last executing test programs: 31.393464273s ago: executing program 3 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009f, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31.262969215s ago: executing program 3 (id=86): chdir(&(0x7f0000000040)='./cgroup\x00') (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000b22000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r2, 0x180000000) (async) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x98) (async) mkdirat(r1, 0x0, 0x0) (async) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008c04) (async) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 30.741706032s ago: executing program 3 (id=90): prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x909c2, 0xa8) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='7', 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 30.627856191s ago: executing program 3 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r3, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x10) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000007, 0x7, 0xcf, 0x3, 0x7a, 0x2, 0x80, 0x9, 0x3, 0x44, 0x8, 0x2, 0x4e}, {0x100e, 0xf, 0x40, 0x10, 0x9, 0xff, 0x8, 0x4, 0x4a, 0x13, 0x6, 0x48, 0x9}, {0x1ff, 0x7, 0x9b, 0x1, 0x2d, 0x1, 0x3, 0xfb, 0x4, 0x4, 0xfe, 0x4, 0xfffffffffffffffd}], 0x10}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000007, 0x7, 0xcf, 0x3, 0x7a, 0x2, 0x80, 0x9, 0x3, 0x44, 0x8, 0x2, 0x4e}, {0x100e, 0xf, 0x40, 0x10, 0x9, 0xff, 0x8, 0x4, 0x4a, 0x13, 0x6, 0x48, 0x9}, {0x1ff, 0x7, 0x9b, 0x1, 0x2d, 0x1, 0x3, 0xfb, 0x4, 0x4, 0xfe, 0x4, 0xfffffffffffffffd}], 0x10}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28ebadb9ec6b", 0x1e) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010080, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 29.72992672s ago: executing program 3 (id=96): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) (async) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x80108906, 0x0) 29.626668336s ago: executing program 3 (id=97): r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x7f) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040ef0ed0720000000000010902240001000000080904000802032000000921000000012218000905810300"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981008c0508950129309102c0"], 0x0}, 0x0) 29.572744869s ago: executing program 32 (id=97): r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x7f) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040ef0ed0720000000000010902240001000000080904000802032000000921000000012218000905810300"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981008c0508950129309102c0"], 0x0}, 0x0) 3.374034774s ago: executing program 2 (id=242): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x1000, 0x1) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) chdir(&(0x7f0000000000)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18) 3.26412358s ago: executing program 2 (id=244): open(&(0x7f00000001c0)='./bus\x00', 0x24c07c, 0x25) (async) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x24c07c, 0x25) sendfile(r0, r0, &(0x7f0000000240)=0x1, 0xfffffffffffff6a2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200001, 0x200003, 0x801, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200001, 0x200003, 0x801, 0x4, 0x7}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff}, 0x6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x4000) socket(0x11, 0x2, 0x0) (async) r2 = socket(0x11, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setrlimit(0xc, 0x0) setsockopt(r2, 0x107, 0x14, &(0x7f0000000040)="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", 0x17c) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6, 0x10e1}, 0x0, 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r6, r4, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6, 0x10e1}, 0x0, 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000002c0)=0xe7b9) syz_usb_connect$midi(0x5, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020920a201040000102030109023300010109500a0904000001010300400706240203010d0600000000020905050608000cc504052501"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$midi(0x5, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020920a201040000102030109023300010109500a0904000001010300400706240203010d0600000000020905050608000cc504052501"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) 2.863202699s ago: executing program 0 (id=252): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x1000, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18) 2.785919688s ago: executing program 0 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0xa000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2040851}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r0, 0x2b66b000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004a8000/0x400000)=nil) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f00000002c0)={0x18, 0x0, r3, {0x7}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) socket$inet6(0xa, 0x80002, 0x0) 2.53295579s ago: executing program 0 (id=254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000200)='bo', 0x2) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x48cc, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd00052800040000"], 0xfdef) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) 2.416120119s ago: executing program 0 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b24060500", @ANYRES64=r4], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x20, 0x1, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r3, 0x2, 0xffffffffffffffd8, 0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16]) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000100)="8102") ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.155243832s ago: executing program 4 (id=257): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r1, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000200)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x94538c3c51a63c49}, 0x40000) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000000000)={r6, 0x0, 0xd2, 0xd22e, 0xfff, 0x2, [0x9, 0xb, 0x80000001, 0xffffffffffffffff, 0x2, 0x6]}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a) 2.032151553s ago: executing program 4 (id=258): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x12d5bb0ffdec771c) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0xe0, {0x3, 0x6, [@set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest64=0x2808, 0x360, 0x5}}, @wrmsr={0x65, 0x20, {0x28a, 0x3}}, @uexit={0x0, 0x18, 0x8}, @enable_nested={0x12c, 0x18}]}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xa24b, 0x2}}, @rdmsr={0x66, 0x18, {0xbe0}}], 0x140}) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000180)) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x3}) 2.031425093s ago: executing program 4 (id=259): r0 = userfaultfd(0x180001) r1 = timerfd_create(0x6, 0x800) close_range(r1, r0, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000d240f0100000000060000000006241a050000152412"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, &(0x7f0000000100)) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x190, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x7}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x190}}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.994094272s ago: executing program 2 (id=260): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x22, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000001c0)={0x28, r5, 0x7, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x64}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) pipe2(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.941586775s ago: executing program 2 (id=261): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x1000, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18) 1.925682579s ago: executing program 2 (id=262): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "fd"}, @main=@item_012={0x2, 0x0, 0x8, "0107"}]}}, 0x0}, 0x0) (async) unshare(0x64000600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) (async) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x31, 0x5, "2118031c9e"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x10}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d832"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, '}W'}, 0x0, 0x0, 0x0, 0x0}) 1.711722621s ago: executing program 1 (id=264): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x80) write$make_it_fail(r6, &(0x7f0000000340)='N\x00', 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r5, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.664270832s ago: executing program 1 (id=265): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x114}, {r1, 0x8000}, {0xffffffffffffffff, 0x8}], 0x3, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x400d4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x6, @local, 0x4e24, 0x0, 'rr\x00', 0x2d, 0x0, 0x3}, {@remote, 0x15, 0x1, 0x7, 0x0, 0x1000}}, 0x44) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffaf) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x78) close(r1) 1.42952502s ago: executing program 4 (id=266): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000800df0"], 0x80}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) brk(0x55555ede6001) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x10}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 1.335441993s ago: executing program 4 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r2 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000000000000ff7f0000000000000000000000000000000000000000934ae943aa75c7d7491f253774324ee20d94e6c6b4cc4580fdec00aa3f6c2afc0edc5ca2cc6e005907eafd9224ae"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x16, 0x0, 0xff, 0x8}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/214, 0xd6}], 0x1, 0x76, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, 0x0) r7 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RESETEP(r8, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000140)=0x5, 0x4) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) 1.218247362s ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) getresuid(&(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f00000004c0)) (rerun: 32) ioprio_set$uid(0x0, r2, 0x6004) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='0fc5:1227:?pg', 0xd) (async, rerun: 64) r6 = dup(r4) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x3f, 0x0, 0x0) (async) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xffffffffcb110f65, 0x31cc, 0xffff, 0x1ff, 0xffeffff4, 0x0, 0x0, 0x40, 0x10000}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f78f23e0f186e00ba2100b85600ef660f5de4f9c01bf1f3ad66b8010000000f01d9653626660f38821cf20f38f06000", 0x30}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 765.179603ms ago: executing program 1 (id=269): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="020201030c00000000070000fcdbdf25020009001000000053bb00000000000003000600000000000200100000000000000000000000000002000100000000000000050d00000000030005000000000002a1896d65f426d43500000000000000"], 0x60}, 0x1, 0x7}, 0x810) 764.540243ms ago: executing program 1 (id=270): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x1000, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18) 761.947144ms ago: executing program 1 (id=271): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, 0x0) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/251, 0xfb}, {&(0x7f0000000140)=""/93, 0x5d}], 0x3, 0x8, 0x9, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x28, r3, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0xb, 0x2a, [@ssid, @measure_req={0x26, 0x3, {0x8, 0x8, 0x5e}}]}]]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "358fed6e891935495583465b05"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d1b49ba316e86204b8ee195be3"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6896298283ef9cdf0408bb5ad2"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "9c"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x8000010) 700.031559ms ago: executing program 1 (id=272): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000c000300081f"], 0x28}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1f, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_4={0x3, 0x1, 0x9, "4d87f418"}, @local=@item_4={0x3, 0x2, 0x2, "200100a2"}, @global=@item_012={0x2, 0x1, 0x9, "0e28"}, @main=@item_4={0x3, 0x0, 0x9, "bcf34a57"}, @local=@item_012={0x2, 0x2, 0x0, "e012"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x2, 0x1, 0x8, "d907"}, @main=@item_012={0x2, 0x0, 0xc, "4696"}, @main]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x20, 0x5, 0x31, {0x31, 0x31, "df5a85ec2dd3ff92f4cf03cd8771a9fbf1f1b62aa0a74adcf98070ff22a1ab58868b33bd5797e07655e53bf2a4fe8b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000200)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0xc8bf93b8dd79dec7}, @global=@item_012={0x2, 0x1, 0xb, "8059"}, @main=@item_4={0x3, 0x0, 0x0, "ce170003"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x76a, 0x9, 0x1, {0x22, 0xd29}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x9c, "6a65bf1df5924be73d602e11ad479295110afeb8f3ced28a76fadfc68d5c3b1409289ee3486567dc305695cde545db0d907f476c97c9c62d3fb11cfc77fd6875278b8ac375e0d426546b1bdf43ea6e025872a698b4d2da5414ee4dad2937ba9412784097ab7587334e00cd3eb41e4176f10a90adb203b6678e968c9de4d34d09b19fd737c239d47385cec035fac1b5322efeed1df349855136424444"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x1, 0x6c, "28b0e7c90d08bd21158cc103078784fa594aacfe7ba53ea78ecebc665b2a18c4ab9c13bdddef10fcb37f585e9fc9ae6da5ee1b23bc839dd63135bfb5a125befe0d32986cad11f97e48a8f1ec4a9ca02ca8e98cbd5b1f79a27564929a4531b97c2245ebfa256ff5403dca8f48"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000c000300081f"], 0x28}], 0x1}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1f, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_4={0x3, 0x1, 0x9, "4d87f418"}, @local=@item_4={0x3, 0x2, 0x2, "200100a2"}, @global=@item_012={0x2, 0x1, 0x9, "0e28"}, @main=@item_4={0x3, 0x0, 0x9, "bcf34a57"}, @local=@item_012={0x2, 0x2, 0x0, "e012"}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x2, 0x1, 0x8, "d907"}, @main=@item_012={0x2, 0x0, 0xc, "4696"}, @main]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x20, 0x5, 0x31, {0x31, 0x31, "df5a85ec2dd3ff92f4cf03cd8771a9fbf1f1b62aa0a74adcf98070ff22a1ab58868b33bd5797e07655e53bf2a4fe8b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000200)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0xc8bf93b8dd79dec7}, @global=@item_012={0x2, 0x1, 0xb, "8059"}, @main=@item_4={0x3, 0x0, 0x0, "ce170003"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x76a, 0x9, 0x1, {0x22, 0xd29}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x9c, "6a65bf1df5924be73d602e11ad479295110afeb8f3ced28a76fadfc68d5c3b1409289ee3486567dc305695cde545db0d907f476c97c9c62d3fb11cfc77fd6875278b8ac375e0d426546b1bdf43ea6e025872a698b4d2da5414ee4dad2937ba9412784097ab7587334e00cd3eb41e4176f10a90adb203b6678e968c9de4d34d09b19fd737c239d47385cec035fac1b5322efeed1df349855136424444"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x1, 0x6c, "28b0e7c90d08bd21158cc103078784fa594aacfe7ba53ea78ecebc665b2a18c4ab9c13bdddef10fcb37f585e9fc9ae6da5ee1b23bc839dd63135bfb5a125befe0d32986cad11f97e48a8f1ec4a9ca02ca8e98cbd5b1f79a27564929a4531b97c2245ebfa256ff5403dca8f48"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) (async) 402.036702ms ago: executing program 2 (id=273): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) io_setup(0x7f, &(0x7f0000000100)=0x0) r3 = eventfd(0x8e) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000300)=0x9, 0x4) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000040)={0x3, 0x4, 0x7f}) creat(&(0x7f0000000580)='./bus\x00', 0x9e) 147.404204ms ago: executing program 0 (id=274): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) write$vga_arbiter(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='unlock me'], 