last executing test programs: 38.949385866s ago: executing program 1 (id=54): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250b"], 0x1f4}, 0x1, 0x0, 0x0, 0x40800}, 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x100f74}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x4, 0x5, 0xffff]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x58}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x180}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xaa6a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000880)={0x3, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x5, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e21, 0x10000, @remote, 0x73f}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffff80}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @private0, 0x3ff}}]}, 0x70}, 0x1, 0x7}, 0x3400c014) sendmsg$AUDIT_TTY_SET(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x3f9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8001) socketpair(0x6, 0x2, 0x5, &(0x7f0000000480)) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000140)="3900002013", 0x5}], 0x1) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000540)={[0x60000000004, 0x1000000000, 0x6, 0x41, 0x2000000, 0x7, 0x2004cf, 0x7f, 0x2, 0x4068ff, 0x1, 0x0, 0x3, 0x10000000a, 0x50], 0xdddd0000, 0x156201}) (async) r11 = socket$inet6(0x10, 0x3, 0x0) write(r11, &(0x7f0000000980)="2400000021002551241c0165ff00fc02020000e900100f000ebf000c08000b0000000000", 0x24) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r11, 0x80111500, &(0x7f00000004c0)) 38.808042989s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="9740c0c4ea9c40d1", 0xffffff82) 38.80742772s ago: executing program 1 (id=57): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x601}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x50, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2], 0x34}}, 0x0) 38.80631177s ago: executing program 1 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x8, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000500)='./bus\x00') setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x8, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) (async) chdir(&(0x7f0000000500)='./bus\x00') (async) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) (async) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) (async) 38.80622476s ago: executing program 1 (id=59): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x2b, 0x803, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8080, 0x0, 0x1, 0x1}}) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 38.769541221s ago: executing program 1 (id=60): r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000080)) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1d}, {0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000200)={0x2, 0x3, 0x7}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x52b7e902fa9a2ba7, 0x17e, 0x15}, 0x18) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x19c, &(0x7f00000005c0)) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) read(r1, &(0x7f0000000300)=""/163, 0xa3) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x6, 0x7e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000ffcf07026840000102030109026c00030101c0000904000000010100000a2401070016000201020c240205060201010a0009b609040100000102000009040101010102000009050109600000c0080725010004060009040200000101010200000905"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0xffffffffffffff6d, &(0x7f0000000840)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 38.728775911s ago: executing program 32 (id=60): r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000080)) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x3, {{0x2, 0x4e20, @multicast1}}}, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1d}, {0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000200)={0x2, 0x3, 0x7}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x52b7e902fa9a2ba7, 0x17e, 0x15}, 0x18) statx(r4, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x19c, &(0x7f00000005c0)) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) read(r1, &(0x7f0000000300)=""/163, 0xa3) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x6, 0x7e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000ffcf07026840000102030109026c00030101c0000904000000010100000a2401070016000201020c240205060201010a0009b609040100000102000009040101010102000009050109600000c0080725010004060009040200000101010200000905"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0xffffffffffffff6d, &(0x7f0000000840)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.449421831s ago: executing program 3 (id=372): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) syz_ublk_setup_io_uring(0x28b3, &(0x7f0000000000)={0x0, 0x8b41, 0x40, 0x2, 0x30f}, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x20002, 0x0) ioctl(r1, 0xc0184d03, &(0x7f0000000240)) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 4.423830002s ago: executing program 2 (id=373): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) 4.340790624s ago: executing program 3 (id=376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000180)={0x32, 0x200, 0x6, 0x7, 0x5, 0x1, 0xd5, 0x1005, 0x6, 0x2, 0xf10a, 0xe, 0x64, 0xfffffffb}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0xee00, r3, r3) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xd, 0xed, {0xed, 0x1, "c4e09dc07fac1a5af26f73a5834a62eee776527f21b1c8c1909aaea0cff2cf27aab8b6583968f84d075207139c7b2507a3751a727e4ca8859f31162fbf0dc1bb2869fae9619c98f7d3e4da42acdeb8d918bede4ef95f45bc7322aa5002978935d33a49e749f852f8a40604ab09e36397d4ffc71199b9dadcb53ade5ce57302247f1ecb1f1f7e488356659aed6b0f0a0d735ded554d384e9afd8cccdf555ebbcf88980f33fe7429d1474104ab5191543b08bbbf2a804df01ba3d9e299931924f7d49582c85fa3e25958240677f0dc47a52aa47d3a399eb447bdfa155326e88aaa6b4ccfe9467b6c559b22f5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x19, @string={0x19, 0x3, "b86c6e5aba46fd8c588dce1301f1fded5fca4bf574451b"}}, &(0x7f0000000300)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dd6d80e5959f8e53a68831445372ace1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x1, 0x3, 0x34}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x93, 0x8, 0x1, 0x6, "f411a8f2", "d0d20ff4"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x9, 0x9, 0xb4, 0x47, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x40, 0x542a0fef90e847c, 0x4a, "d0efaebcce480faeb35c0673befd3cb7a10802bb45d68d72b2f7734f9c3ad0228e4b078e9a51df0ea7b62c0d3972aefd369f28947cfe09bcaae1abb4ba68548e32198363194abe0850c1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x140, 0x83, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x7b}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d914"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="fe7879ff6b9e"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "b99f"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xe9}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x6c}}) 3.577295673s ago: executing program 2 (id=379): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$incfs(r1, &(0x7f00000002c0)='.log\x00', 0x400205, 0x16) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.396985227s ago: executing program 2 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x2) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg2\x00', {0xdf74}, 0xe822}) 3.305356679s ago: executing program 2 (id=385): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000080)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x1000, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) keyctl$set_timeout(0xf, r0, 0x79) syz_io_uring_setup(0x1fca, &(0x7f0000000380)={0x0, 0x79b2, 0x100, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x101001, 0x0) ppoll(&(0x7f0000000540)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x5, 0x0, 0x5, 0x0, 0x5}, {0x0, 0x0, 0x800, 0xa000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2.403942201s ago: executing program 3 (id=395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="0fbaa58200060f01cf66b96b03000066b8f7ffffff66baffffffff0f308abde87666b9800000c00f326635010000000f3066b9100b00000f3266b89f0800000f23c80f21f86635000010000f23f80f070f01c8640f30", 0x56}], 0x1, 0x34, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000001340)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000001300)="94777c193ec347cac353f8b5037cef8a98dc936e557bf6f157d6") sendfile(r3, r4, 0x0, 0x20000023896) ioctl$KVM_RUN(r2, 0xae80, 0x0) setns(0xc9, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000011c0)=0x1, 0x4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000013c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580), 0x8101, 0x0) sendmmsg$inet(r5, &(0x7f0000001200)=[{{&(0x7f0000001240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000015c0)={0xff80, 0xb, 0x3, 0x8, 0x17, "1801b9f8833ef5baa02852ba4f1d5081dd21c0"}) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "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"}, 0x1034) 2.03282966s ago: executing program 3 (id=397): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r0 = syz_io_uring_setup(0xa94, &(0x7f0000000000)={0x0, 0xc9e1, 0x2000, 0x1, 0x3e5}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000140)={0xf6, {0x24, 0x2, 0xa0, 0x8, 0x8}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000180)=0x1, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x601}, "4a954a50b9d5eade", "3405ba80c3f7e8e89ac59495023e51571e58fd5e768df3f9f21c9f68224b60e0", "4ee08fd7", "66f4dc92decaecb8"}, 0x38) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000740)=""/45, 0x2d}], 0xa, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'veth1_vlan\x00', 0x0}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000880)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80408200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x1b4, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa65e013abeac0a68}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000008}, 0x40d1) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000b80)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000bc0)={'batadv0\x00', @random="f8589cb7a185"}) r6 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder_logs/state_hashed\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x7c, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x8, &(0x7f0000000e00)=[{0x0, 0x8, 0x7, 0x8000}, {0x6, 0x6, 0x2, 0xf}, {0x900, 0x7d, 0xff, 0x1}, {0x3, 0xb}, {0x7, 0x0, 0x4, 0x80000001}, {0x7, 0x6, 0x23, 0x6}, {0x7, 0x0, 0x5, 0xb19}, {0x8, 0x3, 0x3, 0x2}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000e80)={'wg0\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb4, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb0e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf39400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xac}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r11, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000894}, 0x20000000) ioctl$KVM_TDX_FINALIZE_VM(r6, 0xc008aeba, &(0x7f0000001180)) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000011c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r10}, 0x14) 1.968263662s ago: executing program 3 (id=399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000480)={@val={0xa, 0x9000}, @void, @eth={@remote, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x2e2, 0x3a, 0xff, @loopback, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x4, 0x0, 0x7, [{0x3, 0x15, "ca2e6a533523a330dcaf36e895354ac3ae1d0790ab3ca77dbd8e1b0c7e14e1ae9613279be33d2ca8f9d5656be328b0f3261df348286443c39ad3e7e34c2dc95de98eda77ecf4f75c22539f3259b3e4a155cb0c258076fc02d905db09117a7177dfa44e149960af7a8a96feed35746ae649962e65c6c7227feeef13b5c3aff18dd77b4a6f66fc36ed180fb92445916957567c0f9815d62fa8df5213c589b41ea4a6f3562240adce31110a5b898f"}, {0x11, 0x1d, "2639f88dea744701c4910371f93155b1cf03d48b9159fc0e21a598257f54864e503a672bf44c2f32edf35e9b5ba7ecb921ec0c7acb52649bf997707cbf1b09e9fc2f86bfaccaa7ee39bc6660208d104251799e64f7c0b90833d388962748aa2f46eb8453e63d037fec7a5ff728bc998ceb87e98af2ad0370924edfea90ccca5dbf6efd42c9d4eea9708c1f36af243ce4370c17efdc69ac788fc08b37d27a0833054fefa0d380ec69f235e5831efa068f52232f66141a2a91cad87f7523571f74429a22a72ff62a8a119bf2496430493e0621cd40ded9a4935d8e7464ac5187a7e274c43ebc39ecaf7e"}, {0x22, 0x18, "9efd9811814a3ff2ad394e6854728e87f85732e2bb046348ba8b634332afabb97b76cf68ccd5fa84d3732ea9b37c6f098ac3529c0fa0379f87dfc24973ef9602c4c28db9ba40d6e3a589f689765102dd741db8e36f508ad039c5c1ffec97bde67e6d6ce4f4de333485360758b1429a7d2b8894216eeb11726134dc8709d73b0bb10b6f91d4624597c33ca202900d2660b407e42fd71902a0b9e5d5f69e1899b034da6c9e112e07d6ef9e1d11467e01151f533a4d170c8934dbe3e3f5afda0257b869ede4"}, {0x1f, 0xe, "83e1222b9bb795ab5ea24348c3b03eb966bbbda2cc51f5daad7d4a58231d487e59c4568c28ca1c25ea6dfb0a3bc2336ed47a685c0973da4614cd77235d8fb8bca4b3249ebce4c97a07aa8cf2c11e96fb4de8c903ec191ef645685626ebaddee8f1290b552e9aa98f2b9217be62d2001d"}]}}}}}}}, 0x31c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000340)={0x4, 0x0, [{0x1, 0x1, 0x0, 0x0, @irqchip={0x8, 0x9}}, {0x9, 0x3, 0x1, 0x0, @sint={0xc30, 0x2}}, {0x0, 0x2, 0x0, 0x0, @msi={0x83, 0x4, 0x804, 0x6}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x3, 0x5, 0x80000001, 0x7f, 0xc}}]}) write$eventfd(r5, &(0x7f0000000440)=0x3, 0x50) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 1.555905112s ago: executing program 3 (id=402): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) r1 = fsopen(&(0x7f0000000080)='ext4\x00', 0x0) (async) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) (async) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) (async) r4 = syz_open_pts(r0, 0x200) dup3(r4, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xc3) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_clone(0x2823ec00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="63f22642c5ef388d71720840351b101a248549248d72d106b09722ff07ad0fa56eb67e7e55aa42c889d339868e8e77") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.517458983s ago: executing program 0 (id=404): r0 = socket(0x10, 0x3, 0x0) dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.325603038s ago: executing program 0 (id=405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3, {0x8001, 0x80000000, 0x10, 0x8, 0x0, 0x14}}) 1.267900929s ago: executing program 0 (id=406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r1, &(0x7f0000000140)='3', 0x1) ioctl$TIOCNXCL(r0, 0x540d) 1.266424879s ago: executing program 0 (id=407): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x80082) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_snmp6\x00') fchdir(r1) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x2040) capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000600)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0db7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mount(0x0, 0x0, 0x0, 0x440, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x4000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/3\x00') ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000240)=0x8) pwritev(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!E\x00', 0x4}], 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000180)=[{&(0x7f00000004c0)="b643ea7589989db9cf8cb887da744afedb4b2a850e318b991dd2942b6dbb30b3db835174c86de42485126ae6c53d563a5460b938eb3efa1c26cb0eabccbe82ef9ba14fb46bc4e9a83e61167f87f431bd5b9b6e192389161663465c74717fec387e02c88c0a1defd8660afe305245f5faf63e310646595215825381474b90722ef1ec3c0b7569b4325a14847652b6914dc4535a73ee2921ebb9318dafc3ddb255ac9984a29242794ee8ccd181bf1142c0d01830e36e1d9e638e2c68eba387079c06258e495831c98db60f5b9dc16f2409001cea5e", 0xd4}, {&(0x7f0000000a40)="8f232d18ae084c5b0f49d704e6ac7b51cf748da4a9e067b87082b528ff2881a3dd18aeee210130098a5c409c1a45d45583f931b33ac6a36db9b5899c829790c9f249ea2afac042d7690a5aad77b2dab3f340c35f26af537e041445a15897a27f0cf56dac07cd115710915698e70194f65502810a47500fe5c6405213460734ece97ef5c620d230306c5f7d491d008422387093b8a863a0fa7e43eb5378f299e7d2e78df3a43763998fdb229f1749cf3c68ce326168dffc0689cc89edc7a4378f932ebf9e18c67f7edb147254a7fdc75c7c77a0432fdf3995c73dd1aa9fc71a7a4df67b1e2441ff33544d61baa08ac751037fbb3b8d1e3000ce1b246dc4cc1ca932d60ddf14369aebfe620df32773394964bad9e65a3b51ccde952b882f00a1ddcf54dc2a70d61216b2ae59652f63", 0x12e}], 0x2, 0x6, 