last executing test programs: 45.747843859s ago: executing program 0 (id=143): r0 = socket$inet_udp(0x2, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x20, &(0x7f0000000200)=[{&(0x7f0000000240)={0xd0, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0xb6, 0xbc, 0x0, 0x1, [@generic="9e63a42db19fff04dfbc6c3e58725caa74981607503eedd9e799b1d68d25b95981bd479a011e949bab614a64822ffab756059abfb23f2741458087833d906060e891100a7fa6c331857c568e4c746c98fe1d10f904cc31adb80f2b93b613f0ae3cc1cdf0bd216e2b84cd49d088c256afa8d46bd8b7ea2c423da571cca51db031da0c210fe29b81d13e4e80257a5ad856f3976f36b1c60c35cb7d", @nested={0x18, 0x2e, 0x0, 0x1, [@typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@local}]}]}]}, 0xd0}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f000095b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2}) 45.688349871s ago: executing program 0 (id=146): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2014010, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) 45.683827771s ago: executing program 0 (id=148): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="23f6", 0x5dc}], 0x2}, 0x20000810) 44.793089933s ago: executing program 0 (id=154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x83}], 0x1, 0x10000, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="ab81238c624692b6d2d55439a950279c854a73fdb5995739f3c5ec5a35a86e3c2f7ec67dece2c02f77d59e34537319c772a11cf4fa1ee76ed1dca4e2e1c7a8905df9e2f8c51e78f893137c808fa078084e48851aaead785bc2fdbb3c1f93b7c50814062aaae30850059d858096db84", 0x6f}], 0x1}, 0x22004014) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000006280)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) (async) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x83}], 0x1, 0x10000, 0x0) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) (async) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) (async) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="ab81238c624692b6d2d55439a950279c854a73fdb5995739f3c5ec5a35a86e3c2f7ec67dece2c02f77d59e34537319c772a11cf4fa1ee76ed1dca4e2e1c7a8905df9e2f8c51e78f893137c808fa078084e48851aaead785bc2fdbb3c1f93b7c50814062aaae30850059d858096db84", 0x6f}], 0x1}, 0x22004014) (async) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000006280)) (async) 44.792873443s ago: executing program 0 (id=155): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x0, 0x2], 0x3332d000, 0x202}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r6, 0xc0184d08, &(0x7f0000000900)) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x46, 0x6, 0xf4}, {0x2, 0x9000, 0xa, 0xed, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xd, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x81, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xfd, 0x5, 0xff}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x10000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f000095b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2}) 44.706284825s ago: executing program 0 (id=156): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x10, 0x80, 0x4, 0xd3, {{0x36, 0x4, 0x2, 0x7, 0xd8, 0x65, 0x0, 0x97, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, {[@ssrr={0x89, 0xf, 0xec, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x3}, {@local, 0x2c35}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x2}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0xa7, 0x3, 0x9, [{@rand_addr=0x64010100, 0x8}, {@broadcast, 0x7}]}, @cipso={0x86, 0x69, 0xffffffffffffffff, [{0x7, 0x11, "845a00a995358dc69cf9e63e599933"}, {0x0, 0x10, "4244ec855b20d3f99fbb1132fab1"}, {0x7, 0xe, "072ef94bd4ba098e02f198b4"}, {0x0, 0x6, "890e11a3"}, {0x2, 0xd, "e34530f759737634b02d6a"}, {0x5, 0xf, "9a16366632ae6205f57007b622"}, {0x1, 0x12, "45a112ec3727d341623d36cc882c9372"}]}, @noop, @end, @noop, @lsrr={0x83, 0x7, 0x75, [@remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xfffff8ff, 0x3, {{0xc, 0x4, 0x0, 0x20, 0x30, 0x67, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x9, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffe7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xfffff8ff, 0x3, {{0xc, 0x4, 0x0, 0x20, 0x30, 0x67, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x9, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffe7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) (async) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x1}, 0x44040) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x1}, 0x44040) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x0, r5, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x0, r7, 0x1, 0xffffffff}, 0x10) (async) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x0, r7, 0x1, 0xffffffff}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0xc0, 0x7fffffff, 0x4, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x2}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0xc0, 0x7fffffff, 0x4, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x2}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x1000, 0x7fff, {{0x29, 0x4, 0x2, 0x37, 0xa4, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @private=0xa010100, {[@cipso={0x86, 0x5f, 0x0, [{0x1, 0x4, "c732"}, {0x7, 0xb, "585c121b296f9450d6"}, {0x1, 0x4, "d657"}, {0x5, 0x7, "861227bf51"}, {0x6, 0x4, "7915"}, {0x0, 0x2}, {0x1, 0x10, "1f16cc89193f67bd352cb0cec133"}, {0x5, 0xb, "d12afc1820cbc874de"}, {0x0, 0x10, "0ac3db2695e9d9785fb2e59cd896"}, {0x1, 0xe, "ed88230597c285bfb94e3dba"}]}, @rr={0x7, 0x1b, 0x8a, [@empty, @loopback, @broadcast, @broadcast, @private=0xa010100, @private=0xa010100]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xb, [0x3ef, 0x5, 0x2]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f4020000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250700000060000180080003000100000008000100", @ANYRES32=r0, @ANYBLOB="0800030003000000140002007767310000000000000000000000000008000300030000001400020069705f767469300000000000000000001400020076657468315f6d6163767461700000002400018008000100", @ANYRES32=r1, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000008800018014000200626f6e645f736c6176655f3100000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468315f6d6163767461700000001400020067656e6576653100000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000014000200677265746170300000000000000000001800018014000200776731000000000000000000000000008c0001801400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000014000200726f7365300000000000000000000000140002006361696630000000000000000000000014000200677265300000000000000000000000001400020064766d727031000000000000000000000800030002000000180001801400020076657468315f746f5f7465616d00000040000180140002006e65747063693000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="1800018014000200766c616e3000000000000000000000007c00018008000100", @ANYRES32=r11, @ANYBLOB="140002006e6963766630000000000000000000001400020067656e65766530000000000000000000140002006970365f7674693000000000000000000800030002000000080003000000000008000100", @ANYRES32=r0, @ANYBLOB="1400020070696d72656730000000000000000000080003000200000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567300000000000000000001400020076657468305f746f5f62726964676500"], 0x2f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r12) sendmsg$TIPC_CMD_DISABLE_BEARER(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="07ad00000000000000000100000000000000024100000010001369623a6572737089e95b7eef"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 44.639248457s ago: executing program 32 (id=156): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x10, 0x80, 0x4, 0xd3, {{0x36, 0x4, 0x2, 0x7, 0xd8, 0x65, 0x0, 0x97, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, {[@ssrr={0x89, 0xf, 0xec, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x3}, {@local, 0x2c35}, {@empty, 0x7}, {@rand_addr=0x64010100, 0x2}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0xa7, 0x3, 0x9, [{@rand_addr=0x64010100, 0x8}, {@broadcast, 0x7}]}, @cipso={0x86, 0x69, 0xffffffffffffffff, [{0x7, 0x11, "845a00a995358dc69cf9e63e599933"}, {0x0, 0x10, "4244ec855b20d3f99fbb1132fab1"}, {0x7, 0xe, "072ef94bd4ba098e02f198b4"}, {0x0, 0x6, "890e11a3"}, {0x2, 0xd, "e34530f759737634b02d6a"}, {0x5, 0xf, "9a16366632ae6205f57007b622"}, {0x1, 0x12, "45a112ec3727d341623d36cc882c9372"}]}, @noop, @end, @noop, @lsrr={0x83, 0x7, 0x75, [@remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xfffff8ff, 0x3, {{0xc, 0x4, 0x0, 0x20, 0x30, 0x67, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x9, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffe7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xfffff8ff, 0x3, {{0xc, 0x4, 0x0, 0x20, 0x30, 0x67, 0x0, 0xb7, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x9, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffe7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) (async) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x1}, 0x44040) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x1}, 0x44040) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x0, r5, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x0, r7, 0x1, 0xffffffff}, 0x10) (async) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x0, r7, 0x1, 0xffffffff}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0xc0, 0x7fffffff, 0x4, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x2}, @end, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0xc0, 0x7fffffff, 0x4, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x2}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x1000, 0x7fff, {{0x29, 0x4, 0x2, 0x37, 0xa4, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @private=0xa010100, {[@cipso={0x86, 0x5f, 0x0, [{0x1, 0x4, "c732"}, {0x7, 0xb, "585c121b296f9450d6"}, {0x1, 0x4, "d657"}, {0x5, 0x7, "861227bf51"}, {0x6, 0x4, "7915"}, {0x0, 0x2}, {0x1, 0x10, "1f16cc89193f67bd352cb0cec133"}, {0x5, 0xb, "d12afc1820cbc874de"}, {0x0, 0x10, "0ac3db2695e9d9785fb2e59cd896"}, {0x1, 0xe, "ed88230597c285bfb94e3dba"}]}, @rr={0x7, 0x1b, 0x8a, [@empty, @loopback, @broadcast, @broadcast, @private=0xa010100, @private=0xa010100]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xb, [0x3ef, 0x5, 0x2]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f4020000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250700000060000180080003000100000008000100", @ANYRES32=r0, @ANYBLOB="0800030003000000140002007767310000000000000000000000000008000300030000001400020069705f767469300000000000000000001400020076657468315f6d6163767461700000002400018008000100", @ANYRES32=r1, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000008800018014000200626f6e645f736c6176655f3100000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468315f6d6163767461700000001400020067656e6576653100000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000014000200677265746170300000000000000000001800018014000200776731000000000000000000000000008c0001801400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006361696630000000000000000000000014000200726f7365300000000000000000000000140002006361696630000000000000000000000014000200677265300000000000000000000000001400020064766d727031000000000000000000000800030002000000180001801400020076657468315f746f5f7465616d00000040000180140002006e65747063693000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="1800018014000200766c616e3000000000000000000000007c00018008000100", @ANYRES32=r11, @ANYBLOB="140002006e6963766630000000000000000000001400020067656e65766530000000000000000000140002006970365f7674693000000000000000000800030002000000080003000000000008000100", @ANYRES32=r0, @ANYBLOB="1400020070696d72656730000000000000000000080003000200000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567300000000000000000001400020076657468305f746f5f62726964676500"], 0x2f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r12) sendmsg$TIPC_CMD_DISABLE_BEARER(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="07ad00000000000000000100000000000000024100000010001369623a6572737089e95b7eef"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 31.795146637s ago: executing program 2 (id=284): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d001080"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) 31.795026757s ago: executing program 2 (id=285): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000041d000/0x4000)=nil) 31.781940438s ago: executing program 2 (id=286): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000140)=0x2, 0x4) (async) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x101500, 0x102) r5 = openat(r4, &(0x7f00000001c0)='./file0\x00', 0xc00, 0x0) (async) r6 = openat(r4, &(0x7f0000000200)='./file0\x00', 0x800, 0x88) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000000240)={'\x00', 0xa, 0x3, 0x2}) r7 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x101800, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r7, 0xc0805841, &(0x7f0000000300)={0x7f, 0x5, 0x3, 0x2, 0xd84a}) (async, rerun: 32) renameat2(r4, &(0x7f0000000380)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x3) (async, rerun: 32) r8 = accept4$unix(r1, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) (async) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x13, 0x2, {0x0, 0x2, 0x4}}, 0x14) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r9, 0x3, &(0x7f0000000580)=0x9) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r5) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r10, 0x102, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080000}, 0x4) (async) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040044}, 0x804) read$FUSE(r6, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r6, &(0x7f00000028c0)={0x20, 0x0, r11, {0x80000000, 0x0, 0x0, 0xc}}, 0x20) (async) write$P9_RFLUSH(r6, &(0x7f0000002900)={0x7}, 0x7) poll(&(0x7f0000002940)=[{0xffffffffffffffff, 0xa100}, {r6}, {r2, 0x200}, {r5, 0x1000}, {r7, 0x9080}, {r2, 0x8021}, {r3, 0xa250}], 0x7, 0x925d) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000002a80)={r7, &(0x7f0000002980)='syz1\x00', 0x8000, &(0x7f00000029c0)={@_ha_fsid={[0x6, 0x2]}, {0x3, 0x7, 0x2, 0x2}}, 0x4, &(0x7f0000002a00), &(0x7f0000002a40)=0x2}) (async) read$FUSE(r5, &(0x7f0000002ac0)={0x2020}, 0x2020) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000004bc0)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x40) (async) setxattr$security_evm(&(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40), &(0x7f0000004c80)=@sha1={0x1, "49606109c1baed7f1a83c0571768fa9f759b4223"}, 0x15, 0x1) write$P9_RXATTRWALK(r12, &(0x7f0000004cc0)={0xf, 0x1f, 0x1, 0x8000000000000001}, 0xf) write$P9_RWALK(r8, &(0x7f0000004d00)={0x4a, 0x6f, 0x2, {0x5, [{0x10, 0x0, 0x4}, {0x40, 0x1, 0x6}, {0xe0b04bfc62886151, 0x0, 0x4}, {0x1, 0x2, 0x3}, {0x10, 0x3, 0x2}]}}, 0x4a) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004d80), 0x2, 0x0) 31.768510358s ago: executing program 2 (id=287): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mount$binderfs(0x0, 0x0, 0x0, 0x804c7, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x201008e, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYBLOB="5bbbe73bea353cfde7a3999c5fafebda7c050d6d664412b3d199061c097479d410f02c1958c4c54cfb8424c7d329cf46204caf96512544ac9f23ca4f0d0f4140ba814b8457d2b13aeac0a256c113b5110798664813826f0b00812ea9d0aa4c233abe99eb80616291ff5cb6e152ab21073ac36e3e69526e1d5869c2dfc2a849bd12937e5e75618171bcd37e9622cf5e544763172f404a761ecfb7527e94df2489255cc68352c72540163d8034335883df6b7dd198452e1f5f1a8f1d2869273826e390ffc587267b7996b1846a37a186aff5fbb6b232a33a741e2e9f265ea92a32d0cd179cb80c73550a71bea733876aa47ee6b0cab2a4a902660c165782819373d11825e7de5ccdb1b466a7b272321674b1d314b13c7aa24811e21cc4bddf1c9cb4a8d0fe42abd80d29da6fb9c2ebfe80ef28fce2fe19f1b3aa5bd6aefcd74ca02b", @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r0], 0x0) getpeername$unix(r1, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x60, 0x22, 0x7, {0x7, 0x2, "6ca4443724"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003e46fd4bcc42243e2090c92"], &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x80, 0x50, 0xf, "f829fe4c", "91961e68"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0xf, 0x3, 0x6, 0xff5f}}}, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x20, 0xb, 