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004c800) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 0s ago: executing program 0 (id=275): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x1cd, 0x3, 0x2, 0x1, 0x1}, 0x8) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x7fff, 0x4) (async, rerun: 32) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) (async) write(r0, &(0x7f0000000000)="01", 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002140)=ANY=[@ANYBLOB="2c0000002400d57f00000000000000001c0000001800ac800c00f28008003400", @ANYRES32=r3, @ANYBLOB="08000a8004006b80"], 0x2c}], 0x1}, 0x4000) kernel console output (not intermixed with test programs): sb_ep_enable returned -22 [ 34.632144][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 34.632163][ T36] audit: type=1400 audit(1790598906.740:177): avc: denied { connect } for pid=396 comm="syz.3.24" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.697654][ T36] audit: type=1400 audit(1790598906.810:178): avc: denied { ioctl } for pid=401 comm="syz.3.26" path="socket:[4628]" dev="sockfs" ino=4628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.729431][ T36] audit: type=1400 audit(1790598906.830:179): avc: denied { create } for pid=401 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.758094][ T36] audit: type=1400 audit(1790598906.870:180): avc: denied { create } for pid=407 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.827609][ T381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.837167][ T381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.849607][ T381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.858374][ T381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.906691][ T321] usb 2-1: USB disconnect, device number 3 [ 34.965306][ T311] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 34.995326][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.116898][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.124929][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 35.133559][ T311] usb 3-1: config 1 has an invalid interface number: 99 but max is 0 [ 35.141750][ T311] usb 3-1: config 1 has no interface number 0 [ 35.148003][ T311] usb 3-1: config 1 interface 99 has no altsetting 0 [ 35.155296][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 35.160936][ T45] usb 4-1: too many configurations: 83, using maximum allowed: 8 [ 35.161482][ T311] usb 3-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 35.170782][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.177881][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.186600][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.194961][ T311] usb 3-1: Product: syz [ 35.205198][ T45] usb 4-1: config 179 has no interface number 0 [ 35.209061][ T311] usb 3-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 35.215076][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.226337][ T311] usb 3-1: SerialNumber: syz [ 35.237757][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.255065][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.262740][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.271091][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.281840][ T45] usb 4-1: config 179 has no interface number 0 [ 35.288188][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.299383][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.312855][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.320616][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.328983][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.339378][ T45] usb 4-1: config 179 has no interface number 0 [ 35.345697][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.357469][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.371062][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.378797][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.387123][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.397419][ T45] usb 4-1: config 179 has no interface number 0 [ 35.403728][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.414838][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.428207][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.437036][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.445643][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.456496][ T45] usb 4-1: config 179 has no interface number 0 [ 35.462882][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.474274][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.479629][ T36] audit: type=1400 audit(1790598907.590:181): avc: denied { mount } for pid=405 comm="syz.2.25" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.496142][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.520304][ T36] audit: type=1400 audit(1790598907.630:182): avc: denied { create } for pid=414 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.528165][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.544589][ T311] usb 3-1: NDI device with a latency value of 1 [ 35.554284][ T311] ftdi_sio 3-1:1.99: FTDI USB Serial Device converter detected [ 35.562677][ T311] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 35.565323][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.579465][ T311] usb 3-1: USB disconnect, device number 2 [ 35.592198][ T311] ftdi_sio 3-1:1.99: device disconnected [ 35.595678][ T45] usb 4-1: config 179 has no interface number 0 [ 35.604277][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.617369][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.631029][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.641458][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.649873][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.664792][ T45] usb 4-1: config 179 has no interface number 0 [ 35.683274][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.697639][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.710968][ T36] audit: type=1400 audit(1790598907.810:183): avc: denied { write } for pid=417 comm="syz.0.30" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 35.734173][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.742759][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 35.767801][ T45] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 35.771027][ T36] audit: type=1400 audit(1790598907.880:184): avc: denied { read write } for pid=422 comm="syz.0.32" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.778372][ T45] usb 4-1: config 179 has no interface number 0 [ 35.808818][ T36] audit: type=1400 audit(1790598907.920:185): avc: denied { open } for pid=422 comm="syz.0.32" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.830157][ T45] usb 4-1: too many endpoints for config 179 interface 65 altsetting 15: 31, using maximum allowed: 30 [ 35.843686][ T45] usb 4-1: config 179 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 35.857322][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 35.865117][ T45] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 35.866178][ T425] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use) [ 35.875707][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=255 [ 35.886625][ T36] audit: type=1400 audit(1790598907.990:186): avc: denied { read write } for pid=424 comm="syz.0.33" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.895016][ T45] usb 4-1: SerialNumber: syz [ 36.005329][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.125019][ T408] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 36.135560][ T408] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 36.145674][ T408] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 36.147445][ T431] FAULT_INJECTION: forcing a failure. [ 36.147445][ T431] name failslab, interval 1, probability 0, space 0, times 1 [ 36.156007][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 36.167293][ T431] CPU: 1 UID: 0 PID: 431 Comm: syz.2.35 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 36.167374][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.167432][ T431] Call Trace: [ 36.167453][ T431] [ 36.167475][ T431] __dump_stack+0x21/0x30 [ 36.167620][ T431] dump_stack_lvl+0x140/0x1c0 [ 36.167712][ T431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.167796][ T431] ? mas_store_prealloc+0xc69/0x1250 [ 36.167888][ T431] ? __cfi_perf_event_mmap+0x10/0x10 [ 36.167978][ T431] dump_stack+0x19/0x20 [ 36.168062][ T431] should_fail_ex+0x3c2/0x510 [ 36.168142][ T431] should_failslab+0xac/0x100 [ 36.168217][ T431] kmem_cache_alloc_noprof+0x42/0x410 [ 36.168290][ T431] ? vm_area_dup+0x3f/0x560 [ 36.168375][ T431] vm_area_dup+0x3f/0x560 [ 36.168450][ T431] ? __split_vma+0x1b8/0xc10 [ 36.168521][ T431] __split_vma+0x1ce/0xc10 [ 36.168592][ T431] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 36.168666][ T431] ? mas_find+0x415/0x620 [ 36.168747][ T431] vms_gather_munmap_vmas+0x446/0xd90 [ 36.168823][ T431] do_vmi_align_munmap+0x251/0x5f0 [ 36.168920][ T431] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 36.169025][ T431] do_vmi_munmap+0x245/0x2e0 [ 36.169105][ T431] __vm_munmap+0x25b/0x3d0 [ 36.169175][ T431] ? vm_munmap+0x40/0x40 [ 36.169230][ T431] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.169301][ T431] ? __kasan_check_write+0x18/0x20 [ 36.169356][ T431] ? do_user_addr_fault+0xbf5/0x1230 [ 36.169410][ T431] ? blocking_notifier_call_chain+0x7c/0x90 [ 36.169475][ T431] __se_sys_munmap+0xb4/0x390 [ 36.169547][ T431] __x64_sys_munmap+0x5f/0x80 [ 36.169618][ T431] x64_sys_call+0x9c6/0x2ee0 [ 36.169671][ T431] do_syscall_64+0x57/0xf0 [ 36.169732][ T431] ? clear_bhb_loop+0x50/0xa0 [ 36.169814][ T431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.169886][ T431] RIP: 0033:0x7f784599df87 [ 36.169946][ T431] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.169997][ T431] RSP: 002b:00007f78468fed18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 36.170072][ T431] RAX: ffffffffffffffda RBX: 00007f7840000000 RCX: 00007f784599df87 [ 36.170122][ T431] RDX: 0000000000000000 RSI: 0000000003e00000 RDI: 00007f783c200000 [ 36.170156][ T431] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 36.170197][ T431] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 36.170231][ T431] R13: 0000000000001000 R14: 00007f7844000000 R15: 0000000003e00000 [ 36.170291][ T431] [ 36.205322][ T408] netlink: 104 bytes leftover after parsing attributes in process `syz.3.27'. [ 36.208399][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.225785][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.228991][ T435] Zero length message leads to an empty skb [ 36.236358][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.239447][ T437] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 36.243612][ T440] netlink: 104 bytes leftover after parsing attributes in process `syz.3.27'. [ 36.297096][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 36.317718][ T45] usb 4-1: USB disconnect, device number 3 [ 36.324144][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 36.511091][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 36.522280][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 36.533084][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.542281][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.556896][ T9] usb 2-1: SerialNumber: syz [ 36.562734][ T420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.570876][ T9] cdc_acm 2-1:1.0: skipping garbage [ 36.577224][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 36.585322][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 36.599102][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.607546][ T311] usb 1-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 36.618092][ T311] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.627687][ T311] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.643591][ T311] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 36.654779][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.662892][ T311] usb 1-1: Product: syz [ 36.667154][ T311] usb 1-1: Manufacturer: syz [ 36.671784][ T311] usb 1-1: SerialNumber: syz [ 36.772834][ T459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.781522][ T459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.825986][ T45] usb 2-1: USB disconnect, device number 4 [ 36.883572][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.892274][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.916433][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.927367][ T311] usb 1-1: USB disconnect, device number 4 [ 36.939096][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.950068][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 37.106605][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.118463][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.128341][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.141203][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.150397][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.159230][ T9] usb 3-1: config 0 descriptor?? [ 37.165314][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.325291][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 37.331649][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.342728][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.352543][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.365690][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 37.375065][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.384050][ T10] usb 4-1: config 0 descriptor?? [ 37.437538][ T467] rust_binder: Failed to allocate buffer. len:64016, is_oneway:false [ 37.437576][ T467] rust_binder: Failure in copy_transaction_data: ENOSPC [ 37.445789][ T467] rust_binder: 466:467 transaction call to 466:0 failed ENOSPC, code 0 size 63999-0 [ 37.473604][ T467] SELinux: failed to load policy [ 37.479568][ T429] rust_binder: 466: undelivered TRANSACTION_ERROR: 29201 [ 37.499750][ T472] FAULT_INJECTION: forcing a failure. [ 37.499750][ T472] name failslab, interval 1, probability 0, space 0, times 0 [ 37.522844][ T472] CPU: 0 UID: 0 PID: 472 Comm: syz.0.46 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 37.522878][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.522891][ T472] Call Trace: [ 37.522899][ T472] [ 37.522907][ T472] __dump_stack+0x21/0x30 [ 37.522947][ T472] dump_stack_lvl+0x140/0x1c0 [ 37.522980][ T472] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.523014][ T472] dump_stack+0x19/0x20 [ 37.523041][ T472] should_fail_ex+0x3c2/0x510 [ 37.523064][ T472] should_failslab+0xac/0x100 [ 37.523088][ T472] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 37.523110][ T472] ? vfs_parse_monolithic_sep+0x243/0x360 [ 37.523137][ T472] kmemdup_nul+0x5a/0x1a0 [ 37.523155][ T472] vfs_parse_monolithic_sep+0x243/0x360 [ 37.523180][ T472] ? __cfi_vfs_parse_comma_sep+0x10/0x10 [ 37.523215][ T472] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 37.523240][ T472] ? fuse_init_fs_context+0x62/0x2a0 [ 37.523259][ T472] ? fuse_init_fs_context+0x100/0x2a0 [ 37.523276][ T472] ? alloc_fs_context+0x5dd/0x800 [ 37.523301][ T472] generic_parse_monolithic+0x28/0x40 [ 37.523326][ T472] parse_monolithic_mount_data+0x7f/0x90 [ 37.523353][ T472] do_new_mount+0x222/0xb40 [ 37.523373][ T472] ? security_capable+0x44/0x130 [ 37.523396][ T472] path_mount+0x66a/0xff0 [ 37.523414][ T472] ? putname+0x113/0x150 [ 37.523435][ T472] __se_sys_mount+0x2bf/0x480 [ 37.523456][ T472] ? __x64_sys_mount+0xf0/0xf0 [ 37.523476][ T472] ? __kasan_check_write+0x18/0x20 [ 37.523494][ T472] ? fpregs_restore_userregs+0x11c/0x260 [ 37.523518][ T472] __x64_sys_mount+0xc3/0xf0 [ 37.523538][ T472] x64_sys_call+0x2021/0x2ee0 [ 37.523555][ T472] do_syscall_64+0x57/0xf0 [ 37.523579][ T472] ? clear_bhb_loop+0x50/0xa0 [ 37.523604][ T472] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.523626][ T472] RIP: 0033:0x7fbda259e159 [ 37.523641][ T472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.523656][ T472] RSP: 002b:00007fbda33df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.523676][ T472] RAX: ffffffffffffffda RBX: 00007fbda2826090 RCX: 00007fbda259e159 [ 37.523690][ T472] RDX: 0000200000000800 RSI: 00002000000020c0 RDI: 0000000000000000 [ 37.523703][ T472] RBP: 00007fbda263506b R08: 00002000000003c0 R09: 0000000000000000 [ 37.523717][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.523728][ T472] R13: 00007fbda2826128 R14: 00007fbda2826090 R15: 00007fffc743ce98 [ 37.523744][ T472] [ 37.524979][ T477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.584002][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 37.808079][ T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 37.822838][ T9] usb 3-1: USB disconnect, device number 3 [ 37.876726][ T483] fido_id[483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 38.021770][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 38.027848][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 38.036777][ T10] usb 4-1: USB disconnect, device number 4 [ 38.345293][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 38.496433][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 38.507557][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 38.520763][ T45] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 38.530040][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.542987][ T45] usb 1-1: config 0 descriptor?? [ 38.575490][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.737537][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 38.746712][ T10] usb 3-1: New USB device strings: Mfr=8, Product=229, SerialNumber=0 [ 38.754957][ T10] usb 3-1: Product: syz [ 38.759182][ T10] usb 3-1: Manufacturer: syz [ 38.764708][ T10] usb 3-1: config 0 descriptor?? [ 38.771303][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 38.779477][ T10] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 38.875498][ T320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.969585][ T493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.978329][ T493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.987055][ T45] usb 1-1: string descriptor 0 read error: -71 [ 38.995655][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 39.001626][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.012878][ T45] usb 1-1: USB disconnect, device number 5 [ 39.019026][ T495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.029031][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 39.035903][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.046926][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.056731][ T320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.069680][ T320] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 39.078814][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.090725][ T10] usb 3-1: USB disconnect, device number 4 [ 39.098055][ T10] ftdi_sio 3-1:0.0: device disconnected [ 39.104610][ T320] usb 2-1: config 0 descriptor?? [ 39.553494][ T320] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0002/input/input5 [ 39.581301][ T320] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0002/input/input6 [ 39.602985][ T320] kye 0003:0458:5011.0002: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 39.662963][ T533] fuse: Bad value for 'group_id' [ 39.668204][ T533] fuse: Bad value for 'group_id' [ 39.673594][ T533] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.689852][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 39.689868][ T36] audit: type=1400 audit(1790598911.800:226): avc: denied { mount } for pid=532 comm="syz.2.62" name="/" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.727232][ T320] usb 2-1: USB disconnect, device number 5 [ 39.955314][ T429] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.065302][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 40.105295][ T429] usb 3-1: Using ep0 maxpacket: 32 [ 40.112006][ T429] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.120516][ T429] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 40.130917][ T429] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.141480][ T429] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.54 [ 40.150603][ T429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.158686][ T429] usb 3-1: Product: syz [ 40.162892][ T429] usb 3-1: Manufacturer: syz [ 40.167534][ T429] usb 3-1: SerialNumber: syz [ 40.185327][ T320] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.228756][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 40.236890][ T10] usb 4-1: can't read configurations, error -71 [ 40.339787][ T320] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 40.347402][ T36] audit: type=1400 audit(1790598912.460:227): avc: denied { create } for pid=550 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.349658][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.378017][ T320] usb 1-1: Product: syz [ 40.382661][ T320] usb 1-1: Manufacturer: syz [ 40.387780][ T320] usb 1-1: SerialNumber: syz [ 40.392739][ T429] usb 3-1: unit 48 not found! [ 40.402960][ T429] usb 3-1: USB disconnect, device number 5 [ 40.414111][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.615285][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.766774][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.775449][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.785597][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.796103][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 40.805257][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.813280][ T9] usb 2-1: Product: syz [ 40.817541][ T9] usb 2-1: Manufacturer: syz [ 40.822168][ T9] usb 2-1: SerialNumber: syz [ 40.831134][ T9] usb 2-1: selecting invalid altsetting 1 [ 40.839924][ T9] usb 2-1: unit 6 not found! [ 40.902746][ T36] audit: type=1400 audit(1790598913.010:228): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.998803][ T320] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:2b:f3:64:89:bc [ 41.009070][ T546] SELinux: failed to load policy [ 41.018027][ T320] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 41.042540][ T36] audit: type=1400 audit(1790598913.150:229): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.070365][ T36] audit: type=1400 audit(1790598913.180:230): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.106036][ T36] audit: type=1400 audit(1790598913.180:231): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.140253][ T36] audit: type=1400 audit(1790598913.180:232): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.163550][ T36] audit: type=1400 audit(1790598913.180:233): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=925 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.188586][ T36] audit: type=1400 audit(1790598913.260:234): avc: denied { read } for pid=565 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.219306][ T36] audit: type=1400 audit(1790598913.260:235): avc: denied { open } for pid=565 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.436451][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 41.459825][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.470074][ T9] usb 2-1: USB disconnect, device number 6 [ 41.483626][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.655294][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.818006][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 41.827301][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.835366][ T10] usb 3-1: Product: syz [ 41.839678][ T10] usb 3-1: Manufacturer: syz [ 41.844307][ T10] usb 3-1: SerialNumber: syz [ 42.030060][ T591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=591 comm=syz.1.76 [ 42.093204][ T593] 9pnet_fd: Insufficient options for proto=fd [ 42.122685][ C1] usb 1-1: eth1: intr status -71 [ 42.128125][ C1] usb 1-1: eth1: intr status -71 [ 42.133685][ C1] usb 1-1: eth1: intr status -71 [ 42.138881][ T320] usb 1-1: USB disconnect, device number 6 [ 42.145243][ C1] usb 1-1: eth1: intr status -71 [ 42.152245][ T150] usb 1-1: device reset failed [ 42.585323][ T516] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.661886][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:12:7d:4b:df:3f [ 42.673921][ T10] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 42.745339][ T516] usb 2-1: Using ep0 maxpacket: 32 [ 42.752484][ T516] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.761350][ T516] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 42.774486][ T516] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 42.783847][ T516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.792027][ T516] usb 2-1: Product: syz [ 42.796463][ T516] usb 2-1: Manufacturer: syz [ 42.801090][ T516] usb 2-1: SerialNumber: syz [ 42.965286][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.012690][ T516] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 43.019730][ T516] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 43.033158][ T516] usb 2-1: USB disconnect, device number 7 [ 43.135324][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 43.141646][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 43.150065][ T10] usb 1-1: config 0 has no interface number 0 [ 43.156368][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 43.164705][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 43.173991][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.182168][ T10] usb 1-1: Product: syz [ 43.186520][ T10] usb 1-1: Manufacturer: syz [ 43.191158][ T10] usb 1-1: SerialNumber: syz [ 43.197502][ T10] usb 1-1: config 0 descriptor?? [ 43.203641][ T10] smsc75xx v1.0.0 [ 43.216132][ C0] usb 3-1: eth1: intr status -71 [ 43.221180][ C0] usb 3-1: eth1: intr status -71 [ 43.223363][ T320] usb 3-1: USB disconnect, device number 6 [ 43.232067][ T150] usb 3-1: device reset failed [ 43.774025][ T690] netlink: 'syz.1.93': attribute type 16 has an invalid length. [ 43.807219][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 43.821188][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.842516][ T695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 43.865253][ T695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 44.124245][ T46] bridge_slave_1: left allmulticast mode [ 44.129979][ T46] bridge_slave_1: left promiscuous mode [ 44.145306][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.153058][ T46] bridge_slave_0: left allmulticast mode [ 44.165225][ T46] bridge_slave_0: left promiscuous mode [ 44.171112][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.299324][ T46] veth1_macvtap: left promiscuous mode [ 44.304967][ T46] veth0_vlan: left promiscuous mode [ 44.445485][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.452603][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.460010][ T699] bridge_slave_0: entered allmulticast mode [ 44.467534][ T699] bridge_slave_0: entered promiscuous mode [ 44.474479][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.481643][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.488975][ T699] bridge_slave_1: entered allmulticast mode [ 44.495828][ T699] bridge_slave_1: entered promiscuous mode [ 44.559955][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.567086][ T699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.574418][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.581535][ T699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.616095][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.623568][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.633695][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.637845][ T429] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.655646][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.663014][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.669359][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.670893][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 44.682920][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.691075][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 44.695865][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.713247][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 44.723071][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 44.748080][ T699] veth0_vlan: entered promiscuous mode [ 44.760082][ T699] veth1_macvtap: entered promiscuous mode [ 44.778450][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 44.778468][ T36] audit: type=1400 audit(1790598916.890:268): avc: denied { mount } for pid=699 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.808994][ T36] audit: type=1400 audit(1790598916.910:269): avc: denied { mounton } for pid=699 comm="syz-executor" path="/root/syzkaller.16xOKw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.857611][ T36] audit: type=1400 audit(1790598916.970:270): avc: denied { create } for pid=723 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 44.878139][ T429] usb 2-1: Using ep0 maxpacket: 16 [ 44.886075][ T429] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 44.895167][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.903450][ T429] usb 2-1: Product: syz [ 44.907752][ T429] usb 2-1: Manufacturer: syz [ 44.912367][ T429] usb 2-1: SerialNumber: syz [ 44.917845][ T429] usb 2-1: config 0 descriptor?? [ 44.923985][ T429] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 44.931911][ T429] usb 2-1: Detected FT-X [ 45.095299][ T516] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.196488][ T429] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 45.203568][ T429] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 45.211186][ T429] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 45.218698][ T429] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 45.227989][ T429] usb 2-1: USB disconnect, device number 8 [ 45.234877][ T429] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 45.244517][ T429] ftdi_sio 2-1:0.0: device disconnected [ 45.255572][ T516] usb 5-1: Using ep0 maxpacket: 16 [ 45.261950][ T516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.272974][ T516] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.285990][ T516] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 45.295279][ T516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.304488][ T516] usb 5-1: config 0 descriptor?? [ 45.714925][ T516] thrustmaster 0003:044F:B654.0003: unknown main item tag 0x0 [ 45.743001][ T516] input: HID 044f:b654 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:044F:B654.0003/input/input7 [ 45.760094][ T320] usb 1-1: USB disconnect, device number 7 [ 45.772901][ T36] audit: type=1400 audit(1790598917.880:271): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 45.797253][ T516] thrustmaster 0003:044F:B654.0003: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.4-1/input0 [ 45.834844][ T516] thrustmaster 0003:044F:B654.0003: force feedback for ThrustMaster devices by Zinx Verituse [ 45.836772][ T740] Unsupported ieee802154 address type: 0 [ 45.857507][ T36] audit: type=1400 audit(1790598917.940:272): avc: denied { bind } for pid=739 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.926150][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.956903][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.974320][ T320] usb 5-1: USB disconnect, device number 2 [ 46.088724][ T36] audit: type=1400 audit(1790598918.200:273): avc: denied { relabelfrom } for pid=766 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.117622][ T767] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 46.125768][ T36] audit: type=1400 audit(1790598918.220:274): avc: denied { relabelto } for pid=766 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.166628][ T36] audit: type=1400 audit(1790598918.280:275): avc: denied { setattr } for pid=770 comm="syz.2.113" name="" dev="pipefs" ino=8361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 46.215270][ T429] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.345253][ T429] usb 2-1: device descriptor read/64, error -71 [ 46.371174][ T776] FAULT_INJECTION: forcing a failure. [ 46.371174][ T776] name failslab, interval 1, probability 0, space 