last executing test programs: 9.83397676s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000180)='2', 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./proc\x00', r0, &(0x7f0000000080)='./proc\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120101027f99c6100900000000000000030109021b00020302500b090401df003ff709f60904000000e001030f8632e7517c852ba187e093f542532d5d70d7b4f512edbf18"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 9.568398508s ago: executing program 0 (id=1): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x20, 0x15, 0x5, "6b1674d263"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 8.589553278s ago: executing program 2 (id=5): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.916216427s ago: executing program 0 (id=7): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x20, 0x15, 0x5, "6b1674d263"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f00000007c0)={0x20, 0x1}, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x81, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0}) 6.070833056s ago: executing program 0 (id=14): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.528371842s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120101027f99c6100900000000000000030109021b00020302500b090401df003ff709f60904000000e001030f8632e7517c852ba187e093f542532d5d70d7b4f512edbf18"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 4.272292161s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000180)='27', 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120101027f99c6100900000000000000030109021b00020302500b090401df003ff709f60904000000e001030f8632e7517c852ba187e093f542532d5d70d7b4f512edbf18"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 3.11492282s ago: executing program 2 (id=26): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) 3.036500088s ago: executing program 0 (id=28): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x2, "54f5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000000)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x40, 0xf, 0x4, "2bf617e7"}, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x65}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.128532922s ago: executing program 1 (id=31): mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x60) (async) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x60) r0 = socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000140)=""/223, 0xdf, 0x2) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="50000000300005f54500000000000000000000003c00010038000100090001006761637400000000280002801800020000000000000000000000002cae85560d4b5f536009c202cf0000000000000000", 0x50}], 0x1}, 0x0) 1.841577841s ago: executing program 1 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x169380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x100) mkdir(&(0x7f0000000080)='./file0\x00', 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = open(&(0x7f0000000200)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r3, r3, &(0x7f0000000240), 0x7f03) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000001b40)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000001b80)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c00)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @link_local}) 1.740389641s ago: executing program 1 (id=33): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000c00)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000c40)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001d40)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000d40)="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", 0x1000, 0x20040000, &(0x7f0000001d80)={0x11, 0x1a, r2, 0x1, 0xab, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="4a8f2d53aa", 0x5, 0x240250d4, &(0x7f0000000d00)={0x11, 0x8100, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) 1.588496717s ago: executing program 1 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.570901129s ago: executing program 1 (id=35): sched_setattr(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x29}, &(0x7f0000000100)=""/77, 0x4d, 0x0, 0x0}, 0x58) r0 = socket(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(r1) kcmp(r2, r1, 0x0, r0, r0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x207, 0x4) r4 = fsopen(&(0x7f0000000280)='msdos\x00', 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000440)=0x9, 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='uid', &(0x7f0000000300)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000200)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) fsopen(&(0x7f0000000480)='hostfs\x00', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x79) 1.552740681s ago: executing program 1 (id=36): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 739.964064ms ago: executing program 3 (id=40): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000036c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000003700)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003740)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xfffc, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x30, 0x0, 0x1, 0x3, 0x0, 0xc}, {0x7, 0x0, 0x1}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x7fffffe, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000003840), 0x800001d, 0xff030000) 738.791414ms ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r1, &(0x7f0000000c40)='/', 0x1) sendfile(r1, r1, &(0x7f0000000c80)=0x90, 0xfec) 738.582714ms ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x12) write(r0, &(0x7f0000000000)='100', 