0x6e, 0x14) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001980)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11db22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) fallocate(r0, 0x11, 0x0, 0x5345) 1.24594174s ago: executing program 0 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000680)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000006c0)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000700)=0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write$eventfd(r5, 0x0, 0x0) write$P9_RLINK(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) fallocate(r7, 0x8, 0xf, 0x7fffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000780)=0x2, 0x4) bind$xdp(r4, &(0x7f00000007c0)={0x2c, 0x4, r6}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00030004fcff", 0x58}], 0x1) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/l2cap\x00') unshare(0x60000080) userfaultfd(0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='net/route\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 399.94193ms ago: executing program 4 (id=410): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040), 0x37, 0x4000000) 399.74017ms ago: executing program 4 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x8000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000c00000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="48c7c00200010048c7c102000100b9800000c00f3235010000000f304831d20f9a01c13e02c1", 0x26}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 292.906423ms ago: executing program 2 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./bus\x00', 0x11f) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x3}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000040)=@filename='./file0\x00', 0x0, &(0x7f0000000080)={0x6, 0x8000000002, 0x0, 0x7}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 291.082193ms ago: executing program 4 (id=413): r0 = socket(0x10, 0x3, 0x0) dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 266.940324ms ago: executing program 0 (id=414): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002d0001000000000000000000080000", @ANYRES32, @ANYRES32=0xee00], 0x24}], 0x1}, 0x8010) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0x5}) (async) r2 = open(&(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC], 0x31) (async) r3 = syz_io_uring_setup(0x1efb, &(0x7f00000002c0)={0x0, 0x728, 0x3010, 0xfffffffc, 0xfffffffe}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) (async) exit(0xfffffffffffffffd) (async) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)={0xe000200f}) (async) r5 = timerfd_create(0x3, 0x0) timerfd_gettime(r5, &(0x7f0000000280)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa1) (async) timer_settime(r0, 0x1, &(0x7f00000000c0), 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x39000, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x408cd, 0x4) (async) write$binfmt_elf64(r8, &(0x7f00000001c0)=ANY=[], 0xfffffe3e) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 220.100905ms ago: executing program 2 (id=415): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x480300) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000240)={0x55, 0x93d2, 0x8, {0x4f20, 0x3}, {0x4}, @period={0x59, 0x200, 0x1, 0x3, 0x6, {0x8000, 0x8, 0xfff9, 0x7}, 0x0, &(0x7f0000000200)}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x1a}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, &(0x7f0000000140)=""/117, 0x75) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000083512038240800102030109026900030180e007080b0101010a20000904000000010120000924010200030900c50904010000010220000904010101010220000905010940000504000825018109090200092c2a78a2d99fdf040200000102200009040201010102200009058209ff0304041008"], 0x0) 153.475986ms ago: executing program 4 (id=416): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000000380)=""/4141, 0x1, 0x102d}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) rt_sigqueueinfo(r1, 0x21, &(0x7f00000013c0)={0x1f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 51.023479ms ago: executing program 4 (id=417): quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000040)={0x7fffffffffffffff, 0x7df6, 0xfffffffffffffffd, 0x6, 0x549989d4, 0x100000001, 0xb, 0x4, 0x1}) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000000c0)="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", 0xfc) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x21}, 0xd48}]}]}}}], 0x20}, 0x20048090) 0s ago: executing program 4 (id=418): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x9, 0xa, 0x1, 0x5, 0x3, 0x2, 0x3, 0x0, 0x7, 0x80, 0x6, 0x4, 0x1, 0x80, 0x2d, 0xc}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000840)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x4000380000, 0x1, 0x84d9, 0x5, 0x5, 0x7ffe], 0x1, 0x3c4210}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000980)="8907046698523f0700ecf3c8e9040051fddb51cd4b771b43f4245e13deb85c87cf07db26be03e3c9674eb63faa6cbcec8041e4d03d955a0b8f49da346b1539672030e5bbcfb06e57014138c646726a462100691c788d32a5488b9300f6d2defc62748204534d97da3789b7e5ce2540850b4e14709456142c3f8670f4afc42af24739d01be436edbb07b5f50f529ccb0f3ff90888a3db2d664e2dcfd38aa81095801ff792d0cf5595af8fd835d46c43b4e8", 0x49) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000780)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)="653a6d795f726561645f6d7372afe3cfe576d8138bca7ec13331206d", 0x1c) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e2f, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000440), 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="1b", 0x1}], 0x1) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000f00)=@vmx={0x0, 0x0, 0x2080, {0x2000, 0xdddd0000, {0x6}, 0x0, 0x8}, {"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", "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"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.354261][ T36] audit: type=1400 audit(1792192708.610:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.395948][ T36] audit: type=1400 audit(1792192708.710:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.423383][ T36] audit: type=1400 audit(1792192708.710:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.423662][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.294742][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.302672][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.310954][ T293] bridge_slave_0: entered allmulticast mode [ 28.317345][ T293] bridge_slave_0: entered promiscuous mode [ 28.325114][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.332275][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.339491][ T293] bridge_slave_1: entered allmulticast mode [ 28.345819][ T293] bridge_slave_1: entered promiscuous mode [ 28.379281][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.386783][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.394974][ T296] bridge_slave_0: entered allmulticast mode [ 28.401216][ T296] bridge_slave_0: entered promiscuous mode [ 28.409944][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417598][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.425432][ T296] bridge_slave_1: entered allmulticast mode [ 28.431912][ T296] bridge_slave_1: entered promiscuous mode [ 28.485018][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.492954][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.502082][ T294] bridge_slave_0: entered allmulticast mode [ 28.510210][ T294] bridge_slave_0: entered promiscuous mode [ 28.523643][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.531469][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.541336][ T294] bridge_slave_1: entered allmulticast mode [ 28.548929][ T294] bridge_slave_1: entered promiscuous mode [ 28.573025][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.581238][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.588728][ T295] bridge_slave_0: entered allmulticast mode [ 28.595507][ T295] bridge_slave_0: entered promiscuous mode [ 28.604369][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.612294][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.619897][ T295] bridge_slave_1: entered allmulticast mode [ 28.626943][ T295] bridge_slave_1: entered promiscuous mode [ 28.737326][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.744636][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.752023][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.759380][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.795246][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.802324][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.809942][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.817551][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.844624][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.852480][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.859805][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.867156][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.880100][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.887690][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.895150][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.902284][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.935024][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.942421][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.950379][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.958354][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.966150][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.974241][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.982823][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.996816][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.004412][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.025758][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.032838][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.041671][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.049037][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.071811][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.079272][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.087366][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.094512][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.121263][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.128396][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.136740][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.144052][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.168699][ T293] veth0_vlan: entered promiscuous mode [ 29.184616][ T296] veth0_vlan: entered promiscuous mode [ 29.198413][ T294] veth0_vlan: entered promiscuous mode [ 29.207360][ T293] veth1_macvtap: entered promiscuous mode [ 29.227881][ T296] veth1_macvtap: entered promiscuous mode [ 29.245730][ T294] veth1_macvtap: entered promiscuous mode [ 29.255424][ T295] veth0_vlan: entered promiscuous mode [ 29.290126][ T295] veth1_macvtap: entered promiscuous mode [ 29.313122][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.544498][ T331] FAULT_INJECTION: forcing a failure. [ 29.544498][ T331] name failslab, interval 1, probability 0, space 0, times 1 [ 29.562546][ T335] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.573509][ T331] CPU: 0 UID: 0 PID: 331 Comm: syz.2.7 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 29.573553][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.573576][ T331] Call Trace: [ 29.573584][ T331] [ 29.573591][ T331] __dump_stack+0x21/0x30 [ 29.573633][ T331] dump_stack_lvl+0x140/0x1c0 [ 29.573663][ T331] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.573694][ T331] dump_stack+0x19/0x20 [ 29.573718][ T331] should_fail_ex+0x3c2/0x510 [ 29.573738][ T331] should_failslab+0xac/0x100 [ 29.573757][ T331] kmem_cache_alloc_noprof+0x42/0x410 [ 29.573782][ T331] ? security_file_alloc+0x49/0x220 [ 29.573806][ T331] ? kasan_save_alloc_info+0x3a/0x50 [ 29.573932][ T331] security_file_alloc+0x49/0x220 [ 29.573965][ T331] init_file+0x9e/0x210 [ 29.573987][ T331] alloc_empty_file+0xd9/0x270 [ 29.574007][ T331] path_openat+0xf4/0x35a0 [ 29.574025][ T331] ? stack_depot_save_flags+0x38/0x800 [ 29.574046][ T331] ? try_to_wake_up+0x119e/0x1fd0 [ 29.574073][ T331] ? kasan_save_track+0x4f/0x80 [ 29.574101][ T331] ? kasan_save_track+0x3e/0x80 [ 29.574128][ T331] ? kasan_save_alloc_info+0x3a/0x50 [ 29.574151][ T331] ? __kasan_slab_alloc+0x73/0x90 [ 29.574168][ T331] ? getname+0x1b/0x30 [ 29.574192][ T331] ? do_sys_openat2+0xda/0x1d0 [ 29.574212][ T331] ? __x64_sys_openat+0x13a/0x170 [ 29.574232][ T331] ? x64_sys_call+0xe69/0x2ee0 [ 29.574252][ T331] ? do_syscall_64+0x57/0xf0 [ 29.574271][ T331] ? do_filp_open+0x440/0x440 [ 29.574290][ T331] do_filp_open+0x1f2/0x440 [ 29.574310][ T331] ? __cfi_do_filp_open+0x10/0x10 [ 29.574331][ T331] ? alloc_fd+0x4c1/0x570 [ 29.574359][ T331] do_sys_openat2+0x134/0x1d0 [ 29.574379][ T331] ? do_sys_open+0x100/0x100 [ 29.574400][ T331] __x64_sys_openat+0x13a/0x170 [ 29.574422][ T331] x64_sys_call+0xe69/0x2ee0 [ 29.574439][ T331] do_syscall_64+0x57/0xf0 [ 29.574455][ T331] ? clear_bhb_loop+0x50/0xa0 [ 29.574477][ T331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.574498][ T331] RIP: 0033:0x7ff2e1b9e559 [ 29.574590][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.574607][ T331] RSP: 002b:00007ff2e2b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 29.574637][ T331] RAX: ffffffffffffffda RBX: 00007ff2e1e26090 RCX: 00007ff2e1b9e559 [ 29.574652][ T331] RDX: 0000000000000002 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 29.574666][ T331] RBP: 00007ff2e1c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 29.574679][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.574691][ T331] R13: 00007ff2e1e26128 R14: 00007ff2e1e26090 R15: 00007ffc415b8728 [ 29.574707][ T331] [ 29.720417][ T336] netlink: 'syz.0.5': attribute type 5 has an invalid length. [ 29.902324][ T343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.162482][ T357] overlay: filesystem on ./bus not supported as upperdir [ 30.223692][ T361] ./dev/sda1: Can't lookup blockdev [ 30.233437][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.357473][ T364] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 30.368458][ T9] usb 4-1: device descriptor read/64, error -71 [ 30.385573][ T369] netlink: 'syz.1.16': attribute type 32 has an invalid length. [ 30.475543][ T377] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 30.493985][ T378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 30.563227][ T387] netlink: 'syz.1.23': attribute type 29 has an invalid length. [ 30.623485][ T9] usb 4-1: device descriptor read/64, error -71 [ 30.703555][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.843631][ T31] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 30.853497][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 30.860231][ T66] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 30.868468][ T66] usb 3-1: config 0 has no interface number 0 [ 30.873452][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.876377][ T66] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 30.891447][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.900107][ T66] usb 3-1: Product: syz [ 30.904979][ T66] usb 3-1: Manufacturer: syz [ 30.910037][ T66] usb 3-1: SerialNumber: syz [ 30.916141][ T66] usb 3-1: config 0 descriptor?? [ 30.922015][ T66] smsc95xx v2.0.0 [ 30.994578][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 31.006716][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 31.019970][ T31] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 31.023488][ T9] usb 4-1: device descriptor read/64, error -71 [ 31.029822][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.048649][ T31] usb 2-1: config 0 descriptor?? [ 31.054657][ T395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 31.269456][ T395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.279350][ T395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.288491][ T9] usb 4-1: device descriptor read/64, error -71 [ 31.290411][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 31.302201][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.312548][ T31] usb 2-1: USB disconnect, device number 2 [ 31.323735][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 