last executing test programs: 43.097674471s ago: executing program 2 (id=152): ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x210, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@linear={0x0, 0x0, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '1024'}}]}) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x1fff}, 0x18, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000480)="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", 0x2000, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0xfffffdef) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x18) r4 = eventfd(0x9) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0xffffffffbffffc04, 0x0, 0x1, r4, 0x11}) r5 = eventfd(0x40fef) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x27800000000, 0x0, 0x6, r5, 0x7}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$can_raw(r7, &(0x7f00000001c0), 0x10) listen(r7, 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "470fb349ebc6afac", "3db574c6fa70e03d7dd6fc61bbf5709d1916e014a3a5e8d4a3c040de5475abb5", "2bb36453", "74419e10672511e5"}, 0x38) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200021002ebd7000000000000ae40000050000000000000014000100"], 0x30}}, 0x0) 42.932053938s ago: executing program 2 (id=153): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000003280)={0x0, 0xfffffffe, 0x8fe, 0xfffffffe, 0x2f6, 0x0, r0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x400, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x2, 0x19f}}], 0x1, 0x0, 0x0) 42.930950028s ago: executing program 2 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="500000003000050400000000000000000000ffef3c000100380001000900010067616374000000002800028008000200000000208e36a7e1fbc46000000000000000000000002000000000000c000300", 0x50}], 0x1}, 0x0) 42.882804883s ago: executing program 2 (id=155): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'vlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r7, &(0x7f0000000a00)='8', 0x1) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000a40)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x18, r6}) pread64(r3, &(0x7f00000000c0)=""/23, 0x17, 0x1) mount(0x0, &(0x7f00000006c0)='./trace\x00', &(0x7f0000000700)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001e006da72cbd7000fcdbdf250000000000000086ba63ad5c884fc3730b1e08c84089000000ffffe0000002000004d202002b00ff01000000000000000000000000000100000000ff34000008000b0008000000"], 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x4000) 42.303660012s ago: executing program 2 (id=158): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_membership_interval\x00', 0x0, 0x100) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') write$cgroup_int(r0, &(0x7f0000000800)=0x100000000, 0x12) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000840)={0xffffff}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f0000000980)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, 0x0}) write(r1, &(0x7f0000000880)="240000001a005f0214f9f407000904000a000000200100000000000e291bfe18211d491799", 0x25) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0xcf49, 0x19, 0x7, 0x99ff, 0x18, "000400000000e4ff"}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r6 = syz_open_pts(r5, 0x200) r7 = dup3(r6, r5, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000400)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000a00)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0xfffffffd, @mcast1, 0x100040}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000000}}}, 0x108) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x2) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 42.246831198s ago: executing program 2 (id=159): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) writev(r0, &(0x7f0000000140), 0x100000000000022d) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x822b01) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x2002) (async) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) (async, rerun: 64) write$char_usb(r2, &(0x7f0000000280)="e2", 0xff0f) (async, rerun: 64) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xf, 0x3, 0x1602, 0x2, 0x3}, 0x30, 0x1) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2000, 0x14b) symlinkat(&(0x7f0000000080)='.\x00', r4, &(0x7f0000000200)='./file0\x00') 27.230813584s ago: executing program 32 (id=159): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) writev(r0, &(0x7f0000000140), 0x100000000000022d) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000140)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x822b01) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x2002) (async) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x0, 0x0, 0x0}) (async, rerun: 64) write$char_usb(r2, &(0x7f0000000280)="e2", 0xff0f) (async, rerun: 64) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0xf, 0x3, 0x1602, 0x2, 0x3}, 0x30, 0x1) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2000, 0x14b) symlinkat(&(0x7f0000000080)='.\x00', r4, &(0x7f0000000200)='./file0\x00') 23.306212685s ago: executing program 4 (id=284): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb6, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0xffffffff, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x2004, 0x0, 0xfffbfff4, 0x4, 0x80000046, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xfa9, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x0, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x6, 0x55, 0x7ff, 0x0, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1fb, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8006, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)="80fd02000040cf9e77ebca720300090000000000", 0x14}], 0x1, 0x0, 0x2) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6e2976b5c43", 0x6, 0x840, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x13) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 22.901951767s ago: executing program 4 (id=295): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0010058}]}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in=@loopback, 0x80, 0x0, 0x0, 0x0, 0x2}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x400}}, {{@in6=@local, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) connect$inet(r0, &(0x7f0000000440)={0x2, 0x1234, @loopback}, 0x10) close(r0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r4, &(0x7f0000003240)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x66) 22.625346895s ago: executing program 4 (id=303): r0 = socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = getpid() process_vm_readv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/54, 0x7ffff000}, {&(0x7f0000000180)=""/152, 0x98}], 0x2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}, 0x0, r3}) 22.594662478s ago: executing program 4 (id=305): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x40, @multicast1}}, {{0x2, 0x400, @rand_addr=0x64010101}}}, 0x108) socket$inet6(0xa, 0x6, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 22.534781274s ago: executing program 4 (id=307): r0 = socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='\\,', 0x2) r2 = syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="5af4cb3fe2c026baa22ae8e386a3c78c0ee4ab82a0d0679a180419ed5b4fe0b9f3011d766d64f6c7b56f0607f2ace67131e41ce5889004e2334080912a56867c4ac855b4e76be7aa2426576aa4") ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002d00)=r2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000037c0)) socket$nl_audit(0x10, 0x3, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000200)='\\,', 0x2) (async) syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="5af4cb3fe2c026baa22ae8e386a3c78c0ee4ab82a0d0679a180419ed5b4fe0b9f3011d766d64f6c7b56f0607f2ace67131e41ce5889004e2334080912a56867c4ac855b4e76be7aa2426576aa4") (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002d00)=r2) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000037c0)) (async) 22.531650045s ago: executing program 4 (id=309): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x19}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, 0x0, &(0x7f00000000c0)=0x54) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000280)={r3, &(0x7f0000000180)='/dev/userfaultfd\x00', 0x480, &(0x7f00000001c0)={@_ha_fsid={[0x94, 0x7f]}, {0x4, 0xe3c, 0xffffffff, 0xfffffffffffffff7}}, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x46a}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.1342524s ago: executing program 33 (id=309): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x19}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, 0x0, &(0x7f00000000c0)=0x54) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000280)={r3, &(0x7f0000000180)='/dev/userfaultfd\x00', 0x480, &(0x7f00000001c0)={@_ha_fsid={[0x94, 0x7f]}, {0x4, 0xe3c, 0xffffffff, 0xfffffffffffffff7}}, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x46a}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.342724296s ago: executing program 3 (id=463): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x189d, 0x1a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') 3.521319749s ago: executing program 3 (id=469): brk(0xdb) keyctl$session_to_parent(0x12) 3.51487994s ago: executing program 3 (id=470): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0xd, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) write$UHID_INPUT(r1, &(0x7f0000000600)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x8, 0x12, r1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, 0x0) 3.462830965s ago: executing program 3 (id=471): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=0x0], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x9, 0xc0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c3003b11f90b"}, {0x5, 0x24, 0x0, 0xc6c2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@obex={0x5, 0x24, 0x15, 0x3e8b}, @obex={0x5, 0x24, 0x15, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xc, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x38, 0x61, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0xa, 0x5}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xc1, 0x2, 0x7, 0xa7, 0x1}, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@generic={0xb, 0x10, 0x1, '5V\'Wb,,\r'}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xa, 0x3}]}}) 3.305770111s ago: executing program 0 (id=473): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 3.254669807s ago: executing program 0 (id=474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000dcc5b730a388603247e2970c2301facc709e62d573e311820b76dbf3ae671bdace57eafd8fca921c9b25118363e45b3afa7ff562f1f097d5411649c40d0ede7331447a54a551217d592787e559614ca6a8c4945b0f90034447567d934aef341b63e3537f715d3766435486d458488d1ec24b56b0077bb06501e685ae94ef749e777a303f3b45cb57c310c36debdae1632bc3985a43816c1ce3d9b1e1d5aec6cb232565ee25ffa8d920c7e2bc694012afaa705f72c01895c1243eabba3f08137152fb211dfe04d55a1acbaffb81657409716d66f6e6f3ef02ad8d4c749cf76f0f6753a94e46d2b82dc22c47bc40c2fcd74d", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c090}, 0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0xb000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="6607388173ab0fc76fb4360fc90f01cb7666ba6bb74189000003c70fae6e2fc416610f2367260f01ca660f38817700c4c2459d78ad", 0x35}], 0x1, 0x55, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001100)=@vmx={0x0, 0x0, 0x2080, {0x7000, 0x5000, {}, 0x0, 0x9}}) (async) r5 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f00000007c0)={0x14, &(0x7f00000004c0)={0x40, 0x24, 0xea, {0xea, 0x21, "5b8067eb834644ba57b91a7d6f38bd7900981d4b35a8fd8042a2415b02fa9ee70b896a7e7ee510ca43f878c6a459021c070468ad75b5ccb278d3170a5ca4e909178e5530a6ba53baed6b4189f9d506f7646027f37e6b93ef3b44f5418ad51c85a3c27abfa01a1f6c7b08d99fb4439dfa5abee8946d9c1e04899aa44e7f2bae4778bbc5aca89b07fe7d6e3c44f8fd036d40ae9c6f8534702b614959d8e60d4cf3d023d6df82850ca0b312577250e1515333156a988ef24b8f1b030563d0fcc158de2932adab62abb1d2c40bb90ed3df195dbba35e75a90935e70333756c9df711cb23b65381364417"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x0, 0x10, 0x4d, "67c5c47cc22842b6ece1616626abb33f8cc49aea04b550ea355e5755036c478b6817abb51d25b9374583d5189735b67a6fdb21355b02804d08eee2962ebda118588d7323ed731296c6c615b19b"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000900)={0xc0, 0x5, 0x5, "4655bd4154"}, &(0x7f0000000940)={0x40, 0x5, 0x3, "2d5a1e"}}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x501902, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000140)={r6, &(0x7f0000000040)='/dev/kvm\x00', 0x6e0000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x7f000000]}, {0x1, 0x5, 0x7, 0x9}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000880}, 0x4048080) ioctl$SET_BITMAP_FILE(r7, 0x4004092b, r2) r8 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[@cpuid={0x64, 0x18, {0x1, 0x5}}, @nested_amd_invlpga={0x17d, 0x20, {0x61218810e121ad26, 0xe56d}}, @wr_crn={0x67, 0x20, {0x2, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x4f, 0x4, 0x80000001, 0x3}}, @nested_set_state_pages={0x140, 0x28, {0x1, 0x28, @unmapped=0xfffffffffffff000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2401, 0x2, 0x10000, 0x401}}, @in_dx={0x69, 0x20, {0x303d, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xe3, 0x4, 0x45, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}], 0x160}) 2.63467815s ago: executing program 1 (id=476): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) (rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) (async, rerun: 64) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000200)=0xa, 0x4) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x79}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0xa031, 0xffffffffffffffff, 0x9154e000) read(r4, 0x0, 0x0) (async, rerun: 64) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, 0x0) (async, rerun: 64) r5 = dup2(r3, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={@remote, @private0, @local, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x7c000f, r6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs/file0\x00', 0x80661, 0x22) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.554829078s ago: executing program 1 (id=477): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) (async) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) (async) restart_syscall() getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/147, 0x93, 0x0, 0x0}, &(0x7f0000000300)=0x40) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0xff, 0x0, 0x200, 0x2}, &(0x7f0000000340)=0x20) (async) fsetxattr$security_capability(r0, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) 1.746555701s ago: executing program 1 (id=478): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000380)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='projid_map\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x6}, 0x6) userfaultfd(0x801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000440)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r4, @ANYRES16=r5], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0) write(r9, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x7fffffffffffffff, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x20081) ioctl$BLKSECDISCARD(r10, 0x127d, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) r12 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x42, 0x0) io_submit(r11, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, r12, &(0x7f0000000640)="f70b7da145991d52e2f69ae2095fe19a7bf0403eacf8e916f21c5eeb2dafeb54aa3a9119785eacb94cc597e5f62ccd13781448a9f53ec4475850c90e5ac64cc51e72cf017ae7ee553deb3d670a6190e9cf2136ede600000000150073e708b90349261f7fb5d8e23e3e61926e6909e180de28d9", 0x73}]) 1.641890212s ago: executing program 5 (id=479): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) syz_usb_connect(0x0, 0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) 419.679727ms ago: executing program 1 (id=480): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x1008c10, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='net/unix\x00') pread64(r4, &(0x7f00000007c0)=""/168, 0xa8, 0xe0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000005c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x18d042, 0x15) pwrite64(r5, &(0x7f0000000640)="ff", 0x58200, 0xfb2000) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x2}) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000080)={0x42}) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x210, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0xd8, 'crypt\x00', {'aes-cbc-elephant:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x1}, 0x20, '16'}, ' 1 integrity:8:none'}}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0x40) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f00000016c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) getpid() 419.279957ms ago: executing program 3 (id=481): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x450002, 0x181) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x901841, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f00000001c0)={[0x4, 0x661f, 0x1, 0x3, 0x7ff, 0xfffffff9, 0xf, 0x3, 0x40, 0x9, 0x4, 0x0, 0x0, 0x100, 0x4, 0x9, 0x80000001, 0x8, 0x8, 0x0, 0x73e, 0x9, 0x4d, 0x10001, 0x81, 0x1, 0x0, 0x8, 0x7ff, 0x2, 0x8, 0x6, 0x2, 0x3b, 0x0, 0x10, 0x40, 0xaea, 0x3, 0x8, 0xd7f, 0x0, 0x6, 0xa0000000, 0x3, 0x5, 0x1, 0x0, 0x5, 0x8, 0x5, 0x1, 0x5, 0x96dc, 0x4, 0x4, 0x393d, 0x5c57, 0x3, 0x7fffffff, 0xffff8000, 0x8001, 0x7, 0xfffffff7, 0xff000000, 0xf13, 0x2ccc, 0x2, 0x84, 0xd, 0x8, 0xffffffda, 0x300, 0xa95, 0x7d, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xb5, 0x7fff, 0x1, 0x6, 0x6, 0x4, 0x0, 0x3, 0x1000, 0x4, 0x1, 0xb1, 0x6, 0x7fff, 0x401, 0x5, 0x7c35, 0x80000000, 0x4, 0x0, 0x2, 0xffffffff, 0xfffffff9, 0x9, 0x10001, 0xff, 0xffffffff, 0x2f7, 0x7, 0x2, 0x7, 0x2, 0x7, 0xfffff768, 0x80000000, 0x4, 0x1c0000, 0x5, 0x1, 0x800, 0xfffffff8, 0x200, 0x10000, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0x2, 0x0, 0x5, 0x1000, 0xd, 0x5, 0x6, 0x81, 0x4, 0x6, 0x4, 0xc87, 0x8, 0x8f, 0x1, 0x3, 0x5, 0x401, 0xc55, 0x100, 0xfc, 0x3, 0x4, 0xfffffffd, 0x9, 0x8, 0x1, 0x4, 0x4, 0x4, 0x8, 0x5, 0x0, 0xc, 0x9, 0x2, 0x5, 0x4, 0x3c5a, 0xba9, 0x81, 0x7, 0x125, 0x0, 0x7ff, 0x7fff, 0x80000000, 0x5, 0x5, 0x3, 0x7f, 0x8, 0x2, 0x3, 0x2a24, 0x7, 0x8, 0x3, 0x1, 0x2, 0x0, 0x5, 0x3, 0x3, 0xed, 0xf192, 0xad3, 0x3, 0x80000000, 0x1ff, 0x8, 0x9, 0x5, 0xc, 0x1, 0x4, 0x9, 0x8, 0x1000, 0xe, 0x3ff, 0x1757cda7, 0x5, 0x3e, 0x6, 0x1, 0x5, 0x1, 0x1, 0xfffeffff, 0x3, 0x3, 0x9, 0x6, 0xffffffff, 0x62, 0x1, 0x4, 0x0, 0xca59, 0x0, 0x0, 0xaf, 0xa47c, 0xffffff30, 0xfffffffc, 0x5, 0x1ff, 0xffffffff, 0x4, 0x9, 0x1, 0x3, 0xfff, 0x4, 0x1, 0x6, 0x1000, 0x3, 0xff, 0x4, 0x39, 0x7, 0x63, 0x4, 0x8, 0x3, 0x5, 0x9, 0x97, 0x2, 0x3, 0xfffffffa, 0xd, 0x2, 0x9, 0x7fff, 0x570b, 0x5, 0x5, 0x7, 0x200, 0x7f, 0x101, 0x4, 0x8001, 0x80000000, 0x7f, 0x2, 0x80000000, 0x6, 0x8001, 0x1000, 0x80000000, 0x6a, 0x3, 0x8, 0x9, 0x10001, 0x9, 0x80000000, 0x8, 0x1ff, 0xd2, 0x2, 0x2, 0xfffffffa, 0xfff, 0x0, 0x4, 0x0, 0x3, 0x10001, 0xfffffffb, 0x0, 0x1, 0x88, 0x4f, 0x8, 0x8ee, 0x0, 0x9, 0x5, 0x8, 0x9, 0x26, 0xb, 0x3, 0xf, 0x8, 0x91, 0x8, 0x4, 0x0, 0x5, 0x1c15, 0x8, 0x0, 0xef, 0x8, 0x5, 0x1f2, 0xfff, 0x0, 0x8, 0x3, 0x9, 0x0, 0x1, 0xc0e, 0x0, 0x6, 0x2, 0x0, 0x1, 0x7, 0x200, 0x4f, 0x8, 0x3, 0x4, 0x6, 0xfffffffd, 0x2, 0x5, 0x3ff, 0x6, 0x2, 0x6, 0x9, 0x8001, 0x9, 0x8, 0xce, 0xed13, 0x6, 0x1ff, 0x4, 0x4, 0x3, 0xfc, 0x9, 0x72a4, 0x2, 0x10000, 0x5, 0xa042, 0x8, 0x8d79, 0x4, 0x7, 0x5, 0x9, 0x6d1, 0x5, 0x80, 0x81, 0x2, 0x8, 0x4, 0xfff, 0x0, 0x0, 0xe, 0x5f, 0xfff, 0x80, 0x4, 0x9, 0x0, 0x8, 0x5, 0xffff9fa8, 0x9, 0x3ae9, 0x9, 0x2d, 0x81, 0x12a000, 0x81, 0x101, 0x9, 0x9, 0x411, 0x3, 0x7, 0x3, 0x1, 0xc0000000, 0xfffffff9, 0x9, 0x8, 0x800, 0xa5, 0x8b, 0x8, 0x1, 0x9bc, 0x8, 0x2, 0x3, 0x3, 0x21, 0x7, 0x4, 0x400, 0x7ff, 0x8, 0x7114, 0x1, 0xffff, 0xfffff800, 0x62d, 0x6, 0x401, 0x9, 0x7, 0x638, 0x3, 0x8001, 0x7fff, 0xfffffffc, 0x1, 0x3, 0xba, 0x1, 0x1ff, 0x0, 0x2, 0x7, 0x9, 0x80, 0xbc2, 0x5, 0x0, 0x200, 0x200, 0x7, 0x9, 0x2ba5, 0xc025, 0x8001, 0x80000001, 0x0, 0x6, 0x3, 0xe7, 0x6, 0x61584c7f, 0x4a5d, 0x40, 0x2, 0x68, 0x7, 0xb, 0x5, 0x77, 0x81, 0x9, 0x9, 0x9, 0x9, 0x5, 0x9, 0x4, 0x7, 0x81, 0x64, 0xc43a, 0x7ff, 0x6, 0x1000, 0x2, 0x81, 0x8001, 0x3, 0x6, 