0x3) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r1, &(0x7f0000000c40)='/', 0x1) sendfile(r1, r1, &(0x7f0000000c80)=0xfffffffffffffffc, 0x6) 736.333135ms ago: executing program 3 (id=43): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280)='debugfs\x00', 0x0, &(0x7f00000002c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c506c7ef32ae5fc93646772643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setresgid(0xee00, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111000, 0x946a4151655cec1d) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) poll(&(0x7f0000000140)=[{r1, 0x401b}, {r1, 0x2}], 0x2, 0x9) 721.368326ms ago: executing program 3 (id=44): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r0, 0x0) r1 = fsopen(&(0x7f0000000040)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000440)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r5, &(0x7f0000000680)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 493.204289ms ago: executing program 3 (id=45): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) 95.25431ms ago: executing program 2 (id=46): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000000)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x40, 0xf, 0x4, "2bf617e7"}, 0x0, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x65}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x7eec90d6, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="010026bd600000000000039300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x24008000) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x2, r5, 0x7}, 0xc) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x3c, 0x1e, 0x2, 0x0, 0x25dfdbfd, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="90d7643d2a406ec6d39f251da274e798f952e2e202833b7f40120e1c456cba94"]}, 0x3c}}, 0x0) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000e80)='ext4\x00', 0x8410, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pselect6(0x40, &(0x7f0000000080)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000180)=""/193, 0xc1}, {0x0}], 0x2) chdir(&(0x7f0000000ec0)='./mnt\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r9) ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000800)="d80b71173fe189337069a74b5d091a6ae7f4a45431cf485cafc31f54d2580bb5f001a8ad6054b9ab99ea27ac467ac381eee3402a4ed88dc022e67fd8abf96b048654d12648c94000130104e3802b14a34f877b73b02e00cfee2d5bb4da52c36b5a86c4ff9bff9ac0b9c2e3ad3f4a19e1681f5c90c32db40b9af700a1d6d3fe1393313d97b5") ioctl$SIOCSIFHWADDR(r8, 0x89a2, &(0x7f00000003c0)={'bridge0\x00', @random="0b0000000010"}) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) openat(0xffffffffffffff9c, 0x0, 0x165a42, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101041, 0x15) ioctl$OCFS2_IOC_RESVSP64(r10, 0x4030582a, &(0x7f0000000b00)={0x1, 0x2, 0x8, 0xffffffff, 0xffffffff, 0x4}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.928828][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 14.928846][ T36] audit: type=1400 audit(1793765998.660:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.933233][ T36] audit: type=1400 audit(1793765998.660:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.936357][ T36] audit: type=1400 audit(1793765998.660:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2181]" dev="pipefs" ino=2181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.939886][ T36] audit: type=1400 audit(1793765998.660:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.942589][ T36] audit: type=1400 audit(1793765998.660:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 22.053438][ T36] audit: type=1400 audit(1793766005.780:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.076459][ T36] audit: type=1400 audit(1793766005.820:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.077329][ T286] cgroup: Unknown subsys name 'net' [ 22.104254][ T36] audit: type=1400 audit(1793766005.840:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.104427][ T286] cgroup: Unknown subsys name 'devices' [ 22.227127][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.232774][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.325453][ T36] audit: type=1400 audit(1793766006.060:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.343951][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.348692][ T36] audit: type=1400 audit(1793766006.060:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.368888][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.382028][ T36] audit: type=1400 audit(1793766006.060:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.413950][ T36] audit: type=1400 audit(1793766006.100:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.439482][ T36] audit: type=1400 audit(1793766006.100:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.465172][ T36] audit: type=1400 audit(1793766006.100:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.490809][ T36] audit: type=1400 audit(1793766006.100:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.777172][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.784249][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.791480][ T296] bridge_slave_0: entered allmulticast mode [ 23.797882][ T296] bridge_slave_0: entered promiscuous mode [ 23.807737][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.814820][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.821997][ T296] bridge_slave_1: entered allmulticast mode [ 23.828280][ T296] bridge_slave_1: entered promiscuous mode [ 23.845720][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.852783][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.859923][ T294] bridge_slave_0: entered