last executing test programs: 5.592747325s ago: executing program 1 (id=223): socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00050300000001fedbdf25"], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.539643357s ago: executing program 1 (id=225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x20, r1, 0x719, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)="fb00000000"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) 5.539379697s ago: executing program 1 (id=227): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), 0x4) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x2}}, 0x10) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="67a111707469272357a60887da2b0e289ebe48e05c4323cfd0ce96de6ac9e5ce6ad9fce3df09d55af0ff5f5f636fdde35d4d392364606c334620063878f5ed8574f8d9f0159ca78a64fb9d38390dd790a32c5cdb8330751dd50062c6c3920f9813c301af4a100ad24a307b10e9d40787ed", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0x3d, {0x3d, 0x21, "cd8714600000bc5ebc54bad56d4d0acd3d4380603f6b76b053eefc0474b89b53cdae7b7e19516b3c5a5971754a832eaa34d0c8c1cda14c95354e00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) 4.073085183s ago: executing program 3 (id=233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xc, 0x5}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/214, 0xd6}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0x0, 0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) 4.046422874s ago: executing program 3 (id=234): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x6488, r2, 0x36000000, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.953615187s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.log\x00', 0x2a800, 0x132) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001", 0x1f) socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x402240, 0xa1) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x402240, 0xa1) dup(r2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202", @ANYRES16], 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac2(r4, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x3, 0x20, "46a05fef0d99bf79bc3078c349036678a1fc75d5746cade8bdacb39052837472"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x81, 0x1, '\''}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x85, 0x3, "21846c"}}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00289562060ba5a1c824a1120000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf2509000000050015000500000005001300410000000800140007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c045}, 0x4) getdents64(r2, &(0x7f00000001c0)=""/43, 0x2b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) (async) setreuid(0x0, r8) r9 = getegid() fchownat(r2, &(0x7f0000000100)='./file0\x00', r8, r9, 0x100) (async) fchownat(r2, &(0x7f0000000100)='./file0\x00', r8, r9, 0x100) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000200, r8, &(0x7f0000000280)='./file0/file0\x00') 3.123301722s ago: executing program 0 (id=241): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="1c00fff0120021030000000000bc61682a00968008000a00", @ANYRES32=r0], 0x1c}], 0x1}, 0x4040000) 3.122445682s ago: executing program 0 (id=242): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) 3.107146183s ago: executing program 0 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000017c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001800)={0x10004, 0x0, 0xb000, 0x2000, &(0x7f0000ff6000/0x2000)=nil}) gettimeofday(&(0x7f0000000040), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001780)={&(0x7f00000002c0), 0xc, &(0x7f0000001740)={&(0x7f00000004c0)={0x1258, 0x8, 0x9, 0x101, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x8}, [@typed={0x5e, 0x11, 0x0, 0x0, @binary="4813121b834776c3d2dde1fe1f18cdb0f8c77ad2dabbc0cd314e432cc69902923e9a6deaad52baf72734f751850a9518851f4dda859f960c167fa43e3cae0bb829cb2c4ee0537f2a1f33163122a537f7b698bab307fd287c24a8"}, @generic="37fbe4ecd2b196d4503cb4ae89c194b5ab68c44f798d1c36e3497feeed3db894927ee2d2d92246ce53708ea8cbc9bd09197426fcbcc987f5091aeb31015d7ef553934709e155cef0635b4449bc83746359c73a15ee8db5fece039248becdd97c650bc29ed84fe201969827468134b031fa5b9270bcec10fd9ef75cfef2e8ec1535892867e88c8f11da6371000aa947ae6195e1ac022c78bfd6d6bc27806a5ce770436a16e57afc7e4fc2e092e7", @generic="9da35a0602d82cb65296e3812d7475af", @generic="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", @nested={0xa9, 0x81, 0x0, 0x1, [@nested={0x4, 0x11d}, @nested={0x4, 0x1a}, @nested={0x4, 0x119}, @generic="b4f286cc2777a96f7982eaed06bf1b6fc9b143723101ddb0d56d61b47f0a4df1c94ddddb4ef864d626a880959afc24a02dea9d468461a2d8d202308b72150da28a177bbef90b65d54d5ff9365e64467d2d2097e79aca149938652fc1a602e847635a7c3ac0c457de969aaed7045ca2aaf77142a1acce4616414d6fee4f2929a9c9dee4a6585d5be1d180502de1d1319cdcd03edcaf", @nested={0x4, 0x164}]}, @generic="a54868e4736c173819baac3f6092e16030bdc0fcd2d338a16c79eaaee59ef7a8b000545c9dc84c063039df80a9ddf03e49fde47b63ac1a578a4333d3ee4c0c653075a83e263cffa416201f1a157110071a505cc7e21f2ff1ebc8a9153d8fee531cff1bbc1d8cfd009911ccb295be6d40d14bf7150159b53d8143"]}, 0x1258}, 0x1, 0x0, 0x0, 0x40001}, 0x40000c0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r3, &(0x7f00000001c0)={0x7f, 0x2d, 0x8000000000005, 0xa, 0x2, 0x2c}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r7, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="84e483", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r7, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)=ANY=[@ANYBLOB="04010000100007000000000000000000ff0200000000000000000000000000db57c6273f82532ffa1f2c169e0100000000000000000000000000000000ffff0000000000000000000002000104", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001ffffffff2b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r5, 0x8000, 0x8000, 0x6, 0x8, {{0x24, 0x4, 0x2, 0x1, 0x90, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @multicast1, {[@generic={0x94, 0x4, "8dff"}, @lsrr={0x83, 0x1b, 0x55, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x44}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x77, 0x3, 0x3, [{@remote, 0x6}, {@broadcast, 0x8}, {@private=0xa010100}, {@broadcast, 0x6}, {@empty, 0x1ff}]}, @ssrr={0x89, 0x13, 0xf3, [@private=0xa010102, @empty, @local, @local]}, @lsrr={0x83, 0xf, 0xee, [@multicast1, @local, @loopback]}, @timestamp_addr={0x44, 0xc, 0xb7, 0x1, 0x0, [{@empty, 0x4}]}]}}}}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x20, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x40, 0x23, 0x28, {0xfffffffffffffe9b, 0x23, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x37, 0x40000000788, 0x80000000005, 0x183, 0xffffffff00000000, 0x0, 0xee, 0x80000004, 0x3, 0x1000045, 0xfffc, 0x8, 0xf, 0x6, 0x0, 0x241d], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.451526314s ago: executing program 1 (id=246): syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x0, [], [{{0x9, 0x5, 0xc, 0x3633c4b0160f42b7, 0x40, 0x3, 0x3, 0x1, {0x4}}}]}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x5, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x27b8, 0x1ed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0xfc01, 0x4, 0x1, {0x22, 0xd71}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x77, 0x4, 0xb}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x10, 0x0, 0x4}, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000480)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000540)={0x60, 0x3, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x5a0, &(0x7f00000004c0), 0x0, 0x4, 0x18, 0x51, 0x20, 0x20}) syz_usb_connect$uac3(0x3, 0xd5, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000e7820582054000010203010902c300030101c0d5080b0200012030930904000000010130000a24010c0a00080000000904010000010230000904010101010230001024020206000001051c12c2f62f1e4f0624020103060905010900020606810a2525170f00000481ff0904020000010230000904020101010230001724010152050000ff01040000000000000080fd8000f81124020247ce0b0008c039010a564ac9690a2402010601014059890d240202ff01020007ffb327460905820940000805c60a252500000000010d00"], &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x5, 0x80, 0x2, 0x40, 0x80}, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="050f4a000503100b1c100a032400003f3fff02c0000000c00000000b10010420004cf5873a91d7c64e168cfeae4e1d9d1204c50300141004402283ec55cd63000000004b46b7296cf2"], 0x5, [{0x97, &(0x7f0000000200)=@string={0x97, 0x3, "3e5b4581f91f8102e3aa10aecf3f9ea47562a42becd9994a8adb4ea40d0e67ea46259c8867a1649e81c4b074064e33811cb5ebb31e7d32f4d8ccfb21f71c577a3700f23458d34cd5d09e80e8b861bcca99377e5dd876fa7944faa69c1db4540de483234354961ba99c586807a5a5351e38ccc1d48b3df0e2d8a8055ae24e47497de236eb18214379481f685526f1d53b771c2ad76a"}}, {0x78, &(0x7f00000002c0)=@string={0x78, 0x3, "e4237954579c6075273f824f8e13614d86055c1fe43af658e22933e18dcbe03493d96ca535b9656a5d2c56ca838a1e0769d3dcfd991713f44e389744ee670cb501e230cb0e104fb087d2c9a87c27a3f3716214be93ff2ef42383961263a933504b223c8effa1bc0c5ab43da8a814d97703f4d35a60fe"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_connect$uac1(0x3, 0xe4, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x6, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa, 0x29}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x2, "9760f6f9ba59"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0x1, 0x1e7, 0xa0, 0x7}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x9, 0x4, "7f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x5, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff, 0x75, 0x3, "6225acb62abf6e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x7, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x9, 0x73, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x92, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x603, 0x751, 0xd, "f34e1d24fb2a"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb, 0x40, 0xc3, {0x7, 0x25, 0x1, 0x4, 0xfa, 0x6230}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x5, 0x6, 0x79, 0x10, 0x3}, 0x52, &(0x7f0000000940)={0x5, 0xf, 0x52, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x20, 0x4, 0x5, 0x31}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "aa1125000edc04332f65c779d2e1020b"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7ffffcf, 0xf, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ab91140356300ef212fe5226b4275cd4"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x28, 0x1, 0x3, 0xfa}]}, 0x1, [{0xec, &(0x7f00000009c0)=@string={0xec, 0x3, "ae183aa29f1b5fb57db9ebcd4f4991b6c4a7bd01a154b1fc473a77edf20cd6477bdd75e77d0e7c12772f7d2770c6fb5e18f7a92ef82ab3e4a4d64fd8348ce6fcc4ce62152295dff655aa005d562e81da9bc6aa04d4dac1f865d39146440b69c16f39b2139dc2023af4580710e5965d8b7b4f2ec8b16d6491a07b994cd89951c922d50ab74706b6c3585a33c0c2cbbca8ff14715a275b30ff4cffab6eb62e0fc25d5ba7dd95354171951fb58b70fca21dabce25c23ab431e8d6e9a9ecb2d0f907dcfd10d1f268dd9a1ce78d0bf8cfcc750880594a78429f3b17fd0ba3979a0bffc0f304cde9d0d6025aaa"}}]}) 1.109082225s ago: executing program 1 (id=247): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x7, 