last executing test programs: 6.928640069s ago: executing program 1 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="2ef30f090f21a8f343ab0f20e035004000000f22e0d9b8be4377880fc72fc482dd02d1670f01598bc482b5bda349b382ad0f2b5b5c", 0x35}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x41, 0x1, 0x7ff, 0x404}}], 0x38}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x6, 0x2, 0x0, 0x2, 0x6, 0xb, 0xfe, 0xfc, 0x12, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8000000000005}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x403, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) 6.772551182s ago: executing program 1 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = dup(r2) sendto$inet(r3, 0x0, 0x0, 0x50, 0x0, 0x0) r4 = accept$packet(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x50, &(0x7f00000002c0)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0x63) execve(0x0, &(0x7f0000000040)={[&(0x7f0000000000)='incremental-fs\x00']}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000005780)='./file0\x00', 0x44000201) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f00000003c0)=0xff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) r10 = openat$incfs(r8, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) 6.722495614s ago: executing program 1 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xd}}) syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 5.095751369s ago: executing program 3 (id=250): modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x3) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000001c000980080002123e189ace5586a404331458e69f34045ba7f2f506b8eb931fd263b1766190c5059bde8ab684f9a9b3466b12f39cee514f5563ced63320fce1aa306e0b853a3f3968b12e0f8ca3c2225fd71cccc02eca8fb17d392fa58cbe19468b7aac6335d1b4ab0875a34e6b7b93e0efdd6e16072d8e5f49b7"], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd99c68df069fd4f0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000240)={[0x517]}, 0x8, 0x80800) 4.292522636s ago: executing program 3 (id=252): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00', 0x290001, &(0x7f0000000180)={@align=0x100, {0x0, 0x12, 0x7fffffff, 0x6}}, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x1}, {[0x789, 0x8, 0x6dd, 0xd]}, 0x7, 0xd3, &(0x7f00000002c0)=""/211}) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000002ec0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ptrace(0x10, r1) (async, rerun: 32) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) chdir(&(0x7f0000000480)='./file0\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000060005000d000000", 0x24) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)=""/4101, 0x1005}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0xa38}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x120, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r5, 0x7, 0x0, 0x200, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x26, 0x21, 0x0, 0x0, {0x13}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @pid}]}, 0x24}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455cb, 0x0) (async) syz_usb_connect(0x5, 0x129, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 4.239761848s ago: executing program 3 (id=253): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008b507120300000000000109022d000100008000090400000903000600092181000901222800090581032000002bfe090502020004080707"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f0000000180)={0x20, 0x3, 0x34, {0x34, 0x22, "48e27f91038b2a7e3a3b7c3473b8e5a213ce690200"/50}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b8008000300", @ANYRES32=r2, @ANYBLOB="080001"], 0x34}], 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r4 = socket(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 3.646052701s ago: executing program 1 (id=255): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x88, 0x8, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x2c628fd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x800) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000013c0)={0x1f, 0x0, 0x1}, 0x6) 2.846405058s ago: executing program 3 (id=258): gettid() (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000180)=0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x30, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x30, 0xffffffffffffffff, 0xec776000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x502) ioctl$LOOP_CLR_FD(r10, 0x4c01) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d3f, 0x2000, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x3da, 0x0, 0x0}}, 0x0) 2.805979899s ago: executing program 3 (id=259): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x8a, 0xc9b8, 0x0, 0x2000000}}) (async, rerun: 64) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRESHEX=r3], 0x0) 2.243732471s ago: executing program 3 (id=260): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2) close(0x3) syz_usb_connect$midi(0x3, 0x3e, &(0x7f00000039c0)=ANY=[@ANYBLOB="120100030000010106200209040000020103200509050c08000200fd4a0425010009050e08400004080704250100"/62], &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000080)="611baae2b10399acc5603b1f9dc8bef50a55c4234189aa03db589444ae3b9fbdb4f7e0f5a8135fc74abee6e8f729d413adfa0362160574fbda09832bb39fe850f94b71028a8c1fdf7199d3acee014ea19292e9cdec9e5a2803b7404b460bf82393a132a7d16f71622fdf866bc4544a5333", 0x71}, {&(0x7f0000000100)="22cb8abc555c63458cf5c8641c3c8a9d8fc819d209e6b1e6a2b7928ec285caa7d9790a710dc13b157dbe2e22ad9d89be13a8dd05cc2884b273c4f3a1fe043a8844b23c7a80d97714dd91ddce12683ca0a8c0fe26f1361853178584d201a8e548bc464a7c76a87f3776da4ffd77d0e6f7c5c25ca0652afcd170e2c63701b3c7d8b11bf81d18b52df2353a4a7c0c7d3e16cc6037a35dc14f22c1c64c0536d0299b919aa7a5a08134aace8dc4e7a2c9604f8893e20dd5af22d6a207874af34faa19ebca52693a9caeb525ade299d6965d0a3c97b65f42684ae2361557dcc8eb0b", 0xdf}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="208506995e92d70c8b87b9f873cebc5c9da968d6d3b308ad0de73f208c9450c293013851beceefae1ecbde09686adbee0f2ce1cf1deebd22e1baa2a9c3437bd00c35eb46a724cb3c2862ffb16ca54f436bedf4850de89ed51a3351a6b3a11e867a10fdaf97f91fbc55871edaf01e413293d02b60769b3c7f29dc8a2eb4fd17e36a77147e03659df2e66c61496f9f72a1c615f4ec7efe94a3756e06655708556d9801ba5957", 0xa5}, {&(0x7f00000003c0)="b122a95bd5199702bfd445941a2d3beb5cfb90de616b298f0288573f53b9d4fb10db9bded52bac78db593759338745ff359f12fc1eb8259e2d739b6305c2711626804d29703728a0739c41c525d0c016d6dc059366e3d5", 0x57}, {&(0x7f0000000440)}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="9dc3ca0c0d7843ad38a2b32998c8b93e3c6bcdab50ff4559207ab5c1488f467424f5460a4997bdafa06a29a28bfa41c0e337e513519fae1116d24f2004975c5b1b6fd0f38e4a1bb4baecf0a3ecb02969e49e18946c770c7258162fad0af99324", 0x60}, {&(0x7f0000001500)="f1f84b3d39c69ce46bfa", 0xa}], 0x9}, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2) (async) close(0x3) (async) syz_usb_connect$midi(0x3, 0x3e, &(0x7f00000039c0)=ANY=[@ANYBLOB="120100030000010106200209040000020103200509050c08000200fd4a0425010009050e08400004080704250100"/62], &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000080)="611baae2b10399acc5603b1f9dc8bef50a55c4234189aa03db589444ae3b9fbdb4f7e0f5a8135fc74abee6e8f729d413adfa0362160574fbda09832bb39fe850f94b71028a8c1fdf7199d3acee014ea19292e9cdec9e5a2803b7404b460bf82393a132a7d16f71622fdf866bc4544a5333", 0x71}, {&(0x7f0000000100)="22cb8abc555c63458cf5c8641c3c8a9d8fc819d209e6b1e6a2b7928ec285caa7d9790a710dc13b157dbe2e22ad9d89be13a8dd05cc2884b273c4f3a1fe043a8844b23c7a80d97714dd91ddce12683ca0a8c0fe26f1361853178584d201a8e548bc464a7c76a87f3776da4ffd77d0e6f7c5c25ca0652afcd170e2c63701b3c7d8b11bf81d18b52df2353a4a7c0c7d3e16cc6037a35dc14f22c1c64c0536d0299b919aa7a5a08134aace8dc4e7a2c9604f8893e20dd5af22d6a207874af34faa19ebca52693a9caeb525ade299d6965d0a3c97b65f42684ae2361557dcc8eb0b", 0xdf}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="208506995e92d70c8b87b9f873cebc5c9da968d6d3b308ad0de73f208c9450c293013851beceefae1ecbde09686adbee0f2ce1cf1deebd22e1baa2a9c3437bd00c35eb46a724cb3c2862ffb16ca54f436bedf4850de89ed51a3351a6b3a11e867a10fdaf97f91fbc55871edaf01e413293d02b60769b3c7f29dc8a2eb4fd17e36a77147e03659df2e66c61496f9f72a1c615f4ec7efe94a3756e06655708556d9801ba5957", 0xa5}, {&(0x7f00000003c0)="b122a95bd5199702bfd445941a2d3beb5cfb90de616b298f0288573f53b9d4fb10db9bded52bac78db593759338745ff359f12fc1eb8259e2d739b6305c2711626804d29703728a0739c41c525d0c016d6dc059366e3d5", 0x57}, {&(0x7f0000000440)}, {&(0x7f0000000480)="6d7f1f66f0ea0cf04d4d86dcc4e3c8e880539d5991bd8a210f6057044249e90b7e819671f5890880dc1ce4a5a1d6e7739470f73668bf2db48255a54179677e7dd2136b047b903907ce8012876b775390895ae193052aebbcc5a94be7e18587f0f138900ae4fbc1b5ec891be3723a87f10a772de66710920ccbcda6c9a40631266fa8e374d89c6c93809551f4a79b0d96a0a5aff84c66040e26eb8024b34e309c53c927628939da963f293e669157683208871be1eae01fcb983b05ff40c3750d450cc4425e35aed3784ce54f242978514fd7db401cc09dc1aed9ee63e2274f4b1f6a2543142c73781246b54bc58eb09c9e457112e4cda8aeca19f719e032bd8d4b391aa8b002e87843aae36bc36dae81db9f8ca8dc897510a82a80cc00df17f5633221aeadca2df379f1577cbfc9d3e44655056cca7ec96b5ef418c03fc9d537a7a415fb1607ca512ce6ca9517bde1c763ed8848942cc7ba2c73a0978d04d6e66896e6684dfd9eb9792247f44fb8593af89f45774904885505af1c1d1bc4f855e1b895f9c47079fce7baddd3aa732420e491899e168260af0e51a187dfee423262dcce11f7fdd2a95d6a576e19385c193a28e35bb330ec7bb5c6a34f6341ef6151c4dda3ffc4d03d0ccbced62ba03a114ac436a0cd8ceaaceb5cb65c63a32cddee41be47a1652f3c344fa00357cea64de0c2e0944a79847bce80dfb6051fe6db54f5f794bb40a2c146cdd8cc5f744cebc8379515388e6353a2d2ac6cc203c06856d7af6844ba5ea0bc2106d9045a129e3b6267c1c0a9e8e619181fca1723cf96555d7c86b9f3ef0094fe67b40204eea5f7bd7af200a96eae26c0435b9fa32e4e4783537932a01d1407b250657b55ed573a05ef7726d71fad1ad127893d39c3d8bc8f103b0151846472e954bdf403378dc6d8effeb8f224fb528cfb573a28f1f6344f96042e50892e2f21d80dfe337fcc8d4470d33ce2ba9853a95139f3a1294d51ca32c85775e5d905d1a9168aea32f9d97eab44b492d19c0bb39472dc5dc6a9b92d380e3d391f6a423d505ef7713acd839e390aaea5735528b5745352886bf91708256acd2510c3a50de6710e6e51ee6370d7e174da0b3afc4bcc1890d48191f88c79f44ae761dca08721d1953a5410403118cc28e17c0c7aab84e80154a5310961a67cee3422fb2ccf63e459c8bf6ddbc76f615362a2b9198c1847e6c0913adf12652af4e922b1580a2b07c94e240aeed32c3002a7b1c63e877f5044924b50895bb49c4154cb989e714de753111d0a2dc2fbdabacabde2598aa99487c93ade31dbd40606824351e11c2213141cf055e4bc972b31f50bb6a2d0b96612d519e76273adbed0da9c34ba9a9ea1f14ddc22ec96427bccdfcbea8822eec5da824013b26f776fb52d8eb856e9863fe6017dab3b42cb4f909ee92ebbe3c42f4c3aa49da952af3108804fd1c07f238d8cafa1a521fb63d99abaa0c589485c4ab2fdcfa2b34013d7a645171805cb22f8b8cae5cb562e2d468034934c3857e38575c2184352fe79b932581eb15c1aafdcb7a7a186f4eaf5f0f672b0f17b0c8669043fa41462d25b2aa1f523e887f25877bc33ab5a7175279eb8583cc4840577ee0a8ab67be19e3c70eb61486de7446184aa573187b3f11c74462a3ae4b0bd3b650a22a77368aa48b5cea9cb51e1c03fac98756e329babcdd4af75306a112578c2b6436a37d93736cacb4f0a1269f23634bcff2c53ec51ead395f087b606e224dbdab52598b1fdd243cd51443ed4dcdfe2c8121006eba16e2f62da29e0455140c167d8f7b2fad247faa01acd184f94f1c262cb0731e11a25eb13c319a27b12b8172eb5fdf27054c3ba4e8093a696335fe735e4f7a9215e84c76977e123cc9a3dfe557f739ef98e3d6b80a09fd58988b5dbf7b08f9ce18c09275fa6ae4767d06d026422a0b98f1954c315073555fe627d94d7552d07843ab4d004ad302034530be84c3ec5a4e7ea6972861a35dd4ba5d70c295f9af6acf96a6551686ec2196c2c62d850883ae8596d0aa9682667b314a2952dca90833ad70b9c177063e5defa08266c2ab04e4401d6c2bed22789753d2c4110db4d590b056838717c15489ae9427ac60750b5afa0ee2c286088262754c977edf8c0535bacd88c0e8a339dc97e7067ac03f041e2c0a875b2a52b0bfd686455dd582edb6e92fd78f0abd06fe908fa03987cb369a48ed8f6c6aff8d43d19b3aa640ad7e989b2cf8f9a1a6b1bc885f83a6975f8a91999cd3af5f830380c52d923ffd32baee1c5dece0969ce5bb94eb802169b4d39ee91bd11a8af776ec68a5dfab106c7c2b4f3f2ef7db6ccbe9e5bac2f92a7f8e04797115a161cc536eb564bc3b3310a1bd31431e9a71a676d342f2b4cce42a2edf525b39cbd6f19cbdcc849e30a7ad77d24de4a647c595aa2733a7ea6d4d1def2569601ad923b59ead73671c55a188421c36ca08e1bfb96ab8eec2b37ccc7562ef74776539abaeafd8cfb6decd1f78f03a7cb153456624539e463b9d39a956b28fea462a635d9db155e082a09dc1b358cedaf9557ebe3103d30762a1b9848900713a55cc8c7fabd39611f3cb603c4d09fbb8e626de64d66feb661f58d608aa389e75bf69de0df583ff8a867c14c7a7be44b88c92f141ed976894c1441fcf785258028c07ee8d6821eefab111ace1dcc2f53147dd1d5c152f2807fa18cafaef8371777ad416f105c63f1fd42e11489511a3ecc5f7ad2f84091d02955a14326d004aa1080b18a46f0f1f6e90b22fd5ede8479fe4d13426bb6809b4acaad05ab33669779a1606bb2ae5804f1ce56fc02d9622c0a66065ac35b8d3ee21fbe031fbc6c0c2cde26a950d8e15165f8559766be022861acc7bb097c0369b95e463c5a32785d15d6be9d7cc9f84e87f8e79d2a19a6000940791798beba0f672f97348c697a8ec3725329126c857b5db73bf6e5a19b0d7bddce45dd435822a49a03be547a7f40a9ba8bce6f748d527fd9e28621defe36bfe70427147c21be680f14c43dbb5da4f3fe7bd5402ad6dfeea1f19a2ad3f4b87ea1b12ab9466b26e9aea997818670bd2b0b4381cd958f0b332a0696879882eae707485bda2b25e9ea38ac560c336bb30c07557203304ce4aa4d55746ed5b2c988df891a58a1aa3faeeb21bd4a97cd163610f6c2bada7d0bf9447cb4cd6de85989681e1638714cb4b12161fef5e321fa3e657c2320f947e38aa6d2ef0e3a8f813d16854110be0c117cb2c7973a53b328dcfd6a37d4d459ccb29c68c013d85656a7795318f71e3d33cd2dccb97b1d6f3d01b6d3b5708296f0812c89afb9ae2ce62e528d4ec0bdfb71a79583024c1498e383cf788830dacf5490906cfb4d58214a56de11ed13a958f00c537378f249dca298661dde032adb2ae972ec2ffac9a90d394be95fe57e5a4c0a0a3a3a2a31e799144669abe8f2a88b63a0b26d672142ff2099f191e7cb4cf100c18b9139107fdde084e827b41a24cd51ab8426d2f17ef47c3c1c744b79ba99f9eb494cf99456da8a07c7609c76915550c9ba3e8a79eae29308e5b715ac5afdad85f42aac05846007cbd72f739c634af79335eb4f0f22ed5ab8387564b2ca70392beaf9c012e5a001efa0cc3101b4f51c9fb02576becdb276ef40d5ee556fa49760a213f47a6fcff807e405c650232e01232acf92de4a7aa408119611fdc079103f30a86b25ba58c555fcde26a20e616afc2ceac14f3cf9904b8a8105334388b2d6cdc72dc5b53621157c8eb70cf7dfe8f3f09e919849e6e3127db59dbd3a425980a6799875576d7f8c75fbcb6bf9b80445001fdbc63f6377e38c46ee40154c26665e06e8e662ecbaab686105751ecbcbe348ac6f37463fc5e5abfda4d6d88cdd6570c2e22f9572f2f8125c9e2258a93bea867320ed4cd47c3b3180a7089d7b04f9603bc5fa3716edd689b24da5b88e28b31b7bc32eef6c684f26b25b99854d82a4ea421ebbc32ef5af2b3ba5b09775bd8e9f59cf72dc6e7f8b0af96edb4162e13d5cfbbd44d404c26cb2faaf6c6169e913146f81ddd3f938161e1c761305d44f632120b2b3d888e0212c329058e14b1fe22f3fe3fba6f86e4b960c9c32b38b143194663e747818f7fa825f555ffff6251b97e19f841c5cb0742d74adf53fc40db5ac6cbb00d64b9db6c7ee3833adbb6ee32f5f27c45b86bf0dda35b9c7dca14d88484d3374a9c232ef6cbc20be94a5dd9261ac5e0931b8cacc997b0a5d652a1f3e5b3af54cd9dfa5e2c3ae277f00c2ffc9946a8b8c3dcebddb57f7dbf96e63b37525b0a50786611be5e619734f94001bb667c85d07fa58b0df68717e9996b950b345558c430cd0f05077dbcd7f66d6f907cbbc339daf406b112476b45f4a906107db99ed254d667647eca76fff30912c9c7ce775a726680ca724c7a70a6a0eeede3ec175063ddac4104592b8da5dfd68854e7130d4a13241189690e45ac91a760adcf051c99ba7e80e17c70e5028d02ac4570a250b27ef0738cf71b4c5049756c82e8c5b0f541464947af4c4d12441e837853e4b057b7a54ae4cd8ebf8acbdfb9f8b9a84e21c20dcbceb01d8c728469d7973099d706d3a0ebc7072f06447467baa5a8e72144052ce465a5188013c4e1d0fddecd33f32bdf12297606c61c15a42a5422cdfe3f9bc5b33d72363d5b173a9b4940076e56afe45a82bd55a889bba677abd4faebff3b40419406de69c65619d985fb58cd282d1b69b4d1bb1a60b433b69c9adecc80fa1387d6dc2990d08857be77bfb873afacaa2a7c793b00d7b358b8dd741e1acbe143f965a726c5f9892c20a5a01f06572a52aebc3a02b3e27e0a152c76c2cf30396e26c533b417ccf87a91663ab622e371b33f20786a350b30a0e87bf154ff90fe95bba327fde152fedaa6b38b0692e088c2b82b1f107caa573a40a5837f2238e5b9b81e1dd31cd43cca02bde6f952adb8b6c72c987338b533c7832e0b17e16886534901bc6d1f05a6d61138cf9128f71f1c7fbbb0847c8c64a04ca7c98eda98bd073b910cf941a1d303d71046af03b6ab9ca366990ea3f76fffcf101c87420a79cedb1654c94ee2e794cc8271c59df77be809e944aca4cc684a0f8d2550166b127b37a4a749bb2680a0dcfd455392997cd7d907549bb0871bcfaa09720020e9c16af89c13be3440d97ecf3553449dc056ff3a707d80b0319e946075fe645fc3662f6a1c6901f911420e76c0efb09dc346ea706e3089a8b0d308e84af51d1b095ad621f9a7786d3e2dfa68a6e34bd76621c917f82d98948241dcbe82cadb6a709cc9d71146acb65c70ef9f37b880b9356cf733112c637fae8bad67c1b303831d2c399833ad7d75c5c7e01d03c05bda605909d0402d08cd587b035909fe70967a3d58542ef7fd96b09af828908c79e6823df7fc092fcc840d718cfc90c894d0d5c4675b5374158138613796ffb9f38e25ab5585e2455b0dc35a923a6579a319a324505dbf01d4c079ae4947ee5a5953423a34a4bdbb6d65d0caab050fcb43932e6f20054b3d81e6d7b1a708fa10e066d0ce1bedb5e1bc37ffe7412a94204f33c900a883414ed747165b681a6bcecb9c7ceecfe44bd78362bd5508ab119fbc4197e6dec15c97c16a3118818097f368ccb7a37552ab34a8501086d6c7ecc50e17b8aa1b2ebf1ef3922dbe62826ea1c12294d33b760123fa8f3466860c15fa87c0f2a393bc76c5342078191d03a277d5e704c05b6a10add288b666a05c0e58cffcc8f614ad083e1e6bbc3311b6d40081611f3ce573634f74a7fdeaeb9dac1fbeb2cc3", 