allmulticast mode [ 23.866216][ T294] bridge_slave_0: entered promiscuous mode [ 23.877834][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.884965][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.892024][ T294] bridge_slave_1: entered allmulticast mode [ 23.898404][ T294] bridge_slave_1: entered promiscuous mode [ 23.952192][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.959315][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.966572][ T293] bridge_slave_0: entered allmulticast mode [ 23.972901][ T293] bridge_slave_0: entered promiscuous mode [ 23.979631][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.986700][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.993764][ T293] bridge_slave_1: entered allmulticast mode [ 24.000085][ T293] bridge_slave_1: entered promiscuous mode [ 24.039688][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.046783][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.053839][ T295] bridge_slave_0: entered allmulticast mode [ 24.060253][ T295] bridge_slave_0: entered promiscuous mode [ 24.068276][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.075386][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.082455][ T295] bridge_slave_1: entered allmulticast mode [ 24.088834][ T295] bridge_slave_1: entered promiscuous mode [ 24.184598][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.191772][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.199083][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.206127][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.232673][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.239759][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.247053][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.254079][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.273916][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.281003][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.288302][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.295376][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.335678][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.342760][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.350071][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.357126][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.370468][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.378139][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.385466][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.392663][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.400820][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.408327][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.415670][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.422891][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.438735][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.445807][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.453420][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.460471][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.468250][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.475322][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.498343][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.505398][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.530357][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.537446][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.558085][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.565177][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.585641][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.592708][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.601303][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.608381][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.620638][ T294] veth0_vlan: entered promiscuous mode [ 24.636453][ T295] veth0_vlan: entered promiscuous mode [ 24.649605][ T294] veth1_macvtap: entered promiscuous mode [ 24.673902][ T295] veth1_macvtap: entered promiscuous mode [ 24.691383][ T296] veth0_vlan: entered promiscuous mode [ 24.714681][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.731785][ T296] veth1_macvtap: entered promiscuous mode [ 24.761838][ T293] veth0_vlan: entered promiscuous mode [ 24.786404][ T319] FAULT_INJECTION: forcing a failure. [ 24.786404][ T319] name failslab, interval 1, probability 0, space 0, times 1 [ 24.801502][ T319] CPU: 1 UID: 0 PID: 319 Comm: syz.2.3 Not tainted syzkaller #0 c140e0e572a2730307a15c4db8c6234da3c6df21 [ 24.801539][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 24.801552][ T319] Call Trace: [ 24.801559][ T319] [ 24.801567][ T319] __dump_stack+0x21/0x30 [ 24.801594][ T319] dump_stack_lvl+0x140/0x1c0 [ 24.801614][ T319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.801632][ T319] ? __cfi_futex_wake+0x10/0x10 [ 24.801659][ T319] ? proc_fail_nth_write+0x184/0x220 [ 24.801688][ T319] dump_stack+0x19/0x20 [ 24.801706][ T319] should_fail_ex+0x3c2/0x510 [ 24.801736][ T319] should_failslab+0xac/0x100 [ 24.801758][ T319] kmem_cache_alloc_noprof+0x42/0x410 [ 24.801787][ T319] ? do_futex+0x37d/0x510 [ 24.801807][ T319] ? getname_flags+0xcc/0x6b0 [ 24.801827][ T319] getname_flags+0xcc/0x6b0 [ 24.801846][ T319] getname+0x1b/0x30 [ 24.801863][ T319] do_sys_openat2+0xda/0x1d0 [ 24.801887][ T319] ? fput+0x1a4/0x230 [ 24.801908][ T319] ? do_sys_open+0x100/0x100 [ 24.801933][ T319] __x64_sys_openat+0x13a/0x170 [ 24.801959][ T319] x64_sys_call+0xe69/0x2ee0 [ 24.801980][ T319] do_syscall_64+0x57/0xf0 [ 24.802000][ T319] ? clear_bhb_loop+0x50/0xa0 [ 