0xfec00000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80000) 1.051910458s ago: executing program 1 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102ef050507240405"], 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x9, 0x80000004400080, 0x1c00000, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 927.615221ms ago: executing program 3 (id=250): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x7000000, 0x12, r0, 0xcc840000) 917.134471ms ago: executing program 3 (id=251): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/168, 0x3c}], 0x1, 0x9f, 0x106) 883.443233ms ago: executing program 3 (id=252): socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x80000007, 0x8}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 363.644039ms ago: executing program 2 (id=256): r0 = socket(0x28, 0x801, 0xfffffffc) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 363.055859ms ago: executing program 2 (id=257): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x4}, {0x1a0, 0x0, 0x80}]}) 360.204429ms ago: executing program 2 (id=258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000010003306000000000000000000000000000000000000000000000000ac1e040100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414bb000000000000000000000000fdffffffffffffff00000000000000000000000000000000cd2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000002dbd7000000000000200040000000000000000000800180000000000480001006d643500"/248], 0x140}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) 337.1264ms ago: executing program 2 (id=259): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f000000f2c0)={0x0, 0x0, &(0x7f000000f240)=[{&(0x7f0000009180)={0x10, 0x22, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r0, 0x12f82000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f000074b000/0x1000)=nil, &(0x7f00009b2000/0x3000)=nil, &(0x7f00003e8000/0x2000)=nil, &(0x7f00000cb000/0x1000)=nil, &(0x7f0000156000/0x4000)=nil, &(0x7f00003cd000/0x1000)=nil, &(0x7f0000959000/0x3000)=nil, &(0x7f0000136000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000773000/0x4000)=nil, &(0x7f0000000100)="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", 0x1000, r0}, 0x68) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 173.139785ms ago: executing program 2 (id=260): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/168, 0x3c}], 0x1, 0x9f, 0x106) 103.547656ms ago: executing program 2 (id=261): r0 = socket$packet(0x11, 0x3, 0x300) inotify_init() socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000140)) recvfrom$inet_nvme(r2, &(0x7f0000000100)=""/6, 0x6, 0x40000000, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x2, 0x2, {0xa, 0x4e24, 0x1, @private1, 0x9f8c}}}, 0x80) 88.844627ms ago: executing program 0 (id=262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xc, 0x5}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/214, 0xd6}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1, 0x0, 0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) 14.02817ms ago: executing program 0 (id=263): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x1, 0xcb, 0x1, '\x00', 0x9}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x130, 0x0, 0x2, 0xf520111d4fc7a369, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x8, 0x2, 0x0, 0x1, {0x5, 0x1, 0xccb19e1306ad7a1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x41010}, 0x4008000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=264): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7, 0x40, 0x5, 0x9, {{0x8, 0x4, 0x2, 0x25, 0x20, 0x66, 0x0, 0x3, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xc5, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x7}]}]}}}}}) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0xe99, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x148}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x80, 0x0, r4}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x81, 0x18c, {{0x37, 0x4, 0x0, 0x4, 0xdc, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x1f, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @generic={0x86, 0x3, "c7"}, @noop, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x1, 0x12, "75db7e2cec0b3d5131fa044d058f9d7e"}, {0x5, 0xe, "facbe96201a00c2195a7cca1"}, {0x7, 0xc, "33e25422e15368418d73"}]}, @generic={0x86, 0xc, "4326caf1b17037aae6ac"}, @cipso={0x86, 0xfffffffffffffdbb, 0x0, [{0x2, 0x11, "1d1a4eb2ed1d06ee3637093c175863"}, {0x7, 0x11, "96c0d9298807c6701be1c9f45115d7"}]}, @timestamp_addr={0x44, 0x3c, 0xd5, 0x1, 0x3, [{@private=0xa010100, 0x9}, {@broadcast, 0x7}, {@loopback, 0xc}, {@remote, 0x1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x5}]}]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) r14 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r14, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r14, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r13}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000300)={@loopback, @loopback, 0x0}, &(0x7f0000000340)=0xc) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) r17 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r17, 0x0, r18) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendto$packet(r16, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000006890086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r19}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf250500000038000180080000020065727370616e3000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080003000200000005000200ff0000000800090009000000240001800800030003000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="080003000100000005000700030000000500020003000000400001800800030002000000080003000600000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000300010000001400020076657468305f766c616e00000000000005000200000000000800090004000000050006000a000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r20, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000600)={'erspan0\x00', r21, 0x1, 0x7, 0x37, 0x7, {{0x21, 0x4, 0x2, 0x3, 0x84, 0x64, 0x0, 0xd, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_addr={0x44, 0x54, 0xf5, 0x1, 0x0, [{@local, 0xb}, {@remote, 0xe71}, {@broadcast, 0xffffff60}, {@rand_addr=0x64010102, 0xb005}, {@loopback, 0x1}, {@empty, 0x81b4}, {@empty, 0x7}, {@multicast2, 0x80}, {@broadcast, 0x101}, {@local, 0x2}]}, @noop, @noop, @lsrr={0x83, 0x17, 0x85, [@private=0xa010102, @remote, @multicast1, @multicast1, @local]}, @end]}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 23.722729][ T36] audit: type=1400 audit(1780057721.740:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.723780][ T287] cgroup: Unknown subsys name 'net' [ 23.745410][ T36] audit: type=1400 audit(1780057721.740:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.772826][ T36] audit: type=1400 audit(1780057721.770:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.772967][ T287] cgroup: Unknown subsys name 'devices' [ 23.894093][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.899725][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.012383][ T36] audit: type=1400 audit(1780057722.030:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.035671][ T36] audit: type=1400 audit(1780057722.030:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.060408][ T36] audit: type=1400 audit(1780057722.030:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.089571][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.098412][ T36] audit: type=1400 audit(1780057722.110:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.123822][ T36] audit: type=1400 audit(1780057722.110:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.164091][ T36] audit: type=1400 audit(1780057722.180:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.189722][ T36] audit: type=1400 audit(1780057722.180:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.190004][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.020258][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.027368][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.034458][ T295] bridge_slave_0: entered allmulticast mode [ 25.040636][ T295] bridge_slave_0: entered promiscuous mode [ 25.050047][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.057163][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.064512][ T295] bridge_slave_1: entered allmulticast mode [ 25.070686][ T295] bridge_slave_1: entered promiscuous mode [ 25.085966][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.093131][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.100186][ T294] bridge_slave_0: entered allmulticast mode [ 25.106560][ T294] bridge_slave_0: entered promiscuous mode [ 25.114003][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.121047][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.128163][ T294] bridge_slave_1: entered allmulticast mode [ 25.134505][ T294] bridge_slave_1: entered promiscuous mode [ 25.152168][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.159225][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.166355][ T296] bridge_slave_0: entered allmulticast mode [ 25.172629][ T296] bridge_slave_0: entered promiscuous mode [ 25.180582][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.187687][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.194835][ T296] bridge_slave_1: entered allmulticast mode [ 25.200979][ T296] bridge_slave_1: entered promiscuous mode [ 25.272503][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.279572][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.286675][ T297] bridge_slave_0: entered allmulticast mode [ 25.292881][ T297] bridge_slave_0: entered promiscuous mode [ 25.311711][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.318847][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.326027][ T297] bridge_slave_1: entered allmulticast mode [ 25.332346][ T297] bridge_slave_1: entered promiscuous mode [ 