0xbd, "d8c60601ec9ff064723a68449e25905267792ba75bc5da22b349b125b6a7135ad4d40f0a211b3d21d01a8103866fa99bebad20dd0227caae8ba9a5b605ba3423691a408b189fe98c9402eb9b72c58a8819a31cd3d68baa95ca9ee38b10c188a60e947cc0f9f365c2f226c7fa7c17542c3339ddbc79ae0979b68c52afa4db218bc66d5ceed00139fdd0d831b7e39df62b2f0267b3ed92a401ab2d745770510bb2a072e263f02f57f737f7f961329c7645c5ca74b6c748d893b7423cd3d8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc5}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000580)=ANY=[@ANYBLOB="2000080000ffffffffffffffff00"], &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xe00}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'Dh'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "c4ed"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2a}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x8c}}) 31.580028503s ago: executing program 1 (id=291): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0x560c89bb) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) openat$dir(0xffffffffffffff9c, 0x0, 0x6400c1, 0x1) r2 = openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x20542, 0x30) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1, 0x2ed, 0xb33) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 31.24927454s ago: executing program 2 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x103400, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x3) r2 = socket(0x2, 0x2, 0x1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x4, 0x6) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) shutdown(r4, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x341) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 31.145152263s ago: executing program 2 (id=293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@free_buffer, @reply={0x40406301, {0x3, 0x0, 0xc00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 31.128343404s ago: executing program 33 (id=293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@free_buffer, @reply={0x40406301, {0x3, 0x0, 0xc00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 30.729817944s ago: executing program 1 (id=295): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xe0, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ptrace(0x10, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="00c5", 0x2}], 0x1, 0x8) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0xa}]}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 29.119360354s ago: executing program 1 (id=302): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0x560c89bb) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) openat$dir(0xffffffffffffff9c, 0x0, 0x6400c1, 0x1) r2 = openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x20542, 0x30) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1, 0x2ed, 0xb33) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 28.268559585s ago: executing program 1 (id=304): r0 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000240)={0x4b84, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x201008e, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x1, 0x0, 0x4, @private0, @empty, 0x700, 0x7800, 0x17, 0x4}}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x6) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x2, @mcast2, 0x400}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0xc000000, @mcast1}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xe, @mcast1, 0x81}}]}, 0x110) chdir(0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000005000/0x4000)=nil, 0x4000}) truncate(&(0x7f0000000300)='./bus\x00', 0x7) finit_module(r4, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xf90, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4004084) ioctl$TIOCSBRK(r4, 0x5427) 28.195590207s ago: executing program 1 (id=305): arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000040)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000080)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000000c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000100)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000140)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000180)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000001c0)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/58, 0x3a}) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000002c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000300)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000340)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000380)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0xffffffffffffffff) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000003c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000400)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000440)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000480)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000004c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000500)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000540)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000580)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000005c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000600)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000640)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000680)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000006c0)) socket$pppl2tp(0x18, 0x1, 0x1) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000700)) 28.113066429s ago: executing program 1 (id=306): sysinfo(&(0x7f0000000140)=""/4096) r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) (async) r1 = gettid() setpgid(r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='lock m'], 0x9) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000440)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x7d, 0x9, 0x3, 0x0, 0x2, 0x5, 0x0, 0x4, 0xe, 0x9, 0x8b, 0x2, 0x0, 0xfd1d, 0xf, 0x0, 0x5, 0x40, 0x1, '\x00', 0x80, 0x7ff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140), 0x0) 28.08546448s ago: executing program 34 (id=306): sysinfo(&(0x7f0000000140)=""/4096) r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) (async) r1 = gettid() setpgid(r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='lock m'], 0x9) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000440)={0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x7d, 0x9, 0x3, 0x0, 0x2, 0x5, 0x0, 0x4, 0xe, 0x9, 0x8b, 0x2, 0x0, 0xfd1d, 0xf, 0x0, 0x5, 0x40, 0x1, '\x00', 0x80, 0x7ff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140), 0x0) 2.234902955s ago: executing program 6 (id=660): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82843, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000040)={r1, 0x1000, {0x0, 0x0, 0x0, 0x1, 0x4000080000001001, 0x0, 0x0, 0x2, 0x0, "faf98317e5a1149989958dbe53ea6accb396a2503dc3eb3fe37d58128bbad0099cebdc35f50160c9e6d6e3ab8588070000000000120000000000000000002200", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c5099fd3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffcdf, 0xa00006]}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.203142895s ago: executing program 6 (id=661): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 2.202687975s ago: executing program 6 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x17, 0x5, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x287, 0x0, 0x6}]}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) 2.072926639s ago: executing program 6 (id=663): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d00)={0xa, 0xce1c, 0x8, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xc0, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x1, 0xeeee0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000440)=@svm={0x102, 0x1, 0x1080, {0x791d73177229e808}, {"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"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r7 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a7379"], 0x34}}, 0x40081) 1.545043191s ago: executing program 4 (id=673): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0xffffffff, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.524308882s ago: executing program 4 (id=674): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a03c0e8f955799d27afa85740e03a455bc243e90b1abf18f2907a0741170177e74f7c88668ec12763c765b0346b01af656e14ae3fdacb823f2db3515b8e6aa88c7d652551ff36fe60817a19dd5c864589c7b7c3ee9aa2dc24986a2a754f7db974bd2e0867f0153d7867152f89d61a33c6935c4541fe93806f8cf4dd21", 0x8c}, {&(0x7f0000000180)="3f67466b434f0f1d0864b413f241dddea2dbdf0911184af38cc2adbac2f538c179c6d06cb884a50159037441904c0acf55994e41d7790cac9d0800000000000000c424bda885bc6dd022b01fff74a0f6227fd01fa455f675b59ef6c2ec767b7883f3e68d209fe15dd3eecaa7bbc3cfadf815a0ef1471", 0x76}, {&(0x7f0000000380)="7f9dd881777fea034ee968a3f4d1b230a014767a2fcd073cbd069735a30f70ef281811abe3cb1a0695e82c10a79ab1ff167fd5fcd27035cba4fd82b59b4c6e95368bdf3f51127c1816cecfa94aff2f38bbec4b6c52606cfff3a7bd4263d57ec16db593aacdf94071b4a73d7c12a6322fca0f3b2783acb391efec5a8572706b66fa46460032d3de48de1c2563c20200f221e2be7acd7a7e36d08a207ba2471c9a93a4ca75f089056315c14a502060daf96c7d44386872ead4aefc07", 0xbb}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.504472692s ago: executing program 4 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000580)={@val={0xa, 0x72d1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x1ff, 0x2000005, 0x53}}}}}}}, 0x4a) 1.445201934s ago: executing program 4 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x20542, 0x30) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.445038274s ago: executing program 4 (id=677): unshare(0x44040200) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0xff, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f616"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000000000000a004e2000000007ff020000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8f27f0c000000000000000000000000000000000000000000000000000001"], 0x90) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000300)={&(0x7f0000000240)=[{0x3, 0x0, 0x0, {0x8, 0x2, 0x1}}, {0xe0, 0x1, 0x0, {0x2, 0x2, 0x1}}, {0x3, 0x0, 0x0, {0x25, 0x9, 0x2}}, {0x3, 0x0, 0x0, {0xfffffffffffff3b0, 0x3, 0x2}}, {0x9, 0x1, 0x0, {0x0, 0x10}}, {0x8, 0x1, 0x0, {0x2c4, 0x7, 0x2}}], 0x6, 0x20, 0x7, 0xa}) removexattr(0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000200)) getdents64(r8, &(0x7f0000000340)=""/59, 0x3b) getdents64(r8, 0xfffffffffffffffe, 0x29) 1.390848856s ago: executing program 4 (id=678): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$802154_dgram(r2, &(0x7f0000001680)={&(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x44}, 0xc1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'veth0_to_bond\x00', 0x5}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xd, 0x27, {0x27, 0x5, "a64b317b19e9485d7fade1370828f30109a8dddb0944e97e19366095d7609299534536726f"}}, 0x0}, 0x0) r3 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x0, 0x49, {0x49, 0xb, "4a545872a110a0bad2d4b18ccb728530c5b77e6e0aa51ce2fbef089105b00c240e5568287d6691d7617df80e185273a65c3af3fccefaee4fcacdc0f8253f34b4b272b2506c2450"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000380)={0x34, &(0x7f0000000200)={0x0, 0x16, 0x23, "6cdee10fe6a7d6c431cea48cdb5c0c1ee2291077db4a9cec460de997b6b1f233212d9d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x1b}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "d0286da66b32dfdc37c50c71da054d141295b404cb6e7eb69a1f899310b3a2e46fd3fb8a0e95d95809375780704df0"}}) 1.20977295s ago: executing program 6 (id=680): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000000045, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82843, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r1, 0x1000, {0x0, 0x0, 0x0, 0x1, 0x4000080000001001, 0x0, 0x0, 0x2, 0x0, "faf98317e5a1149989958dbe53ea6accb396a2503dc3eb3fe37d58128bbad0099cebdc35f50160c9e6d6e3ab8588070000000000120000000000000000002200", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c5099fd3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffcdf, 0xa00006]}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.173965001s ago: executing program 6 (id=683): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_connect$midi(0x1, 0x128, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xdf, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x1, 0x1, 0x7, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0xfa, [@ms_header={0x7, 0x24, 0x1, 0x3800, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x9}, @midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x8, 0x7, [{0x2, 0x2}, {0x7f, 0x5}, {0x6f, 0xab}, {0x1, 0xe}, {0x7}, {0x40, 0xfd}, {0x5, 0x5}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x7f, 0x4, [{0x6, 0x3}, {0xd, 0x8}, {0x5}, {0xcb}], 0x3}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0x7, 0x8, [{0x21, 0x6}, {0x9, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0xc0, 0x5}, {0x5, 0x39}, {0xa, 0x6c}, {0x9, 0xff}], 0x9}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x2, 0xf, 0x3, {0x13, 0x25, 0x1, 0xf, "43547cf0ffbeaf5ad7338434598e68"}}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x3, 0xee, 0x9, {0x9, 0x25, 0x1, 0x5, "d75755fcb9"}}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0xe6, 0x8, 0x9, {0x6, 0x25, 0x1, 0x2, "1335"}}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0xfb, 0x2, 0x2, {0x8, 0x25, 0x1, 0x4, "9147bbdd"}}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0xf, 0x53, {0x14, 0x25, 0x1, 0x10, "8455d80054e18288e2d24ae8c81f8803"}}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5c, 0xa, 0x8, {0xe, 0x25, 0x1, 0xa, "ab323c5b89d4cc1a3554"}}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x9, 0x5, 0x2, {0xd, 0x25, 0x1, 0x9, "cdbe997868a328863e"}}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x4, 0xd3, 0xa, {0x14, 0x25, 0x1, 0x10, "e30bf0322a6aa60c7913bcea444d5250"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x8, 0x10, 0x4a, 0x8, 0x3}, 0x30, &(0x7f0000000340)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x4, 0xf00, 0x8, [0x3fc0, 0xff00ff, 0xff0000, 0x3fc0, 0xff]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x2, 0xff80, 0x1}]}, 0x9, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0xe8, &(0x7f0000000480)=@string={0xe8, 0x3, "3a49b65eb533f2768225f8e08223d50b2f6d70684444b4ab8b8d28729a0cd12b5af277a32d755a76e6756a52adf8c677caeaa0fb4f0c79b97e96a27eb9f58e2a8be408538f0909a1775ddac4f422b020afb2be6f998351ade28f5e7c32974a366bd3d21783c3fe3a53623f12468cdb223a152aeba04da47c482bfe0da62fdb0cf1c09ce93652ba210b32b7cfd7b203ae5233a1273e25c111b7a5ccb06c03d182d02859be5b90d3c5571070f5d2dcc37ab59ffdc9504e0f7d4cb9f9eef46cb4cf5450864420b030d59510027187f1a041e9b3bd7bc0f1abcd577784e38cb019548a010a59c946"}}, {0x80, &(0x7f0000000580)=@string={0x80, 0x3, "d2e1cc345b1e0f78e3722babafbe699c655f94f5be0f96b18b2c77349650c1bb119bc149375a3a9d97e03d15c4c16bee1769851a068c1b6fa818f46dc548efefc279dda8fb5b5a9f707e05c649befab57c088e60f722fd27fc8423d993eed3f4e7be6449d3d0e4700199d7e7d9436d34a5cf08ae2396501d4cbd6641eb25"}}, {0x4, &(0x7f0000000600)=@string={0x4, 0x3, 'ZX'}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x458}}, {0x18, &(0x7f00000006c0)=@string={0x18, 0x3, "6089afc6cc22251cb70dcc4143ec4b76d9c349eb6fee"}}, {0x22, &(0x7f0000000700)=@string={0x22, 0x3, "602b8a86b8c1fbd09e9b66eda457a0cc972586aa9123779c9b886fcde67ca63c"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "787811388cb695449d9bdfab95460b0012477cc203748135a5c37f3eb862687e4180452ee8e89f7e6e20301c989c5a3b78fe29afbf00e6ed110c204ef93ac9ac", 0x24}, 0x48, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="4fd17c60a7261b4473c89d579d668847073de9d572aabe956de9", 0x1a, 0xfffffffffffffffd) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) keyctl$reject(0x13, r1, 0x5, 0x3, r2) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 213.079495ms ago: executing program 5 (id=692): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 191.008325ms ago: executing program 5 (id=693): r0 = socket$inet(0x2, 0x800, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) 153.396666ms ago: executing program 3 (id=694): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a03c0e8f955799d27afa85740e03a455bc243e90b1abf18f2907a0741170177e74f7c88668ec12763c765b0346b01af656e14ae3fdacb823f2db3515b8e6aa88c7d652551ff36fe60817a19dd5c864589c7b7c3ee9aa2dc24986a2a754f7db974bd2e0867f0153d7867152f89d61a33c6935c4541fe93806f8cf4dd213a3a885ab939e1f78c1e", 0x96}, {&(0x7f0000000180)="3f67466b434f0f1d0864b413f241dddea2dbdf0911184af38cc2adbac2f538c179c6d06cb884a50159037441904c0acf55994e41d7790cac9d0800000000000000c424bda885bc6dd022b01fff74a0f6227fd01fa455f675b59ef6c2ec767b7883f3e68d209fe15dd3eecaa7bbc3cfadf815a0ef1471", 