31.335063][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 31.404105][ T9] usb usb4-port1: attempt power cycle [ 31.746406][ T66] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 31.753531][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.759200][ T66] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 31.804869][ T9] usb 4-1: device descriptor read/8, error -71 [ 31.834347][ T31] usb 3-1: USB disconnect, device number 2 [ 31.944924][ T9] usb 4-1: device descriptor read/8, error -71 [ 32.063473][ T66] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 32.183674][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.204741][ T9] usb 4-1: device descriptor read/8, error -71 [ 32.215128][ T66] usb 2-1: not running at top speed; connect to a high speed hub [ 32.225601][ T66] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 32.234971][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.243215][ T66] usb 2-1: Product: 듙 [ 32.247562][ T66] usb 2-1: Manufacturer: 嗐쒯޲䳬鍹⎑锦ﲍ칶볉䫡ᕯڛ꾴䊟יּ霉䣒쩁ꉁ숾쭚톉ꖬꏼ岕넏絹᠀촽鮩媓桜稈쏮슆浌폿塭竢ꞩ⦦飩횂䘩Ꙙ캡ﯩเ淩㞬찱䘈暆뜄壳믈᥌鲄뎂짠ẩᜐ듿졖藻㪻᳢컝㑖᥏ꬭᬷ⤩ቐ됻Ⓜჲꞓ꯰ [ 32.277463][ T66] usb 2-1: SerialNumber: 祌㝘홲槭┠粲艿ꠖ甮］쎯Ƃ섬ᆒ꟦岢蘒恿혇᏶伸J⋇䥎⏉㭸僩蠩关ퟵ퇏朂譿헩࢈㥁⋫搑⑍冫儓 [ 32.334606][ T9] usb 4-1: device descriptor read/8, error -71 [ 32.443479][ T9] usb usb4-port1: unable to enumerate USB device [ 32.495596][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 32.495613][ T36] audit: type=1400 audit(1792192713.810:156): avc: denied { read write } for pid=402 comm="syz.1.29" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.526152][ T66] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 32.528639][ T36] audit: type=1400 audit(1792192713.810:157): avc: denied { open } for pid=402 comm="syz.1.29" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.538712][ T66] usb 2-1: USB disconnect, device number 3 [ 32.559620][ T36] audit: type=1400 audit(1792192713.810:158): avc: denied { ioctl } for pid=402 comm="syz.1.29" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.591118][ T36] audit: type=1400 audit(1792192713.840:159): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 32.618888][ T36] audit: type=1400 audit(1792192713.930:160): avc: denied { mount } for pid=411 comm="syz.0.33" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.641386][ T36] audit: type=1400 audit(1792192713.930:161): avc: denied { write } for pid=411 comm="syz.0.33" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.704253][ T36] audit: type=1400 audit(1792192714.020:162): avc: denied { mount } for pid=411 comm="syz.0.33" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.733383][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.763254][ T36] audit: type=1400 audit(1792192714.070:163): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.786199][ T36] audit: type=1400 audit(1792192714.090:164): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.835643][ T36] audit: type=1400 audit(1792192714.150:165): avc: denied { setopt } for pid=426 comm="syz.0.35" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.897484][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 32.904710][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.914755][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.925435][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.936354][ T9] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.54 [ 32.946500][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.956434][ T9] usb 3-1: Product: syz [ 32.960956][ T9] usb 3-1: Manufacturer: syz [ 32.965876][ T9] usb 3-1: SerialNumber: syz [ 33.078860][ T452] Zero length message leads to an empty skb [ 33.101133][ T454] netlink: 56 bytes leftover after parsing attributes in process `syz.3.43'. [ 33.178345][ T9] usb 3-1: unit 0 not found! [ 33.185572][ T9] usb 3-1: USB disconnect, device number 3 [ 33.201205][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.255086][ T457] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.273426][ T396] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 33.424211][ T396] usb 1-1: not running at top speed; connect to a high speed hub [ 33.433070][ T396] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.443462][ T396] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 33.453163][ T396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.465076][ T396] usb 1-1: Found UVC 1.00 device (046d:0825) [ 33.472666][ T396] usb 1-1: No streaming interface found for terminal 2. [ 33.617614][ T460] tipc: Started in network mode [ 33.622706][ T460] tipc: Node identity 4, cluster identity 4711 [ 33.629549][ T460] tipc: Node number set to 4 [ 33.691495][ T12] tipc: Subscription rejected, illegal request [ 33.861704][ T476] ======================================================= [ 33.861704][ T476] WARNING: The mand mount option has been deprecated and [ 33.861704][ T476] and is ignored by this kernel. Remove the mand [ 33.861704][ T476] option from the mount to silence this warning. [ 33.861704][ T476] ======================================================= [ 33.863925][ T477] overlayfs: overlapping lowerdir path [ 33.915351][ T480] loop8: detected capacity change from 0 to 16384 [ 33.973395][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.036942][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.046222][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.094155][ T480] loop8: detected capacity change from 16384 to 16383 [ 34.133539][ T486] process 'syz.3.53' launched './file1' with NULL argv: empty string added [ 34.148710][ T486] X.509: signatureAlgorithm (103) differs from tbsCertificate.signature (7) [ 34.160006][ T489] netlink: 480 bytes leftover after parsing attributes in process `syz.1.54'. [ 34.169650][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 34.177287][ T313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.188192][ T313] usb 3-1: config 0 has no interfaces? [ 34.198378][ T313] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 34.210821][ T313] usb 3-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 34.219572][ T313] usb 3-1: Product: syz [ 34.223859][ T313] usb 3-1: Manufacturer: syz [ 34.228457][ T313] usb 3-1: SerialNumber: syz [ 34.233745][ T313] usb 3-1: config 0 descriptor?? [ 34.326537][ T310] bridge_slave_1: left allmulticast mode [ 34.332654][ T310] bridge_slave_1: left promiscuous mode [ 34.338515][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.347780][ T310] bridge_slave_0: left allmulticast mode [ 34.354254][ T310] bridge_slave_0: left promiscuous mode [ 34.360107][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.442487][ T470] /dev/nbd2: Can't lookup blockdev [ 34.448344][ T470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.459891][ T470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.470886][ T313] usb 3-1: USB disconnect, device number 4 [ 34.479017][ T310] tipc: Left network mode [ 34.486109][ T310] veth1_macvtap: left promiscuous mode [ 34.491718][ T310] veth0_vlan: left promiscuous mode [ 34.504423][ T396] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.537369][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.545055][ T507] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.552560][ T507] bridge_slave_0: entered allmulticast mode [ 34.559680][ T507] bridge_slave_0: entered promiscuous mode [ 34.566508][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.573711][ T507] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.581397][ T507] bridge_slave_1: entered allmulticast mode [ 34.589835][ T507] bridge_slave_1: entered promiscuous mode [ 34.630429][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.637509][ T507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.644925][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.653217][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.674724][ T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.686515][ T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.696908][ T396] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.697017][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.709959][ T396] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.727283][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.727384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.742489][ T396] usb 4-1: config 0 descriptor?? [ 34.753238][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.760788][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.770947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.778391][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.806760][ T507] veth0_vlan: entered promiscuous mode [ 34.819292][ T507] veth1_macvtap: entered promiscuous mode [ 34.874751][ T516] 9pnet: Could not find request transport: f:nʝrƌav&isчta [ 34.874751][ T516] >'Z\]q39` [ 35.133406][ T31] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 35.153094][ T396] plantronics 0003:047F:FFFF.0001: bogus close delimiter [ 35.160521][ T396] plantronics 0003:047F:FFFF.0001: item 0 0 2 10 parsing failed [ 35.168976][ T396] plantronics 0003:047F:FFFF.0001: parse failed [ 35.176545][ T396] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 35.283447][ T31] usb 5-1: Invalid ep0 maxpacket: 16 [ 35.423466][ T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 35.493627][ T396] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.583400][ T31] usb 5-1: Invalid ep0 maxpacket: 16 [ 35.588903][ T31] usb usb5-port1: attempt power cycle [ 35.643436][ T396] usb 3-1: Using ep0 maxpacket: 16 [ 35.650196][ T396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.658866][ T396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.669546][ T396] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.680013][ T396] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 35.695302][ T396] usb 3-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40 [ 35.705708][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.714141][ T396] usb 3-1: Product: syz [ 35.718733][ T396] usb 3-1: Manufacturer: syz [ 35.723600][ T396] usb 3-1: SerialNumber: syz [ 35.943456][ T31] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 35.964076][ T31] usb 5-1: Invalid ep0 maxpacket: 16 [ 35.993842][ T313] usb 1-1: USB disconnect, device number 2 [ 36.027711][ T396] usb 3-1: unit 5 not found! [ 36.035416][ T396] usb 3-1: USB disconnect, device number 5 [ 36.046703][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.093455][ T31] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 36.114450][ T31] usb 5-1: Invalid ep0 maxpacket: 16 [ 36.120144][ T31] usb usb5-port1: unable to enumerate USB device [ 36.493488][ T566] tmpfs: Bad value for 'nr_inodes' [ 36.504946][ T566] overlayfs: workdir and upperdir must reside under the same mount [ 36.626729][ T585] can0: slcan on ptm1. [ 36.664453][ T584] can0 (unregistered): slcan off ptm1. [ 36.833453][ T313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.993406][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 37.001686][ T313] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 37.011822][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.020050][ T313] usb 3-1: Product: syz [ 37.024500][ T313] usb 3-1: Manufacturer: syz [ 37.029137][ T313] usb 3-1: SerialNumber: syz [ 37.183639][ T592] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 37.238238][ T313] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 37.326156][ T396] usb 4-1: USB disconnect, device number 6 [ 37.446658][ T313] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 37.455199][ T313] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 37.462199][ T313] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 37.483044][ T313] usb 3-1: USB disconnect, device number 6 [ 37.499506][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.533619][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 37.703437][ T396] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.705174][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.719218][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 37.729846][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 37.739344][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.747457][ T9] usb 1-1: Product: 웨콯喕ዬ텽ꪐ溡ᅬ俫ⶠ뼈冩湐宋㶁ࢸ（黉잍뒠䦬舏괶મ掭陊苔ꈠ衩쀎ꆺ봘찮⯕ [ 37.760777][ T9] usb 1-1: Manufacturer: Ⲃä봅筁낂ᙡ曜꒗傫℃痠▖絘쟍ㅐ袴⧐⩹줺ᕛ턿ڇ닙㚿夜⍟䳗끕哭⛬猊缘ꕳ틖瀎䦘댫뇛꼴 [ 37.776836][ T9] usb 1-1: SerialNumber: 퇏䭶䬥逯꫗褡ጘ蜎Ⲏｂ약茿钤庯⭸๏㖏ꔓ컑晴黫忂젼묋蟳謜ひ鶉℅၇返懪ࢺᝌ⭿듨フ螏㶿劫向 [ 37.833424][ T396] usb 4-1: device descriptor read/64, error -71 [ 37.956809][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 37.956825][ T36] audit: type=1400 audit(1792192719.270:226): avc: denied { getopt } for pid=612 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.982893][ T36] audit: type=1400 audit(1792192719.280:227): avc: denied { listen } for pid=612 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.011390][ T9] usb 1-1: USB disconnect, device number 3 [ 38.012172][ T617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 38.039167][ T36] audit: type=1400 audit(1792192719.350:228): avc: denied { read write } for pid=618 comm="syz.2.88" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.068070][ T36] audit: type=1400 audit(1792192719.350:229): avc: denied { open } for pid=618 comm="syz.2.88" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.082517][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.092912][ T36] audit: type=1400 audit(1792192719.380:230): avc: denied { map } for pid=620 comm="syz.2.89" path="pipe:[5516]" dev="pipefs" ino=5516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 38.112205][ T396] usb 4-1: device descriptor read/64, error -71 [ 38.373491][ T396] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.503582][ T396] usb 4-1: device descriptor read/64, error -71 [ 38.529315][ T36] audit: type=1400 audit(1792192719.840:231): avc: denied { read write } for pid=623 comm="syz.4.90" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.544422][ T624] MTRR 1 not used [ 38.557457][ T36] audit: type=1400 audit(1792192719.840:232): avc: denied { open } for pid=623 comm="syz.4.90" path="/4/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.582941][ T36] audit: type=1400 audit(1792192719.860:233): avc: denied { ioctl } for pid=623 comm="syz.4.90" path="/4/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.609070][ T36] audit: type=1400 audit(1792192719.880:234): avc: denied { ioctl } for pid=623 comm="syz.4.90" path="socket:[5524]" dev="sockfs" ino=5524 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.633493][ T36] audit: type=1400 audit(1792192719.880:235): avc: denied { write } for pid=623 comm="syz.4.90" path="socket:[5524]" dev="sockfs" ino=5524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.753435][ T396] usb 4-1: device descriptor read/64, error -71 [ 38.853418][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.863593][ T396] usb usb4-port1: attempt power cycle [ 38.933403][ T313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.003917][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 39.010302][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.021456][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.034427][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.043516][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.052424][ T31] usb 5-1: config 0 descriptor?? [ 39.083432][ T313] usb 1-1: Using ep0 maxpacket: 16 [ 39.090108][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.098867][ T313] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 39.111316][ T313] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 39.120613][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.128969][ T313] usb 1-1: Product: syz [ 39.133143][ T313] usb 1-1: Manufacturer: syz [ 39.137802][ T313] usb 1-1: SerialNumber: syz [ 39.193393][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.213408][ T396] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.234352][ T396] usb 4-1: device descriptor read/8, error -71 [ 39.345947][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.353166][ T638] FAULT_INJECTION: forcing a failure. [ 39.353166][ T638] name failslab, interval 1, probability 0, space 0, times 0 [ 39.355807][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 39.368705][ T638] CPU: 1 UID: 0 PID: 638 Comm: syz.0.96 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 