24.802038][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.802064][ T319] RIP: 0033:0x7f984bf9fb19 [ 24.802082][ T319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.802099][ T319] RSP: 002b:00007f984cea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 24.802122][ T319] RAX: ffffffffffffffda RBX: 00007f984c225fa0 RCX: 00007f984bf9fb19 [ 24.802137][ T319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 24.802150][ T319] RBP: 00007f984c037b70 R08: 0000000000000000 R09: 0000000000000000 [ 24.802164][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.802172][ T293] veth1_macvtap: entered promiscuous mode [ 24.802177][ T319] R13: 00007f984c226038 R14: 00007f984c225fa0 R15: 00007ffdb721f788 [ 24.802195][ T319] [ 25.015201][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.045025][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.185013][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 25.191280][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.201614][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 25.210909][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 25.217490][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.225450][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 25.234501][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.243291][ T45] usb 2-1: Product: syz [ 25.247730][ T66] usb 3-1: config 3 interface 1 has no altsetting 0 [ 25.254379][ T45] usb 2-1: Manufacturer: syz [ 25.259059][ T45] usb 2-1: SerialNumber: syz [ 25.264044][ T66] usb 3-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 25.264916][ T320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.274011][ T45] usb 2-1: config 0 descriptor?? [ 25.285256][ T317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.285631][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.301189][ T66] usb 3-1: SerialNumber: syz [ 25.434926][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 25.441510][ T317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.449383][ T320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.457547][ T317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.467742][ T317] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.476824][ T320] usb 4-1: config 3 interface 1 has no altsetting 0 [ 25.484311][ T320] usb 4-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 25.493424][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.501514][ T320] usb 4-1: SerialNumber: syz [ 25.506273][ T317] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 25.510990][ T66] usb 3-1: selecting invalid altsetting 0 [ 25.515768][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.532350][ T317] usb 1-1: Product: syz [ 25.532486][ T66] rndis_host 3-1:3.0: probe with driver rndis_host failed with error -22 [ 25.536683][ T317] usb 1-1: Manufacturer: syz [ 25.549008][ T66] usb 3-1: USB disconnect, device number 2 [ 25.555438][ T317] usb 1-1: SerialNumber: syz [ 25.565681][ T317] usb 1-1: selecting invalid altsetting 1 [ 25.571564][ T317] usb 1-1: unit 6 not found! [ 25.748144][ T320] usb 4-1: selecting invalid altsetting 0 [ 25.754189][ T320] rndis_host 4-1:3.0: probe with driver rndis_host failed with error -22 [ 25.764017][ T320] usb 4-1: USB disconnect, device number 2 [ 26.173254][ T317] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 26.182460][ T317] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.192884][ T317] usb 1-1: USB disconnect, device number 2 [ 26.223539][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.277820][ T320] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 26.425098][ T320] usb 3-1: device descriptor read/64, error -71 [ 26.494985][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.665006][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 26.670387][ T320] usb 3-1: device descriptor read/64, error -71 [ 26.678063][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.687097][ T9] usb 4-1: config 3 interface 1 has no altsetting 0 [ 26.695414][ T9] usb 4-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 26.704598][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.712657][ T9] usb 4-1: SerialNumber: syz [ 26.921523][ T9] usb 4-1: selecting invalid altsetting 0 [ 26.924929][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.927519][ T9] rndis_host 4-1:3.0: probe with driver rndis_host failed with error -22 [ 26.944311][ T320] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 26.951964][ T9] usb 4-1: USB disconnect, device number 3 [ 27.085000][ T320] usb 3-1: device descriptor read/64, error -71 [ 27.086468][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.099887][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.110066][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.120405][ T66] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 27.129535][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.137547][ T66] usb 1-1: Product: syz [ 27.141702][ T66] usb 1-1: Manufacturer: syz [ 27.146674][ T66] usb 1-1: SerialNumber: syz [ 27.153235][ T66] usb 1-1: selecting invalid altsetting 1 [ 27.159214][ T66] usb 1-1: unit 6 not found! [ 27.324898][ T320] usb 3-1: device descriptor read/64, error -71 [ 27.435918][ T320] usb usb3-port1: attempt power cycle [ 27.444085][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 27.444113][ T36] audit: type=1400 audit(1793766011.170:101): avc: denied { setopt } for pid=339 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.446202][ T340] rust_binder: 339:340 got reply transaction with no transaction stack [ 27.450583][ T36] audit: type=1400 audit(1793766011.170:102): avc: denied { read } for