0xfffff000, 0xb1d, 0x0, 0x0, 0x8000, 0x3, 0x101, 0x4, 0xfffffff7, 0x8, 0x9d, 0x3c9, 0xfffffff9, 0x0, 0x40, 0x100, 0x9, 0x18, 0x5, 0x9c, 0x2, 0xfffffff7, 0x0, 0x6, 0x2, 0xe, 0x9, 0x6, 0x2, 0x1, 0x8, 0x59, 0x691, 0x3, 0x2, 0x53, 0xfffffff8, 0x5, 0x6, 0x5, 0xa, 0x7, 0x200, 0x2, 0x780000, 0x6ab, 0x1ff, 0x3, 0x2, 0x7f, 0x0, 0x9, 0xfffffffb, 0x5, 0x2, 0x4, 0xffffffff, 0xff, 0x2, 0x40, 0x9, 0xfff, 0x3, 0x400, 0x8, 0x15, 0x6, 0x5, 0x7, 0x0, 0xfffffff8, 0xfffffff4, 0x4, 0x3, 0xfffffff8, 0x7, 0x3, 0x6, 0x6, 0x3, 0x1ff, 0x2, 0x80000001, 0xffff, 0xffffffff, 0xd16, 0x0, 0xe6d, 0x2, 0x7fff, 0xff, 0x5, 0x3, 0x0, 0x9d1, 0xfffffffd, 0x6, 0x7fffffff, 0x100, 0x7fffffff, 0xe06, 0x7, 0x8000, 0x9, 0x80, 0x56, 0x5ce, 0x3, 0x8, 0x1, 0x6, 0xfffffffc, 0xeb, 0x1, 0xea, 0x45d2, 0x0, 0xdb, 0x81, 0x7fffffff, 0x2, 0x6, 0x9, 0x8, 0x8, 0xa, 0x6, 0x1, 0x7, 0x7, 0x200, 0xfffffffb, 0x8, 0x3, 0x8, 0x381, 0x2ff76c95, 0x9, 0x50, 0x3, 0xa8, 0x6, 0xfff, 0xfff, 0xa, 0xffff, 0x9, 0x7, 0x7, 0x8, 0x3, 0x8, 0xfffffff7, 0x1, 0x3ff, 0xfffffc00, 0x2, 0xe, 0xca7e, 0x80000001, 0x7, 0x101, 0x9, 0x8e8, 0x2739, 0x89d, 0x0, 0x594, 0x80000001, 0x4, 0x8, 0x4, 0x6, 0x6, 0x8, 0x0, 0x8, 0x3ff, 0x6, 0xffffffff, 0x7, 0x6, 0xf, 0xc5, 0x7, 0x3, 0xe31, 0x2, 0x4, 0x6, 0xd, 0x9, 0x7, 0x267, 0x4, 0xc9, 0x3, 0x9, 0x8, 0x5, 0x7f, 0x1, 0x3, 0x100, 0xaa, 0x2, 0x7, 0x8, 0x80000000, 0x4, 0x0, 0x8, 0x1, 0x9, 0x3, 0x5b31, 0x99c, 0x5, 0x566, 0x8, 0xb57, 0x0, 0x1dc, 0xfffffffa, 0x1ff, 0x7fffffff, 0x6, 0xd51, 0x400, 0x2, 0x2, 0xfffeffff, 0x5, 0x3, 0x80000001, 0xcfe9, 0x0, 0x0, 0x100, 0x3, 0x0, 0x9, 0x3, 0xc63, 0x5, 0x8, 0x0, 0x10001, 0x8, 0x7, 0xdb, 0x2, 0xfffffff8, 0x20d, 0x9, 0x748, 0x100, 0x2, 0x0, 0x6, 0x7, 0x2, 0xc000000, 0x7, 0x7ff, 0x4, 0x8, 0xfffffeff, 0x1, 0x8001, 0x3, 0x6, 0x3, 0x238d, 0x9, 0xffe, 0x5, 0xe, 0x2, 0xfffffffc, 0x5, 0x0, 0x4, 0x401, 0xe48, 0x1, 0x7f, 0x800, 0x1, 0x9, 0x9b82, 0x3, 0x1, 0x1ff, 0xb, 0xfffffff8, 0x4e40, 0x1, 0x800, 0x800, 0x0, 0x81, 0x5, 0xffff8001, 0x3ff, 0x7, 0x1, 0x2, 0x2, 0x8f, 0x64, 0x6, 0xfff, 0x4, 0x5, 0x3, 0x81, 0x4, 0xffff, 0x8, 0x6, 0xce, 0x80, 0x3, 0x3, 0x3ff, 0xa, 0x92b, 0x956, 0x0, 0xfffffff9, 0x9, 0x6, 0x4, 0x6, 0x10, 0xfffffff1, 0x40, 0x1ff, 0x2ca, 0xa, 0x9, 0x5, 0xab, 0x71752321, 0x8, 0x7, 0x3, 0x2, 0x2, 0x0, 0x74c, 0x3, 0x4, 0x6, 0x6, 0x5, 0x3, 0xf82f, 0x5126, 0x0, 0x10000, 0x3, 0x0, 0xfffffff9, 0xfffffffb, 0xf51, 0x7, 0x5, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x400, 0xfffffffd, 0x4, 0x7, 0x0, 0xf, 0x3ff, 0x10, 0x4, 0x3, 0x10, 0x6, 0xa, 0xc, 0x6, 0xa, 0x80, 0x401, 0x0, 0xe, 0x1d, 0x1, 0xd, 0x8, 0x5, 0x8, 0x7, 0xffffff80, 0xfb, 0x10001, 0xdea, 0xd906, 0x1, 0x5, 0xa, 0x40, 0x8, 0x2, 0x9, 0x40, 0x6, 0x5c, 0x67d5, 0x2, 0x8001, 0x6, 0x6, 0x9e9, 0xd, 0xdc, 0x9, 0x9, 0x80, 0xfffffffb, 0x0, 0xcc6, 0x2, 0x0, 0x400, 0x62bb9678, 0xb20, 0xfffffc01, 0x8, 0x81, 0x101, 0x7, 0x5, 0xfffffffb, 0x8, 0x7, 0x10000, 0xe, 0xf0, 0x0, 0x1, 0x5, 0x75, 0xb, 0xffffffff, 0x0, 0x6, 0x7, 0x8, 0xd444, 0x6, 0x1, 0xf, 0xffffff00, 0x8, 0x4, 0x0, 0x10000, 0x1, 0x3ff, 0x3, 0x5, 0x1, 0xbf, 0x9, 0x9, 0x8, 0x4, 0x5, 0x8, 0x2, 0x7b, 0x7, 0x0, 0x7, 0x3, 0xffffffff, 0x2, 0x49c3, 0x0, 0x0, 0x800, 0x3, 0xffffffff, 0x9, 0x5, 0x9, 0x101, 0x8, 0x1000, 0xd79, 0x0, 0x8, 0x5, 0x9b0b, 0x1b14, 0x1, 0x178b, 0xfff, 0x400, 0x2, 0xd, 0xfac3, 0x9, 0x800, 0x8, 0x0, 0x800, 0xfff, 0x4, 0x2, 0xd]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x3}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0xb, 0x80800) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000080)={0x0, 0x0}) 419.161407ms ago: executing program 5 (id=482): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x402, 0x0) ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x25000, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}, @name={'syz', 0x0, '3\x00'}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x48, 0x7, 0x2, 0x37, @mcast1, @private2, 0x80, 0x80, 0x8, 0x7}}) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./config\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='dummy_udc.0', 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 360.647383ms ago: executing program 5 (id=483): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xa7d, &(0x7f0000000280)={0x0, 0x18af, 0x2, 0x1, 0x259, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000140), &(0x7f00000004c0)=0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) syz_ublk_add_dev(r3, 0x0, r4, r5, 0x0, &(0x7f00000005c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 359.212313ms ago: executing program 3 (id=484): r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/igmp\x00') read$FUSE(r0, &(0x7f0000004c00)={0x2020, 0x0, 0x0}, 0x2020) read$watch_queue(r0, &(0x7f0000006c40)=""/221, 0xdd) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2008800, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0xffff, 0x2000, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) close(r4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300091b0000000000000000000000040019000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002a40)="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", 0x2000, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004b40)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004bc0)='./file0\x00', 0x40042, 0x1) 359.014663ms ago: executing program 5 (id=485): r0 = socket(0x9, 0x803, 0x3) write(r0, &(0x7f0000000ac0)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r2 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={r2, 0x0, 0x0, 0x8000}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000b00), 0x4) (async) sendto(r0, &(0x7f0000000b40)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/243, 0xf3}, {&(0x7f0000000d40)=""/4078, 0xfee}, {&(0x7f0000001d40)=""/250, 0xfa}, {&(0x7f0000001e40)=""/140, 0x8c}, {&(0x7f0000001f00)=""/157, 0x9d}, {&(0x7f0000001fc0)=""/135, 0x87}, {&(0x7f0000002080)=""/172, 0xac}, {&(0x7f0000002140)=""/72, 0x48}], 0x8}, 0xfffd}], 0x1, 0x10120, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0xfffffffe, 0x930}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001600010000000000040000000a40"], 0x20}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000021c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002200)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000022c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002380)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000023c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002400)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002440)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002480)) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000024c0)) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) 328.646646ms ago: executing program 5 (id=486): brk(0xdb) keyctl$session_to_parent(0x12) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001200), 0x3af4701e) r2 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000017c0)={0x1, &(0x7f0000001800)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000001240)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f00000012c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x7, 0x200000100}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001740), &(0x7f0000001780)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001840), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r3, 0xe1e70000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000001500)={0x4, 0x0, 0x0, 0x200, 0x138, 0x1, 0x0, 0xa8201, 0x0, 0x0, @by_dev={r6}, [@crypt={0x0, 0x3418, 0x0, 0xc8, 'crypt\x00', {'aes-cbc-tcw', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '128', 0x20, {@ram_num={'1:', 0x1}, 0x20, '8'}, ' 1 allow_discards'}}]}) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file0/file0\x00', 0x0, 0x15) 200.389019ms ago: executing program 5 (id=487): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="400f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x20, 0xb, 0x2, "85e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x21, {0x21, 0x30, "5e3fd56f8654258355e21ea621b885c83ee0c677668f4459863bba426da02b"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x11, 0x68, "c8d4b36ad8f9ae9e52b386ab69f92c18756c970aa17d272a4915514320effd2b60c8fca09d8a814bda818994e9b6fb439c1b4ce51de7c67a585364583486a9647ca2a7cea6b20e0a93a8d19d1ed277c593209eb022d943b9b87a857de9911905e9cf5f95c23d73cd"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x81, 0x2, "a1b9"}, &(0x7f0000000380)={0x20, 0x82, 0x1, "cb"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, 'o'}, &(0x7f0000000400)={0x20, 0x84, 0x2, 'G '}, &(0x7f0000000440)={0x20, 0x85, 0x3, 'JpI'}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 200.122289ms ago: executing program 0 (id=488): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x1501) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x138}}, 0x4004000) r1 = gettid() timer_create(0x1, &(0x7f0000000380)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f00000003c0)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000400)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000440), 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x6) r4 = socket$inet6(0xa, 0xa, 0x9ee3ec3d) ioctl$int_in(r4, 0x5452, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x6, @local, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="1ce02c7a", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x3, 0x1c000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) timer_gettime(r2, &(0x7f0000000480)) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x2}, 0x4, 0x201, 0x7ff0bdbe, 0x0, 0x0, 0x8003, 0x0}) openat(r3, &(0x7f0000000340)='./file0\x00', 0x800, 0xa0) 198.843989ms ago: executing program 1 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="50000000300005040000000000000000000000003c000100380001fe0900010067616374000000002800028008000200000000208e36a7e1fbc46000000000000000000000002000000000000c000300", 0x50}], 0x1}, 0x0) 146.713605ms ago: executing program 1 (id=490): mremap(&(0x7f00005de000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f000025b000/0x3000)=nil) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) futex$unlock_wake_list32(r1, 0x601, 0x2, &(0x7f0000000780)={r2, r3+60000000}, &(0x7f00000007c0)=0x5, 0xa) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0xffff}, 0x6) write$bt_hci(r5, &(0x7f0000000440)=ANY=[], 0x17) (async) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c) futex(r1, 0x4, 0x0, &(0x7f0000000000)={0x77359400}, r1, 0x1) syz_io_uring_setup(0x791c, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000004c0)=0x6, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r7) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4806}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r8, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4058004}, 0x20000000) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x104, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408d1}, 0x8000) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100000000000040"], 0x80}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000055000/0x18000)=nil, &(0x7f0000000940)=[@text16={0x10, &(0x7f0000000900)="b8d2008ee00fb265000f01330f01cfba2100b000ee66b803c86a060f23c00f21f86635000004000f23f80f01c32e2e6636260f201f8fc9b00189c2000f01c4", 0x3f}], 0x1, 0x42, &(0x7f0000000980)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6}, @flags={0x3, 0x2c0683}], 0x2) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x101002, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000700)={'veth0_to_batadv\x00', 0x20}) (async) futex(r1, 0x86, 0x2, 0x0, r1, 0xfffffffc) 81.398641ms ago: executing program 0 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000440)='sys_mnt\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='a=go=zstd dict=d', 0x10) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af24, &(0x7f0000000580)={0x0, 0x7ffd, 0x0, 0x0, 0x0, 0xd5d26ffe}) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0xc0042, 0x20) fstat(r3, &(0x7f0000000140)) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0x45}) (async) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0xb, 0x0, &(0x7f00000003c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x80, 0x0, 0x6, 0x3b4f, {{0x8, 0x4, 0x3, 0x18, 0x20, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0xb, 0x56, [@empty, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r6) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0x1604, 0x30, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x11bc, 0x1, [@m_ipt={0x10a0, 0xc, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x58, 0x1, 'nat\x00'}]}, {0x1004, 0x6, "5c590e2d0e0b4e6c02595c60ac6c29d5243e495f6572c7d3648b9c7787bca014b714c52c08e544a06d409b998b346f7731b80a55d000964d42b0b54dd14c75a6b94ebfa5d51fc30d092b4c2b2d2ded52a3099b382fdb2b4168740298658e925c44248e4a2c9d77d23f044b61418ac4fd6772d04244c86358ac880509e8327639f2d176618300d39988ad1a291f4abdcd4fddd7e1288bc3fd3659c7084bc408ee7b1c8d3abfc127eb2ccc58fe047ccfd6b594e8d70a85235373795a9c66b23807c1e85514714a1bcbe643ea718ff9bd928a8c30af737b5bf0f0d061eb52f43d930a4a186a2f700e8ed58e5da1037f4774433a3adb9512671dd84ba674b9a7e8de79b3d08a0e8fd17fc96d4089c726ceb7e74bf5b21831eeeeba65832a15743fac49d9ddc739994e87740b714ca0f9b6950927c4b624fee610a31edeeb3f41e386c8ddb64c42d3f82a5fae69c9b197eaabdf5f83a82c1da2ea0254149d6e561ed0a7ea33f26f8636e022156f4667ce1f54bdc156cc6d28cb3dabe6d0c6a7ea02e8d80a1193e2ab5246884b0a5c8d3ae30743dbf4ab592ae3f5e43c3654e4adf1b5e102c58549498b6d4ab45fc45c7c4c00c0b273497a82f396a197549f65244b5df17809cf27bd54e379d683ddef01477770a4a06bdff06b7e0b531290782312a483538a5ea19393e0086fb881bc23fb4eaa983584183a58e0745f9c8c0f6364e8abbc61a88d1ebcb3c09182a169abdf75b0cc1559e784eb006e047fdc5c14d133dd005bc7d20ddea1043c27b8f1c9a8f904d606b53f3d030c01ee34fd13c3fc4bbd8407350f91e27290fd80a605907edf8f31aa61e3267773d2e9e82afeb8ff4705ee8d91b47a89a4435fb4c00a972b420ef04a986437599a6bbf8df60208e3d66982ed5eb1b2c8387d467f5bfa166234a1e260e19478f995f63d99dba902e09c560381c9ca1d37ed2130676381d10095bf7d3bf560758bf3e24d4cc552eed990244efca0e7f255339becf9952a2921b3cfc2bb4d988b15016c7fdf6c0f663a3a48e605236cb38af42c257c32db36f061825a35b3ea6490ca3acf780346c512776b38d3f5463f2685adcc5da008de3a197d93936c2eb1712f2c1b2de853a2b3a05d05e087a30350d14359760ed619a75cc00dafcf432efece7166277aad2e5db3431d4035264eccd99a5e8f377c5a374086f75f9d4777afbbbd3672394eed6ff8935fbcb8f0b5a541e01373af51cd6fe792faa1a5c3a369430ac789ca344a44741cecb88332b3becea6dd0c2ef0b99decfd2d39125d97c26c565c31bf9dde9d2a11572ea2b48ca2584360064a7393aec0fcd9acaee76d073a4135ced6ba9fa2a87ff26faa7b9755ae095193b394714396517a1a69c8b22f00196bb2a0802c12f9bde0569df9ebd19d4d77dc6ca6f26d7e163d915f4d4fa96e30627a61e0ccebd26448df7ffc75d2db7e9993d48092c6d229df814e7739d6c71d026cc2c5533b2c928663bb298294eb06b0f81de99b192344fe70bf780f815b2556eaee31e8be2ab04b6c5062d70e063e2ae7e49ea87d074b79a259707f2f403937ea9e9be143e2fce7a0edbc042a6f4c3fd7dbe52d631fc4a8b9a43ddcb5144560f0cfc423014ce7eec173b3a1446d7f327f7a93dd43494b22a2f7c136bfc0bcdada20f1ed055b71056348a43f09526ad70336501cbe2d5cbbb912c92c0075422c8b050273dbb3ae896b602870124b99f5f5d86de5e2b198ca8bd4e1d532c16d974895bb7748ac193fd9cc1c91ebad4698c7adb7e360b3dc1ec2eb16f280c8dbe652856f878fc38197075c7d853cca9f98c6fb33e161aa4f9f3d40f48869b428cb5ee6c35922ea21267f6940cc6c71b3169896ece6060bee4dd4fc463e84016be51c088323d6610a4a21dd720203ae81a289c525214a4185e5fe56b5f2a149d6b62e2ea9b020e9401e6ee8999604dc0d96d8f37dd5fac0769054ce9e2d34578a7a272b7d98cdc124a5305ca78daef96ebb6ec6e96b80c15a97bd04a1b170b6d3a7ac2da9f19087668b58c8468d105a1e4c12577b292d8b53d1a2abbf53fac789dc115124bf14518c1974aac76f6de088b5dcdcd3725a6dad4f2e2e0392b41d1222bf2a22b25afe9d514dbd87a0a3d89e7ac6384f596346da52523664defe42097858648b550e720b0bc17778b94bc428e230c6191d478b9d2d45eeca85bf7eff6e6e809bd589e19dbf49b9d74a367306bb7ff25706ef74653c90481c70cd85dc66b719c3fee0c4ec44ebcee718dcd1784752c3faf1a1ec9f9caa6f2d1b713311fb03699111f3ae896565fbcc87ce1fe2698baec06f824ac8c16de6226f5d21df79599d47b9018c47da4b7d5133193a07839711c797bc12bf9565a86c29e8d35058aa9faea796300dc7e81fdcb0b8aee0bb8c4ad627f9dc0008e5c84875ce499209ebad38be0c2973f3be5eafeac2470761b8f77e87dfd9fa45beb1867d83b3407885a100d4bf425b6fc3e2d048ff344f929d530866fba52140480ff3476160b3799ab82554b5d54b3e9af6756d31681a0caea88049826b2dc41d8aa4782e8df1b3e73339f4d0f614088e6e5fddd05873f546dc667e8622ab28932b8e0a0ba40b4e513a6a9fb308b43f08acd9071e131ea3136efc24b2bce2ae2f01c068e1b7b7cacdc14a89b42383a6f927f569e610ccd7f7364af3bb434dc7a55984363cf6eb41504e07e35aa370472badb38ee01137771045834ec4efda1bd692bcd534851f248b1b359df9c75ce172d7aa70d76a76d91dcfc1f8e91b160c1d9d127df98e650ee935fbf61039fb6ff07e5f4c52dbdf6afc6982337f82b9c7c25d8ce3414dc12f8d368f4b48047e2ba2653e3477f16faf3e6e0c80961ad91973649340fed3dbfbbf474499ed61317a088f9c03a27fadc5d015e152df08a6eee95a497035ba442b5dd368959b0f85a16ee5f91258b743ce90bba694617e454337920013fae37b3320698ec07d2473f9e51bcc32e2aa1fd286a094cde68e5a06756c8bd84a278b77079fc40b96bdc8a426a7bb0c2d0a99e891e6df92155151c994c3acb4e8e57e3a58930cd3d4590297817da4bbaa42b26a34a754f757c0e00190471d8014bc77ef90d4446312b034c5e9beaa99a7accd72e8860cd78a986307509ff31ca3e8667942aee0b5a673817b07ea25e19ddcf8f0bcaaa57d41d8fb685612eebc6d31553908432283c0c65c05451390a61d49d0584054cd4c5e089ae4d30f8f2708c749194fed16a3b0a3e1c13950154befde8e6746956e3e75ee69164351046a4d3588987208d4ed7c53fb644d98440cb73c1cfc22dc5b486f96554353f5637dc59930c86f918f65d6bded082507da00484976198629cf89659e64bb08d9632d939523b98aabf549a232ccf5fcebdabc4064343a2088e84676c382e62eca20ea9a1ebd811ccadab089295ae037f3a07d0d5bdbc516bf1192f5808196c30f87b05fb59004a59e4708000cffe8ad6a4f3b9433608b5e8df8f620f55f64c7aa268b505e779a34330fc0fa0e3e5c2e4609da2c70c05db08da19cf9f43b26d48c2061d7881d483ec48e0021b220261609a1cecea5a8657f8b91e7739ae1329702e9c42b3d6d5c7475f2c613bbe90dbc7e7f66917ea066e910e5ffbec6afff5f4ccd0eda55ed789d418c7e77705d5a95a29d57462d9f8401f43c5470351abdc2da7c8659786ba932b227a44ceec1f7a99129db6e34496f377b11257fb0d7616db848d9d324453561cbc2bdeb96186d4ba5dd05ad405bf3cf6cfed5514920b550465b0f778490920e881d8455fb65f1cb27dc78a1deec4e3cc25e3c2ece6c917238079a61898efb2fa47f8eb6687967b190426a5a7e8816a5396c2d965b1275553942996320ab682a22988eb4e899850c82b65495ea47088113c524124cd7d21fdbfbf2bfabaa19f0bc6176f5fb8cbca47947caa38af252f093bbe6c101b3b06d348ab68b4695393ac3efa498a860cbf0419b9071f8b055e2804d7c5f76c23aadaf9a234ff7f7e315cac68c733f42b7e9842d6aebd246a92343bfcd5773d9b36d835f0b889b66a7c82478fc1acd3b60d152809acf2ad1acfe00ff86ace7d2940638b931a2b84e985c4d1ec2c9607110b1820437b8628c8ccbcf0a38ab55ac5cbe4f102a3b35d9cdfca35a7a284dad6e4e9552124c9481b36e69d18c1aaa3eb8e72fa4a112d2a75bdfcc2835fa1cd792984d384fe4d7a31524fe2ee42d1b24824014bdd5007e3813c29a830f6063500f602ff682fe985bcbf013680e5237cec8502c6c5172536b63d25bc44f4e6d2c0fc6c058084d9b71c1d8024f57f677914fcb2c29a680348e98f0389bbbf2c0ea611bbc701feaebd1f3c632ba0f9af70d277517cdebefe893e489f141478b9dd3f080b78ac7931055a871b767bf81ae6617430ae505f3091b846eb144e17f7799efbd0f512db13101e5335a0bec97fcffd262bb17acd83d864521f0c6124195f48e13869f4bb0431f37a9414ddd897960d05d7f91df8da5da29ce574e81a909af42fe5ba65657dabadbc239f8cbb0430b7048ca1bac8bb83db365960e1d7bdba2e74a100b13d65b41ded7f1f1a7e5d17d454be1260c73290c04e1e7bc197a45886f271d1a6a155b72087fc16fd5588018a155bc3f6d078e2b6a530e97be09b8299af02ca50e2f5fa2a8253198f31ebbfe9f48ce5bba92dc96a065589006bf6fde43df0d968425084b34d25c66321704363f9a5d56d3409554fc155ec16ff8347d19aa2c6b63d536f014f84f1654946370f3cb7ba949723d2a4664d22e5cbb0d6a0b908ad5898fe65b0b182a9705e33328072347c6dc73466a3ba923ffa494f7c8f014fd4c88a5889368c56e6d258903d0a13eada9ee43a82735026fcec01dcb3049558aea7cb1d34ffe6d8d24a5f582bc1dc55d662ff1bd8283003a351298eba3dcc2c965ead65c643cb4641cba054d70a9200342aecc24f39d2cf6b3bb0857e22fc84f19df6effb5d7d3eb1f676e27a246bf384855a0ef286facda3c972306ef6736a8ce8b0288419ad4249bb269487110ca94ceb8e0d6bb81744e66920ff54d97ed801d3f9135f2bb9f943cbe21e4f21e579de396025e1b0ece556cc6956714966e90df546c9b60440f7e6c14a6c6fdcd46177ddeb74199c370bc9e65c1c17237b32484f6e5e4fe0348b42924d44d5d3637b93156bd1e7e4c43b4e689c6cd9443c39367b0c84539316d6432999ba11e3d08e1e93b70386c1c5a07b6f8c35df35058c8743cff985098ed692f4f6e84e274543a8fdd85cd58bdafb16fa41d8e727a2c168a1860f2a3b6dd0c27cc0f98be0697da763d275da2862c7a775d50f9db832fbf4ef3f2ec5c9dde79d43d3468283fae592ea6844929842f226dc8711e69a0a2668e9f305bcbeba8a4a5edda2e76373251545a443f3ca730e242168e0b30bc21d5a8a41321b4937265f54c648d3b9878138c91699e39d3a25badb704a954193c7208f9f275669bcf3d2bc446ae086a53aefee6e39706b453a73c76cccf60edf9eb25ac3e59e9bff408b0bc20bf60ba050edf16d37b84645bd9bae994b2903d44cd3d575f085250a9aae6fd8efc0c2fa01a67a7461c414e8f2fd32ace19bbc8697345bf72614d656b715b4b5b3450bfcc0112e77a2adfb56b1bc6eb5dd98f72ff2ac41fc4e1d970e747b752d8469595c1f2f3fe5ecb2d4dd9dcb0bbc4d789d203e3621cc5bac668f59aa00161209a1931d8ae929b19215e0cad3af10864b27dc998d5e079d347971154c7624b2e3b2ffe0995805db3decb25deb73ed97e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x68c41fc90da30b90}}}}, @m_ipt={0x118, 