39.368739][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 39.368752][ T638] Call Trace: [ 39.368759][ T638] [ 39.368767][ T638] __dump_stack+0x21/0x30 [ 39.368804][ T638] dump_stack_lvl+0x140/0x1c0 [ 39.368831][ T638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.368857][ T638] ? futex_wake+0x666/0x950 [ 39.368881][ T638] ? kasan_save_track+0x4f/0x80 [ 39.368908][ T638] ? kasan_save_alloc_info+0x3a/0x50 [ 39.368929][ T638] ? __kasan_kmalloc+0x96/0xb0 [ 39.368955][ T638] dump_stack+0x19/0x20 [ 39.368981][ T638] should_fail_ex+0x3c2/0x510 [ 39.369001][ T638] should_failslab+0xac/0x100 [ 39.369021][ T638] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 39.369048][ T638] ? __d_alloc+0x42/0x8c0 [ 39.369072][ T638] ? expand_files+0xda/0x6f0 [ 39.369090][ T638] __d_alloc+0x42/0x8c0 [ 39.369111][ T638] d_alloc_pseudo+0x23/0xc0 [ 39.369134][ T638] alloc_file_pseudo+0xde/0x1f0 [ 39.369154][ T638] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 39.369173][ T638] ? _raw_spin_unlock+0x45/0x60 [ 39.369192][ T638] anon_inode_getfile+0xaa/0x190 [ 39.369212][ T638] do_epoll_create+0x277/0x3f0 [ 39.369231][ T638] __x64_sys_epoll_create1+0x3b/0x50 [ 39.369249][ T638] x64_sys_call+0x1761/0x2ee0 [ 39.369268][ T638] do_syscall_64+0x57/0xf0 [ 39.369283][ T638] ? clear_bhb_loop+0x50/0xa0 [ 39.369305][ T638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.369325][ T638] RIP: 0033:0x7fc9ed39e559 [ 39.369341][ T638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.369356][ T638] RSP: 002b:00007fc9ee33e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 39.369376][ T638] RAX: ffffffffffffffda RBX: 00007fc9ed625fa0 RCX: 00007fc9ed39e559 [ 39.369390][ T638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.369401][ T638] RBP: 00007fc9ed4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 39.369413][ T638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.369424][ T638] R13: 00007fc9ed626038 R14: 00007fc9ed625fa0 R15: 00007fff76b71298 [ 39.369439][ T638] [ 39.394430][ T396] usb 4-1: device descriptor read/8, error -71 [ 39.400034][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.462799][ T31] microsoft 0003:045E:07DA.0002: item fetching failed at offset 31/34 [ 39.466342][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 39.469429][ T31] microsoft 0003:045E:07DA.0002: parse failed [ 39.474871][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 39.479341][ T31] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 39.483393][ T9] usb 3-1: Product: syz [ 39.653465][ T396] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.660107][ T313] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.688333][ T9] usb 3-1: Manufacturer: syz [ 39.692999][ T313] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 39.708433][ T313] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 39.715210][ T396] usb 4-1: device descriptor read/8, error -71 [ 39.716567][ T9] usb 3-1: SerialNumber: syz [ 39.728971][ T313] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.741937][ T313] usb 1-1: USB disconnect, device number 4 [ 39.748537][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.844629][ T396] usb 4-1: device descriptor read/8, error -71 [ 39.940622][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 39.954333][ T396] usb usb4-port1: unable to enumerate USB device [ 40.148873][ T642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 40.158685][ T642] SELinux: Context system_u: is not valid (left unmapped). [ 40.167982][ T9] usb 3-1: USB disconnect, device number 7 [ 40.174757][ T9] usblp0: removed [ 40.223451][ T396] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.373387][ T396] usb 1-1: Using ep0 maxpacket: 8 [ 40.379826][ T396] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 40.395002][ T396] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 40.404397][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.412436][ T396] usb 1-1: Product: syz [ 40.417032][ T396] usb 1-1: Manufacturer: syz [ 40.421726][ T396] usb 1-1: SerialNumber: syz [ 40.629977][ T396] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 40.638476][ T396] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.654348][ T396] usb 1-1: USB disconnect, device number 5 [ 40.664439][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.554824][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.565472][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.578886][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.588224][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.597141][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.606190][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.615010][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.626895][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.641513][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.653806][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.656037][ T313] usb 5-1: USB disconnect, device number 6 [ 41.793395][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.012497][ T721] SELinux: ebitmap: truncated map [ 42.019548][ T721] SELinux: failed to load policy [ 42.373384][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 42.379752][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.391223][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.401318][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 42.414500][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 42.431813][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.436819][ T741] veth0: mtu less than device minimum [ 42.442091][ T9] usb 1-1: config 0 descriptor?? [ 42.583443][ T313] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 42.658987][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 42.673509][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.694377][ T9] usb 1-1: USB disconnect, device number 6 [ 42.723402][ T313] usb 4-1: device descriptor read/64, error -71 [ 42.963388][ T313] usb 4-1: device descriptor read/64, error -71 [ 43.025509][ T779] FAULT_INJECTION: forcing a failure. [ 43.025509][ T779] name failslab, interval 1, probability 0, space 0, times 0 [ 43.039091][ T779] CPU: 1 UID: 0 PID: 779 Comm: syz.2.143 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 43.039136][ T779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.039161][ T779] Call Trace: [ 43.039255][ T779] [ 43.039265][ T779] __dump_stack+0x21/0x30 [ 43.039300][ T779] dump_stack_lvl+0x140/0x1c0 [ 43.039328][ T779] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.039356][ T779] dump_stack+0x19/0x20 [ 43.039384][ T779] should_fail_ex+0x3c2/0x510 [ 43.039404][ T779] should_failslab+0xac/0x100 [ 43.039424][ T779] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 43.039455][ T779] ? pcpu_block_refresh_hint+0x201/0x320 [ 43.039476][ T779] ? kstrdup_const+0x45/0x60 [ 43.039562][ T779] ? pcpu_block_update_hint_alloc+0x8a0/0xc50 [ 43.039584][ T779] kstrdup+0x4d/0x130 [ 43.039608][ T779] ? kstrdup_const+0x3a/0x60 [ 43.039633][ T779] kstrdup_const+0x45/0x60 [ 43.039656][ T779] __kernfs_new_node+0xaa/0x740 [ 43.039679][ T779] ? mutex_unlock+0x90/0x240 [ 43.039702][ T779] ? pcpu_alloc_noprof+0x1440/0x1440 [ 43.039731][ T779] ? kernfs_new_node+0x280/0x280 [ 43.039751][ T779] ? pcpu_alloc_noprof+0xd93/0x1440 [ 43.039782][ T779] kernfs_new_node+0x154/0x280 [ 43.039803][ T779] kernfs_create_dir_ns+0x4b/0x130 [ 43.039826][ T779] cgroup_mkdir+0x396/0x1600 [ 43.039847][ T779] ? __kasan_check_write+0x18/0x20 [ 43.039874][ T779] ? __cfi_cgroup_mkdir+0x10/0x10 [ 43.039893][ T779] kernfs_iop_mkdir+0x1bb/0x2d0 [ 43.039914][ T779] vfs_mkdir+0x58e/0x810 [ 43.039938][ T779] do_mkdirat+0x240/0x530 [ 43.039960][ T779] ? __cfi_do_mkdirat+0x10/0x10 [ 43.039982][ T779] ? __kasan_check_write+0x18/0x20 [ 43.040006][ T779] ? getname_flags+0x203/0x6b0 [ 43.040034][ T779] ? __kasan_check_write+0x18/0x20 [ 43.040078][ T779] __x64_sys_mkdirat+0x8b/0xa0 [ 43.040103][ T779] x64_sys_call+0x2ba8/0x2ee0 [ 43.040125][ T779] do_syscall_64+0x57/0xf0 [ 43.040143][ T779] ? clear_bhb_loop+0x50/0xa0 [ 43.040168][ T779] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.040192][ T779] RIP: 0033:0x7ff2e1b9e559 [ 43.040211][ T779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.040230][ T779] RSP: 002b:00007ff2e2b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 43.040253][ T779] RAX: ffffffffffffffda RBX: 00007ff2e1e25fa0 RCX: 00007ff2e1b9e559 [ 43.040268][ T779] RDX: 00000000000001ff RSI: 0000200000000680 RDI: ffffffffffffff9c [ 43.040284][ T779] RBP: 00007ff2e1c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 43.040297][ T779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.040309][ T779] R13: 00007ff2e1e26038 R14: 00007ff2e1e25fa0 R15: 00007ffc415b8728 [ 43.040327][ T779] [ 43.042557][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 43.042574][ T36] audit: type=1400 audit(1792192724.350:269): avc: denied { sqpoll } for pid=778 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.356933][ T784] FAULT_INJECTION: forcing a failure. [ 43.356933][ T784] name failslab, interval 1, probability 0, space 0, times 0 [ 43.372191][ T784] CPU: 1 UID: 0 PID: 784 Comm: syz.2.144 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 43.372229][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.372244][ T784] Call Trace: [ 43.372252][ T784] [ 43.372260][ T784] __dump_stack+0x21/0x30 [ 43.372299][ T784] dump_stack_lvl+0x140/0x1c0 [ 43.372330][ T784] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.372360][ T784] ? ops_init+0x302/0x5d0 [ 43.372402][ T784] ? unshare_nsproxy_namespaces+0x124/0x180 [ 43.372425][ T784] ? __x64_sys_unshare+0x3c/0x50 [ 43.372453][ T784] ? x64_sys_call+0x2998/0x2ee0 [ 43.372473][ T784] ? do_syscall_64+0x57/0xf0 [ 43.372494][ T784] dump_stack+0x19/0x20 [ 43.372521][ T784] should_fail_ex+0x3c2/0x510 [ 43.372542][ T784] should_failslab+0xac/0x100 [ 43.372562][ T784] kmem_cache_alloc_noprof+0x42/0x410 [ 43.372589][ T784] ? __proc_create+0x535/0xb40 [ 43.372617][ T784] __proc_create+0x535/0xb40 [ 43.372644][ T784] ? proc_symlink+0x2d0/0x2d0 [ 43.372668][ T784] ? make_kgid+0x1d0/0x690 [ 43.372697][ T784] ? __cfi_make_kgid+0x10/0x10 [ 43.372725][ T784] _proc_mkdir+0x68/0x150 [ 43.372751][ T784] proc_net_ns_init+0x259/0x3e0 [ 43.372779][ T784] ops_init+0x302/0x5d0 [ 43.372805][ T784] ? __kasan_check_write+0x18/0x20 [ 43.372831][ T784] ? rwsem_read_trylock+0x275/0x5a0 [ 43.372855][ T784] setup_net+0x227/0x9b0 [ 43.372881][ T784] ? copy_net_ns+0xa20/0xa20 [ 43.372907][ T784] ? down_read_killable+0x7f/0x100 [ 43.372943][ T784] ? __cfi_down_read_killable+0x10/0x10 [ 43.372971][ T784] copy_net_ns+0x4fc/0xa20 [ 43.372999][ T784] create_new_namespaces+0x390/0x6f0 [ 43.373019][ T784] unshare_nsproxy_namespaces+0x124/0x180 [ 43.373040][ T784] ksys_unshare+0x4f9/0x920 [ 43.373069][ T784] ? fput+0x1a4/0x230 [ 43.373091][ T784] ? __cfi_ksys_unshare+0x10/0x10 [ 43.373118][ T784] ? __kasan_check_write+0x18/0x20 [ 43.373144][ T784] __x64_sys_unshare+0x3c/0x50 [ 43.373171][ T784] x64_sys_call+0x2998/0x2ee0 [ 43.373192][ T784] do_syscall_64+0x57/0xf0 [ 43.373209][ T784] ? clear_bhb_loop+0x50/0xa0 [ 43.373246][ T784] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.373270][ T784] RIP: 0033:0x7ff2e1b9e559 [ 43.373289][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.373306][ T784] RSP: 002b:00007ff2e2b44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 43.373330][ T784] RAX: ffffffffffffffda RBX: 00007ff2e1e25fa0 RCX: 00007ff2e1b9e559 [ 43.373344][ T784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 43.373355][ T784] RBP: 00007ff2e1c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 43.373368][ T784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.373383][ T784] R13: 00007ff2e1e26038 R14: 00007ff2e1e25fa0 R15: 00007ffc415b8728 [ 43.373400][ T784] [ 43.473421][ T313] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 43.543417][ T396] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.723530][ T313] usb 4-1: device descriptor read/64, error -71 [ 43.723602][ T784] FAULT_INJECTION: forcing a failure. [ 43.723602][ T784] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.743953][ T784] CPU: 1 UID: 0 PID: 784 Comm: syz.2.144 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 43.743989][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.744003][ T784] Call Trace: [ 43.744010][ T784] [ 43.744018][ T784] __dump_stack+0x21/0x30 [ 43.744057][ T784] dump_stack_lvl+0x140/0x1c0 [ 43.744104][ T784] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.744144][ T784] ? stack_depot_save_flags+0x38/0x800 [ 43.744168][ T784] dump_stack+0x19/0x20 [ 43.744198][ T784] should_fail_ex+0x3c2/0x510 [ 43.744220][ T784] should_fail+0xf/0x20 [ 43.744237][ T784] get_futex_key+0x178/0x940 [ 43.744258][ T784] ? __cfi_get_futex_key+0x10/0x10 [ 43.744277][ T784] futex_wake+0x150/0x950 [ 43.744302][ T784] ? __cfi_futex_wake+0x10/0x10 [ 43.744327][ T784] ? __kasan_slab_free+0x6a/0x80 [ 43.744348][ T784] do_futex+0x37d/0x510 [ 43.744367][ T784] ? __cfi_do_futex+0x10/0x10 [ 43.744397][ T784] __se_sys_futex+0x13c/0x320 [ 43.744419][ T784] ? fput+0x1a4/0x230 [ 43.744441][ T784] ? __x64_sys_futex+0x110/0x110 [ 43.744463][ T784] ? __kasan_check_write+0x18/0x20 [ 43.744491][ T784] __x64_sys_futex+0xe9/0x110 [ 43.744513][ T784] x64_sys_call+0x227f/0x2ee0 [ 43.744533][ T784] do_syscall_64+0x57/0xf0 [ 43.744552][ T784] ? clear_bhb_loop+0x50/0xa0 [ 43.744577][ T784] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.744599][ T784] RIP: 0033:0x7ff2e1b9e559 [ 43.744618][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.744635][ T784] RSP: 002b:00007ff2e2b440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.744658][ T784] RAX: ffffffffffffffda RBX: 00007ff2e1e25fa8 RCX: 00007ff2e1b9e559 [ 43.744674][ T784] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff2e1e25fac [ 43.744772][ T784] RBP: 00007ff2e1e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 43.744786][ T784] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 43.744801][ T784] R13: 00007ff2e1e26038 R14: 00007ffc415b8640 R15: 00007ffc415b8728 [ 43.744820][ T784] [ 43.963492][ T313] usb 4-1: device descriptor read/64, error -71 [ 44.054727][ T396] usb 1-1: Using ep0 maxpacket: 8 [ 44.060948][ T396] usb 1-1: config 14 has an invalid interface number: 199 but max is 0 [ 44.069468][ T396] usb 1-1: config 14 has no interface number 0 [ 44.079037][ T396] usb 1-1: New USB device found, idVendor=5bfe, idProduct=a243, bcdDevice=3a.07 [ 44.088409][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.093567][ T313] usb usb4-port1: attempt power cycle [ 44.096524][ T396] usb 1-1: Product: syz [ 44.106138][ T396] usb 1-1: Manufacturer: syz [ 44.110748][ T396] usb 1-1: SerialNumber: syz [ 44.283475][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.319981][ T396] cdc_acm 1-1:14.199: invalid descriptor buffer length [ 44.329505][ T396] usb 1-1: USB disconnect, device number 7 [ 44.333407][ T312] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.433491][ T313] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 44.442450][ T9] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 44.454247][ T9] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.467540][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.474285][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 44.483674][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.492286][ T313] usb 4-1: device descriptor read/8, error -71 [ 44.498814][ T9] usb 3-1: config 0 descriptor?? [ 44.506175][ T312] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 44.517620][ T312] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 44.528567][ T312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 44.535251][ T312] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 44.544608][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.553210][ T312] usb 5-1: config 0 descriptor?? [ 44.634585][ T313] usb 4-1: device descriptor read/8, error -71 [ 44.866505][ T36] audit: type=1400 audit(1792192726.180:270): avc: denied { remount } for pid=814 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.887198][ T313] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 44.907640][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 44.914181][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.923217][ T313] usb 4-1: device descriptor read/8, error -71 [ 44.930421][ T9] usb 3-1: USB disconnect, device number 8 [ 44.963014][ T312] wacom 0003:056A:00B0.0003: ignoring exceeding usage max [ 44.972948][ T312] wacom 0003:056A:00B0.0003: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 44.984551][ T312] wacom 0003:056A:00B0.0003: hidraw0: USB HID v0.05 Joystick [HID 056a:00b0] on usb-dummy_hcd.4-1/input0 [ 44.998529][ T312] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B0.0003/input/input4 [ 45.021009][ T36] audit: type=1400 audit(1792192726.330:271): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=486 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.043855][ T36] audit: type=1400 audit(1792192726.330:272): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=486 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.066157][ T825] overlayfs: missing 'lowerdir' [ 45.073565][ T36] audit: type=1400 audit(1792192726.390:273): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=486 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.098976][ T36] audit: type=1400 audit(1792192726.410:274): avc: denied { mount } for pid=826 comm="syz.0.160" name="/" dev="configfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.100378][ T827] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 45.122265][ T36] audit: type=1400 audit(1792192726.410:275): avc: denied { search } for pid=826 comm="syz.0.160" name="/" dev="configfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.152710][ T36] audit: type=1400 audit(1792192726.410:276): avc: denied { write } for pid=826 comm="syz.0.160" name="usb_gadget" dev="configfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.176193][ T313] usb 4-1: device descriptor read/8, error -71 [ 45.176493][ T36] audit: type=1400 audit(1792192726.410:277): avc: denied { add_name } for pid=826 comm="syz.0.160" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.203085][ T36] audit: type=1400 audit(1792192726.410:278): avc: denied { create } for pid=826 comm="syz.0.160" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 45.223078][ T396] usb 5-1: USB disconnect, device number 7 [ 45.259501][ T835] SELinux: policydb magic number 0x75636573 does not match expected magic number 0xf97cff8c [ 45.269746][ T835] SELinux: failed to load policy [ 45.276109][ T838] SELinux: policydb magic number 0x75636573 does not match expected magic number 0xf97cff8c [ 45.286511][ T838] SELinux: failed to load policy [ 45.293465][ T313] usb usb4-port1: unable to enumerate USB device [ 45.440018][ T849] tipc: Started in network mode [ 45.445063][ T849] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 45.454424][ T849] tipc: Enabling of bearer rejected, failed to enable media [ 45.524974][ T853] overlayfs: unescaped trailing colons in lowerdir mount option. [ 45.534380][ T853] overlay: ./file1 is not a directory [ 45.643382][ T396] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 45.825530][ T396] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 45.838047][ T396] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 45.847793][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.856083][ T396] usb 1-1: Product: Ч [ 45.860956][ T396] usb 1-1: Manufacturer: ⋀޲軮錩㗻￤䓗櫘ꋏ酩૎␩淲댸먌鰸禭⸄읥ߍ⸺뢁坰ኸ㍋䉙弐흸ꈸ奞쑋教졅襣ꨥ偔࿃ꍛؒ퀃묽॓췯閰᭓ꙫ쎃볱ᅗ決㞠쪇鸔糮㧃醔ƶ궮齝ﮠ匹놬뫰䩚ｷὝ㉮䵅䢂砼బꎀ厁챫㱚淙데邰郘펧ሆꞰ뷿ﱼ䤊셷籬槄梐馲价 [ 45.984346][ T876] mmap: syz.3.176 (876) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.053394][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 46.167405][ T396] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.174709][ T396] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 46.184959][ T396] usb 1-1: USB disconnect, device number 8 [ 46.194088][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.213410][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 46.220720][ T31] usb 5-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 46.231243][ T31] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 46.242768][ T31] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 17513, setting to 1024 [ 46.254215][ T31] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 46.267299][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 46.274167][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 46.283786][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.292654][ T31] usb 5-1: config 0 descriptor?? [ 46.299036][ T866] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 46.425188][ T894] kvm: emulating exchange as write [ 46.633401][ T313] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 46.712849][ T31] logitech-djreceiver 0003:046D:C53A.0004: item fetching failed at offset 22/24 [ 46.722853][ T31] logitech-djreceiver 0003:046D:C53A.0004: logi_dj_probe: parse failed [ 46.731773][ T31] logitech-djreceiver 0003:046D:C53A.0004: probe with driver logitech-djreceiver failed with error -22 [ 46.794262][ T313] usb 4-1: not running at top speed; connect to a high speed hub [ 46.802822][ T313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.813224][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 46.823170][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.838353][ T313] usb 4-1: Found UVC 1.00 device (046d:0825) [ 46.845335][ T313] usb 4-1: No streaming interface found for terminal 2. [ 46.912658][ T313] usb 5-1: USB disconnect, device number 8 [ 46.942288][ T915] ./dev/sda1: Can't lookup blockdev [ 47.413438][ T313] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 47.539484][ T9] usb 4-1: USB disconnect, device number 15 [ 47.564902][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.573831][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.584188][ T313] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 47.596035][ T313] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.610714][ T313] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 47.620021][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 47.628423][ T313] usb 1-1: Product: syz [ 47.632906][ T313] usb 1-1: Manufacturer: syz [ 47.637844][ T313] usb 1-1: SerialNumber: syz [ 47.703453][ T31] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 47.738852][ T933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.195'. [ 47.758151][ T937] ./dev/sda1: Can't lookup blockdev [ 47.847377][ T922] fuseblk: Bad value for 'rootmode' [ 47.854515][ T31] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.854540][ T313] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.868155][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 47.881780][ T313] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 47.887495][ T31] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 47.899833][ T313] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 47.906990][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.922688][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.927509][ T31] usb 5-1: config 0 descriptor?? [ 47.942543][ T313] usb 1-1: USB disconnect, device number 9 [ 48.024942][ T945] input: syz1 as /devices/virtual/input/input7 [ 48.041283][ T944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 48.051503][ T944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.199'. [ 48.060349][ T946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.071375][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 48.071412][ T36] audit: type=1400 audit(1792192729.380:298): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.092714][ T944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 48.100119][ T946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.117895][ T36] audit: type=1400 audit(1792192729.380:299): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.129238][ T944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.142696][ T36] audit: type=1400 audit(1792192729.380:300): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.160431][ T944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.175050][ T36] audit: type=1400 audit(1792192729.380:301): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.203305][ T36] audit: type=1400 audit(1792192729.440:302): avc: denied { read } for pid=951 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.226992][ T36] audit: type=1400 audit(1792192729.440:303): avc: denied { open } for pid=951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.256353][ T36] audit: type=1400 audit(1792192729.440:304): avc: denied { getattr } for pid=951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.283099][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 48.291842][ T36] audit: type=1400 audit(1792192729.560:305): avc: denied { write } for pid=950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.317044][ T36] audit: type=1400 audit(1792192729.560:306): avc: denied { add_name } for pid=950 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.340861][ T36] audit: type=1400 audit(1792192729.560:307): avc: denied { create } for pid=950 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.429560][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 48.439085][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 48.449694][ T31] usb 5-1: USB disconnect, device number 9 [ 48.484389][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.496252][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.510586][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 48.519925][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.531598][ T9] usb 4-1: config 0 descriptor?? [ 48.743381][ T313] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 48.775369][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 48.781365][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 48.806918][ T9] usb 4-1: USB disconnect, device number 16 [ 48.883387][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.123413][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.203455][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 49.364688][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.375044][ T313] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 49.382635][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.393481][ T10] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 49.404920][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 49.416195][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.431248][ T10] usb 5-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 49.441366][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.449897][ T10] usb 5-1: Product: syz [ 49.455864][ T10] usb 5-1: Manufacturer: syz [ 49.460993][ T10] usb 5-1: SerialNumber: syz [ 49.482605][ T1017] ./dev/sda1: Can't lookup blockdev [ 49.527024][ T1019] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=256 sclass=netlink_xfrm_socket pid=1019 comm=syz.3.206 [ 49.533518][ T1022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 49.542193][ T1023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.206'. [ 49.559820][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.647393][ T1035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 49.674825][ T10] usb 5-1: 1:1 : invalid UAC_AS_GENERAL desc [ 49.682950][ T10] usb 5-1: 0:2 : does not exist [ 49.691317][ T10] usb 5-1: USB disconnect, device number 10 [ 49.706624][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.813609][ T313] usb 1-1: device descriptor read/64, error -71 [ 49.923550][ T313] usb usb1-port1: attempt power cycle [ 49.953758][ T564] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.104800][ T564] usb 3-1: config index 0 descriptor too short (expected 214, got 36) [ 50.113274][ T564] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.125096][ T564] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 50.134407][ T564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.142430][ T564] usb 3-1: Product: syz [ 50.146751][ T564] usb 3-1: Manufacturer: syz [ 50.151349][ T564] usb 3-1: SerialNumber: syz [ 50.156517][ T564] usb 3-1: config 0 descriptor?? [ 50.163265][ T564] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 50.263509][ T313] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 50.284899][ T313] usb 1-1: device descriptor read/8, error -71 [ 50.298853][ T1049] netlink: 140 bytes leftover after parsing attributes in process `syz.4.215'. [ 50.365670][ T1040] overlayfs: unescaped trailing colons in lowerdir mount option. [ 50.414549][ T313] usb 1-1: device descriptor read/8, error -71 [ 50.471383][ T1062] ./dev/sda1: Can't lookup blockdev [ 50.548723][ T1064] FAULT_INJECTION: forcing a failure. [ 50.548723][ T1064] name failslab, interval 1, probability 0, space 0, times 0 [ 50.561504][ T1064] CPU: 1 UID: 0 PID: 1064 Comm: syz.4.219 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 50.561539][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 50.561554][ T1064] Call Trace: [ 50.561561][ T1064] [ 50.561569][ T1064] __dump_stack+0x21/0x30 [ 50.561593][ T1064] dump_stack_lvl+0x140/0x1c0 [ 50.561609][ T1064] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.561625][ T1064] dump_stack+0x19/0x20 [ 50.561639][ T1064] should_fail_ex+0x3c2/0x510 [ 50.561659][ T1064] should_failslab+0xac/0x100 [ 50.561670][ T1064] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 50.561686][ T1064] ? get_random_u32+0x2ef/0x4e0 [ 50.561700][ T1064] ? __d_alloc+0x42/0x8c0 [ 50.561714][ T1064] __d_alloc+0x42/0x8c0 [ 50.561725][ T1064] ? __cfi_inode_set_ctime_current+0x10/0x10 [ 50.561737][ T1064] d_alloc_pseudo+0x23/0xc0 [ 50.561751][ T1064] alloc_file_pseudo+0xde/0x1f0 [ 50.561763][ T1064] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 50.561774][ T1064] ? shmem_get_inode+0x81c/0xc10 [ 50.561784][ T1064] ? __kasan_check_write+0x18/0x20 [ 50.561797][ T1064] ? clear_nlink+0x8e/0xf0 [ 50.561806][ T1064] __shmem_file_setup+0x242/0x2c0 [ 50.561821][ T1064] shmem_zero_setup+0x90/0x130 [ 50.561835][ T1064] mmap_region+0x1659/0x1d10 [ 50.561849][ T1064] ? __cfi_mmap_region+0x10/0x10 [ 50.561863][ T1064] ? avc_has_perm_noaudit+0x289/0x360 [ 50.561874][ T1064] ? avc_has_perm+0x155/0x240 [ 50.561883][ T1064] ? __kasan_check_read+0x15/0x20 [ 50.561897][ T1064] ? __get_unmapped_area+0x406/0x470 [ 50.561909][ T1064] ? futex_wait+0x2b8/0x7c0 [ 50.561922][ T1064] do_mmap+0xa47/0x1370 [ 50.561934][ T1064] ? __cfi_selinux_mmap_file+0x10/0x10 [ 50.561947][ T1064] ? __cfi_do_mmap+0x10/0x10 [ 50.561959][ T1064] ? __kasan_check_write+0x18/0x20 [ 50.561972][ T1064] ? down_write_killable+0xee/0x2d0 [ 50.561985][ T1064] ? __cfi_down_write_killable+0x10/0x10 [ 50.561997][ T1064] ? do_futex+0x32a/0x510 [ 50.562007][ T1064] vm_mmap_pgoff+0x367/0x4b0 [ 50.562020][ T1064] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 50.562033][ T1064] ? __x64_sys_futex+0x110/0x110 [ 50.562043][ T1064] ksys_mmap_pgoff+0xfa/0x1e0 [ 50.562056][ T1064] ? __kasan_check_write+0x18/0x20 [ 50.562069][ T1064] __x64_sys_mmap+0x121/0x140 [ 50.562080][ T1064] x64_sys_call+0x13bf/0x2ee0 [ 50.562090][ T1064] do_syscall_64+0x57/0xf0 [ 50.562099][ T1064] ? clear_bhb_loop+0x50/0xa0 [ 50.562111][ T1064] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.562123][ T1064] RIP: 0033:0x7efe08d9e559 [ 50.562133][ T1064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.562142][ T1064] RSP: 002b:00007efe09d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 50.562159][ T1064] RAX: ffffffffffffffda RBX: 00007efe09025fa0 RCX: 00007efe08d9e559 [ 50.562171][ T1064] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 50.562184][ T1064] RBP: 00007efe08e358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 50.562198][ T1064] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 50.562209][ T1064] R13: 00007efe09026038 R14: 00007efe09025fa0 R15: 00007fffdad42aa8 [ 50.562225][ T1064] [ 50.743477][ T313] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 50.898922][ T1067] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 50.907694][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.915015][ T313] usb 1-1: device descriptor read/8, error -71 [ 50.925454][ T1067] veth0: entered promiscuous mode [ 50.930563][ T1067] veth0: entered allmulticast mode [ 50.936975][ T1067] netlink: 37 bytes leftover after parsing attributes in process `syz.4.220'. [ 51.054412][ T313] usb 1-1: device descriptor read/8, error -71 [ 51.173560][ T313] usb usb1-port1: unable to enumerate USB device [ 51.873612][ T313] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 52.024719][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.045556][ T313] usb 1-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 52.058407][ T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.074706][ T313] usb 1-1: language id specifier not provided by device, defaulting to English [ 52.076773][ T1089] ./dev/sda1: Can't lookup blockdev [ 52.433463][ T564] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 52.586118][ T564] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.596924][ T564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 52.607955][ T564] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 52.617189][ T564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.628223][ T564] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 52.676682][ T396] usb 3-1: USB disconnect, device number 9 [ 52.828957][ T1091] netlink: 'syz.3.228': attribute type 27 has an invalid length. [ 52.840033][ T1091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.903393][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.153441][ T396] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 53.304146][ T396] usb 5-1: Using ep0 maxpacket: 32 [ 53.310717][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.323202][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.333662][ T396] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.343057][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.352395][ T396] usb 5-1: config 0 descriptor?? [ 53.362849][ T396] hub 5-1:0.0: USB hub found [ 53.370999][ T564] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 53.383864][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 53.383879][ T36] audit: type=1400 audit(1792192734.697:330): avc: denied { append } for pid=1113 comm="syz.3.234" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.404267][ T564] usb 4-1: USB disconnect, device number 17 [ 53.581692][ T1099] netlink: 'syz.4.230': attribute type 7 has an invalid length. [ 53.589688][ T1099] netlink: 'syz.4.230': attribute type 5 has an invalid length. [ 53.597657][ T1099] netlink: 17 bytes leftover after parsing attributes in process `syz.4.230'. [ 53.608196][ T1099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.616941][ T1099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.631128][ T1099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1099 comm=syz.4.230 [ 53.644094][ T1099] netlink: 'syz.4.230': attribute type 28 has an invalid length. [ 53.652290][ T1099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 53.733459][ T564] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 53.884409][ T564] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 53.894143][ T564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.904729][ T564] usb-storage 4-1:1.0: USB Mass Storage device detected [ 54.148584][ T36] audit: type=1400 audit(1792192735.457:331): avc: denied { load_policy } for pid=1118 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.148727][ T1119] SELinux: failed to load policy [ 54.191235][ T1123] ./dev/sda1: Can't lookup blockdev [ 54.227576][ T1122] kvm: MWAIT instruction emulated as NOP! [ 54.386493][ T36] audit: type=1400 audit(1792192735.697:332): avc: denied { ioctl } for pid=1129 comm="syz.4.240" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.411515][ T36] audit: type=1400 audit(1792192735.707:333): avc: denied { read write } for pid=1129 comm="syz.4.240" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.435457][ T36] audit: type=1400 audit(1792192735.707:334): avc: denied { open } for pid=1129 comm="syz.4.240" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.460050][ T36] audit: type=1400 audit(1792192735.707:335): avc: denied { ioctl } for pid=1129 comm="syz.4.240" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.513099][ T564] scsi host1: usb-storage 4-1:1.0 [ 54.579029][ T36] audit: type=1400 audit(1792192735.887:336): avc: denied { create } for pid=1142 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.604580][ T36] audit: type=1400 audit(1792192735.917:337): avc: denied { write } for pid=1142 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 54.646173][ T313] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 54.658960][ T36] audit: type=1400 audit(1792192735.957:338): avc: denied { write } for pid=1148 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.678474][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.690801][ T1157] ./dev/sda1: Can't lookup blockdev [ 54.693219][ T313] usb 1-1: can't set config #1, error -71 [ 54.707142][ T313] usb 1-1: USB disconnect, device number 14 [ 54.722996][ T9] usb 4-1: USB disconnect, device number 18 [ 54.797773][ T1158] overlayfs: failed to resolve './file1/file0': -2 [ 54.807071][ T1160] cgroup: fork rejected by pids controller in /syz4 [ 55.193389][ T313] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 55.310134][ T36] audit: type=1400 audit(1792192736.617:339): avc: denied { connect } for pid=1226 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.343427][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 55.354814][ T313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.366000][ T313] usb 1-1: config 10 has an invalid interface number: 188 but max is 0 [ 55.374450][ T313] usb 1-1: config 10 has no interface number 0 [ 55.380641][ T313] usb 1-1: config 10 interface 188 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 55.392810][ T313] usb 1-1: config 10 interface 188 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 55.404494][ T313] usb 1-1: config 10 interface 188 has no altsetting 0 [ 55.414381][ T313] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 55.425477][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.433798][ T313] usb 1-1: Product: syz [ 55.438112][ T313] usb 1-1: Manufacturer: syz [ 55.442806][ T313] usb 1-1: SerialNumber: syz [ 55.453520][ T1154] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.545648][ T1239] overlayfs: workdir and upperdir must be separate subtrees [ 55.554902][ T1241] Invalid ELF header type: 2 != 1 [ 55.560883][ T1241] Invalid ELF header type: 2 != 1 [ 55.671841][ T313] usb 1-1: USB disconnect, device number 15 [ 55.813405][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 55.943443][ T312] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 55.965978][ T45] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 55.977587][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.998070][ T45] usb 4-1: Product: syz [ 56.016665][ T45] usb 4-1: Manufacturer: syz [ 56.022753][ T45] usb 4-1: SerialNumber: syz [ 56.031612][ T45] usb 4-1: UAS is ignored for this device, using usb-storage instead [ 56.040303][ T45] usb 4-1: UAS is ignored for this device, using usb-storage instead [ 56.053016][ T45] usb-storage 4-1:1.0: USB Mass Storage device detected [ 56.072566][ T45] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 56.082189][ T45] scsi host1: usb-storage 4-1:1.0 [ 56.095704][ T312] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 56.113388][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.121774][ T312] usb 3-1: Product: syz [ 56.126112][ T312] usb 3-1: Manufacturer: syz [ 56.130716][ T312] usb 3-1: SerialNumber: syz [ 56.181866][ T1258] ./dev/sda1: Can't lookup blockdev [ 56.234165][ T313] usb 4-1: USB disconnect, device number 19 [ 56.283481][ T1261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.294375][ T1261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.347788][ T312] usb 3-1: cannot find UAC_HEADER [ 56.354415][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 56.364488][ T312] usb 3-1: USB disconnect, device number 10 [ 56.372672][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.573381][ T45] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 56.725927][ T45] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 56.735288][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.743291][ T45] usb 1-1: Product: syz [ 56.747755][ T45] usb 1-1: Manufacturer: syz [ 56.752613][ T45] usb 1-1: SerialNumber: syz [ 56.883513][ T1279] loop3: detected capacity change from 0 to 7 [ 56.895422][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.904637][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.912714][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.921916][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.929926][ T1279] loop3: unable to read partition table [ 56.936492][ T1279] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 56.950083][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.959337][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.984290][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.996015][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.005425][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.014649][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.023980][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.036053][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.037656][ T1285] printk: legacy console [ttyS0] disabled [ 57.045491][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.045871][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 57.068280][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 57.118879][ T1288] printk: legacy console [ttyS0] enabled [ 57.143718][ T1291] ./dev/sda1: Can't lookup blockdev [ 57.169426][ T45] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 57.298241][ T1310] netlink: 116 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.308861][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.318343][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.349908][ T1310] netlink: 116 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.361614][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.373438][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.520159][ T1328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.529003][ T1328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.593976][ T1335] netlink: 72 bytes leftover after parsing attributes in process `syz.3.277'. [ 57.613482][ T1337] ./dev/sda1: Can't lookup blockdev [ 57.713378][ T1343] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 57.722585][ T1343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 57.738455][ T1346] : renamed from bridge0 (while UP) [ 57.895142][ T1353] netlink: 'syz.3.284': attribute type 22 has an invalid length. [ 57.925239][ T1358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 58.423947][ T396] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 58.433517][ T396] usbhid 5-1:0.0: can't add hid device: -32 [ 58.439832][ T396] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 58.581729][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 58.581746][ T36] audit: type=1400 audit(1792192739.887:349): avc: denied { ioctl } for pid=1368 comm="syz.2.288" path="socket:[11579]" dev="sockfs" ino=11579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.589247][ T1370] netlink: 196 bytes leftover after parsing attributes in process `syz.2.288'. [ 58.612714][ T36] audit: type=1400 audit(1792192739.897:350): avc: denied { setopt } for pid=1368 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.642933][ T36] audit: type=1400 audit(1792192739.897:351): avc: denied { write } for pid=1368 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.666812][ T36] audit: type=1400 audit(1792192739.977:352): avc: denied { create } for pid=1374 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.676652][ T1377] ./dev/sda1: Can't lookup blockdev [ 58.696473][ T36] audit: type=1400 audit(1792192740.007:353): avc: denied { execmem } for pid=1374 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.728423][ T36] audit: type=1400 audit(1792192740.037:354): avc: denied { mounton } for pid=1378 comm="syz.2.291" path="/88/file0" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.803284][ T36] audit: type=1400 audit(1792192740.107:355): avc: denied { getopt } for pid=1378 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.840850][ T36] audit: type=1400 audit(1792192740.137:356): avc: denied { write } for pid=1378 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.865828][ T36] audit: type=1400 audit(1792192740.137:357): avc: denied { nlmsg_read } for pid=1378 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.886457][ T36] audit: type=1400 audit(1792192740.137:358): avc: denied { ioctl } for pid=1378 comm="syz.2.291" path="socket:[12743]" dev="sockfs" ino=12743 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.006020][ T1394] capability: warning: `syz.4.297' uses 32-bit capabilities (legacy support in use) [ 59.037637][ T1400] ./dev/sda1: Can't lookup blockdev [ 59.085608][ T1402] SELinux: policydb magic number 0xe does not match expected magic number 0xf97cff8c [ 59.095735][ T1402] SELinux: failed to load policy [ 59.113369][ T312] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 59.151639][ T1407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.157550][ T1408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.162387][ T1407] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.167067][ T1408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.174888][ T1409] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.190643][ T1407] rust_binder: Read failure Err(EFAULT) in pid:184 [ 59.193393][ T1409] rust_binder: Read failure Err(EFAULT) in pid:184 [ 59.204496][ T1407] rust_binder: 1406:1407 got reply transaction with no transaction stack [ 59.214296][ T1407] rust_binder: 1406:1407 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1547 [ 59.228691][ T564] rust_binder: 1406: undelivered TRANSACTION_ERROR: 29201 [ 59.295452][ T312] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 59.306930][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 59.321133][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 59.330585][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.336332][ T45] usb 1-1: USB disconnect, device number 16 [ 59.340332][ T312] usb 4-1: config 0 descriptor?? [ 59.354790][ T45] usblp0: removed [ 59.393387][ T396] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 59.533391][ T396] usb 3-1: device descriptor read/64, error -71 [ 59.683387][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 59.756786][ T312] logitech 0003:046D:C295.0005: unknown main item tag 0x4 [ 59.764854][ T312] logitech 0003:046D:C295.0005: hidraw0: USB HID v0.04 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 59.776477][ T312] logitech 0003:046D:C295.0005: no inputs found [ 59.783453][ T396] usb 3-1: device descriptor read/64, error -71 [ 59.813439][ T45] usb 1-1: device descriptor read/64, error -71 [ 60.043392][ T396] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 60.056136][ T1424] netlink: 9 bytes leftover after parsing attributes in process `syz.3.294'. [ 60.065217][ T45] usb 1-1: device descriptor read/64, error -71 [ 60.074106][ T1424] gretap0: entered promiscuous mode [ 60.173403][ T396] usb 3-1: device descriptor read/64, error -71 [ 60.303390][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 60.423395][ T396] usb 3-1: device descriptor read/64, error -71 [ 60.433561][ T45] usb 1-1: device descriptor read/64, error -71 [ 60.533497][ T396] usb usb3-port1: attempt power cycle [ 60.673386][ T45] usb 1-1: device descriptor read/64, error -71 [ 60.752056][ T1431] tmpfs: Unknown parameter 'n' [ 60.758752][ T1428] syzkaller1: entered allmulticast mode [ 60.788116][ T45] usb usb1-port1: attempt power cycle [ 60.873591][ T396] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 60.904525][ T396] usb 3-1: device descriptor read/8, error -71 [ 60.954127][ T9] usb 4-1: USB disconnect, device number 20 [ 61.002948][ T1438] ./dev/sda1: Can't lookup blockdev [ 61.043906][ T396] usb 3-1: device descriptor read/8, error -71 [ 61.153488][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 61.174549][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.283419][ T396] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 61.314682][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.320978][ T396] usb 3-1: device descriptor read/8, error -71 [ 61.454656][ T396] usb 3-1: device descriptor read/8, error -71 [ 61.573423][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 