0, times 0 [ 46.384015][ T776] CPU: 1 UID: 0 PID: 776 Comm: syz.2.115 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 46.384065][ T776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.384082][ T776] Call Trace: [ 46.384091][ T776] [ 46.384102][ T776] __dump_stack+0x21/0x30 [ 46.384146][ T776] dump_stack_lvl+0x140/0x1c0 [ 46.384179][ T776] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.384214][ T776] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 46.384240][ T776] dump_stack+0x19/0x20 [ 46.384270][ T776] should_fail_ex+0x3c2/0x510 [ 46.384299][ T776] should_failslab+0xac/0x100 [ 46.384326][ T776] kmem_cache_alloc_noprof+0x42/0x410 [ 46.384349][ T776] ? __kernfs_new_node+0xf1/0x740 [ 46.384377][ T776] __kernfs_new_node+0xf1/0x740 [ 46.384407][ T776] ? kernfs_new_node+0x280/0x280 [ 46.384437][ T776] ? snprintf+0xe9/0x140 [ 46.384459][ T776] kernfs_new_node+0x154/0x280 [ 46.384487][ T776] __kernfs_create_file+0x52/0x280 [ 46.384523][ T776] cgroup_addrm_files+0x775/0xac0 [ 46.384558][ T776] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 46.384591][ T776] ? delete_node+0x3df/0xa60 [ 46.384616][ T776] ? __kasan_check_write+0x18/0x20 [ 46.384643][ T776] css_populate_dir+0x12d/0x3d0 [ 46.384666][ T776] cgroup_apply_control_enable+0x62f/0xce0 [ 46.384696][ T776] cgroup_mkdir+0x1274/0x1600 [ 46.384729][ T776] ? __cfi_cgroup_mkdir+0x10/0x10 [ 46.384756][ T776] kernfs_iop_mkdir+0x1be/0x2d0 [ 46.384787][ T776] vfs_mkdir+0x591/0x810 [ 46.384822][ T776] do_mkdirat+0x240/0x530 [ 46.384852][ T776] ? __cfi_do_mkdirat+0x10/0x10 [ 46.384881][ T776] ? __kasan_check_write+0x18/0x20 [ 46.384903][ T776] ? getname_flags+0x203/0x6b0 [ 46.384926][ T776] ? __kasan_check_write+0x18/0x20 [ 46.384948][ T776] __x64_sys_mkdirat+0x8b/0xa0 [ 46.384978][ T776] x64_sys_call+0x2ba8/0x2ee0 [ 46.385003][ T776] do_syscall_64+0x57/0xf0 [ 46.385023][ T776] ? clear_bhb_loop+0x50/0xa0 [ 46.385067][ T776] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.385094][ T776] RIP: 0033:0x7f784599e159 [ 46.385113][ T776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.385131][ T776] RSP: 002b:00007f7846900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 46.385155][ T776] RAX: ffffffffffffffda RBX: 00007f7845c25fa0 RCX: 00007f784599e159 [ 46.385172][ T776] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 46.385187][ T776] RBP: 00007f7845a3506b R08: 0000000000000000 R09: 0000000000000000 [ 46.385204][ T776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.385219][ T776] R13: 00007f7845c26038 R14: 00007f7845c25fa0 R15: 00007ffcd3073148 [ 46.385238][ T776] [ 46.665243][ T429] usb 2-1: device descriptor read/64, error -71 [ 46.676620][ T776] cgroup: cgroup_addrm_files: failed to add mems, err=-12 [ 46.769381][ T36] audit: type=1400 audit(1790598918.880:276): avc: denied { ioctl } for pid=785 comm="syz.0.117" path="socket:[8386]" dev="sockfs" ino=8386 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.925259][ T429] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.055268][ T429] usb 2-1: device descriptor read/64, error -71 [ 47.065393][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 47.115312][ T320] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 47.195270][ T10] usb 1-1: device descriptor read/64, error -71 [ 47.295280][ T429] usb 2-1: device descriptor read/64, error -71 [ 47.296069][ T320] usb 3-1: too many configurations: 162, using maximum allowed: 8 [ 47.310678][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 47.318365][ T320] usb 3-1: can't read configurations, error -61 [ 47.405373][ T429] usb usb2-port1: attempt power cycle [ 47.435269][ T10] usb 1-1: device descriptor read/64, error -71 [ 47.445272][ T320] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 47.595872][ T320] usb 3-1: too many configurations: 162, using maximum allowed: 8 [ 47.604986][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 47.612766][ T320] usb 3-1: can't read configurations, error -61 [ 47.625298][ T320] usb usb3-port1: attempt power cycle [ 47.646375][ T800] FAULT_INJECTION: forcing a failure. [ 47.646375][ T800] name failslab, interval 1, probability 0, space 0, times 0 [ 47.659214][ T800] CPU: 1 UID: 0 PID: 800 Comm: syz.4.121 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 47.659257][ T800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.659271][ T800] Call Trace: [ 47.659279][ T800] [ 47.659289][ T800] __dump_stack+0x21/0x30 [ 47.659366][ T800] dump_stack_lvl+0x140/0x1c0 [ 47.659391][ T800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.659448][ T800] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 47.659474][ T800] dump_stack+0x19/0x20 [ 47.659506][ T800] should_fail_ex+0x3c2/0x510 [ 47.659527][ T800] should_failslab+0xac/0x100 [ 47.659548][ T800] kmem_cache_alloc_noprof+0x42/0x410 [ 47.659565][ T800] ? __kernfs_new_node+0xf1/0x740 [ 47.659611][ T800] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 47.659645][ T800] __kernfs_new_node+0xf1/0x740 [ 47.659676][ T800] ? __kasan_check_write+0x18/0x20 [ 47.659698][ T800] ? kernfs_new_node+0x280/0x280 [ 47.659719][ T800] ? down_write+0xee/0x2b0 [ 47.659741][ T800] ? __cfi_down_write+0x10/0x10 [ 47.659764][ T800] ? __kasan_check_write+0x18/0x20 [ 47.659782][ T800] ? up_write+0x66/0x280 [ 47.659829][ T800] ? kernfs_activate+0x1ee/0x200 [ 47.659860][ T800] kernfs_new_node+0x154/0x280 [ 47.659900][ T800] __kernfs_create_file+0x52/0x280 [ 47.659926][ T800] sysfs_add_file_mode_ns+0x1d2/0x280 [ 47.659943][ T800] internal_create_group+0x66c/0xe70 [ 47.659963][ T800] ? __kasan_check_write+0x18/0x20 [ 47.659981][ T800] ? sysfs_create_group+0x40/0x40 [ 47.660021][ T800] ? kernfs_activate+0x1ee/0x200 [ 47.660051][ T800] sysfs_create_groups+0x5c/0x130 [ 47.660083][ T800] device_add_attrs+0x12d/0x850 [ 47.660099][ T800] ? device_add_class_symlinks+0x260/0x260 [ 47.660114][ T800] ? __kasan_check_write+0x18/0x20 [ 47.660136][ T800] ? kobject_put+0x1cc/0x2a0 [ 47.660151][ T800] ? device_add_class_symlinks+0x22e/0x260 [ 47.660167][ T800] device_add+0x4db/0xbf0 [ 47.660180][ T800] input_register_device+0x9af/0x1080 [ 47.660221][ T800] uinput_create_device+0x416/0x670 [ 47.660259][ T800] uinput_ioctl_handler+0x3ea/0x1360 [ 47.660298][ T800] ? uinput_release+0x70/0x70 [ 47.660326][ T800] ? __fget_files+0x2bc/0x330 [ 47.660348][ T800] uinput_ioctl+0x2c/0x40 [ 47.660365][ T800] ? __cfi_uinput_ioctl+0x10/0x10 [ 47.660382][ T800] __se_sys_ioctl+0x123/0x1b0 [ 47.660424][ T800] __x64_sys_ioctl+0x7f/0xa0 [ 47.660452][ T800] x64_sys_call+0x1878/0x2ee0 [ 47.660479][ T800] do_syscall_64+0x57/0xf0 [ 47.660496][ T800] ? clear_bhb_loop+0x50/0xa0 [ 47.660517][ T800] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.660537][ T800] RIP: 0033:0x7fe346f9e159 [ 47.660552][ T800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.660565][ T800] RSP: 002b:00007fe347ec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.660583][ T800] RAX: ffffffffffffffda RBX: 00007fe347225fa0 RCX: 00007fe346f9e159 [ 47.660612][ T800] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 47.660627][ T800] RBP: 00007fe34703506b R08: 0000000000000000 R09: 0000000000000000 [ 47.660641][ T800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.660654][ T800] R13: 00007fe347226038 R14: 00007fe347225fa0 R15: 00007ffd75ef29c8 [ 47.660676][ T800] [ 47.685387][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 47.975321][ T320] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 48.028619][ T36] audit: type=1400 audit(1790598920.140:277): avc: denied { create } for pid=801 comm="syz.4.122" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.036419][ T320] usb 3-1: too many configurations: 162, using maximum allowed: 8 [ 48.049479][ T429] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.058858][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 48.072501][ T320] usb 3-1: can't read configurations, error -61 [ 48.086390][ T429] usb 2-1: device descriptor read/8, error -71 [ 48.125266][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.205284][ T320] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 48.217127][ T429] usb 2-1: device descriptor read/8, error -71 [ 48.236176][ T320] usb 3-1: too many configurations: 162, using maximum allowed: 8 [ 48.248269][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 48.256236][ T320] usb 3-1: can't read configurations, error -61 [ 48.262903][ T320] usb usb3-port1: unable to enumerate USB device [ 48.365263][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.455257][ T429] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 48.475403][ T10] usb usb1-port1: attempt power cycle [ 48.481783][ T429] usb 2-1: device descriptor read/8, error -71 [ 48.515269][ T320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.616426][ T429] usb 2-1: device descriptor read/8, error -71 [ 48.675258][ T320] usb 5-1: Using ep0 maxpacket: 16 [ 48.681850][ T320] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 48.693149][ T320] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.706115][ T320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.712761][ T320] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 48.722212][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.731134][ T320] usb 5-1: config 0 descriptor?? [ 48.735686][ T429] usb usb2-port1: unable to enumerate USB device [ 48.815528][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 48.836451][ T10] usb 1-1: device descriptor read/8, error -71 [ 48.966845][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.141100][ T320] input: HID 04fc:05d8 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04FC:05D8.0004/input/input9 [ 49.163017][ T320] sunplus 0003:04FC:05D8.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 49.205269][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 49.239220][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.341674][ T320] usb 5-1: USB disconnect, device number 3 [ 49.376396][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.485346][ T10] usb usb1-port1: unable to enumerate USB device [ 49.705268][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.855250][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 49.866910][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 49.866928][ T36] audit: type=1400 audit(1790598921.980:281): avc: denied { create } for pid=824 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.869564][ T45] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 49.904969][ T36] audit: type=1400 audit(1790598922.020:282): avc: denied { accept } for pid=824 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.918747][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.954762][ T45] usb 2-1: config 1 has no interface number 0 [ 49.967517][ T45] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 49.993919][ T45] usb 2-1: config 1 interface 105 has no altsetting 0 [ 50.002726][ T45] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 50.014286][ T45] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 50.022487][ T45] usb 2-1: Product: syz [ 50.026699][ T45] usb 2-1: Manufacturer: syz [ 50.032175][ T45] usb 2-1: SerialNumber: syz [ 50.239157][ T45] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 50.255282][ T429] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 50.262962][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 50.355344][ T320] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 50.416513][ T429] usb 5-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 50.427055][ T429] usb 5-1: config 207 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.440409][ T429] usb 5-1: config 207 interface 0 has no altsetting 0 [ 50.447362][ T429] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 50.456625][ T429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.464739][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.473744][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 50.482365][ T10] usb 3-1: can't read configurations, error -71 [ 50.495317][ T320] usb 1-1: device descriptor read/64, error -71 [ 50.684236][ T36] audit: type=1400 audit(1790598922.790:283): avc: denied { mount } for pid=840 comm="syz.4.133" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 50.707058][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 50.714505][ T429] usb 5-1: string descriptor 0 read error: -71 [ 50.721408][ T429] usbhid 5-1:207.0: couldn't find an input interrupt endpoint [ 50.730038][ T429] usb 5-1: USB disconnect, device number 4 [ 50.745737][ T320] usb 1-1: device descriptor read/64, error -71 [ 50.953573][ T36] audit: type=1400 audit(1790598923.060:284): avc: denied { ioctl } for pid=843 comm="syz.2.134" path="socket:[7698]" dev="sockfs" ino=7698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.985302][ T320] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 51.125265][ T320] usb 1-1: device descriptor read/64, error -71 [ 51.225745][ T36] audit: type=1400 audit(1790598923.340:285): avc: denied { unmount } for pid=699 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.385291][ T320] usb 1-1: device descriptor read/64, error -71 [ 51.485278][ T429] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 51.495343][ T320] usb usb1-port1: attempt power cycle [ 51.628427][ T36] audit: type=1400 audit(1790598923.740:286): avc: denied { map } for pid=849 comm="syz.2.136" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.653459][ T429] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 51.662635][ T429] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 51.672417][ T429] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 51.682618][ T429] usb 5-1: config 1 interface 0 has no altsetting 0 [ 51.689426][ T429] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 51.698631][ T429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.711447][ T429] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 51.845289][ T320] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 51.876439][ T320] usb 1-1: device descriptor read/8, error -71 [ 51.927005][ T429] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 51.937447][ T429] usb 5-1: USB disconnect, device number 5 [ 52.016357][ T320] usb 1-1: device descriptor read/8, error -71 [ 52.201772][ T429] usb 2-1: USB disconnect, device number 13 [ 52.255270][ T320] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 52.277902][ T320] usb 1-1: device descriptor read/8, error -71 [ 52.311377][ T36] audit: type=1400 audit(1790598924.420:287): avc: denied { ioctl } for pid=866 comm="syz.1.139" path="socket:[8544]" dev="sockfs" ino=8544 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.406477][ T320] usb 1-1: device descriptor read/8, error -71 [ 52.446855][ T36] audit: type=1400 audit(1790598924.550:288): avc: denied { create } for pid=866 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 52.477273][ T871] kvm: pic: non byte write [ 52.515475][ T320] usb usb1-port1: unable to enumerate USB device [ 53.465280][ T320] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.615265][ T320] usb 2-1: Using ep0 maxpacket: 8 [ 53.623475][ T320] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 53.632885][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.641123][ T320] usb 2-1: Product: syz [ 53.645504][ T320] usb 2-1: Manufacturer: syz [ 53.650179][ T320] usb 2-1: SerialNumber: syz [ 53.782135][ T36] audit: type=1400 audit(1790598925.890:289): avc: denied { getopt } for pid=892 comm="syz.4.145" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.860098][ T320] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.875502][ T320] usb 2-1: unit 3 not found! [ 53.884030][ T320] usb 2-1: USB disconnect, device number 14 [ 53.919015][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.936613][ T36] audit: type=1400 audit(1790598926.050:290): avc: denied { write } for pid=898 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.601687][ T935] SELinux: Context ϧ is not valid (left unmapped). [ 54.609286][ T935] netlink: 84 bytes leftover