][ T37] RSP: 002b:00007fffc3a16d60 EFLAGS: 00010246 [ 358.320795][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f164000 [ 358.328824][ T37] RDX: 0000001b2f124000 RSI: 0000000000400000 RDI: 00007f0eeade0708 [ 358.336874][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.344877][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.352928][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffc3a16ff0 [ 358.360958][ T37] [ 358.364026][ T37] INFO: task syz.7.1572:6075 blocked for more than 123 seconds. [ 358.371705][ T37] Not tainted syzkaller #0 [ 358.376682][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.385408][ T37] task:syz.7.1572 state:D stack:0 pid:6075 tgid:6075 ppid:5735 flags:0x00000004 [ 358.395634][ T37] Call Trace: [ 358.398923][ T37] [ 358.401862][ T37] __schedule+0x1496/0x20b0 [ 358.406444][ T37] ? __sched_text_start+0x10/0x10 [ 358.411524][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 358.417022][ T37] ? __kasan_check_write+0x18/0x20 [ 358.422253][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 358.427782][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 358.433821][ T37] ? folio_mark_accessed+0x35f/0x620 [ 358.439214][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 358.445562][ T37] schedule+0xc5/0x240 [ 358.449647][ T37] io_schedule+0x88/0xe0 [ 358.453891][ T37] bit_wait_io+0x17/0xd0 [ 358.458194][ T37] __wait_on_bit+0xb3/0x2e0 [ 358.462896][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 358.467918][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 358.473507][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 358.478500][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 358.484613][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 358.490151][ T37] do_get_write_access+0x558/0xd70 [ 358.495332][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 358.501327][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 358.507548][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 358.514263][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 358.519380][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 358.525067][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 358.530688][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 358.536113][ T37] ext4_dirty_inode+0xc9/0x110 [ 358.540893][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 358.546328][ T37] __mark_inode_dirty+0x24e/0xc50 [ 358.551391][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 358.557027][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 358.562899][ T37] ? __kasan_check_read+0x15/0x20 [ 358.567991][ T37] file_update_time+0x1d3/0x210 [ 358.572892][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 358.578019][ T37] ? __kasan_check_write+0x18/0x20 [ 358.583182][ T37] ? folio_unlock+0x137/0x1b0 [ 358.587952][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 358.593470][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 358.598911][ T37] do_pte_missing+0x12c4/0x4440 [ 358.603819][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 358.608908][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 358.614849][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 358.619871][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 358.626177][ T37] handle_mm_fault+0x1189/0x1ba0 [ 358.631140][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 358.636503][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 358.641840][ T37] do_user_addr_fault+0x951/0x1230 [ 358.647052][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 358.653169][ T37] exc_page_fault+0x58/0xc0 [ 358.657770][ T37] asm_exc_page_fault+0x2b/0x30 [ 358.662739][ T37] RIP: 0033:0x7f5cd686ba23 [ 358.667251][ T37] RSP: 002b:00007fff42b60720 EFLAGS: 00010246 [ 358.673362][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32364000 [ 358.681403][ T37] RDX: 0000001b32324000 RSI: 0000000000400000 RDI: 00007f5cd6be0708 [ 358.689460][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.697506][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.705556][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff42b609b0 [ 358.713571][ T37] [ 358.716685][ T37] INFO: task syz.5.1573:6076 blocked for more than 123 seconds. [ 358.724341][ T37] Not tainted syzkaller #0 [ 358.729358][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.738099][ T37] task:syz.5.1573 state:D stack:0 pid:6076 tgid:6076 ppid:2503 flags:0x00000004 [ 358.748332][ T37] Call Trace: [ 358.751639][ T37] [ 358.754671][ T37] __schedule+0x1496/0x20b0 [ 358.759258][ T37] ? __sched_text_start+0x10/0x10 [ 358.764355][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 358.769723][ T37] ? __kasan_check_write+0x18/0x20 [ 358.774907][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 358.780448][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 358.786495][ T37] ? folio_mark_accessed+0x35f/0x620 [ 358.791801][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 358.798056][ T37] schedule+0xc5/0x240 [ 358.802173][ T37] io_schedule+0x88/0xe0 [ 358.806497][ T37] bit_wait_io+0x17/0xd0 [ 358.810945][ T37] __wait_on_bit+0xb3/0x2e0 [ 358.815768][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 358.820755][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 358.826290][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 358.831281][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 358.837386][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 358.842890][ T37] do_get_write_access+0x558/0xd70 [ 358.848090][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 358.854120][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 358.860395][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 358.867191][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 358.872258][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 358.877984][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 358.883576][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 358.889046][ T37] ext4_dirty_inode+0xc9/0x110 [ 358.893851][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 358.899307][ T37] __mark_inode_dirty+0x24e/0xc50 [ 358.904374][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 358.910006][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 358.915899][ T37] ? __kasan_check_read+0x15/0x20 [ 358.920939][ T37] file_update_time+0x1d3/0x210 [ 358.925871][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 358.930968][ T37] ? __kasan_check_write+0x18/0x20 [ 358.936139][ T37] ? folio_unlock+0x137/0x1b0 [ 358.940869][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 358.946396][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 358.951817][ T37] do_pte_missing+0x12c4/0x4440 [ 358.956781][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 358.961841][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 358.967812][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 358.972807][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 358.979326][ T37] handle_mm_fault+0x1189/0x1ba0 [ 358.984399][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 358.989755][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 358.995001][ T37] do_user_addr_fault+0x951/0x1230 [ 359.000204][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 359.006355][ T37] exc_page_fault+0x58/0xc0 [ 359.010872][ T37] asm_exc_page_fault+0x2b/0x30 [ 359.015826][ T37] RIP: 0033:0x7f890aa6ba23 [ 359.020278][ T37] RSP: 002b:00007fffc70cb180 EFLAGS: 00010246 [ 359.026433][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31264000 [ 359.034537][ T37] RDX: 0000001b31224000 RSI: 0000000000400000 RDI: 00007f890ade0708 [ 359.042579][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.050601][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 359.058631][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffc70cb410 [ 359.066672][ T37] [ 359.069704][ T37] INFO: task syz.2.1574:6077 blocked for more than 123 seconds. [ 359.077401][ T37] Not tainted syzkaller #0 [ 359.082359][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.091104][ T37] task:syz.2.1574 state:D stack:0 pid:6077 tgid:6077 ppid:296 flags:0x00000004 [ 359.101337][ T37] Call Trace: [ 359.104637][ T37] [ 359.107644][ T37] __schedule+0x1496/0x20b0 [ 359.112300][ T37] ? __sched_text_start+0x10/0x10 [ 359.117431][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 359.122781][ T37] ? __kasan_check_write+0x18/0x20 [ 359.127974][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 359.133564][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 359.139668][ T37] ? folio_mark_accessed+0x35f/0x620 [ 359.144998][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 359.151270][ T37] schedule+0xc5/0x240 [ 359.155439][ T37] io_schedule+0x88/0xe0 [ 359.159715][ T37] bit_wait_io+0x17/0xd0 [ 359.163973][ T37] __wait_on_bit+0xb3/0x2e0 [ 359.168530][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 359.173587][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 359.179132][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 359.184123][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 359.190173][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 359.195703][ T37] do_get_write_access+0x558/0xd70 [ 359.200849][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 359.206921][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 359.213123][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 359.219878][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 359.224945][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 359.230662][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 359.236270][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 359.241682][ T37] ext4_dirty_inode+0xc9/0x110 [ 359.246517][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 359.251942][ T37] __mark_inode_dirty+0x24e/0xc50 [ 359.257039][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 359.262706][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 359.268603][ T37] ? __kasan_check_read+0x15/0x20 [ 359.273662][ T37] file_update_time+0x1d3/0x210 [ 359.278601][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 359.283679][ T37] ? __kasan_check_write+0x18/0x20 [ 359.288863][ T37] ? folio_unlock+0x137/0x1b0 [ 359.293591][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 359.299115][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 359.304529][ T37] do_pte_missing+0x12c4/0x4440 [ 359.309457][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 359.314522][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 359.320514][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 359.325506][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 359.331768][ T37] handle_mm_fault+0x1189/0x1ba0 [ 359.336785][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 359.342105][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 359.347389][ T37] do_user_addr_fault+0x951/0x1230 [ 359.352565][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 359.358716][ T37] exc_page_fault+0x58/0xc0 [ 359.363272][ T37] asm_exc_page_fault+0x2b/0x30 [ 359.368185][ T37] RIP: 0033:0x7f67aa06ba23 [ 359.372628][ T37] RSP: 002b:00007ffe569341c0 EFLAGS: 00010246 [ 359.378782][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f064000 [ 359.386807][ T37] RDX: 0000001b2f024000 RSI: 0000000000400000 RDI: 00007f67aa3e0708 [ 359.394791][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.402847][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 359.410957][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe56934450 [ 359.419014][ T37] [ 359.422138][ T37] NMI backtrace for cpu 1 [ 359.422198][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 359.422241][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.422252][ T37] Call Trace: [ 359.422258][ T37] [ 359.422265][ T37] __dump_stack+0x21/0x30 [ 359.422347][ T37] dump_stack_lvl+0x140/0x1c0 [ 359.422370][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 359.422393][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x6d6/0xa50 [ 359.422440][ T37] dump_stack+0x19/0x20 [ 359.422462][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 359.422517][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 359.422541][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 359.422562][ T37] ? sched_show_task+0x371/0x530 [ 359.422604][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 359.422626][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.422687][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.422709][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 359.422738][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 359.422786][ T37] watchdog+0xe45/0xf90 [ 359.422825][ T37] ? __kasan_check_write+0x18/0x20 [ 359.422844][ T37] ? __cfi_watchdog+0x10/0x10 [ 359.422861][ T37] ? __kasan_check_read+0x15/0x20 [ 359.422877][ T37] ? __kthread_parkme+0x12f/0x180 [ 359.422915][ T37] ? schedule+0xc5/0x240 [ 359.422938][ T37] kthread+0x2c7/0x360 [ 359.422956][ T37] ? __cfi_watchdog+0x10/0x10 [ 359.422973][ T37] ? __cfi_kthread+0x10/0x10 [ 359.422991][ T37] ret_from_fork+0x67/0xa0 [ 359.423031][ T37] ? __cfi_kthread+0x10/0x10 [ 359.423050][ T37] ret_from_fork_asm+0x1a/0x30 [ 359.423066][ T37] [ 359.423073][ T37] Sending NMI from CPU 1 to CPUs 0: [ 359.594383][ C0] NMI backtrace for cpu 0 [ 359.594438][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 359.594462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.594474][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 359.594502][ C0] Code: cc cc cc cc cc cc cc b8 f7 6a 7e 97 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 b9 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 359.594517][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 359.594533][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a4a4fd [ 359.594547][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000547b1c [ 359.594558][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 359.594571][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 359.594584][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ecc9a8 [ 359.594598][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 359.594613][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.594625][ C0] CR2: 00007fbf5f7ffffc CR3: 000000010cb5a000 CR4: 00000000003526b0 [ 359.594641][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 359.594651][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 359.594663][ C0] Call Trace: [ 359.594669][ C0] [ 359.594677][ C0] default_idle+0x17/0x30 [ 359.594699][ C0] arch_cpu_idle+0xd/0x20 [ 359.594719][ C0] default_idle_call+0x3e/0x80 [ 359.594754][ C0] do_idle+0x1df/0x570 [ 359.594843][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 359.594872][ C0] cpu_startup_entry+0x47/0x60 [ 359.594905][ C0] rest_init+0x10b/0x130 [ 359.594936][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 359.595059][ C0] start_kernel+0x462/0x4bb [ 359.595087][ C0] x86_64_start_reservations+0x2e/0x30 [ 359.595111][ C0] x86_64_start_kernel+0x6a/0x7b [ 359.595135][ C0] common_startup_64+0x13b/0x157 [ 359.595213][ C0]