0x1000}, {&(0x7f0000001480)="9dc3ca0c0d7843ad38a2b32998c8b93e3c6bcdab50ff4559207ab5c1488f467424f5460a4997bdafa06a29a28bfa41c0e337e513519fae1116d24f2004975c5b1b6fd0f38e4a1bb4baecf0a3ecb02969e49e18946c770c7258162fad0af99324", 0x60}, {&(0x7f0000001500)="f1f84b3d39c69ce46bfa", 0xa}], 0x9}, 0x84) (async) 2.215182532s ago: executing program 2 (id=261): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x24080, &(0x7f0000000540)=ANY=[@ANYBLOB="66553d9d69d05a014133fe1996eab03d8bc6f0aed8881b066ef111d99790a923186a4edc7286aabd20d47e4299b8586492437e6ddcbca9c7d0845e18ef97c223187d52c4462bfca0c153ed3b33b09f0b6b08f614c343a522a1bfd3ab0209606ef8bd25a853a2ded7bb4971a147ec05eef07c4c220bc5e8d4175ad391278c9fc0402a71db2a55432bc7e292861143d867cc76c3e6b5", @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x3b96f93a54ded331, 0x25000, 0x5, 0x0, 0x1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYRES64, @ANYBLOB="39ac83b3ecad8fc331399804c4357708624b0eb681cec5e9bf8ab53c019b826047da9dcf0b79494811a79b842d67f0c39fc99871a70987f241eb735a474473321a7b277d4cfeaa4a5d13410f8e529a98ca558450d6ec5a9106d3ffa9180c5cbec94991200d3a046937ecf7355ba0e69bab18c6eb6d68e360109061e0500b7a8eb13c5e9a7fdbfa88dff51ab933f20f4c2bdf4ba7a01d6e82c44ba579a55090c78cef18a71fc454ae5f868f8d11e8e728b14d6d77014550b4e07b585a93ada84b0937310ebda6c0c7732d950a43d7430a2568a8bef40448", @ANYRES32=0x0, @ANYBLOB="0600000000a8c61d2607fe20e9"], 0x26c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) read$FUSE(r0, &(0x7f000000a380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)={0x78, 0x0, 0x5, {0xbb5, 0x3fff8, 0x0, {0x3, 0x7, 0x9, 0xc, 0xfffffffffffffffe, 0x3ff, 0x9, 0x82e, 0x2, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x11, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/145, 0x91}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x4, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0x5}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4) syslog(0x4, 0xfffffffffffffffe, 0xff14) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x10, r7, 0x4000) bind$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 1.930584988s ago: executing program 0 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x88a8}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @timestamp={0xd, 0x0, 0x0, 0xfffc, 0x7ff, 0x7, 0x1ed689ef, 0x8}}}}}}, 0x42) 1.873000079s ago: executing program 0 (id=265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc4}) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ftruncate(r5, 0x4a0e876b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, r2}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.815754621s ago: executing program 0 (id=266): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x0, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000140)=0x7) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb5, 0x81, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x27ed4f847164e2a, 0x23, 0x29, {0x29, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b487a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.549675286s ago: executing program 1 (id=267): syz_usb_connect$uac3(0x0, 0xe2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000080c200b104000010203010902c40003010d5000080b0102012130010904000000010130000a24010f3b00080000000d240706050a00000007000000132403020504020604810000007f008000ff0711240a04050300000000000000000000000904010000010230000904010101010230001724017fff0100000b00070000000000000001800200930e2402020800020009996a2ab0310905010920000308d80a2525020000002dce00090402000001023000090402010101023000090571ee4000a010080a2525ff07000009720b"], 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000), 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x5, 0x4) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xc9b2, 0x4) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x9a, 0x0, 0x2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x40, 0xfffffff7, 0x6}}) close(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x118, 0x19, 0x2, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x14, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @typed={0x8, 0x8a, 0x0, 0x0, @u32=0x2}]}, @nested={0xf0, 0x6, 0x0, 0x1, [@nested={0xe9, 0x75, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @fd}, @generic="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf07015b904d89c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d3152396176", @generic="a1ec7a3d6e15d6fc413934dd337d9298cf54abdd5ca2eb62fa22ca66753aac8128da87cb1e7c6c04907bc027aa350610d1d238d9"]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x5}, 0x804) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x10000000000) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c0001802c00018014000300ff"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$packet(r4, &(0x7f0000000140)="f65eae484a50946de5f57a27891dfe346fddbbbce9bb1966af3756d1d5990387cb24617f70f167531d7c1cad6ad1403c24b7098e1eca930c0db0e33f3bdfbb24174bb53c81a32babb269ae251a65b6d3b6fe3741a04a8d15a23e4ca2ebb98312ddc11483eb95e430911770ba4e333a8f67082cae80eb82746b22d5d078", 0x7d, 0x14000850, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xe, 0x6, @local}, 0x14) 1.297767192s ago: executing program 2 (id=268): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="14"], 0x28}}], 0x1, 0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c4455acd3896e0b, 0x198) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000080)='./file1/file1\x00', 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000440)={[{0x81, 0xe, 0x1, 0x9, 0xc, 0xf9, 0x3, 0x4, 0x1, 0x0, 0xe5, 0x23, 0x4}, {0x5, 0x5, 0x3, 0x7, 0x1b, 0x64, 0x0, 0xe, 0x6, 0x33, 0xc, 0x10, 0xb1}, {0x200, 0x0, 0xfc, 0x3, 0x9, 0x2f, 0xfc, 0xf6, 0x99, 0x6, 0x6, 0x40, 0x8}], 0x5}) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x7, 0xf, 0x4, 0x4, "d53d59624238004a29a33cf842bdbce6530c84cbc4af99f0af327ed4a28e1ada"}) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000080005"], 0x30}}, 0x0) setfsuid(0xee01) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x54000, 0x0, {0x3}, 0x0, 0x7}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.171711594s ago: executing program 2 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D$\r'], 0x38}}], 0x1, 0x46000) 1.171596704s ago: executing program 2 (id=270): pivot_root(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 1.171260574s ago: executing program 2 (id=271): capset(0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc02c0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x18, 0x6, 0x4) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00062800", @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00062800", @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 336.431713ms ago: executing program 1 (id=272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x112, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x1c}}, 0x80) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="06"], 0x0) 165.850216ms ago: executing program 0 (id=273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x10002, 0x29) (async) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/12, 0xc}}], 0x1, 0x0, 0x0) (async) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000140)="800034ca269bb73c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000040)=0x7, 0x2) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) (async) syz_usb_connect$midi(0x4, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000002082054501400001020301090240000101181004090400000301030006090509022000000405072501033c375309050602ff03cc0600050525080b010725"], 0x0) 87.703018ms ago: executing program 0 (id=274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r3, 0x7, 0x0, 0x200, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0xcc840000) lseek(r4, 0xfffffffffffffff5, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000440)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/59, 0x0, 0x2, 0x1d}, @fda={0x66646185, 0x7, 0x1, 0x37}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000380)}}, @acquire_done={0x40106309, 0x3}, @exit_looper, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x80) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f00000005c0)={0xd000, 0x20000}) 87.288998ms ago: executing program 0 (id=275): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000600)={0x14, 0x39, 0x4, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x25}]}, 0x14}], 0x1}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000000180)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 0s ago: executing program 2 (id=276): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0x342, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ac055b02000000000001091f69fabf9d2f7c8e0904000001030003000921fd7f000122e301090581038936050a02"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x373e}) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r10 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r15 = syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x0, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r15, 0x202) ioctl$UBLK_U_CMD_SET_PARAMS(r5, 0xc0207508, &(0x7f00000007c0)={r15, 0xffff, 0x70, &(0x7f0000000480)={0x70, 0xc, {0x1, 0xa, 0xc, 0xff, 0x3, 0xf, 0x1, 0x2, 0x14}, {0x1, 0x0, 0xac5, 0x1de6e0, 0x1ff}, {0x9, 0x1ff, 0x4, 0x10000}, {0x4, 0x2, 0x6}}}) ioctl$TIOCSTI(r8, 0x5412, 0x0) syz_clone3(&(0x7f00000006c0)={0x1000000, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000340)=0x0, {0x1b}, &(0x7f0000000380)=""/236, 0xec, &(0x7f0000000580)=""/204, &(0x7f0000000680)=[0x0], 0x1}, 0x58) capset(&(0x7f0000000740)={0x19980330, r16}, &(0x7f0000000780)={0x4, 0x7, 0x7, 0x0, 0x4, 0xc}) clock_gettime(0x3, &(0x7f0000000040)) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000000)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_ublk_setup_queues(r1, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x17e}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x4000, 0x1, 0x42000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x3, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x20, 0x11, 0xdb, {0xdb, 0x8, "e7203c763483f0a139bb28ba449cfea73b1a62648830835055a3b59c61559e38015035cca98d6540b1a14ad93f63f2d23d7f5681cac4aefd015af5d23e4468da9884187dbc7e3b8ed01d6d68aa1192ed2b6a74f5c06a28af0088cd4b23e5d90afe5f6a97eb001dd5ceed688d6346d96787318827930fe1a074fbf342e54cb753d29718619d6e3db9da0f6e509453bb08662647182a578bbf46a105341bb2588efcadce6b264ba68e7770f238f3ec843f2dcaf579fcb8ec723fa041cef7bad010b46e811fd00d0e053fb57e20c0af5098fd0233a80f241ecb89"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000001240)={0x1c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0012dd000000537c00daf83719dc5590fdafb4e5ff5224599a88f1c9b569a8bfd04cc711aa3be5b1de3c3636936d5aa4584051877947161cab5f5db6247e93be84cb91bbebb18dad5e92f0286688418bc90046d8dd22d98a08171ccc4e0a1a238b02198a84fa4a6fcf6418585ef6a498195df028e62e5949ca5bd2b1baf1752d9c1166790d02b63eec16e57ff38c6763169c4360ccf28c301dc9b8e0c917022d2e92994cd96da78708da7475999ff372e388349604ee558e87cd137331e15f7282402ff7edbcf6c0aaf0c7631cecbc83924e9bfee0a7dee876ea5a0996106ea035c372"], &(0x7f0000000dc0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001200)=ANY=[@ANYBLOB="216e8e70a3920d3a78cf"]}) r17 = eventfd2(0x9, 0x801) write$eventfd(r17, &(0x7f00000000c0)=0x2, 0x8) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f00000000c0)=0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 21.494153][ T36] audit: type=1400 audit(1782959377.639:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.495287][ T286] cgroup: Unknown subsys name 'net' [ 21.516826][ T36] audit: type=1400 audit(1782959377.639:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.544112][ T36] audit: type=1400 audit(1782959377.679:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.544263][ T286] cgroup: Unknown subsys name 'devices' [ 21.651671][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.657275][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.749453][ T36] audit: type=1400 audit(1782959377.889:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.772782][ T36] audit: type=1400 audit(1782959377.889:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.780990][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.797649][ T36] audit: type=1400 audit(1782959377.889:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.829203][ T36] audit: type=1400 audit(1782959377.959:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.854724][ T36] audit: type=1400 audit(1782959377.959:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.888872][ T36] audit: type=1400 audit(1782959378.039:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.914793][ T36] audit: type=1400 audit(1782959378.039:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.915186][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.721999][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.729044][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.736175][ T294] bridge_slave_0: entered allmulticast mode [ 22.742343][ T294] bridge_slave_0: entered promiscuous mode [ 22.756624][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.763680][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.770777][ T294] bridge_slave_1: entered allmulticast mode [ 22.776908][ T294] bridge_slave_1: entered promiscuous mode [ 22.796550][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.803671][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.810898][ T295] bridge_slave_0: entered allmulticast mode [ 22.817031][ T295] bridge_slave_0: entered promiscuous mode [ 22.824621][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.831683][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.838711][ T293] bridge_slave_0: entered allmulticast mode [ 22.844956][ T293] bridge_slave_0: entered promiscuous mode [ 22.853990][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.861041][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.868072][ T293] bridge_slave_1: entered allmulticast mode [ 22.874380][ T293] bridge_slave_1: entered promiscuous mode [ 22.880362][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.887381][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.894539][ T295] bridge_slave_1: entered allmulticast mode [ 22.900734][ T295] bridge_slave_1: entered promiscuous mode [ 22.931661][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.938697][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.945755][ T296] bridge_slave_0: entered allmulticast mode [ 22.952009][ T296] bridge_slave_0: entered promiscuous mode [ 22.958306][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.965360][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.972434][ T296] bridge_slave_1: entered allmulticast mode [ 22.978693][ T296] bridge_slave_1: entered promiscuous mode [ 23.110404][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.117446][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.125084][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.132109][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.148282][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.155342][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.162612][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.169630][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.200382][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.207409][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.214686][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.221715][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.238851][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.245907][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.253180][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.260207][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.268446][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.275758][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.283516][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.290706][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.297805][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.305051][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.312486][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.319705][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.331777][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.338801][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.360672][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.367687][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.393497][ T296] veth0_vlan: entered promiscuous mode [ 23.405218][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.412261][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.423823][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.430862][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.447006][ T296] veth1_macvtap: entered promiscuous mode [ 23.454271][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.461314][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.472025][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.479065][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.504141][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.511186][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.529214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.536263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.549632][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.576424][ T294] veth0_vlan: entered promiscuous mode [ 23.593032][ T295] veth0_vlan: entered promiscuous mode [ 23.618394][ T295] veth1_macvtap: entered promiscuous mode [ 23.621919][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.649614][ T294] veth1_macvtap: entered promiscuous mode [ 23.659255][ T293] veth0_vlan: entered promiscuous mode [ 23.698999][ T293] veth1_macvtap: entered promiscuous mode [ 23.772364][ T327] fuse: Bad value for 'fd' [ 23.798351][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.798385][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.844799][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.844830][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.858505][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.858528][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.865308][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.036104][ T359] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.073738][ T364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.189962][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.229932][ T319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.339853][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 24.345988][ T310] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 24.354345][ T310] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 24.364879][ T310] usb 3-1: config 0 has no interface number 0 [ 24.372563][ T310] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 24.382828][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.390876][ T319] usb 4-1: Using ep0 maxpacket: 32 [ 24.396027][ T310] usb 3-1: Product: syz [ 24.400260][ T310] usb 3-1: Manufacturer: syz [ 24.404946][ T310] usb 3-1: SerialNumber: syz [ 24.410339][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.418219][ T310] usb 3-1: config 0 descriptor?? [ 24.423231][ T318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.431676][ T310] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 24.438022][ T310] usb 3-1: No valid video chain found. [ 24.445627][ T319] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 24.454766][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.462979][ T319] usb 4-1: Product: syz [ 24.467819][ T319] usb 4-1: Manufacturer: syz [ 24.472500][ T319] usb 4-1: SerialNumber: syz [ 24.580924][ T318] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.591864][ T318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 24.598509][ T318] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 24.607579][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.616182][ T318] usb 1-1: config 0 descriptor?? [ 24.680732][ T319] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 24.687645][ T319] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 24.698330][ T319] usb 4-1: USB disconnect, device number 2 [ 24.713770][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.027307][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.034816][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.042458][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.050049][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.057339][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.064825][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.072228][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.079490][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.086981][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.094537][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.104125][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.117727][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.125363][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.132697][ T382] fuse: Bad value for 'fd' [ 25.137364][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.145540][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.152900][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.160472][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.167912][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.180193][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.188895][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.197000][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.206638][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.221095][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.228991][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.240618][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.247918][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.255409][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.267752][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.275927][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.283621][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.292107][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.299352][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.307054][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.315143][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.322602][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.329827][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.337050][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.344583][ T318] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 25.352874][ T318] greenasia 0003:0E8F:0012.0001: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 25.365230][ T318] greenasia 0003:0E8F:0012.0001: no inputs found [ 25.396519][ T318] usb 1-1: USB disconnect, device number 2 [ 25.431241][ T405] process 'syz.1.27' launched './file1' with NULL argv: empty string added [ 25.450779][ T410] fuse: Bad value for 'fd' [ 25.504928][ T416] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 25.513428][ T416] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 26.212212][ T421] netlink: 'syz.3.33': attribute type 27 has an invalid length. [ 26.518138][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 26.518155][ T36] audit: type=1400 audit(1782959382.659:154): avc: denied { create } for pid=444 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.545080][ T36] audit: type=1400 audit(1782959382.659:155): avc: denied { setopt } for pid=444 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.565151][ T36] audit: type=1400 audit(1782959382.659:156): avc: denied { create } for pid=444 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.586522][ T36] audit: type=1400 audit(1782959382.659:157): avc: denied { setopt } for pid=444 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.611172][ T36] audit: type=1400 audit(1782959382.659:158): avc: denied { getopt } for pid=444 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.636969][ T36] audit: type=1400 audit(1782959382.789:159): avc: denied { read } for pid=451 comm="syz.1.43" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.669261][ T36] audit: type=1400 audit(1782959382.789:160): avc: denied { open } for pid=451 comm="syz.1.43" path="net:[4026532468]" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.708066][ T464] 9pnet: Could not find request transport: xen [ 26.713587][ T36] audit: type=1400 audit(1782959382.809:161): avc: denied { setopt } for pid=455 comm="syz.3.44" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.751249][ T36] audit: type=1400 audit(1782959382.889:162): avc: denied { getopt } for pid=467 comm="syz.1.50" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.906419][ T9] usb 3-1: USB disconnect, device number 2 [ 26.921791][ T36] audit: type=1400 audit(1782959383.069:163): avc: denied { bind } for pid=473 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.049870][ T319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.099966][ T318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.199849][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 27.205929][ T319] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 27.214032][ T319] usb 2-1: config 0 has no interface number 0 [ 27.221410][ T319] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.230524][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.238551][ T319] usb 2-1: Product: syz [ 27.242718][ T319] usb 2-1: Manufacturer: syz [ 27.247297][ T319] usb 2-1: SerialNumber: syz [ 27.252785][ T319] usb 2-1: config 0 descriptor?? [ 27.258412][ T318] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 27.267905][ T319] smsc95xx v2.0.0 [ 27.271566][ T318] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 27.279615][ T318] usb 4-1: Product: syz [ 27.285842][ T318] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 27.293690][ T318] usb 4-1: Detected FT4233HP [ 27.459869][ T319] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 27.470614][ T319] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.670418][ T319] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 27.681239][ T319] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 27.877069][ T498] FAULT_INJECTION: forcing a failure. [ 27.877069][ T498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.890192][ T498] CPU: 0 UID: 0 PID: 498 Comm: syz.2.58 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 27.890219][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.890238][ T498] Call Trace: [ 27.890243][ T498] [ 27.890248][ T498] __dump_stack+0x21/0x30 [ 27.890283][ T498] dump_stack_lvl+0x140/0x1c0 [ 27.890305][ T498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.890329][ T498] ? check_stack_object+0x81/0x150 [ 27.890342][ T498] ? __virt_addr_valid+0x2a1/0x370 [ 27.890354][ T498] dump_stack+0x19/0x20 [ 27.890366][ T498] should_fail_ex+0x3c2/0x510 [ 27.890378][ T498] should_fail+0xf/0x20 [ 27.890388][ T498] should_fail_usercopy+0x1e/0x30 [ 27.890402][ T498] _copy_from_user+0x20/0xa0 [ 27.890424][ T498] memdup_user+0x81/0x170 [ 27.890448][ T498] ? strndup_user+0x40/0xd0 [ 27.890470][ T498] strndup_user+0x6c/0xd0 [ 27.890485][ T498] __se_sys_mount+0x9f/0x480 [ 27.890496][ T498] ? ksys_write+0x1f3/0x260 [ 27.890506][ T498] ? __x64_sys_mount+0xf0/0xf0 [ 27.890516][ T498] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 27.890530][ T498] __x64_sys_mount+0xc3/0xf0 [ 27.890544][ T498] x64_sys_call+0x2021/0x2ee0 [ 27.890560][ T498] do_syscall_64+0x57/0xf0 [ 27.890577][ T498] ? clear_bhb_loop+0x50/0xa0 [ 27.890598][ T498] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.890617][ T498] RIP: 0033:0x7fc5f839de59 [ 27.890630][ T498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.890638][ T498] RSP: 002b:00007fc5f91c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.890658][ T498] RAX: ffffffffffffffda RBX: 00007fc5f8625fa0 RCX: 00007fc5f839de59 [ 27.890665][ T498] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000140 [ 27.890672][ T498] RBP: 00007fc5f91c8090 R08: 0000000000000000 R09: 0000000000000000 [ 27.890683][ T498] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000001 [ 27.890694][ T498] R13: 00007fc5f8626038 R14: 00007fc5f8625fa0 R15: 00007fff867ae298 [ 27.890710][ T498] [ 28.119894][ T318] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 28.130567][ T318] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 28.138826][ T318] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.154553][ T318] usb 4-1: USB disconnect, device number 3 [ 28.161987][ T318] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.171489][ T318] ftdi_sio 4-1:5.0: device disconnected [ 28.230903][ T508] raw_sendmsg: syz.2.61 forgot to set AF_INET. Fix it! [ 28.444965][ T525] loop5: detected capacity change from 0 to 7 [ 28.560831][ T493] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.579869][ T318] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.759845][ T318] usb 4-1: Using ep0 maxpacket: 32 [ 28.766195][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 28.777646][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 28.790386][ T318] usb 4-1: New USB device found, idVendor=046d, idProduct=c339, bcdDevice= 0.40 [ 28.799577][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=11 [ 28.807922][ T318] usb 4-1: SerialNumber: syz [ 28.813457][ T318] usb 4-1: config 0 descriptor?? [ 28.821306][ T509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 28.829608][ T318] hub 4-1:0.0: USB hub found [ 28.849856][ T319] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 29.011021][ T319] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 29.019284][ T319] usb 3-1: config 0 has no interface number 0 [ 29.026243][ T319] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 29.037960][ T318] hub 4-1:0.0: 1 port detected [ 29.044210][ T319] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 29.053569][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.061776][ T319] usb 3-1: Product: syz [ 29.066066][ T319] usb 3-1: Manufacturer: syz [ 29.070934][ T319] usb 3-1: SerialNumber: syz [ 29.078893][ T319] usb 3-1: config 0 descriptor?? [ 29.084794][ T536] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 29.103547][ T319] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 02:39:4c:1a:4e:20 [ 29.295120][ T319] usb 3-1: USB disconnect, device number 3 [ 29.306088][ T319] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 29.808970][ T319] usb 2-1: USB disconnect, device number 2 [ 29.852981][ T318] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 29.990049][ T318] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 30.179858][ T319] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.329854][ T319] usb 2-1: device descriptor read/64, error -71 [ 30.589880][ T319] usb 2-1: device descriptor read/64, error -71 [ 30.629857][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.635994][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 30.839863][ T319] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.989863][ T319] usb 2-1: device descriptor read/64, error -71 [ 30.999860][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.159856][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 31.166155][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.172829][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 31.181910][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.190666][ T9] usb 1-1: config 0 descriptor?? [ 31.209236][ T585] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 31.249848][ T319] usb 2-1: device descriptor read/64, error -71 [ 31.359960][ T319] usb usb2-port1: attempt power cycle [ 31.597487][ T9] logitech 0003:046D:CA04.0002: unknown main item tag 0x6 [ 31.604823][ T9] logitech 0003:046D:CA04.0002: ignoring exceeding usage max [ 31.613416][ T9] logitech 0003:046D:CA04.0002: hidraw0: USB HID v0.83 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 31.624758][ T9] logitech 0003:046D:CA04.0002: no inputs found [ 31.699854][ T319] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.720749][ T319] usb 2-1: device descriptor read/8, error -71 [ 31.759878][ T318] usb 4-1: device descriptor read/64, error -71 [ 31.850850][ T319] usb 2-1: device descriptor read/8, error -71 [ 31.870216][ T318] usb 4-1: device reset changed ep0 maxpacket size! [ 31.876990][ T45] usb 4-1: USB disconnect, device number 4 [ 31.955242][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 31.955257][ T36] audit: type=1400 audit(1782959388.099:192): avc: denied { listen } for pid=582 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.980992][ T36] audit: type=1400 audit(1782959388.099:193): avc: denied { setopt } for pid=582 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.004752][ T583] kvm: MONITOR instruction emulated as NOP! [ 32.099859][ T319] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.120793][ T319] usb 2-1: device descriptor read/8, error -71 [ 32.139854][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.250900][ T319] usb 2-1: device descriptor read/8, error -71 [ 32.289848][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 32.295983][ T45] usb 4-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config [ 32.307766][ T45] usb 4-1: New USB device found, idVendor=056d, idProduct=0721, bcdDevice=9c.25 [ 32.316824][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.324818][ T45] usb 4-1: Product: syz [ 32.328959][ T45] usb 4-1: Manufacturer: syz [ 32.333556][ T45] usb 4-1: SerialNumber: syz [ 32.338683][ T45] usb 4-1: config 0 descriptor?? [ 32.359917][ T319] usb usb2-port1: unable to enumerate USB device [ 32.545608][ T319] usb 4-1: USB disconnect, device number 5 [ 32.847172][ T36] audit: type=1400 audit(1782959388.989:194): avc: denied { bind } for pid=596 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.866379][ T36] audit: type=1400 audit(1782959388.989:195): avc: denied { setopt } for pid=596 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.885709][ T36] audit: type=1400 audit(1782959388.989:196): avc: denied { listen } for pid=596 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.905704][ T36] audit: type=1400 audit(1782959388.989:197): avc: denied { connect } for pid=596 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.925052][ T36] audit: type=1400 audit(1782959388.989:198): avc: denied { accept } for pid=596 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.980627][ T36] audit: type=1400 audit(1782959389.129:199): avc: denied { view } for pid=600 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 33.089298][ T607] FAULT_INJECTION: forcing a failure. [ 33.089298][ T607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.102409][ T607] CPU: 0 UID: 0 PID: 607 Comm: syz.3.85 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 33.102426][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.102433][ T607] Call Trace: [ 33.102437][ T607] [ 33.102441][ T607] __dump_stack+0x21/0x30 [ 33.102459][ T607] dump_stack_lvl+0x140/0x1c0 [ 33.102473][ T607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.102487][ T607] dump_stack+0x19/0x20 [ 33.102499][ T607] should_fail_ex+0x3c2/0x510 [ 33.102510][ T607] should_fail+0xf/0x20 [ 33.102520][ T607] should_fail_usercopy+0x1e/0x30 [ 33.102531][ T607] strncpy_from_user+0x29/0x280 [ 33.102542][ T607] getname_flags+0x106/0x6b0 [ 33.102553][ T607] ? memdup_user+0xb1/0x170 [ 33.102567][ T607] user_path_at+0x2b/0x60 [ 33.102579][ T607] __se_sys_mount+0x28a/0x480 [ 33.102589][ T607] ? ksys_write+0x1f3/0x260 [ 33.102600][ T607] ? __x64_sys_mount+0xf0/0xf0 [ 33.102611][ T607] __x64_sys_mount+0xc3/0xf0 [ 33.102623][ T607] x64_sys_call+0x2021/0x2ee0 [ 33.102632][ T607] do_syscall_64+0x57/0xf0 [ 33.102642][ T607] ? clear_bhb_loop+0x50/0xa0 [ 33.102654][ T607] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.102666][ T607] RIP: 0033:0x7fde24b9de59 [ 33.102675][ T607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.102683][ T607] RSP: 002b:00007fde259c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.102695][ T607] RAX: ffffffffffffffda RBX: 00007fde24e25fa0 RCX: 00007fde24b9de59 [ 33.102703][ T607] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000140 [ 33.102710][ T607] RBP: 00007fde259c4090 R08: 0000000000000000 R09: 0000000000000000 [ 33.102717][ T607] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000001 [ 33.102723][ T607] R13: 00007fde24e26038 R14: 00007fde24e25fa0 R15: 00007fffb12eadd8 [ 33.102731][ T607] [ 33.179847][ T36] audit: type=1326 audit(1782959389.259:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.3.86" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde24b9de59 code=0x0 [ 33.337159][ T611] syzkaller1: entered promiscuous mode [ 33.342700][ T611] syzkaller1: entered allmulticast mode [ 33.599859][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.639864][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.732284][ T619] usb 1-1: USB disconnect, device number 3 [ 33.760879][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.771869][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.781720][ T45] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 33.789851][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 33.790987][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.796924][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.814981][ T45] usb 2-1: config 0 descriptor?? [ 33.815556][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.833042][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.844846][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 33.854056][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.862640][ T9] usb 3-1: config 0 descriptor?? [ 33.993158][ T36] audit: type=1400 audit(1782959390.139:201): avc: denied { mounton } for pid=637 comm="syz.3.93" path="/proc/80/map_files" dev="proc" ino=5968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 34.229893][ T619] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.242489][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.250373][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.258196][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.266025][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.269624][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.273860][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.282854][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.288592][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.295769][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.303369][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 34.310886][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.325342][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.328818][ T45] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 34.336567][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.344450][ T45] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 34.362268][ T9] apple 0003:05AC:027C.0004: unknown main item tag 0x0 [ 34.370159][ T9] apple 0003:05AC:027C.0004: hidraw1: USB HID v0.03 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 34.390870][ T619] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 34.402864][ T619] usb 4-1: config 0 has no interface number 0 [ 34.410581][ T619] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 34.419743][ T619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.427739][ T619] usb 4-1: Product: syz [ 34.431985][ T619] usb 4-1: Manufacturer: syz [ 34.436657][ T619] usb 4-1: SerialNumber: syz [ 34.441932][ T619] usb 4-1: config 0 descriptor?? [ 34.478281][ T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.489149][ T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.498253][ T9] usb 3-1: USB disconnect, device number 4 [ 34.520683][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 34.530115][ T45] usb 2-1: USB disconnect, device number 7 [ 34.649899][ T619] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 34.656423][ T619] usb 4-1: No valid video chain found. [ 34.663216][ T619] usb 4-1: USB disconnect, device number 6 [ 34.750776][ T644] FAULT_INJECTION: forcing a failure. [ 34.750776][ T644] name failslab, interval 1, probability 0, space 0, times 0 [ 34.763492][ T644] CPU: 0 UID: 0 PID: 644 Comm: syz.0.94 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 34.763517][ T644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.763523][ T644] Call Trace: [ 34.763527][ T644] [ 34.763532][ T644] __dump_stack+0x21/0x30 [ 34.763551][ T644] dump_stack_lvl+0x140/0x1c0 [ 34.763564][ T644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.763578][ T644] dump_stack+0x19/0x20 [ 34.763591][ T644] should_fail_ex+0x3c2/0x510 [ 34.763602][ T644] should_failslab+0xac/0x100 [ 34.763615][ T644] __kmalloc_cache_noprof+0x41/0x470 [ 34.763625][ T644] ? alloc_fs_context+0x6f/0x800 [ 34.763638][ T644] ? __asan_memcpy+0x5a/0x80 [ 34.763648][ T644] alloc_fs_context+0x6f/0x800 [ 34.763659][ T644] ? __kasan_check_write+0x18/0x20 [ 34.763669][ T644] fs_context_for_mount+0x26/0x40 [ 34.763681][ T644] do_new_mount+0x116/0xb40 [ 34.763690][ T644] ? security_capable+0x44/0x130 [ 34.763702][ T644] path_mount+0x66a/0xff0 [ 34.763710][ T644] ? putname+0x113/0x150 [ 34.763721][ T644] __se_sys_mount+0x2bf/0x480 [ 34.763730][ T644] ? ksys_write+0x1f3/0x260 [ 34.763741][ T644] ? __x64_sys_mount+0xf0/0xf0 [ 34.763751][ T644] __x64_sys_mount+0xc3/0xf0 [ 34.763761][ T644] x64_sys_call+0x2021/0x2ee0 [ 34.763769][ T644] do_syscall_64+0x57/0xf0 [ 34.763781][ T644] ? clear_bhb_loop+0x50/0xa0 [ 34.763794][ T644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.763805][ T644] RIP: 0033:0x7f9f1379de59 [ 34.763816][ T644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.763824][ T644] RSP: 002b:00007f9f14695028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.763836][ T644] RAX: ffffffffffffffda RBX: 00007f9f13a25fa0 RCX: 00007f9f1379de59 [ 34.763844][ T644] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000140 [ 34.763851][ T644] RBP: 00007f9f14695090 R08: 0000000000000000 R09: 0000000000000000 [ 34.763857][ T644] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000001 [ 34.763863][ T644] R13: 00007f9f13a26038 R14: 00007f9f13a25fa0 R15: 00007ffe89be9cc8 [ 34.763871][ T644] [ 35.429850][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.489893][ T619] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.580860][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 35.590690][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 35.601862][ T45] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 35.610940][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.618916][ T45] usb 3-1: Product: syz [ 35.623084][ T45] usb 3-1: Manufacturer: syz [ 35.627667][ T45] usb 3-1: SerialNumber: syz [ 35.632934][ T45] usb 3-1: config 0 descriptor?? [ 35.638193][ T652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.645391][ T652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.649836][ T619] usb 2-1: Using ep0 maxpacket: 16 [ 35.658665][ T619] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 35.666893][ T619] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 35.677353][ T619] usb 2-1: config 0 has no interface number 0 [ 35.684756][ T619] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 35.693889][ T619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.701886][ T619] usb 2-1: Product: syz [ 35.706098][ T619] usb 2-1: Manufacturer: syz [ 35.710727][ T619] usb 2-1: SerialNumber: syz [ 35.715903][ T619] usb 2-1: config 0 descriptor?? [ 35.721744][ T619] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 35.728095][ T619] usb 2-1: No valid video chain found. [ 35.853608][ T652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.860828][ T652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.004236][ T658] fuse: Bad value for 'fd' [ 36.044294][ T662] capability: warning: `syz.3.101' uses 32-bit capabilities (legacy support in use) [ 36.071533][ T45] Error reading MAC address [ 36.076915][ T45] usb 3-1: USB disconnect, device number 5 [ 36.299870][ T619] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.451060][ T619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.460693][ T619] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 36.469775][ T619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.477805][ T619] usb 4-1: Product: syz [ 36.482025][ T619] usb 4-1: Manufacturer: syz [ 36.486608][ T619] usb 4-1: SerialNumber: syz [ 36.698864][ T662] kvm: pic: non byte write [ 36.703510][ T662] kvm: pic: single mode not supported [ 36.711619][ T619] usb 4-1: USB disconnect, device number 7 [ 36.742157][ T674] udevd[674]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.009860][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.159854][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 37.166086][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.176238][ T45] usb 3-1: config 0 has no interfaces? [ 37.181748][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.190924][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.199449][ T45] usb 3-1: config 0 descriptor?? [ 37.275260][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 37.275275][ T36] audit: type=1400 audit(1782959393.419:206): avc: denied { append } for pid=676 comm="syz.3.106" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.359248][ T682] 9pnet_fd: Insufficient options for proto=fd [ 37.393739][ T688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.406315][ T36] audit: type=1400 audit(1782959393.559:207): avc: denied { create } for pid=670 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.426781][ T36] audit: type=1400 audit(1782959393.569:208): avc: denied { connect } for pid=670 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.428663][ T671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.454694][ T671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.485912][ T36] audit: type=1400 audit(1782959393.629:209): avc: denied { setopt } for pid=690 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.506224][ T36] audit: type=1400 audit(1782959393.659:210): avc: denied { read } for pid=690 comm="syz.3.111" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.769852][ T619] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.921689][ T619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.930004][ T619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.940215][ T619] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.950406][ T619] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 37.959449][ T619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.967513][ T619] usb 4-1: Product: syz [ 37.971686][ T619] usb 4-1: Manufacturer: syz [ 37.976264][ T619] usb 4-1: SerialNumber: syz [ 38.122813][ T36] audit: type=1400 audit(1782959394.269:211): avc: denied { create } for pid=694 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.142340][ T36] audit: type=1400 audit(1782959394.269:212): avc: denied { write } for pid=694 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.213520][ T619] usb 4-1: selecting invalid altsetting 1 [ 38.218663][ T45] usb 2-1: USB disconnect, device number 8 [ 38.219437][ T619] usb 4-1: unit 3 not found! [ 38.234271][ T619] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 38.243993][ T619] usb 4-1: invalid MIXER UNIT descriptor 6 [ 38.252644][ T619] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 38.264268][ T700] bridge0: port 3(syz_tun) entered blocking state [ 38.268387][ T619] usb 4-1: USB disconnect, device number 8 [ 38.273511][ T700] bridge0: port 3(syz_tun) entered disabled state [ 38.283375][ T700] syz_tun: entered allmulticast mode [ 38.284145][ T620] udevd[620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.289121][ T700] syz_tun: entered promiscuous mode [ 38.310952][ T700] bridge0: port 3(syz_tun) entered blocking state [ 38.317387][ T700] bridge0: port 3(syz_tun) entered forwarding state [ 38.341145][ T36] audit: type=1400 audit(1782959394.489:213): avc: denied { ioctl } for pid=704 comm="syz.1.116" path="socket:[7408]" dev="sockfs" ino=7408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.387427][ T36] audit: type=1400 audit(1782959394.529:214): avc: denied { mount } for pid=706 comm="syz.1.117" name="/" dev="ramfs" ino=7418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.450527][ T36] audit: type=1400 audit(1782959394.599:215): avc: denied { ioctl } for pid=713 comm="syz.1.119" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7492 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.729864][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 38.882892][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.892799][ T45] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 38.900556][ T45] usb 1-1: can't read configurations, error -71 [ 39.044510][ T750] syzkaller1: entered promiscuous mode [ 39.050060][ T619] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.057617][ T750] syzkaller1: entered allmulticast mode [ 39.064361][ T750] syzkaller1: left promiscuous mode [ 39.069612][ T750] syzkaller1: left allmulticast mode [ 39.132441][ T753] netlink: 'syz.1.131': attribute type 9 has an invalid length. [ 39.209847][ T619] usb 4-1: Using ep0 maxpacket: 32 [ 39.215969][ T619] usb 4-1: config 7 has an invalid interface number: 92 but max is 0 [ 39.238825][ T619] usb 4-1: config 7 has no interface number 0 [ 39.244953][ T619] usb 4-1: config 7 interface 92 altsetting 243 bulk endpoint 0x6 has invalid maxpacket 32 [ 39.254952][ T619] usb 4-1: config 7 interface 92 has no altsetting 0 [ 39.262956][ T619] usb 4-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=52.16 [ 39.272063][ T619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.280092][ T619] usb 4-1: Product: syz [ 39.284337][ T619] usb 4-1: Manufacturer: syz [ 39.288910][ T619] usb 4-1: SerialNumber: syz [ 39.294566][ T732] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 39.301251][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 39.532987][ T778] FAULT_INJECTION: forcing a failure. [ 39.532987][ T778] name failslab, interval 1, probability 0, space 0, times 0 [ 39.537911][ T780] capability: warning: `syz.1.141' uses deprecated v2 capabilities in a way that may be insecure [ 39.545924][ T778] CPU: 1 UID: 0 PID: 778 Comm: syz.0.140 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 39.545952][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.545962][ T778] Call Trace: [ 39.545969][ T778] [ 39.545975][ T778] __dump_stack+0x21/0x30 [ 39.546002][ T778] dump_stack_lvl+0x140/0x1c0 [ 39.546024][ T778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.546046][ T778] dump_stack+0x19/0x20 [ 39.546066][ T778] should_fail_ex+0x3c2/0x510 [ 39.546084][ T778] should_failslab+0xac/0x100 [ 39.546103][ T778] kmem_cache_alloc_noprof+0x42/0x410 [ 39.546120][ T778] ? getname_kernel+0x6b/0x450 [ 39.546138][ T778] ? avc_has_perm_noaudit+0x26b/0x360 [ 39.546158][ T778] getname_kernel+0x6b/0x450 [ 39.546175][ T778] ? avc_has_perm_noaudit+0x289/0x360 [ 39.546193][ T778] kern_path+0x23/0x60 [ 39.546211][ T778] lookup_bdev+0xc9/0x290 [ 39.546230][ T778] ? __cfi_lookup_bdev+0x10/0x10 [ 39.546249][ T778] ? security_fs_context_parse_param+0x27b/0x2a0 [ 39.546268][ T778] ? vfs_parse_monolithic_sep+0xd1/0x360 [ 39.546290][ T778] get_tree_bdev_flags+0xbb/0x4f0 [ 39.546305][ T778] ? __cfi_erofs_fc_fill_super+0x10/0x10 [ 39.546327][ T778] ? __cfi_get_tree_bdev_flags+0x10/0x10 [ 39.546343][ T778] ? selinux_capable+0x38/0x50 [ 39.546361][ T778] ? bpf_lsm_capable+0xd/0x20 [ 39.546384][ T778] erofs_fc_get_tree+0x56/0x220 [ 39.546405][ T778] vfs_get_tree+0x9e/0x290 [ 39.546420][ T778] do_new_mount+0x251/0xb40 [ 39.546436][ T778] ? security_capable+0x44/0x130 [ 39.546454][ T778] path_mount+0x66a/0xff0 [ 39.546469][ T778] ? putname+0x113/0x150 [ 39.546487][ T778] __se_sys_mount+0x2bf/0x480 [ 39.546503][ T778] ? ksys_write+0x1f3/0x260 [ 39.546520][ T778] ? __x64_sys_mount+0xf0/0xf0 [ 39.546537][ T778] __x64_sys_mount+0xc3/0xf0 [ 39.546554][ T778] x64_sys_call+0x2021/0x2ee0 [ 39.546569][ T778] do_syscall_64+0x57/0xf0 [ 39.546586][ T778] ? clear_bhb_loop+0x50/0xa0 [ 39.546607][ T778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.546626][ T778] RIP: 0033:0x7f9f1379de59 [ 39.546641][ T778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.546655][ T778] RSP: 002b:00007f9f14695028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.546674][ T778] RAX: ffffffffffffffda RBX: 00007f9f13a25fa0 RCX: 00007f9f1379de59 [ 39.546687][ T778] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000140 [ 39.546700][ T778] RBP: 00007f9f14695090 R08: 0000000000000000 R09: 0000000000000000 [ 39.546710][ T778] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000002 [ 39.546721][ T778] R13: 00007f9f13a26038 R14: 00007f9f13a25fa0 R15: 00007ffe89be9cc8 [ 39.546735][ T778] [ 39.593301][ T782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=782 comm=syz.0.142 [ 39.744589][ T317] usb 3-1: USB disconnect, device number 6 [ 39.756848][ T619] usb 4-1: USB disconnect, device number 9 [ 40.119906][ T317] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.169858][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.232083][ T805] FAULT_INJECTION: forcing a failure. [ 40.232083][ T805] name failslab, interval 1, probability 0, space 0, times 0 [ 40.244780][ T805] CPU: 0 UID: 0 PID: 805 Comm: syz.3.150 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 40.244807][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.244817][ T805] Call Trace: [ 40.244822][ T805] [ 40.244828][ T805] __dump_stack+0x21/0x30 [ 40.244853][ T805] dump_stack_lvl+0x140/0x1c0 [ 40.244873][ T805] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.244895][ T805] ? mntput_no_expire+0x104/0x6c0 [ 40.244919][ T805] dump_stack+0x19/0x20 [ 40.244940][ T805] should_fail_ex+0x3c2/0x510 [ 40.244957][ T805] should_failslab+0xac/0x100 [ 40.244976][ T805] kmem_cache_alloc_noprof+0x42/0x410 [ 40.244992][ T805] ? path_put+0x5b/0x70 [ 40.245003][ T805] ? getname_kernel+0x6b/0x450 [ 40.245013][ T805] ? lookup_bdev+0x1ce/0x290 [ 40.245025][ T805] getname_kernel+0x6b/0x450 [ 40.245039][ T805] filp_open+0x88/0x1f0 [ 40.245052][ T805] ? get_tree_bdev_flags+0x22c/0x4f0 [ 40.245061][ T805] ? __cfi_filp_open+0x10/0x10 [ 40.245074][ T805] ? __cfi_erofs_fc_fill_super+0x10/0x10 [ 40.245088][ T805] ? __cfi_get_tree_bdev_flags+0x10/0x10 [ 40.245098][ T805] ? selinux_capable+0x38/0x50 [ 40.245110][ T805] ? bpf_lsm_capable+0xd/0x20 [ 40.245125][ T805] erofs_fc_get_tree+0x9c/0x220 [ 40.245138][ T805] vfs_get_tree+0x9e/0x290 [ 40.245148][ T805] do_new_mount+0x251/0xb40 [ 40.245157][ T805] ? security_capable+0x44/0x130 [ 40.245168][ T805] path_mount+0x66a/0xff0 [ 40.245177][ T805] ? putname+0x113/0x150 [ 40.245188][ T805] __se_sys_mount+0x2bf/0x480 [ 40.245197][ T805] ? ksys_write+0x1f3/0x260 [ 40.245207][ T805] ? __x64_sys_mount+0xf0/0xf0 [ 40.245217][ T805] __x64_sys_mount+0xc3/0xf0 [ 40.245227][ T805] x64_sys_call+0x2021/0x2ee0 [ 40.245236][ T805] do_syscall_64+0x57/0xf0 [ 40.245246][ T805] ? clear_bhb_loop+0x50/0xa0 [ 40.245259][ T805] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.245271][ T805] RIP: 0033:0x7fde24b9de59 [ 40.245281][ T805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.245289][ T805] RSP: 002b:00007fde259c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.245301][ T805] RAX: ffffffffffffffda RBX: 00007fde24e25fa0 RCX: 00007fde24b9de59 [ 40.245309][ T805] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000140 [ 40.245320][ T805] RBP: 00007fde259c4090 R08: 0000000000000000 R09: 0000000000000000 [ 40.245326][ T805] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000002 [ 40.245333][ T805] R13: 00007fde24e26038 R14: 00007fde24e25fa0 R15: 00007fffb12eadd8 [ 40.245341][ T805] [ 40.269858][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 40.516255][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.526386][ T317] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 40.535379][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 40.541931][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 40.552789][ T45] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 40.565850][ T317] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 40.569855][ T619] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 40.574932][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.589049][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.597090][ T45] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 40.606159][ T317] usb 3-1: Product: syz [ 40.610345][ T317] usb 3-1: Manufacturer: syz [ 40.614941][ T317] usb 3-1: SerialNumber: syz [ 40.619543][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.630597][ T45] usb 1-1: config 0 descriptor?? [ 40.731106][ T619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.740547][ T619] usb 4-1: not