0x9, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xe8, 0x6, "12760cd54eca35163f12223a006f2432dad9ef5aa6bf3ee02a81c8a30683fada5d0e5b9bbfb26d574d3b234e704cc53723f89897dbce86d1e8da276440b67a1721a615707c64a2937bc0806ed443a66151cdfc437af1cbe601e0e652fc000c24bd2209d61c0cce6b04e450f8f7cb782d286995409a38ba0fc72c3080823e422d1d24cdd17d1f6c89592928a3bc4397fc9bb10c764c5de21591b4ed1fd35432d6216fac93645f5471f3e2a514ae2aebb20ec73cfda976ebd907b859755baed291f74981f9e5f0bda868458921f6730169bcd74caac6d69784a21378d46389592ea86b84ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x430, 0x1, [@m_ipt={0x1f4, 0x9, 0x0, 0x0, {{0x8}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa9, 0x6, {0x100, 'security\x00', 0x2, 0xe01b, "a64f9b8523a00e5ae32057b51c16e65ed2d9b72b6d0de629be67526c495bb5f90973104a52b8e0ed05939055eacb18c5d2c5f7dc6d897113c367cb7250dd8901237ed44dc9f753956a88df8a9193d6c70bca5f7a2c9c2a7490cfe9d984e68ccb8536456519ab7e05f9ac9134a1974292cbf7ef98af143ef4f48d8ed809a11e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x0, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xd}]}, {0xb5, 0x6, "4b8c53b4f9f78dd5627678449c116182ace37e2c6a6e5ad32e877a6fdfcc933326bc9cd8b05a636ae76640ba65839f35bfe7181773e4024b4609f0ed6154c346d68493579b42c22f417537f393228c0972992f8cf33320a3ec41ac1f0964bfd7779e2334a453af324e2a7c3aa8900c168a3047da746191776433bac5946134b390aa74d62199ff4d5b1eb1d27bf9aa3e5aa2b239eb37882f020ea75cabe36513903ad6b3890e0028114b1b8b6557f5ad9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x238, 0x3, 0x0, 0x0, {{0x8}, {0x4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xad, 0x6, {0x800, 'mangle\x00', 0x6, 0xa, "9c35f2dc7e920adebecdbe07d483159f56791535316ab32a8de7b3301c8d5565085d5c48a5a9694b50c8bcf9005b63857375d7396a17cc734d0498cc07027929c3822677fd788809b3d3b71b90bc7926e6a8ece49de45a893d8785e2ff834301e050ab3b6122482b7c651548344e187e0bde1c61de646a031c8d491842392983f37c71"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xe9c3}, @TCA_IPT_TARG={0x3a, 0x6, {0x7, 'security\x00', 0x5, 0x3df3, "60c4714775c6bdf6b85ea9e48f332e32"}}]}, {0x96, 0x6, "91894810406b731170f81edadf540d62e8cf4ffd4b088585553880fe32f61722377d8a633703fdc7c5099476bfc32fe66044d57f5fbad815a2c0ccb66b537d21b2cb2dc655c29d08c40805e57439f8553dc975d25838dd8184d391d43cb0037b4d4f6c4f79a814e3685781031d080f69ae8882de15d007c543f385601b7680fc4a1793552d23ba10fbda73f0cda5c43539c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1604}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (rerun: 32) 23.085527ms ago: executing program 0 (id=492): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x402, 0x0) ioctl$DM_DEV_RENAME(r0, 0xc138fd05, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x25000, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '0\x00'}}, @name={'syz', 0x0, '3\x00'}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x48, 0x7, 0x2, 0x37, @mcast1, @private2, 0x80, 0x80, 0x8, 0x7}}) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./config\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='dummy_udc.0', 0xb) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=493): r0 = socket(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x181002, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000005c0)={0x6, 0xfff7, 0x100, 0x2ac, 0x1, "000000001000"}) write$binfmt_aout(r3, &(0x7f0000000600)=ANY=[], 0xff2e) sigaltstack(&(0x7f0000000600)={&(0x7f00000006c0)=""/4096, 0x80000001, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f00000016c0)={0x0}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000640)={0x0, 0xfffffff9, 0x5, 0xb2, 0x10, "1b09000940000000ebffffe578000000001000"}) r4 = syz_open_pts(r3, 0x20800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000680)=0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/../file0\x00', 0x3b647599f69f7fab, 0x23) write$khugepaged_scan(r8, &(0x7f0000000500), 0x8) write$cgroup_pid(r8, &(0x7f0000000540), 0x12) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1cf5b970", @ANYRES16=r6, @ANYBLOB="010327bd7000fddbdf256b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x50) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032abd7000fedbdf257f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x10) mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000001c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001c80)=ANY=[@ANYRESHEX=r4, @ANYRES16=r9, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) kernel console output (not intermixed with test programs): Comm: syz.1.157 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 46.406434][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.406447][ T796] Call Trace: [ 46.406453][ T796] [ 46.406460][ T796] __dump_stack+0x21/0x30 [ 46.406485][ T796] dump_stack_lvl+0x140/0x1c0 [ 46.406503][ T796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.406521][ T796] dump_stack+0x19/0x20 [ 46.406537][ T796] should_fail_ex+0x3c2/0x510 [ 46.406564][ T796] ? security_prepare_creds+0x66/0x260 [ 46.406590][ T796] should_failslab+0xac/0x100 [ 46.406610][ T796] __kmalloc_noprof+0x69/0x510 [ 46.406635][ T796] ? kasan_save_alloc_info+0x3a/0x50 [ 46.406658][ T796] ? security_prepare_creds+0x66/0x260 [ 46.406683][ T796] ? __kasan_slab_alloc+0x73/0x90 [ 46.406702][ T796] security_prepare_creds+0x66/0x260 [ 46.406728][ T796] prepare_creds+0x46d/0x6b0 [ 46.406752][ T796] cap_task_prctl+0x58c/0x9c0 [ 46.406786][ T796] security_task_prctl+0x99/0x2e0 [ 46.406806][ T796] __se_sys_prctl+0xd4/0x1480 [ 46.406828][ T796] ? __x64_sys_prctl+0xf0/0xf0 [ 46.406851][ T796] ? __kasan_check_write+0x18/0x20 [ 46.406878][ T796] ? fpregs_restore_userregs+0x11c/0x260 [ 46.406904][ T796] __x64_sys_prctl+0xc3/0xf0 [ 46.406924][ T796] x64_sys_call+0x2614/0x2ee0 [ 46.406945][ T796] do_syscall_64+0x57/0xf0 [ 46.406964][ T796] ? clear_bhb_loop+0x50/0xa0 [ 46.406987][ T796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.407010][ T796] RIP: 0033:0x7ff5c8d9fb19 [ 46.407026][ T796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.407043][ T796] RSP: 002b:00007ff5c9cd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 46.407064][ T796] RAX: ffffffffffffffda RBX: 00007ff5c9025fa0 RCX: 00007ff5c8d9fb19 [ 46.407078][ T796] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c [ 46.407090][ T796] RBP: 00007ff5c8e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 46.407102][ T796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.407113][ T796] R13: 00007ff5c9026038 R14: 00007ff5c9025fa0 R15: 00007fff514195a8 [ 46.407130][ T796] [ 46.663654][ T690] usb 1-1: device descriptor read/8, error -71 [ 46.794160][ T690] usb 1-1: device descriptor read/8, error -71 [ 47.032780][ T690] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 47.055397][ T690] usb 1-1: device descriptor read/8, error -71 [ 47.185358][ T690] usb 1-1: device descriptor read/8, error -71 [ 47.292836][ T690] usb usb1-port1: unable to enumerate USB device [ 47.386982][ T810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'. [ 47.635921][ T826] FAULT_INJECTION: forcing a failure. [ 47.635921][ T826] name fail_futex, interval 1, probability 0, space 0, times 0 [ 47.651109][ T826] CPU: 1 UID: 0 PID: 826 Comm: syz.1.166 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 47.651144][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 47.651159][ T826] Call Trace: [ 47.651165][ T826] [ 47.651173][ T826] __dump_stack+0x21/0x30 [ 47.651197][ T826] dump_stack_lvl+0x140/0x1c0 [ 47.651216][ T826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.651237][ T826] dump_stack+0x19/0x20 [ 47.651254][ T826] should_fail_ex+0x3c2/0x510 [ 47.651282][ T826] should_fail+0xf/0x20 [ 47.651305][ T826] get_futex_key+0x178/0x940 [ 47.651326][ T826] ? __cfi_get_futex_key+0x10/0x10 [ 47.651345][ T826] ? mutex_unlock+0x90/0x240 [ 47.651367][ T826] ? __cfi_mutex_unlock+0x10/0x10 [ 47.651391][ T826] futex_wake+0x150/0x950 [ 47.651412][ T826] ? seq_read_iter+0xd56/0xf30 [ 47.651434][ T826] ? __cfi_futex_wake+0x10/0x10 [ 47.651456][ T826] ? proc_reg_read_iter+0x220/0x2c0 [ 47.651483][ T826] ? vfs_read+0x727/0xc70 [ 47.651509][ T826] do_futex+0x37d/0x510 [ 47.651529][ T826] ? __cfi_do_futex+0x10/0x10 [ 47.651550][ T826] __se_sys_futex+0x13c/0x320 [ 47.651569][ T826] ? fput+0x1a4/0x230 [ 47.651590][ T826] ? __x64_sys_futex+0x110/0x110 [ 47.651610][ T826] ? __cfi_ksys_pread64+0x10/0x10 [ 47.651636][ T826] ? __kasan_check_write+0x18/0x20 [ 47.651662][ T826] __x64_sys_futex+0xe9/0x110 [ 47.651683][ T826] x64_sys_call+0x227f/0x2ee0 [ 47.651702][ T826] do_syscall_64+0x57/0xf0 [ 47.651720][ T826] ? clear_bhb_loop+0x50/0xa0 [ 47.651744][ T826] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.651767][ T826] RIP: 0033:0x7ff5c8d9fb19 [ 47.651785][ T826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.651801][ T826] RSP: 002b:00007ff5c9cd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 47.651823][ T826] RAX: ffffffffffffffda RBX: 00007ff5c9025fa8 RCX: 00007ff5c8d9fb19 [ 47.651838][ T826] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5c9025fac [ 47.651851][ T826] RBP: 00007ff5c9025fa0 R08: 4000000000000000 R09: 0000000000000000 [ 47.651865][ T826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.651877][ T826] R13: 00007ff5c9026038 R14: 00007fff514194c0 R15: 00007fff514195a8 [ 47.651894][ T826] [ 47.883189][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 47.952723][ T686] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 48.116540][ T831] netlink: 80 bytes leftover after parsing attributes in process `syz.1.167'. [ 48.142717][ T686] usb 1-1: Using ep0 maxpacket: 16 [ 48.153516][ T686] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 48.171797][ T686] usb 1-1: config 0 has no interface number 0 [ 48.177962][ T686] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 48.188153][ T686] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 48.200143][ T686] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 48.211226][ T686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.219995][ T686] usb 1-1: Product: syz [ 48.229095][ T686] usb 1-1: Manufacturer: syz [ 48.234032][ T686] usb 1-1: SerialNumber: syz [ 48.243581][ T686] usb 1-1: config 0 descriptor?? [ 48.251143][ T820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.262821][ T820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.471717][ T820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.482994][ T820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.703839][ T686] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 48.792741][ T565] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.904064][ T686] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 48.919785][ T686] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 48.940275][ T686] asix 1-1:0.34: probe with driver asix failed with error -32 [ 48.965329][ T565] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 48.983803][ T565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.991843][ T565] usb 2-1: Product: syz [ 49.014899][ T565] usb 2-1: Manufacturer: syz [ 49.019559][ T565] usb 2-1: SerialNumber: syz [ 49.034423][ T565] usb-storage 2-1:1.0: USB Mass Storage device detected [ 49.063144][ T565] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 49.082771][ T565] scsi host1: usb-storage 2-1:1.0 [ 49.234280][ T686] usb 2-1: USB disconnect, device number 5 [ 49.820922][ T859] FAULT_INJECTION: forcing a failure. [ 49.820922][ T859] name failslab, interval 1, probability 0, space 0, times 0 [ 49.847088][ T859] CPU: 1 UID: 0 PID: 859 Comm: syz.1.175 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 49.847123][ T859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.847137][ T859] Call Trace: [ 49.847144][ T859] [ 49.847152][ T859] __dump_stack+0x21/0x30 [ 49.847179][ T859] dump_stack_lvl+0x140/0x1c0 [ 49.847196][ T859] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.847216][ T859] ? check_preempt_wakeup_fair+0x780/0xb10 [ 49.847241][ T859] dump_stack+0x19/0x20 [ 49.847258][ T859] should_fail_ex+0x3c2/0x510 [ 49.847293][ T859] should_failslab+0xac/0x100 [ 49.847315][ T859] __kmalloc_node_noprof+0x69/0x500 [ 49.847344][ T859] ? __kvmalloc_node_noprof+0x128/0x300 [ 49.847371][ T859] __kvmalloc_node_noprof+0x128/0x300 [ 49.847394][ T859] ? plist_check_list+0x2a8/0x2c0 [ 49.847414][ T859] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 49.847438][ T859] ? cpus_share_resources+0x130/0x130 [ 49.847463][ T859] traverse+0xfe/0x700 [ 49.847483][ T859] ? __kasan_check_write+0x18/0x20 [ 49.847508][ T859] ? avc_policy_seqno+0xd/0x30 [ 49.847528][ T859] ? selinux_file_permission+0x318/0xb60 [ 49.847554][ T859] seq_read_iter+0xdbd/0xf30 [ 49.847574][ T859] ? __cfi_futex_wake+0x10/0x10 [ 49.847598][ T859] proc_reg_read_iter+0x1ea/0x2c0 [ 49.847625][ T859] vfs_read+0x60b/0xc70 [ 49.847651][ T859] ? __cfi_vfs_read+0x10/0x10 [ 49.847679][ T859] ksys_pread64+0x170/0x270 [ 49.847705][ T859] ? __cfi_ksys_pread64+0x10/0x10 [ 49.847731][ T859] ? __kasan_check_write+0x18/0x20 [ 49.847755][ T859] ? fpregs_restore_userregs+0x11c/0x260 [ 49.847780][ T859] __x64_sys_pread64+0x9f/0xb0 [ 49.847806][ T859] x64_sys_call+0x2a34/0x2ee0 [ 49.847826][ T859] do_syscall_64+0x57/0xf0 [ 49.847843][ T859] ? clear_bhb_loop+0x50/0xa0 [ 49.847868][ T859] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.847891][ T859] RIP: 0033:0x7ff5c8d9fb19 [ 49.847908][ T859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.847924][ T859] RSP: 002b:00007ff5c9cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 49.847946][ T859] RAX: ffffffffffffffda RBX: 00007ff5c9025fa0 RCX: 00007ff5c8d9fb19 [ 49.847960][ T859] RDX: 0000000000000017 RSI: 00002000000000c0 RDI: 0000000000000006 [ 49.847974][ T859] RBP: 00007ff5c8e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 49.847988][ T859] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 49.848000][ T859] R13: 00007ff5c9026038 R14: 00007ff5c9025fa0 R15: 00007fff514195a8 [ 49.848015][ T859] [ 49.850238][ T859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 50.422788][ T565] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 50.526027][ T562] usb 1-1: USB disconnect, device number 16 [ 50.603727][ T565] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.630433][ T565] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 50.657595][ T874] netlink: 'syz.0.180': attribute type 27 has an invalid length. [ 50.660822][ T565] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.678769][ T565] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 50.690888][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 50.690904][ T36] audit: type=1400 audit(1793668616.899:236): avc: denied { read } for pid=877 comm="syz.0.182" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.697158][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.721428][ T36] audit: type=1400 audit(1793668616.939:237): avc: denied { open } for pid=877 comm="syz.0.182" path="/dev/usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.761634][ T36] audit: type=1400 audit(1793668616.939:238): avc: denied { ioctl } for pid=877 comm="syz.0.182" path="/dev/usbmon1" dev="devtmpfs" ino=92 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.764970][ T565] usb 2-1: config 0 descriptor?? [ 51.032746][ T562] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 51.183805][ T562] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 51.194692][ T562] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.205848][ T562] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 51.217002][ T562] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 51.230814][ T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.240317][ T562] usb 1-1: config 0 interface 0 has no altsetting 0 [ 51.247995][ T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.256098][ T562] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 51.267131][ T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.275541][ T562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.284633][ T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.296362][ T562] usb 1-1: config 0 descriptor?? [ 51.306229][ T880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.313720][ T565] hid-led 0003:1294:1320.0004: hidraw0: USB HID v36.2c Joystick [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 51.343104][ T565] hid-led 0003:1294:1320.0004: Riso Kagaku Webmail Notifier initialized [ 51.546193][ T686] usb 2-1: USB disconnect, device number 6 [ 51.555335][ T690] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 51.564595][ T690] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 51.574337][ T690] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 51.731768][ T562] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x2 [ 51.752749][ T562] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 51.760204][ T562] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 51.772978][ T562] input: HID 0e8f:0003 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0E8F:0003.0005/input/input5 [ 51.862041][ T886] FAULT_INJECTION: forcing a failure. [ 51.862041][ T886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 51.876556][ T886] CPU: 1 UID: 0 PID: 886 Comm: syz.3.185 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 51.876587][ T886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.876599][ T886] Call Trace: [ 51.876605][ T886] [ 51.876613][ T886] __dump_stack+0x21/0x30 [ 51.876637][ T886] dump_stack_lvl+0x140/0x1c0 [ 51.876653][ T886] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.876672][ T886] dump_stack+0x19/0x20 [ 51.876689][ T886] should_fail_ex+0x3c2/0x510 [ 51.876716][ T886] should_fail+0xf/0x20 [ 51.876740][ T886] get_futex_key+0x178/0x940 [ 51.876761][ T886] ? __cfi_get_futex_key+0x10/0x10 [ 51.876777][ T886] ? mutex_unlock+0x90/0x240 [ 51.876796][ T886] ? __cfi_mutex_unlock+0x10/0x10 [ 51.876817][ T886] futex_wake+0x150/0x950 [ 51.876837][ T886] ? seq_read_iter+0xd56/0xf30 [ 51.876854][ T886] ? __cfi_futex_wake+0x10/0x10 [ 51.876876][ T886] ? proc_reg_read_iter+0x220/0x2c0 [ 51.876900][ T886] ? vfs_read+0x727/0xc70 [ 51.876924][ T886] do_futex+0x37d/0x510 [ 51.876943][ T886] ? __cfi_do_futex+0x10/0x10 [ 51.876962][ T886] __se_sys_futex+0x13c/0x320 [ 51.876980][ T886] ? fput+0x1a4/0x230 [ 51.877000][ T886] ? __x64_sys_futex+0x110/0x110 [ 51.877020][ T886] ? __cfi_ksys_pread64+0x10/0x10 [ 51.877045][ T886] ? __kasan_check_write+0x18/0x20 [ 51.877071][ T886] __x64_sys_futex+0xe9/0x110 [ 51.877091][ T886] x64_sys_call+0x227f/0x2ee0 [ 51.877111][ T886] do_syscall_64+0x57/0xf0 [ 51.877139][ T886] ? clear_bhb_loop+0x50/0xa0 [ 51.877164][ T886] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.877190][ T886] RIP: 0033:0x7f65ed39fb19 [ 51.877206][ T886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.877222][ T886] RSP: 002b:00007f65ee2d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.877243][ T886] RAX: ffffffffffffffda RBX: 00007f65ed625fa8 RCX: 00007f65ed39fb19 [ 51.877258][ T886] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65ed625fac [ 51.877271][ T886] RBP: 00007f65ed625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 51.877285][ T886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.877297][ T886] R13: 00007f65ed626038 R14: 00007ffc12769aa0 R15: 00007ffc12769b88 [ 51.877315][ T886] [ 51.878123][ T562] pantherlord 0003:0E8F:0003.