after parsing attributes in process `syz.2.156'. [ 55.555273][ T320] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.745292][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 55.755249][ T320] usb 5-1: Using ep0 maxpacket: 8 [ 55.767999][ T320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.779125][ T320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.789941][ T320] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 55.804751][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.813040][ T320] usb 5-1: Product: syz [ 55.817377][ T320] usb 5-1: Manufacturer: syz [ 55.822176][ T320] usb 5-1: SerialNumber: syz [ 55.869258][ T979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=22910 (366560 ns) > initial count (1920 ns). Using initial count to start timer. [ 55.887847][ T979] kvm: kvm [978]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 55.896934][ T979] kvm: kvm [978]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 55.945278][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 55.951750][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 55.960052][ T31] usb 2-1: config 0 has no interface number 0 [ 55.966389][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 55.974775][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 55.983971][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.994283][ T31] usb 2-1: Product: syz [ 55.998552][ T31] usb 2-1: Manufacturer: syz [ 56.003303][ T31] usb 2-1: SerialNumber: syz [ 56.009726][ T31] usb 2-1: config 0 descriptor?? [ 56.017956][ T31] smsc75xx v1.0.0 [ 56.038431][ T320] usb 5-1: unit 6 not found! [ 56.047137][ T320] usb 5-1: USB disconnect, device number 6 [ 56.055145][ T357] udevd[357]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory [ 56.076814][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.285264][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 56.419662][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.428468][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.436325][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 56.442852][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 56.451039][ T45] usb 3-1: config 0 has no interface number 0 [ 56.457255][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 56.467456][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 56.479101][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 56.485377][ T321] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 56.488758][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.504060][ T45] usb 3-1: Product: syz [ 56.508532][ T45] usb 3-1: Manufacturer: syz [ 56.513170][ T45] usb 3-1: SerialNumber: syz [ 56.518909][ T45] usb 3-1: config 0 descriptor?? [ 56.524252][ T982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.531643][ T982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.646439][ T321] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.657695][ T321] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.670767][ T321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 56.677661][ T321] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 56.686939][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.696146][ T321] usb 1-1: config 0 descriptor?? [ 56.742281][ T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.751084][ T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.759372][ T982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.766776][ T982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.805273][ T987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.965238][ T987] usb 5-1: Using ep0 maxpacket: 16 [ 56.973088][ T987] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 56.982562][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.990835][ T45] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 57.000934][ T987] usb 5-1: Product: syz [ 57.005142][ T987] usb 5-1: Manufacturer: syz [ 57.009906][ T45] asix 3-1:0.34: probe with driver asix failed with error -71 [ 57.017461][ T987] usb 5-1: SerialNumber: syz [ 57.025524][ T45] usb 3-1: USB disconnect, device number 13 [ 57.043250][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 57.104017][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.111151][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.118329][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.125473][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.132579][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.139688][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.146759][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.153848][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.160921][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.168097][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.175156][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.182235][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.189663][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.197386][ T321] saitek 0003:06A3:0CD0.0005: unknown main item tag 0x0 [ 57.204463][ T321] saitek 0003:06A3:0CD0.0005: unbalanced collection at end of report description [ 57.213883][ T321] saitek 0003:06A3:0CD0.0005: parse failed [ 57.219854][ T321] saitek 0003:06A3:0CD0.0005: probe with driver saitek failed with error -22 [ 57.305769][ T321] usb 1-1: USB disconnect, device number 16 [ 57.507252][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 57.507271][ T36] audit: type=1400 audit(1790598929.620:292): avc: denied { nlmsg_write } for pid=994 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.645475][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 57.656362][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 57.666077][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 57.676363][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 57.685880][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 57.775269][ T321] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.935244][ T321] usb 3-1: Using ep0 maxpacket: 32 [ 57.955290][ T321] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.971211][ T321] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 57.982617][ T36] audit: type=1326 audit(1790598930.090:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.0.177" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbda259e159 code=0x0 [ 58.007574][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.017939][ T321] usb 3-1: Product: syz [ 58.022214][ T321] usb 3-1: Manufacturer: syz [ 58.027167][ T321] usb 3-1: SerialNumber: syz [ 58.154620][ T31] usb 2-1: USB disconnect, device number 15 [ 58.239475][ T321] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 58.248651][ T321] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 58.277493][ T321] usb 3-1: USB disconnect, device number 14 [ 58.306021][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.575244][ T429] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 58.705245][ T429] usb 2-1: device descriptor read/64, error -71 [ 58.754358][ T1021] cgroup: fork rejected by pids controller in /syz4 [ 58.945249][ T429] usb 2-1: device descriptor read/64, error -71 [ 59.065300][ T31] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 59.075245][ T45] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 59.195240][ T429] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.215311][ T45] usb 3-1: device descriptor read/64, error -71 [ 59.222463][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 59.231275][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.241759][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.255333][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 59.275926][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.290085][ T31] usb 1-1: Found UVC 1.00 device (046d:0825) [ 59.335300][ T429] usb 2-1: device descriptor read/64, error -71 [ 59.455305][ T45] usb 3-1: device descriptor read/64, error -71 [ 59.486509][ T1061] syz.4.184 uses obsolete (PF_INET,SOCK_PACKET) [ 59.575246][ T429] usb 2-1: device descriptor read/64, error -71 [ 59.685363][ T429] usb usb2-port1: attempt power cycle [ 59.696641][ T45] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 59.707492][ T1052] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 59.727348][ T31] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 59.739182][ T31] usb 1-1: No streaming interface found for terminal 2. [ 59.751764][ T31] usb 1-1: USB disconnect, device number 17 [ 59.855250][ T45] usb 3-1: device descriptor read/64, error -71 [ 60.035246][ T429] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 60.076419][ T429] usb 2-1: device descriptor read/8, error -71 [ 60.105291][ T45] usb 3-1: device descriptor read/64, error -71 [ 60.206746][ T429] usb 2-1: device descriptor read/8, error -71 [ 60.215459][ T45] usb usb3-port1: attempt power cycle [ 60.249527][ T36] audit: type=1400 audit(1790598932.360:294): avc: denied { watch } for pid=1072 comm="syz.0.187" path="/37" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.340989][ T36] audit: type=1400 audit(1790598932.450:295): avc: denied { map } for pid=1081 comm="syz.0.189" path="/39/proc/146/task/147/fail-nth" dev="proc" ino=10604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 60.385247][ T36] audit: type=1400 audit(1790598932.450:296): avc: denied { execute } for pid=1081 comm="syz.0.189" path="/39/proc/146/task/147/fail-nth" dev="proc" ino=10604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 60.455261][ T429] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 60.486330][ T429] usb 2-1: device descriptor read/8, error -71 [ 60.555253][ T45] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 60.586352][ T45] usb 3-1: device descriptor read/8, error -71 [ 60.616274][ T429] usb 2-1: device descriptor read/8, error -71 [ 60.725411][ T429] usb usb2-port1: unable to enumerate USB device [ 60.727141][ T45] usb 3-1: device descriptor read/8, error -71 [ 60.863718][ T1031] syz.4.179 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 60.920814][ T1031] CPU: 1 UID: 0 PID: 1031 Comm: syz.4.179 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 60.920861][ T1031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.920877][ T1031] Call Trace: [ 60.920884][ T1031] [ 60.920893][ T1031] __dump_stack+0x21/0x30 [ 60.920932][ T1031] dump_stack_lvl+0x140/0x1c0 [ 60.920965][ T1031] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.920999][ T1031] ? ___ratelimit+0x41c/0x5c0 [ 60.921026][ T1031] ? __kasan_check_write+0x18/0x20 [ 60.921053][ T1031] dump_stack+0x19/0x20 [ 60.921084][ T1031] dump_header+0xd9/0x460 [ 60.921125][ T1031] oom_kill_process+0x35d/0x640 [ 60.921155][ T1031] out_of_memory+0x5d1/0xa20 [ 60.921183][ T1031] ? __cfi_out_of_memory+0x10/0x10 [ 60.921211][ T1031] ? mutex_lock_killable+0x97/0x1d0 [ 60.921242][ T1031] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.921274][ T1031] mem_cgroup_out_of_memory+0x2c5/0x390 [ 60.921301][ T1031] ? css_next_descendant_pre+0x1ec/0x210 [ 60.921329][ T1031] ? __kasan_check_write+0x18/0x20 [ 60.921353][ T1031] ? drain_obj_stock+0xec0/0xec0 [ 60.921380][ T1031] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 60.921406][ T1031] try_charge_memcg+0x925/0xe10 [ 60.921439][ T1031] ? static_key_count+0x45/0x70 [ 60.921471][ T1031] ? lruvec_init+0x1f1/0x280 [ 60.921499][ T1031] ? __cfi_try_charge_memcg+0x10/0x10 [ 60.921534][ T1031] ? __alloc_pages_noprof+0x35a/0x7e0 [ 60.921568][ T1031] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.921605][ T1031] __mem_cgroup_charge+0xfc/0x420 [ 60.921628][ T1031] ? folio_add_lru+0x116/0x400 [ 60.921659][ T1031] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 60.921685][ T1031] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 60.921718][ T1031] ? shmem_replace_folio+0x9b0/0x9b0 [ 60.921748][ T1031] ? shmem_huge_global_enabled+0x2da/0x360 [ 60.921784][ T1031] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 60.921812][ T1031] ? __kasan_check_write+0x18/0x20 [ 60.921836][ T1031] ? _raw_spin_lock+0x92/0x120 [ 60.921859][ T1031] shmem_get_folio_gfp+0x5cd/0x12e0 [ 60.921889][ T1031] ? shmem_get_folio+0xc0/0xc0 [ 60.921914][ T1031] ? follow_page_pte+0x8fb/0xba0 [ 60.921949][ T1031] ? inode_to_bdi+0x6d/0x100 [ 60.921984][ T1031] shmem_write_begin+0xf4/0x260 [ 60.922013][ T1031] generic_perform_write+0x32c/0x970 [ 60.922048][ T1031] ? __cfi_generic_perform_write+0x10/0x10 [ 60.922080][ T1031] ? generic_write_checks_count+0x426/0x540 [ 60.922113][ T1031] ? file_update_time+0xa3/0x210 [ 60.922134][ T1031] shmem_file_write_iter+0x105/0x130 [ 60.922168][ T1031] __kernel_write_iter+0x462/0x900 [ 60.922194][ T1031] ? __cfi___kernel_write_iter+0x10/0x10 [ 60.922220][ T1031] ? get_dump_page+0x165/0x220 [ 60.922252][ T1031] ? __asan_memset+0x39/0x50 [ 60.922275][ T1031] ? iov_iter_bvec+0xc0/0x180 [ 60.922311][ T1031] dump_user_range+0xb8b/0xe60 [ 60.922340][ T1031] ? __cfi_dump_user_range+0x10/0x10 [ 60.922367][ T1031] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 60.922404][ T1031] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 60.922441][ T1031] ? elf_core_dump+0x23cf/0x3840 [ 60.922474][ T1031] elf_core_dump+0x2d61/0x3840 [ 60.922507][ T1031] ? __cfi_elf_core_dump+0x10/0x10 [ 60.922538][ T1031] ? mas_next_slot+0xf01/0xfd0 [ 60.922576][ T1031] ? dump_interrupted+0xf0/0xf0 [ 60.922600][ T1031] ? filp_open+0x199/0x1f0 [ 60.922634][ T1031] ? 0xffffffffff600000 [ 60.922662][ T1031] do_coredump+0x20d2/0x3050 [ 60.922749][ T1031] ? __cfi_do_coredump+0x10/0x10 [ 60.922773][ T1031] ? asm_exc_page_fault+0x2b/0x30 [ 60.922832][ T1031] ? __kasan_slab_free+0x6a/0x80 [ 60.922862][ T1031] ? get_signal+0xa2a/0x1490 [ 60.922895][ T1031] get_signal+0x11bf/0x1490 [ 60.922931][ T1031] arch_do_signal_or_restart+0xbc/0x700 [ 60.922955][ T1031] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.922981][ T1031] ? fpregs_restore_userregs+0x11c/0x260 [ 60.923012][ T1031] irqentry_exit_to_user_mode+0x4d/0xb0 [ 60.923045][ T1031] irqentry_exit+0x16/0x60 [ 60.923074][ T1031] exc_page_fault+0x65/0xc0 [ 60.923103][ T1031] asm_exc_page_fault+0x2b/0x30 [ 60.923131][ T1031] RIP: 0033:0x7fe346f9e159 [ 60.923154][ T1031] Code: Unable to access opcode bytes at 0x7fe346f9e12f. [ 60.923166][ T1031] RSP: 002b:00007fe347dbffd8 EFLAGS: 00010246 [ 60.923188][ T1031] RAX: 0000000000000000 RBX: 00007fe347226180 RCX: 00007fe346f9e159 [ 60.923205][ T1031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.923219][ T1031] RBP: 00007fe34703506b R08: 0000000000000000 R09: 0000000000000000 [ 60.923234][ T1031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.923248][ T1031] R13: 00007fe347226218 R14: 00007fe347226180 R15: 00007ffd75ef29c8 [ 60.923267][ T1031] [ 60.958723][ T1031] memory: usage 307200kB, limit 307200kB, failcnt 7163 [ 61.025456][ T45] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 61.028667][ T1031] memory+swap: usage 366276kB, limit 9007199254740988kB, failcnt 0 [ 61.056952][ T45] usb 3-1: device descriptor read/8, error -71 [ 61.060464][ T1031] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.197384][ T45] usb 3-1: device descriptor read/8, error -71 [ 61.205734][ T1031] Memory cgroup stats for [ 61.325649][ T45] usb usb3-port1: unable to enumerate USB device [ 61.433184][ T1031] /syz4: [ 61.433346][ T1031] cache 314462208 [ 61.439954][ T1031] rss 49152 [ 61.444945][ T1031] rss_huge 0 [ 61.448278][ T1031] shmem 314458112 [ 61.452128][ T1031] mapped_file 0 [ 61.455662][ T1031] dirty 0 [ 61.458853][ T1031] writeback 0 [ 61.462215][ T1031] workingset_refault_anon 18 [ 61.469237][ T1031] workingset_refault_file 47 [ 61.473882][ T1031] swap 60493824 [ 61.478834][ T1031] swapcached 61440 [ 61.482741][ T1031] pgpgin 104201 [ 61.486311][ T1031] pgpgout 27401 [ 61.489898][ T1031] pgfault 21044 [ 61.493428][ T1031] pgmajfault 7 [ 61.496878][ T1031] inactive_anon 160104448 [ 61.501345][ T1031] active_anon 154464256 [ 61.505564][ T1031] inactive_file 0 [ 61.509245][ T1031] active_file 4096 [ 61.512999][ T1031] unevictable 0 [ 