running at top speed; connect to a high speed hub [ 40.754806][ T619] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 40.763915][ T619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.771919][ T619] usb 4-1: Product: syz [ 40.776080][ T619] usb 4-1: Manufacturer: syz [ 40.780721][ T619] usb 4-1: SerialNumber: syz [ 40.988108][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.989842][ T65] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.996985][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.022911][ T619] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 41.036418][ T619] usb 4-1: USB disconnect, device number 10 [ 41.040791][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 41.048281][ T537] usb 3-1: USB disconnect, device number 7 [ 41.051477][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.072111][ T45] usb 1-1: USB disconnect, device number 6 [ 41.149846][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 41.161766][ T65] usb 2-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 41.172051][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.190204][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 41.199235][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.210098][ T65] usb 2-1: SerialNumber: syz [ 41.217068][ T65] usb 2-1: 0:2 : does not exist [ 41.229881][ T65] usb 2-1: unit 101 not found! [ 41.418519][ T65] usb 2-1: USB disconnect, device number 9 [ 41.459898][ T619] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.571057][ T833] FAULT_INJECTION: forcing a failure. [ 41.571057][ T833] name failslab, interval 1, probability 0, space 0, times 0 [ 41.580658][ T835] netlink: 'syz.2.159': attribute type 4 has an invalid length. [ 41.584608][ T833] CPU: 1 UID: 0 PID: 833 Comm: syz.0.160 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 41.584634][ T833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 41.584645][ T833] Call Trace: [ 41.584651][ T833] [ 41.584658][ T833] __dump_stack+0x21/0x30 [ 41.584686][ T833] dump_stack_lvl+0x140/0x1c0 [ 41.584708][ T833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.584730][ T833] ? mntput_no_expire+0x104/0x6c0 [ 41.584755][ T833] dump_stack+0x19/0x20 [ 41.584784][ T833] should_fail_ex+0x3c2/0x510 [ 41.584804][ T833] should_failslab+0xac/0x100 [ 41.584825][ T833] kmem_cache_alloc_noprof+0x42/0x410 [ 41.584843][ T833] ? path_put+0x5b/0x70 [ 41.584861][ T833] ? getname_kernel+0x6b/0x450 [ 41.584880][ T833] ? lookup_bdev+0x1ce/0x290 [ 41.584905][ T833] getname_kernel+0x6b/0x450 [ 41.584924][ T833] filp_open+0x88/0x1f0 [ 41.584952][ T833] ? get_tree_bdev_flags+0x22c/0x4f0 [ 41.584969][ T833] ? __cfi_filp_open+0x10/0x10 [ 41.584990][ T833] ? __cfi_erofs_fc_fill_super+0x10/0x10 [ 41.585015][ T833] ? __cfi_get_tree_bdev_flags+0x10/0x10 [ 41.585032][ T833] ? selinux_capable+0x38/0x50 [ 41.585052][ T833] ? bpf_lsm_capable+0xd/0x20 [ 41.585076][ T833] erofs_fc_get_tree+0x9c/0x220 [ 41.585098][ T833] vfs_get_tree+0x9e/0x290 [ 41.585115][ T833] do_new_mount+0x251/0xb40 [ 41.585132][ T833] ? security_capable+0x44/0x130 [ 41.585152][ T833] path_mount+0x66a/0xff0 [ 41.585169][ T833] ? putname+0x113/0x150 [ 41.585189][ T833] __se_sys_mount+0x2bf/0x480 [ 41.585207][ T833] ? ksys_write+0x1f3/0x260 [ 41.585227][ T833] ? __x64_sys_mount+0xf0/0xf0 [ 41.585246][ T833] __x64_sys_mount+0xc3/0xf0 [ 41.585263][ T833] x64_sys_call+0x2021/0x2ee0 [ 41.585280][ T833] do_syscall_64+0x57/0xf0 [ 41.585298][ T833] ? clear_bhb_loop+0x50/0xa0 [ 41.585323][ T833] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.585343][ T833] RIP: 0033:0x7f9f1379de59 [ 41.585358][ T833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.585372][ T833] RSP: 002b:00007f9f14695028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.585392][ T833] RAX: ffffffffffffffda RBX: 00007f9f13a25fa0 RCX: 00007f9f1379de59 [ 41.585405][ T833] RDX: 0000200000000040 RSI: 0000200000001440 RDI: 0000200000000140 [ 41.585419][ T833] RBP: 00007f9f14695090 R08: 0000000000000000 R09: 0000000000000000 [ 41.585431][ T833] R10: 0000000000008800 R11: 0000000000000246 R12: 0000000000000002 [ 41.585442][ T833] R13: 00007f9f13a26038 R14: 00007f9f13a25fa0 R15: 00007ffe89be9cc8 [ 41.585458][ T833] [ 41.662735][ T839] overlayfs: missing 'lowerdir' [ 41.666852][ T619] usb 4-1: device descriptor read/64, error -71 [ 41.685177][ T838] Zero length message leads to an empty skb [ 41.873923][ T842] netlink: 'syz.2.159': attribute type 4 has an invalid length. [ 41.891812][ T847] SELinux: policydb string SE linuz does not match my string SE Linux [ 41.902016][ T847] SELinux: failed to load policy [ 41.908825][ T847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 41.940465][ T619] usb 4-1: device descriptor read/64, error -71 [ 42.063032][ T868] syzkaller1: entered promiscuous mode [ 42.068555][ T868] syzkaller1: entered allmulticast mode [ 42.074845][ T866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'. [ 42.189883][ T619] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 42.319952][ T619] usb 4-1: device descriptor read/64, error -71 [ 42.379866][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.429862][ T318] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 42.481312][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 42.481327][ T36] audit: type=1400 audit(1782959398.629:235): avc: denied { mounton } for pid=882 comm="syz.2.176" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.529865][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 42.536240][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.547425][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.557281][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.570107][ T619] usb 4-1: device descriptor read/64, error -71 [ 42.576375][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.585418][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.594223][ T9] usb 2-1: config 0 descriptor?? [ 42.601704][ T318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.611858][ T318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.621498][ T318] usb 1-1: config 1 has no interface number 0 [ 42.627597][ T318] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.641834][ T318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.650898][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.658900][ T318] usb 1-1: Product: syz [ 42.663077][ T318] usb 1-1: Manufacturer: syz [ 42.667663][ T318] usb 1-1: SerialNumber: syz [ 42.673936][ T318] usb 1-1: selecting invalid altsetting 1 [ 42.680078][ T619] usb usb4-port1: attempt power cycle [ 42.739852][ T65] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 42.879277][ T880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.888174][ T880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.897240][ T65] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 42.905543][ T65] usb 3-1: config 127 has no interface number 0 [ 42.911822][ T65] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 42.924198][ T65] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 42.933283][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.941294][ T65] usb 3-1: Product: syz [ 42.945452][ T65] usb 3-1: Manufacturer: syz [ 42.950051][ T65] usb 3-1: SerialNumber: syz [ 42.955752][ T886] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 43.004850][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.012255][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.019499][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.027054][ T619] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 43.034675][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.042066][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.049347][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.056592][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.063850][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.071123][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.078434][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 43.085713][ T9] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 43.094159][ T619] usb 4-1: device descriptor read/8, error -71 [ 43.098669][ T318] cdc_ncm 1-1:1.1: bind() failure [ 43.108189][ T318] usb 1-1: USB disconnect, device number 7 [ 43.204185][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.213041][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.230775][ T619] usb 4-1: device descriptor read/8, error -71 [ 43.290343][ T9] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 43.298744][ T9] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 43.319117][ T9] microsoft 0003:045E:07DA.0005: no inputs found [ 43.325554][ T9] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 43.336605][ T9] usb 2-1: USB disconnect, device number 10 [ 43.346753][ T891] fido_id[891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 43.364644][ T886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.373227][ T886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.412406][ T886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'. [ 43.421665][ T886] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 43.479854][ T619] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 43.500791][ T619] usb 4-1: device descriptor read/8, error -71 [ 43.630772][ T619] usb 4-1: device descriptor read/8, error -71 [ 43.659879][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.721160][ T898] input: syz0 as /devices/virtual/input/input9 [ 43.728163][ T36] audit: type=1400 audit(1782959399.869:236): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=507 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.739931][ T619] usb usb4-port1: unable to enumerate USB device [ 43.750885][ T36] audit: type=1400 audit(1782959399.869:237): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=507 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.779935][ T36] audit: type=1400 audit(1782959399.869:238): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=507 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.811112][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 43.822192][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 43.834687][ T886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.840725][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 43.843787][ T886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.859934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.862068][ T900] syzkaller0: entered promiscuous mode [ 43.867999][ T9] usb 2-1: Product: syz [ 43.877630][ T9] usb 2-1: Manufacturer: syz [ 43.882499][ T65] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 43.890472][ T900] syzkaller0: entered allmulticast mode [ 43.893086][ T9] usb 2-1: SerialNumber: syz [ 43.902870][ T65] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 43.915136][ T65] asix 3-1:127.57: probe with driver asix failed with error -71 [ 43.925880][ T65] usb 3-1: USB disconnect, device number 8 [ 43.985316][ T909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.993871][ T909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.119030][ T9] usb 2-1: Can't get UAC3 power state for id 10 [ 44.126248][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 44.135477][ T9] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 44.156174][ T36] audit: type=1400 audit(1782959400.299:239): avc: denied { read } for pid=910 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.160770][ T9] usb 2-1: USB disconnect, device number 11 [ 44.222106][ T911] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 44.230097][ T911] kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 44.238885][ T911] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 44.239852][ T318] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.246743][ T65] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.261944][ T911] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 44.270118][ T911] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 44.278336][ T911] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 44.287945][ T911] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 44.296298][ T911] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 44.304404][ T911] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 44.312563][ T911] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 44.399824][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 44.406275][ T318] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 44.413864][ T318] usb 1-1: can't read configurations, error -61 [ 44.419828][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 44.426465][ T65] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 44.434642][ T65] usb 3-1: config 0 has no interface number 0 [ 44.442151][ T65] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 44.451483][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.459532][ T65] usb 3-1: Product: syz [ 44.463934][ T65] usb 3-1: Manufacturer: syz [ 44.468574][ T65] usb 3-1: SerialNumber: syz [ 44.473759][ T65] usb 3-1: config 0 descriptor?? [ 44.480135][ T65] smsc95xx v2.0.0 [ 44.509849][ T822] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 44.549852][ T318] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.639938][ T916] ôÛWgÚq: renamed from bridge_slave_0 (while UP) [ 44.659858][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 44.670199][ T822] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 44.686803][ T822] usb 4-1: config 0 has no interface number 0 [ 44.693254][ T822] usb 4-1: config 0 interface 184 has no altsetting 0 [ 44.700647][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 44.701557][ T822] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 44.707354][ T318] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 44.719534][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.730743][ T822] usb 4-1: Product: syz [ 44.732635][ T318] usb 1-1: can't read configurations, error -61 [ 44.734992][ T822] usb 4-1: Manufacturer: syz [ 44.746005][ T822] usb 4-1: SerialNumber: syz [ 44.749425][ T318] usb usb1-port1: attempt power cycle [ 44.751654][ T822] usb 4-1: config 0 descriptor?? [ 44.762365][ T822] smsc75xx v1.0.0 [ 44.806806][ T934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 44.885891][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 44.896783][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 45.099895][ T318] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.120187][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 45.126772][ T318] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 45.134578][ T318] usb 1-1: can't read configurations, error -61 [ 45.164300][ T822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 45.175252][ T822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 45.185123][ T822] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 45.195564][ T822] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 45.269840][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 45.277465][ T318] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.300194][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 45.306633][ T318] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 45.314237][ T318] usb 1-1: can't read configurations, error -61 [ 45.320605][ T318] usb usb1-port1: unable to enumerate USB device [ 45.430857][ T45] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.439012][ T45] usb 2-1: config 0 has no interface number 0 [ 45.446451][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 45.455516][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.463522][ T45] usb 2-1: Product: syz [ 45.467682][ T45] usb 2-1: Manufacturer: syz [ 45.472288][ T45] usb 2-1: SerialNumber: syz [ 45.477623][ T45] usb 2-1: config 0 descriptor?? [ 45.491399][ T65] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 45.502396][ T65] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 45.512174][ T65] usb 3-1: USB disconnect, device number 9 [ 45.886136][ T45] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 45.892597][ T45] usb 2-1: No valid video chain found. [ 45.898751][ T45] usb 2-1: USB disconnect, device number 12 [ 46.006452][ T948] input: syz0 as /devices/virtual/input/input10 [ 46.015287][ T36] audit: type=1400 audit(1782959402.159:240): avc: denied { call } for pid=947 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 46.249845][ T822] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 46.402497][ T822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.412037][ T822] usb 3-1: not running at top speed; connect to a high speed hub [ 46.420746][ T822] usb 3-1: config 129 has an invalid interface number: 80 but max is 0 [ 46.429131][ T822] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 46.437525][ T822] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 46.446792][ T822] usb 3-1: config 129 has no interface number 0 [ 46.453106][ T822] usb 3-1: config 129 has no interface number 1 [ 46.459521][ T822] usb 3-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 46.473351][ T822] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 46.484411][ T822] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 46.497781][ T822] usb 3-1: config 129 interface 80 has no altsetting 0 [ 46.504759][ T822] usb 3-1: config 129 interface 5 has no altsetting 0 [ 46.513644][ T822] usb 3-1: string descriptor 0 read error: -22 [ 46.519969][ T822] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 46.529238][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.540185][ T822] usb 3-1: MIDIStreaming interface descriptor not found [ 46.741100][ T45] usb 3-1: USB disconnect, device number 10 [ 47.031247][ T36] audit: type=1400 audit(1782959403.169:241): avc: denied { create } for pid=959 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 47.052561][ T36] audit: type=1400 audit(1782959403.179:242): avc: denied { bind } for pid=959 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.095131][ T36] audit: type=1400 audit(1782959659.247:243): avc: denied { read write } for pid=964 comm="syz.1.200" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.122263][ T45] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=45 comm=kworker/1:1 [ 47.134977][ T45] rust_binder: get_current_thread was called from the wrong process. [ 47.145613][ T36] audit: type=1400 audit(1782959659.247:244): avc: denied { open } for pid=964 comm="syz.1.200" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.173186][ T65] usb 4-1: USB disconnect, device number 15 [ 47.369846][ T822] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.379851][ T619] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 47.499931][ T822] usb 1-1: device descriptor read/64, error -71 [ 47.531158][ T619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 47.539162][ T619] usb 2-1: not running at top speed; connect to a high speed hub [ 47.548818][ T619] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 47.557867][ T619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.565870][ T619] usb 2-1: Product: syz [ 47.570048][ T619] usb 2-1: Manufacturer: syz [ 47.574625][ T619] usb 2-1: SerialNumber: syz [ 47.739851][ T822] usb 1-1: device descriptor read/64, error -71 [ 47.786105][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 47.786122][ T36] audit: type=1400 audit(1782959659.937:247): avc: denied { sqpoll } for pid=975 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.819944][ T619] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 47.825877][ T619] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.838760][ T619] usb 2-1: USB disconnect, device number 13 [ 47.905083][ T977] cgroup: fork rejected by pids controller in /syz2 [ 47.979819][ T822] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 48.109817][ T822] usb 1-1: device descriptor read/64, error -71 [ 48.118720][ T36] audit: type=1400 audit(1782959660.267:248): avc: denied { append } for pid=1038 comm="syz.3.207" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.232908][ T36] audit: type=1400 audit(1782959660.387:249): avc: denied { create } for pid=1043 comm="syz.3.209" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.254307][ T36] audit: type=1400 audit(1782959660.387:250): avc: denied { read } for pid=1043 comm="syz.3.209" name="file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.276610][ T36] audit: type=1400 audit(1782959660.387:251): avc: denied { open } for pid=1043 comm="syz.3.209" path="/53/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.299797][ T619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.314799][ T36] audit: type=1400 audit(1782959660.467:252): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.337517][ T36] audit: type=1400 audit(1782959660.467:253): avc: denied { setattr } for pid=1045 comm="syz.1.210" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 48.344247][ T1048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.365207][ T822] usb 1-1: device descriptor read/64, error -71 [ 48.381875][ T36] audit: type=1326 audit(1782959660.537:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1049 comm="syz.1.212" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe552f9de59 code=0x0 [ 48.469843][ T619] usb 3-1: Using ep0 maxpacket: 32 [ 48.476350][ T619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.487703][ T36] audit: type=1400 audit(1782959660.637:255): avc: denied { unlink } for pid=1055 comm="syz.3.214" name="#1" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.509867][ T822] usb usb1-port1: attempt power cycle [ 48.515399][ T619] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 48.519783][ T36] audit: type=1400 audit(1782959660.637:256): avc: denied { mount } for pid=1055 comm="syz.3.214" name="/" dev="overlay" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.524730][ T619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.557071][ T619] usb 3-1: Product: syz [ 48.561248][ T619] usb 3-1: Manufacturer: syz [ 48.565889][ T619] usb 3-1: SerialNumber: syz [ 48.571035][ T619] usb 3-1: config 0 descriptor?? [ 48.576686][ T619] smsc95xx v2.0.0 [ 48.580366][ T619] smsc95xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 48.590511][ T619] smsc95xx 3-1:0.0: probe with driver smsc95xx failed with error -22 [ 48.669753][ T318] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.739740][ T310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 48.782831][ T1018] netlink: 'syz.2.205': attribute type 4 has an invalid length. [ 48.790506][ T1018] netlink: 17 bytes leftover after parsing attributes in process `syz.2.205'. [ 48.800512][ T1018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 48.821084][ T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.831226][ T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.840767][ T318] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.849829][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.857803][ T318] usb 2-1: SerialNumber: syz [ 48.859731][ T822] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.890713][ T822] usb 1-1: device descriptor read/8, error -71 [ 48.909709][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 48.915302][ T310] usb 4-1: no configurations [ 48.919987][ T310] usb 4-1: can't read configurations, error -22 [ 49.020697][ T822] usb 1-1: device descriptor read/8, error -71 [ 49.049712][ T310] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 49.076028][ T318] usb 2-1: 0:2 : does not exist [ 49.080963][ T318] usb 2-1: unit 5: unexpected type 0x0b [ 49.087956][ T318] usb 2-1: USB disconnect, device number 14 [ 49.199675][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 49.205229][ T310] usb 4-1: no configurations [ 49.209921][ T310] usb 4-1: can't read configurations, error -22 [ 49.216343][ T310] usb usb4-port1: attempt power cycle [ 49.259913][ T822] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 49.290612][ T822] usb 1-1: device descriptor read/8, error -71 [ 49.420878][ T822] usb 1-1: device descriptor read/8, error -71 [ 49.529768][ T822] usb usb1-port1: unable to enumerate USB device [ 49.559649][ T310] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 49.579980][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 49.585477][ T310] usb 4-1: no configurations [ 49.590260][ T310] usb 4-1: can't read configurations, error -22 [ 49.719668][ T310] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 49.739949][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 49.745463][ T310] usb 4-1: no configurations [ 49.750210][ T310] usb 4-1: can't read configurations, error -22 [ 49.756558][ T310] usb usb4-port1: unable to enumerate USB device [ 50.134779][ T1067] ip6_tunnel: non-ECT from fe80:0000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee [ 50.282989][ T1080] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 50.430853][ T1086] netlink: 'syz.0.224': attribute type 4 has an invalid length. [ 50.689502][ T310] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 50.840436][ T310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.851942][ T310] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=6b.01 [ 50.861066][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.869077][ T310] usb 1-1: Product: syz [ 50.873274][ T310] usb 1-1: Manufacturer: syz [ 50.877856][ T310] usb 1-1: SerialNumber: syz [ 50.883054][ T310] usb 1-1: config 0 descriptor?? [ 51.054203][ T822] usb 3-1: USB disconnect, device number 11 [ 51.086991][ T1092] ======================================================= [ 51.086991][ T1092] WARNING: The mand mount option has been deprecated and [ 51.086991][ T1092] and is ignored by this kernel. Remove the mand [ 51.086991][ T1092] option from the mount to silence this warning. [ 51.086991][ T1092] ======================================================= [ 51.122645][ T310] ums-cypress 1-1:0.0: USB Mass Storage device detected [ 51.322546][ T822] usb 1-1: USB disconnect, device number 16 [ 51.829372][ T310] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 51.907444][ T1131] syzkaller1: entered promiscuous mode [ 51.912954][ T1131] syzkaller1: entered allmulticast mode [ 51.982259][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 51.991992][ T310] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.006780][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.015896][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.023919][ T310] usb 4-1: SerialNumber: syz [ 52.029585][ T1103] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.089328][ T45] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 52.230718][ T1149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=1149 comm=syz.0.243 [ 52.243626][ T1103] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.250746][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.263974][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 52.275196][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 52.291206][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 52.301537][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 52.311339][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 52.660915][ T310] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 52.863625][ T318] usb 4-1: USB disconnect, device number 20 [ 52.872003][ T318] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 52.891113][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 53.049208][ T1195] netlink: 57 bytes leftover after parsing attributes in process `syz.0.248'. [ 53.319163][ T310] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 53.470133][ T310] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 53.478311][ T310] usb 1-1: config 0 has no interface number 0 [ 53.484440][ T310] usb 1-1: config 0 interface 41 has no altsetting 0 [ 53.492508][ T310] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 53.501574][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.509591][ T310] usb 1-1: Product: syz [ 53.513839][ T310] usb 1-1: Manufacturer: syz [ 53.518417][ T310] usb 1-1: SerialNumber: syz [ 53.523695][ T310] usb 1-1: config 0 descriptor?? [ 54.322033][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 54.322063][ T36] audit: type=1400 audit(1782959666.478:297): avc: denied { read write } for pid=1224 comm="syz.2.254" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 54.350694][ T36] audit: type=1400 audit(1782959666.478:298): avc: denied { open } for pid=1224 comm="syz.2.254" path="/43/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 54.373419][ T310] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 54.479051][ T822] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 54.559564][ T619] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 54.629007][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 54.635129][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.646169][ T822] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 54.656199][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 54.669090][ T822] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 54.678136][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.686775][ T822] usb 4-1: config 0 descriptor?? [ 54.692098][ T1222] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.710020][ T619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.720780][ T619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.731566][ T619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.741675][ T619] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 