pid=339 comm="syz.3.8" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.470295][ T340] rust_binder: 339:340 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1560 [ 27.478777][ T36] audit: type=1400 audit(1793766011.170:103): avc: denied { open } for pid=339 comm="syz.3.8" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.506700][ T340] rust_binder: 339:340 BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 27.511885][ T36] audit: type=1400 audit(1793766011.170:104): avc: denied { ioctl } for pid=339 comm="syz.3.8" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.535186][ T340] rust_binder: Write failure EINVAL in pid:6 [ 27.543992][ T36] audit: type=1400 audit(1793766011.180:105): avc: denied { set_context_mgr } for pid=339 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.573947][ T9] rust_binder: 339: undelivered TRANSACTION_COMPLETE [ 27.575029][ T36] audit: type=1400 audit(1793766011.180:106): avc: denied { map } for pid=339 comm="syz.3.8" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.601909][ T317] rust_binder: 339: undelivered TRANSACTION_ERROR: 29201 [ 27.624761][ T36] audit: type=1400 audit(1793766011.180:107): avc: denied { create } for pid=339 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.650816][ T36] audit: type=1400 audit(1793766011.180:108): avc: denied { write } for pid=339 comm="syz.3.8" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.670891][ T36] audit: type=1400 audit(1793766011.240:109): avc: denied { read } for pid=339 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.690807][ T36] audit: type=1400 audit(1793766011.240:110): avc: denied { call } for pid=339 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.757146][ T321] usb 2-1: USB disconnect, device number 2 [ 27.771993][ T346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10'. [ 27.782830][ T346] FAULT_INJECTION: forcing a failure. [ 27.782830][ T346] name failslab, interval 1, probability 0, space 0, times 0 [ 27.795750][ T320] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 27.795935][ T346] CPU: 1 UID: 0 PID: 346 Comm: syz.1.10 Not tainted syzkaller #0 c140e0e572a2730307a15c4db8c6234da3c6df21 [ 27.795967][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 27.795979][ T346] Call Trace: [ 27.795985][ T346] [ 27.795992][ T346] __dump_stack+0x21/0x30 [ 27.796017][ T346] dump_stack_lvl+0x140/0x1c0 [ 27.796035][ T346] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.796055][ T346] ? __secure_computing+0x2b0/0x2b0 [ 27.796076][ T346] dump_stack+0x19/0x20 [ 27.796093][ T346] should_fail_ex+0x3c2/0x510 [ 27.796123][ T346] should_failslab+0xac/0x100 [ 27.796145][ T346] kmem_cache_alloc_noprof+0x42/0x410 [ 27.796173][ T346] ? getname_flags+0xcc/0x6b0 [ 27.796192][ T346] getname_flags+0xcc/0x6b0 [ 27.796209][ T346] __x64_sys_mkdirat+0x7e/0xa0 [ 27.796231][ T346] x64_sys_call+0x2ba8/0x2ee0 [ 27.796250][ T346] do_syscall_64+0x57/0xf0 [ 27.796269][ T346] ? clear_bhb_loop+0x50/0xa0 [ 27.796293][ T346] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.796315][ T346] RIP: 0033:0x7f2ffc59fb19 [ 27.796331][ T346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.796346][ T346] RSP: 002b:00007f2ffd4f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 27.796368][ T346] RAX: ffffffffffffffda RBX: 00007f2ffc825fa0 RCX: 00007f2ffc59fb19 [ 27.796391][ T346] RDX: 0000000000000181 RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 27.796405][ T346] RBP: 00007f2ffc637b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.796417][ T346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.796429][ T346] R13: 00007f2ffc826038 R14: 00007f2ffc825fa0 R15: 00007ffc7751f5a8 [ 27.796445][ T346] [ 27.799460][ T346] device-mapper: table: 252:0: striped: Target length not divisible by number of stripes (-EINVAL) [ 27.826002][ T320] usb 3-1: device descriptor read/8, error -71 [ 27.828081][ T346] device-mapper: ioctl: error adding target to table [ 27.884890][ T317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.015258][ T66] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 28.024940][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.026112][ T320] usb 3-1: device descriptor read/8, error -71 [ 28.035356][ T66] usb 1-1: USB disconnect, device number 3 [ 28.053274][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.055350][ T352] rust_binder: Write failure EINVAL in pid:15 [ 28.164902][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 28.171289][ T317] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.179467][ T317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.189788][ T317] usb 4-1: config 0 has no interface number 0 [ 28.195917][ T317] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.210340][ T317] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 28.219523][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.227769][ T317] usb 4-1: Product: syz [ 28.231931][ T317] usb 4-1: Manufacturer: syz [ 28.236549][ T317] usb 4-1: SerialNumber: syz [ 28.241806][ T317] usb 4-1: config 0 descriptor?? [ 28.247591][ T317] smsc95xx v2.0.0 [ 28.251331][ T317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 28.261417][ T317] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 28.284999][ T320] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 28.306036][ T320] usb 3-1: device descriptor read/8, error -71 [ 28.324915][ T321] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.436051][ T320] usb 3-1: device descriptor read/8, error -71 [ 28.474925][ T321] usb 2-1: Using ep0 maxpacket: 32 [ 28.481164][ T321] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.489320][ T321] usb 2-1: config 0 has no interface number 0 [ 28.496694][ T321] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 28.505764][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.513787][ T321] usb 2-1: Product: syz [ 28.518154][ T321] usb 2-1: Manufacturer: syz [ 28.522762][ T321] usb 2-1: SerialNumber: syz [ 28.527965][ T321] usb 2-1: config 0 descriptor?? [ 28.533658][ T321] smsc95xx v2.0.0 [ 28.554996][ T320] usb usb3-port1: unable to enumerate USB device [ 28.774909][ T317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.934899][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 28.940425][ T321] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 28.941359][ T317] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 28.951267][ T321] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.959602][ T317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.978495][ T317] usb 1-1: config 0 has no interface number 0 [ 28.984674][ T317] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.999020][ T317] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.008157][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.016204][ T317] usb 1-1: Product: syz [ 29.020403][ T317] usb 1-1: Manufacturer: syz [ 29.025038][ T317] usb 1-1: SerialNumber: syz [ 29.030732][ T317] usb 1-1: config 0 descriptor?? [ 29.038701][ T317] smsc95xx v2.0.0 [ 29.042370][ T317] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 29.052533][ T317] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 29.169344][ T321] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 29.180240][ T321] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 29.434976][ T66] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 29.584922][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 29.591488][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.600041][ T66] usb 3-1: config 3 interface 1 has no altsetting 0 [ 29.607424][ T66] usb 3-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 29.616516][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.624518][ T66] usb 3-1: SerialNumber: syz [ 29.835152][ T66] usb 3-1: selecting invalid altsetting 0 [ 29.841059][ T66] rndis_host 3-1:3.0: probe with driver rndis_host failed with error -22 [ 29.850393][ T66] usb 3-1: USB disconnect, device number 7 [ 30.574943][ T66] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.650023][ T317] usb 4-1: USB disconnect, device number 4 [ 30.661874][ T375] rust_binder: 373:375 got reply transaction with no transaction stack [ 30.670546][ T375] rust_binder: 373:375 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1560 [ 30.682128][ T375] rust_binder: 373:375 BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 30.691055][ T375] rust_binder: Write failure EINVAL in pid:17 [ 30.697977][ T321] rust_binder: 373: undelivered TRANSACTION_COMPLETE [ 30.708329][ T321] rust_binder: 373: undelivered TRANSACTION_ERROR: 29201 [ 30.734921][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 30.741483][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.750364][ T66] usb 3-1: config 3 interface 1 has no altsetting 0 [ 30.757710][ T66] usb 3-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 30.766848][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.774928][ T66] usb 3-1: SerialNumber: syz [ 30.983899][ T66] usb 3-1: selecting invalid altsetting 0 [ 30.989897][ T66] rndis_host 3-1:3.0: probe with driver rndis_host failed with error -22 [ 30.999563][ T66] usb 3-1: USB disconnect, device number 8 [ 31.024941][ T317] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.097479][ T10] usb 2-1: USB disconnect, device number 3 [ 31.174333][ T387] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.200469][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 31.206940][ T317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.217294][ T317] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 31.228450][ T317] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.237570][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.238463][ T387] ======================================================= [ 31.238463][ T387] WARNING: The mand mount option has been deprecated and [ 31.238463][ T387] and is ignored by this kernel. Remove the mand [ 31.238463][ T387] option from the mount to silence this warning. [ 31.238463][ T387] ======================================================= [ 31.245702][ T317] usb 4-1: Product: syz [ 31.280950][ T387] No source specified [ 31.284661][ T317] usb 4-1: Manufacturer: syz [ 31.298325][ T317] usb 4-1: SerialNumber: syz [ 31.303709][ T317] usb 4-1: config 0 descriptor?? [ 31.517733][ T402] rust_binder: 401:402 got reply transaction with no transaction stack [ 31.526144][ T402] rust_binder: 401:402 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1560 [ 31.537533][ T402] rust_binder: 401:402 BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 31.546598][ T402] rust_binder: Write failure EINVAL in pid:39 [ 31.554150][ T10] rust_binder: 401: undelivered TRANSACTION_COMPLETE [ 31.556849][ T66] usb 1-1: USB disconnect, device number 4 [ 31.566731][ T10] rust_binder: 401: undelivered TRANSACTION_ERROR: 29201 [ 31.652064][ T408] Bluetooth: ISO socket layer initialized [ 31.659772][ T408] Zero length message leads to an empty skb [ 31.734942][ T317] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 31.884908][ T317] usb 3-1: Using ep0 maxpacket: 32 [ 31.891182][ T317] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.899462][ T317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.909653][ T317] usb 3-1: config 0 has no interface number 0 [ 31.915786][ T317] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.924905][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.930157][ T317] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 31.945232][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.953208][ T317] usb 3-1: Product: syz [ 31.957453][ T317] usb 3-1: Manufacturer: syz [ 31.962062][ T317] usb 3-1: SerialNumber: syz [ 31.967418][ T317] usb 3-1: config 0 descriptor?? [ 31.973177][ T317] smsc95xx v2.0.0 [ 31.976882][ T317] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 31.986937][ T317] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 32.094921][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 32.101337][ T66] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.109509][ T66] usb 1-1: config 0 has no interface number 0 [ 32.117044][ T66] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.126107][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.134101][ T66] usb 1-1: Product: syz [ 32.138272][ T66] usb 1-1: Manufacturer: syz [ 32.142874][ T66] usb 1-1: SerialNumber: syz [ 32.148084][ T66] usb 1-1: config 0 descriptor?? [ 32.153800][ T66] smsc95xx v2.0.0 [ 32.424491][ T413] FAULT_INJECTION: forcing a failure. [ 32.424491][ T413] name failslab, interval 1, probability 0, space 0, times 0 [ 32.437296][ T413] CPU: 1 UID: 0 PID: 413 Comm: syz.1.30 Not tainted syzkaller #0 c140e0e572a2730307a15c4db8c6234da3c6df21 [ 32.437328][ T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 32.437340][ T413] Call Trace: [ 32.437348][ T413] [ 32.437357][ T413] __dump_stack+0x21/0x30 [ 32.437381][ T413] dump_stack_lvl+0x140/0x1c0 [ 32.437400][ T413] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.437419][ T413] ? xas_load+0x398/0x3d0 [ 32.437433][ T413] dump_stack+0x19/0x20 [ 32.437443][ T413] should_fail_ex+0x3c2/0x510 [ 32.437460][ T413] ? iter_file_splice_write+0x1d7/0x1200 [ 32.437473][ T413] should_failslab+0xac/0x100 [ 32.437485][ T413] __kmalloc_noprof+0x69/0x510 [ 32.437500][ T413] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.437515][ T413] ? iter_file_splice_write+0x1d7/0x1200 [ 32.437528][ T413] iter_file_splice_write+0x1d7/0x1200 [ 32.437540][ T413] ? atime_needs_update+0x7f6/0x990 [ 32.437555][ T413] ? __cfi_atime_needs_update+0x10/0x10 [ 32.437569][ T413] ? __cfi_iter_file_splice_write+0x10/0x10 [ 32.437581][ T413] ? touch_atime+0x1b3/0x470 [ 32.437595][ T413] ? shmem_file_splice_read+0x966/0xa50 [ 32.437609][ T413] ? __cfi_iter_file_splice_write+0x10/0x10 [ 32.437621][ T413] direct_splice_actor+0x279/0x4b0 [ 32.437634][ T413] splice_direct_to_actor+0x4fa/0xbf0 [ 32.437648][ T413] ? __cfi_direct_splice_actor+0x10/0x10 [ 32.437660][ T413] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 32.437673][ T413] do_splice_direct+0x196/0x290 [ 32.437685][ T413] ? __cfi_do_splice_direct+0x10/0x10 [ 32.437697][ T413] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 32.437710][ T413] ? security_file_permission+0x38/0xf0 [ 32.437726][ T413] ? rw_verify_area+0xac/0x230 [ 32.437741][ T413] do_sendfile+0x511/0xed0 [ 32.437754][ T413] ? vfs_writev+0xe90/0xe90 [ 32.437766][ T413] ? __kasan_check_write+0x18/0x20 [ 32.437782][ T413] ? __kasan_check_write+0x18/0x20 [ 32.437796][ T413] __x64_sys_sendfile64+0x14a/0x200 [ 32.437808][ T413] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 32.437828][ T413] ? __kasan_check_read+0x15/0x20 [ 32.437843][ T413] x64_sys_call+0xa26/0x2ee0 [ 32.437854][ T413] do_syscall_64+0x57/0xf0 [ 32.437865][ T413] ? clear_bhb_loop+0x50/0xa0 [ 32.437879][ T413] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.437893][ T413] RIP: 0033:0x7f2ffc59fb19 [ 32.437904][ T413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.437913][ T413] RSP: 002b:00007f2ffd4f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 32.437928][ T413] RAX: ffffffffffffffda RBX: 00007f2ffc825fa0 RCX: 00007f2ffc59fb19 [ 32.437937][ T413] RDX: 0000200000000c80 RSI: 0000000000000004 RDI: 0000000000000004 [ 32.437944][ T413] RBP: 00007f2ffd4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 32.437952][ T413] R10: 0000000000000fec R11: 0000000000000246 R12: 0000000000000001 [ 32.437959][ T413] R13: 00007f2ffc826038 R14: 00007f2ffc825fa0 R15: 00007ffc7751f5a8 [ 32.437968][ T413] [ 32.742987][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 32.745625][ T417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 32.753716][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.777122][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 32.777140][ T36] audit: type=1400 audit(1793766016.510:145): avc: denied { unlink } for pid=419 comm="syz.1.32" name="#1" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.805322][ T36] audit: type=1400 audit(1793766016.510:146): avc: denied { mount } for pid=419 comm="syz.1.32" name="/" dev="overlay" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.876366][ T36] audit: type=1400 audit(1793766016.610:147): avc: denied { create } for pid=421 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.895992][ T36] audit: type=1400 audit(1793766016.610:148): avc: denied { setopt } for pid=421 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.915922][ T36] audit: type=1400 audit(1793766016.640:149): avc: denied { ioctl } for pid=421 comm="syz.1.33" path="socket:[4216]" dev="sockfs" ino=4216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.916441][ T66] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 32.942137][ T36] audit: type=1400 audit(1793766016.640:150): avc: denied { write } for pid=421 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.951508][ T66] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 33.294921][ T317] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.444904][ T317] usb 2-1: Using ep0 maxpacket: 32 [ 33.451058][ T317] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.459207][ T317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.470126][ T317] usb 2-1: config 0 has no interface number 0 [ 33.476241][ T317] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.490556][ T317] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.499697][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.507815][ T317] usb 2-1: Product: syz [ 33.511976][ T317] usb 2-1: Manufacturer: syz [ 33.516596][ T317] usb 2-1: SerialNumber: syz [ 33.521730][ T317] usb 2-1: config 0 descriptor?? [ 33.527471][ T317] smsc95xx v2.0.0 [ 33.531131][ T317] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 33.541187][ T317] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 33.730655][ T317] usb 4-1: USB disconnect, device number 5 [ 33.739883][ T440] input: syz0 as /devices/virtual/input/input4 [ 33.742741][ T36] audit: type=1400 audit(1793766017.480:151): avc: denied { read write } for pid=439 comm="syz.3.37" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.769725][ T36] audit: type=1400 audit(1793766017.480:152): avc: denied { open } for pid=439 comm="syz.3.37" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.793173][ T36] audit: type=1400 audit(1793766017.480:153): avc: denied { ioctl } for pid=439 comm="syz.3.37" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.826488][ T442] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 33.879434][ T452] fuse: Unknown parameter 'Pl~ó*åü“dgrd' [ 34.384945][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.509070][ T317] usb 3-1: USB disconnect, device number 9 [ 34.544900][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 34.551119][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.559254][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.569447][ T45] usb 4-1: config 0 has no interface number 0 [ 34.575587][ T45] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 34.585355][ T45] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.587358][ T10] usb 1-1: USB disconnect, device number 5 [ 34.599730][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.619120][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.623201][ T469] bridge0: port 3(syz_tun) entered blocking state [ 34.627279][ T45] usb 4-1: Product: syz [ 34.634051][ T469] bridge0: port 3(syz_tun) entered disabled state [ 34.638013][ T45] usb 4-1: Manufacturer: syz [ 34.644824][ T469] syz_tun: entered allmulticast mode [ 34.649013][ T45] usb 4-1: SerialNumber: syz [ 34.655044][ T469] syz_tun: entered promiscuous mode [ 34.664341][ T469] bridge0: port 3(syz_tun) entered blocking state [ 34.670833][ T469] bridge0: port 3(syz_tun) entered forwarding state [ 34.677892][ T45] usb 4-1: config 0 descriptor?? [ 34.684022][ T45] smsc95xx v2.0.0 [ 34.687753][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 34.697908][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 SYZFAIL: SIGBUS pc-offset:0xfffffffffffe2cad pc:0x7efc23a71a63 addr:0x7efc2083fffc code=2 (errno 11: Resource temporarily unavailable) [ 34.844903][ T317] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 34.928387][ T293] bridge0: port 3(syz_tun) entered disabled state [ 34.935984][ T293] syz_tun (unregistering): left allmulticast mode [ 34.942453][ T293] syz_tun (unregistering): left promiscuous mode [ 34.949035][ T293] bridge0: port 3(syz_tun) entered disabled state [ 34.967997][ T297] bridge_slave_1: left allmulticast mode [ 34.973664][ T297] bridge_slave_1: left promiscuous mode [ 34.979330][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.987039][ T297] bridge_slave_0: left allmulticast mode [ 34.992691][ T297] bridge_slave_0: left promiscuous mode [ 34.998409][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.026157][ T45] usb 2-1: USB disconnect, device number 4 [ 35.034147][ T66] usb 4-1: USB disconnect, device number 6 [ 35.157563][ T297] veth1_macvtap: left promiscuous mode [ 35.163086][ T297] veth0_vlan: left promiscuous mode [ 35.357809][ T297] bridge_slave_1: left allmulticast mode [ 35.364085][ T297] bridge_slave_1: left promiscuous mode [ 35.369740][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.377142][ T297] bridge_slave_0: left allmulticast mode [ 35.382794][ T297] bridge_slave_0: left promiscuous mode [ 35.388731][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.396401][ T297] bridge_slave_1: left allmulticast mode [ 35.402048][ T297] bridge_slave_1: left promiscuous mode [ 35.407763][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.415215][ T297] bridge_slave_0: left allmulticast mode [ 35.420846][ T297] bridge_slave_0: left promiscuous mode [ 35.426534][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.434158][ T297] bridge_slave_1: left allmulticast mode [ 35.439849][ T297] bridge_slave_1: left promiscuous mode [ 35.445466][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.452798][ T297] bridge_slave_0: left allmulticast mode [ 35.458520][ T297] bridge_slave_0: left promiscuous mode [ 35.464110][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.709348][ T297] veth1_macvtap: left promiscuous mode [ 35.714912][ T297] veth0_vlan: left promiscuous mode [ 35.720380][ T297] veth1_macvtap: left promiscuous mode [ 35.726036][ T297] veth0_vlan: left promiscuous mode [ 35.731556][ T297] veth1_macvtap: left promiscuous mode [ 35.737287][ T297] veth0_vlan: left promiscuous mode