61.581486][ T396] usb usb3-port1: unable to enumerate USB device [ 61.604457][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.744802][ T45] usb 1-1: device descriptor read/8, error -71 [ 61.853591][ T45] usb usb1-port1: unable to enumerate USB device [ 62.473618][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 62.590662][ T1465] ./dev/sda1: Can't lookup blockdev [ 62.638201][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.653630][ T45] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 62.662511][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.674005][ T1467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.684291][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.693699][ T1467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.702098][ T45] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 62.714045][ T45] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 62.726996][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 62.728669][ T1467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.739281][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 62.756280][ T1467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.759797][ T45] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 62.784378][ T45] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 62.794032][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.807331][ T45] usb 3-1: Product: syz [ 62.810484][ T1467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.812668][ T45] usb 3-1: Manufacturer: syz [ 62.822232][ T1467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.829188][ T45] usb 3-1: SerialNumber: syz [ 63.218183][ T45] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 63.243483][ T45] usb 3-1: USB disconnect, device number 15 [ 63.263442][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 63.424090][ T1492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 63.457923][ T1497] ./dev/sda1: Can't lookup blockdev [ 63.604729][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.614167][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.905691][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 63.905709][ T36] audit: type=1400 audit(1792192745.217:373): avc: denied { getopt } for pid=1509 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.911775][ T1511] 9pnet_fd: p9_fd_create_unix (1511): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 64.359238][ T1516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.368422][ T1516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.901772][ T36] audit: type=1400 audit(1792192746.207:374): avc: denied { write } for pid=1520 comm="syz.4.337" name="sched_switch" dev="tracefs" ino=6352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.925063][ T36] audit: type=1400 audit(1792192746.207:375): avc: denied { add_name } for pid=1520 comm="syz.4.337" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.945822][ T36] audit: type=1400 audit(1792192746.207:376): avc: denied { create } for pid=1520 comm="syz.4.337" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 64.976300][ T312] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 64.994282][ T312] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.072509][ T1525] loop7: detected capacity change from 0 to 7 [ 65.125042][ T383] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.134262][ T383] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.142640][ T383] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.151227][ T383] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.161118][ T383] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.441759][ T1550] fuseblk: Unknown parameter 'N %5T{s#e{8N8!΁ s|<~z [ 65.441759][ T1550] }}6V+_'kt4՘ [ 65.441759][ T1550] [' [ 65.462655][ T1551] fuseblk: Unknown parameter 'N %5T{s#e{8N8!΁ s|<~z [ 65.462655][ T1551] }}6V+_'kt4՘ [ 65.462655][ T1551] [' [ 65.481114][ T1550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.492694][ T1550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.643373][ T312] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 65.690299][ T1553] loop8: detected capacity change from 0 to 10 [ 65.773386][ T312] usb 3-1: device descriptor read/64, error -71 [ 66.023370][ T312] usb 3-1: device descriptor read/64, error -71 [ 66.112008][ T36] audit: type=1400 audit(1792192747.417:377): avc: denied { map } for pid=1557 comm="syz.3.347" path="socket:[13836]" dev="sockfs" ino=13836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.248830][ T1558] FAULT_INJECTION: forcing a failure. [ 66.248830][ T1558] name failslab, interval 1, probability 0, space 0, times 0 [ 66.261612][ T1558] CPU: 0 UID: 0 PID: 1558 Comm: syz.3.347 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 66.261652][ T1558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.261666][ T1558] Call Trace: [ 66.261673][ T1558] [ 66.261682][ T1558] __dump_stack+0x21/0x30 [ 66.261717][ T1558] dump_stack_lvl+0x140/0x1c0 [ 66.261736][ T1558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.261752][ T1558] dump_stack+0x19/0x20 [ 66.261767][ T1558] should_fail_ex+0x3c2/0x510 [ 66.261778][ T1558] should_failslab+0xac/0x100 [ 66.261788][ T1558] __kmalloc_cache_noprof+0x41/0x470 [ 66.261802][ T1558] ? register_netdevice+0x2c4/0x1a80 [ 66.261819][ T1558] register_netdevice+0x2c4/0x1a80 [ 66.261833][ T1558] ? __kmalloc_cache_noprof+0x23c/0x470 [ 66.261846][ T1558] ? alloc_netdev_mqs+0xc3d/0x13d0 [ 66.261856][ T1558] ? tun_net_initialize+0x183/0x430 [ 66.261883][ T1558] ? __cfi_register_netdevice+0x10/0x10 [ 66.261899][ T1558] ? alloc_netdev_mqs+0xd45/0x13d0 [ 66.261908][ T1558] tun_set_iff+0x828/0xec0 [ 66.261924][ T1558] __tun_chr_ioctl+0x852/0x1fb0 [ 66.261939][ T1558] ? tun_flow_create+0x400/0x400 [ 66.261955][ T1558] ? __fget_files+0x2bc/0x330 [ 66.261965][ T1558] tun_chr_ioctl+0x2e/0x40 [ 66.261979][ T1558] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 66.261992][ T1558] __se_sys_ioctl+0x126/0x1b0 [ 66.262004][ T1558] __x64_sys_ioctl+0x7f/0xa0 [ 66.262014][ T1558] x64_sys_call+0x1878/0x2ee0 [ 66.262024][ T1558] do_syscall_64+0x57/0xf0 [ 66.262033][ T1558] ? clear_bhb_loop+0x50/0xa0 [ 66.262046][ T1558] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.262058][ T1558] RIP: 0033:0x7f0fac39e559 [ 66.262068][ T1558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.262077][ T1558] RSP: 002b:00007f0fad208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.262090][ T1558] RAX: ffffffffffffffda RBX: 00007f0fac625fa0 RCX: 00007f0fac39e559 [ 66.262099][ T1558] RDX: 00002000000005c0 RSI: 00000000400454ca RDI: 000000000000000d [ 66.262105][ T1558] RBP: 00007f0fac4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 66.262112][ T1558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.262118][ T1558] R13: 00007f0fac626038 R14: 00007f0fac625fa0 R15: 00007ffe62126948 [ 66.262127][ T1558] [ 66.497269][ T312] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 66.503373][ T396] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 66.629682][ T1566] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 66.637652][ T312] usb 3-1: device descriptor read/64, error -71 [ 66.654757][ T36] audit: type=1400 audit(1792192747.967:378): avc: denied { search } for pid=1567 comm="syz.3.350" name="/" dev="configfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.677182][ T36] audit: type=1400 audit(1792192747.967:379): avc: denied { read } for pid=1567 comm="syz.3.350" name="/" dev="configfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.699948][ T36] audit: type=1400 audit(1792192747.967:380): avc: denied { open } for pid=1567 comm="syz.3.350" path="/" dev="configfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.706232][ T396] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.722773][ T36] audit: type=1400 audit(1792192747.967:381): avc: denied { write } for pid=1567 comm="syz.3.350" name="/" dev="configfs" ino=2356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.731772][ T396] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.753031][ T1574] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 66.763690][ T396] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.783120][ T396] usb 1-1: string descriptor 0 read error: -22 [ 66.789550][ T396] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 66.798806][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.834960][ T1576] FAULT_INJECTION: forcing a failure. [ 66.834960][ T1576] name failslab, interval 1, probability 0, space 0, times 0 [ 66.847976][ T1576] CPU: 1 UID: 0 PID: 1576 Comm: syz.3.352 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 66.848009][ T1576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.848023][ T1576] Call Trace: [ 66.848028][ T1576] [ 66.848036][ T1576] __dump_stack+0x21/0x30 [ 66.848073][ T1576] dump_stack_lvl+0x140/0x1c0 [ 66.848115][ T1576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.848142][ T1576] ? avc_has_perm+0x155/0x240 [ 66.848159][ T1576] dump_stack+0x19/0x20 [ 66.848181][ T1576] should_fail_ex+0x3c2/0x510 [ 66.848199][ T1576] should_failslab+0xac/0x100 [ 66.848216][ T1576] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 66.848245][ T1576] ? selinux_socket_create+0x188/0x290 [ 66.848266][ T1576] ? sock_alloc_inode+0x48/0x150 [ 66.848290][ T1576] sock_alloc_inode+0x48/0x150 [ 66.848310][ T1576] ? __cfi_sock_alloc_inode+0x10/0x10 [ 66.848325][ T1576] alloc_inode+0x7d/0x270 [ 66.848336][ T1576] ? bpf_lsm_socket_create+0xd/0x20 [ 66.848360][ T1576] new_inode_pseudo+0x19/0x40 [ 66.848370][ T1576] __sock_create+0x130/0x810 [ 66.848381][ T1576] __sys_socketpair+0x1aa/0x5c0 [ 66.848392][ T1576] __x64_sys_socketpair+0x9f/0xc0 [ 66.848404][ T1576] x64_sys_call+0x2081/0x2ee0 [ 66.848415][ T1576] do_syscall_64+0x57/0xf0 [ 66.848425][ T1576] ? clear_bhb_loop+0x50/0xa0 [ 66.848437][ T1576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.848450][ T1576] RIP: 0033:0x7f0fac39e559 [ 66.848460][ T1576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.848469][ T1576] RSP: 002b:00007f0fad208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 66.848482][ T1576] RAX: ffffffffffffffda RBX: 00007f0fac625fa0 RCX: 00007f0fac39e559 [ 66.848489][ T1576] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 66.848496][ T1576] RBP: 00007f0fac4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 66.848502][ T1576] R10: 0000200000003ac0 R11: 0000000000000246 R12: 0000000000000000 [ 66.848509][ T1576] R13: 00007f0fac626038 R14: 00007f0fac625fa0 R15: 00007ffe62126948 [ 66.848518][ T1576] [ 66.848535][ T1576] socket: no more sockets [ 66.913380][ T312] usb 3-1: device descriptor read/64, error -71 [ 67.033479][ T396] usb 1-1: USB disconnect, device number 21 [ 67.144561][ T312] usb usb3-port1: attempt power cycle [ 67.221053][ T36] audit: type=1400 audit(1792192748.527:382): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.249605][ T1586] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 67.286170][ T1586] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.301532][ T1586] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 67.371774][ T1591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.358'. [ 67.388148][ T1591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.358'. [ 67.503453][ T312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 67.524676][ T312] usb 3-1: device descriptor read/8, error -71 [ 67.653466][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 67.662961][ T312] usb 3-1: device descriptor read/8, error -71 [ 67.773437][ T313] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 67.803411][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 67.810102][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.821579][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.836345][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 67.845654][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 67.854224][ T9] usb 4-1: Product: syz [ 67.858384][ T9] usb 4-1: Manufacturer: syz [ 67.862969][ T9] usb 4-1: SerialNumber: syz [ 67.903423][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 67.924621][ T312] usb 3-1: device descriptor read/8, error -71 [ 67.934394][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.945367][ T313] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.954422][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.963136][ T313] usb 1-1: config 0 descriptor?? [ 68.054403][ T312] usb 3-1: device descriptor read/8, error -71 [ 68.069955][ T1600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.078583][ T1600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.092385][ T9] usb 4-1: USB disconnect, device number 22 [ 68.163476][ T312] usb usb3-port1: unable to enumerate USB device [ 68.372529][ T313] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 68.382312][ T313] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input9 [ 68.465333][ T313] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 68.659218][ T1630] netlink: 'syz.3.372': attribute type 49 has an invalid length. [ 68.722449][ T1630] team_slave_1: entered promiscuous mode [ 68.728213][ T1630] team_slave_1: entered allmulticast mode [ 68.870961][ T9] usb 1-1: USB disconnect, device number 22 [ 68.916902][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 68.916921][ T36] audit: type=1400 audit(1792192750.227:394): avc: denied { ioctl } for pid=1685 comm="syz.4.377" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1048636 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.960371][ T1686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.970325][ T1686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.993379][ T313] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 69.013587][ T1686] Falling back ldisc for ttyS3. [ 69.019090][ T1686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.029189][ T1686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.143561][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 69.149914][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.160912][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.170734][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 69.186171][ T313] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 69.195472][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.207240][ T313] usb 4-1: config 0 descriptor?? [ 69.301960][ T36] audit: type=1400 audit(1792192750.607:395): avc: denied { read write } for pid=1708 comm="ip" path="/dev/console" dev="rootfs" ino=25 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 69.354674][ T36] audit: type=1400 audit(1792192750.667:396): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 69.434529][ T36] audit: type=1400 audit(1792192750.747:397): avc: denied { read write } for pid=1716 comm="iptables" path="/dev/console" dev="rootfs" ino=25 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 69.458678][ T36] audit: type=1400 audit(1792192750.747:398): avc: denied { search } for pid=1716 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.481264][ T=1400 audit(1792192750.747:399): avc: denied { write } for pid=1716 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.501981][ T36] audit: type=1400 audit(1792192750.747:400): avc: denied { add_name } for pid=1716 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.524447][ T36] audit: type=1400 audit(1792192750.747:401): avc: denied { create } for pid=1716 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.546200][ T36] audit: type=1400 audit(1792192750.747:402): avc: denied { read open } for pid=1716 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=1427 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.575393][ T36] audit: type=1400 audit(1792192750.747:403): avc: denied { lock } for pid=1716 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=1427 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.645620][ T313] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0008/input/input10 [ 69.673544][ T313] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0008/input/input11 [ 69.714878][ T313] kye 0003:0458:5011.0008: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 69.917447][ T1755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.926198][ T1755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.943994][ T396] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 