54.750713][ T619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.759323][ T619] usb 3-1: config 0 descriptor?? [ 54.815847][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 54.825097][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.833871][ T45] usb 2-1: config 0 descriptor?? [ 54.839834][ T45] usb 2-1: can't set config #0, error -71 [ 54.846247][ T45] usb 2-1: USB disconnect, device number 15 [ 54.902049][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x2 [ 54.909579][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x7 [ 54.916988][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.923211][ T1028] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.924715][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.938301][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.945729][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.953474][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.960896][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.970499][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 54.978581][ T619] usb 3-1: string descriptor 0 read error: -71 [ 54.986320][ T619] usb 3-1: USB disconnect, device number 12 [ 54.992627][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.003502][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.010946][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.018416][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.025880][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.033374][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.040925][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.048322][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.055746][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.063148][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.070563][ T822] hid-generic 0003:07B5:0312.0006: unknown main item tag 0x0 [ 55.079310][ T822] hid-generic 0003:07B5:0312.0006: hidraw0: USB HID v0.81 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 55.150647][ T45] usb 4-1: USB disconnect, device number 21 [ 55.519247][ T1234] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 55.526939][ T1234] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.256'. [ 55.536883][ T1234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 55.546363][ T1234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 55.570591][ T36] audit: type=1400 audit(1782959667.718:299): avc: denied { mount } for pid=1235 comm="syz.2.257" name="/" dev="configfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.666961][ T36] audit: type=1400 audit(1782959667.818:300): avc: denied { ioctl } for pid=1237 comm="syz.3.258" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 55.808866][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 55.821397][ T310] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 55.832771][ T310] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 55.842281][ T310] usb 1-1: USB disconnect, device number 17 [ 55.958854][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 55.965214][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.973599][ T45] usb 3-1: config 7 has an invalid interface number: 16 but max is 0 [ 55.981715][ T45] usb 3-1: config 7 has no interface number 0 [ 55.989078][ T45] usb 3-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=c6.6a [ 55.998094][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.006078][ T45] usb 3-1: Product: syz [ 56.010298][ T45] usb 3-1: Manufacturer: syz [ 56.014876][ T45] usb 3-1: SerialNumber: syz [ 56.292955][ T45] usb-storage 3-1:7.16: USB Mass Storage device detected [ 56.342575][ T1289] rust_binder: Write failure EINVAL in pid:208 [ 56.343028][ T1289] rust_binder: 1288:1289 transaction to 0 failed: ENOENT [ 56.356740][ T45] usb 3-1: USB disconnect, device number 13 [ 56.459194][ T822] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 56.582230][ T1295] syzkaller1: entered promiscuous mode [ 56.587725][ T1295] syzkaller1: entered allmulticast mode [ 56.615176][ T822] usb 4-1: device descriptor read/64, error -71 [ 56.858744][ T822] usb 4-1: device descriptor read/64, error -71 [ 56.908780][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 56.938741][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 56.938746][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.069815][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 57.080726][ T45] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 57.091932][ T45] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 57.105300][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.108872][ T822] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 57.111931][ T45] usb 1-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 57.128470][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.137153][ T45] usb 1-1: config 0 descriptor?? [ 57.198739][ T317] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.248777][ T822] usb 4-1: device descriptor read/64, error -71 [ 57.325522][ T1315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.334472][ T1315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.348676][ T317] usb 2-1: Using ep0 maxpacket: 8 [ 57.354732][ T317] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x71, changing to 0x1 [ 57.366220][ T317] usb 2-1: config 1 interface 2 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 57.378216][ T317] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 57.387371][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.395382][ T317] usb 2-1: Product: syz [ 57.399650][ T317] usb 2-1: Manufacturer: syz [ 57.404278][ T317] usb 2-1: SerialNumber: syz [ 57.488689][ T822] usb 4-1: device descriptor read/64, error -71 [ 57.544683][ T45] smartjoyplus 0003:6666:8802.0007: ignoring exceeding usage max [ 57.553806][ T45] smartjoyplus 0003:6666:8802.0007: hidraw0: USB HID v0.0c Device [HID 6666:8802] on usb-dummy_hcd.0-1/input0 [ 57.565541][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 57.573174][ T45] smartjoyplus 0003:6666:8802.0007: no output reports found [ 57.598774][ T822] usb usb4-port1: attempt power cycle [ 57.612240][ T36] audit: type=1400 audit(1782959669.768:301): avc: denied { bind } for pid=1301 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.631361][ T36] audit: type=1400 audit(1782959669.778:302): avc: denied { ioctl } for pid=1301 comm="syz.1.267" path="/81/file0" dev="tmpfs" ino=449 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.657753][ T317] usb 2-1: unit 5 not found! [ 57.665998][ T317] usb 2-1: USB disconnect, device number 16 [ 57.678982][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.739858][ T31] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.749673][ T619] usb 1-1: USB disconnect, device number 18 [ 57.750912][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.765734][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 57.776221][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.784934][ T31] usb 3-1: config 0 descriptor?? [ 57.938619][ T822] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 57.959561][ T822] usb 4-1: device descriptor read/8, error -71 [ 57.992566][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 57.998605][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 58.007396][ T31] usb 3-1: USB disconnect, device number 14 [ 58.089751][ T822] usb 4-1: device descriptor read/8, error -71 [ 58.328582][ T822] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 58.345487][ T36] audit: type=1400 audit(1782959670.498:303): avc: denied { ioctl } for pid=1320 comm="syz.0.273" path="socket:[11312]" dev="sockfs" ino=11312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.370788][ T822] usb 4-1: device descriptor read/8, error -71 [ 58.408555][ T619] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 58.453959][ T36] audit: type=1400 audit(1782959670.608:304): avc: denied { load_policy } for pid=1327 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.454445][ T1329] ------------[ cut here ]------------ [ 58.479478][ T1329] WARNING: CPU: 1 PID: 1329 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 58.488965][ T1329] Modules linked in: [ 58.492883][ T1329] CPU: 1 UID: 0 PID: 1329 Comm: syz.0.275 Not tainted syzkaller #0 3aaf08658a080e6b88ffed1aa00ccc3c40537342 [ 58.504378][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.514491][ T1329] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 58.518520][ T822] usb 4-1: device descriptor read/8, error -71 [ 58.520523][ T1329] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 62 dc 0b 06 00 0f 85 c2 00 00 00 c6 05 55 dc 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 58.546257][ T1329] RSP: 0018:ffffc9001046f560 EFLAGS: 00010246 [ 58.552341][ T1329] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000 [ 58.560331][ T1329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001046f618 [ 58.568289][ T1329] RBP: ffffc9001046f6a0 R08: ffffc9001046f617 R09: 0000000000000000 [ 58.568518][ T619] usb 2-1: Using ep0 maxpacket: 16 [ 58.576279][ T1329] R10: ffffc9001046f600 R11: fffff5200208dec3 R12: ffffc9001046f5a0 [ 58.582893][ T619] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.589365][ T1329] R13: dffffc0000000000 R14: 1ffff9200208deb0 R15: 0000000000000000 [ 58.589384][ T1329] FS: 00007f9f146746c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.599546][ T619] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.607612][ T1329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.618068][ T619] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.625414][ T1329] CR2: 0000200000019000 CR3: 000000011dc10000 CR4: 00000000003526b0 [ 58.625436][ T1329] DR0: 000004000002002c DR1: fffeffffff7fff02 DR2: 0000000080000002 [ 58.632215][ T822] usb usb4-port1: unable to enumerate USB device [ 58.641075][ T1329] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 58.649408][ T619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.657008][ T1329] Call Trace: [ 58.664490][ T619] usb 2-1: Product: syz [ 58.671340][ T1329] [ 58.671349][ T1329] ? vfs_write+0x3c1/0xfd0 [ 58.679686][ T619] usb 2-1: Manufacturer: syz [ 58.682580][ T1329] ? ksys_write+0x145/0x260 [ 58.686750][ T619] usb 2-1: SerialNumber: syz [ 58.689663][ T1329] ? x64_sys_call+0x271c/0x2ee0 [ 58.689683][ T1329] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.718284][ T1329] ? hashtab_init+0xd6/0x1f0 [ 58.722912][ T1329] ___kmalloc_large_node+0x81/0x220 [ 58.728114][ T1329] ? hashtab_init+0xd6/0x1f0 [ 58.732731][ T1329] __kmalloc_large_node_noprof+0x1e/0xd0 [ 58.738367][ T1329] ? hashtab_init+0xd6/0x1f0 [ 58.743006][ T1329] __kmalloc_noprof+0x326/0x510 [ 58.747980][ T1329] ? kasan_save_alloc_info+0x3a/0x50 [ 58.753299][ T1329] hashtab_init+0xd6/0x1f0 [ 58.757728][ T1329] ? common_read+0x175/0x490 [ 58.762355][ T1329] symtab_init+0x44/0x70 [ 58.766603][ T1329] common_read+0x1e7/0x490 [ 58.771034][ T1329] ? hashtab_init+0xd6/0x1f0 [ 58.775634][ T1329] ? __cfi_common_read+0x10/0x10 [ 58.780643][ T1329] ? hashtab_init+0x100/0x1f0 [ 58.785335][ T1329] policydb_read+0xa86/0x2860 [ 58.790050][ T1329] ? __kasan_kmalloc+0x96/0xb0 [ 58.794815][ T1329] ? __cfi_policydb_read+0x10/0x10 [ 58.799958][ T1329] ? security_load_policy+0x130/0x12d0 [ 58.805433][ T1329] security_load_policy+0x16a/0x12d0 [ 58.810758][ T1329] ? irqentry_exit+0x4a/0x60 [ 58.815361][ T1329] ? __kasan_check_write+0x18/0x20 [ 58.820500][ T1329] ? mutex_lock+0x97/0x1d0 [ 58.824923][ T1329] ? __cfi_security_load_policy+0x10/0x10 [ 58.830812][ T1329] ? rep_movs_alternative+0x4a/0xa0 [ 58.836028][ T1329] sel_write_load+0x258/0x600 [ 58.840732][ T1329] ? __cfi_sel_write_load+0x10/0x10 [ 58.845937][ T1329] ? bpf_lsm_file_permission+0xd/0x20 [ 58.851343][ T1329] ? __cfi_sel_write_load+0x10/0x10 [ 58.856546][ T1329] vfs_write+0x3c1/0xfd0 [ 58.860837][ T1329] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 58.866393][ T1329] ? __cfi_vfs_write+0x10/0x10 [ 58.871176][ T1329] ? __kasan_check_write+0x18/0x20 [ 58.876290][ T1329] ? mutex_lock+0x97/0x1d0 [ 58.880731][ T1329] ? __cfi_mutex_lock+0x10/0x10 [ 58.885601][ T1329] ksys_write+0x145/0x260 [ 58.889964][ T1329] ? __cfi_ksys_write+0x10/0x10 [ 58.894814][ T1329] ? __kasan_check_write+0x18/0x20 [ 58.899520][ T619] usb 2-1: 0:2 : does not exist [ 58.899971][ T1329] ? fpregs_restore_userregs+0x11c/0x260 [ 58.907197][ T619] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 58.910415][ T1329] __x64_sys_write+0x7f/0x90 [ 58.922222][ T1329] x64_sys_call+0x271c/0x2ee0 [ 58.926923][ T1329] do_syscall_64+0x57/0xf0 [ 58.927192][ T619] usb 2-1: USB disconnect, device number 17 [ 58.931375][ T1329] ? clear_bhb_loop+0x50/0xa0 [ 58.942005][ T1329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.942071][ T620] udevd[620]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.947910][ T1329] RIP: 0033:0x7f9f1379de59 [ 58.947929][ T1329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.947946][ T1329] RSP: 002b:00007f9f14674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.996068][ T1329] RAX: ffffffffffffffda RBX: 00007f9f13a26090 RCX: 00007f9f1379de59 [ 59.004075][ T1329] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 59.012069][ T1329] RBP: 00007f9f13833e6f R08: 0000000000000000 R09: 0000000000000000 [ 59.020068][ T1329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.028055][ T1329] R13: 00007f9f13a26128 R14: 00007f9f13a26090 R15: 00007ffe89be9cc8 [ 59.036250][ T1329] [ 59.039332][ T1329] ---[ end trace 0000000000000000 ]--- [ 59.045134][ T1329] SELinux: failed to load policy [ 59.118528][ T822] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 59.268441][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 59.274888][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 59.282685][ T822] usb 3-1: can't read configurations, error -61 [ 59.418434][ T822] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 59.568433][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 59.574888][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 59.582605][ T822] usb 3-1: can't read configurations, error -61 [ 59.589041][ T822] usb usb3-port1: attempt power cycle [ 59.928387][ T822] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 59.948705][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 59.955054][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 59.962632][ T822] usb 3-1: can't read configurations, error -61 [ 60.098356][ T822] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 60.118676][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 60.125086][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 60.132687][ T822] usb 3-1: can't read configurations, error -61 [ 60.139066][ T822] usb usb3-port1: unable to enumerate USB device