25.435660][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.442749][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.450072][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.457123][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.468428][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.475517][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.482811][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.489838][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.510327][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.517422][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.524717][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.531752][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.557858][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.565043][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.572376][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.579501][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.613597][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.620989][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.628836][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.636151][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.643783][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.650946][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.658135][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.665394][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.686634][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.693721][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.701199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.708299][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.717907][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.724992][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.744570][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.751624][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.759423][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.766473][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.774598][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.781629][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.789289][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.796353][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.805670][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.812771][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.871320][ T296] veth0_vlan: entered promiscuous mode [ 25.889786][ T295] veth0_vlan: entered promiscuous mode [ 25.898665][ T297] veth0_vlan: entered promiscuous mode [ 25.905485][ T294] veth0_vlan: entered promiscuous mode [ 25.924262][ T297] veth1_macvtap: entered promiscuous mode [ 25.931966][ T296] veth1_macvtap: entered promiscuous mode [ 25.948274][ T294] veth1_macvtap: entered promiscuous mode [ 25.957463][ T295] veth1_macvtap: entered promiscuous mode [ 25.998652][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.049110][ T316] syz_tun: entered allmulticast mode [ 26.075546][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.134071][ T324] syz_tun (unregistering): left allmulticast mode [ 26.235147][ T325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=325 comm=syz.2.3 [ 26.332159][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.411242][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 26.452959][ T342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.503914][ T312] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 26.514310][ T312] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 26.527706][ T312] usb 4-1: config 1 interface 0 has no altsetting 0 [ 26.547099][ T312] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 26.553341][ T353] ======================================================= [ 26.553341][ T353] WARNING: The mand mount option has been deprecated and [ 26.553341][ T353] and is ignored by this kernel. Remove the mand [ 26.553341][ T353] option from the mount to silence this warning. [ 26.553341][ T353] ======================================================= [ 26.558248][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.619349][ T312] usb 4-1: Product: syz [ 26.621654][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 26.623905][ T312] usb 4-1: Manufacturer: syz [ 26.637402][ T312] usb 4-1: SerialNumber: syz [ 26.646779][ T318] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.654804][ T318] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 26.687351][ T362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.752243][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.932331][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 26.942598][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.953891][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 101, changing to 7 [ 26.973427][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.982970][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.991008][ T9] usb 1-1: Product: syz [ 26.995230][ T9] usb 1-1: Manufacturer: syz [ 26.999865][ T9] usb 1-1: SerialNumber: syz [ 27.012135][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.162176][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 27.173188][ T66] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 27.186459][ T66] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 27.202478][ T66] usb 3-1: config 1 has no interface number 1 [ 27.208626][ T66] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 27.209224][ T344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.233112][ T344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.242263][ T66] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.262372][ T66] usb 3-1: config 1 interface 105 has no altsetting 0 [ 27.273527][ T66] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 27.292114][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.300158][ T66] usb 3-1: Product: syz [ 27.312111][ T66] usb 3-1: Manufacturer: syz [ 27.316845][ T66] usb 3-1: SerialNumber: syz [ 27.328910][ T364] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 27.445167][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.452768][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 27.463825][ T9] usb 1-1: USB disconnect, device number 2 [ 27.486962][ T396] 9pnet_fd: Insufficient options for proto=fd [ 27.489489][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.543253][ T66] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 27.689817][ T312] rtl8150 4-1:1.0: couldn't reset the device [ 27.696064][ T312] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 27.709116][ T312] usb 4-1: USB disconnect, device number 2 [ 28.252137][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.402190][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 28.408736][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.416570][ T312] usb 4-1: can't read configurations, error -61 [ 28.552213][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.702143][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 28.708811][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 28.716555][ T312] usb 4-1: can't read configurations, error -61 [ 28.723096][ T312] usb usb4-port1: attempt power cycle [ 29.062185][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.083268][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 29.089888][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.097770][ T312] usb 4-1: can't read configurations, error -61 [ 29.154844][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 29.154863][ T36] audit: type=1400 audit(1780057727.170:179): avc: denied { bind } for pid=429 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.180480][ T36] audit: type=1400 audit(1780057727.170:180): avc: denied { name_bind } for pid=429 comm="syz.1.40" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 29.201368][ T36] audit: type=1400 audit(1780057727.170:181): avc: denied { node_bind } for pid=429 comm="syz.1.40" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 29.222032][ T36] audit: type=1400 audit(1780057727.170:182): avc: denied { setopt } for pid=429 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.242358][ T312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.272670][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 29.279111][ T312] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.286751][ T312] usb 4-1: can't read configurations, error -61 [ 29.293422][ T312] usb usb4-port1: unable to enumerate USB device [ 29.402439][ T436] kvm: kvm [435]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0xc0010058) = 0xb [ 29.413943][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.455973][ T36] audit: type=1400 audit(1780057727.470:183): avc: denied { setopt } for pid=437 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.501221][ T36] audit: type=1400 audit(1780057727.510:184): avc: denied { read } for pid=442 comm="syz.0.46" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.523380][ T36] audit: type=1400 audit(1780057727.510:185): avc: denied { open } for pid=442 comm="syz.0.46" path="net:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.546296][ T36] audit: type=1400 audit(1780057727.510:186): avc: denied { write } for pid=442 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.592261][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 29.600355][ T9] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 29.609552][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.617599][ T9] usb 2-1: Product: syz [ 29.621811][ T9] usb 2-1: Manufacturer: syz [ 29.626497][ T9] usb 2-1: SerialNumber: syz [ 29.762857][ T66] usb 3-1: USB disconnect, device number 2 [ 29.842893][ T430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.851413][ T430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.895373][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 29.921292][ T9] usb 2-1: USB disconnect, device number 2 [ 30.154137][ T36] audit: type=1400 audit(1780057728.170:187): avc: denied { ioctl } for pid=462 comm="syz.1.52" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.187727][ T36] audit: type=1400 audit(1780057728.200:188): avc: denied { write } for pid=464 comm="syz.1.53" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.432290][ T384] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.582160][ T384] usb 2-1: Using ep0 maxpacket: 16 [ 30.588742][ T384] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 30.597330][ T384] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 30.606654][ T384] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 30.616868][ T384] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 30.627969][ T384] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.637552][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.645656][ T384] usb 2-1: Product: syz [ 30.649982][ T384] usb 2-1: Manufacturer: syz [ 30.654722][ T384] usb 2-1: SerialNumber: syz [ 30.862018][ T384] usb 2-1: 0:2 : does not exist [ 30.872461][ T384] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 30.891808][ T384] usb 2-1: USB disconnect, device number 3 [ 30.906253][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.921420][ T497] rust_binder: 28: no such ref 0 [ 30.942636][ T496] netlink: 96 bytes leftover after parsing attributes in process `syz.2.65'. [ 30.975887][ T499] kvm: kvm [498]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0xc0010058) = 0xb [ 31.392222][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.430181][ T532] FAULT_INJECTION: forcing a failure. [ 31.430181][ T532] name failslab, interval 1, probability 0, space 0, times 0 [ 31.432161][ T312] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.442914][ T384] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.457950][ T532] CPU: 1 UID: 0 PID: 532 Comm: syz.1.81 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 31.457979][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.457990][ T532] Call Trace: [ 31.457996][ T532] [ 31.458003][ T532] __dump_stack+0x21/0x30 [ 31.458036][ T532] dump_stack_lvl+0x140/0x1c0 [ 31.458060][ T532] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.458076][ T532] dump_stack+0x19/0x20 [ 31.458090][ T532] should_fail_ex+0x3d7/0x530 [ 31.458102][ T532] should_failslab+0xac/0x100 [ 31.458115][ T532] kmem_cache_alloc_node_noprof+0x45/0x420 [ 31.458128][ T532] ? __alloc_skb+0x108/0x370 [ 31.458142][ T532] ? kernel_text_address+0xa9/0xe0 [ 31.458157][ T532] __alloc_skb+0x108/0x370 [ 31.458170][ T532] ? arch_stack_walk+0x10a/0x170 [ 31.458184][ T532] alloc_skb_with_frags+0xce/0x8b0 [ 31.458200][ T532] sock_alloc_send_pskb+0x883/0x9a0 [ 31.458210][ T532] ? __kasan_check_write+0x18/0x20 [ 31.458222][ T532] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 31.458234][ T532] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 31.458246][ T532] packet_sendmsg+0x393d/0x5740 [ 31.458256][ T532] ? __asan_memcpy+0x5a/0x80 [ 31.458268][ T532] ? avc_has_perm+0x155/0x240 [ 31.458282][ T532] ? selinux_socket_sendmsg+0x281/0x380 [ 31.458295][ T532] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 31.458309][ T532] ? __cfi_packet_sendmsg+0x10/0x10 [ 31.458320][ T532] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 31.458333][ T532] ? security_socket_sendmsg+0x3d/0x100 [ 31.458346][ T532] ? __cfi_packet_sendmsg+0x10/0x10 [ 31.458356][ T532] ____sys_sendmsg+0x9de/0xa30 [ 31.458367][ T532] ? __import_iovec+0x5ad/0x7c0 [ 31.458381][ T532] ? __sys_sendmsg_sock+0x50/0x50 [ 31.458392][ T532] ? import_iovec+0x80/0xb0 [ 31.458405][ T532] ___sys_sendmsg+0x2a6/0x370 [ 31.458416][ T532] ? __sys_sendmsg+0x2a0/0x2a0 [ 31.458426][ T532] ? kstrtouint+0x78/0xf0 [ 31.458459][ T532] __sys_sendmmsg+0x2b4/0x4e0 [ 31.458470][ T532] ? __cfi___sys_sendmmsg+0x10/0x10 [ 31.458482][ T532] ? __cfi_ksys_write+0x10/0x10 [ 31.458494][ T532] __x64_sys_sendmmsg+0xa4/0xc0 [ 31.458505][ T532] x64_sys_call+0xfec/0x2ee0 [ 31.458516][ T532] do_syscall_64+0x57/0xf0 [ 31.458528][ T532] ? clear_bhb_loop+0x50/0xa0 [ 31.458541][ T532] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.458554][ T532] RIP: 0033:0x7f891f79ce59 [ 31.458566][ T532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.458575][ T532] RSP: 002b:00007f89206d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 31.458589][ T532] RAX: ffffffffffffffda RBX: 00007f891fa15fa0 RCX: 00007f891f79ce59 [ 31.458598][ T532] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006 [ 31.458605][ T532] RBP: 00007f89206d9090 R08: 0000000000000000 R09: 0000000000000000 [ 31.458613][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.458620][ T532] R13: 00007f891fa16038 R14: 00007f891fa15fa0 R15: 00007ffc0f15c6b8 [ 31.458629][ T532] [ 31.792243][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 31.797473][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 31.804192][ T9] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 31.812841][ T9] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 31.821576][ T9] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 31.832349][ T9] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 31.842490][ T312] usb 4-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 31.851630][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.859671][ T312] usb 4-1: Product: syz [ 31.863257][ T384] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 31.863905][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.883463][ T312] usb 4-1: Manufacturer: syz [ 31.887983][ T384] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 31.888080][ T312] usb 4-1: SerialNumber: syz [ 31.898217][ T384] usb 1-1: config 1 interface 0 has no altsetting 0 [ 31.903002][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.911379][ T384] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 31.918096][ T9] usb 3-1: Product: syz [ 31.926901][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.933084][ T9] usb 3-1: Manufacturer: syz [ 31.938746][ T384] usb 1-1: Product: syz [ 31.944045][ T9] usb 3-1: SerialNumber: syz [ 31.947615][ T384] usb 1-1: Manufacturer: syz [ 31.957046][ T384] usb 1-1: SerialNumber: syz [ 31.964425][ T526] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 31.971613][ T526] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 32.012115][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.172115][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 32.178323][ T9] usb 3-1: 0:2 : does not exist [ 32.179888][ T66] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.187183][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 32.196283][ T66] usb 2-1: config 1 interface 0 has no altsetting 0 [ 32.211675][ T9] usb 3-1: USB disconnect, device number 3 [ 32.211749][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.40 [ 32.218128][ T312] usb 4-1: MIDIStreaming interface descriptor not found [ 32.227691][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.241763][ T66] usb 2-1: Product: syz [ 32.246509][ T66] usb 2-1: Manufacturer: syz [ 32.251315][ T66] usb 2-1: SerialNumber: syz [ 32.254498][ T312] usb 4-1: USB disconnect, device number 7 [ 32.256573][ T394] udevd[394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.267779][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 32.679171][ T534] 9pnet_fd: Insufficient options for proto=fd [ 32.700379][ T66] usbhid 2-1:1.0: can't add hid device: -71 [ 32.707119][ T66] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 32.732124][ T384] rtl8150 1-1:1.0: couldn't reset the device [ 32.739394][ T66] usb 2-1: USB disconnect, device number 4 [ 32.745399][ T384] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 32.769929][ T384] usb 1-1: USB disconnect, device number 3 [ 33.102127][ T312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.152131][ T546] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 33.273835][ T312] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 33.281884][ T312] usb 3-1: config 0 has no interface number 0 [ 33.288149][ T312] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.299611][ T312] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.311247][ T312] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 33.320392][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.320582][ T546] usb 4-1: Using ep0 maxpacket: 16 [ 33.332044][ T312] usb 3-1: config 0 descriptor?? [ 33.340682][ T546] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 33.354906][ T546] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 33.363840][ T546] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 33.376813][ T546] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 33.388045][ T546] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.397354][ T546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.405548][ T546] usb 4-1: Product: syz [ 33.409817][ T546] usb 4-1: Manufacturer: syz [ 33.414636][ T546] usb 4-1: SerialNumber: syz [ 33.624549][ T546] usb 4-1: 0:2 : does not exist [ 33.633967][ T546] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 33.656684][ T546] usb 4-1: USB disconnect, device number 8 [ 33.680704][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.773504][ T312] logitech-djreceiver 0003:046D:C534.0001: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input8 [ 33.802399][ T597] syzkaller1: entered promiscuous mode [ 33.812125][ T384] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.819958][ T597] syzkaller1: entered allmulticast mode [ 33.892971][ T601] process 'syz.1.99' launched '/dev/fd/3' with NULL argv: empty string added [ 33.961774][ T312] usb 3-1: USB disconnect, device number 4 [ 33.972136][ T384] usb 1-1: Using ep0 maxpacket: 16 [ 33.988451][ T384] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 33.996588][ T384] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 34.004824][ T384] usb 1-1: config 0 has no interface number 0 [ 34.010918][ T384] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 34.020963][ T384] usb 1-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 51008, setting to 1024 [ 34.032304][ T384] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.044379][ T384] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 34.053535][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.061514][ T384] usb 1-1: Product: syz [ 34.065707][ T384] usb 1-1: Manufacturer: syz [ 34.070315][ T384] usb 1-1: SerialNumber: syz [ 34.077266][ T384] usb 1-1: config 0 descriptor?? [ 34.082556][ T579] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.089900][ T579] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.209000][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 34.209020][ T36] audit: type=1400 audit(1780057732.220:208): avc: denied { mounton } for pid=610 comm="syz.3.102" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 34.272181][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.297958][ T579] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.303937][ T36] audit: type=1400 audit(1780057732.320:209): avc: denied { ioctl } for pid=612 comm="syz.3.103" path="socket:[7388]" dev="sockfs" ino=7388 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.305250][ T579] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.424656][ T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 34.433805][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.441834][ T9] usb 2-1: Product: syz [ 34.446125][ T9] usb 2-1: Manufacturer: syz [ 34.450766][ T9] usb 2-1: SerialNumber: syz [ 34.490384][ T36] audit: type=1400 audit(1780057732.500:210): avc: denied { ioctl } for pid=619 comm="syz.2.105" path="socket:[6128]" dev="sockfs" ino=6128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.550405][ T620] 9pnet: Could not find request transport: v% [ 34.672600][ T628] syz.2.109 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.697326][ T606] kvm: pic: non byte read [ 34.701767][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 34.759314][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 34.770086][ T9] usb 2-1: USB disconnect, device number 5 [ 34.787656][ T394] udevd[394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.809549][ T36] audit: type=1400 audit(1780057732.820:211): avc: denied { unlink } for pid=633 comm="syz.2.111" name="#3" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.817184][ T634] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 34.831785][ T36] audit: type=1400 audit(1780057732.820:212): avc: denied { mount } for pid=633 comm="syz.2.111" name="/" dev="overlay" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.845738][ T546] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.881626][ T36] audit: type=1400 audit(1780057732.890:213): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.054073][ T546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.065252][ T546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.075087][ T546] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.088159][ T546] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.097292][ T546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.105957][ T546] usb 4-1: config 0 descriptor?? [ 