61.517252][ T1031] hierarchical_memory_limit 314572800 [ 61.522849][ T1031] hierarchical_memsw_limit 9223372036854771712 [ 61.529863][ T1031] total_cache 314462208 [ 61.534072][ T1031] total_rss 49152 [ 61.537768][ T1031] total_rss_huge 0 [ 61.541622][ T1031] total_shmem 314458112 [ 61.545881][ T1031] total_mapped_file 0 [ 61.549971][ T1031] total_dirty 0 [ 61.553482][ T1031] total_writeback 0 [ 61.557359][ T1031] total_workingset_refault_anon 18 [ 61.562504][ T1031] total_workingset_refault_file 47 [ 61.567793][ T1031] total_swap 60493824 [ 61.571700][ T1091] syz.1.193 (1091): /proc/1090/oom_adj is deprecated, please use /proc/1090/oom_score_adj instead. [ 61.571810][ T1031] total_swapcached 61440 [ 61.586874][ T1031] total_pgpgin 104201 [ 61.590905][ T1031] total_pgpgout 27401 [ 61.594930][ T1031] total_pgfault 21044 [ 61.599211][ T1031] total_pgmajfault 7 [ 61.603184][ T1031] total_inactive_anon 160104448 [ 61.608331][ T1031] total_active_anon 154464256 [ 61.613070][ T1031] total_inactive_file 0 [ 61.617312][ T1031] total_active_file 4096 [ 61.621713][ T1031] total_unevictable 0 [ 61.625752][ T1031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.179,pid=1025,uid=0 [ 61.640776][ T1031] Memory cgroup out of memory: Killed process 1025 (syz.4.179) total-vm:49492kB, anon-rss:0kB, file-rss:33052kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 61.696459][ T1027] syz.4.179 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.715284][ T429] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 61.750050][ T1027] CPU: 0 UID: 0 PID: 1027 Comm: syz.4.179 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.750083][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.750098][ T1027] Call Trace: [ 61.750105][ T1027] [ 61.750113][ T1027] __dump_stack+0x21/0x30 [ 61.750146][ T1027] dump_stack_lvl+0x140/0x1c0 [ 61.750174][ T1027] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.750206][ T1027] ? ___ratelimit+0x41c/0x5c0 [ 61.750256][ T1027] ? __kasan_check_write+0x18/0x20 [ 61.750279][ T1027] dump_stack+0x19/0x20 [ 61.750305][ T1027] dump_header+0xd9/0x460 [ 61.750333][ T1027] oom_kill_process+0x35d/0x640 [ 61.750359][ T1027] out_of_memory+0x5d1/0xa20 [ 61.750384][ T1027] ? __cfi_out_of_memory+0x10/0x10 [ 61.750407][ T1027] ? mutex_lock_killable+0x115/0x1d0 [ 61.750433][ T1027] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.750462][ T1027] mem_cgroup_out_of_memory+0x2c5/0x390 [ 61.750485][ T1027] ? css_next_descendant_pre+0x1ec/0x210 [ 61.750514][ T1027] ? __kasan_check_write+0x18/0x20 [ 61.750535][ T1027] ? drain_obj_stock+0xec0/0xec0 [ 61.750557][ T1027] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 61.750579][ T1027] try_charge_memcg+0x925/0xe10 [ 61.750608][ T1027] ? static_key_count+0x45/0x70 [ 61.750637][ T1027] ? lruvec_init+0x1f1/0x280 [ 61.750660][ T1027] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.750689][ T1027] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.750720][ T1027] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.750752][ T1027] __mem_cgroup_charge+0xfc/0x420 [ 61.750774][ T1027] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.750796][ T1027] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.750824][ T1027] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.750850][ T1027] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.750874][ T1027] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.750898][ T1027] ? __kasan_check_write+0x18/0x20 [ 61.750920][ T1027] ? _raw_spin_lock+0x92/0x120 [ 61.750940][ T1027] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.750966][ T1027] ? shmem_get_folio+0xc0/0xc0 [ 61.750988][ T1027] ? __kasan_check_write+0x18/0x20 [ 61.751008][ T1027] ? inode_to_bdi+0x6d/0x100 [ 61.751039][ T1027] shmem_write_begin+0xf4/0x260 [ 61.751065][ T1027] generic_perform_write+0x32c/0x970 [ 61.751093][ T1027] ? inode_update_timestamps+0x4d1/0x6e0 [ 61.751126][ T1027] ? __cfi_generic_perform_write+0x10/0x10 [ 61.751153][ T1027] ? generic_write_checks_count+0x426/0x540 [ 61.751184][ T1027] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.751213][ T1027] ? mnt_put_write_access_file+0xc2/0x100 [ 61.751249][ T1027] ? file_update_time+0x1de/0x210 [ 61.751267][ T1027] shmem_file_write_iter+0x105/0x130 [ 61.751295][ T1027] __kernel_write_iter+0x462/0x900 [ 61.751321][ T1027] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.751343][ T1027] ? get_dump_page+0x165/0x220 [ 61.751370][ T1027] ? __asan_memset+0x39/0x50 [ 61.751391][ T1027] ? iov_iter_bvec+0xc0/0x180 [ 61.751421][ T1027] dump_user_range+0xb8b/0xe60 [ 61.751447][ T1027] ? __cfi_dump_user_range+0x10/0x10 [ 61.751470][ T1027] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.751502][ T1027] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.751533][ T1027] ? elf_core_dump+0x23cf/0x3840 [ 61.751560][ T1027] elf_core_dump+0x2d61/0x3840 [ 61.751592][ T1027] ? __cfi_elf_core_dump+0x10/0x10 [ 61.751618][ T1027] ? mas_next_slot+0xf01/0xfd0 [ 61.751650][ T1027] ? dump_interrupted+0xf0/0xf0 [ 61.751670][ T1027] ? filp_open+0x199/0x1f0 [ 61.751698][ T1027] ? 0xffffffffff600000 [ 61.751717][ T1027] do_coredump+0x20d2/0x3050 [ 61.751742][ T1027] ? __cfi_do_coredump+0x10/0x10 [ 61.751762][ T1027] ? asm_exc_page_fault+0x2b/0x30 [ 61.751794][ T1027] ? __kasan_slab_free+0x6a/0x80 [ 61.751819][ T1027] ? get_signal+0xa2a/0x1490 [ 61.751849][ T1027] get_signal+0x11bf/0x1490 [ 61.751880][ T1027] arch_do_signal_or_restart+0xbc/0x700 [ 61.751900][ T1027] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.751922][ T1027] ? fpregs_restore_userregs+0x11c/0x260 [ 61.751949][ T1027] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.751977][ T1027] irqentry_exit+0x16/0x60 [ 61.752006][ T1027] exc_page_fault+0x65/0xc0 [ 61.752032][ T1027] asm_exc_page_fault+0x2b/0x30 [ 61.752055][ T1027] RIP: 0033:0x7fe346f9e159 [ 61.752075][ T1027] Code: Unable to access opcode bytes at 0x7fe346f9e12f. [ 61.752085][ T1027] RSP: 002b:00007fe347dbffd8 EFLAGS: 00010246 [ 61.752104][ T1027] RAX: 0000000000000000 RBX: 00007fe347226180 RCX: 00007fe346f9e159 [ 61.752120][ T1027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.752133][ T1027] RBP: 00007fe34703506b R08: 0000000000000000 R09: 0000000000000000 [ 61.752146][ T1027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.752159][ T1027] R13: 00007fe347226218 R14: 00007fe347226180 R15: 00007ffd75ef29c8 [ 61.752176][ T1027] [ 61.752259][ T1027] memory: usage 307200kB, limit 307200kB, failcnt 7401 [ 62.075311][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 62.080498][ T1027] memory+swap: usage 352996kB, limit 9007199254740988kB, failcnt 0 [ 62.096650][ T987] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 62.105935][ T1027] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.247317][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 62.268812][ T1027] Memory cgroup stats for /syz4: [ 62.268968][ T1027] cache 297730048 [ 62.277035][ T429] usb 1-1: config index 0 descriptor too short (expected 65530, got 34) [ 62.282366][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.286160][ T429] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 62.305294][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.310328][ T429] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 62.329335][ T1027] rss 49152 [ 62.332609][ T1027] rss_huge 0 [ 62.336180][ T1027] shmem 297730048 [ 62.339999][ T1027] mapped_file 0 [ 62.343631][ T1027] dirty 0 [ 62.347273][ T429] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 62.356488][ T429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.364546][ T429] usb 1-1: Product: syz [ 62.366576][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 62.373703][ T429] usb 1-1: Manufacturer: syz [ 62.382696][ T429] usb 1-1: SerialNumber: syz [ 62.389547][ T1027] writeback 0 [ 62.395031][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.399729][ T429] rtl8150 1-1:1.0: couldn't find required endpoints [ 62.410198][ T429] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 62.418323][ T45] usb 2-1: Product: syz [ 62.420644][ T1027] workingset_refault_anon 18 [ 62.422520][ T45] usb 2-1: Manufacturer: syz [ 62.422541][ T45] usb 2-1: SerialNumber: syz [ 62.436062][ T1027] workingset_refault_file 47 [ 62.451542][ T1027] swap 52092928 [ 62.459008][ T1027] swapcached 200704 [ 62.467236][ T1027] pgpgin 106594 [ 62.474337][ T45] usb 2-1: selecting invalid altsetting 1 [ 62.474645][ T1027] pgpgout 33814 [ 62.485606][ T45] usb 2-1: unit 6 not found! [ 62.495328][ T1027] pgfault 21194 [ 62.499060][ T1027] pgmajfault 7 [ 62.502517][ T1027] inactive_anon 144863232 [ 62.506932][ T1027] active_anon 153190400 [ 62.511127][ T1027] inactive_file 0 [ 62.514840][ T1027] active_file 0 [ 62.518408][ T1027] unevictable 0 [ 62.521909][ T1027] hierarchical_memory_limit 314572800 [ 62.537942][ T1027] hierarchical_memsw_limit 9223372036854771712 [ 62.544426][ T1027] total_cache 297730048 [ 62.548755][ T1027] total_rss 49152 [ 62.552442][ T1027] total_rss_huge 0 [ 62.556894][ T1027] total_shmem 297730048 [ 62.561577][ T1027] total_mapped_file 0 [ 62.565693][ T1027] total_dirty 0 [ 62.569242][ T1027] total_writeback 0 [ 62.573302][ T1027] total_workingset_refault_anon 18 [ 62.586010][ T1027] total_workingset_refault_file 47 [ 62.591583][ T1027] total_swap 52092928 [ 62.596124][ T1027] total_swapcached 200704 [ 62.604417][ T429] usb 1-1: USB disconnect, device number 18 [ 62.618310][ T1027] total_pgpgin 106594 [ 62.621307][ T1107] can0: slcan on ttyS3. [ 62.623266][ T1027] total_pgpgout 33814 [ 62.635896][ T1027] total_pgfault 21194 [ 62.641302][ T1027] total_pgmajfault 7 [ 62.645320][ T1027] total_inactive_anon 144863232 [ 62.650255][ T1027] total_active_anon 153190400 [ 62.655008][ T1027] total_inactive_file 0 [ 62.659263][ T1027] total_active_file 0 [ 62.663347][ T1027] total_unevictable 0 [ 62.667498][ T1027] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.179,pid=1027,uid=0 [ 62.683022][ T1027] Memory cgroup out of memory: Killed process 1027 (syz.4.179) total-vm:49492kB, anon-rss:0kB, file-rss:31772kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 62.690768][ T1107] can0 (unregistered): slcan off ttyS3. [ 62.705802][ T1100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.714711][ T45] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 62.725510][ T1100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.733705][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.744124][ T36] audit: type=1400 audit(1790598934.830:297): avc: denied { setopt } for pid=1106 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.766742][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.775841][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.792386][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 62.888542][ T36] audit: type=1400 audit(1790598935.000:298): avc: denied { map } for pid=1084 comm="syz.4.190" path="socket:[11991]" dev="sockfs" ino=11991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 62.942461][ T36] audit: type=1400 audit(1790598935.030:299): avc: denied { bind } for pid=1110 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.982355][ T10] usb 2-1: USB disconnect, device number 20 [ 63.102343][ T1120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.200'. [ 63.167101][ T1120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 63.176608][ T36] audit: type=1400 audit(1790598935.290:300): avc: denied { write } for pid=1124 comm="syz.0.202" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.206615][ T36] audit: type=1400 audit(1790598935.310:301): avc: denied { open } for pid=1124 comm="syz.0.202" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.241631][ T36] audit: type=1400 audit(1790598935.310:302): avc: denied { ioctl } for pid=1124 comm="syz.0.202" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.275245][ T36] audit: type=1400 audit(1790598935.350:303): avc: denied { write } for pid=1130 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 63.294406][ T36] audit: type=1400 audit(1790598935.390:304): avc: denied { write } for pid=1130 comm="syz.2.203" name="ip6_tables_names" dev="proc" ino=4026532453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.445251][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 63.526129][ T429] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 63.606354][ T10] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 63.620445][ T10] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 63.629876][ T10] usb 1-1: New USB device strings: Mfr=35, Product=2, SerialNumber=3 [ 63.638174][ T10] usb 1-1: Product: syz [ 63.649267][ T10] usb 1-1: Manufacturer: syz [ 63.654158][ T10] usb 1-1: SerialNumber: syz [ 63.671274][ T10] asix 1-1:127.0: probe with driver asix failed with error -22 [ 63.685235][ T429] usb 3-1: Using ep0 maxpacket: 16 [ 63.691918][ T429] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 63.700440][ T429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.715228][ T429] usb 3-1: config 0 has no interface number 0 [ 63.726880][ T429] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 63.736745][ T429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.749146][ T429] usb 3-1: Product: syz [ 63.753370][ T429] usb 3-1: Manufacturer: syz [ 63.764848][ T429] usb 3-1: SerialNumber: syz [ 63.773601][ T1137] tipc: Started in network mode [ 63.780081][ T429] usb 3-1: config 0 descriptor?? [ 63.786624][ T429] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 63.806966][ T429] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 63.825254][ T429] usb 3-1: No valid video chain found. [ 63.853873][ T1137] tipc: Node identity 7f000001, cluster identity 4711 [ 63.881578][ T429] usb 1-1: USB disconnect, device number 19 [ 63.900174][ T1137] tipc: New replicast peer: 127.0.0.1 [ 63.929812][ T1137] tipc: Enabled bearer , priority 10 [ 63.963631][ T36] audit: type=1400 audit(1790598936.070:305): avc: denied { map } for pid=1141 comm="syz.1.207" path="socket:[12145]" dev="sockfs" ino=12145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.988475][ T1044] syz.4.179 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 63.992166][ T1146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.014844][ T1146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.027324][ T1140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'. [ 64.030433][ T10] usb 3-1: USB disconnect, device number 19 [ 64.088119][ T1044] CPU: 0 UID: 0 PID: 1044 Comm: syz.4.179 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 64.088159][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.088176][ T1044] Call Trace: [ 64.088186][ T1044] [ 64.088196][ T1044] __dump_stack+0x21/0x30 [ 64.088234][ T1044] dump_stack_lvl+0x140/0x1c0 [ 64.088267][ T1044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.088300][ T1044] ? ___ratelimit+0x41c/0x5c0 [ 64.088327][ T1044] ? __kasan_check_write+0x18/0x20 [ 64.088353][ T1044] dump_stack+0x19/0x20 [ 64.088384][ T1044] dump_header+0xd9/0x460 [ 64.088416][ T1044] oom_kill_process+0x35d/0x640 [ 64.088445][ T1044] out_of_memory+0x5d1/0xa20 [ 64.088473][ T1044] ? __cfi_out_of_memory+0x10/0x10 [ 64.088500][ T1044] ? mutex_lock_killable+0x97/0x1d0 [ 64.088531][ T1044] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.088571][ T1044] mem_cgroup_out_of_memory+0x2c5/0x390 [ 64.088598][ T1044] ? css_next_descendant_pre+0x1ec/0x210 [ 64.088627][ T1044] ? __kasan_check_write+0x18/0x20 [ 64.088652][ T1044] ? drain_obj_stock+0xec0/0xec0 [ 64.088679][ T1044] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 64.088704][ T1044] try_charge_memcg+0x925/0xe10 [ 64.088737][ T1044] ? static_key_count+0x45/0x70 [ 64.088769][ T1044] ? lruvec_init+0x1f1/0x280 [ 64.088796][ T1044] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.088830][ T1044] ? __alloc_pages_noprof+0x35a/0x7e0 [ 64.088866][ T1044] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.088902][ T1044] __mem_cgroup_charge+0xfc/0x420 [ 64.088926][ T1044] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.088952][ T1044] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 64.088985][ T1044] ? shmem_replace_folio+0x9b0/0x9b0 [ 64.089015][ T1044] ? shmem_huge_global_enabled+0x2da/0x360 [ 64.089044][ T1044] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 64.089071][ T1044] ? __kasan_check_write+0x18/0x20 [ 64.089095][ T1044] ? _raw_spin_lock+0x92/0x120 [ 64.089118][ T1044] shmem_get_folio_gfp+0x5cd/0x12e0 [ 64.089148][ T1044] ? shmem_get_folio+0xc0/0xc0 [ 64.089173][ T1044] ? follow_page_pte+0x8fb/0xba0 [ 64.089206][ T1044] ? inode_to_bdi+0x6d/0x100 [ 64.089240][ T1044] shmem_write_begin+0xf4/0x260 [ 64.089270][ T1044] generic_perform_write+0x32c/0x970 [ 64.089306][ T1044] ? __cfi_generic_perform_write+0x10/0x10 [ 64.089339][ T1044] ? generic_write_checks_count+0x426/0x540 [ 64.089373][ T1044] ? file_update_time+0xa3/0x210 [ 64.089394][ T1044] shmem_file_write_iter+0x105/0x130 [ 64.089427][ T1044] __kernel_write_iter+0x462/0x900 [ 64.089454][ T1044] ? __cfi___kernel_write_iter+0x10/0x10 [ 64.089479][ T1044] ? get_dump_page+0x165/0x220 [ 64.089512][ T1044] ? __asan_memset+0x39/0x50 [ 64.089536][ T1044] ? iov_iter_bvec+0xc0/0x180 [ 64.089578][ T1044] dump_user_range+0xb8b/0xe60 [ 64.089607][ T1044] ? __cfi_dump_user_range+0x10/0x10 [ 64.089634][ T1044] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 64.089671][ T1044] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 64.089708][ T1044] ? elf_core_dump+0x23cf/0x3840 [ 64.089740][ T1044] elf_core_dump+0x2d61/0x3840 [ 64.089775][ T1044] ? __cfi_elf_core_dump+0x10/0x10 [ 64.089806][ T1044] ? mas_next_slot+0xf01/0xfd0 [ 64.089845][ T1044] ? dump_interrupted+0xf0/0xf0 [ 64.089868][ T1044] ? filp_open+0x199/0x1f0 [ 64.089902][ T1044] ? 