0x76}, {&(0x7f0000000380)="7f9dd881777fea034ee968a3f4d1b230a014767a2fcd073cbd069735a30f70ef281811abe3cb1a0695e82c10a79ab1ff167fd5fcd27035cba4fd82b59b4c6e95368bdf3f51127c1816cecfa94aff2f38bbec4b6c52606cfff3a7bd4263d57ec16db593aacdf94071b4a73d7c12a6322fca0f3b2783acb391efec5a8572706b66fa46460032d3de48de1c2563c20200f221e2be7acd7a7e36d08a207ba2471c9a93a4ca75f089056315c14a502060daf96c7d44386872ead4aefc07", 0xbb}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 153.297566ms ago: executing program 5 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x20542, 0x30) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 152.954086ms ago: executing program 3 (id=696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000580)={@val={0xa, 0x72d1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x160, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x1ff, 0x2000005, 0x53, [{0x4, 0x1e, "8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db07882c4b2b387a61a0ad366b75089a26b0dc126b5e9f0af1d657bd0752bc88f1853833ed6e6b5255910c9101243892dfbbbda1d2dbda346f3aa802afc1c1b4ee89e7df67dc1edfc4ab3fe773e7ea7ddc8b0e7ed5e3cdead388ad5ff116ec8279ecbd85faf0b0bc2c7378c7b2041bbb0badf634"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x1f, 0x0, "3457000005"}]}}}}}}}, 0x19a) 97.088117ms ago: executing program 5 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0xc00, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x242}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x1, 0x700, 0x6, 0x200, {{0x29, 0x4, 0x0, 0x12, 0xa4, 0x66, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x54, 0x83, 0x3, 0x0, [{@multicast2, 0x1}, {@multicast2}, {@empty, 0x3}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@multicast1, 0x9}, {@private=0xa010101, 0x6}, {@local, 0xa3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000001}, {@multicast2, 0xf}]}, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x8, [{@remote, 0xfffffffd}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0x6}, {@loopback, 0x9}, {@multicast2, 0x80000001}, {@private=0xa010100, 0x3}]}, @noop, @ra={0x94, 0x4, 0x1}, @end]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 96.961397ms ago: executing program 5 (id=698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="1401f03303", 0x5}], 0x1) 96.751277ms ago: executing program 5 (id=699): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, &(0x7f0000004500)=""/7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x7f, 0x0, 0x3780000000000003, {0x5, 0x4000, 0xfffffffffffffff9, 0xf, 0x0, 0xfffffffb, {0x4, 0x0, 0x3, 0x2800000000000000, 0x6, 0x1ff, 0x5dd, 0x9ce, 0xe5, 0xa000, 0x70814a5e, 0x0, r11, 0xe5, 0xa3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f00000006c0)={0x50, 0x0, r10, {0x7, 0x26, 0x4, 0x800008, 0x0, 0x5, 0x8, 0x5d2186cc, 0x0, 0x0, 0x20, 0x11fff}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) socket$netlink(0x10, 0x3, 0xf) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1f, 0xff, 0x60, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x5, 0x8000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', r14, 0x8, 0x80, 0x10001, 0xe74, {{0x28, 0x4, 0x3, 0x0, 0xa0, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@rr={0x7, 0x1f, 0x82, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @cipso={0x86, 0x26, 0x0, [{0x2, 0xc, "caba5b49f845da7c4283"}, {0x5, 0xd, "48b1d28c76ed09f96df0c0"}, {0x6, 0x7, "d755a2d8d7"}]}, @end, @timestamp={0x44, 0x14, 0x10, 0x0, 0x3, [0x80, 0xa80, 0x2, 0xff]}, @end, @end, @generic={0x86, 0xb, "100f21035c04972ca6"}, @lsrr={0x83, 0x23, 0xb1, [@remote, @empty, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x3b}]}]}}}}}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r15, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x200000000}) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r16, &(0x7f0000000040)=""/17, 0x11, 0x1) syz_ublk_setup_queues(r12, r7, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x200, 0x2, 0x2bd, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0xc, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, r6, '\x00', {0x1, 0x362, 0x0, 0x0}}, &(0x7f0000001e40)) 85.428368ms ago: executing program 3 (id=700): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a03c0e8f955799d27afa85740e03a455bc243e90b1abf18f2907a0741170177e74f7c88668ec12763c765b0346b01af656e14ae3fdacb823f2db3515b8e6aa88c7d652551ff36fe60817a19dd5c864589c7b7c3ee9aa2dc24986a2a754f7db974bd2e0867f0153d7867152f89d61a33c6935c4541fe93806f8cf4dd213a3a885ab939e1f78c1e", 0x96}, {&(0x7f0000000180)="3f67466b434f0f1d0864b413f241dddea2dbdf0911184af38cc2adbac2f538c179c6d06cb884a50159037441904c0acf55994e41d7790cac9d0800000000000000c424bda885bc6dd022b01fff74a0f6227fd01fa455f675b59ef6c2ec767b7883f3e68d209fe15dd3eecaa7bbc3cfadf815a0ef14", 0x75}, {&(0x7f0000000380)="7f9dd881777fea034ee968a3f4d1b230a014767a2fcd073cbd06", 0x1a}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 66.335018ms ago: executing program 3 (id=701): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000000045, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82843, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r1, 0x1000, {0x0, 0x0, 0x0, 0x1, 0x4000080000001001, 0x0, 0x0, 0x2, 0x0, "faf98317e5a1149989958dbe53ea6accb396a2503dc3eb3fe37d58128bbad0099cebdc35f50160c9e6d6e3ab8588070000000000120000000000000000002200", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c5099fd3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffcdf, 0xa00006]}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 35.10877ms ago: executing program 3 (id=702): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 0s ago: executing program 3 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x100000, {}, 0x0, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) r5 = dup(r4) syz_fuse_handle_req(r5, &(0x7f0000002900)="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", 0x2000, &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x6, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet_buf(r6, 0x0, 0x26, &(0x7f0000000240)="f6173ca159f18dc62c5275754507e59c054dfee5c8306c1906a2b67da2a437ba7e50637e1242e3cc92c87ccaac182706deee81c7ac2e50afb243b8097d1c3ed4570c9fb65606eb848d0ba470397da7eefe8928c57dafd261313b8dd80f1011cd6856d602ee118c60414ed6d7b4ce6c1921972c67e778c24e1116dd71bbf0000000006fce952e085eecc8cf9ad15f857ee6ce8ef6b4c64018639ecf740388f4428fc704ec2e5b7cb627204fa53272992478d3d883a436658e29994ca5e0e460504f03b888688b61d43cdef864d6841309000000659aecb5ec5f0fdc16889e96bd2900010000592520c6e7e40424ef9af2", 0xf0) r10 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r10) kernel console output (not intermixed with test programs): endpoint descriptor, different from the interface descriptor's value: 2 [ 59.233370][ T603] usb 2-1: config 1 interface 0 has no altsetting 0 [ 59.242286][ T603] usb 2-1: string descriptor 0 read error: -22 [ 59.248565][ T603] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 59.257632][ T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.267687][ T603] usblp0: Disabling reads from problematic bidirectional printer [ 59.345156][ T65] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 59.415135][ T312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 59.468746][ T603] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 59.479786][ T65] usb 5-1: device descriptor read/64, error -71 [ 59.487197][ T603] usb 2-1: USB disconnect, device number 11 [ 59.493860][ T603] usblp0: removed [ 59.565139][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 59.572716][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.582739][ T312] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 59.591851][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.599917][ T312] usb 3-1: Product: syz [ 59.604113][ T312] usb 3-1: Manufacturer: syz [ 59.608749][ T312] usb 3-1: SerialNumber: syz [ 59.725145][ T65] usb 5-1: device descriptor read/64, error -71 [ 59.817348][ T312] usb 3-1: selecting invalid altsetting 1 [ 59.825589][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 59.835471][ T312] usb 3-1: USB disconnect, device number 18 [ 59.844087][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.859934][ T65] usb usb5-port1: attempt power cycle [ 59.945210][ T336] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.095114][ T336] usb 4-1: Using ep0 maxpacket: 8 [ 60.102541][ T336] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 60.111832][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.119888][ T336] usb 4-1: Product: syz [ 60.124081][ T336] usb 4-1: Manufacturer: syz [ 60.128754][ T336] usb 4-1: SerialNumber: syz [ 60.205126][ T65] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 60.226223][ T65] usb 5-1: device descriptor read/8, error -71 [ 60.337152][ T36] audit: type=1400 audit(1785542997.520:360): avc: denied { mount } for pid=1083 comm="syz.2.270" name="/" dev="ramfs" ino=9048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 60.359596][ T36] audit: type=1400 audit(1785542997.530:361): avc: denied { mounton } for pid=1083 comm="syz.2.270" path="/76/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 60.366971][ T336] usb 4-1: MIDIStreaming interface descriptor not found [ 60.385222][ T65] usb 5-1: device descriptor read/8, error -71 [ 60.398621][ T336] usb 4-1: USB disconnect, device number 18 [ 60.410892][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.471337][ T1090] rust_binder: 1089:1090 transaction to 0 failed: EINVAL [ 60.589130][ T1098] VFS: file-max limit 0 reached [ 60.602782][ T1098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.645159][ T65] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 60.666139][ T65] usb 5-1: device descriptor read/8, error -71 [ 60.760882][ T36] audit: type=1400 audit(1785542997.950:362): avc: denied { write } for pid=1102 comm="syz.1.276" name="mcfilter" dev="proc" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.806219][ T65] usb 5-1: device descriptor read/8, error -71 [ 60.884710][ T1113] tc_dump_action: action bad kind [ 60.890572][ T1114] rust_binder: 1112:1114 transaction to 0 failed: EINVAL [ 60.891767][ T1114] binder: Unknown parameter '' [ 60.915206][ T65] usb usb5-port1: unable to enumerate USB device [ 60.940782][ T1118] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.185156][ T312] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 61.315136][ T312] usb 4-1: device descriptor read/64, error -71 [ 61.372515][ T1122] rust_binder: 1121:1122 transaction to 0 failed: EINVAL [ 61.406705][ T1126] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 61.555164][ T312] usb 4-1: device descriptor read/64, error -71 [ 61.795139][ T312] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 61.925125][ T312] usb 4-1: device descriptor read/64, error -71 [ 62.018091][ T13] bridge_slave_1: left allmulticast mode [ 62.023875][ T13] bridge_slave_1: left promiscuous mode [ 62.030189][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.038403][ T13] bridge_slave_0: left allmulticast mode [ 62.044118][ T13] bridge_slave_0: left promiscuous mode [ 62.050157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.158649][ T13] veth1_macvtap: left promiscuous mode [ 62.164241][ T13] veth0_vlan: left promiscuous mode [ 62.175153][ T312] usb 4-1: device descriptor read/64, error -71 [ 62.256622][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.263794][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.271073][ T1147] bridge_slave_0: entered allmulticast mode [ 62.277426][ T1147] bridge_slave_0: entered promiscuous mode [ 62.283967][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.291293][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.295639][ T312] usb usb4-port1: attempt power cycle [ 62.298468][ T1147] bridge_slave_1: entered allmulticast mode [ 62.310090][ T1147] bridge_slave_1: entered promiscuous mode [ 62.358703][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.365828][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.373122][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.380184][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.404192][ T888] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.411770][ T888] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.421493][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.428586][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.438939][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.446033][ T888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.474339][ T1147] veth0_vlan: entered promiscuous mode [ 62.499734][ T1147] veth1_macvtap: entered promiscuous mode [ 62.515496][ T1152] /dev/nbd4: Can't lookup blockdev [ 62.635175][ T312] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 62.650802][ T1162] syzkaller1: entered promiscuous mode [ 62.656663][ T1162] syzkaller1: entered allmulticast mode [ 62.666480][ T312] usb 4-1: device descriptor read/8, error -71 [ 62.716939][ T1158] kvm: user requested TSC rate below hardware speed [ 62.723673][ T1159] kvm: user requested TSC rate below hardware speed [ 62.745156][ T603] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 62.796892][ T312] usb 4-1: device descriptor read/8, error -71 [ 62.895180][ T603] usb 2-1: Using ep0 maxpacket: 8 [ 62.901467][ T603] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.914684][ T603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.921360][ T603] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 62.930605][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.939430][ T603] usb 2-1: config 0 descriptor?? [ 62.965117][ T65] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 63.035149][ T312] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 63.056504][ T312] usb 4-1: device descriptor read/8, error -71 [ 63.095125][ T65] usb 6-1: device descriptor read/64, error -71 [ 63.186302][ T312] usb 4-1: device descriptor read/8, error -71 [ 63.295183][ T312] usb usb4-port1: unable to enumerate USB device [ 63.335135][ T65] usb 6-1: device descriptor read/64, error -71 [ 63.352074][ T603] ortek 0003:1223:3F07.0004: unknown main item tag 0x4 [ 63.359061][ T603] ortek 0003:1223:3F07.0004: unknown main item tag 0x5 [ 63.365977][ T603] ortek 0003:1223:3F07.0004: unknown main item tag 0x2 [ 63.372869][ T603] ortek 0003:1223:3F07.0004: unexpected long global item [ 63.380161][ T603] ortek 0003:1223:3F07.0004: probe with driver ortek failed with error -22 [ 63.575141][ T65] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 63.585931][ T336] usb 2-1: USB disconnect, device number 12 [ 63.705426][ T65] usb 6-1: device descriptor read/64, error -71 [ 63.775139][ T312] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 63.927389][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.935983][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.946416][ T65] usb 6-1: device descriptor read/64, error -71 [ 63.970329][ T312] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 63.978063][ T312] usb 5-1: can't read configurations, error -71 [ 64.055252][ T65] usb usb6-port1: attempt power cycle [ 64.365213][ T603] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 64.395133][ T65] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 64.416335][ T65] usb 6-1: device descriptor read/8, error -71 [ 64.495189][ T603] usb 4-1: device descriptor read/64, error -71 [ 64.546233][ T65] usb 6-1: device descriptor read/8, error -71 [ 64.735154][ T603] usb 4-1: device descriptor read/64, error -71 [ 64.785129][ T65] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 64.806384][ T65] usb 6-1: device descriptor read/8, error -71 [ 64.936179][ T65] usb 6-1: device descriptor read/8, error -71 [ 64.959251][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 64.959270][ T36] audit: type=1400 audit(1785543002.150:373): avc: denied { ioctl } for pid=1180 comm="syz.1.304" path="socket:[11291]" dev="sockfs" ino=11291 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.975219][ T603] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 64.990094][ T36] audit: type=1400 audit(1785543002.150:374): avc: denied { connect } for pid=1180 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.045226][ T65] usb usb6-port1: unable to enumerate USB device [ 65.057947][ T13] bridge_slave_1: left allmulticast mode [ 65.063690][ T13] bridge_slave_1: left promiscuous mode [ 65.069733][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.085336][ T13] bridge_slave_0: left allmulticast mode [ 65.091107][ T13] bridge_slave_0: left promiscuous mode [ 65.097008][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.125662][ T603] usb 4-1: device descriptor read/64, error -71 [ 65.218485][ T13] veth1_macvtap: left promiscuous mode [ 65.224025][ T13] veth0_vlan: left promiscuous mode [ 65.290346][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.297481][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.305390][ T1183] bridge_slave_0: entered allmulticast mode [ 65.311652][ T1183] bridge_slave_0: entered promiscuous mode [ 65.326471][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.333532][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.340792][ T1183] bridge_slave_1: entered allmulticast mode [ 65.347144][ T1183] bridge_slave_1: entered promiscuous mode [ 65.365189][ T603] usb 4-1: device descriptor read/64, error -71 [ 65.417654][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.424756][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.432192][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.439254][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.461883][ T888] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.469213][ T888] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.479233][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.486313][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.494002][ T603] usb usb4-port1: attempt power cycle [ 65.499610][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.506715][ T888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.534523][ T1183] veth0_vlan: entered promiscuous mode [ 65.546557][ T1183] veth1_macvtap: entered promiscuous mode [ 65.655989][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 65.806149][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 65.817183][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.828195][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.838081][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 65.845380][ T603] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 65.852585][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 65.867948][ T45] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 65.876097][ T45] usb 5-1: Manufacturer: syz [ 65.877016][ T603] usb 4-1: device descriptor read/8, error -71 [ 65.885455][ T45] usb 5-1: config 0 descriptor?? [ 66.016329][ T603] usb 4-1: device descriptor read/8, error -71 [ 66.255124][ T603] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 66.276226][ T603] usb 4-1: device descriptor read/8, error -71 [ 66.337731][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 66.344652][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 66.353980][ T45] usb 5-1: USB disconnect, device number 13 [ 66.425011][ T36] audit: type=1400 audit(1785543003.610:375): avc: denied { setopt } for pid=1230 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.447408][ T603] usb 4-1: device descriptor read/8, error -71 [ 66.477590][ T1235] incfs: Backing dir is not set, filesystem can't be mounted. [ 66.486203][ T1235] incfs: mount failed -2 [ 66.518839][ T36] audit: type=1400 audit(1785543003.710:376): avc: denied { ioctl } for pid=1239 comm="syz.5.324" path="socket:[11683]" dev="sockfs" ino=11683 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.555348][ T603] usb usb4-port1: unable to enumerate USB device [ 66.572996][ T1240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.637337][ T1245] kvm: pic: non byte write [ 67.035532][ T1251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.327'. [ 67.349283][ T36] audit: type=1400 audit(1785543004.540:377): avc: denied { ioctl } for pid=1270 comm="syz.5.334" path="socket:[12359]" dev="sockfs" ino=12359 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.374070][ T1271] futex_wake_op: syz.5.334 tries to shift op by 144; fix this program [ 67.405934][ T36] audit: type=1400 audit(1785543004.570:378): avc: denied { create } for pid=1276 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.436220][ T36] audit: type=1400 audit(1785543004.590:379): avc: denied { bind } for pid=1276 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.528053][ T1291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=1291 comm=syz.4.341 [ 67.634140][ T1299] FAULT_INJECTION: forcing a failure. [ 67.634140][ T1299] name failslab, interval 1, probability 0, space 0, times 0 [ 67.646988][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: syz.4.344 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 67.647025][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.647039][ T1299] Call Trace: [ 67.647046][ T1299] [ 67.647056][ T1299] __dump_stack+0x21/0x30 [ 67.647093][ T1299] dump_stack_lvl+0x140/0x1c0 [ 67.647125][ T1299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.647158][ T1299] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 67.647181][ T1299] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 67.647219][ T1299] dump_stack+0x19/0x20 [ 67.647258][ T1299] should_fail_ex+0x3c2/0x510 [ 67.647286][ T1299] should_failslab+0xac/0x100 [ 67.647316][ T1299] kmem_cache_alloc_noprof+0x42/0x410 [ 67.647340][ T1299] ? __kernfs_new_node+0xf1/0x740 [ 67.647368][ T1299] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 67.647399][ T1299] __kernfs_new_node+0xf1/0x740 [ 67.647427][ T1299] ? __kasan_check_write+0x18/0x20 [ 67.647451][ T1299] ? kernfs_new_node+0x280/0x280 [ 67.647479][ T1299] ? down_write+0x163/0x2b0 [ 67.647512][ T1299] ? __cfi_down_write+0x10/0x10 [ 67.647547][ T1299] ? __kasan_check_write+0x18/0x20 [ 67.647569][ T1299] ? up_write+0x66/0x280 [ 67.647602][ T1299] ? kernfs_activate+0x1ee/0x200 [ 67.647631][ T1299] kernfs_new_node+0x154/0x280 [ 67.647661][ T1299] __kernfs_create_file+0x52/0x280 [ 67.647695][ T1299] sysfs_add_file_mode_ns+0x1d2/0x280 [ 67.647731][ T1299] internal_create_group+0x66c/0xe80 [ 67.647759][ T1299] ? sysfs_create_group+0x40/0x40 [ 67.647786][ T1299] ? kernfs_remove_by_name_ns+0x146/0x180 [ 67.647819][ T1299] sysfs_create_group+0x23/0x40 [ 67.647845][ T1299] sysfs_slab_add+0x158/0x280 [ 67.647870][ T1299] do_kmem_cache_create+0x40a/0x550 [ 67.647897][ T1299] __kmem_cache_create_args+0x16f/0x310 [ 67.647923][ T1299] p9_client_create+0xc71/0x12d0 [ 67.647959][ T1299] ? __cfi_p9_client_create+0x10/0x10 [ 67.647992][ T1299] ? v9fs_mount+0xc1/0x9d0 [ 67.648019][ T1299] ? kasan_save_alloc_info+0x3a/0x50 [ 67.648054][ T1299] ? __kasan_kmalloc+0x96/0xb0 [ 67.648081][ T1299] ? kstrdup+0x7b/0x130 [ 67.648113][ T1299] ? __asan_memset+0x39/0x50 [ 67.648134][ T1299] v9fs_session_init+0x1c4/0x18a0 [ 67.648159][ T1299] ? __cfi_v9fs_session_init+0x10/0x10 [ 67.648181][ T1299] ? kasan_save_alloc_info+0x3a/0x50 [ 67.648216][ T1299] ? __kasan_kmalloc+0x96/0xb0 [ 67.648253][ T1299] ? __kmalloc_cache_noprof+0x23c/0x470 [ 67.648277][ T1299] ? v9fs_mount+0xc1/0x9d0 [ 67.648304][ T1299] v9fs_mount+0xdb/0x9d0 [ 67.648328][ T1299] ? __cfi_v9fs_mount+0x10/0x10 [ 67.648354][ T1299] ? selinux_capable+0x38/0x50 [ 67.648383][ T1299] legacy_get_tree+0x103/0x1b0 [ 67.648414][ T1299] ? __cfi_v9fs_mount+0x10/0x10 [ 67.648440][ T1299] vfs_get_tree+0x9e/0x290 [ 67.648463][ T1299] do_new_mount+0x251/0xb40 [ 67.648485][ T1299] ? security_capable+0x44/0x130 [ 67.648512][ T1299] path_mount+0x66a/0xff0 [ 67.648533][ T1299] ? putname+0x113/0x150 [ 67.648559][ T1299] __se_sys_mount+0x2bf/0x480 [ 67.648583][ T1299] ? ksys_write+0x1f3/0x260 [ 67.648607][ T1299] ? __x64_sys_mount+0xf0/0xf0 [ 67.648632][ T1299] __x64_sys_mount+0xc3/0xf0 [ 67.648655][ T1299] x64_sys_call+0x2021/0x2ee0 [ 67.648676][ T1299] do_syscall_64+0x57/0xf0 [ 67.648701][ T1299] ? clear_bhb_loop+0x50/0xa0 [ 67.648732][ T1299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.648763][ T1299] RIP: 0033:0x7f0ba059e019 [ 67.648783][ T1299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.648800][ T1299] RSP: 002b:00007f0ba139c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.648823][ T1299] RAX: ffffffffffffffda RBX: 00007f0ba0825fa0 RCX: 00007f0ba059e019 [ 67.648839][ T1299] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 67.648855][ T1299] RBP: 00007f0ba139c090 R08: 0000200000000040 R09: 0000000000000000 [ 67.648869][ T1299] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 67.648884][ T1299] R13: 00007f0ba0826038 R14: 00007f0ba0825fa0 R15: 00007ffe27f14c78 [ 67.648903][ T1299] [ 68.053272][ T1299] __kmem_cache_create_args(9p-fcall-cache-8) failed with error -12 [ 68.061766][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: syz.4.344 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 68.061790][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.061801][ T1299] Call Trace: [ 68.061806][ T1299] [ 68.061812][ T1299] __dump_stack+0x21/0x30 [ 68.061839][ T1299] dump_stack_lvl+0x140/0x1c0 [ 68.061861][ T1299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.061883][ T1299] ? mutex_unlock+0x90/0x240 [ 68.061905][ T1299] ? __cfi_mutex_unlock+0x10/0x10 [ 68.061928][ T1299] dump_stack+0x19/0x20 [ 68.061949][ T1299] __kmem_cache_create_args+0x244/0x310 [ 68.061967][ T1299] p9_client_create+0xc71/0x12d0 [ 68.061992][ T1299] ? __cfi_p9_client_create+0x10/0x10 [ 68.062016][ T1299] ? v9fs_mount+0xc1/0x9d0 [ 68.062035][ T1299] ? kasan_save_alloc_info+0x3a/0x50 [ 68.062059][ T1299] ? __kasan_kmalloc+0x96/0xb0 [ 68.062079][ T1299] ? kstrdup+0x7b/0x130 [ 68.062102][ T1299] ? __asan_memset+0x39/0x50 [ 68.062118][ T1299] v9fs_session_init+0x1c4/0x18a0 [ 68.062135][ T1299] ? __cfi_v9fs_session_init+0x10/0x10 [ 68.062150][ T1299] ? kasan_save_alloc_info+0x3a/0x50 [ 68.062174][ T1299] ? __kasan_kmalloc+0x96/0xb0 [ 68.062217][ T1299] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.062234][ T1299] ? v9fs_mount+0xc1/0x9d0 [ 68.062252][ T1299] v9fs_mount+0xdb/0x9d0 [ 68.062270][ T1299] ? __cfi_v9fs_mount+0x10/0x10 [ 68.062311][ T1299] ? selinux_capable+0x38/0x50 [ 68.062340][ T1299] legacy_get_tree+0x103/0x1b0 [ 68.062374][ T1299] ? __cfi_v9fs_mount+0x10/0x10 [ 68.062392][ T1299] vfs_get_tree+0x9e/0x290 [ 68.062419][ T1299] do_new_mount+0x251/0xb40 [ 68.062442][ T1299] ? security_capable+0x44/0x130 [ 68.062467][ T1299] path_mount+0x66a/0xff0 [ 68.062488][ T1299] ? putname+0x113/0x150 [ 68.062514][ T1299] __se_sys_mount+0x2bf/0x480 [ 68.062530][ T1299] ? ksys_write+0x1f3/0x260 [ 68.062545][ T1299] ? __x64_sys_mount+0xf0/0xf0 [ 68.062562][ T1299] __x64_sys_mount+0xc3/0xf0 [ 68.062579][ T1299] x64_sys_call+0x2021/0x2ee0 [ 68.062593][ T1299] do_syscall_64+0x57/0xf0 [ 68.062623][ T1299] ? clear_bhb_loop+0x50/0xa0 [ 68.062653][ T1299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.062682][ T1299] RIP: 0033:0x7f0ba059e019 [ 68.062702][ T1299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.062716][ T1299] RSP: 002b:00007f0ba139c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.062733][ T1299] RAX: ffffffffffffffda RBX: 00007f0ba0825fa0 RCX: 00007f0ba059e019 [ 68.062745][ T1299] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 68.062757][ T1299] RBP: 00007f0ba139c090 R08: 0000200000000040 R09: 0000000000000000 [ 68.062767][ T1299] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 68.062777][ T1299] R13: 00007f0ba0826038 R14: 00007f0ba0825fa0 R15: 00007ffe27f14c78 [ 68.062791][ T1299] [ 68.401710][ T36] audit: type=1400 audit(1785543005.590:380): avc: denied { nlmsg_read } for pid=1308 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.401775][ T1309] netlink: 272 bytes leftover after parsing attributes in process `syz.3.347'. [ 68.431314][ T65] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.585232][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 68.592858][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.603864][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.613793][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.626691][ T65] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 68.636011][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.644632][ T603] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 68.652662][ T65] usb 6-1: config 0 descriptor?? [ 68.685107][ T312] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 68.781495][ T1329] FAULT_INJECTION: forcing a failure. [ 68.781495][ T1329] name failslab, interval 1, probability 0, space 0, times 0 [ 68.794290][ T1329] CPU: 1 UID: 0 PID: 1329 Comm: syz.6.354 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 68.794327][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.794341][ T1329] Call Trace: [ 68.794348][ T1329] [ 68.794357][ T1329] __dump_stack+0x21/0x30 [ 68.794392][ T1329] dump_stack_lvl+0x140/0x1c0 [ 68.794414][ T1329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.794455][ T1329] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 68.794479][ T1329] dump_stack+0x19/0x20 [ 68.794507][ T1329] should_fail_ex+0x3c2/0x510 [ 68.794535][ T1329] should_failslab+0xac/0x100 [ 68.794555][ T1329] kmem_cache_alloc_noprof+0x42/0x410 [ 68.794572][ T1329] ? __kernfs_new_node+0xf1/0x740 [ 68.794614][ T1329] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 68.794644][ T1329] __kernfs_new_node+0xf1/0x740 [ 68.794675][ T1329] ? __kasan_check_write+0x18/0x20 [ 68.794692][ T1329] ? kernfs_new_node+0x280/0x280 [ 68.794711][ T1329] ? down_write+0xee/0x2b0 [ 68.794750][ T1329] ? __cfi_down_write+0x10/0x10 [ 68.794784][ T1329] ? __kasan_check_write+0x18/0x20 [ 68.794805][ T1329] ? up_write+0x66/0x280 [ 68.794837][ T1329] ? kernfs_activate+0x1ee/0x200 [ 68.794857][ T1329] kernfs_new_node+0x154/0x280 [ 68.794878][ T1329] __kernfs_create_file+0x52/0x280 [ 68.794924][ T1329] sysfs_add_file_mode_ns+0x1d2/0x280 [ 68.794959][ T1329] internal_create_group+0x66c/0xe80 [ 68.794987][ T1329] ? sysfs_create_group+0x40/0x40 [ 68.795005][ T1329] ? kernfs_remove_by_name_ns+0x146/0x180 [ 68.795040][ T1329] sysfs_create_group+0x23/0x40 [ 68.795067][ T1329] sysfs_slab_add+0x158/0x280 [ 68.795092][ T1329] do_kmem_cache_create+0x40a/0x550 [ 68.795116][ T1329] __kmem_cache_create_args+0x16f/0x310 [ 68.795148][ T1329] p9_client_create+0xc71/0x12d0 [ 68.795184][ T1329] ? __cfi_p9_client_create+0x10/0x10 [ 68.795216][ T1329] ? v9fs_mount+0xc1/0x9d0 [ 68.795243][ T1329] ? kasan_save_alloc_info+0x3a/0x50 [ 68.795278][ T1329] ? __kasan_kmalloc+0x96/0xb0 [ 68.795306][ T1329] ? kstrdup+0x7b/0x130 [ 68.795339][ T1329] ? __asan_memset+0x39/0x50 [ 68.795362][ T1329] v9fs_session_init+0x1c4/0x18a0 [ 68.795387][ T1329] ? __cfi_v9fs_session_init+0x10/0x10 [ 68.795408][ T1329] ? kasan_save_alloc_info+0x3a/0x50 [ 68.795444][ T1329] ? __kasan_kmalloc+0x96/0xb0 [ 68.795462][ T1329] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.795479][ T1329] ? v9fs_mount+0xc1/0x9d0 [ 68.795520][ T1329] v9fs_mount+0xdb/0x9d0 [ 68.795546][ T1329] ? __cfi_v9fs_mount+0x10/0x10 [ 68.795571][ T1329] ? selinux_capable+0x38/0x50 [ 68.795600][ T1329] legacy_get_tree+0x103/0x1b0 [ 68.795622][ T1329] ? __cfi_v9fs_mount+0x10/0x10 [ 68.795656][ T1329] vfs_get_tree+0x9e/0x290 [ 68.795680][ T1329] do_new_mount+0x251/0xb40 [ 68.795702][ T1329] ? security_capable+0x44/0x130 [ 68.795732][ T1329] path_mount+0x66a/0xff0 [ 68.795747][ T1329] ? putname+0x113/0x150 [ 68.795765][ T1329] __se_sys_mount+0x2bf/0x480 [ 68.795781][ T1329] ? ksys_write+0x1f3/0x260 [ 68.795815][ T1329] ? __x64_sys_mount+0xf0/0xf0 [ 68.795841][ T1329] __x64_sys_mount+0xc3/0xf0 [ 68.795864][ T1329] x64_sys_call+0x2021/0x2ee0 [ 68.795889][ T1329] do_syscall_64+0x57/0xf0 [ 68.795906][ T1329] ? clear_bhb_loop+0x50/0xa0 [ 68.795928][ T1329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.795966][ T1329] RIP: 0033:0x7fe52279e019 [ 68.795985][ T1329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.796004][ T1329] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.796034][ T1329] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 68.796047][ T1329] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 68.796058][ T1329] RBP: 00007fe52372f090 R08: 0000200000000040 R09: 0000000000000000 [ 68.796068][ T1329] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 68.796078][ T1329] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 68.796107][ T1329] [ 68.855236][ T603] usb 5-1: Using ep0 maxpacket: 32 [ 68.873976][ T312] usb 4-1: device descriptor read/64, error -71 [ 68.876630][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.885462][ T1329] __kmem_cache_create_args(9p-fcall-cache-9) failed with error -12 [ 68.890002][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.893879][ T1329] CPU: 1 UID: 0 PID: 1329 Comm: syz.6.354 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 68.893953][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.894004][ T1329] Call Trace: [ 68.894025][ T1329] [ 68.894049][ T1329] __dump_stack+0x21/0x30 [ 68.894165][ T1329] dump_stack_lvl+0x140/0x1c0 [ 68.894245][ T1329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.894319][ T1329] ? mutex_unlock+0x90/0x240 [ 68.894400][ T1329] ? __cfi_mutex_unlock+0x10/0x10 [ 68.894481][ T1329] dump_stack+0x19/0x20 [ 68.894550][ T1329] __kmem_cache_create_args+0x244/0x310 [ 68.894621][ T1329] p9_client_create+0xc71/0x12d0 [ 68.894706][ T1329] ? __cfi_p9_client_create+0x10/0x10 [ 68.894790][ T1329] ? v9fs_mount+0xc1/0x9d0 [ 68.894860][ T1329] ? kasan_save_alloc_info+0x3a/0x50 [ 68.894941][ T1329] ? __kasan_kmalloc+0x96/0xb0 [ 68.895012][ T1329] ? kstrdup+0x7b/0x130 [ 68.895102][ T1329] ? __asan_memset+0x39/0x50 [ 68.895163][ T1329] v9fs_session_init+0x1c4/0x18a0 [ 68.895224][ T1329] ? __cfi_v9fs_session_init+0x10/0x10 [ 68.895278][ T1329] ? kasan_save_alloc_info+0x3a/0x50 [ 68.895382][ T1329] ? __kasan_kmalloc+0x96/0xb0 [ 68.895470][ T1329] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.895530][ T1329] ? v9fs_mount+0xc1/0x9d0 [ 68.895599][ T1329] v9fs_mount+0xdb/0x9d0 [ 68.895662][ T1329] ? __cfi_v9fs_mount+0x10/0x10 [ 68.895726][ T1329] ? selinux_capable+0x38/0x50 [ 68.895805][ T1329] legacy_get_tree+0x103/0x1b0 [ 68.895875][ T1329] ? __cfi_v9fs_mount+0x10/0x10 [ 68.895944][ T1329] vfs_get_tree+0x9e/0x290 [ 68.895997][ T1329] do_new_mount+0x251/0xb40 [ 68.896057][ T1329] ? security_capable+0x44/0x130 [ 68.896127][ T1329] path_mount+0x66a/0xff0 [ 68.896194][ T1329] ? putname+0x113/0x150 [ 68.896255][ T1329] __se_sys_mount+0x2bf/0x480 [ 68.896308][ T1329] ? ksys_write+0x1f3/0x260 [ 68.896367][ T1329] ? __x64_sys_mount+0xf0/0xf0 [ 68.896435][ T1329] __x64_sys_mount+0xc3/0xf0 [ 68.896498][ T1329] x64_sys_call+0x2021/0x2ee0 [ 68.896548][ T1329] do_syscall_64+0x57/0xf0 [ 68.896609][ T1329] ? clear_bhb_loop+0x50/0xa0 [ 68.896683][ T1329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.896763][ T1329] RIP: 0033:0x7fe52279e019 [ 68.896833][ T1329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.896895][ T1329] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.896956][ T1329] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 68.896999][ T1329] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 68.897046][ T1329] RBP: 00007fe52372f090 R08: 0000200000000040 R09: 0000000000000000 [ 68.897086][ T1329] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 68.897125][ T1329] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 68.897185][ T1329] [ 69.068449][ T1282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.071302][ T603] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 69.086794][ T1282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.089941][ T603] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 69.153253][ T312] usb 4-1: device descriptor read/64, error -71 [ 69.155186][ T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.168858][ T1331] netlink: 'syz.6.355': attribute type 3 has an invalid length. [ 69.171164][ T65] usbhid 6-1:0.0: can't add hid device: -71 [ 69.179752][ T1332] netlink: 'syz.6.355': attribute type 3 has an invalid length. [ 69.186841][ T65] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 69.425636][ T312] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 69.436728][ T65] usb 6-1: USB disconnect, device number 6 [ 69.611495][ T603] usb 5-1: config 0 descriptor?? [ 69.615193][ T312] usb 4-1: device descriptor read/64, error -71 [ 69.665122][ T36] audit: type=1400 audit(1785543006.850:381): avc: denied { map } for pid=1340 comm="syz.5.357" path="socket:[12096]" dev="sockfs" ino=12096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.701659][ T36] audit: type=1400 audit(1785543006.850:382): avc: denied { read } for pid=1340 comm="syz.5.357" path="socket:[12096]" dev="sockfs" ino=12096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.865135][ T312] usb 4-1: device descriptor read/64, error -71 [ 69.976034][ T312] usb usb4-port1: attempt power cycle [ 70.021475][ T1307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.030112][ T1307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.039015][ T1307] batadv_slave_1: entered promiscuous mode [ 70.047013][ T603] hid (null): report_id 3804429933 is invalid [ 70.053201][ T603] hid (null): unknown global tag 0xee [ 70.058641][ T603] hid (null): unknown global tag 0xe [ 70.063932][ T603] hid (null): unknown global tag 0xd [ 70.069309][ T603] hid (null): unknown global tag 0xc [ 70.074619][ T603] hid (null): invalid report_count -1839820509 [ 70.084983][ T603] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input12 [ 70.099189][ T603] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input13 [ 70.120540][ T603] kye 0003:0458:5011.0005: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 70.235123][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.263121][ T1306] batadv_slave_1: left promiscuous mode [ 70.269763][ T603] usb 5-1: USB disconnect, device number 14 [ 70.315135][ T312] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 70.336225][ T312] usb 4-1: device descriptor read/8, error -71 [ 70.385115][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 70.391845][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 70.404687][ T45] usb 6-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 70.413819][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.421897][ T45] usb 6-1: Product: syz [ 70.426209][ T45] usb 6-1: Manufacturer: syz [ 70.430837][ T45] usb 6-1: SerialNumber: syz [ 70.439674][ T1361] FAULT_INJECTION: forcing a failure. [ 70.439674][ T1361] name failslab, interval 1, probability 0, space 0, times 0 [ 70.452958][ T1361] CPU: 0 UID: 0 PID: 1361 Comm: syz.6.364 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 70.453002][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.453016][ T1361] Call Trace: [ 70.453023][ T1361] [ 70.453032][ T1361] __dump_stack+0x21/0x30 [ 70.453068][ T1361] dump_stack_lvl+0x140/0x1c0 [ 70.453101][ T1361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.453133][ T1361] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 70.453157][ T1361] dump_stack+0x19/0x20 [ 70.453188][ T1361] should_fail_ex+0x3c2/0x510 [ 70.453214][ T1361] should_failslab+0xac/0x100 [ 70.453241][ T1361] kmem_cache_alloc_noprof+0x42/0x410 [ 70.453265][ T1361] ? __kernfs_new_node+0xf1/0x740 [ 70.453294][ T1361] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 70.453326][ T1361] __kernfs_new_node+0xf1/0x740 [ 70.453354][ T1361] ? __kasan_check_write+0x18/0x20 [ 70.453378][ T1361] ? kernfs_new_node+0x280/0x280 [ 70.453405][ T1361] ? down_write+0xee/0x2b0 [ 70.453439][ T1361] ? __cfi_down_write+0x10/0x10 [ 70.453474][ T1361] ? __kasan_check_write+0x18/0x20 [ 70.453497][ T1361] ? up_write+0x66/0x280 [ 70.453529][ T1361] ? kernfs_activate+0x1ee/0x200 [ 70.453558][ T1361] kernfs_new_node+0x154/0x280 [ 70.453598][ T1361] __kernfs_create_file+0x52/0x280 [ 70.453632][ T1361] sysfs_add_file_mode_ns+0x1d2/0x280 [ 70.453668][ T1361] internal_create_group+0x66c/0xe80 [ 70.453698][ T1361] ? sysfs_create_group+0x40/0x40 [ 70.453724][ T1361] ? kernfs_remove_by_name_ns+0x146/0x180 [ 70.453758][ T1361] sysfs_create_group+0x23/0x40 [ 70.453783][ T1361] sysfs_slab_add+0x158/0x280 [ 70.453810][ T1361] do_kmem_cache_create+0x40a/0x550 [ 70.453837][ T1361] __kmem_cache_create_args+0x16f/0x310 [ 70.453864][ T1361] p9_client_create+0xc71/0x12d0 [ 70.453901][ T1361] ? __cfi_p9_client_create+0x10/0x10 [ 70.453935][ T1361] ? v9fs_mount+0xc1/0x9d0 [ 70.453962][ T1361] ? kasan_save_alloc_info+0x3a/0x50 [ 70.454010][ T1361] ? __kasan_kmalloc+0x96/0xb0 [ 70.454040][ T1361] ? kstrdup+0x7b/0x130 [ 70.454073][ T1361] ? __asan_memset+0x39/0x50 [ 70.454097][ T1361] v9fs_session_init+0x1c4/0x18a0 [ 70.454122][ T1361] ? __cfi_v9fs_session_init+0x10/0x10 [ 70.454147][ T1361] ? kasan_save_alloc_info+0x3a/0x50 [ 70.454182][ T1361] ? __kasan_kmalloc+0x96/0xb0 [ 70.454210][ T1361] ? __kmalloc_cache_noprof+0x23c/0x470 [ 70.454235][ T1361] ? v9fs_mount+0xc1/0x9d0 [ 70.454262][ T1361] v9fs_mount+0xdb/0x9d0 [ 70.454290][ T1361] ? __cfi_v9fs_mount+0x10/0x10 [ 70.454316][ T1361] ? selinux_capable+0x38/0x50 [ 70.454347][ T1361] legacy_get_tree+0x103/0x1b0 [ 70.454378][ T1361] ? __cfi_v9fs_mount+0x10/0x10 [ 70.454406][ T1361] vfs_get_tree+0x9e/0x290 [ 70.454430][ T1361] do_new_mount+0x251/0xb40 [ 70.454454][ T1361] ? security_capable+0x44/0x130 [ 70.454481][ T1361] path_mount+0x66a/0xff0 [ 70.454503][ T1361] ? putname+0x113/0x150 [ 70.454529][ T1361] __se_sys_mount+0x2bf/0x480 [ 70.454554][ T1361] ? ksys_write+0x1f3/0x260 [ 70.454578][ T1361] ? __x64_sys_mount+0xf0/0xf0 [ 70.454612][ T1361] __x64_sys_mount+0xc3/0xf0 [ 70.454637][ T1361] x64_sys_call+0x2021/0x2ee0 [ 70.454658][ T1361] do_syscall_64+0x57/0xf0 [ 70.454682][ T1361] ? clear_bhb_loop+0x50/0xa0 [ 70.454711][ T1361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.454740][ T1361] RIP: 0033:0x7fe52279e019 [ 70.454759][ T1361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.454778][ T1361] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.454801][ T1361] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 70.454819][ T1361] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 70.454835][ T1361] RBP: 00007fe52372f090 R08: 0000200000000040 R09: 0000000000000000 [ 70.454851][ T1361] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 70.454866][ T1361] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 70.454886][ T1361] [ 70.454958][ T1361] __kmem_cache_create_args(9p-fcall-cache-10) failed with error -12 [ 70.476889][ T312] usb 4-1: device descriptor read/8, error -71 [ 70.480621][ T1361] CPU: 0 UID: 0 PID: 1361 Comm: syz.6.364 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 70.480700][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.480744][ T1361] Call Trace: [ 70.480757][ T1361] [ 70.480785][ T1361] __dump_stack+0x21/0x30 [ 70.480873][ T1361] dump_stack_lvl+0x140/0x1c0 [ 70.480943][ T1361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.481018][ T1361] ? mutex_unlock+0x90/0x240 [ 70.481084][ T1361] ? __cfi_mutex_unlock+0x10/0x10 [ 70.481162][ T1361] dump_stack+0x19/0x20 [ 70.481231][ T1361] __kmem_cache_create_args+0x244/0x310 [ 70.481296][ T1361] p9_client_create+0xc71/0x12d0 [ 70.481375][ T1361] ? __cfi_p9_client_create+0x10/0x10 [ 70.481475][ T1361] ? v9fs_mount+0xc1/0x9d0 [ 70.481563][ T1361] ? kasan_save_alloc_info+0x3a/0x50 [ 70.481664][ T1361] ? __kasan_kmalloc+0x96/0xb0 [ 70.481733][ T1361] ? kstrdup+0x7b/0x130 [ 70.481814][ T1361] ? __asan_memset+0x39/0x50 [ 70.481873][ T1361] v9fs_session_init+0x1c4/0x18a0 [ 70.481928][ T1361] ? __cfi_v9fs_session_init+0x10/0x10 [ 70.481985][ T1361] ? kasan_save_alloc_info+0x3a/0x50 [ 70.482068][ T1361] ? __kasan_kmalloc+0x96/0xb0 [ 70.482141][ T1361] ? __kmalloc_cache_noprof+0x23c/0x470 [ 70.482194][ T1361] ? v9fs_mount+0xc1/0x9d0 [ 70.482263][ T1361] v9fs_mount+0xdb/0x9d0 [ 70.482325][ T1361] ? __cfi_v9fs_mount+0x10/0x10 [ 70.482389][ T1361] ? selinux_capable+0x38/0x50 [ 70.482467][ T1361] legacy_get_tree+0x103/0x1b0 [ 70.482539][ T1361] ? __cfi_v9fs_mount+0x10/0x10 [ 70.482609][ T1361] vfs_get_tree+0x9e/0x290 [ 70.482662][ T1361] do_new_mount+0x251/0xb40 [ 70.482716][ T1361] ? security_capable+0x44/0x130 [ 70.482777][ T1361] path_mount+0x66a/0xff0 [ 70.482836][ T1361] ? putname+0x113/0x150 [ 70.482911][ T1361] __se_sys_mount+0x2bf/0x480 [ 70.482944][ T1361] ? ksys_write+0x1f3/0x260 [ 70.483003][ T1361] ? __x64_sys_mount+0xf0/0xf0 [ 70.483079][ T1361] __x64_sys_mount+0xc3/0xf0 [ 70.483149][ T1361] x64_sys_call+0x2021/0x2ee0 [ 70.483201][ T1361] do_syscall_64+0x57/0xf0 [ 70.483264][ T1361] ? clear_bhb_loop+0x50/0xa0 [ 70.483344][ T1361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.483408][ T1361] RIP: 0033:0x7fe52279e019 [ 70.483458][ T1361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.483501][ T1361] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.483570][ T1361] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 70.483621][ T1361] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 70.483662][ T1361] RBP: 00007fe52372f090 R08: 0000200000000040 R09: 0000000000000000 [ 70.483702][ T1361] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 70.483736][ T1361] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 70.483787][ T1361] [ 71.125212][ T1010] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 71.135404][ T45] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 71.172064][ T45] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 71.181948][ T45] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.195204][ T45] usb 6-1: USB disconnect, device number 7 [ 71.204948][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.239819][ T1368] netlink: 68 bytes leftover after parsing attributes in process `syz.5.367'. [ 71.249166][ T1368] netlink: 68 bytes leftover after parsing attributes in process `syz.5.367'. [ 71.290745][ T1369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.366'. [ 71.296986][ T1010] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.301798][ T36] audit: type=1400 audit(1785543008.490:383): avc: denied { search } for pid=1365 comm="syz.6.366" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.313145][ T1010] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 71.339480][ T36] audit: type=1400 audit(1785543008.490:384): avc: denied { write } for pid=1365 comm="syz.6.366" name="current_tracer" dev="tracefs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 71.365965][ T1010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.384457][ T1010] usb 5-1: Product: syz [ 71.388953][ T1010] usb 5-1: Manufacturer: syz [ 71.395101][ T312] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 71.403793][ T1010] usb 5-1: SerialNumber: syz [ 71.409578][ T36] audit: type=1400 audit(1785543008.540:385): avc: denied { ioctl } for pid=1365 comm="syz.6.366" path="/19/tracing/current_tracer" dev="tracefs" ino=54 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 71.446008][ T312] usb 4-1: device descriptor read/8, error -71 [ 71.574770][ T36] audit: type=1400 audit(1785543008.760:386): avc: denied { create } for pid=1378 comm="syz.6.371" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.604417][ T312] usb 4-1: device descriptor read/8, error -71 [ 71.650635][ T1010] usb 5-1: unknown interface protocol 0x26, assuming v1 [ 71.659921][ T1010] usb 5-1: cannot find UAC_HEADER [ 71.666126][ T1390] FAULT_INJECTION: forcing a failure. [ 71.666126][ T1390] name failslab, interval 1, probability 0, space 0, times 0 [ 71.671871][ T1010] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.689545][ T1010] usb 5-1: USB disconnect, device number 15 [ 71.698960][ T1390] CPU: 1 UID: 0 PID: 1390 Comm: syz.6.375 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 71.699004][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.699019][ T1390] Call Trace: [ 71.699026][ T1390] [ 71.699035][ T1390] __dump_stack+0x21/0x30 [ 71.699072][ T1390] dump_stack_lvl+0x140/0x1c0 [ 71.699103][ T1390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.699135][ T1390] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 71.699161][ T1390] dump_stack+0x19/0x20 [ 71.699191][ T1390] should_fail_ex+0x3c2/0x510 [ 71.699219][ T1390] should_failslab+0xac/0x100 [ 71.699248][ T1390] kmem_cache_alloc_noprof+0x42/0x410 [ 71.699273][ T1390] ? __kernfs_new_node+0xf1/0x740 [ 71.699302][ T1390] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 71.699334][ T1390] __kernfs_new_node+0xf1/0x740 [ 71.699363][ T1390] ? __kasan_check_write+0x18/0x20 [ 71.699386][ T1390] ? kernfs_new_node+0x280/0x280 [ 71.699414][ T1390] ? down_write+0xee/0x2b0 [ 71.699447][ T1390] ? __cfi_down_write+0x10/0x10 [ 71.699480][ T1390] ? __kasan_check_write+0x18/0x20 [ 71.699503][ T1390] ? up_write+0x66/0x280 [ 71.699536][ T1390] ? kernfs_activate+0x1ee/0x200 [ 71.699566][ T1390] kernfs_new_node+0x154/0x280 [ 71.699596][ T1390] __kernfs_create_file+0x52/0x280 [ 71.699630][ T1390] sysfs_add_file_mode_ns+0x1d2/0x280 [ 71.699667][ T1390] internal_create_group+0x66c/0xe80 [ 71.699694][ T1390] ? sysfs_create_group+0x40/0x40 [ 71.699718][ T1390] ? kernfs_remove_by_name_ns+0x146/0x180 [ 71.699751][ T1390] sysfs_create_group+0x23/0x40 [ 71.699777][ T1390] sysfs_slab_add+0x158/0x280 [ 71.699803][ T1390] do_kmem_cache_create+0x40a/0x550 [ 71.699830][ T1390] __kmem_cache_create_args+0x16f/0x310 [ 71.699856][ T1390] p9_client_create+0xc71/0x12d0 [ 71.699892][ T1390] ? __cfi_p9_client_create+0x10/0x10 [ 71.699926][ T1390] ? v9fs_mount+0xc1/0x9d0 [ 71.699954][ T1390] ? kasan_save_alloc_info+0x3a/0x50 [ 71.699998][ T1390] ? __kasan_kmalloc+0x96/0xb0 [ 71.700027][ T1390] ? kstrdup+0x7b/0x130 [ 71.700060][ T1390] ? __asan_memset+0x39/0x50 [ 71.700083][ T1390] v9fs_session_init+0x1c4/0x18a0 [ 71.700108][ T1390] ? __cfi_v9fs_session_init+0x10/0x10 [ 71.700131][ T1390] ? kasan_save_alloc_info+0x3a/0x50 [ 71.700166][ T1390] ? __kasan_kmalloc+0x96/0xb0 [ 71.700193][ T1390] ? __kmalloc_cache_noprof+0x23c/0x470 [ 71.700219][ T1390] ? v9fs_mount+0xc1/0x9d0 [ 71.700246][ T1390] v9fs_mount+0xdb/0x9d0 [ 71.700273][ T1390] ? __cfi_v9fs_mount+0x10/0x10 [ 71.700299][ T1390] ? selinux_capable+0x38/0x50 [ 71.700329][ T1390] legacy_get_tree+0x103/0x1b0 [ 71.700359][ T1390] ? __cfi_v9fs_mount+0x10/0x10 [ 71.700386][ T1390] vfs_get_tree+0x9e/0x290 [ 71.700410][ T1390] do_new_mount+0x251/0xb40 [ 71.700433][ T1390] ? security_capable+0x44/0x130 [ 71.700458][ T1390] path_mount+0x66a/0xff0 [ 71.700479][ T1390] ? putname+0x113/0x150 [ 71.700505][ T1390] __se_sys_mount+0x2bf/0x480 [ 71.700529][ T1390] ? ksys_write+0x1f3/0x260 [ 71.700549][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.700551][ T1390] ? __x64_sys_mount+0xf0/0xf0 [ 71.700577][ T1390] __x64_sys_mount+0xc3/0xf0 [ 71.700658][ T1390] x64_sys_call+0x2021/0x2ee0 [ 71.700734][ T1390] do_syscall_64+0x57/0xf0 [ 71.700810][ T1390] ? clear_bhb_loop+0x50/0xa0 [ 71.700890][ T1390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.700977][ T1390] RIP: 0033:0x7fe52279e019 [ 71.701021][ T1390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.701065][ T1390] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.701135][ T1390] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 71.701177][ T1390] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 71.701217][ T1390] RBP: 00007fe52372f090 R08: 0000200000000040 R09: 0000000000000000 [ 71.701260][ T1390] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 71.701299][ T1390] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 71.701349][ T1390] [ 71.701607][ T1390] __kmem_cache_create_args(9p-fcall-cache-11) failed with error -12 [ 72.116898][ T1390] CPU: 0 UID: 0 PID: 1390 Comm: syz.6.375 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 72.116939][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.116954][ T1390] Call Trace: [ 72.116960][ T1390] [ 72.116970][ T1390] __dump_stack+0x21/0x30 [ 72.117004][ T1390] dump_stack_lvl+0x140/0x1c0 [ 72.117039][ T312] usb usb4-port1: unable to enumerate USB device [ 72.117038][ T1390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.117071][ T1390] ? mutex_unlock+0x90/0x240 [ 72.117174][ T1390] ? __cfi_mutex_unlock+0x10/0x10 [ 72.117311][ T1390] dump_stack+0x19/0x20 [ 72.117383][ T1390] __kmem_cache_create_args+0x244/0x310 [ 72.117448][ T1390] p9_client_create+0xc71/0x12d0 [ 72.117531][ T1390] ? __cfi_p9_client_create+0x10/0x10 [ 72.117615][ T1390] ? v9fs_mount+0xc1/0x9d0 [ 72.117684][ T1390] ? kasan_save_alloc_info+0x3a/0x50 [ 72.117776][ T1390] ? __kasan_kmalloc+0x96/0xb0 [ 72.117841][ T1390] ? kstrdup+0x7b/0x130 [ 72.117923][ T1390] ? __asan_memset+0x39/0x50 [ 72.118017][ T1390] v9fs_session_init+0x1c4/0x18a0 [ 72.118079][ T1390] ? __cfi_v9fs_session_init+0x10/0x10 [ 72.118132][ T1390] ? kasan_save_alloc_info+0x3a/0x50 [ 72.118222][ T1390] ? __kasan_kmalloc+0x96/0xb0 [ 72.118285][ T1390] ? __kmalloc_cache_noprof+0x23c/0x470 [ 72.118345][ T1390] ? v9fs_mount+0xc1/0x9d0 [ 72.118414][ T1390] v9fs_mount+0xdb/0x9d0 [ 72.118481][ T1390] ? __cfi_v9fs_mount+0x10/0x10 [ 72.118564][ T1390] ? selinux_capable+0x38/0x50 [ 72.118655][ T1390] legacy_get_tree+0x103/0x1b0 [ 72.118733][ T1390] ? __cfi_v9fs_mount+0x10/0x10 [ 72.118796][ T1390] vfs_get_tree+0x9e/0x290 [ 72.118855][ T1390] do_new_mount+0x251/0xb40 [ 72.118916][ T1390] ? security_capable+0x44/0x130 [ 72.118988][ T1390] path_mount+0x66a/0xff0 [ 72.119046][ T1390] ? putname+0x113/0x150 [ 72.119105][ T1390] __se_sys_mount+0x2bf/0x480 [ 72.119167][ T1390] ? ksys_write+0x1f3/0x260 [ 72.119221][ T1390] ? __x64_sys_mount+0xf0/0xf0 [ 72.119287][ T1390] __x64_sys_mount+0xc3/0xf0 [ 72.119348][ T1390] x64_sys_call+0x2021/0x2ee0 [ 72.119400][ T1390] do_syscall_64+0x57/0xf0 [ 72.119456][ T1390] ? clear_bhb_loop+0x50/0xa0 [ 72.119535][ T1390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.119605][ T1390] RIP: 0033:0x7fe52279e019 [ 72.119655][ T1390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.119704][ T1390] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.119765][ T1390] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 72.119800][ T1390] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 72.119841][ T1390] RBP: 00007fe52372f090 R08: 0000200000000040 R09: 0000000000000000 [ 72.119881][ T1390] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 72.119922][ T1390] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 72.119995][ T1390] [ 72.665265][ T365] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.685146][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 72.695166][ T312] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 72.817893][ T365] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.827114][ T365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.835203][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 72.840409][ T365] usb 7-1: Product: syz [ 72.844640][ T365] usb 7-1: Manufacturer: syz [ 72.849409][ T365] usb 7-1: SerialNumber: syz [ 72.854603][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.865571][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 72.871098][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.880984][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.894647][ T45] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.903773][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.911904][ T312] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 72.922760][ T45] usb 6-1: config 0 descriptor?? [ 72.928275][ T312] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 72.938365][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.946465][ T312] usb 4-1: Product: syz [ 72.950680][ T312] usb 4-1: Manufacturer: syz [ 72.955334][ T312] usb 4-1: SerialNumber: syz [ 72.965570][ T1383] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.185819][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.194363][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.203951][ T36] audit: type=1400 audit(1785543010.390:387): avc: denied { write } for pid=1382 comm="syz.3.373" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 73.211857][ T312] usb 4-1: MIDIStreaming interface descriptor not found [ 73.236941][ T312] usb 4-1: USB disconnect, device number 31 [ 73.250103][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.275121][ T1010] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 73.347884][ T45] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 73.357444][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.364804][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.372293][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.379616][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.386889][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.394155][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.401440][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.408709][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.416476][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.423757][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.431106][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.435285][ T1010] usb 5-1: Using ep0 maxpacket: 32 [ 73.438439][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.445552][ T1010] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 73.450838][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.462575][ T1010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 73.469454][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.480939][ T1010] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 73.487740][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 73.500914][ T1010] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 73.516517][ T1010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.526710][ T1010] usb 5-1: config 0 descriptor?? [ 73.539936][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input14 [ 73.560058][ T45] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 73.575676][ T45] usb 6-1: USB disconnect, device number 8 [ 73.596277][ T1406] fido_id[1406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 73.733856][ T1405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.742489][ T1405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.753165][ T1010] usbhid 5-1:0.0: can't add hid device: -71 [ 73.759197][ T1010] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.768730][ T1010] usb 5-1: USB disconnect, device number 16 [ 73.917260][ T365] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 73.924079][ T365] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 73.931669][ T365] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 73.958726][ T1419] FAULT_INJECTION: forcing a failure. [ 73.958726][ T1419] name failslab, interval 1, probability 0, space 0, times 0 [ 73.971472][ T1419] CPU: 1 UID: 0 PID: 1419 Comm: syz.3.386 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 73.971497][ T1419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.971508][ T1419] Call Trace: [ 73.971513][ T1419] [ 73.971519][ T1419] __dump_stack+0x21/0x30 [ 73.971548][ T1419] dump_stack_lvl+0x140/0x1c0 [ 73.971570][ T1419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.971592][ T1419] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 73.971609][ T1419] dump_stack+0x19/0x20 [ 73.971630][ T1419] should_fail_ex+0x3c2/0x510 [ 73.971649][ T1419] should_failslab+0xac/0x100 [ 73.971669][ T1419] kmem_cache_alloc_noprof+0x42/0x410 [ 73.971685][ T1419] ? __kernfs_new_node+0xf1/0x740 [ 73.971706][ T1419] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 73.971729][ T1419] __kernfs_new_node+0xf1/0x740 [ 73.971749][ T1419] ? __kasan_check_write+0x18/0x20 [ 73.971765][ T1419] ? kernfs_new_node+0x280/0x280 [ 73.971784][ T1419] ? down_write+0xee/0x2b0 [ 73.971807][ T1419] ? __cfi_down_write+0x10/0x10 [ 73.971832][ T1419] ? __kasan_check_write+0x18/0x20 [ 73.971848][ T1419] ? up_write+0x66/0x280 [ 73.971871][ T1419] ? kernfs_activate+0x1ee/0x200 [ 73.971892][ T1419] kernfs_new_node+0x154/0x280 [ 73.971911][ T1419] __kernfs_create_file+0x52/0x280 [ 73.971935][ T1419] sysfs_add_file_mode_ns+0x1d2/0x280 [ 73.971960][ T1419] internal_create_group+0x66c/0xe80 [ 73.971979][ T1419] ? sysfs_create_group+0x40/0x40 [ 73.971997][ T1419] ? kernfs_remove_by_name_ns+0x146/0x180 [ 73.972019][ T1419] sysfs_create_group+0x23/0x40 [ 73.972036][ T1419] sysfs_slab_add+0x158/0x280 [ 73.972053][ T1419] do_kmem_cache_create+0x40a/0x550 [ 73.972071][ T1419] __kmem_cache_create_args+0x16f/0x310 [ 73.972089][ T1419] p9_client_create+0xc71/0x12d0 [ 73.972114][ T1419] ? __cfi_p9_client_create+0x10/0x10 [ 73.972137][ T1419] ? v9fs_mount+0xc1/0x9d0 [ 73.972156][ T1419] ? kasan_save_alloc_info+0x3a/0x50 [ 73.972180][ T1419] ? __kasan_kmalloc+0x96/0xb0 [ 73.972199][ T1419] ? kstrdup+0x7b/0x130 [ 73.972222][ T1419] ? __asan_memset+0x39/0x50 [ 73.972259][ T1419] v9fs_session_init+0x1c4/0x18a0 [ 73.972283][ T1419] ? __cfi_v9fs_session_init+0x10/0x10 [ 73.972316][ T1419] ? kasan_save_alloc_info+0x3a/0x50 [ 73.972340][ T1419] ? __kasan_kmalloc+0x96/0xb0 [ 73.972359][ T1419] ? __kmalloc_cache_noprof+0x23c/0x470 [ 73.972376][ T1419] ? v9fs_mount+0xc1/0x9d0 [ 73.972394][ T1419] v9fs_mount+0xdb/0x9d0 [ 73.972413][ T1419] ? __cfi_v9fs_mount+0x10/0x10 [ 73.972431][ T1419] ? selinux_capable+0x38/0x50 [ 73.972451][ T1419] legacy_get_tree+0x103/0x1b0 [ 73.972473][ T1419] ? __cfi_v9fs_mount+0x10/0x10 [ 73.972494][ T1419] vfs_get_tree+0x9e/0x290 [ 73.972510][ T1419] do_new_mount+0x251/0xb40 [ 73.972526][ T1419] ? security_capable+0x44/0x130 [ 73.972543][ T1419] path_mount+0x66a/0xff0 [ 73.972558][ T1419] ? putname+0x113/0x150 [ 73.972576][ T1419] __se_sys_mount+0x2bf/0x480 [ 73.972592][ T1419] ? ksys_write+0x1f3/0x260 [ 73.972608][ T1419] ? __x64_sys_mount+0xf0/0xf0 [ 73.972624][ T1419] ? handle_softirqs+0x54c/0x620 [ 73.972641][ T1419] __x64_sys_mount+0xc3/0xf0 [ 73.972657][ T1419] x64_sys_call+0x2021/0x2ee0 [ 73.972672][ T1419] do_syscall_64+0x57/0xf0 [ 73.972689][ T1419] ? clear_bhb_loop+0x50/0xa0 [ 73.972711][ T1419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.972731][ T1419] RIP: 0033:0x7f8c82f9e019 [ 73.972745][ T1419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.972759][ T1419] RSP: 002b:00007f8c83f3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.972776][ T1419] RAX: ffffffffffffffda RBX: 00007f8c83225fa0 RCX: 00007f8c82f9e019 [ 73.972789][ T1419] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 73.972800][ T1419] RBP: 00007f8c83f3f090 R08: 0000200000000040 R09: 0000000000000000 [ 73.972811][ T1419] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 73.972823][ T1419] R13: 00007f8c83226038 R14: 00007f8c83225fa0 R15: 00007ffcef4a9718 [ 73.972837][ T1419] [ 73.972933][ T1419] __kmem_cache_create_args(9p-fcall-cache-12) failed with error -12 [ 74.271584][ T1424] FAULT_INJECTION: forcing a failure. [ 74.271584][ T1424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.283168][ T365] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 74.295025][ T1419] CPU: 0 UID: 0 PID: 1419 Comm: syz.3.386 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 74.295119][ T1419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.295159][ T1419] Call Trace: [ 74.295178][ T1419] [ 74.295198][ T1419] __dump_stack+0x21/0x30 [ 74.295293][ T1419] dump_stack_lvl+0x140/0x1c0 [ 74.295373][ T1419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.295460][ T1419] ? mutex_unlock+0x90/0x240 [ 74.295533][ T1419] ? __cfi_mutex_unlock+0x10/0x10 [ 74.295621][ T1419] dump_stack+0x19/0x20 [ 74.295692][ T1419] __kmem_cache_create_args+0x244/0x310 [ 74.295731][ T1419] p9_client_create+0xc71/0x12d0 [ 74.295804][ T1419] ? __cfi_p9_client_create+0x10/0x10 [ 74.295922][ T1419] ? v9fs_mount+0xc1/0x9d0 [ 74.295991][ T1419] ? kasan_save_alloc_info+0x3a/0x50 [ 74.296075][ T1419] ? __kasan_kmalloc+0x96/0xb0 [ 74.296146][ T1419] ? kstrdup+0x7b/0x130 [ 74.296223][ T1419] ? __asan_memset+0x39/0x50 [ 74.296275][ T1419] v9fs_session_init+0x1c4/0x18a0 [ 74.296337][ T1419] ? __cfi_v9fs_session_init+0x10/0x10 [ 74.296398][ T1419] ? kasan_save_alloc_info+0x3a/0x50 [ 74.296479][ T1419] ? __kasan_kmalloc+0x96/0xb0 [ 74.296549][ T1419] ? __kmalloc_cache_noprof+0x23c/0x470 [ 74.296610][ T1419] ? v9fs_mount+0xc1/0x9d0 [ 74.296679][ T1419] v9fs_mount+0xdb/0x9d0 [ 74.296742][ T1419] ? __cfi_v9fs_mount+0x10/0x10 [ 74.296811][ T1419] ? selinux_capable+0x38/0x50 [ 74.296883][ T1419] legacy_get_tree+0x103/0x1b0 [ 74.296961][ T1419] ? __cfi_v9fs_mount+0x10/0x10 [ 74.297024][ T1419] vfs_get_tree+0x9e/0x290 [ 74.297085][ T1419] do_new_mount+0x251/0xb40 [ 74.297144][ T1419] ? security_capable+0x44/0x130 [ 74.297207][ T1419] path_mount+0x66a/0xff0 [ 74.297268][ T1419] ? putname+0x113/0x150 [ 74.297350][ T1419] __se_sys_mount+0x2bf/0x480 [ 74.297411][ T1419] ? ksys_write+0x1f3/0x260 [ 74.297471][ T1419] ? __x64_sys_mount+0xf0/0xf0 [ 74.297530][ T1419] ? handle_softirqs+0x54c/0x620 [ 74.297591][ T1419] __x64_sys_mount+0xc3/0xf0 [ 74.297651][ T1419] x64_sys_call+0x2021/0x2ee0 [ 74.297711][ T1419] do_syscall_64+0x57/0xf0 [ 74.297769][ T1419] ? clear_bhb_loop+0x50/0xa0 [ 74.297850][ T1419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.297921][ T1419] RIP: 0033:0x7f8c82f9e019 [ 74.297972][ T1419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.298016][ T1419] RSP: 002b:00007f8c83f3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.298077][ T1419] RAX: ffffffffffffffda RBX: 00007f8c83225fa0 RCX: 00007f8c82f9e019 [ 74.298124][ T1419] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 74.298165][ T1419] RBP: 00007f8c83f3f090 R08: 0000200000000040 R09: 