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0003] on usb-dummy_hcd.0-1/input0 [ 51.912379][ T886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 51.917573][ T562] pantherlord 0003:0E8F:0003.0005: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 52.212634][ T36] audit: type=1400 audit(1793668618.419:239): avc: denied { setopt } for pid=891 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.240269][ T36] audit: type=1400 audit(1793668618.439:240): avc: denied { read } for pid=891 comm="syz.3.187" path="socket:[8468]" dev="sockfs" ino=8468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.263655][ T562] usb 1-1: USB disconnect, device number 17 [ 52.402735][ T686] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.572398][ T686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.582737][ T565] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 52.583399][ T686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.603289][ T686] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 52.612394][ T686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.621360][ T686] usb 2-1: config 0 descriptor?? [ 52.738320][ T565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.760120][ T565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.770013][ T565] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 52.780353][ T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.798904][ T565] usb 4-1: config 0 descriptor?? [ 52.805331][ T900] netlink: 'syz.0.190': attribute type 27 has an invalid length. [ 53.034424][ T686] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.042012][ T686] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.049765][ T686] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.057521][ T686] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.065189][ T686] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 53.078131][ T686] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 53.232295][ T686] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0 [ 53.241958][ T686] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 53.251401][ T686] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 53.260428][ T686] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 53.269042][ T686] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 53.421438][ T898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'. [ 53.434969][ T889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.443831][ T898] netlink: 164 bytes leftover after parsing attributes in process `syz.3.189'. [ 53.452809][ T36] audit: type=1400 audit(1793668619.659:241): avc: denied { nlmsg_read } for pid=897 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.453073][ T889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.492750][ T36] audit: type=1400 audit(1793668619.699:242): avc: denied { mounton } for pid=888 comm="syz.1.186" path="/59/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 53.593996][ T565] usb 4-1: string descriptor 0 read error: -71 [ 53.613410][ T565] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 53.622235][ T565] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 53.642708][ T565] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 53.650839][ T565] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 53.658403][ T565] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 53.672301][ T565] usb 4-1: USB disconnect, device number 4 [ 54.232347][ T924] FAULT_INJECTION: forcing a failure. [ 54.232347][ T924] name fail_futex, interval 1, probability 0, space 0, times 0 [ 54.245487][ T924] CPU: 0 UID: 0 PID: 924 Comm: syz.3.195 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 54.245522][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.245536][ T924] Call Trace: [ 54.245542][ T924] [ 54.245549][ T924] __dump_stack+0x21/0x30 [ 54.245574][ T924] dump_stack_lvl+0x140/0x1c0 [ 54.245593][ T924] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.245614][ T924] dump_stack+0x19/0x20 [ 54.245631][ T924] should_fail_ex+0x3c2/0x510 [ 54.245658][ T924] should_fail+0xf/0x20 [ 54.245683][ T924] get_futex_key+0x178/0x940 [ 54.245703][ T924] ? __cfi_get_futex_key+0x10/0x10 [ 54.245721][ T924] ? mutex_unlock+0x90/0x240 [ 54.245743][ T924] ? __cfi_mutex_unlock+0x10/0x10 [ 54.245766][ T924] futex_wake+0x150/0x950 [ 54.245788][ T924] ? seq_read_iter+0xd56/0xf30 [ 54.245809][ T924] ? __cfi_futex_wake+0x10/0x10 [ 54.245832][ T924] ? proc_reg_read_iter+0x220/0x2c0 [ 54.245859][ T924] ? vfs_read+0x727/0xc70 [ 54.245886][ T924] do_futex+0x37d/0x510 [ 54.245905][ T924] ? __cfi_do_futex+0x10/0x10 [ 54.245926][ T924] __se_sys_futex+0x13c/0x320 [ 54.245945][ T924] ? fput+0x1a4/0x230 [ 54.245965][ T924] ? __x64_sys_futex+0x110/0x110 [ 54.245985][ T924] ? __cfi_ksys_pread64+0x10/0x10 [ 54.246011][ T924] ? __kasan_check_write+0x18/0x20 [ 54.246038][ T924] __x64_sys_futex+0xe9/0x110 [ 54.246058][ T924] x64_sys_call+0x227f/0x2ee0 [ 54.246078][ T924] do_syscall_64+0x57/0xf0 [ 54.246096][ T924] ? clear_bhb_loop+0x50/0xa0 [ 54.246120][ T924] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.246143][ T924] RIP: 0033:0x7f65ed39fb19 [ 54.246160][ T924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.246177][ T924] RSP: 002b:00007f65ee2d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.246198][ T924] RAX: ffffffffffffffda RBX: 00007f65ed625fa8 RCX: 00007f65ed39fb19 [ 54.246213][ T924] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65ed625fac [ 54.246227][ T924] RBP: 00007f65ed625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 54.246241][ T924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.246254][ T924] R13: 00007f65ed626038 R14: 00007ffc12769aa0 R15: 00007ffc12769b88 [ 54.246270][ T924] [ 54.482544][ T924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 54.560199][ T928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 54.618132][ T36] audit: type=1400 audit(1793668620.829:243): avc: denied { accept } for pid=929 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.643269][ T930] rust_binder: 929:930 error while translating object: EINVAL [ 54.660744][ T930] rust_binder: 929:930 transaction call to 929:0 failed EINVAL, code 0 size 72-24 line thread.rs:867 [ 54.672950][ T932] netlink: 'syz.0.199': attribute type 27 has an invalid length. [ 54.682043][ T36] audit: type=1400 audit(1793668620.849:244): avc: denied { set_context_mgr } for pid=929 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 54.705787][ T934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.722978][ T938] rust_binder: 929:938 error while translating object: EINVAL [ 54.736423][ T36] audit: type=1400 audit(1793668620.849:245): avc: denied { map } for pid=929 comm="syz.3.198" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.763432][ T938] rust_binder: 929:938 transaction call to 929:0 failed EINVAL, code 0 size 72-24 line thread.rs:867 [ 54.782983][ T686] rust_binder: 929: undelivered TRANSACTION_ERROR: 29201 [ 54.797213][ T686] rust_binder: 929: undelivered TRANSACTION_ERROR: 29201 [ 55.164927][ T686] usb 2-1: USB disconnect, device number 7 [ 55.218854][ T954] FAULT_INJECTION: forcing a failure. [ 55.218854][ T954] name fail_futex, interval 1, probability 0, space 0, times 0 [ 55.231869][ T954] CPU: 1 UID: 0 PID: 954 Comm: syz.1.205 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 55.231902][ T954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.231916][ T954] Call Trace: [ 55.231923][ T954] [ 55.231931][ T954] __dump_stack+0x21/0x30 [ 55.231957][ T954] dump_stack_lvl+0x140/0x1c0 [ 55.231975][ T954] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.231994][ T954] ? native_smp_send_reschedule+0x3d/0x60 [ 55.232020][ T954] ? resched_curr+0x1db/0x440 [ 55.232043][ T954] dump_stack+0x19/0x20 [ 55.232059][ T954] should_fail_ex+0x3c2/0x510 [ 55.232088][ T954] should_fail+0xf/0x20 [ 55.232112][ T954] get_futex_key+0x178/0x940 [ 55.232133][ T954] ? __cfi_get_futex_key+0x10/0x10 [ 55.232151][ T954] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 55.232173][ T954] ? ttwu_do_activate+0x620/0x620 [ 55.232197][ T954] futex_wait_setup+0xae/0x260 [ 55.232220][ T954] ? __cfi_futex_wait_setup+0x10/0x10 [ 55.232244][ T954] ? __asan_memcpy+0x5a/0x80 [ 55.232269][ T954] __futex_wait+0x12c/0x3d0 [ 55.232292][ T954] ? __cfi___futex_wait+0x10/0x10 [ 55.232315][ T954] ? __cfi_futex_wake_mark+0x10/0x10 [ 55.232338][ T954] ? futex_wake+0x666/0x950 [ 55.232362][ T954] futex_wait+0x128/0x7c0 [ 55.232384][ T954] ? __cfi_futex_wait+0x10/0x10 [ 55.232409][ T954] ? sock_do_ioctl+0x1c8/0x330 [ 55.232428][ T954] do_futex+0x32a/0x510 [ 55.232448][ T954] ? __cfi_do_futex+0x10/0x10 [ 55.232467][ T954] ? mutex_unlock+0x90/0x240 [ 55.232491][ T954] __se_sys_futex+0x13c/0x320 [ 55.232512][ T954] ? __x64_sys_futex+0x110/0x110 [ 55.232531][ T954] ? __kasan_check_write+0x18/0x20 [ 55.232557][ T954] __x64_sys_futex+0xe9/0x110 [ 55.232577][ T954] x64_sys_call+0x227f/0x2ee0 [ 55.232596][ T954] do_syscall_64+0x57/0xf0 [ 55.232614][ T954] ? clear_bhb_loop+0x50/0xa0 [ 55.232638][ T954] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.232664][ T954] RIP: 0033:0x7ff5c8d9fb19 [ 55.232682][ T954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.232698][ T954] RSP: 002b:00007ff5c9cd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.232719][ T954] RAX: ffffffffffffffda RBX: 00007ff5c9025fa8 RCX: 00007ff5c8d9fb19 [ 55.232735][ T954] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff5c9025fa8 [ 55.232749][ T954] RBP: 00007ff5c9025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 55.232762][ T954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.232775][ T954] R13: 00007ff5c9026038 R14: 00007fff514194c0 R15: 00007fff514195a8 [ 55.232803][ T954] [ 55.270330][ T955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 55.594682][ T959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'. [ 55.629362][ T963] netlink: 'syz.1.209': attribute type 27 has an invalid length. [ 55.663353][ T965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 55.672171][ T965] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 55.680888][ T965] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 55.700192][ T965] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 55.798345][ T977] netlink: 188 bytes leftover after parsing attributes in process `syz.1.213'. [ 55.906429][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 55.947594][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 55.947610][ T36] audit: type=1400 audit(1793668622.159:251): avc: denied { map } for pid=980 comm="syz.1.215" path="socket:[9493]" dev="sockfs" ino=9493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.002545][ T36] audit: type=1400 audit(1793668622.189:252): avc: denied { read } for pid=980 comm="syz.1.215" path="socket:[9493]" dev="sockfs" ino=9493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.067279][ T994] netlink: 'syz.0.220': attribute type 27 has an invalid length. [ 56.075907][ T996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 56.582730][ T565] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 56.735038][ T565] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.752756][ T565] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.765730][ T565] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.772347][ T565] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 56.781549][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.792978][ T565] usb 2-1: config 0 descriptor?? [ 56.961794][ T1014] FAULT_INJECTION: forcing a failure. [ 56.961794][ T1014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.975119][ T1014] CPU: 1 UID: 0 PID: 1014 Comm: syz.3.226 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 56.975151][ T1014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 56.975162][ T1014] Call Trace: [ 56.975168][ T1014] [ 56.975175][ T1014] __dump_stack+0x21/0x30 [ 56.975198][ T1014] dump_stack_lvl+0x140/0x1c0 [ 56.975215][ T1014] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.975233][ T1014] ? selinux_file_ioctl+0x732/0x1480 [ 56.975259][ T1014] dump_stack+0x19/0x20 [ 56.975275][ T1014] should_fail_ex+0x3c2/0x510 [ 56.975300][ T1014] should_fail+0xf/0x20 [ 56.975322][ T1014] should_fail_usercopy+0x1e/0x30 [ 56.975339][ T1014] _copy_from_user+0x20/0xa0 [ 56.975360][ T1014] vhost_vsock_dev_ioctl+0x2db/0xdc0 [ 56.975382][ T1014] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 56.975403][ T1014] ? __fget_files+0x2bc/0x330 [ 56.975421][ T1014] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.975440][ T1014] ? security_file_ioctl+0x3e/0x110 [ 56.975473][ T1014] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 56.975493][ T1014] __se_sys_ioctl+0x126/0x1b0 [ 56.975512][ T1014] __x64_sys_ioctl+0x7f/0xa0 [ 56.975529][ T1014] x64_sys_call+0x1878/0x2ee0 [ 56.975548][ T1014] do_syscall_64+0x57/0xf0 [ 56.975566][ T1014] ? clear_bhb_loop+0x50/0xa0 [ 56.975589][ T1014] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.975611][ T1014] RIP: 0033:0x7f65ed39fb19 [ 56.975627][ T1014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.975642][ T1014] RSP: 002b:00007f65ee2d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.975662][ T1014] RAX: ffffffffffffffda RBX: 00007f65ed625fa0 RCX: 00007f65ed39fb19 [ 56.975676][ T1014] RDX: 0000200000000a00 RSI: 000000004008af25 RDI: 0000000000000003 [ 56.975689][ T1014] RBP: 00007f65ee2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 56.975700][ T1014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.975712][ T1014] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007ffc12769b88 [ 56.975728][ T1014] [ 57.276031][ T565] playstation 0003:054C:09CC.0008: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 57.474202][ T565] playstation 0003:054C:09CC.0008: Invalid byte count transferred, expected 16 got 0 [ 57.483758][ T565] playstation 0003:054C:09CC.0008: Failed to retrieve DualShock4 pairing info: -22 [ 57.496329][ T565] playstation 0003:054C:09CC.0008: Failed to get MAC address from DualShock4 [ 57.505148][ T565] playstation 0003:054C:09CC.0008: Failed to create dualshock4. [ 57.521115][ T565] playstation 0003:054C:09CC.0008: probe with driver playstation failed with error -22 [ 57.539885][ T1023] netlink: 'syz.3.229': attribute type 27 has an invalid length. [ 57.677653][ T36] audit: type=1326 audit(1793668623.889:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.1.225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c8d9fb19 code=0x7ffc0000 [ 57.705112][ T1010] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 57.712838][ T1010] audit: out of memory in audit_log_start [ 57.732732][ T36] audit: type=1326 audit(1793668623.889:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.1.225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c8d9fb19 code=0x7ffc0000 [ 57.758755][ T36] audit: type=1326 audit(1793668623.919:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.1.225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff5c8d9fb19 code=0x7ffc0000 [ 57.785060][ T1028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.785547][ T36] audit: type=1326 audit(1793668623.919:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.1.225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c8d9fb19 code=0x7ffc0000 [ 57.802866][ T1028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.818721][ T36] audit: type=1326 audit(1793668623.919:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.1.225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c8d9fb19 code=0x7ffc0000 [ 57.853332][ T36] audit: type=1326 audit(1793668623.919:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.1.225" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff5c8d9fb19 code=0x7ffc0000 [ 57.882175][ T686] usb 2-1: USB disconnect, device number 8 [ 58.407069][ T1030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 58.451375][ T1036] Invalid argument reading file caps for ./file0 [ 58.952740][ T565] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 59.092720][ T565] usb 4-1: device descriptor read/64, error -71 [ 59.332729][ T565] usb 4-1: device descriptor read/64, error -71 [ 59.420911][ T1053] netlink: 'syz.1.238': attribute type 27 has an invalid length. [ 59.572738][ T565] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 59.672743][ T562] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 59.712706][ T565] usb 4-1: device descriptor read/64, error -71 [ 59.823854][ T562] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.836356][ T562] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.849665][ T562] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.862182][ T562] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 59.871599][ T562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.882115][ T1057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 59.886707][ T562] usb 2-1: config 0 descriptor?? [ 59.917087][ T1059] bridge0: port 3(gretap0) entered blocking state [ 59.924679][ T1059] bridge0: port 3(gretap0) entered disabled state [ 59.931153][ T1059] gretap0: entered allmulticast mode [ 59.937241][ T1059] gretap0: entered promiscuous mode [ 59.965653][ T565] usb 4-1: device descriptor read/64, error -71 [ 60.072815][ T565] usb usb4-port1: attempt power cycle [ 60.317962][ T562] playstation 0003:054C:09CC.0009: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 60.432722][ T565] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 60.453782][ T565] usb 4-1: device descriptor read/8, error -71 [ 60.510280][ T562] playstation 0003:054C:09CC.0009: Invalid byte count transferred, expected 16 got 0 [ 60.522749][ T562] playstation 0003:054C:09CC.0009: Failed to retrieve DualShock4 pairing info: -22 [ 60.532106][ T562] playstation 0003:054C:09CC.0009: Failed to get MAC address from DualShock4 [ 60.541351][ T562] playstation 0003:054C:09CC.0009: Failed to create dualshock4. [ 60.550907][ T562] playstation 0003:054C:09CC.0009: probe with driver playstation failed with error -22 [ 60.583707][ T565] usb 4-1: device descriptor read/8, error -71 [ 60.716022][ T686] usb 2-1: USB disconnect, device number 9 [ 60.824157][ T565] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 60.863812][ T565] usb 4-1: device descriptor read/8, error -71 [ 61.013508][ T565] usb 4-1: device descriptor read/8, error -71 [ 61.122804][ T565] usb usb4-port1: unable to enumerate USB device [ 61.244135][ T1074] loop7: detected capacity change from 0 to 7 [ 61.251006][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.260207][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.268245][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.277437][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.285311][ T1074] loop7: unable to read partition table [ 61.291098][ T1074] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 61.292683][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.313714][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.323454][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.332607][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.340713][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.350979][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.360154][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.368602][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.377767][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.385837][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.395052][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.748057][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 61.748074][ T36] audit: type=1400 audit(1793668627.959:330): avc: denied { write } for pid=1078 comm="syz.0.248" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.859326][ T1084] netlink: 68 bytes leftover after parsing attributes in process `syz.3.250'. [ 61.898039][ T36] audit: type=1326 audit(1793668628.109:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1087 comm="syz.3.252" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65ed39fb19 code=0x0 [ 61.905386][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.929708][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.936855][ T1082] bridge_slave_0: entered allmulticast mode [ 61.943223][ T1082] bridge_slave_0: entered promiscuous mode [ 61.950547][ T12] bridge_slave_1: left allmulticast mode [ 61.953442][ T1093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 61.956250][ T12] bridge_slave_1: left promiscuous mode [ 61.971120][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.978505][ T12] bridge_slave_0: left