0xffffffffff600000 [ 64.089922][ T1044] do_coredump+0x20d2/0x3050 [ 64.089950][ T1044] ? __cfi_do_coredump+0x10/0x10 [ 64.089974][ T1044] ? asm_exc_page_fault+0x2b/0x30 [ 64.090012][ T1044] ? __kasan_slab_free+0x6a/0x80 [ 64.090042][ T1044] ? get_signal+0xa2a/0x1490 [ 64.090074][ T1044] get_signal+0x11bf/0x1490 [ 64.090111][ T1044] arch_do_signal_or_restart+0xbc/0x700 [ 64.090135][ T1044] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 64.090162][ T1044] ? fpregs_restore_userregs+0x11c/0x260 [ 64.090192][ T1044] irqentry_exit_to_user_mode+0x4d/0xb0 [ 64.090226][ T1044] irqentry_exit+0x16/0x60 [ 64.090257][ T1044] exc_page_fault+0x65/0xc0 [ 64.090288][ T1044] asm_exc_page_fault+0x2b/0x30 [ 64.090315][ T1044] RIP: 0033:0x7fe346f9e159 [ 64.090339][ T1044] Code: Unable to access opcode bytes at 0x7fe346f9e12f. [ 64.090351][ T1044] RSP: 002b:00007fe347dbffd8 EFLAGS: 00010246 [ 64.090373][ T1044] RAX: 0000000000000000 RBX: 00007fe347226180 RCX: 00007fe346f9e159 [ 64.090390][ T1044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.090404][ T1044] RBP: 00007fe34703506b R08: 0000000000000000 R09: 0000000000000000 [ 64.090419][ T1044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.090433][ T1044] R13: 00007fe347226218 R14: 00007fe347226180 R15: 00007ffd75ef29c8 [ 64.090454][ T1044] [ 64.090493][ T1044] memory: usage 307200kB, limit 307200kB, failcnt 11799 [ 64.485387][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 64.493290][ T1044] memory+swap: usage 366104kB, limit 9007199254740988kB, failcnt 0 [ 64.564616][ T1044] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 64.571628][ T1044] Memory cgroup stats for /syz4: [ 64.571769][ T1044] cache 314105856 [ 64.580554][ T1044] rss 258048 [ 64.583843][ T1044] rss_huge 0 [ 64.587132][ T1044] shmem 314105856 [ 64.590844][ T1044] mapped_file 0 [ 64.594372][ T1044] dirty 0 [ 64.597756][ T1044] writeback 0 [ 64.601110][ T1044] workingset_refault_anon 35 [ 64.605820][ T1044] workingset_refault_file 1178 [ 64.610675][ T1044] swap 60366848 [ 64.614212][ T1044] swapcached 208896 [ 64.618106][ T1044] pgpgin 131903 [ 64.621645][ T1044] pgpgout 55103 [ 64.625328][ T1044] pgfault 22959 [ 64.628891][ T1044] pgmajfault 25 [ 64.632509][ T1044] inactive_anon 33689600 [ 64.638502][ T1044] active_anon 280883200 [ 64.642757][ T1044] inactive_file 0 [ 64.646571][ T1044] active_file 0 [ 64.650231][ T1044] unevictable 0 [ 64.653773][ T1044] hierarchical_memory_limit 314572800 [ 64.665276][ T1044] hierarchical_memsw_limit 9223372036854771712 [ 64.666211][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 64.671500][ T1044] total_cache 314105856 [ 64.684780][ T45] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 64.704641][ T1044] total_rss 258048 [ 64.708466][ T1044] total_rss_huge 0 [ 64.712409][ T1044] total_shmem 314105856 [ 64.716899][ T1044] total_mapped_file 0 [ 64.718713][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.721391][ T1044] total_dirty 0 [ 64.732533][ T1044] total_writeback 0 [ 64.736470][ T1044] total_workingset_refault_anon 35 [ 64.742898][ T45] usb 2-1: config 0 descriptor?? [ 64.749521][ T1044] total_workingset_refault_file 1178 [ 64.756389][ T1044] total_swap 60366848 [ 64.760491][ T1044] total_swapcached 208896 [ 64.764848][ T1044] total_pgpgin 131903 [ 64.768898][ T1044] total_pgpgout 55103 [ 64.773089][ T1044] total_pgfault 22959 [ 64.777156][ T1044] total_pgmajfault 25 [ 64.781245][ T1044] total_inactive_anon 33689600 [ 64.786270][ T1044] total_active_anon 280883200 [ 64.791213][ T1044] total_inactive_file 0 [ 64.795670][ T1044] total_active_file 0 [ 64.800132][ T1044] total_unevictable 0 [ 64.804153][ T1044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.179,pid=1036,uid=0 [ 64.819075][ T1044] Memory cgroup out of memory: Killed process 1036 (syz.4.179) total-vm:49564kB, anon-rss:0kB, file-rss:33188kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 64.878609][ T1136] syz.4.206 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 64.918572][ T1136] CPU: 1 UID: 0 PID: 1136 Comm: syz.4.206 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 64.918610][ T1136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.918625][ T1136] Call Trace: [ 64.918632][ T1136] [ 64.918641][ T1136] __dump_stack+0x21/0x30 [ 64.918679][ T1136] dump_stack_lvl+0x140/0x1c0 [ 64.918710][ T1136] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.918742][ T1136] ? ___ratelimit+0x41c/0x5c0 [ 64.918767][ T1136] ? __kasan_check_write+0x18/0x20 [ 64.918793][ T1136] dump_stack+0x19/0x20 [ 64.918829][ T1136] dump_header+0xd9/0x460 [ 64.918860][ T1136] oom_kill_process+0x35d/0x640 [ 64.918889][ T1136] out_of_memory+0x5d1/0xa20 [ 64.918915][ T1136] ? __cfi_out_of_memory+0x10/0x10 [ 64.918941][ T1136] ? mutex_lock_killable+0x97/0x1d0 [ 64.918970][ T1136] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.919002][ T1136] mem_cgroup_out_of_memory+0x2c5/0x390 [ 64.919029][ T1136] ? css_next_descendant_pre+0x1ec/0x210 [ 64.919059][ T1136] ? __kasan_check_write+0x18/0x20 [ 64.919083][ T1136] ? drain_obj_stock+0xec0/0xec0 [ 64.919110][ T1136] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 64.919136][ T1136] try_charge_memcg+0x925/0xe10 [ 64.919169][ T1136] ? static_key_count+0x45/0x70 [ 64.919201][ T1136] ? lruvec_init+0x1f1/0x280 [ 64.919227][ T1136] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.919261][ T1136] ? __alloc_pages_noprof+0x35a/0x7e0 [ 64.919304][ T1136] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.919341][ T1136] __mem_cgroup_charge+0xfc/0x420 [ 64.919364][ T1136] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.919387][ T1136] ? folio_add_lru+0x116/0x400 [ 64.919417][ T1136] ? __cfi_folio_add_lru+0x10/0x10 [ 64.919447][ T1136] folio_prealloc+0x67/0x220 [ 64.919477][ T1136] do_wp_page+0x187e/0x2e80 [ 64.919504][ T1136] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 64.919528][ T1136] ? folio_put+0x90/0x90 [ 64.919554][ T1136] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.919575][ T1136] ? rwsem_down_read_slowpath+0x899/0x14c0 [ 64.919609][ T1136] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 64.919633][ T1136] handle_mm_fault+0x1017/0x1ba0 [ 64.919664][ T1136] ? __cfi_handle_mm_fault+0x10/0x10 [ 64.919692][ T1136] ? lock_vma_under_rcu+0x4cf/0x590 [ 64.919727][ T1136] do_user_addr_fault+0x951/0x1230 [ 64.919749][ T1136] ? __kasan_check_read+0x15/0x20 [ 64.919775][ T1136] exc_page_fault+0x58/0xc0 [ 64.919805][ T1136] asm_exc_page_fault+0x2b/0x30 [ 64.919833][ T1136] RIP: 0033:0x7fe346e517fc [ 64.919854][ T1136] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 64.919873][ T1136] RSP: 002b:00007ffd75ef2a08 EFLAGS: 00010246 [ 64.919895][ T1136] RAX: 0000000000000000 RBX: ffffffff85812f3a RCX: 0000000000000000 [ 64.919912][ T1136] RDX: 0000000000000f3a RSI: ffffffff85812f3a RDI: 0000000000000002 [ 64.919927][ T1136] RBP: 0000000000000000 R08: 00007fe347210000 R09: 00007fe347212000 [ 64.919943][ T1136] R10: 0000000085812f3e R11: 0000000000000002 R12: 00007fe347226038 [ 64.919958][ T1136] R13: 0000000000000105 R14: ffffffff85812f3a R15: 00007fe347d55720 [ 64.919975][ T1136] ? tipc_net_init+0x2a/0x1e0 [ 64.920003][ T1136] ? tipc_net_init+0x2a/0x1e0 [ 64.920029][ T1136] ? tipc_net_init+0x2a/0x1e0 [ 64.920054][ T1136] [ 64.920115][ T1136] memory: usage 301828kB, limit 307200kB, failcnt 12130 [ 65.008891][ T10] usb 2-1: USB disconnect, device number 21 [ 65.015367][ T987] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 65.045402][ T429] tipc: Node number set to 2130706433 [ 65.054857][ T36] audit: type=1400 audit(1790598937.110:306): avc: denied { mounton } for pid=1148 comm="syz.1.208" path="/proc/185/task" dev="proc" ino=10760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 65.173251][ T1136] memory+swap: usage 355356kB, limit 9007199254740988kB, failcnt 0 [ 65.386569][ T987] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.395588][ T987] usb 1-1: not running at top speed; connect to a high speed hub [ 65.427240][ T987] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 65.436451][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.444493][ T987] usb 1-1: Product: syz [ 65.455911][ T987] usb 1-1: Manufacturer: syz [ 65.472825][ T987] usb 1-1: SerialNumber: syz [ 65.668509][ T1171] batadv_slave_1: entered allmulticast mode [ 65.688959][ T987] usb 1-1: MIDIStreaming interface descriptor not found [ 65.711474][ T987] usb 1-1: USB disconnect, device number 20 [ 65.744731][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 65.850539][ T1177] ./dev/sda1: Can't lookup blockdev [ 65.900807][ T1136] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 65.908646][ T1136] Memory cgroup stats for /syz4: [ 65.908831][ T1136] cache 299683840 [ 65.933810][ T1136] rss 208896 [ 65.949407][ T1136] rss_huge 0 [ 65.963808][ T1136] shmem 295571456 [ 65.975263][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 65.985007][ T1136] mapped_file 4104192 [ 65.995428][ T1136] dirty 0 [ 66.002001][ T1136] writeback 327680 [ 66.010207][ T1136] workingset_refault_anon 36 [ 66.024807][ T1136] workingset_refault_file 2233 [ 66.047068][ T1136] swap 59887616 [ 66.065609][ T1136] swapcached 561152 [ 66.080419][ T1136] pgpgin 137068 [ 66.094612][ T1136] pgpgout 63714 [ 66.107565][ T1136] pgfault 23233 [ 66.111122][ T1136] pgmajfault 28 [ 66.121608][ T1136] inactive_anon 270946304 [ 66.127125][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.137414][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 66.148823][ T10] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 66.165234][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 66.176346][ T1136] active_anon 25227264 [ 66.180503][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.195841][ T10] usb 2-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 66.205029][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.213421][ T10] usb 2-1: Product: syz [ 66.217746][ T10] usb 2-1: Manufacturer: syz [ 66.222422][ T10] usb 2-1: SerialNumber: syz [ 66.243517][ T1136] inactive_file 278528 [ 66.259666][ T1136] active_file 2260992 [ 66.281408][ T1136] unevictable 0 [ 66.303225][ T1136] hierarchical_memory_limit 314572800 [ 66.327821][ T1136] hierarchical_memsw_limit 9223372036854771712 [ 66.355413][ T1136] total_cache 299683840 [ 66.375005][ T1136] total_rss 208896 [ 66.394618][ T1136] total_rss_huge 0 [ 66.423807][ T1136] total_shmem 295571456 [ 66.437816][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.451291][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.467329][ T10] usb 2-1: 1:1 : invalid UAC_AS_GENERAL desc [ 66.473711][ T10] usb 2-1: 0:2 : does not exist [ 66.484888][ T10] usb 2-1: USB disconnect, device number 22 [ 66.499411][ T1136] total_mapped_file 4104192 [ 66.508537][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 66.525239][ T429] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 66.541728][ T1136] total_dirty 0 [ 66.577836][ T1136] total_writeback 327680 [ 66.625258][ T1136] total_workingset_refault_anon 36 [ 66.630832][ T1136] total_workingset_refault_file 2233 [ 66.636359][ T1136] total_swap 59887616 [ 66.640694][ T1136] total_swapcached 561152 [ 66.652616][ T1136] total_pgpgin 137068 [ 66.665007][ T1136] total_pgpgout 63714 [ 66.675240][ T429] usb 1-1: Using ep0 maxpacket: 32 [ 66.681530][ T429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.693537][ T429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.703516][ T429] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 66.716288][ T429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.722954][ T1136] total_pgfault 23233 [ 66.729298][ T429] usb 1-1: config 0 descriptor?? [ 66.776006][ T1136] total_pgmajfault 28 [ 66.818183][ T1136] total_inactive_anon 270946304 [ 66.862233][ T1136] total_active_anon 25227264 [ 66.901675][ T1136] total_inactive_file 278528 [ 66.928092][ T1136] total_active_file 2260992 [ 66.957008][ T1136] total_unevictable 0 [ 66.977731][ T1136] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.179,pid=1042,uid=0 [ 67.094272][ T1136] Memory cgroup out of memory: OOM victim 1042 (syz.4.179) is already exiting. Skip killing the task [ 67.186123][ T429] usbhid 1-1:0.0: can't add hid device: -71 [ 67.198011][ T429] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 67.214131][ T429] usb 1-1: USB disconnect, device number 21 [ 67.252574][ T1193] netlink: 'syz.1.222': attribute type 19 has an invalid length. [ 67.270548][ T1197] netlink: 'syz.1.222': attribute type 19 has an invalid length. [ 67.347037][ T1201] netlink: 80 bytes leftover after parsing attributes in process `syz.1.224'. [ 67.365514][ T1201] 8021q: VLANs not supported on ip_vti0 [ 67.375935][ T1201] netlink: 80 bytes leftover after parsing attributes in process `syz.1.224'. [ 67.396036][ T1204] 8021q: VLANs not supported on ip_vti0 [ 67.675305][ T516] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 67.766784][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 67.766818][ T36] audit: type=1400 audit(1790598939.880:314): avc: denied { append } for pid=1216 comm="syz.0.229" name="sda" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.826340][ T516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.849614][ T516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.864210][ T516] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 67.875815][ T516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.886033][ T516] usb 2-1: config 0 descriptor?? [ 67.981448][ T1249] rust_binder: Failed to allocate buffer. len:8192, is_oneway:true [ 67.981476][ T1249] rust_binder: Failure in copy_transaction_data: ENOSPC [ 67.995497][ T1249] rust_binder: 1248:1249 transaction async to 1248:0 failed ENOSPC, code 0 size 0-0 [ 68.013475][ T429] rust_binder: 1248: undelivered TRANSACTION_ERROR: 29201 [ 68.095288][ T987] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 68.168428][ T1258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.184667][ T36] audit: type=1400 audit(1790598940.290:315): avc: denied { bind } for pid=1256 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.265289][ T987] usb 1-1: Using ep0 maxpacket: 32 [ 68.271790][ T987] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 68.280141][ T987] usb 1-1: config 0 has no interface number 0 [ 68.286446][ T987] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.299010][ T516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 68.308698][ T516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 68.316280][ T516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 68.323967][ T987] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.334045][ T516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 68.341556][ T987] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 68.367529][ T516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 68.378148][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.387575][ T516] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 68.413155][ T987] usb 1-1: config 0 descriptor?? [ 68.470178][ T516] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -32 [ 68.479824][ T516] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -32 [ 68.480089][ T1265] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 68.490490][ T516] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 68.521353][ T516] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 68.537536][ T36] audit: type=1400 audit(1790598940.650:316): avc: denied { mount } for pid=1262 comm="syz.2.234" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.545521][ T516] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -32 [ 68.595297][ T36] audit: type=1400 audit(1790598940.650:317): avc: denied { watch watch_reads } for pid=1262 comm="syz.2.234" path="/58/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 68.666016][ T36] audit: type=1400 audit(1790598940.780:318): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 69.040850][ T36] audit: type=1400 audit(1790598941.150:319): avc: denied { listen } for pid=1218 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.153235][ T36] audit: type=1400 audit(1790598941.260:320): avc: denied { accept } for pid=1218 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.231404][ T36] audit: type=1400 audit(1790598941.340:321): avc: denied { read } for pid=1281 comm="syz.4.238" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.385245][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 69.535248][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 69.541825][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.552161][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.562849][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.572022][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.584752][ T10] usb 3-1: Product: syz [ 69.589053][ T10] usb 3-1: Manufacturer: syz [ 69.605291][ T10] usb 3-1: SerialNumber: syz [ 69.818218][ T1278] Invalid argument reading file caps for ./file0 [ 69.827108][ T10] usb 3-1: 0:2 : does not exist [ 69.836934][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 69.859243][ T10] usb 3-1: USB disconnect, device number 20 [ 69.874388][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 70.455916][ T31] usb 2-1: USB disconnect, device number 23 [ 70.520220][ T1302] capability: warning: `syz.2.244' uses deprecated v2 capabilities in a way that may be insecure [ 70.532610][ T36] audit: type=1400 audit(1790598942.640:322): avc: denied { bind } for pid=1300 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.550837][ T1302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.563636][ T1302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.757413][ T36] audit: type=1400 audit(1790598942.870:323): avc: denied { create } for pid=1311 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 70.790471][ T1315] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.805739][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 70.892837][ T1321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.901518][ T1321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.912370][ T987] uclogic 0003:28BD:0094.0007: failed retrieving string descriptor #100: -71 [ 70.931626][ T987] uclogic 0003:28BD:0094.0007: failed retrieving pen parameters: -71 [ 70.940222][ T320] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 70.948259][ T987] uclogic 0003:28BD:0094.0007: pen probing failed: -71 [ 70.955445][ T987] uclogic 0003:28BD:0094.0007: failed probing parameters: -71 [ 70.963084][ T987] uclogic 0003:28BD:0094.0007: probe with driver uclogic failed with error -71 [ 70.972292][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 70.980109][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.990203][ T987] usb 1-1: USB disconnect, device number 22 [ 70.996910][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.017518][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 71.032851][ T31] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 71.043579][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.052615][ T31] usb 3-1: Product: syz [ 71.057119][ T31] usb 3-1: Manufacturer: syz [ 71.061790][ T31] usb 3-1: SerialNumber: syz [ 71.070509][ T1301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.117210][ T320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.127641][ T320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.136865][ T320] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.151655][ T320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.161274][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.169540][ T320] usb 2-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 71.194405][ T320] usb 2-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 71.211228][ T320] usb 2-1: SerialNumber: syz [ 71.282644][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 71.293229][ T31] usb 3-1: USB disconnect, device number 21 [ 71.303573][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 71.424694][ T320] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 71.431687][ T320] cdc_ncm 2-1:1.0: bind() failure [ 71.439575][ T320] usb 2-1: USB disconnect, device number 24 [ 71.615246][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 71.745870][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.754522][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.767158][ T1350] usb usb8: usbfs: process 1350 (syz.4.259) did not claim interface 0 before use [ 71.776615][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 71.785042][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.796053][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 71.807027][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 71.820047][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 71.831126][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.842473][ T10] usb 1-1: config 0 descriptor?? [ 72.050434][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.060418][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.115277][ T321] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 72.252627][ T1366] overlay: ./file0 is not a directory [ 72.258893][ T1366] overlay: ./file0 is not a directory [ 72.265256][ T321] usb 3-1: Using ep0 maxpacket: 32 [ 72.289614][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.300918][ T10] nintendo 0003:057E:2019.0008: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 72.326253][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.354246][ T1365] SELinux: policydb magic number 0x6b726f77 does not match expected magic number 0xf97cff8c [ 72.361544][ T321] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 72.365825][ T1365] SELinux: failed to load policy [ 72.392625][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.405684][ T321] usb 3-1: config 0 descriptor?? [ 72.471431][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.480754][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.492441][ T1377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 72.558302][ T1245] tipc: Subscription rejected, illegal request [ 72.594081][ T1381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.603443][ T1381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.618927][ T321] koneplus 0003:1E7D:2D51.0009: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 73.067428][ T10] nintendo 0003:057E:2019.0008: Failed to set baudrate (ret=-71), continuing anyway [ 73.078571][ T10] nintendo 0003:057E:2019.0008: Failed handshake; ret=-71 [ 73.085913][ T10] nintendo 0003:057E:2019.0008: Failed to initialize controller; ret=-71 [ 73.096368][ T10] nintendo 0003:057E:2019.0008: probe - fail = -71 [ 73.103020][ T10] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -71 [ 73.113945][ T10] usb 1-1: USB disconnect, device number 23 [ 73.295249][ T321] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 73.378569][ T320] usb 3-1: USB disconnect, device number 22 [ 73.465358][ T321] usb 2-1: Using ep0 maxpacket: 32 [ 73.474629][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.485745][ T321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.498765][ T321] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 73.507957][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.520310][ T321] usb 2-1: config 0 descriptor?? [ 73.659555][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 73.659573][ T36] audit: type=1400 audit(1790598945.770:330): avc: denied { append } for pid=1405 comm="syz.0.274" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.689977][ T36] audit: type=1400 audit(1790598945.780:331): avc: denied { open } for pid=1405 comm="syz.0.274" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.714630][ T36] audit: type=1400 audit(1790598945.800:332): avc: denied { mounton } for pid=1405 comm="syz.0.274" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.739922][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.749820][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.765288][ T320] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 73.774657][ T1409] ------------[ cut here ]------------ [ 73.780282][ T1409] skb_assert_len [ 73.784192][ T1409] WARNING: CPU: 0 PID: 1409 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 73.794293][ T1409] Modules linked in: [ 73.798288][ T1409] CPU: 0 UID: 0 PID: 1409 Comm: syz.0.275 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 73.809868][ T1409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.820080][ T1409] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 73.826020][ T1409] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 0d e2 04 fd c6 05 85 d4 62 03 01 48 c7 c7 a0 2d 8b 86 48 c7 c6 73 bc 19 87 e8 a3 b2 81 fc <0f> 0b 80 3d 6a d4 62 03 01 0f 84 af e3 ff ff e8 df e1 04 fd c6 05 [ 73.845833][ T1409] RSP: 0018:ffffc9000fd17500 EFLAGS: 00010246 [ 73.852005][ T1409] RAX: 6db13c20d6651c00 RBX: ffff8881172b42f0 RCX: ffff888116b14c00 [ 73.860093][ T1409] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 73.868208][ T1409] RBP: ffffc9000fd177e0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 73.876338][ T1409] R10: dffffc0000000000 R11: ffffed103edc529b R12: 1ffff11022e56852 [ 73.884428][ T1409] R13: ffff8881172b4280 R14: 0000000000000000 R15: dffffc0000000000 [ 73.892499][ T1409] FS: 00007fbda33df6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 73.901573][ T1409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.908338][ T1409] CR2: 00007fbda33deff8 CR3: 0000000116a7c000 CR4: 00000000003526b0 [ 73.916474][ T1409] Call Trace: [ 73.919799][ T1409] [ 73.922806][ T1409] ? __kasan_check_write+0x18/0x20 [ 73.928082][ T1409] ? __cfi_update_misfit_status+0x10/0x10 [ 73.933914][ T1409] ? alloc_skb_with_frags+0x80b/0x8b0 [ 73.935349][ T320] usb 3-1: Using ep0 maxpacket: 16 [ 73.939520][ T1409] ? __cfi___dev_queue_xmit+0x10/0x10 [ 73.947915][ T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.950049][ T1409] ? __kasan_check_write+0x18/0x20 [ 73.963229][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.966076][ T1409] ? skb_set_owner_w+0x280/0x3d0 [ 73.974798][ T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.979420][ T1409] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 73.990953][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.994681][ T1409] ? packet_parse_headers+0x7f0/0xb10 [ 74.005371][ T320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.008051][ T1409] ? packet_parse_headers+0x883/0xb10 [ 74.021678][ T320] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 74.026141][ T1409] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 74.036660][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.041373][ T1409] ? skb_setup_tx_timestamp+0x210/0x210 [ 74.055061][ T1409] packet_xmit+0x76/0x360 [ 74.055981][ T320] usb 3-1: config 0 descriptor?? [ 74.059646][ T1409] ? is_vmalloc_addr+0x11/0x40 [ 74.069365][ T1409] packet_sendmsg+0x228b/0x56b0 [ 74.074317][ T1409] ? avc_has_perm_noaudit+0x26b/0x360 [ 74.079816][ T1409] ? __cfi_packet_sendmsg+0x10/0x10 [ 74.085102][ T1409] ? avc_has_perm+0x155/0x240 [ 74.089902][ T1409] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 74.095295][ T1409] ? security_socket_sendmsg+0x3d/0x100 [ 74.100933][ T1409] ? __cfi_packet_sendmsg+0x10/0x10 [ 74.106267][ T1409] sock_write_iter+0x445/0x490 [ 74.111118][ T1409] ? __cfi_sock_write_iter+0x10/0x10 [ 74.116518][ T1409] ? __cfi_futex_wait+0x10/0x10 [ 74.121453][ T1409] ? selinux_socket_setsockopt+0x324/0x3d0 [ 74.127392][ T1409] vfs_write+0x75f/0xfd0 [ 74.131709][ T1409] ? __cfi_vfs_write+0x10/0x10 [ 74.136594][ T1409] ksys_write+0x145/0x260 [ 74.141013][ T1409] ? __cfi_ksys_write+0x10/0x10 [ 74.145986][ T1409] ? __kasan_check_write+0x18/0x20 [ 74.151197][ T1409] ? fpregs_restore_userregs+0x11c/0x260 [ 74.157014][ T1409] __x64_sys_write+0x7f/0x90 [ 74.161724][ T1409] x64_sys_call+0x271c/0x2ee0 [ 74.166507][ T1409] do_syscall_64+0x57/0xf0 [ 74.171037][ T1409] ? clear_bhb_loop+0x50/0xa0 [ 74.175848][ T1409] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.181847][ T1409] RIP: 0033:0x7fbda259e159 [ 74.186362][ T1409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.206205][ T1409] RSP: 002b:00007fbda33df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.214724][ T1409] RAX: ffffffffffffffda RBX: 00007fbda2826090 RCX: 00007fbda259e159 [ 74.222813][ T1409] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 74.230895][ T1409] RBP: 00007fbda263506b R08: 0000000000000000 R09: 0000000000000000 [ 74.239001][ T1409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.247083][ T1409] R13: 00007fbda2826128 R14: 00007fbda2826090 R15: 00007fffc743ce98 [ 74.255151][ T1409] [ 74.258269][ T1409] ---[ end trace 0000000000000000 ]--- [ 74.263832][ T1409] skb len=0 headroom=128 headlen=0 tailroom=256 [ 74.263832][ T1409] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 74.263832][ T1409] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 74.263832][ T1409] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 74.263832][ T1409] hash(0x0 sw=0 l4=0) proto=0x0000 pkttype=0 iif=0 [ 74.263832][ T1409] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 74.263832][ T1409] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 74.266033][ T321] hid (null): invalid report_count 418678605 [ 74.321918][ T1409] dev name=tunl0 feat=0x00000006401d4869 [ 74.328208][ T321] wacom 0003:056A:00FA.000A: invalid report_count 418678605 [ 74.335637][ T321] wacom 0003:056A:00FA.000A: item 0 4 1 9 parsing failed [ 74.336682][ T1409] sk family=17 type=3 proto=0 [ 74.343414][ T321] wacom 0003:056A:00FA.000A: parse failed [ 74.353403][ T321] wacom 0003:056A:00FA.000A: probe with driver wacom failed with error -22 [ 74.516379][ T1402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.525090][ T1402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.530062][ T1411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.547024][ T1411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.547717][ T320] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input10 [ 74.567235][ T1413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.575938][ T1413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.589664][ T320] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 74.807067][ T320] usb 3-1: USB disconnect, device number 23 [ 76.069107][ T321] usb 2-1: USB disconnect, device number 25