70.023409][ T313] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 70.094640][ T396] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 70.105550][ T396] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 70.118587][ T396] usb 1-1: config 1 interface 0 has no altsetting 0 [ 70.123861][ T9] usb 4-1: USB disconnect, device number 23 [ 70.127255][ T396] usb 1-1: string descriptor 0 read error: -22 [ 70.137586][ T396] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 70.146780][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.184452][ T313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.194217][ T313] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.204161][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.218369][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 70.227808][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 70.236165][ T313] usb 3-1: Product: syz [ 70.240379][ T313] usb 3-1: Manufacturer: syz [ 70.245047][ T313] usb 3-1: SerialNumber: syz [ 70.395542][ T396] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0009/input/input12 [ 70.408636][ T396] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0009/input/input13 [ 70.423511][ T396] kye 0003:0458:5013.0009: input,hiddev96,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 70.451924][ T313] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 70.563928][ T313] usb 1-1: USB disconnect, device number 23 [ 70.735306][ T1783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.744271][ T1783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.091044][ T1792] ./dev/sda1: Can't lookup blockdev [ 71.103771][ T1794] netlink: 9 bytes leftover after parsing attributes in process `syz.3.399'. [ 71.145417][ T1800] FAULT_INJECTION: forcing a failure. [ 71.145417][ T1800] name failslab, interval 1, probability 0, space 0, times 0 [ 71.163408][ T1800] CPU: 0 UID: 0 PID: 1800 Comm: syz.0.400 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 71.163442][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.163455][ T1800] Call Trace: [ 71.163460][ T1800] [ 71.163467][ T1800] __dump_stack+0x21/0x30 [ 71.163499][ T1800] dump_stack_lvl+0x140/0x1c0 [ 71.163524][ T1800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.163550][ T1800] ? simple_lookup+0xc7/0x100 [ 71.163568][ T1800] dump_stack+0x19/0x20 [ 71.163595][ T1800] should_fail_ex+0x3c2/0x510 [ 71.163614][ T1800] should_failslab+0xac/0x100 [ 71.163632][ T1800] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 71.163658][ T1800] ? alloc_inode+0xa9/0x270 [ 71.163676][ T1800] ? __kasan_check_write+0x18/0x20 [ 71.163701][ T1800] alloc_inode+0xa9/0x270 [ 71.163720][ T1800] new_inode+0x25/0x1e0 [ 71.163738][ T1800] ? start_creating+0x1fb/0x310 [ 71.163766][ T1800] __debugfs_create_file+0x14c/0x4b0 [ 71.163792][ T1800] debugfs_create_file+0x4e/0x70 [ 71.163817][ T1800] kvm_create_vm_debugfs+0x48e/0xb50 [ 71.163838][ T1800] ? kvm_enable_virtualization+0x150/0x150 [ 71.163857][ T1800] ? __kasan_check_write+0x18/0x20 [ 71.163880][ T1800] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 71.163903][ T1800] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 71.163921][ T1800] kvm_dev_ioctl+0xb57/0x14c0 [ 71.163939][ T1800] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 71.163957][ T1800] ? bpf_lsm_file_ioctl+0xd/0x20 [ 71.163976][ T1800] ? security_file_ioctl+0x3e/0x110 [ 71.164002][ T1800] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 71.164020][ T1800] __se_sys_ioctl+0x126/0x1b0 [ 71.164039][ T1800] __x64_sys_ioctl+0x7f/0xa0 [ 71.164056][ T1800] x64_sys_call+0x1878/0x2ee0 [ 71.164074][ T1800] do_syscall_64+0x57/0xf0 [ 71.164091][ T1800] ? clear_bhb_loop+0x50/0xa0 [ 71.164113][ T1800] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.164135][ T1800] RIP: 0033:0x7fc9ed39e559 [ 71.164151][ T1800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.164168][ T1800] RSP: 002b:00007fc9ee31d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.164189][ T1800] RAX: ffffffffffffffda RBX: 00007fc9ed626090 RCX: 00007fc9ed39e559 [ 71.164204][ T1800] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000045 [ 71.164216][ T1800] RBP: 00007fc9ed4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 71.164229][ T1800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.164240][ T1800] R13: 00007fc9ed626128 R14: 00007fc9ed626090 R15: 00007fff76b71298 [ 71.164264][ T1800] [ 71.164307][ T1800] debugfs: out of free dentries, can not create file 'nx_lpage_splits' [ 71.447765][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.456544][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.472703][ T1808] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 71.490821][ T1808] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.753392][ T396] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 71.794998][ T1824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 71.913372][ T396] usb 4-1: Using ep0 maxpacket: 32 [ 71.923005][ T396] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.932095][ T396] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.941222][ T396] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.952338][ T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.962414][ T396] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.974613][ T396] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.987919][ T396] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.997283][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.006521][ T396] usb 4-1: config 0 descriptor?? [ 72.126578][ T1830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.135145][ T1830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.213051][ T396] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.224716][ T396] usb 4-1: USB disconnect, device number 24 [ 72.231127][ T396] usblp1: removed [ 72.533455][ T396] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 72.656893][ T1832] raw_sendmsg: syz.4.410 forgot to set AF_INET. Fix it! [ 72.703417][ T396] usb 4-1: Using ep0 maxpacket: 32 [ 72.710109][ T396] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.719056][ T396] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.728078][ T396] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.737774][ T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.747811][ T396] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.757969][ T396] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.771771][ T396] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.781457][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.789351][ T9] usb 3-1: USB disconnect, device number 20 [ 72.791335][ T396] usb 4-1: config 0 descriptor?? [ 72.807852][ T9] usblp0: removed [ 72.844450][ T1847] input: syz0 as /devices/virtual/input/input15 [ 73.004357][ T396] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.025663][ T396] usb 4-1: USB disconnect, device number 25 [ 73.032643][ T396] usblp0: removed [ 73.052830][ T1860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.061544][ T1860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Connection to 10.128.1.8 closed by remote host. [ 73.223404][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 73.353503][ T45] usb 5-1: USB disconnect, device number 11 [ 73.547031][ T1652] bridge_slave_1: left allmulticast mode [ 73.553169][ T1652] bridge_slave_1: left promiscuous mode [ 73.559032][ T1652] : port 2(bridge_slave_1) entered disabled state [ 73.566407][ T1652] bridge_slave_0: left allmulticast mode [ 73.572184][ T1652] bridge_slave_0: left promiscuous mode [ 73.577888][ T1652] : port 1(bridge_slave_0) entered disabled state [ 73.585437][ T1652] bridge_slave_1: left allmulticast mode [ 73.591102][ T1652] bridge_slave_1: left promiscuous mode [ 73.597262][ T1652] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.604995][ T1652] bridge_slave_0: left allmulticast mode [ 73.610657][ T1652] bridge_slave_0: left promiscuous mode [ 73.616431][ T1652] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.624985][ T1652] bridge_slave_1: left allmulticast mode [ 73.630735][ T1652] bridge_slave_1: left promiscuous mode [ 73.636527][ T1652] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.644455][ T1652] bridge_slave_0: left allmulticast mode [ 73.650373][ T1652] bridge_slave_0: left promiscuous mode [ 73.656098][ T1652] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.876112][ T1652] tipc: Left network mode [ 73.882156][ T1652] veth1_macvtap: left promiscuous mode [ 73.887754][ T1652] veth0_vlan: left promiscuous mode [ 73.893244][ T1652] veth1_macvtap: left promiscuous mode [ 73.898936][ T1652] veth0_vlan: left promiscuous mode [ 73.904471][ T1652] veth1_macvtap: left promiscuous mode [ 73.909974][ T1652] veth0_vlan: left promiscuous mode [ 74.415122][ T1652] bridge_slave_1: left allmulticast mode [ 74.420885][ T1652] bridge_slave_1: left promiscuous mode [ 74.426658][ T1652] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.434740][ T1652] bridge_slave_0: left allmulticast mode [ 74.440527][ T1652] bridge_slave_0: left promiscuous mode [ 74.446314][ T1652] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.535509][ T1652] veth1_macvtap: left promiscuous mode [ 74.541016][ T1652] veth0_vlan: left promiscuous mode [ 74.765582][ T1652] ------------[ cut here ]------------ [ 74.771168][ T1652] WARNING: CPU: 1 PID: 1652 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 74.781321][ T1652] Modules linked in: [ 74.785257][ T1652] CPU: 1 UID: 0 PID: 1652 Comm: kworker/u8:9 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 74.797695][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.807786][ T1652] Workqueue: netns cleanup_net [ 74.812558][ T1652] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 74.818610][ T1652] Code: e8 01 07 d5 fc 4b 83 3c 3e 00 75 19 e8 75 91 7b fc 49 81 ff f8 07 00 00 74 1b e8 67 91 7b fc 49 83 c7 08 eb c9 e8 5c 91 7b fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 74.838492][ T1652] RSP: 0018:ffffc9000977fb90 EFLAGS: 00010293 [ 74.844609][ T1652] RAX: ffffffff850dbb64 RBX: ffff88812f01c700 RCX: ffff888113e193c0 [ 74.852610][ T1652] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888134ce87e8 [ 74.860700][ T1652] RBP: ffffc9000977fbb0 R08: ffffffff8854f807 R09: 1ffffffff10a9f00 [ 74.868719][ T1652] R10: dffffc0000000000 R11: fffffbfff10a9f01 R12: dffffc0000000000 [ 74.876735][ T1652] R13: dffffc0000000000 R14: ffff888134ce8000 R15: 00000000000007e8 [ 74.884728][ T1652] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 74.893823][ T1652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.900431][ T1652] CR2: 00007f376c7f84c0 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 74.908472][ T1652] Call Trace: [ 74.911761][ T1652] [ 74.914786][ T1652] cleanup_net+0x6ba/0xc90 [ 74.919420][ T1652] ? __cfi_cleanup_net+0x10/0x10 [ 74.924467][ T1652] ? kick_pool+0xb9/0x540 [ 74.928895][ T1652] process_scheduled_works+0x7f7/0x1060 [ 74.934634][ T1652] worker_thread+0xc99/0x13f0 [ 74.939449][ T1652] kthread+0x2c7/0x360 [ 74.943587][ T1652] ? __cfi_worker_thread+0x10/0x10 [ 74.948731][ T1652] ? __cfi_kthread+0x10/0x10 [ 74.953481][ T1652] ret_from_fork+0x67/0xa0 [ 74.957999][ T1652] ? __cfi_kthread+0x10/0x10 [ 74.962646][ T1652] ret_from_fork_asm+0x1a/0x30 [ 74.967520][ T1652] [ 74.970545][ T1652] ---[ end trace 0000000000000000 ]--- [ 74.976227][ T1652] ------------[ cut here ]------------ [ 74.981797][ T1652] WARNING: CPU: 0 PID: 1652 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 74.993696][ T1652] Modules linked in: [ 74.997714][ T1652] CPU: 0 UID: 0 PID: 1652 Comm: kworker/u8:9 Tainted: G W syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 75.011640][ T1652] Tainted: [W]=WARN [ 75.015564][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.025706][ T1652] Workqueue: netns cleanup_net [ 75.030586][ T1652] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 75.036730][ T1652] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 20 91 7b fc 49 81 ff f8 07 00 00 74 1b e8 12 91 7b fc 49 83 c7 08 eb c5 e8 07 91 7b fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 f7 90 7b fc 5b 41 5c 41 5e 41 [ 75.056512][ T1652] RSP: 0018:ffffc9000977fb90 EFLAGS: 00010293 [ 75.062786][ T1652] RAX: ffffffff850dbbb9 RBX: ffff888134ce8800 RCX: ffff888113e193c0 [ 75.070839][ T1652] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888134ce8808 [ 75.078995][ T1652] RBP: ffffc9000977fbb0 R08: ffffffff8854f807 R09: 1ffffffff10a9f00 [ 75.087094][ T1652] R10: dffffc0000000000 R11: fffffbfff10a9f01 R12: dffffc0000000000 [ 75.095074][ T1652] R13: dffffc0000000000 R14: ffff888134ce8000 R15: 0000000000000008 [ 75.103413][ T1652] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 75.112606][ T1652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.119284][ T1652] CR2: 00007f47b186b6b0 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 75.127429][ T1652] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.135489][ T1652] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 75.143523][ T1652] Call Trace: [ 75.146807][ T1652] [ 75.149739][ T1652] cleanup_net+0x6ba/0xc90 [ 75.154301][ T1652] ? __cfi_cleanup_net+0x10/0x10 [ 75.159280][ T1652] ? kick_pool+0xb9/0x540 [ 75.163678][ T1652] process_scheduled_works+0x7f7/0x1060 [ 75.169252][ T1652] worker_thread+0xc99/0x13f0 [ 75.173972][ T1652] kthread+0x2c7/0x360 [ 75.178056][ T1652] ? __cfi_worker_thread+0x10/0x10 [ 75.183254][ T1652] ? __cfi_kthread+0x10/0x10 [ 75.187871][ T1652] ret_from_fork+0x67/0xa0 [ 75.192293][ T1652] ? __cfi_kthread+0x10/0x10 [ 75.196935][ T1652] ret_from_fork_asm+0x1a/0x30 [ 75.201706][ T1652] [ 75.204757][ T1652] ---[ end trace 0000000000000000 ]--- [ 75.212770][ T1652] ------------[ cut here ]------------ [ 75.218317][ T1652] WARNING: CPU: 0 PID: 1652 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 75.228039][ T1652] Modules linked in: [ 75.232026][ T1652] CPU: 0 UID: 0 PID: 1652 Comm: kworker/u8:9 Tainted: G W syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 75.245295][ T1652] Tainted: [W]=WARN [ 75.249102][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.259218][ T1652] Workqueue: netns cleanup_net [ 75.264149][ T1652] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 75.269709][ T1652] Code: 3c 20 00 74 08 48 89 df e8 1f da ef fc 48 8b 3b e8 57 ca da fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 82 64 96 fc <0f> 0b e9 b0 fd ff ff e8 76 64 96 fc 0f 0b e9 18 fe ff ff e8 6a 64 [ 75.289371][ T1652] RSP: 0018:ffffc9000977fb70 EFLAGS: 00010293 [ 75.295499][ T1652] RAX: ffffffff84f2e83e RBX: ffff88812f01c700 RCX: ffff888113e193c0 [ 75.303535][ T1652] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888113e193c0 [ 75.311520][ T1652] RBP: ffffc9000977fb98 R08: ffffffff8854f807 R09: 1ffffffff10a9f00 [ 75.319716][ T1652] R10: dffffc0000000000 R11: fffffbfff10a9f01 R12: 1ffffffff10a9c54 [ 75.327753][ T1652] R13: dffffc0000000000 R14: ffff88812f01d300 R15: dffffc0000000000 [ 75.335829][ T1652] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 75.344819][ T1652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.351408][ T1652] CR2: 00007f47b186b6b0 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 75.359475][ T1652] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.367606][ T1652] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 75.375630][ T1652] Call Trace: [ 75.378925][ T1652] [ 75.381853][ T1652] xfrm_net_exit+0x31/0x80 [ 75.386332][ T1652] cleanup_net+0x6ba/0xc90 [ 75.390764][ T1652] ? __cfi_cleanup_net+0x10/0x10 [ 75.395743][ T1652] ? kick_pool+0xb9/0x540 [ 75.400110][ T1652] process_scheduled_works+0x7f7/0x1060 [ 75.405915][ T1652] worker_thread+0xc99/0x13f0 [ 75.410636][ T1652] kthread+0x2c7/0x360 [ 75.414766][ T1652] ? __cfi_worker_thread+0x10/0x10 [ 75.419898][ T1652] ? __cfi_kthread+0x10/0x10 [ 75.424538][ T1652] ret_from_fork+0x67/0xa0 [ 75.428970][ T1652] ? __cfi_kthread+0x10/0x10 [ 75.433700][ T1652] ret_from_fork_asm+0x1a/0x30 [ 75.438540][ T1652] [ 75.441545][ T1652] ---[ end trace 0000000000000000 ]--- [ 75.586706][ T1861] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 75.593561][ T1861] ACPI: PM: Preparing to enter system sleep state S5 [ 75.600388][ T1861] kvm: exiting hardware virtualization [ 75.605892][ T1861] reboot: Power down serialport: VM disconnected.