allmulticast mode [ 61.984398][ T12] bridge_slave_0: left promiscuous mode [ 61.989995][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.044277][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.051359][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.058489][ T1082] bridge_slave_1: entered allmulticast mode [ 62.064839][ T1082] bridge_slave_1: entered promiscuous mode [ 62.131316][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.138430][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.145738][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.152877][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.215571][ T1082] veth0_vlan: entered promiscuous mode [ 62.218281][ T1104] 9pnet_fd: Insufficient options for proto=fd [ 62.234678][ T1082] veth1_macvtap: entered promiscuous mode [ 62.242046][ T1104] mmap: syz.1.255 (1104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.242546][ T36] audit: type=1400 audit(1793668628.449:332): avc: denied { ioctl } for pid=1103 comm="syz.1.255" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.288755][ T36] audit: type=1400 audit(1793668628.499:333): avc: denied { mounton } for pid=1082 comm="syz-executor" path="/root/syzkaller.0Ii5Ks/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.334590][ T1110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.249'. [ 62.652821][ T562] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 62.731836][ T36] audit: type=1400 audit(1793668628.939:334): avc: denied { mounton } for pid=1121 comm="syz.3.260" path="/65/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 62.732757][ T565] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.782847][ T562] usb 2-1: device descriptor read/64, error -71 [ 62.790861][ T1127] overlayfs: unescaped trailing colons in lowerdir mount option. [ 62.822056][ T36] audit: type=1400 audit(1793668629.029:335): avc: denied { write } for pid=1128 comm="syz.3.263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.912736][ T565] usb 5-1: Using ep0 maxpacket: 16 [ 62.918872][ T565] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.930101][ T565] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 62.953565][ T565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 62.960211][ T565] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 62.971179][ T565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.982296][ T565] usb 5-1: config 0 descriptor?? [ 63.022728][ T562] usb 2-1: device descriptor read/64, error -71 [ 63.272733][ T562] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 63.389110][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.396528][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.403751][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.410887][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.418027][ T562] usb 2-1: device descriptor read/64, error -71 [ 63.424385][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.431509][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.438672][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.445822][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.453038][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.460207][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.467529][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.475295][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.482426][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.489587][ T565] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.496741][ T565] kovaplus 0003:1E7D:2D50.000A: unbalanced collection at end of report description [ 63.506273][ T565] kovaplus 0003:1E7D:2D50.000A: parse failed [ 63.512277][ T565] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -22 [ 63.589574][ T1147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.598116][ T1147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.672734][ T562] usb 2-1: device descriptor read/64, error -71 [ 63.782801][ T562] usb usb2-port1: attempt power cycle [ 64.122786][ T562] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 64.143906][ T562] usb 2-1: device descriptor read/8, error -71 [ 64.162737][ T565] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 64.283770][ T562] usb 2-1: device descriptor read/8, error -71 [ 64.313935][ T565] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.324165][ T565] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.335082][ T565] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.346088][ T565] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.360169][ T565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.369392][ T565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.377415][ T565] usb 4-1: Product: syz [ 64.381557][ T565] usb 4-1: Manufacturer: syz [ 64.386361][ T565] usb 4-1: SerialNumber: syz [ 64.522726][ T562] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 64.543686][ T562] usb 2-1: device descriptor read/8, error -71 [ 64.673713][ T562] usb 2-1: device descriptor read/8, error -71 [ 64.782814][ T562] usb usb2-port1: unable to enumerate USB device [ 64.935735][ T1159] FAULT_INJECTION: forcing a failure. [ 64.935735][ T1159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.948851][ T1159] CPU: 0 UID: 0 PID: 1159 Comm: syz.0.271 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 64.948877][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.948885][ T1159] Call Trace: [ 64.948889][ T1159] [ 64.948897][ T1159] __dump_stack+0x21/0x30 [ 64.948913][ T1159] dump_stack_lvl+0x140/0x1c0 [ 64.948924][ T1159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.948939][ T1159] dump_stack+0x19/0x20 [ 64.948992][ T1159] should_fail_ex+0x3c2/0x510 [ 64.949016][ T1159] should_fail+0xf/0x20 [ 64.949030][ T1159] get_futex_key+0x178/0x940 [ 64.949042][ T1159] ? ttwu_queue_wakelist+0x323/0x520 [ 64.949057][ T1159] ? __cfi_get_futex_key+0x10/0x10 [ 64.949067][ T1159] ? __smp_call_single_queue+0xd5/0x380 [ 64.949080][ T1159] ? ttwu_do_activate+0x620/0x620 [ 64.949093][ T1159] ? ttwu_queue_wakelist+0x323/0x520 [ 64.949105][ T1159] futex_wait_setup+0xae/0x260 [ 64.949118][ T1159] ? __cfi_futex_wait_setup+0x10/0x10 [ 64.949130][ T1159] ? __asan_memcpy+0x5a/0x80 [ 64.949144][ T1159] __futex_wait+0x12c/0x3d0 [ 64.949156][ T1159] ? __cfi___futex_wait+0x10/0x10 [ 64.949168][ T1159] ? __cfi_futex_wake_mark+0x10/0x10 [ 64.949180][ T1159] ? futex_wake+0x666/0x950 [ 64.949192][ T1159] futex_wait+0x128/0x7c0 [ 64.949204][ T1159] ? __cfi_futex_wait+0x10/0x10 [ 64.949217][ T1159] ? sock_do_ioctl+0x1c8/0x330 [ 64.949227][ T1159] do_futex+0x32a/0x510 [ 64.949237][ T1159] ? __cfi_do_futex+0x10/0x10 [ 64.949247][ T1159] ? mutex_unlock+0x90/0x240 [ 64.949264][ T1159] __se_sys_futex+0x13c/0x320 [ 64.949276][ T1159] ? __x64_sys_futex+0x110/0x110 [ 64.949287][ T1159] ? __kasan_check_write+0x18/0x20 [ 64.949302][ T1159] __x64_sys_futex+0xe9/0x110 [ 64.949313][ T1159] x64_sys_call+0x227f/0x2ee0 [ 64.949324][ T1159] do_syscall_64+0x57/0xf0 [ 64.949334][ T1159] ? clear_bhb_loop+0x50/0xa0 [ 64.949347][ T1159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.949360][ T1159] RIP: 0033:0x7fb463b9fb19 [ 64.949370][ T1159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.949379][ T1159] RSP: 002b:00007fb464a690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 64.949391][ T1159] RAX: ffffffffffffffda RBX: 00007fb463e25fa8 RCX: 00007fb463b9fb19 [ 64.949399][ T1159] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb463e25fa8 [ 64.949407][ T1159] RBP: 00007fb463e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 64.949413][ T1159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.949420][ T1159] R13: 00007fb463e26038 R14: 00007fff28812f10 R15: 00007fff28812ff8 [ 64.949429][ T1159] [ 64.950129][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 65.237520][ T36] audit: type=1400 audit(1793668631.449:336): avc: denied { view } for pid=1160 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.304893][ T36] audit: type=1400 audit(1793668631.519:337): avc: denied { create } for pid=1162 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.329748][ T1163] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.337234][ T1163] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.345314][ T36] audit: type=1400 audit(1793668631.569:338): avc: denied { setattr } for pid=1162 comm="syz.0.273" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.464234][ T36] audit: type=1400 audit(1793668631.679:339): avc: denied { create } for pid=1168 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.498999][ T557] usb 5-1: USB disconnect, device number 2 [ 65.522643][ T1177] FAULT_INJECTION: forcing a failure. [ 65.522643][ T1177] name failslab, interval 1, probability 0, space 0, times 0 [ 65.535321][ T1177] CPU: 1 UID: 0 PID: 1177 Comm: syz.4.280 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 65.535351][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.535363][ T1177] Call Trace: [ 65.535368][ T1177] [ 65.535375][ T1177] __dump_stack+0x21/0x30 [ 65.535397][ T1177] dump_stack_lvl+0x140/0x1c0 [ 65.535412][ T1177] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.535430][ T1177] dump_stack+0x19/0x20 [ 65.535443][ T1177] should_fail_ex+0x3c2/0x510 [ 65.535470][ T1177] should_failslab+0xac/0x100 [ 65.535494][ T1177] kmem_cache_alloc_noprof+0x42/0x410 [ 65.535517][ T1177] ? fib6_add+0xfed/0x4c00 [ 65.535537][ T1177] fib6_add+0xfed/0x4c00 [ 65.535558][ T1177] ? ip_fib_metrics_init+0x429/0x7c0 [ 65.535581][ T1177] ? __kasan_kmalloc+0x96/0xb0 [ 65.535598][ T1177] ? __cfi_fib6_add+0x10/0x10 [ 65.535616][ T1177] ? ipv6_addr_prefix+0x72/0x1e0 [ 65.535634][ T1177] ? __asan_memcpy+0x5a/0x80 [ 65.535654][ T1177] ? __kasan_check_write+0x18/0x20 [ 65.535674][ T1177] ? _raw_spin_lock_bh+0x96/0x130 [ 65.535690][ T1177] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 65.535705][ T1177] ? ip6_route_info_create+0xf2c/0x14b0 [ 65.535727][ T1177] ip6_route_add+0x8d/0x180 [ 65.535749][ T1177] addrconf_prefix_route+0x237/0x330 [ 65.535769][ T1177] ? fib6_may_remove_gc_list+0x180/0x180 [ 65.535792][ T1177] inet6_addr_add+0x634/0xb20 [ 65.535813][ T1177] addrconf_add_ifaddr+0x15c/0x1d0 [ 65.535834][ T1177] ? __cfi_addrconf_add_ifaddr+0x10/0x10 [ 65.535855][ T1177] ? ioctl_has_perm+0x39a/0x500 [ 65.535879][ T1177] inet6_ioctl+0x14a/0x2d0 [ 65.535893][ T1177] ? __cfi_inet6_ioctl+0x10/0x10 [ 65.535907][ T1177] ? proc_fail_nth_write+0x184/0x220 [ 65.535928][ T1177] sock_do_ioctl+0x118/0x330 [ 65.535943][ T1177] ? sock_show_fdinfo+0xd0/0xd0 [ 65.535956][ T1177] ? hook_file_ioctl+0x1ef/0x590 [ 65.535975][ T1177] ? __cfi_hook_file_ioctl+0x10/0x10 [ 65.535995][ T1177] ? __cfi_do_futex+0x10/0x10 [ 65.536013][ T1177] ? mutex_unlock+0x90/0x240 [ 65.536031][ T1177] sock_ioctl+0x568/0x7e0 [ 65.536052][ T1177] ? __cfi_sock_ioctl+0x10/0x10 [ 65.536072][ T1177] ? __fget_files+0x2bc/0x330 [ 65.536088][ T1177] ? bpf_lsm_file_ioctl+0xd/0x20 [ 65.536104][ T1177] ? security_file_ioctl+0x3e/0x110 [ 65.536125][ T1177] ? __cfi_sock_ioctl+0x10/0x10 [ 65.536147][ T1177] __se_sys_ioctl+0x126/0x1b0 [ 65.536163][ T1177] __x64_sys_ioctl+0x7f/0xa0 [ 65.536179][ T1177] x64_sys_call+0x1878/0x2ee0 [ 65.536195][ T1177] do_syscall_64+0x57/0xf0 [ 65.536209][ T1177] ? clear_bhb_loop+0x50/0xa0 [ 65.536229][ T1177] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.536249][ T1177] RIP: 0033:0x7f0b3ed9fb19 [ 65.536265][ T1177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.536278][ T1177] RSP: 002b:00007f0b3d7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.536296][ T1177] RAX: ffffffffffffffda RBX: 00007f0b3f025fa0 RCX: 00007f0b3ed9fb19 [ 65.536309][ T1177] RDX: 0000200000000a40 RSI: 0000000000008916 RDI: 0000000000000004 [ 65.536320][ T1177] RBP: 00007f0b3ee37af8 R08: 0000000000000000 R09: 0000000000000000 [ 65.536331][ T1177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.536341][ T1177] R13: 00007f0b3f026038 R14: 00007f0b3f025fa0 R15: 00007ffcb02a2928 [ 65.536354][ T1177] [ 65.541127][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 65.616501][ T1184] netlink: 'syz.0.283': attribute type 27 has an invalid length. [ 65.899176][ T565] cdc_ncm 4-1:1.0: bind() failure [ 65.906097][ T565] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 65.918568][ T565] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 65.928436][ T565] usb 4-1: USB disconnect, device number 9 [ 65.995570][ T1202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 66.017913][ T1205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 66.044785][ T1213] syz.0.294: attempt to access beyond end of device [ 66.044785][ T1213] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 66.057692][ T1213] exFAT-fs (loop0): unable to read boot sector [ 66.064454][ T1213] exFAT-fs (loop0): failed to read boot sector [ 66.070900][ T1213] exFAT-fs (loop0): failed to recognize exfat type [ 66.111460][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.112367][ T1230] random: crng reseeded on system resumption [ 66.128229][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.134711][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.137272][ T1228] Restarting kernel threads ... done. [ 66.141091][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.152893][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.162248][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.168765][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.175318][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.181602][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.189052][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.195365][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.201819][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.209676][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.216588][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.223273][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.229502][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.235766][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.243597][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.249878][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.256926][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.263352][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.263996][ T1239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 66.269809][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.284602][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.290854][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.300666][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.307374][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.309167][ T1242] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=1242 comm=syz.0.302 [ 66.313738][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.334981][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.341237][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.347750][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.354362][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.361469][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.367952][ T1222] 9pnet_fd: Insufficient options for proto=fd [ 66.468468][ T1267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 66.592728][ T690] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 66.753759][ T690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.764050][ T690] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.782952][ T690] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.790739][ T690] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 66.800094][ T690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.808996][ T690] usb 1-1: config 0 descriptor?? [ 66.817465][ T690] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 67.732530][ T1297] FAULT_INJECTION: forcing a failure. [ 67.732530][ T1297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.745776][ T1297] CPU: 1 UID: 0 PID: 1297 Comm: syz.1.319 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 67.745808][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.745822][ T1297] Call Trace: [ 67.745828][ T1297] [ 67.745834][ T1297] __dump_stack+0x21/0x30 [ 67.745857][ T1297] dump_stack_lvl+0x140/0x1c0 [ 67.745874][ T1297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.745893][ T1297] ? selinux_file_ioctl+0x732/0x1480 [ 67.745919][ T1297] dump_stack+0x19/0x20 [ 67.745935][ T1297] should_fail_ex+0x3c2/0x510 [ 67.745960][ T1297] should_fail+0xf/0x20 [ 67.745984][ T1297] should_fail_usercopy+0x1e/0x30 [ 67.746002][ T1297] _copy_from_user+0x20/0xa0 [ 67.746022][ T1297] mon_bin_ioctl+0x4f8/0xd00 [ 67.746041][ T1297] ? __cfi_mon_bin_ioctl+0x10/0x10 [ 67.746058][ T1297] ? __fget_files+0x2bc/0x330 [ 67.746078][ T1297] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.746097][ T1297] ? security_file_ioctl+0x3e/0x110 [ 67.746121][ T1297] ? __cfi_mon_bin_ioctl+0x10/0x10 [ 67.746138][ T1297] __se_sys_ioctl+0x126/0x1b0 [ 67.746154][ T1297] __x64_sys_ioctl+0x7f/0xa0 [ 67.746172][ T1297] x64_sys_call+0x1878/0x2ee0 [ 67.746191][ T1297] do_syscall_64+0x57/0xf0 [ 67.746209][ T1297] ? clear_bhb_loop+0x50/0xa0 [ 67.746231][ T1297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.746253][ T1297] RIP: 0033:0x7ff5c8d9fb19 [ 67.746268][ T1297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.746284][ T1297] RSP: 002b:00007ff5c9cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.746304][ T1297] RAX: ffffffffffffffda RBX: 00007ff5c9025fa0 RCX: 00007ff5c8d9fb19 [ 67.746319][ T1297] RDX: 0000200000000540 RSI: 000000004018920a RDI: 0000000000000003 [ 67.746338][ T1297] RBP: 00007ff5c9cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 67.746350][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.746362][ T1297] R13: 00007ff5c9026038 R14: 00007ff5c9025fa0 R15: 00007fff514195a8 [ 67.746378][ T1297] [ 68.196634][ T1304] FAULT_INJECTION: forcing a failure. [ 68.196634][ T1304] name fail_futex, interval 1, probability 0, space 0, times 0 [ 68.209953][ T1304] CPU: 1 UID: 0 PID: 1304 Comm: syz.1.322 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 68.209988][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.210003][ T1304] Call Trace: [ 68.210010][ T1304] [ 68.210017][ T1304] __dump_stack+0x21/0x30 [ 68.210042][ T1304] dump_stack_lvl+0x140/0x1c0 [ 68.210078][ T1304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.210098][ T1304] ? native_smp_send_reschedule+0x3d/0x60 [ 68.210126][ T1304] ? resched_curr+0x1db/0x440 [ 68.210146][ T1304] dump_stack+0x19/0x20 [ 68.210163][ T1304] should_fail_ex+0x3c2/0x510 [ 68.210191][ T1304] should_fail+0xf/0x20 [ 68.210215][ T1304] get_futex_key+0x178/0x940 [ 68.210236][ T1304] ? __cfi_get_futex_key+0x10/0x10 [ 68.210255][ T1304] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 68.210275][ T1304] ? ttwu_do_activate+0x620/0x620 [ 68.210299][ T1304] futex_wait_setup+0xae/0x260 [ 68.210323][ T1304] ? __cfi_futex_wait_setup+0x10/0x10 [ 68.210346][ T1304] ? __asan_memcpy+0x5a/0x80 [ 68.210371][ T1304] __futex_wait+0x12c/0x3d0 [ 68.210395][ T1304] ? __cfi___futex_wait+0x10/0x10 [ 68.210418][ T1304] ? __cfi_futex_wake_mark+0x10/0x10 [ 68.210442][ T1304] ? futex_wake+0x666/0x950 [ 68.210464][ T1304] futex_wait+0x128/0x7c0 [ 68.210487][ T1304] ? __cfi_futex_wait+0x10/0x10 [ 68.210512][ T1304] ? sock_do_ioctl+0x1c8/0x330 [ 68.210531][ T1304] do_futex+0x32a/0x510 [ 68.210550][ T1304] ? __cfi_do_futex+0x10/0x10 [ 68.210568][ T1304] ? mutex_unlock+0x90/0x240 [ 68.210592][ T1304] __se_sys_futex+0x13c/0x320 [ 68.210612][ T1304] ? __x64_sys_futex+0x110/0x110 [ 68.210633][ T1304] ? __kasan_check_write+0x18/0x20 [ 68.210659][ T1304] __x64_sys_futex+0xe9/0x110 [ 68.210679][ T1304] x64_sys_call+0x227f/0x2ee0 [ 68.210699][ T1304] do_syscall_64+0x57/0xf0 [ 68.210717][ T1304] ? clear_bhb_loop+0x50/0xa0 [ 68.210741][ T1304] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.210764][ T1304] RIP: 0033:0x7ff5c8d9fb19 [ 68.210782][ T1304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.210799][ T1304] RSP: 002b:00007ff5c9cd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 68.210819][ T1304] RAX: ffffffffffffffda RBX: 00007ff5c9025fa8 RCX: 00007ff5c8d9fb19 [ 68.210833][ T1304] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff5c9025fa8 [ 68.210846][ T1304] RBP: 00007ff5c9025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 68.210858][ T1304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.210870][ T1304] R13: 00007ff5c9026038 R14: 00007fff514194c0 R15: 00007fff514195a8 [ 68.210887][ T1304] [ 68.211439][ T1304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 68.482874][ T690] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 68.643838][ T690] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 68.653878][ T690] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 68.663988][ T690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.676345][ T1314] 9pnet: p9_errstr2errno: server reported unknown error [ 68.683603][ T690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 68.699223][ T690] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 68.712707][ T690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.723140][ T1317] FAULT_INJECTION: forcing a failure. [ 68.723140][ T1317] name failslab, interval 1, probability 0, space 0, times 0 [ 68.738163][ T1317] CPU: 1 UID: 0 PID: 1317 Comm: syz.1.327 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 68.738194][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.738207][ T1317] Call Trace: [ 68.738214][ T1317] [ 68.738222][ T1317] __dump_stack+0x21/0x30 [ 68.738246][ T1317] dump_stack_lvl+0x140/0x1c0 [ 68.738264][ T1317] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.738289][ T1317] dump_stack+0x19/0x20 [ 68.738306][ T1317] should_fail_ex+0x3c2/0x510 [ 68.738334][ T1317] ? security_sk_alloc+0x65/0x260 [ 68.738358][ T1317] should_failslab+0xac/0x100 [ 68.738378][ T1317] __kmalloc_noprof+0x69/0x510 [ 68.738404][ T1317] ? kasan_save_alloc_info+0x3a/0x50 [ 68.738427][ T1317] ? security_sk_alloc+0x65/0x260 [ 68.738450][ T1317] ? __kasan_kmalloc+0x96/0xb0 [ 68.738468][ T1317] security_sk_alloc+0x65/0x260 [ 68.738490][ T1317] ? security_inode_alloc+0x51/0x230 [ 68.738512][ T1317] sk_prot_alloc+0x123/0x3a0 [ 68.738533][ T1317] ? bpf_lsm_capable+0xd/0x20 [ 68.738568][ T1317] sk_alloc+0x40/0x590 [ 68.738588][ T1317] ? ns_capable+0x90/0xf0 [ 68.738610][ T1317] packet_create+0x108/0xa10 [ 68.738637][ T1317] __sock_create+0x3a5/0x810 [ 68.738657][ T1317] __sys_socket+0xe1/0x1c0 [ 68.738676][ T1317] __x64_sys_socket+0x7e/0x90 [ 68.738695][ T1317] x64_sys_call+0x2608/0x2ee0 [ 68.738715][ T1317] do_syscall_64+0x57/0xf0 [ 68.738733][ T1317] ? clear_bhb_loop+0x50/0xa0 [ 68.738758][ T1317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.738782][ T1317] RIP: 0033:0x7ff5c8d9fb19 [ 68.738799][ T1317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.738816][ T1317] RSP: 002b:00007ff5c9cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 68.738836][ T1317] RAX: ffffffffffffffda RBX: 00007ff5c9025fa0 RCX: 00007ff5c8d9fb19 [ 68.738851][ T1317] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 68.738864][ T1317] RBP: 00007ff5c8e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 68.738876][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.738888][ T1317] R13: 00007ff5c9026038 R14: 00007ff5c9025fa0 R15: 00007fff514195a8 [ 68.738905][ T1317] [ 68.739004][ T1300] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 68.970856][ T1300] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 68.980270][ T690] pl2303 4-1:1.0: pl2303 converter detected [ 69.102767][ T690] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 69.111098][ T690] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 69.119640][ T690] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 69.128007][ T690] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 69.136312][ T690] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 69.144714][ T690] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 69.153222][ T690] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 69.161424][ T690] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 69.170073][ T690] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 69.178698][ T690] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 69.193853][ T690] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0002]: -71 [ 69.212024][ T690] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 69.225133][ T690] usb 4-1: USB disconnect, device number 10 [ 69.234259][ T690] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 69.244199][ T690] pl2303 4-1:1.0: device disconnected [ 69.302732][ T686] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 69.356378][ T691] usb 1-1: USB disconnect, device number 18 [ 69.455046][ T686] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 69.472764][ T686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.480803][ T686] usb 2-1: Product: syz [ 69.489988][ T1325] FAULT_INJECTION: forcing a failure. [ 69.489988][ T1325] name failslab, interval 1, probability 0, space 0, times 0 [ 69.505237][ T686] usb 2-1: Manufacturer: syz [ 69.509856][ T686] usb 2-1: SerialNumber: syz [ 69.518637][ T1325] CPU: 1 UID: 0 PID: 1325 Comm: syz.0.330 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 69.518668][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.518681][ T1325] Call Trace: [ 69.518688][ T1325] [ 69.518696][ T1325] __dump_stack+0x21/0x30 [ 69.518720][ T1325] dump_stack_lvl+0x140/0x1c0 [ 69.518742][ T1325] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.518762][ T1325] dump_stack+0x19/0x20 [ 69.518780][ T1325] should_fail_ex+0x3c2/0x510 [ 69.518807][ T1325] should_failslab+0xac/0x100 [ 69.518827][ T1325] kmem_cache_alloc_noprof+0x42/0x410 [ 69.518851][ T1325] ? kasan_save_alloc_info+0x3a/0x50 [ 69.518874][ T1325] ? seq_open+0x6f/0x1d0 [ 69.518893][ T1325] ? __kasan_kmalloc+0x96/0xb0 [ 69.518913][ T1325] seq_open+0x6f/0x1d0 [ 69.518931][ T1325] ? __kasan_check_write+0x18/0x20 [ 69.518955][ T1325] kernfs_fop_open+0x4fc/0xd50 [ 69.518978][ T1325] ? __cfi_kernfs_fop_open+0x10/0x10 [ 69.519000][ T1325] do_dentry_open+0x97f/0x1510 [ 69.519025][ T1325] vfs_open+0x86/0x240 [ 69.519045][ T1325] ? __cfi_vfs_open+0x10/0x10 [ 69.519065][ T1325] ? may_open+0x352/0x430 [ 69.519086][ T1325] path_openat+0x2c49/0x35a0 [ 69.519107][ T1325] ? kasan_save_alloc_info+0x3a/0x50 [ 69.519130][ T1325] ? getname+0x1b/0x30 [ 69.519146][ T1325] ? x64_sys_call+0xe69/0x2ee0 [ 69.519166][ T1325] ? do_syscall_64+0x57/0xf0 [ 69.519186][ T1325] ? do_filp_open+0x440/0x440 [ 69.519208][ T1325] do_filp_open+0x1f2/0x440 [ 69.519230][ T1325] ? __cfi_do_filp_open+0x10/0x10 [ 69.519254][ T1325] ? alloc_fd+0x4c1/0x570 [ 69.519274][ T1325] do_sys_openat2+0x134/0x1d0 [ 69.519295][ T1325] ? fput+0x1a4/0x230 [ 69.519316][ T1325] ? do_sys_open+0x100/0x100 [ 69.519339][ T1325] __x64_sys_openat+0x13a/0x170 [ 69.519361][ T1325] x64_sys_call+0xe69/0x2ee0 [ 69.519380][ T1325] do_syscall_64+0x57/0xf0 [ 69.519397][ T1325] ? clear_bhb_loop+0x50/0xa0 [ 69.519421][ T1325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.519454][ T1325] RIP: 0033:0x7fb463b9fb19 [ 69.519471][ T1325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.519489][ T1325] RSP: 002b:00007fb464a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.519511][ T1325] RAX: ffffffffffffffda RBX: 00007fb463e26090 RCX: 00007fb463b9fb19 [ 69.519526][ T1325] RDX: 0000000000000002 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 69.519542][ T1325] RBP: 00007fb463c37af8 R08: 0000000000000000 R09: 0000000000000000 [ 69.519555][ T1325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.519567][ T1325] R13: 00007fb463e26128 R14: 00007fb463e26090 R15: 00007fff28812ff8 [ 69.519584][ T1325] [ 69.521912][ T1325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.330'. [ 69.838864][ T686] usb 2-1: USB disconnect, device number 14 [ 69.844956][ T1329] FAULT_INJECTION: forcing a failure. [ 69.844956][ T1329] name fail_futex, interval 1, probability 0, space 0, times 0 [ 69.872741][ T1329] CPU: 1 UID: 0 PID: 1329 Comm: syz.3.331 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 69.872774][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.872788][ T1329] Call Trace: [ 69.872794][ T1329] [ 69.872802][ T1329] __dump_stack+0x21/0x30 [ 69.872827][ T1329] dump_stack_lvl+0x140/0x1c0 [ 69.872846][ T1329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.872866][ T1329] dump_stack+0x19/0x20 [ 69.872884][ T1329] should_fail_ex+0x3c2/0x510 [ 69.872912][ T1329] should_fail+0xf/0x20 [ 69.872937][ T1329] get_futex_key+0x178/0x940 [ 69.872967][ T1329] ? __cfi_get_futex_key+0x10/0x10 [ 69.872986][ T1329] ? mutex_unlock+0x90/0x240 [ 69.873010][ T1329] ? __cfi_mutex_unlock+0x10/0x10 [ 69.873030][ T1329] futex_wake+0x150/0x950 [ 69.873048][ T1329] ? seq_read_iter+0xd56/0xf30 [ 69.873066][ T1329] ? __cfi_futex_wake+0x10/0x10 [ 69.873086][ T1329] ? proc_reg_read_iter+0x220/0x2c0 [ 69.873107][ T1329] ? vfs_read+0x727/0xc70 [ 69.873131][ T1329] do_futex+0x37d/0x510 [ 69.873149][ T1329] ? __cfi_do_futex+0x10/0x10 [ 69.873167][ T1329] __se_sys_futex+0x13c/0x320 [ 69.873182][ T1329] ? fput+0x1a4/0x230 [ 69.873200][ T1329] ? __x64_sys_futex+0x110/0x110 [ 69.873218][ T1329] ? __kasan_check_write+0x18/0x20 [ 69.873243][ T1329] __x64_sys_futex+0xe9/0x110 [ 69.873263][ T1329] x64_sys_call+0x227f/0x2ee0 [ 69.873283][ T1329] do_syscall_64+0x57/0xf0 [ 69.873301][ T1329] ? clear_bhb_loop+0x50/0xa0 [ 69.873326][ T1329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.873353][ T1329] RIP: 0033:0x7f65ed39fb19 [ 69.873370][ T1329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.873388][ T1329] RSP: 002b:00007f65ee2d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.873410][ T1329] RAX: ffffffffffffffda RBX: 00007f65ed625fa8 RCX: 00007f65ed39fb19 [ 69.873426][ T1329] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65ed625fac [ 69.873440][ T1329] RBP: 00007f65ed625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 69.873453][ T1329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.873465][ T1329] R13: 00007f65ed626038 R14: 00007ffc12769aa0 R15: 00007ffc12769b88 [ 69.873481][ T1329] [ 70.121796][ T1334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.332'. [ 70.148625][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 70.148642][ T36] audit: type=1400 audit(1793668636.359:361): avc: denied { create } for pid=1336 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 70.412734][ T691] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 70.573457][ T691] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 70.589898][ T691] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 70.605249][ T691] usb 4-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 70.618731][ T691] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.622737][ T562] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 70.625603][ T691] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 70.642267][ T691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.652351][ T691] usb 4-1: config 0 descriptor?? [ 70.670944][ T1337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.678499][ T1355] FAULT_INJECTION: forcing a failure. [ 70.678499][ T1355] name fail_futex, interval 1, probability 0, space 0, times 0 [ 70.693859][ T1355] CPU: 1 UID: 0 PID: 1355 Comm: syz.1.340 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 70.693896][ T1355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.693918][ T1355] Call Trace: [ 70.693925][ T1355] [ 70.693933][ T1355] __dump_stack+0x21/0x30 [ 70.693958][ T1355] dump_stack_lvl+0x140/0x1c0 [ 70.693977][ T1355] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.693997][ T1355] dump_stack+0x19/0x20 [ 70.694014][ T1355] should_fail_ex+0x3c2/0x510 [ 70.694039][ T1355] should_fail+0xf/0x20 [ 70.694062][ T1355] get_futex_key+0x178/0x940 [ 70.694080][ T1355] ? __cfi_get_futex_key+0x10/0x10 [ 70.694097][ T1355] ? mutex_unlock+0x90/0x240 [ 70.694119][ T1355] ? __cfi_mutex_unlock+0x10/0x10 [ 70.694140][ T1355] futex_wake+0x150/0x950 [ 70.694160][ T1355] ? seq_read_iter+0xd56/0xf30 [ 70.694179][ T1355] ? __cfi_futex_wake+0x10/0x10 [ 70.694200][ T1355] ? proc_reg_read_iter+0x220/0x2c0 [ 70.694223][ T1355] ? vfs_read+0x727/0xc70 [ 70.694246][ T1355] do_futex+0x37d/0x510 [ 70.694264][ T1355] ? __cfi_do_futex+0x10/0x10 [ 70.694282][ T1355] __se_sys_futex+0x13c/0x320 [ 70.694300][ T1355] ? fput+0x1a4/0x230 [ 70.694318][ T1355] ? __x64_sys_futex+0x110/0x110 [ 70.694338][ T1355] ? __kasan_check_write+0x18/0x20 [ 70.694362][ T1355] __x64_sys_futex+0xe9/0x110 [ 70.694380][ T1355] x64_sys_call+0x227f/0x2ee0 [ 70.694398][ T1355] do_syscall_64+0x57/0xf0 [ 70.694415][ T1355] ? clear_bhb_loop+0x50/0xa0 [ 70.694437][ T1355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.694459][ T1355] RIP: 0033:0x7ff5c8d9fb19 [ 70.694476][ T1355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.694493][ T1355] RSP: 002b:00007ff5c9cd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 70.694513][ T1355] RAX: ffffffffffffffda RBX: 00007ff5c9025fa8 RCX: 00007ff5c8d9fb19 [ 70.694528][ T1355] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5c9025fac [ 70.694542][ T1355] RBP: 00007ff5c9025fa0 R08: 4000000000000000 R09: 0000000000000000 [ 70.694555][ T1355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.694566][ T1355] R13: 00007ff5c9026038 R14: 00007fff514194c0 R15: 00007fff514195a8 [ 70.694583][ T1355] [ 70.728417][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 70.959040][ T562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.971961][ T562] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 70.984334][ T562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.991248][ T36] audit: type=1400 audit(1793668637.204:362): avc: denied { mount } for pid=1356 comm="syz.1.341" name="/" dev="configfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.992643][ T562] usb 1-1: Product: syz [ 71.016318][ T1358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.019258][ T562] usb 1-1: Manufacturer: syz [ 71.032427][ T562] usb 1-1: SerialNumber: syz [ 71.037767][ T562] usb 1-1: config 0 descriptor?? [ 71.042907][ T36] audit: type=1400 audit(1793668637.233:363): avc: denied { search } for pid=1356 comm="syz.1.341" name="/" dev="configfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.065065][ T1359] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.074176][ T562] asix 1-1:0.0: probe with driver asix failed with error -22 [ 71.081905][ T36] audit: type=1400 audit(1793668637.233:364): avc: denied { read } for pid=1356 comm="syz.1.341" name="/" dev="configfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.106331][ T36] audit: type=1400 audit(1793668637.233:365): avc: denied { open } for pid=1356 comm="syz.1.341" path="/" dev="configfs" ino=2623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.108443][ T1357] incfs: Can't find or create .index dir in ./cgroup [ 71.128280][ T36] audit: type=1400 audit(1793668637.310:366): avc: denied { mounton } for pid=1356 comm="syz.1.341" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.158688][ T1357] incfs: mount failed -22 [ 71.270341][ T691] logitech 0003:046D:C298.000B: unknown main item tag 0x2 [ 71.289190][ T691] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 71.296372][ T691] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 71.319195][ T562] usb 1-1: USB disconnect, device number 19 [ 71.321157][ T691] input: HID 046d:c298 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C298.000B/input/input7 [ 71.357520][ T36] audit: type=1400 audit(1793668637.552:367): avc: denied { ioctl } for pid=1361 comm="syz.1.342" path="socket:[13128]" dev="sockfs" ino=13128 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.404331][ T36] audit: type=1400 audit(1793668637.552:368): avc: denied { bind } for pid=1361 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.434845][ T691] logitech 0003:046D:C298.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 71.463803][ T691] logitech 0003:046D:C298.000B: implement() called with too large value 245 (n: 0)! (kworker/1:12) [ 71.487434][ T691] logitech 0003:046D:C298.000B: implement() called with too large value 248 (n: 0)! (kworker/1:12) [ 71.498163][ T691] logitech 0003:046D:C298.000B: implement() called with too large value 3 (n: 0)! (kworker/1:12) [ 71.508697][ T691] logitech 0003:046D:C298.000B: implement() called with too large value 129 (n: 0)! (kworker/1:12) [ 71.519404][ T691] logitech 0003:046D:C298.000B: implement() called with too large value 11 (n: 0)! (kworker/1:12) [ 71.577220][ T691] logitech 0003:046D:C298.000B: Force feedback support for Logitech Gaming Wheels [ 71.593458][ T691] usb 4-1: USB disconnect, device number 11 [ 71.678156][ T686] kernel write not supported for file [eventfd] (pid: 686 comm: kworker/1:8) [ 71.702494][ T1372] netlink: 'syz.1.344': attribute type 27 has an invalid length. [ 71.862352][ T1382] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.879193][ T1380] kvm: pic: non byte read [ 71.883932][ T1380] kvm: pic: non byte read [ 71.889718][ T1380] kvm: pic: non byte read [ 71.894463][ T1380] kvm: pic: level sensitive irq not supported [ 71.894545][ T1380] kvm: pic: non byte read [ 71.905654][ T1380] kvm: pic: non byte read [ 71.912980][ T1380] kvm: pic: single mode not supported [ 71.913067][ T1380] kvm: pic: non byte read [ 71.923428][ T1380] kvm: pic: non byte read [ 71.976135][ T36] audit: type=1400 audit(1793668638.153:369): avc: denied { read } for pid=1384 comm="syz.0.349" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.000549][ T36] audit: type=1400 audit(1793668638.153:370): avc: denied { open } for pid=1384 comm="syz.0.349" path="/74/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.059022][ T1388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 72.087646][ T1392] FAULT_INJECTION: forcing a failure. [ 72.087646][ T1392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.100823][ T1392] CPU: 1 UID: 0 PID: 1392 Comm: syz.1.352 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 72.100854][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.100866][ T1392] Call Trace: [ 72.100872][ T1392] [ 72.100879][ T1392] __dump_stack+0x21/0x30 [ 72.100903][ T1392] dump_stack_lvl+0x140/0x1c0 [ 72.100920][ T1392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.100936][ T1392] ? check_stack_object+0x138/0x150 [ 72.100962][ T1392] dump_stack+0x19/0x20 [ 72.100978][ T1392] should_fail_ex+0x3c2/0x510 [ 72.101004][ T1392] should_fail+0xf/0x20 [ 72.101027][ T1392] should_fail_usercopy+0x1e/0x30 [ 72.101045][ T1392] _copy_to_user+0x24/0xa0 [ 72.101065][ T1392] simple_read_from_buffer+0xed/0x160 [ 72.101085][ T1392] proc_fail_nth_read+0x1aa/0x220 [ 72.101106][ T1392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.101124][ T1392] ? bpf_lsm_file_permission+0xd/0x20 [ 72.101144][ T1392] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.101165][ T1392] vfs_read+0x288/0xc70 [ 72.101190][ T1392] ? __cfi_vfs_read+0x10/0x10 [ 72.101212][ T1392] ? __kasan_check_write+0x18/0x20 [ 72.101236][ T1392] ? mutex_lock+0x97/0x1d0 [ 72.101257][ T1392] ? __cfi_mutex_lock+0x10/0x10 [ 72.101279][ T1392] ksys_read+0x145/0x260 [ 72.101303][ T1392] ? __cfi_ksys_read+0x10/0x10 [ 72.101326][ T1392] ? __kasan_check_read+0x15/0x20 [ 72.101350][ T1392] __x64_sys_read+0x7f/0x90 [ 72.101374][ T1392] x64_sys_call+0x2638/0x2ee0 [ 72.101393][ T1392] do_syscall_64+0x57/0xf0 [ 72.101409][ T1392] ? clear_bhb_loop+0x50/0xa0 [ 72.101432][ T1392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.101454][ T1392] RIP: 0033:0x7ff5c8d6034e [ 72.101470][ T1392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.101483][ T1392] RSP: 002b:00007ff5c9cd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.101503][ T1392] RAX: ffffffffffffffda RBX: 00007ff5c9cd56c0 RCX: 00007ff5c8d6034e [ 72.101517][ T1392] RDX: 000000000000000f RSI: 00007ff5c9cd50a0 RDI: 0000000000000004 [ 72.101529][ T1392] RBP: 00007ff5c9cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 72.101540][ T1392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.101551][ T1392] R13: 00007ff5c9026038 R14: 00007ff5c9025fa0 R15: 00007fff514195a8 [ 72.101567][ T1392] [ 72.500289][ T1401] fuse: Unknown parameter 'fX@Ô\t€¡BK`ß h Ô�ê "ð“e¡ä}cÁVß«¯¾û˜†64ë‘ ŒÙüt „q ÈáV׸¹§|ŽNÑ#<ÑöëȪÅÞ %Þ›WX·üÂðþ1?