35.292110][ T36] audit: type=1400 audit(1780057733.300:214): avc: denied { append } for pid=648 comm="syz.2.116" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.294483][ T649] input: syz0 as /devices/virtual/input/input5 [ 35.338805][ T36] audit: type=1400 audit(1780057733.340:215): avc: denied { create } for pid=653 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.381349][ T36] audit: type=1400 audit(1780057733.340:216): avc: denied { write } for pid=653 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.429871][ T36] audit: type=1400 audit(1780057733.350:217): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=478 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.510919][ T658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 35.584501][ T546] usbhid 4-1:0.0: can't add hid device: -71 [ 35.590581][ T546] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.600244][ T546] usb 4-1: USB disconnect, device number 9 [ 35.716767][ T668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 35.726570][ T668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 35.992158][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.012154][ T312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.150148][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.160347][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.170308][ T66] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.179356][ T312] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 36.179391][ T312] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.179416][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.179441][ T312] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 36.192557][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 36.210150][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.219591][ T66] usb 3-1: SerialNumber: syz [ 36.228430][ T312] usb 2-1: config 0 descriptor?? [ 36.266420][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 36.389889][ T384] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.407031][ T384] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 36.428767][ T384] asix 1-1:0.251: probe with driver asix failed with error -71 [ 36.437910][ T384] usb 1-1: USB disconnect, device number 4 [ 36.461412][ T66] usb 3-1: 0:2 : does not exist [ 36.488184][ T66] usb 3-1: USB disconnect, device number 5 [ 36.656973][ T312] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0002/input/input6 [ 36.669915][ T312] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0002/input/input7 [ 36.687415][ T312] kye 0003:0458:5012.0002: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 36.842182][ T645] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 36.849901][ T384] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.983879][ T705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 37.003548][ T645] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 37.011866][ T645] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 37.022513][ T645] usb 4-1: config 0 has no interface number 0 [ 37.028763][ T384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.039801][ T384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.049679][ T384] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.062791][ T384] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.071917][ T384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.080765][ T645] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 37.090271][ T384] usb 1-1: config 0 descriptor?? [ 37.098499][ T645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.106738][ T645] usb 4-1: Product: syz [ 37.111077][ T645] usb 4-1: Manufacturer: syz [ 37.125834][ T645] usb 4-1: SerialNumber: syz [ 37.131745][ T645] usb 4-1: config 0 descriptor?? [ 37.222641][ T10] usb 2-1: USB disconnect, device number 6 [ 37.362202][ T312] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.512121][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 37.518404][ T312] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 37.526615][ T312] usb 3-1: config 0 has no interface number 0 [ 37.539464][ T645] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 37.542169][ T312] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 37.546166][ T645] usb 4-1: No valid video chain found. [ 37.560544][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.560575][ T312] usb 3-1: Product: syz [ 37.572848][ T312] usb 3-1: Manufacturer: syz [ 37.577466][ T312] usb 3-1: SerialNumber: syz [ 37.583253][ T312] usb 3-1: config 0 descriptor?? [ 37.604230][ T384] usbhid 1-1:0.0: can't add hid device: -71 [ 37.610332][ T384] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 37.619216][ T384] usb 1-1: USB disconnect, device number 5 [ 37.749431][ T229] usb 4-1: USB disconnect, device number 10 [ 37.982212][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.142126][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 38.148561][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.157378][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 38.168572][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 38.178377][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 38.189481][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 38.199782][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 38.209810][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 38.220894][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 38.232541][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 38.241712][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.249734][ T10] usb 2-1: Product: syz [ 38.254004][ T10] usb 2-1: Manufacturer: syz [ 38.258611][ T10] usb 2-1: SerialNumber: syz [ 38.263946][ T10] usb 2-1: config 0 descriptor?? [ 38.269201][ T710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 38.276590][ T710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 38.622156][ T645] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.736661][ T10] usb 2-1: USB disconnect, device number 7 [ 38.772126][ T645] usb 4-1: Using ep0 maxpacket: 32 [ 38.778493][ T645] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 38.786876][ T645] usb 4-1: config 0 has no interface number 0 [ 38.794703][ T645] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 38.804037][ T645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.812274][ T645] usb 4-1: Product: syz [ 38.816531][ T645] usb 4-1: Manufacturer: syz [ 38.821190][ T645] usb 4-1: SerialNumber: syz [ 38.827386][ T645] usb 4-1: config 0 descriptor?? [ 38.833754][ T645] smsc95xx v2.0.0 [ 38.967139][ T731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 39.212168][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 39.235316][ T645] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 39.246910][ T645] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.372998][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 39.381715][ T10] usb 2-1: config 3 has an invalid interface number: 230 but max is 0 [ 39.389965][ T10] usb 2-1: config 3 has no interface number 0 [ 39.396128][ T10] usb 2-1: config 3 interface 230 has no altsetting 0 [ 39.404289][ T10] usb 2-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 39.413408][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.421502][ T10] usb 2-1: Product: syz [ 39.425721][ T10] usb 2-1: Manufacturer: syz [ 39.430349][ T10] usb 2-1: SerialNumber: syz [ 39.642793][ T10] usb 2-1: Found UVC 0.00 device syz (199e:8002) [ 39.649220][ T10] usb 2-1: No valid video chain found. [ 39.656316][ T10] usb 2-1: USB disconnect, device number 8 [ 39.862834][ T645] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 39.873751][ T645] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 39.887322][ T645] usb 4-1: USB disconnect, device number 11 [ 40.129340][ T312] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 40.139747][ T312] usb 3-1: USB disconnect, device number 6 [ 40.252225][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.283130][ T756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 40.403261][ T66] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 40.417538][ T66] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 40.430476][ T66] usb 1-1: config 0 has no interface number 0 [ 40.443875][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 40.453302][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.464949][ T66] usb 1-1: Product: syz [ 40.469305][ T66] usb 1-1: Manufacturer: syz [ 40.474211][ T66] usb 1-1: SerialNumber: syz [ 40.479694][ T66] usb 1-1: config 0 descriptor?? [ 40.626883][ T645] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.782122][ T645] usb 2-1: Using ep0 maxpacket: 8 [ 40.789228][ T645] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 40.794825][ T829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 40.797529][ T645] usb 2-1: config 0 has no interface number 0 [ 40.817547][ T645] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 40.826793][ T645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.835441][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.843084][ T645] usb 2-1: Product: syz [ 40.847277][ T645] usb 2-1: Manufacturer: syz [ 40.851867][ T645] usb 2-1: SerialNumber: syz [ 40.858603][ T645] usb 2-1: config 0 descriptor?? [ 40.887213][ T66] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 40.893672][ T66] usb 1-1: No valid video chain found. [ 41.012179][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 41.018728][ T45] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 41.027359][ T45] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 41.036165][ T45] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 41.046388][ T45] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 41.057017][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.066132][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.074200][ T45] usb 4-1: Product: syz [ 41.078378][ T45] usb 4-1: Manufacturer: syz [ 41.083003][ T45] usb 4-1: SerialNumber: syz [ 41.095269][ T66] usb 1-1: USB disconnect, device number 6 [ 41.122164][ T312] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 41.283260][ T312] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 41.294396][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 41.296145][ T45] usb 4-1: 0:2 : does not exist [ 41.305531][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 41.313720][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 41.323709][ T312] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 41.339153][ T45] usb 4-1: USB disconnect, device number 12 [ 41.339667][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.355199][ T312] usb 3-1: config 0 descriptor?? [ 41.360499][ T832] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 41.360675][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.569302][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 41.569350][ T36] audit: type=1400 audit(1780057739.580:245): avc: denied { name_bind } for pid=831 