¡È·ã$ï [ 72.500289][ T1401] QqüR1ʬh÷4|tkc­ná�ÐT‰~w&¤£éÑÛôSw [ 72.500289][ T1401] ÔfÉE[R0x0000000000000000' [ 72.552152][ T1410] netlink: 'syz.3.357': attribute type 27 has an invalid length. [ 72.591037][ T1414] syzkaller0: entered promiscuous mode [ 72.602129][ T1414] syzkaller0: entered allmulticast mode [ 72.610859][ T1412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 72.620476][ T1414] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 72.647593][ T1416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 72.656685][ T1416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 72.665865][ T1416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 72.820120][ T1427] overlayfs: overlapping lowerdir path [ 72.844896][ T1427] netlink: 72 bytes leftover after parsing attributes in process `syz.3.363'. [ 72.853798][ T1427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 72.906502][ T1427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 73.262008][ T557] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 73.422759][ T557] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.453750][ T557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.472070][ T557] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.503183][ T557] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.522753][ T557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.533758][ T557] usb 4-1: Product: syz [ 73.542563][ T557] usb 4-1: Manufacturer: syz [ 73.557785][ T557] usb 4-1: SerialNumber: syz [ 73.574975][ T557] usb 4-1: config 0 descriptor?? [ 73.811412][ T686] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 73.966595][ T686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.976856][ T686] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 73.986119][ T686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.000200][ T686] usb 1-1: config 0 descriptor?? [ 74.007743][ T686] usb 1-1: bad CDC descriptors [ 74.220180][ T557] usb 1-1: USB disconnect, device number 20 [ 75.046409][ T1478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1478 comm=syz.1.381 [ 75.063614][ T691] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 75.237682][ T691] usb 1-1: Using ep0 maxpacket: 32 [ 75.249312][ T691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.257834][ T691] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.268321][ T691] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.283016][ T691] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 75.292331][ T691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.300566][ T691] usb 1-1: Product: syz [ 75.304842][ T691] usb 1-1: Manufacturer: syz [ 75.309711][ T691] usb 1-1: SerialNumber: syz [ 75.526757][ T1466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.536449][ T1466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.548177][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 75.548194][ T36] audit: type=1400 audit(1793668641.637:385): avc: denied { read } for pid=1464 comm="syz.0.376" path="socket:[14533]" dev="sockfs" ino=14533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.684076][ T36] audit: type=1400 audit(1793668641.764:386): avc: denied { ioctl } for pid=1464 comm="syz.0.376" path="/83/file0" dev="tmpfs" ino=473 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.709336][ T36] audit: type=1400 audit(1793668641.784:387): avc: denied { mounton } for pid=1464 comm="syz.0.376" path="/83/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 76.142598][ T686] usb 4-1: USB disconnect, device number 12 [ 76.497061][ T36] audit: type=1400 audit(1793668642.555:388): avc: denied { map } for pid=1499 comm="syz.3.388" path="pipe:[14704]" dev="pipefs" ino=14704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.834895][ T562] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 76.988281][ T562] usb 4-1: device descriptor read/64, error -71 [ 77.233485][ T562] usb 4-1: device descriptor read/64, error -71 [ 77.488911][ T562] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 77.621722][ T562] usb 4-1: device descriptor read/64, error -71 [ 77.866927][ T562] usb 4-1: device descriptor read/64, error -71 [ 77.892830][ T691] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.913823][ T36] audit: type=1400 audit(1793668643.945:389): avc: denied { append } for pid=1505 comm="syz.0.390" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 77.937511][ T1506] device-mapper: ioctl: Unable to rename non-existent device, to uuid syza3 [ 77.937964][ T691] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 77.966884][ T691] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 77.980538][ T562] usb usb4-port1: attempt power cycle [ 77.988042][ T36] audit: type=1400 audit(1793668644.013:390): avc: denied { bind } for pid=1505 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.020286][ T691] usb 1-1: USB disconnect, device number 21 [ 78.032134][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.051498][ T36] audit: type=1400 audit(1793668644.013:391): avc: denied { write } for pid=1505 comm="syz.0.390" name="usb_gadget" dev="configfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.092283][ T36] audit: type=1400 audit(1793668644.013:392): avc: denied { add_name } for pid=1505 comm="syz.0.390" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.127214][ T36] audit: type=1400 audit(1793668644.013:393): avc: denied { create } for pid=1505 comm="syz.0.390" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 78.147666][ T36] audit: type=1400 audit(1793668644.013:394): avc: denied { create } for pid=1505 comm="syz.0.390" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 78.168646][ T1509] netlink: 'syz.0.391': attribute type 27 has an invalid length. [ 78.293502][ T1516] input: syz0 as /devices/virtual/input/input8 [ 78.326194][ T562] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 78.347595][ T562] usb 4-1: device descriptor read/8, error -71 [ 78.404924][ T1520] overlayfs: statfs failed on './file0' [ 78.480204][ T562] usb 4-1: device descriptor read/8, error -71 [ 78.561110][ T1526] FAULT_INJECTION: forcing a failure. [ 78.561110][ T1526] name failslab, interval 1, probability 0, space 0, times 0 [ 78.573916][ T1526] CPU: 1 UID: 0 PID: 1526 Comm: syz.1.398 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 78.573950][ T1526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.573963][ T1526] Call Trace: [ 78.573970][ T1526] [ 78.573977][ T1526] __dump_stack+0x21/0x30 [ 78.574002][ T1526] dump_stack_lvl+0x140/0x1c0 [ 78.574019][ T1526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.574039][ T1526] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 78.574067][ T1526] dump_stack+0x19/0x20 [ 78.574084][ T1526] should_fail_ex+0x3c2/0x510 [ 78.574112][ T1526] should_failslab+0xac/0x100 [ 78.574132][ T1526] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 78.574160][ T1526] ? kstrdup_const+0x45/0x60 [ 78.574183][ T1526] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 78.574205][ T1526] kstrdup+0x4d/0x130 [ 78.574226][ T1526] ? kstrdup_const+0x3a/0x60 [ 78.574248][ T1526] kstrdup_const+0x45/0x60 [ 78.574270][ T1526] __kernfs_new_node+0xaa/0x740 [ 78.574290][ T1526] ? __cfi_down_write+0x10/0x10 [ 78.574316][ T1526] ? kernfs_new_node+0x280/0x280 [ 78.574335][ T1526] ? __kasan_check_write+0x18/0x20 [ 78.574360][ T1526] ? up_write+0x66/0x280 [ 78.574381][ T1526] ? kernfs_activate+0x1ee/0x200 [ 78.574402][ T1526] ? kernfs_add_one+0x301/0x400 [ 78.574423][ T1526] kernfs_new_node+0x154/0x280 [ 78.574443][ T1526] kernfs_create_dir_ns+0x4b/0x130 [ 78.574467][ T1526] sysfs_create_dir_ns+0x127/0x210 [ 78.574494][ T1526] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 78.574521][ T1526] kobject_add_internal+0x71f/0xc20 [ 78.574542][ T1526] kobject_add+0x169/0x240 [ 78.574559][ T1526] ? mutex_unlock+0x90/0x240 [ 78.574581][ T1526] ? __cfi_kobject_add+0x10/0x10 [ 78.574599][ T1526] ? get_device_parent+0x43d/0x470 [ 78.574621][ T1526] device_add+0x3b5/0xbf0 [ 78.574642][ T1526] wakeup_source_sysfs_add+0x1e0/0x380 [ 78.574660][ T1526] ? wakeup_source_create+0xca/0x1e0 [ 78.574683][ T1526] ? wakeup_source_register+0x1c/0x2b0 [ 78.574708][ T1526] wakeup_source_register+0x9b/0x2b0 [ 78.574732][ T1526] ep_create_wakeup_source+0x161/0x5b0 [ 78.574754][ T1526] ? ep_get_upwards_depth_proc+0x1c0/0x1c0 [ 78.574778][ T1526] ? ep_insert+0x46c/0x1600 [ 78.574798][ T1526] ep_insert+0xbe2/0x1600 [ 78.574818][ T1526] ? ep_loop_check+0xa0/0xa0 [ 78.574837][ T1526] ? mutex_lock+0x97/0x1d0 [ 78.574858][ T1526] ? security_capable+0x44/0x130 [ 78.574892][ T1526] do_epoll_ctl+0x955/0xcf0 [ 78.574913][ T1526] __x64_sys_epoll_ctl+0x166/0x1b0 [ 78.574935][ T1526] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 78.574957][ T1526] ? switch_fpu_return+0x12/0x20 [ 78.574984][ T1526] x64_sys_call+0x2c44/0x2ee0 [ 78.575006][ T1526] do_syscall_64+0x57/0xf0 [ 78.575022][ T1526] ? clear_bhb_loop+0x50/0xa0 [ 78.575045][ T1526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.575068][ T1526] RIP: 0033:0x7ff5c8d9fb19 [ 78.575085][ T1526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.575102][ T1526] RSP: 002b:00007ff5c9cd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 78.575124][ T1526] RAX: ffffffffffffffda RBX: 00007ff5c9025fa0 RCX: 00007ff5c8d9fb19 [ 78.575138][ T1526] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 78.575151][ T1526] RBP: 00007ff5c8e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 78.575163][ T1526] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 78.575174][ T1526] R13: 00007ff5c9026038 R14: 00007ff5c9025fa0 R15: 00007fff514195a8 [ 78.575188][ T1526] [ 78.575251][ T1526] kobject: kobject_add_internal failed for wakeup12 (error: -12 parent: wakeup) [ 78.734316][ T562] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 78.959735][ T562] usb 4-1: device descriptor read/8, error -71 [ 79.106994][ T562] usb 4-1: device descriptor read/8, error -71 [ 79.223865][ T562] usb usb4-port1: unable to enumerate USB device [ 79.637822][ T688] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 79.826001][ T688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 17 [ 79.845403][ T688] usb 2-1: config 1 has no interface number 0 [ 79.856916][ T688] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 79.875929][ T688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.887023][ T1570] netlink: 'syz.0.413': attribute type 15 has an invalid length. [ 79.892686][ T688] usb 2-1: Product: syz [ 79.905283][ T1570] __nla_validate_parse: 1 callbacks suppressed [ 79.905303][ T1570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 79.905612][ T688] usb 2-1: Manufacturer: syz [ 79.925299][ T688] usb 2-1: SerialNumber: syz [ 80.135909][ T1554] fuse: Bad value for 'user_id' [ 80.145186][ T1554] fuse: Bad value for 'user_id' [ 80.238068][ T688] usb 2-1: 3:1 : does not exist [ 80.248439][ T688] usb 2-1: 3:2 : does not exist [ 80.270614][ T688] usb 2-1: USB disconnect, device number 15 [ 80.707867][ T1576] netlink: 124 bytes leftover after parsing attributes in process `syz.0.416'. [ 80.717255][ T1576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 80.767218][ T1579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 80.832815][ T688] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 80.985473][ T688] usb 4-1: Using ep0 maxpacket: 8 [ 80.991741][ T688] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.000372][ T688] usb 4-1: config 179 has no interface number 0 [ 81.007092][ T688] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 81.021288][ T688] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 81.034492][ T688] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.046084][ T688] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.059877][ T688] usb 4-1: config 179 interface 65 has no altsetting 0 [ 81.066772][ T688] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 81.075979][ T691] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 81.083856][ T688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.097961][ T688] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 81.148310][ T95] input input10: unable to receive magic message: -110 [ 81.159053][ T95] input input10: unable to receive magic message: -32 [ 81.169082][ T95] input input10: unable to receive magic message: -32 [ 81.241050][ T691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.249093][ T691] usb 2-1: not running at top speed; connect to a high speed hub [ 81.259336][ T691] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 81.268706][ T691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.277013][ T691] usb 2-1: Product: syz [ 81.281256][ T686] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 81.289331][ T691] usb 2-1: Manufacturer: syz [ 81.294216][ T691] usb 2-1: SerialNumber: syz [ 81.304439][ T688] usb 4-1: USB disconnect, device number 17 [ 81.310429][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 81.320948][ T688] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 81.433956][ T686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.445098][ T686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.455045][ T686] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 81.464320][ T686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.473189][ T686] usb 1-1: config 0 descriptor?? [ 81.511172][ T691] usb 2-1: MIDIStreaming interface descriptor not found [ 81.539307][ T691] usb 2-1: USB disconnect, device number 16 [ 81.549798][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.970791][ T1591] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.970981][ T1598] FAULT_INJECTION: forcing a failure. [ 81.970981][ T1598] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 81.977930][ T1591] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.977987][ T1591] bridge_slave_0: entered allmulticast mode [ 81.991632][ T1598] CPU: 1 UID: 0 PID: 1598 Comm: syz.3.423 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 81.991661][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.991673][ T1598] Call Trace: [ 81.991680][ T1598] [ 81.991687][ T1598] __dump_stack+0x21/0x30 [ 81.991714][ T1598] dump_stack_lvl+0x140/0x1c0 [ 81.991731][ T1598] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.991749][ T1598] ? chrdev_open+0x4e8/0x610 [ 81.991767][ T1598] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 81.991790][ T1598] dump_stack+0x19/0x20 [ 81.991806][ T1598] should_fail_ex+0x3c2/0x510 [ 81.991831][ T1598] should_fail_alloc_page+0xec/0x110 [ 81.991850][ T1598] __alloc_pages_noprof+0x1c0/0x7e0 [ 81.991872][ T1598] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 81.991896][ T1598] ? __kasan_kmalloc+0x96/0xb0 [ 81.991913][ T1598] get_zeroed_page_noprof+0x1f/0x50 [ 81.991945][ T1598] mon_alloc_buff+0x6a/0x280 [ 81.991966][ T1598] mon_bin_open+0x1fd/0x540 [ 81.991983][ T1598] chrdev_open+0x4e8/0x610 [ 81.992001][ T1598] ? __cfi_chrdev_open+0x10/0x10 [ 81.992017][ T1598] ? bpf_lsm_file_open+0xd/0x20 [ 81.992037][ T1598] ? __cfi_chrdev_open+0x10/0x10 [ 81.992053][ T1598] do_dentry_open+0x97f/0x1510 [ 81.992076][ T1598] vfs_open+0x86/0x240 [ 81.992099][ T1598] ? __cfi_vfs_open+0x10/0x10 [ 81.992118][ T1598] ? may_open+0x352/0x430 [ 81.992139][ T1598] path_openat+0x2c49/0x35a0 [ 81.992160][ T1598] ? kasan_save_alloc_info+0x3a/0x50 [ 81.992184][ T1598] ? getname+0x1b/0x30 [ 81.992199][ T1598] ? x64_sys_call+0xe69/0x2ee0 [ 81.992218][ T1598] ? do_syscall_64+0x57/0xf0 [ 81.992237][ T1598] ? do_filp_open+0x440/0x440 [ 81.992259][ T1598] do_filp_open+0x1f2/0x440 [ 81.992279][ T1598] ? __cfi_do_filp_open+0x10/0x10 [ 81.992302][ T1598] ? alloc_fd+0x4c1/0x570 [ 81.992319][ T1598] do_sys_openat2+0x134/0x1d0 [ 81.992340][ T1598] ? fput+0x1a4/0x230 [ 81.992358][ T1598] ? do_sys_open+0x100/0x100 [ 81.992381][ T1598] __x64_sys_openat+0x13a/0x170 [ 81.992403][ T1598] x64_sys_call+0xe69/0x2ee0 [ 81.992421][ T1598] do_syscall_64+0x57/0xf0 [ 81.992438][ T1598] ? clear_bhb_loop+0x50/0xa0 [ 81.992460][ T1598] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.992482][ T1598] RIP: 0033:0x7f65ed36034e [ 81.992499][ T1598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.992514][ T1598] RSP: 002b:00007f65ee2d3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.992533][ T1598] RAX: ffffffffffffffda RBX: 00007f65ee2d46c0 RCX: 00007f65ed36034e [ 81.992547][ T1598] RDX: 0000000000000000 RSI: 00007f65ee2d3c00 RDI: ffffffffffffff9c [ 81.992561][ T1598] RBP: 00007f65ee2d3c00 R08: 0000000000000000 R09: 0000000000000000 [ 81.992573][ T1598] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 81.992586][ T1598] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007ffc12769b88 [ 81.992602][ T1598] [ 82.294743][ T1591] bridge_slave_0: entered promiscuous mode [ 82.309636][ T814] bridge_slave_1: left allmulticast mode [ 82.315371][ T814] bridge_slave_1: left promiscuous mode [ 82.321222][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.322627][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 82.322641][ T36] audit: type=1400 audit(1793668648.275:403): avc: denied { ioctl } for pid=1603 comm="syz.3.426" path="/dev/binderfs/binder_logs/transactions_hashed" dev="binder" ino=1048604 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.361921][ T814] bridge_slave_0: left allmulticast mode [ 82.367655][ T814] bridge_slave_0: left promiscuous mode [ 82.373394][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.398339][ T36] audit: type=1400 audit(1793668648.344:404): avc: denied { read } for pid=1607 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.441393][ T1591] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.448499][ T1591] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.455710][ T1591] bridge_slave_1: entered allmulticast mode [ 82.462252][ T1591] bridge_slave_1: entered promiscuous mode [ 82.468351][ T1608] netlink: 56 bytes leftover after parsing attributes in process `syz.3.427'. [ 82.496741][ T36] audit: type=1400 audit(1793668648.443:405): avc: denied { bind } for pid=1610 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.517961][ T1611] rust_binder: 1610:1611 got reply transaction with no transaction stack [ 82.526683][ T1611] rust_binder: 1610:1611 netlink report failed: ESRCH [ 82.533560][ T1611] rust_binder: 1610:1611 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1560 [ 82.533630][ T814] veth1_macvtap: left promiscuous mode [ 82.545436][ T691] rust_binder: 1610: undelivered TRANSACTION_ERROR: 29201 [ 82.564288][ T814] veth0_vlan: left promiscuous mode [ 82.635068][ T1618] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 82.677432][ T1591] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.684543][ T1591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.691847][ T1591] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.698927][ T1591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.765094][ T1591] veth0_vlan: entered promiscuous mode [ 82.779203][ T1591] veth1_macvtap: entered promiscuous mode [ 82.802487][ T36] audit: type=1400 audit(1793668648.748:406): avc: denied { mount } for pid=1591 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.967100][ T691] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 83.080160][ T1637] netlink: 56 bytes leftover after parsing attributes in process `syz.1.438'. [ 83.133778][ T691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.142251][ T685] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 83.150487][ T691] usb 4-1: not running at top speed; connect to a high speed hub [ 83.158928][ T691] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 4 [ 83.171887][ T691] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 83.181019][ T691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.189174][ T691] usb 4-1: Product: syz [ 83.193482][ T691] usb 4-1: Manufacturer: syz [ 83.198109][ T691] usb 4-1: SerialNumber: syz [ 83.273394][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.282202][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.290678][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.299775][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.309846][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.312545][ T685] usb 6-1: too many configurations: 116, using maximum allowed: 8 [ 83.319415][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.327715][ T685] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 83.342044][ T685] usb 6-1: can't read configurations, error -61 [ 83.474486][ T685] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 83.500141][ T691] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 83.511394][ T691] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 83.521294][ T688] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 83.531566][ T691] usb 4-1: USB disconnect, device number 18 [ 83.548005][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.627007][ T685] usb 6-1: too many configurations: 116, using maximum allowed: 8 [ 83.635956][ T685] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 83.643634][ T685] usb 6-1: can't read configurations, error -61 [ 83.650024][ T685] usb usb6-port1: attempt power cycle [ 83.667360][ T688] usb 2-1: device descriptor read/64, error -71 [ 83.904290][ T686] usbhid 1-1:0.0: can't add hid device: -71 [ 83.910404][ T686] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.920648][ T686] usb 1-1: USB disconnect, device number 22 [ 83.926935][ T688] usb 2-1: device descriptor read/64, error -71 [ 83.927423][ T1665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 83.958448][ T1669] netlink: 56 bytes leftover after parsing attributes in process `syz.0.447'. [ 83.976157][ T1671] overlayfs: missing 'lowerdir' [ 83.992004][ T685] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 84.014357][ T685] usb 6-1: too many configurations: 116, using maximum allowed: 8 [ 84.023914][ T685] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 84.031911][ T685] usb 6-1: can't read configurations, error -61 [ 84.041567][ T36] audit: type=1400 audit(1793668649.970:407): avc: denied { mounton } for pid=1675 comm="syz.3.450" path="/111/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 84.164382][ T685] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 84.185307][ T685] usb 6-1: too many configurations: 116, using maximum allowed: 8 [ 84.194205][ T685] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 84.201856][ T688] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 84.209489][ T685] usb 6-1: can't read configurations, error -61 [ 84.215888][ T685] usb usb6-port1: unable to enumerate USB device [ 84.253824][ T1697] FAULT_INJECTION: forcing a failure. [ 84.253824][ T1697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.266976][ T1697] CPU: 1 UID: 0 PID: 1697 Comm: syz.3.458 Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 84.267005][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.267018][ T1697] Call Trace: [ 84.267024][ T1697] [ 84.267030][ T1697] __dump_stack+0x21/0x30 [ 84.267052][ T1697] dump_stack_lvl+0x140/0x1c0 [ 84.267069][ T1697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.267086][ T1697] ? check_stack_object+0x138/0x150 [ 84.267111][ T1697] dump_stack+0x19/0x20 [ 84.267126][ T1697] should_fail_ex+0x3c2/0x510 [ 84.267149][ T1697] should_fail+0xf/0x20 [ 84.267171][ T1697] should_fail_usercopy+0x1e/0x30 [ 84.267187][ T1697] _copy_to_user+0x24/0xa0 [ 84.267205][ T1697] simple_read_from_buffer+0xed/0x160 [ 84.267227][ T1697] proc_fail_nth_read+0x1aa/0x220 [ 84.267248][ T1697] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.267269][ T1697] ? bpf_lsm_file_permission+0xd/0x20 [ 84.267280][ T1697] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 84.267292][ T1697] vfs_read+0x288/0xc70 [ 84.267306][ T1697] ? __cfi_vfs_read+0x10/0x10 [ 84.267318][ T1697] ? __kasan_check_write+0x18/0x20 [ 84.267332][ T1697] ? mutex_lock+0x97/0x1d0 [ 84.267344][ T1697] ? __cfi_mutex_lock+0x10/0x10 [ 84.267356][ T1697] ksys_read+0x145/0x260 [ 84.267369][ T1697] ? __cfi_ksys_read+0x10/0x10 [ 84.267382][ T1697] ? __kasan_check_read+0x15/0x20 [ 84.267395][ T1697] __x64_sys_read+0x7f/0x90 [ 84.267407][ T1697] x64_sys_call+0x2638/0x2ee0 [ 84.267418][ T1697] do_syscall_64+0x57/0xf0 [ 84.267428][ T1697] ? clear_bhb_loop+0x50/0xa0 [ 84.267441][ T1697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.267453][ T1697] RIP: 0033:0x7f65ed36034e [ 84.267464][ T1697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.267473][ T1697] RSP: 002b:00007f65ee2d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.267485][ T1697] RAX: ffffffffffffffda RBX: 00007f65ee2d46c0 RCX: 00007f65ed36034e [ 84.267493][ T1697] RDX: 000000000000000f RSI: 00007f65ee2d40a0 RDI: 0000000000000003 [ 84.267500][ T1697] RBP: 00007f65ee2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 84.267507][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.267514][ T1697] R13: 00007f65ed626038 R14: 00007f65ed625fa0 R15: 00007ffc12769b88 [ 84.267522][ T1697] [ 84.328103][ T1700] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.459'. [ 84.332020][ T1699] syz.3.459 (1699) used obsolete PPPIOCDETACH ioctl [ 84.524781][ T688] usb 2-1: device descriptor read/64, error -71 [ 84.535825][ T1703] syz.0.460 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.569660][ T36] audit: type=1400 audit(1793668650.483:408): avc: denied { create } for pid=1707 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 84.772539][ T688] usb 2-1: device descriptor read/64, error -71 [ 84.884135][ T688] usb usb2-port1: attempt power cycle [ 85.228583][ T688] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 85.249909][ T688] usb 2-1: device descriptor read/8, error -71 [ 85.381534][ T688] usb 2-1: device descriptor read/8, error -71 [ 85.623622][ T688] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 85.632251][ T1726] device-mapper: table: 252:2: crypt: Error decoding and setting key (-EINVAL) [ 85.641302][ T1726] device-mapper: ioctl: error adding target to table [ 85.644831][ T688] usb 2-1: device descriptor read/8, error -71 [ 85.659340][ T1738] netlink: 'syz.0.472': attribute type 27 has an invalid length. [ 85.714736][ T685] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 85.786725][ T688] usb 2-1: device descriptor read/8, error -71 [ 85.846441][ T685] usb 4-1: device descriptor read/64, error -71 [ 85.897139][ T688] usb usb2-port1: unable to enumerate USB device [ 85.937555][ T557] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 86.089473][ T685] usb 4-1: device descriptor read/64, error -71 [ 86.089470][ T557] usb 1-1: Invalid ep0 maxpacket: 64 [ 86.231207][ T557] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 86.332399][ T685] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 86.362729][ T562] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.382958][ T557] usb 1-1: Invalid ep0 maxpacket: 64 [ 86.388402][ T557] usb usb1-port1: attempt power cycle [ 86.463932][ T685] usb 4-1: device descriptor read/64, error -71 [ 86.514547][ T562] usb 6-1: Using ep0 maxpacket: 8 [ 86.520675][ T562] usb 6-1: config 7 has an invalid interface number: 87 but max is 0 [ 86.528824][ T562] usb 6-1: config 7 has no interface number 0 [ 86.535024][ T562] usb 6-1: config 7 interface 87 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 86.545925][ T562] usb 6-1: config 7 interface 87 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 86.556733][ T562] usb 6-1: config 7 interface 87 has no altsetting 0 [ 86.564738][ T562] usb 6-1: New USB device found, idVendor=0403, idProduct=d738, bcdDevice= 1.74 [ 86.573856][ T562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.581872][ T562] usb 6-1: Product: syz [ 86.586052][ T562] usb 6-1: Manufacturer: syz [ 86.590647][ T562] usb 6-1: SerialNumber: syz [ 86.716940][ T685] usb 4-1: device descriptor read/64, error -71 [ 86.737321][ T557] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 86.757771][ T557] usb 1-1: Invalid ep0 maxpacket: 64 [ 86.802899][ T1761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.811986][ T1761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.823223][ T562] ftdi_sio 6-1:7.87: FTDI USB Serial Device converter detected [ 86.828395][ T685] usb usb4-port1: attempt power cycle [ 86.831658][ T562] usb 6-1: Detected SIO [ 86.841099][ T562] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 86.851082][ T562] usb 6-1: USB disconnect, device number 6 [ 86.858334][ T562] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 86.870858][ T562] ftdi_sio 6-1:7.87: device disconnected [ 86.889000][ T557] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 86.909620][ T557] usb 1-1: Invalid ep0 maxpacket: 64 [ 86.915067][ T557] usb usb1-port1: unable to enumerate USB device [ 87.172298][ T685] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 87.203597][ T685] usb 4-1: device descriptor read/8, error -71 [ 87.345168][ T685] usb 4-1: device descriptor read/8, error -71 [ 87.475690][ T562] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 87.576797][ T688] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.586910][ T685] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 87.608099][ T685] usb 4-1: device descriptor read/8, error -71 [ 87.648666][ T562] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.658937][ T562] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.668603][ T562] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.677849][ T562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 87.685970][ T562] usb 2-1: SerialNumber: syz [ 87.728495][ T688] usb 6-1: Using ep0 maxpacket: 16 [ 87.734774][ T688] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 87.743055][ T688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.753200][ T688] usb 6-1: config 0 has no interface number 0 [ 87.760133][ T685] usb 4-1: device descriptor read/8, error -71 [ 87.766880][ T688] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 87.775993][ T688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.784006][ T688] usb 6-1: Product: syz [ 87.788167][ T688] usb 6-1: Manufacturer: syz [ 87.792779][ T688] usb 6-1: SerialNumber: syz [ 87.798020][ T688] usb 6-1: config 0 descriptor?? [ 87.803951][ T688] uvcvideo 6-1:0.105: Found Unit with invalid ID 0 [ 87.810540][ T688] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 87.816902][ T688] usb 6-1: No valid video chain found. [ 87.870252][ T685] usb usb4-port1: unable to enumerate USB device [ 87.897088][ T562] usb 2-1: 0:2 : does not exist [ 87.902099][ T562] usb 2-1: unit 5: unexpected type 0x0c [ 87.910360][ T562] usb 2-1: USB disconnect, device number 21 [ 87.920283][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.008500][ T685] usb 6-1: USB disconnect, device number 7 [ 88.539137][ T1775] device-mapper: ioctl: Unable to rename non-existent device, to uuid syzf3 [ 88.558758][ T1775] UDC core: g1: couldn't find an available UDC or it's busy [ 88.620619][ T36] audit: type=1400 audit(1793668654.494:409): avc: denied { create } for pid=1782 comm="syz.5.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.703602][ T36] audit: type=1400 audit(1793668654.573:410): avc: denied { ioctl } for pid=1796 comm="syz.5.486" path="socket:[17421]" dev="sockfs" ino=17421 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.793433][ T1808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1808 comm=syz.1.490 [ 88.957515][ T1817] device-mapper: ioctl: Unable to rename non-existent device, to uuid syza3 [ 89.032363][ T557] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.183916][ T557] usb 6-1: Using ep0 maxpacket: 16 [ 89.190224][ T557] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 89.198393][ T557] usb 6-1: config 0 has no interface number 0 [ 89.204559][ T562] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 89.212178][ T557] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 89.222487][ T557] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 89.233784][ T557] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 89.242861][ T557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.250922][ T557] usb 6-1: Product: syz [ 89.255174][ T557] usb 6-1: Manufacturer: syz [ 89.259769][ T557] usb 6-1: SerialNumber: syz [ 89.264973][ T557] usb 6-1: config 0 descriptor?? [ 89.270262][ T1803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 89.277584][ T1803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 89.366719][ T562] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.376543][ T562] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.386218][ T562] usb 1-1: Dual-Role OTG device on HNP port [ 89.392440][ T562] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 89.401510][ T562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.410397][ C0] ------------[ cut here ]------------ [ 89.415857][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 89.422676][ C0] WARNING: CPU: 0 PID: 330 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 [ 89.432566][ C0] Modules linked in: [ 89.436454][ C0] CPU: 0 UID: 0 PID: 330 Comm: udevd Not tainted syzkaller #0 4fd168c693dffba84a2a6c02a7ad874ce6c819a9 [ 89.447460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 89.457529][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 89.462907][ C0] Code: 4d 00 48 c7 c0 a0 bf 6d 86 49 c7 c0 c0 bf 6d 86 4c 0f 44 c0 48 c7 c7 60 bf 6d 86 48 c7 c6 e6 cd 1f 87 44 89 f2 e8 10 05 47 fd <0f> 0b e9 4c ff ff ff e8 44 0f cc fd 49 bc 00 00 00 00 00 fc ff df [ 89.482503][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 89.488438][ T1803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 89.488596][ C0] RAX: aa77a1778f31f400 RBX: ffff8881086c80b0 RCX: ffff88810d7d3b40 [ 89.495886][ T1803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 89.503644][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 89.518742][ C0] RBP: ffffc900000078a0 R08: ffff8881f6c29593 R09: 1ffff1103ed852b2 [ 89.526704][ C0] R10: dffffc0000000000 R11: ffffed103ed852b3 R12: dffffc0000000000 [ 89.534664][ C0] R13: ffff8881086c80b8 R14: 0000000000000081 R15: ffff888108f5ceba [ 89.542634][ C0] FS: 00007f3ee5c02880(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 89.551578][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.558157][ C0] CR2: 00007fb454000020 CR3: 000000010fbce000 CR4: 00000000003526b0 [ 89.566142][ C0] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 89.574137][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 89.582120][ C0] Call Trace: [ 89.585406][ C0] [ 89.588237][ C0] hidg_set_alt+0x138/0xa70 [ 89.592733][ C0] set_config+0x812/0xd10 [ 89.597049][ C0] composite_setup+0x18b0/0x3320 [ 89.601969][ C0] ? __kasan_check_write+0x18/0x20 [ 89.607067][ C0] configfs_composite_setup+0xc6/0x110 [ 89.612512][ C0] dummy_timer+0x2eeb/0x4900 [ 89.617088][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 89.622468][ C0] ? __kasan_check_read+0x15/0x20 [ 89.627501][ C0] ? __kasan_check_write+0x18/0x20 [ 89.632603][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 89.637531][ C0] ? timerqueue_del+0xd7/0x130 [ 89.642282][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 89.647638][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 89.652566][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 89.657759][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 89.662880][ C0] ? read_tsc+0xd/0x20 [ 89.666934][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 89.672994][ C0] hrtimer_run_softirq+0x159/0x560 [ 89.678098][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 89.683293][ C0] handle_softirqs+0x1ad/0x5b0 [ 89.688115][ C0] __irq_exit_rcu+0x47/0xb0 [ 89.692618][ C0] irq_exit_rcu+0xd/0x30 [ 89.696856][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 89.702514][ C0] [ 89.705440][ C0] [ 89.708373][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 89.714372][ C0] RIP: 0010:update_stack_state+0x52/0x4d0 [ 89.720088][ C0] Code: c1 e8 03 48 89 45 c0 42 0f b6 04 38 84 c0 0f 85 1e 04 00 00 41 8b 45 00 89 45 b4 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 89 45 a0 <42> 80 3c 38 00 74 09 e8 62 53 9e 00 49 8d 7d 58 48 8b 07 48 85 c0 [ 89.739681][ C0] RSP: 0018:ffffc9000c10ef88 EFLAGS: 00000a02 [ 89.745736][ C0] RAX: 1ffff92001821e20 RBX: ffffc9000c10f0a8 RCX: ffffc9000c10f9b0 [ 89.753700][ C0] RDX: dffffc0000000000 RSI: ffffc9000c10f9b0 RDI: ffffc9000c10f100 [ 89.761659][ C0] RBP: ffffc9000c10f038 R08: ffffc9000c10f170 R09: ffffc9000c10f168 [ 89.769623][ C0] R10: 000000000000000c R11: ffffffff817782a0 R12: ffffc9000c10f8d8 [ 89.777594][ C0] R13: ffffc9000c10f0a8 R14: ffffc9000c10f9b0 R15: dffffc0000000000 [ 89.785552][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 89.791723][ C0] unwind_next_frame+0x39e/0x6b0 [ 89.796651][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 89.802818][ C0] arch_stack_walk+0x138/0x170 [ 89.807572][ C0] ? link_path_walk+0x991/0xeb0 [ 89.812426][ C0] stack_trace_save+0xaa/0x100 [ 89.817176][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 89.822535][ C0] kasan_save_track+0x3e/0x80 [ 89.827287][ C0] ? kasan_save_track+0x3e/0x80 [ 89.832230][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 89.837607][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 89.842623][ C0] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 89.848269][ C0] ? security_inode_alloc+0x51/0x230 [ 89.853550][ C0] ? inode_init_always_gfp+0x756/0x9e0 [ 89.859016][ C0] ? alloc_inode+0xc5/0x270 [ 89.863529][ C0] ? iget_locked+0x198/0x9a0 [ 89.868098][ C0] ? kernfs_get_inode+0x50/0x830 [ 89.873013][ C0] ? kernfs_iop_lookup+0x213/0x320 [ 89.878104][ C0] ? __lookup_slow+0x2e5/0x420 [ 89.882844][ C0] ? lookup_slow+0x57/0x80 [ 89.887250][ C0] ? link_path_walk+0x991/0xeb0 [ 89.892119][ C0] kasan_save_alloc_info+0x3a/0x50 [ 89.897212][ C0] __kasan_slab_alloc+0x73/0x90 [ 89.902042][ C0] kmem_cache_alloc_noprof+0x1bf/0x410 [ 89.907484][ C0] ? security_inode_alloc+0x51/0x230 [ 89.912749][ C0] security_inode_alloc+0x51/0x230 [ 89.917949][ C0] inode_init_always_gfp+0x756/0x9e0 [ 89.923243][ C0] alloc_inode+0xc5/0x270 [ 89.927549][ C0] iget_locked+0x198/0x9a0 [ 89.931944][ C0] ? __cfi_iget_locked+0x10/0x10 [ 89.936864][ C0] ? __kasan_check_write+0x18/0x20 [ 89.941962][ C0] ? rwsem_read_trylock+0x275/0x5a0 [ 89.947148][ C0] ? downgrade_write+0x470/0x470 [ 89.952066][ C0] kernfs_get_inode+0x50/0x830 [ 89.956815][ C0] kernfs_iop_lookup+0x213/0x320 [ 89.961736][ C0] __lookup_slow+0x2e5/0x420 [ 89.966307][ C0] ? lookup_one_len+0x300/0x300 [ 89.971161][ C0] ? down_read+0x7f/0xe0 [ 89.975399][ C0] lookup_slow+0x57/0x80 [ 89.979628][ C0] link_path_walk+0x991/0xeb0 [ 89.984317][ C0] path_openat+0x298/0x35a0 [ 89.988803][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 89.994084][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 89.999090][ C0] ? getname+0x1b/0x30 [ 90.003139][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 90.007883][ C0] ? do_syscall_64+0x57/0xf0 [ 90.012451][ C0] ? do_filp_open+0x440/0x440 [ 90.017109][ C0] do_filp_open+0x1f2/0x440 [ 90.021608][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 90.026619][ C0] ? alloc_fd+0x4c1/0x570 [ 90.030932][ C0] do_sys_openat2+0x134/0x1d0 [ 90.035618][ C0] ? do_sys_open+0x100/0x100 [ 90.040201][ C0] __x64_sys_openat+0x13a/0x170 [ 90.045130][ C0] x64_sys_call+0xe69/0x2ee0 [ 90.049711][ C0] do_syscall_64+0x57/0xf0 [ 90.054112][ C0] ? clear_bhb_loop+0x50/0xa0 [ 90.058783][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.064693][ C0] RIP: 0033:0x7f3ee54a7407 [ 90.069111][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 90.088699][ C0] RSP: 002b:00007ffec8edf7b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 90.097105][ C0] RAX: ffffffffffffffda RBX: 00007f3ee5c02880 RCX: 00007f3ee54a7407 [ 90.105081][ C0] RDX: 0000000000080000 RSI: 00007ffec8edf930 RDI: ffffffffffffff9c [ 90.113071][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 90.121046][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ba39b387f5 [ 90.129020][ C0] R13: 000055ba39b387f5 R14: 0000000000000001 R15: 000055ba39b53140 [ 90.136985][ C0] [ 90.139988][ C0] ---[ end trace 0000000000000000 ]--- [ 90.145433][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 90.152862][ T562] usb 1-1: can't set config #1, error -32 [ 90.166066][ T557] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 90.197371][ T557] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 90.207430][ T557] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 90.217749][ T557] asix 6-1:0.34: probe with driver asix failed with error -61 [ 91.817273][ T557] usb 6-1: USB disconnect, device number 8