comm="syz.2.168" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.570215][ T833] raw_sendmsg: syz.2.168 forgot to set AF_INET. Fix it! [ 41.726527][ T36] audit: type=1400 audit(1780057739.740:246): avc: denied { read write } for pid=841 comm="syz.0.171" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.749628][ T36] audit: type=1400 audit(1780057739.740:247): avc: denied { open } for pid=841 comm="syz.0.171" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.772811][ T36] audit: type=1400 audit(1780057739.760:248): avc: denied { ioctl } for pid=841 comm="syz.0.171" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.072181][ T66] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 42.092148][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.223518][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 42.232155][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 42.243272][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1128, setting to 1023 [ 42.254371][ T66] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 4 [ 42.266168][ T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 42.276328][ T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 42.286423][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 42.293585][ T66] usb 4-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 42.302738][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.316147][ T66] usb 4-1: Product: syz [ 42.316771][ T312] usbhid 3-1:0.0: can't add hid device: -71 [ 42.320397][ T66] usb 4-1: Manufacturer: syz [ 42.326743][ T312] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 42.330987][ T45] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 42.341933][ T312] usb 3-1: USB disconnect, device number 7 [ 42.348241][ T66] usb 4-1: SerialNumber: syz [ 42.358244][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.368854][ T45] usb 1-1: Product: syz [ 42.373187][ T45] usb 1-1: Manufacturer: syz [ 42.387306][ T45] usb 1-1: SerialNumber: syz [ 42.392926][ T848] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 42.400225][ T848] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 42.484202][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 42.590621][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 42.604696][ T66] usb 4-1: USB disconnect, device number 13 [ 42.772163][ T384] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.933244][ T384] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 42.941486][ T384] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 42.951725][ T384] usb 3-1: config 0 has no interface number 0 [ 42.959721][ T384] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 42.968932][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.977071][ T384] usb 3-1: Product: syz [ 42.981303][ T384] usb 3-1: Manufacturer: syz [ 42.985976][ T384] usb 3-1: SerialNumber: syz [ 42.991841][ T384] usb 3-1: config 0 descriptor?? [ 43.108057][ T862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 43.110464][ T45] rtl8150 1-1:1.0: couldn't reset the device [ 43.127762][ T45] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 43.137667][ T45] usb 1-1: USB disconnect, device number 7 [ 43.386549][ T645] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 43.402347][ T645] usb 2-1: USB disconnect, device number 9 [ 43.412195][ T384] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 43.418685][ T384] usb 3-1: No valid video chain found. [ 43.471824][ T36] audit: type=1400 audit(1780057741.480:249): avc: denied { block_suspend } for pid=874 comm="syz.1.184" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.552174][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 43.574566][ T880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 43.614009][ T384] usb 3-1: USB disconnect, device number 8 [ 43.654920][ T884] netlink: 152 bytes leftover after parsing attributes in process `syz.1.186'. [ 43.703347][ T10] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 43.713484][ T10] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 43.724146][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 43.732006][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 43.742229][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.750342][ T10] usb 4-1: Product: syz [ 43.754586][ T10] usb 4-1: Manufacturer: syz [ 43.759256][ T10] usb 4-1: SerialNumber: syz [ 43.765182][ T867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.772128][ T859] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.772835][ T867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.922139][ T859] usb 1-1: Using ep0 maxpacket: 16 [ 43.928592][ T859] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 43.937279][ T859] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 43.946332][ T859] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 43.956569][ T859] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 43.967446][ T859] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.976569][ T859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.984601][ T859] usb 1-1: Product: syz [ 43.988966][ T859] usb 1-1: Manufacturer: syz [ 43.993694][ T859] usb 1-1: SerialNumber: syz [ 44.062222][ T312] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.202483][ T859] usb 1-1: 0:2 : does not exist [ 44.214232][ T859] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 44.235884][ T859] usb 1-1: USB disconnect, device number 8 [ 44.242402][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 44.253607][ T312] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 44.263158][ T686] udevd[686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.279427][ T312] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 44.291492][ T312] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 44.311764][ T312] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 44.323057][ T312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.332503][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.340551][ T312] usb 2-1: Product: syz [ 44.345253][ T312] usb 2-1: Manufacturer: syz [ 44.349905][ T312] usb 2-1: SerialNumber: syz [ 44.422141][ T384] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.547614][ T10] rtl8150 4-1:1.0: couldn't reset the device [ 44.553761][ T10] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 44.564465][ T312] usb 2-1: 0:2 : does not exist [ 44.569941][ T10] usb 4-1: USB disconnect, device number 14 [ 44.577860][ T312] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 44.589444][ T312] usb 2-1: USB disconnect, device number 10 [ 44.604550][ T384] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 44.613055][ T384] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 44.621936][ T384] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 44.632303][ T384] usb 3-1: config 220 has no interface number 2 [ 44.638573][ T384] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 44.651701][ T384] usb 3-1: config 220 interface 0 has no altsetting 0 [ 44.658502][ T384] usb 3-1: config 220 interface 76 has no altsetting 0 [ 44.666572][ T384] usb 3-1: config 220 interface 1 has no altsetting 0 [ 44.674883][ T384] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 44.683983][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.692333][ T384] usb 3-1: Product: syz [ 44.696618][ T384] usb 3-1: Manufacturer: syz [ 44.701276][ T384] usb 3-1: SerialNumber: syz [ 44.908222][ T889] Unsupported ieee802154 address type: 0 [ 44.909269][ T36] audit: type=1400 audit(1780057742.920:250): avc: denied { bind } for pid=888 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.916618][ T889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.942361][ T889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.948985][ T900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 44.959408][ T900] bridge_slave_1: left allmulticast mode [ 44.959857][ T384] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 44.965237][ T900] bridge_slave_1: left promiscuous mode [ 44.972151][ T384] usb 3-1: No valid video chain found. [ 44.977768][ T900] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.982871][ T384] usb 3-1: selecting invalid altsetting 0 [ 44.995647][ T900] bridge_slave_0: left allmulticast mode [ 45.002648][ T384] usb 3-1: USB disconnect, device number 9 [ 45.002656][ T900] bridge_slave_0: left promiscuous mode [ 45.002747][ T900] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.072175][ T312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.094791][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 45.160375][ T36] audit: type=1400 audit(1780057743.170:251): avc: denied { bind } for pid=907 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.222121][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 45.228260][ T312] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 45.236498][ T312] usb 1-1: config 0 has no interface number 0 [ 45.243995][ T312] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 45.253109][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.261127][ T312] usb 1-1: Product: syz [ 45.265332][ T312] usb 1-1: Manufacturer: syz [ 45.269944][ T312] usb 1-1: SerialNumber: syz [ 45.275227][ T312] usb 1-1: config 0 descriptor?? [ 45.422162][ T384] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.422198][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 45.533668][ T915] kvm: pic: non byte read [ 45.538105][ T915] kvm: pic: non byte read [ 45.542707][ T915] kvm: pic: non byte write [ 45.547319][ T915] kvm: pic: non byte write [ 45.551903][ T915] kvm: pic: non byte write [ 45.556754][ T915] kvm: pic: non byte write [ 45.561435][ T915] kvm: pic: non byte write [ 45.566292][ T915] kvm: pic: non byte write [ 45.571069][ T915] kvm: pic: non byte write [ 45.575856][ T915] kvm: pic: non byte write [ 45.580498][ T915] kvm: pic: non byte write [ 45.583472][ T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.585268][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 45.596472][ T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.601670][ T915] kvm: pic: non byte write [ 45.611301][ T384] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.616752][ T10] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 45.628898][ T384] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.642298][ T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 45.646200][ T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.662128][ T10] usb 4-1: config 0 has no interface number 0 [ 45.663547][ T384] usb 2-1: config 0 descriptor?? [ 45.675822][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 45.692283][ T10] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 45.713376][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 45.722583][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.730629][ T10] usb 4-1: Product: syz [ 45.734945][ T10] usb 4-1: Manufacturer: syz [ 45.739580][ T10] usb 4-1: SerialNumber: syz [ 45.745265][ T10] usb 4-1: config 0 descriptor?? [ 45.750881][ T910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.758212][ T910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.762112][ T859] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.923645][ T859] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.932436][ T859] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 45.945098][ T859] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 45.954318][ T859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.962393][ T859] usb 3-1: Product: syz [ 45.966596][ T859] usb 3-1: Manufacturer: syz [ 45.969020][ T910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.971220][ T859] usb 3-1: SerialNumber: syz [ 45.978894][ T910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 46.103770][ T384] usbhid 2-1:0.0: can't add hid device: -71 [ 46.109893][ T384] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 46.119972][ T384] usb 2-1: USB disconnect, device number 11 [ 46.193302][ T859] usb 3-1: unit 4 not found! [ 46.241643][ T859] usb 3-1: USB disconnect, device number 10 [ 46.255445][ T394] udevd[394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.262719][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 46.272566][ T910] netlink: 'syz.3.197': attribute type 3 has an invalid length. [ 46.290967][ T10] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 46.301469][ T10] asix 4-1:0.251: probe with driver asix failed with error -5 [ 46.872210][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.894851][ T928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 46.981850][ T933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 47.042149][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 47.048467][ T10] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 47.058326][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.067470][ T10] usb 2-1: config 0 descriptor?? [ 47.274636][ T919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.283270][ T919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.360553][ T36] audit: type=1400 audit(1780057745.370:252): avc: denied { create } for pid=918 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 47.380861][ T229] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.512198][ T229] usb 3-1: device descriptor read/64, error -71 [ 47.554218][ T10] usb 2-1: string descriptor 0 read error: -71 [ 47.560527][ T10] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 47.567324][ T10] usb 2-1: Found UVC 0.00 device (2833:0201) [ 47.575183][ T10] usb 2-1: No valid video chain found. [ 47.581617][ T10] usb 2-1: USB disconnect, device number 12 [ 47.752136][ T229] usb 3-1: device descriptor read/64, error -71 [ 47.781033][ T312] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 47.795310][ T312] usb 1-1: USB disconnect, device number 9 [ 47.843170][ T949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 47.852521][ T949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.212'. [ 47.863315][ T36] audit: type=1400 audit(1780057745.880:253): avc: denied { ioctl } for pid=948 comm="syz.0.212" path="socket:[12539]" dev="sockfs" ino=12539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.992140][ T229] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.017142][ T951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 48.098384][ T956] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 48.103175][ T958] FAULT_INJECTION: forcing a failure. [ 48.103175][ T958] name failslab, interval 1, probability 0, space 0, times 0 [ 48.108196][ T36] audit: type=1400 audit(1780057746.120:254): avc: denied { ioctl } for pid=955 comm="syz.0.215" path="pid:[4026532293]" dev="nsfs" ino=4026532293 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.120894][ T958] CPU: 0 UID: 0 PID: 958 Comm: syz.1.216 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 48.120920][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 48.120930][ T958] Call Trace: [ 48.120936][ T958] [ 48.120943][ T958] __dump_stack+0x21/0x30 [ 48.120972][ T958] dump_stack_lvl+0x140/0x1c0 [ 48.120995][ T958] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.121020][ T958] dump_stack+0x19/0x20 [ 48.121042][ T958] should_fail_ex+0x3d7/0x530 [ 48.121060][ T958] should_failslab+0xac/0x100 [ 48.121092][ T958] kmem_cache_alloc_node_noprof+0x45/0x420 [ 48.121111][ T958] ? __alloc_skb+0x108/0x370 [ 48.121132][ T958] ? kernel_text_address+0xa9/0xe0 [ 48.121156][ T958] __alloc_skb+0x108/0x370 [ 48.121177][ T958] ? arch_stack_walk+0x10a/0x170 [ 48.121195][ T958] alloc_skb_with_frags+0xce/0x8b0 [ 48.121219][ T958] sock_alloc_send_pskb+0x883/0x9a0 [ 48.121235][ T958] ? __kasan_check_write+0x18/0x20 [ 48.121254][ T958] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 48.121274][ T958] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 48.121293][ T958] packet_sendmsg+0x393d/0x5740 [ 48.121309][ T958] ? __asan_memcpy+0x5a/0x80 [ 48.121328][ T958] ? avc_has_perm+0x155/0x240 [ 48.121349][ T958] ? selinux_socket_sendmsg+0x281/0x380 [ 48.121370][ T958] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 48.121392][ T958] ? __cfi_packet_sendmsg+0x10/0x10 [ 48.121410][ T958] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 48.121429][ T958] ? security_socket_sendmsg+0x3d/0x100 [ 48.121450][ T958] ? __cfi_packet_sendmsg+0x10/0x10 [ 48.121466][ T958] ____sys_sendmsg+0x9de/0xa30 [ 48.121483][ T958] ? __import_iovec+0x5ad/0x7c0 [ 48.121505][ T958] ? __sys_sendmsg_sock+0x50/0x50 [ 48.121523][ T958] ? import_iovec+0x80/0xb0 [ 48.121544][ T958] ___sys_sendmsg+0x2a6/0x370 [ 48.121561][ T958] ? __sys_sendmsg+0x2a0/0x2a0 [ 48.121577][ T958] ? kstrtouint+0x78/0xf0 [ 48.121605][ T958] __sys_sendmmsg+0x2b4/0x4e0 [ 48.121623][ T958] ? __cfi___sys_sendmmsg+0x10/0x10 [ 48.121642][ T958] ? __cfi_ksys_write+0x10/0x10 [ 48.121661][ T958] __x64_sys_sendmmsg+0xa4/0xc0 [ 48.121679][ T958] x64_sys_call+0xfec/0x2ee0 [ 48.121695][ T958] do_syscall_64+0x57/0xf0 [ 48.121712][ T958] ? clear_bhb_loop+0x50/0xa0 [ 48.121733][ T958] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.121753][ T958] RIP: 0033:0x7f891f79ce59 [ 48.121768][ T958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.121782][ T958] RSP: 002b:00007f89206d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 48.121802][ T958] RAX: ffffffffffffffda RBX: 00007f891fa15fa0 RCX: 00007f891f79ce59 [ 48.121816][ T958] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 48.121828][ T958] RBP: 00007f89206d9090 R08: 0000000000000000 R09: 0000000000000000 [ 48.121839][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.121850][ T958] R13: 00007f891fa16038 R14: 00007f891fa15fa0 R15: 00007ffc0f15c6b8 [ 48.121865][ T958] [ 48.122143][ T229] usb 3-1: device descriptor read/64, error -71 [ 48.481350][ T962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.218'. [ 48.544273][ T312] usb 4-1: USB disconnect, device number 15 [ 48.627015][ T973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 48.692203][ T229] usb 3-1: device descriptor read/64, error -71 [ 48.722161][ T859] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 48.802526][ T229] usb usb3-port1: attempt power cycle [ 48.902449][ T859] usb 1-1: Using ep0 maxpacket: 16 [ 48.908795][ T859] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 48.917358][ T859] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 48.926434][ T859] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 48.937129][ T859] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 48.942142][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 48.947634][ T859] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.962879][ T859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.970883][ T859] usb 1-1: Product: syz [ 48.975356][ T859] usb 1-1: Manufacturer: syz [ 48.979981][ T859] usb 1-1: SerialNumber: syz [ 49.032146][ T66] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 49.082280][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.142152][ T229] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.163316][ T229] usb 3-1: device descriptor read/8, error -71 [ 49.187109][ T859] usb 1-1: 0:2 : does not exist [ 49.192848][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 49.201580][ T66] usb 4-1: config 3 has an invalid interface number: 230 but max is 0 [ 49.209975][ T66] usb 4-1: config 3 has no interface number 0 [ 49.216178][ T859] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 49.223418][ T66] usb 4-1: config 3 interface 230 has no altsetting 0 [ 49.232004][ T66] usb 4-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 49.241462][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.249662][ T66] usb 4-1: Product: syz [ 49.254480][ T66] usb 4-1: Manufacturer: syz [ 49.259386][ T66] usb 4-1: SerialNumber: syz [ 49.265108][ T859] usb 1-1: USB disconnect, device number 10 [ 49.293279][ T229] usb 3-1: device descriptor read/8, error -71 [ 49.332189][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.475698][ T66] usb 4-1: Found UVC 0.00 device syz (199e:8002) [ 49.482419][ T66] usb 4-1: No valid video chain found. [ 49.489769][ T66] usb 4-1: USB disconnect, device number 16 [ 49.532219][ T229] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 49.553377][ T229] usb 3-1: device descriptor read/8, error -71 [ 49.572196][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 49.683426][ T229] usb 3-1: device descriptor read/8, error -71 [ 49.702192][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.792217][ T229] usb usb3-port1: unable to enumerate USB device [ 49.942179][ T10] usb 2-1: device descriptor read/64, error -71 [ 49.952172][ T66] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 50.052399][ T10] usb usb2-port1: attempt power cycle [ 50.103268][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.113577][ T66] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.132120][ T66] usb 1-1: config 1 interface 0 has no altsetting 0 [ 50.157461][ T66] usb 1-1: string descriptor 0 read error: -22 [ 50.167691][ T66] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 50.194575][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.244190][ T36] audit: type=1400 audit(1780057748.260:255): avc: denied { mount } for pid=999 comm="syz.3.236" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.244631][ T1000] netlink: 51 bytes leftover after parsing attributes in process `syz.3.236'. [ 50.272517][ T1001] netlink: 51 bytes leftover after parsing attributes in process `syz.3.236'. [ 50.286110][ T36] audit: type=1400 audit(1780057748.300:256): avc: denied { mounton } for pid=999 comm="syz.3.236" path="/46/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 50.286329][ T1000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.316489][ T1000] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.325971][ T1001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.402192][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 50.426397][ T45] usb 1-1: USB disconnect, device number 11 [ 50.437360][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.572226][ T312] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 50.580803][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.722140][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 50.728530][ T312] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 50.737051][ T312] usb 4-1: config 0 has no interface number 0 [ 50.743202][ T312] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 50.753198][ T312] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 50.764595][ T312] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.774879][ T312] usb 4-1: config 0 interface 196 has no altsetting 0 [ 50.783297][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 50.792472][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.800469][ T312] usb 4-1: Product: syz [ 50.804653][ T312] usb 4-1: Manufacturer: syz [ 50.809258][ T312] usb 4-1: SerialNumber: syz [ 50.814999][ T312] usb 4-1: config 0 descriptor?? [ 50.820249][ T1000] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 50.827512][ T1000] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 50.834738][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 50.863289][ T10] usb 2-1: device descriptor read/8, error -71 [ 50.997597][ T10] usb 2-1: device descriptor read/8, error -71 [ 51.070505][ T1016] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 51.115023][ T10] usb usb2-port1: unable to enumerate USB device [ 51.122635][ T1022] Zero length message leads to an empty skb [ 51.129567][ T36] audit: type=1400 audit(1780057749.140:257): avc: denied { ioctl } for pid=1021 comm="syz.0.243" path="socket:[13776]" dev="sockfs" ino=13776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.362158][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.443540][ T312] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 51.452595][ T312] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 51.475555][ T36] audit: type=1400 audit(1780057749.490:258): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.501127][ T45] usb 1-1: device descriptor read/64, error -71 [ 51.517122][ T36] audit: type=1400 audit(1780057749.510:259): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.541101][ T36] audit: type=1400 audit(1780057749.510:260): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.563033][ T36] audit: type=1400 audit(1780057749.510:261): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.658817][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.667761][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.762135][ T45] usb 1-1: device descriptor read/64, error -71 [ 51.892158][ T312] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.002185][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.053237][ T312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.063468][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.074379][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.084242][ T312] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 52.093361][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.101703][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 52.109822][ T312] usb 3-1: config 0 descriptor?? [ 52.132161][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.252150][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 52.258720][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.268900][ T10] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 52.278028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.286071][ T10] usb 2-1: Product: syz [ 52.290256][ T10] usb 2-1: Manufacturer: syz [ 52.294915][ T10] usb 2-1: SerialNumber: syz [ 52.372175][ T45] usb 1-1: device descriptor read/64, error -71 [ 52.482356][ T45] usb usb1-port1: attempt power cycle [ 52.503833][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.512478][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.525697][ T312] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 52.525906][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.545948][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.558642][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.567797][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.618483][ T10] usb 2-1: USB disconnect, device number 17 [ 52.629111][ T686] udevd[686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.721211][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.729877][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.738198][ T66] usb 3-1: USB disconnect, device number 15 [ 52.822136][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.843200][ T45] usb 1-1: device descriptor read/8, error -71 [ 52.973290][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.212164][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.233189][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.251233][ T66] usb 4-1: USB disconnect, device number 17 [ 53.262108][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 53.262127][ T36] audit: type=1400 audit(1780057751.280:274): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.321801][ T66] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 53.363332][ T45] usb 1-1: device descriptor read/8, error -71 [ 53.442217][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.472217][ T45] usb usb1-port1: unable to enumerate USB device [ 53.602119][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 53.612886][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 53.621313][ T10] usb 2-1: config 0 has no interface number 0 [ 53.631605][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 53.658339][ T66] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 53.660453][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.673977][ T10] usb 2-1: Product: syz [ 53.678128][ T10] usb 2-1: Manufacturer: syz [ 53.682733][ T10] usb 2-1: SerialNumber: syz [ 53.687938][ T10] usb 2-1: config 0 descriptor?? [ 53.812130][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 53.818573][ T66] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 53.832136][ T66] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 53.840876][ T66] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 53.851398][ T66] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 53.862401][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.871574][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.879815][ T66] usb 4-1: Product: syz [ 53.884254][ T66] usb 4-1: Manufacturer: syz [ 53.888889][ T66] usb 4-1: SerialNumber: syz [ 53.945992][ T1092] kvm: pic: non byte read [ 53.950650][ T1092] kvm: pic: non byte read [ 53.955507][ T1092] picdev_write: 492 callbacks suppressed [ 53.955526][ T1092] kvm: pic: non byte write [ 53.966747][ T1092] kvm: pic: non byte write [ 53.971482][ T1092] kvm: pic: non byte write [ 53.976645][ T1092] kvm: pic: non byte write [ 53.981331][ T1092] kvm: pic: non byte write [ 53.993476][ T1092] kvm: pic: non byte write [ 54.000911][ T1092] kvm: pic: non byte write [ 54.010257][ T1092] kvm: pic: non byte write [ 54.015237][ T1092] kvm: pic: non byte write [ 54.020174][ T1092] kvm: pic: non byte write [ 54.097411][ T66] usb 4-1: 0:2 : does not exist [ 54.103062][ T1097] netlink: 'syz.2.261': attribute type 4 has an invalid length. [ 54.113531][ T66] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 54.133372][ T66] usb 4-1: USB disconnect, device number 18 [ 54.156717][ T686] udevd[686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.245541][ T36] audit: type=1400 audit(1780057752.260:275): avc: denied { sqpoll } for pid=1103 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.275347][ T1106] ------------[ cut here ]------------ [ 54.280867][ T1106] WARNING: CPU: 0 PID: 1106 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 54.291525][ T1106] Modules linked in: [ 54.295480][ T1106] CPU: 0 UID: 0 PID: 1106 Comm: iou-sqp-1104 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 54.307333][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 54.317451][ T1106] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 54.323831][ T1106] Code: 5d e9 c5 1a 55 02 cc e8 6f 4d 32 fe 0f 0b eb e3 e8 66 4d 32 fe 0f 0b eb da e8 5d 4d 32 fe 0f 0b e9 4d fe ff ff e8 51 4d 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 54.343514][ T1106] RSP: 0000:ffffc9001060f8d0 EFLAGS: 00010293 [ 54.349612][ T1106] RAX: ffffffff8355797f RBX: 1ffff11023ba8c55 RCX: ffff88812066cc00 [ 54.357743][ T1106] RDX: 0000000000000000 RSI: 0000000000000897 RDI: 0000000000000e99 [ 54.365768][ T1106] RBP: ffffc9001060f920 R08: 0000000000000003 R09: 0000000000000004 [ 54.374122][ T1106] R10: 0000000000000000 R11: ffffffff83556960 R12: ffff88812066cc00 [ 54.382179][ T1106] R13: ffff88811dd46280 R14: ffff888120600000 R15: ffff888120600010 [ 54.390281][ T1106] FS: 00007f3ce8cab6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 54.399259][ T1106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.405895][ T1106] CR2: 0000200000001080 CR3: 0000000102b68000 CR4: 00000000003526b0 [ 54.413912][ T1106] Call Trace: [ 54.417242][ T1106] [ 54.420182][ T1106] ? _raw_spin_unlock+0x45/0x60 [ 54.425081][ T1106] ublk_ch_uring_cmd+0x6f/0xa0 [ 54.429885][ T1106] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 54.435984][ T1106] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 54.441915][ T1106] ? wake_up_q+0x10f/0x1c0 [ 54.446441][ T1106] ? io_uring_cancel_generic+0x6eb/0x6eb [ 54.452236][ T1106] io_uring_cancel_generic+0x415/0x6eb [ 54.457745][ T1106] ? __cfi_io_uring_cancel_generic+0x10/0x10 [ 54.463789][ T1106] ? __cfi_autoremove_wake_function+0x10/0x10 [ 54.469887][ T1106] ? __cfi_mutex_lock+0x10/0x10 [ 54.474786][ T1106] io_sq_thread+0x1747/0x1c80 [ 54.479581][ T1106] ? io_sq_thread+0xb71/0x1c80 [ 54.484492][ T1106] ? __cfi_io_sq_thread+0x10/0x10 [ 54.489568][ T1106] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 54.495175][ T1106] ? __cfi_autoremove_wake_function+0x10/0x10 [ 54.501365][ T1106] ? _raw_spin_unlock_irq+0x45/0x70 [ 54.506609][ T1106] ? calculate_sigpending+0x80/0x90 [ 54.511837][ T1106] ? __cfi_io_sq_thread+0x10/0x10 [ 54.516906][ T1106] ret_from_fork+0x67/0xa0 [ 54.521349][ T1106] ? __cfi_io_sq_thread+0x10/0x10 [ 54.526416][ T1106] ret_from_fork_asm+0x1a/0x30 [ 54.531204][ T1106] RIP: 0033:0x0 [ 54.534699][ T1106] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 54.542287][ T1106] RSP: 002b:0000000000000000 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 54.550707][ T1106] RAX: 0000000000000000 RBX: 0000200000000808 RCX: 00007f3ce7d9ce59 [ 54.558706][ T1106] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e99 [ 54.566734][ T1106] RBP: 0000200000000800 R08: 0000200000000900 R09: 0000000000000000 [ 54.574832][ T1106] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 54.582882][ T1106] R13: 0000200000000890 R14: 00007f3ce8caafd8 R15: 0000000000000000 [ 54.590871][ T1106] [ 54.593920][ T1106] ---[ end trace 0000000000000000 ]--- [ 56.184351][ T10] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 56.207424][ T10] usb 2-1: USB disconnect, device number 18