0000000000000000 [ 74.298206][ T1419] R10: 0000000002014010 R11: 0000000000000246 R12: 0000000000000002 [ 74.298233][ T1419] R13: 00007f8c83226038 R14: 00007f8c83225fa0 R15: 00007ffcef4a9718 [ 74.298285][ T1419] [ 74.366064][ T1424] CPU: 0 UID: 0 PID: 1424 Comm: syz.5.387 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 74.366172][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.366209][ T1424] Call Trace: [ 74.366228][ T1424] [ 74.366248][ T1424] __dump_stack+0x21/0x30 [ 74.366342][ T1424] dump_stack_lvl+0x140/0x1c0 [ 74.366415][ T1424] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.366493][ T1424] ? _parse_integer+0x2e/0x40 [ 74.366553][ T1424] ? kstrtoull+0x13b/0x1e0 [ 74.366603][ T1424] dump_stack+0x19/0x20 [ 74.366682][ T1424] should_fail_ex+0x3c2/0x510 [ 74.366747][ T1424] should_fail+0xf/0x20 [ 74.366821][ T1424] should_fail_usercopy+0x1e/0x30 [ 74.366887][ T1424] _copy_from_user+0x20/0xa0 [ 74.366958][ T1424] ___sys_sendmsg+0x1c7/0x370 [ 74.367029][ T1424] ? __sys_sendmsg+0x2a0/0x2a0 [ 74.367083][ T1424] ? proc_fail_nth_write+0x184/0x220 [ 74.367164][ T1424] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 74.367258][ T1424] ? __fget_files+0x2bc/0x330 [ 74.367330][ T1424] __x64_sys_sendmsg+0x206/0x2e0 [ 74.367400][ T1424] ? fput+0x1a4/0x230 [ 74.367490][ T1424] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 74.367542][ T1424] ? ksys_write+0x1f3/0x260 [ 74.367603][ T1424] ? __kasan_check_read+0x15/0x20 [ 74.367662][ T1424] x64_sys_call+0x2a4c/0x2ee0 [ 74.367729][ T1424] do_syscall_64+0x57/0xf0 [ 74.367791][ T1424] ? clear_bhb_loop+0x50/0xa0 [ 74.367869][ T1424] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.367933][ T1424] RIP: 0033:0x7fab9859e019 [ 74.367984][ T1424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.368036][ T1424] RSP: 002b:00007fab99440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.368105][ T1424] RAX: ffffffffffffffda RBX: 00007fab98826180 RCX: 00007fab9859e019 [ 74.368151][ T1424] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 74.368185][ T1424] RBP: 00007fab99440090 R08: 0000000000000000 R09: 0000000000000000 [ 74.368228][ T1424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.368267][ T1424] R13: 00007fab98826218 R14: 00007fab98826180 R15: 00007ffc42e4e158 [ 74.368329][ T1424] [ 74.916255][ T365] usb 7-1: USB disconnect, device number 2 [ 74.922479][ T365] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 74.945836][ T36] audit: type=1400 audit(1785543012.130:388): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 74.987620][ T1437] syzkaller1: left promiscuous mode [ 74.992903][ T1437] syzkaller1: left allmulticast mode [ 75.021518][ T1440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.390'. [ 75.203961][ T36] audit: type=1400 audit(1785543012.390:389): avc: denied { setopt } for pid=1460 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.223571][ T36] audit: type=1400 audit(1785543012.410:390): avc: denied { getopt } for pid=1460 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.249698][ T1463] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 75.295131][ T65] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 75.445121][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 75.451651][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.462222][ T65] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 75.471766][ T65] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.483715][ T65] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 75.493031][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.501148][ T65] usb 6-1: Product: syz [ 75.505513][ T65] usb 6-1: Manufacturer: syz [ 75.510210][ T65] usb 6-1: SerialNumber: syz [ 75.534679][ T1477] FAULT_INJECTION: forcing a failure. [ 75.534679][ T1477] name failslab, interval 1, probability 0, space 0, times 0 [ 75.547473][ T1477] CPU: 1 UID: 0 PID: 1477 Comm: syz.3.404 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 75.547510][ T1477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.547524][ T1477] Call Trace: [ 75.547538][ T1477] [ 75.547563][ T1477] __dump_stack+0x21/0x30 [ 75.547599][ T1477] dump_stack_lvl+0x140/0x1c0 [ 75.547635][ T1477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.547660][ T1477] dump_stack+0x19/0x20 [ 75.547680][ T1477] should_fail_ex+0x3c2/0x510 [ 75.547714][ T1477] should_failslab+0xac/0x100 [ 75.547743][ T1477] kmem_cache_alloc_node_noprof+0x45/0x420 [ 75.547767][ T1477] ? selinux_socket_getpeersec_dgram+0x25b/0x370 [ 75.547800][ T1477] ? __alloc_skb+0x10c/0x360 [ 75.547822][ T1477] __alloc_skb+0x10c/0x360 [ 75.547856][ T1477] netlink_alloc_large_skb+0xf7/0x1b0 [ 75.547892][ T1477] netlink_sendmsg+0x576/0xad0 [ 75.547916][ T1477] ? __cfi_netlink_sendmsg+0x10/0x10 [ 75.547939][ T1477] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 75.547966][ T1477] ? security_socket_sendmsg+0x3d/0x100 [ 75.547988][ T1477] ____sys_sendmsg+0x99e/0xa00 [ 75.548022][ T1477] ? __import_iovec+0x5b9/0x7d0 [ 75.548053][ T1477] ? __sys_sendmsg_sock+0x50/0x50 [ 75.548077][ T1477] ? import_iovec+0x80/0xb0 [ 75.548113][ T1477] ___sys_sendmsg+0x2a6/0x370 [ 75.548129][ T1477] ? __sys_sendmsg+0x2a0/0x2a0 [ 75.548145][ T1477] ? proc_fail_nth_write+0x184/0x220 [ 75.548192][ T1477] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 75.548229][ T1477] ? __fget_files+0x2bc/0x330 [ 75.548257][ T1477] __x64_sys_sendmsg+0x206/0x2e0 [ 75.548272][ T1477] ? fput+0x1a4/0x230 [ 75.548292][ T1477] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 75.548327][ T1477] ? ksys_write+0x1f3/0x260 [ 75.548352][ T1477] ? __kasan_check_read+0x15/0x20 [ 75.548375][ T1477] x64_sys_call+0x2a4c/0x2ee0 [ 75.548397][ T1477] do_syscall_64+0x57/0xf0 [ 75.548415][ T1477] ? clear_bhb_loop+0x50/0xa0 [ 75.548452][ T1477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.548483][ T1477] RIP: 0033:0x7f8c82f9e019 [ 75.548502][ T1477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.548522][ T1477] RSP: 002b:00007f8c83efd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.548550][ T1477] RAX: ffffffffffffffda RBX: 00007f8c83226180 RCX: 00007f8c82f9e019 [ 75.548563][ T1477] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 75.548574][ T1477] RBP: 00007f8c83efd090 R08: 0000000000000000 R09: 0000000000000000 [ 75.548584][ T1477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.548615][ T1477] R13: 00007f8c83226218 R14: 00007f8c83226180 R15: 00007ffcef4a9718 [ 75.548635][ T1477] [ 75.824052][ T1444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.833778][ T1444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.854364][ T65] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 75.864287][ T65] usb 6-1: clock source 0 is not valid, cannot use [ 75.884264][ T65] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 75.890952][ T65] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 75.914431][ T65] usb 6-1: USB disconnect, device number 9 [ 75.966880][ T36] audit: type=1400 audit(1785543013.160:391): avc: denied { ioctl } for pid=1492 comm="syz.4.410" path="socket:[13789]" dev="sockfs" ino=13789 ioctlcmd=0x9441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.992718][ T1493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 76.057664][ T1499] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 76.210333][ T1010] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.280462][ T1518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 76.320485][ T1520] netlink: 5 bytes leftover after parsing attributes in process `syz.3.420'. [ 76.376211][ T1010] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.386444][ T1010] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.401080][ T1010] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 76.410357][ T1010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.418519][ T1010] usb 7-1: Product: syz [ 76.422776][ T1010] usb 7-1: Manufacturer: syz [ 76.428217][ T1010] usb 7-1: SerialNumber: syz [ 76.436843][ T1010] usb-storage 7-1:1.0: USB Mass Storage device detected [ 76.448380][ T1010] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 76.457478][ T1010] scsi host1: usb-storage 7-1:1.0 [ 76.600711][ T36] audit: type=1400 audit(1785543013.790:392): avc: denied { create } for pid=1544 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 76.601887][ T1545] bridge0: entered allmulticast mode [ 76.638428][ T312] usb 7-1: USB disconnect, device number 3 [ 76.955128][ T365] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 77.016771][ T36] audit: type=1400 audit(1785543014.210:393): avc: denied { ioctl } for pid=1558 comm="syz.4.431" path="socket:[14073]" dev="sockfs" ino=14073 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.054412][ T1562] loop5: detected capacity change from 0 to 7 [ 77.061936][ T349] buffer_io_error: 12 callbacks suppressed [ 77.061954][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.076740][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.084750][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.092775][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.100833][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.109183][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.117894][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.126199][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.134710][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.143340][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.151357][ T365] usb 6-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 77.167287][ T365] usb 6-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 77.181991][ T365] usb 6-1: string descriptor 0 read error: -22 [ 77.189236][ T365] usb 6-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 77.220492][ T365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.430839][ T9] usb 6-1: USB disconnect, device number 10 [ 77.437324][ T1587] input: syz0 as /devices/virtual/input/input15 [ 77.457412][ T36] audit: type=1400 audit(1785543014.650:394): avc: denied { listen } for pid=1586 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.965540][ T1599] x_tables: unsorted underflow at hook 3 [ 78.146166][ T1615] loop5: detected capacity change from 0 to 7 [ 78.189593][ T1620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 78.215098][ T36] audit: type=1400 audit(1785543015.400:395): avc: denied { nlmsg_read } for pid=1621 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 78.255933][ T36] audit: type=1400 audit(1785543015.450:396): avc: denied { ioctl } for pid=1621 comm="syz.5.453" path="socket:[14456]" dev="sockfs" ino=14456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.281209][ T1625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.452'. [ 78.450007][ T1657] loop5: detected capacity change from 0 to 7 [ 78.715256][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 78.738337][ T1678] FAULT_INJECTION: forcing a failure. [ 78.738337][ T1678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.751512][ T1678] CPU: 1 UID: 0 PID: 1678 Comm: syz.5.469 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 78.751538][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.751549][ T1678] Call Trace: [ 78.751554][ T1678] [ 78.751562][ T1678] __dump_stack+0x21/0x30 [ 78.751588][ T1678] dump_stack_lvl+0x140/0x1c0 [ 78.751611][ T1678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.751634][ T1678] dump_stack+0x19/0x20 [ 78.751655][ T1678] should_fail_ex+0x3c2/0x510 [ 78.751674][ T1678] should_fail+0xf/0x20 [ 78.751690][ T1678] should_fail_usercopy+0x1e/0x30 [ 78.751709][ T1678] _copy_from_iter+0x1a6/0x1520 [ 78.751731][ T1678] ? __virt_addr_valid+0x2a1/0x370 [ 78.751751][ T1678] ? __cfi__copy_from_iter+0x10/0x10 [ 78.751771][ T1678] ? __check_object_size+0x54c/0x870 [ 78.751788][ T1678] ? __cfi___check_object_size+0x10/0x10 [ 78.751805][ T1678] ? skb_put+0x10e/0x200 [ 78.751828][ T1678] netlink_sendmsg+0x66d/0xad0 [ 78.751845][ T1678] ? __cfi_netlink_sendmsg+0x10/0x10 [ 78.751882][ T1678] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 78.751915][ T1678] ? security_socket_sendmsg+0x3d/0x100 [ 78.751949][ T1678] ____sys_sendmsg+0x99e/0xa00 [ 78.751966][ T1678] ? __import_iovec+0x5b9/0x7d0 [ 78.751988][ T1678] ? __sys_sendmsg_sock+0x50/0x50 [ 78.752004][ T1678] ? import_iovec+0x80/0xb0 [ 78.752027][ T1678] ___sys_sendmsg+0x2a6/0x370 [ 78.752043][ T1678] ? __sys_sendmsg+0x2a0/0x2a0 [ 78.752059][ T1678] ? proc_fail_nth_write+0x184/0x220 [ 78.752083][ T1678] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 78.752109][ T1678] ? __fget_files+0x2bc/0x330 [ 78.752130][ T1678] __x64_sys_sendmsg+0x206/0x2e0 [ 78.752145][ T1678] ? fput+0x1a4/0x230 [ 78.752165][ T1678] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 78.752181][ T1678] ? ksys_write+0x1f3/0x260 [ 78.752199][ T1678] ? __kasan_check_read+0x15/0x20 [ 78.752216][ T1678] x64_sys_call+0x2a4c/0x2ee0 [ 78.752231][ T1678] do_syscall_64+0x57/0xf0 [ 78.752248][ T1678] ? clear_bhb_loop+0x50/0xa0 [ 78.752270][ T1678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.752291][ T1678] RIP: 0033:0x7fab9859e019 [ 78.752306][ T1678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.752320][ T1678] RSP: 002b:00007fab99482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.752338][ T1678] RAX: ffffffffffffffda RBX: 00007fab98825fa0 RCX: 00007fab9859e019 [ 78.752350][ T1678] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 78.752361][ T1678] RBP: 00007fab99482090 R08: 0000000000000000 R09: 0000000000000000 [ 78.752371][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.752382][ T1678] R13: 00007fab98826038 R14: 00007fab98825fa0 R15: 00007ffc42e4e158 [ 78.752398][ T1678] [ 79.045153][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 79.051684][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.070429][ T9] usb 4-1: config 0 has no interface number 0 [ 79.081107][ T1682] loop5: detected capacity change from 0 to 7 [ 79.087291][ T9] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 79.106847][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.125277][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.139285][ T9] usb 4-1: Product: syz [ 79.143522][ T9] usb 4-1: Manufacturer: syz [ 79.160056][ T9] usb 4-1: SerialNumber: syz [ 79.167673][ T9] usb 4-1: config 0 descriptor?? [ 79.183742][ T9] smsc95xx v2.0.0 [ 79.208901][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 79.222360][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 79.395474][ T312] usb 4-1: USB disconnect, device number 32 [ 79.465274][ T65] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 79.611057][ T1728] loop5: detected capacity change from 0 to 7 [ 79.619053][ T65] usb 5-1: config 192 has too many interfaces: 128, using maximum allowed: 32 [ 79.634477][ T65] usb 5-1: config 192 has 0 interfaces, different from the descriptor's value: 128 [ 79.660259][ T65] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 79.669823][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.678016][ T65] usb 5-1: Product: syz [ 79.682290][ T65] usb 5-1: Manufacturer: syz [ 79.686957][ T65] usb 5-1: SerialNumber: syz [ 79.818293][ T1734] FAULT_INJECTION: forcing a failure. [ 79.818293][ T1734] name failslab, interval 1, probability 0, space 0, times 0 [ 79.831031][ T1734] CPU: 0 UID: 0 PID: 1734 Comm: syz.6.492 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 79.831056][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.831066][ T1734] Call Trace: [ 79.831071][ T1734] [ 79.831078][ T1734] __dump_stack+0x21/0x30 [ 79.831103][ T1734] dump_stack_lvl+0x140/0x1c0 [ 79.831128][ T1734] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.831152][ T1734] dump_stack+0x19/0x20 [ 79.831173][ T1734] should_fail_ex+0x3c2/0x510 [ 79.831190][ T1734] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 79.831213][ T1734] should_failslab+0xac/0x100 [ 79.831232][ T1734] __kmalloc_noprof+0x69/0x510 [ 79.831262][ T1734] ? __kernel_text_address+0x11/0x40 [ 79.831283][ T1734] ? genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 79.831304][ T1734] ? unwind_get_return_address+0x51/0x90 [ 79.831325][ T1734] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 79.831345][ T1734] genl_family_rcv_msg_attrs_parse+0xc6/0x380 [ 79.831366][ T1734] genl_family_rcv_msg_doit+0xe3/0x360 [ 79.831387][ T1734] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 79.831407][ T1734] ? ctrl_dumppolicy_done+0x90/0x90 [ 79.831424][ T1734] ? __cfi_tipc_nl_bearer_disable+0x10/0x10 [ 79.831445][ T1734] ? kasan_save_alloc_info+0x3a/0x50 [ 79.831468][ T1734] ? radix_tree_lookup+0x250/0x2a0 [ 79.831489][ T1734] genl_rcv_msg+0x60f/0x7b0 [ 79.831508][ T1734] ? __cfi_genl_rcv_msg+0x10/0x10 [ 79.831526][ T1734] ? __cfi_tipc_nl_bearer_disable+0x10/0x10 [ 79.831547][ T1734] netlink_rcv_skb+0x24a/0x4e0 [ 79.831562][ T1734] ? __cfi_genl_rcv_msg+0x10/0x10 [ 79.831581][ T1734] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 79.831597][ T1734] ? down_read+0x7f/0xe0 [ 79.831619][ T1734] ? __cfi_down_read+0x10/0x10 [ 79.831642][ T1734] genl_rcv+0x2c/0x40 [ 79.831659][ T1734] netlink_unicast+0x8bf/0xa70 [ 79.831683][ T1734] netlink_sendmsg+0x7d1/0xad0 [ 79.831699][ T1734] ? __cfi_netlink_sendmsg+0x10/0x10 [ 79.831716][ T1734] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 79.831733][ T1734] ? security_socket_sendmsg+0x3d/0x100 [ 79.831755][ T1734] ____sys_sendmsg+0x99e/0xa00 [ 79.831772][ T1734] ? __import_iovec+0x5b9/0x7d0 [ 79.831794][ T1734] ? __sys_sendmsg_sock+0x50/0x50 [ 79.831810][ T1734] ? import_iovec+0x80/0xb0 [ 79.831833][ T1734] ___sys_sendmsg+0x2a6/0x370 [ 79.831849][ T1734] ? __sys_sendmsg+0x2a0/0x2a0 [ 79.831864][ T1734] ? proc_fail_nth_write+0x184/0x220 [ 79.831887][ T1734] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 79.831914][ T1734] ? __fget_files+0x2bc/0x330 [ 79.831934][ T1734] __x64_sys_sendmsg+0x206/0x2e0 [ 79.831949][ T1734] ? fput+0x1a4/0x230 [ 79.831969][ T1734] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 79.831984][ T1734] ? ksys_write+0x1f3/0x260 [ 79.832001][ T1734] ? __kasan_check_read+0x15/0x20 [ 79.832018][ T1734] x64_sys_call+0x2a4c/0x2ee0 [ 79.832032][ T1734] do_syscall_64+0x57/0xf0 [ 79.832050][ T1734] ? clear_bhb_loop+0x50/0xa0 [ 79.832071][ T1734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.832092][ T1734] RIP: 0033:0x7fe52279e019 [ 79.832106][ T1734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.832121][ T1734] RSP: 002b:00007fe52372f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.832139][ T1734] RAX: ffffffffffffffda RBX: 00007fe522a25fa0 RCX: 00007fe52279e019 [ 79.832151][ T1734] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 79.832161][ T1734] RBP: 00007fe52372f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.832172][ T1734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.832182][ T1734] R13: 00007fe522a26038 R14: 00007fe522a25fa0 R15: 00007ffd84b7c618 [ 79.832196][ T1734] [ 79.895205][ T312] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 80.212431][ T65] usb 5-1: USB disconnect, device number 17 [ 80.224253][ T603] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 80.355133][ T312] usb 6-1: Using ep0 maxpacket: 16 [ 80.361422][ T312] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 80.369644][ T312] usb 6-1: config 0 has no interface number 0 [ 80.375849][ T312] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 80.385953][ T312] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 80.395217][ T603] usb 4-1: Using ep0 maxpacket: 8 [ 80.398123][ T312] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 80.402754][ T603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.409993][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.410018][ T312] usb 6-1: Product: syz [ 80.410035][ T312] usb 6-1: Manufacturer: syz [ 80.410049][ T312] usb 6-1: SerialNumber: syz [ 80.412089][ T312] usb 6-1: config 0 descriptor?? [ 80.422838][ T603] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.433938][ T1730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 80.437947][ T603] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 48, using maximum allowed: 30 [ 80.441882][ T1730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 80.447230][ T603] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 80.495168][ T603] usb 4-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 80.504277][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.512344][ T603] usb 4-1: Product: syz [ 80.516596][ T603] usb 4-1: Manufacturer: syz [ 80.521208][ T603] usb 4-1: SerialNumber: syz [ 80.585105][ T1758] loop5: detected capacity change from 0 to 7 [ 80.657396][ T1730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 80.664619][ T1730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 80.705108][ T65] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 80.730318][ T603] usb 4-1: unit 3 not found! [ 80.741890][ T603] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 80.754991][ T603] usb 4-1: USB disconnect, device number 33 [ 80.856592][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.864729][ T65] usb 5-1: not running at top speed; connect to a high speed hub [ 80.873727][ T65] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 80.886295][ T65] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 80.896140][ T36] audit: type=1326 audit(1785543018.090:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1772 comm="syz.6.506" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe52279e019 code=0x0 [ 80.921117][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.929303][ T65] usb 5-1: Product: syz [ 80.930475][ T312] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 80.933488][ T65] usb 5-1: Manufacturer: syz [ 80.933509][ T65] usb 5-1: SerialNumber: syz [ 81.156974][ T1755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.165645][ T1755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.174013][ T1755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 81.183728][ T1755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 81.193642][ T1755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.202261][ T1755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.449350][ T1786] FAULT_INJECTION: forcing a failure. [ 81.449350][ T1786] name failslab, interval 1, probability 0, space 0, times 0 [ 81.462145][ T1786] CPU: 1 UID: 0 PID: 1786 Comm: syz.3.511 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 81.462185][ T1786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.462208][ T1786] Call Trace: [ 81.462217][ T1786] [ 81.462226][ T1786] __dump_stack+0x21/0x30 [ 81.462268][ T1786] dump_stack_lvl+0x140/0x1c0 [ 81.462296][ T1786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.462317][ T1786] ? genl_family_rcv_msg_doit+0x2a4/0x360 [ 81.462363][ T1786] dump_stack+0x19/0x20 [ 81.462392][ T1786] should_fail_ex+0x3c2/0x510 [ 81.462418][ T1786] should_failslab+0xac/0x100 [ 81.462445][ T1786] kmem_cache_alloc_node_noprof+0x45/0x420 [ 81.462462][ T1786] ? kasan_save_alloc_info+0x3a/0x50 [ 81.462500][ T1786] ? __alloc_skb+0x10c/0x360 [ 81.462532][ T1786] __alloc_skb+0x10c/0x360 [ 81.462561][ T1786] netlink_ack+0x155/0xa50 [ 81.462584][ T1786] ? __cfi_genl_rcv_msg+0x10/0x10 [ 81.462606][ T1786] netlink_rcv_skb+0x2cb/0x4e0 [ 81.462620][ T1786] ? __cfi_genl_rcv_msg+0x10/0x10 [ 81.462654][ T1786] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 81.462679][ T1786] ? down_read+0x7f/0xe0 [ 81.462711][ T1786] ? __cfi_down_read+0x10/0x10 [ 81.462745][ T1786] genl_rcv+0x2c/0x40 [ 81.462763][ T1786] netlink_unicast+0x8bf/0xa70 [ 81.462802][ T1786] netlink_sendmsg+0x7d1/0xad0 [ 81.462827][ T1786] ? __cfi_netlink_sendmsg+0x10/0x10 [ 81.462850][ T1786] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 81.462883][ T1786] ? security_socket_sendmsg+0x3d/0x100 [ 81.462906][ T1786] ____sys_sendmsg+0x99e/0xa00 [ 81.462923][ T1786] ? __import_iovec+0x5b9/0x7d0 [ 81.462965][ T1786] ? __sys_sendmsg_sock+0x50/0x50 [ 81.462989][ T1786] ? import_iovec+0x80/0xb0 [ 81.463019][ T1786] ___sys_sendmsg+0x2a6/0x370 [ 81.463043][ T1786] ? __sys_sendmsg+0x2a0/0x2a0 [ 81.463059][ T1786] ? proc_fail_nth_write+0x184/0x220 [ 81.463082][ T1786] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 81.463131][ T1786] ? __fget_files+0x2bc/0x330 [ 81.463167][ T1786] __x64_sys_sendmsg+0x206/0x2e0 [ 81.463189][ T1786] ? fput+0x1a4/0x230 [ 81.463218][ T1786] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 81.463234][ T1786] ? ksys_write+0x1f3/0x260 [ 81.463270][ T1786] ? __kasan_check_read+0x15/0x20 [ 81.463294][ T1786] x64_sys_call+0x2a4c/0x2ee0 [ 81.463314][ T1786] do_syscall_64+0x57/0xf0 [ 81.463342][ T1786] ? clear_bhb_loop+0x50/0xa0 [ 81.463364][ T1786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.463385][ T1786] RIP: 0033:0x7f8c82f9e019 [ 81.463416][ T1786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.463436][ T1786] RSP: 002b:00007f8c83f3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.463461][ T1786] RAX: ffffffffffffffda RBX: 00007f8c83225fa0 RCX: 00007f8c82f9e019 [ 81.463478][ T1786] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 81.463496][ T1786] RBP: 00007f8c83f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.463506][ T1786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.463516][ T1786] R13: 00007f8c83226038 R14: 00007f8c83225fa0 R15: 00007ffcef4a9718 [ 81.463529][ T1786] [ 82.035108][ T603] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 82.197816][ T603] usb 7-1: unable to get BOS descriptor or descriptor too short [ 82.206080][ T603] usb 7-1: not running at top speed; connect to a high speed hub [ 82.214786][ T603] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 82.223341][ T603] usb 7-1: config 0 has no interface number 0 [ 82.229965][ T603] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 82.241186][ T603] usb 7-1: config 0 interface 88 has no altsetting 0 [ 82.250975][ T603] usb 7-1: string descriptor 0 read error: -22 [ 82.257800][ T603] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 82.266987][ T603] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 82.276783][ T603] usb 7-1: config 0 descriptor?? [ 82.288563][ T1793] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 82.299650][ T603] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input16 [ 82.335777][ C0] usb_acecad 7-1:0.88: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 82.505659][ T603] usb 7-1: USB disconnect, device number 4 [ 82.805122][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 82.935157][ T9] usb 4-1: device descriptor read/64, error -71 [ 83.006920][ T312] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.023622][ T312] asix 6-1:0.34: probe with driver asix failed with error -71 [ 83.037653][ T312] usb 6-1: USB disconnect, device number 11 [ 83.143755][ T1819] overlayfs: failed to resolve './file0': -2 [ 83.151341][ T36] audit: type=1400 audit(1785543020.340:398): avc: denied { write } for pid=1818 comm="syz.6.525" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.156809][ T1820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.523'. [ 83.174831][ T1819] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 83.182930][ T9] usb 4-1: device descriptor read/64, error -71 [ 83.328318][ T65] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 83.337815][ T65] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 83.346201][ T65] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 83.354686][ T65] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 83.363634][ T65] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 83.374340][ T65] usb 5-1: USB disconnect, device number 18 [ 83.435099][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 83.444234][ T1829] loop5: detected capacity change from 0 to 7 [ 83.451820][ T349] buffer_io_error: 60 callbacks suppressed [ 83.451838][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.466218][ T336] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.485320][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.493521][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.507265][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.515648][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.518819][ T1833] incfs: Backing dir is not set, filesystem can't be mounted. [ 83.524032][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.531421][ T1833] incfs: mount failed -2 [ 83.540361][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.551661][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.559830][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.573346][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.575308][ T36] audit: type=1400 audit(1785543020.760:399): avc: denied { map } for pid=1834 comm="syz.4.532" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 83.613742][ T9] usb 4-1: device descriptor read/64, error -71 [ 83.725669][ T36] audit: type=1400 audit(1785543020.920:400): avc: denied { execstack } for pid=1839 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.815112][ T336] usb 7-1: device descriptor read/64, error -71 [ 83.865132][ T9] usb 4-1: device descriptor read/64, error -71 [ 83.965118][ T65] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 83.985194][ T9] usb usb4-port1: attempt power cycle [ 84.082260][ T1851] incfs: Backing dir is not set, filesystem can't be mounted. [ 84.089873][ T1851] incfs: mount failed -2 [ 84.094527][ T1851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.538'. [ 84.105129][ T65] usb 5-1: device descriptor read/64, error -71 [ 84.275155][ T336] usb 7-1: device descriptor read/64, error -71 [ 84.335195][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 84.355144][ T65] usb 5-1: device descriptor read/64, error -71 [ 84.362474][ T9] usb 4-1: device descriptor read/8, error -71 [ 84.496272][ T9] usb 4-1: device descriptor read/8, error -71 [ 84.595136][ T65] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 84.725122][ T65] usb 5-1: device descriptor read/64, error -71 [ 84.735150][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 84.757302][ T9] usb 4-1: device descriptor read/8, error -71 [ 84.886239][ T9] usb 4-1: device descriptor read/8, error -71 [ 84.965210][ T65] usb 5-1: device descriptor read/64, error -71 [ 84.975957][ T1856] loop5: detected capacity change from 0 to 7 [ 84.995169][ T9] usb usb4-port1: unable to enumerate USB device [ 85.001853][ T1858] incfs: Backing dir is not set, filesystem can't be mounted. [ 85.009486][ T1858] incfs: mount failed -2 [ 85.085252][ T65] usb usb5-port1: attempt power cycle [ 85.150352][ T1862] FAULT_INJECTION: forcing a failure. [ 85.150352][ T1862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.163593][ T1862] CPU: 1 UID: 0 PID: 1862 Comm: syz.5.542 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 85.163627][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.163642][ T1862] Call Trace: [ 85.163650][ T1862] [ 85.163658][ T1862] __dump_stack+0x21/0x30 [ 85.163696][ T1862] dump_stack_lvl+0x140/0x1c0 [ 85.163728][ T1862] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.163761][ T1862] ? check_stack_object+0x138/0x150 [ 85.163788][ T1862] dump_stack+0x19/0x20 [ 85.163818][ T1862] should_fail_ex+0x3c2/0x510 [ 85.163844][ T1862] should_fail+0xf/0x20 [ 85.163866][ T1862] should_fail_usercopy+0x1e/0x30 [ 85.163897][ T1862] _copy_to_user+0x24/0xa0 [ 85.163919][ T1862] simple_read_from_buffer+0xed/0x160 [ 85.163942][ T1862] proc_fail_nth_read+0x1aa/0x220 [ 85.163966][ T1862] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 85.163989][ T1862] ? bpf_lsm_file_permission+0xd/0x20 [ 85.164010][ T1862] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 85.164033][ T1862] vfs_read+0x28b/0xc70 [ 85.164049][ T1862] ? __cfi_vfs_read+0x10/0x10 [ 85.164064][ T1862] ? __kasan_check_write+0x18/0x20 [ 85.164080][ T1862] ? mutex_lock+0x97/0x1d0 [ 85.164102][ T1862] ? __cfi_mutex_lock+0x10/0x10 [ 85.164126][ T1862] ksys_read+0x145/0x260 [ 85.164142][ T1862] ? __cfi_ksys_read+0x10/0x10 [ 85.164158][ T1862] ? __kasan_check_read+0x15/0x20 [ 85.164173][ T1862] __x64_sys_read+0x7f/0x90 [ 85.164190][ T1862] x64_sys_call+0x2638/0x2ee0 [ 85.164204][ T1862] do_syscall_64+0x57/0xf0 [ 85.164221][ T1862] ? clear_bhb_loop+0x50/0xa0 [ 85.164243][ T1862] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.164264][ T1862] RIP: 0033:0x7fab9855e84e [ 85.164277][ T1862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.164292][ T1862] RSP: 002b:00007fab99481fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.164309][ T1862] RAX: ffffffffffffffda RBX: 00007fab994826c0 RCX: 00007fab9855e84e [ 85.164321][ T1862] RDX: 000000000000000f RSI: 00007fab994820a0 RDI: 0000000000000008 [ 85.164331][ T1862] RBP: 00007fab99482090 R08: 0000000000000000 R09: 0000000000000000 [ 85.164341][ T1862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.164350][ T1862] R13: 00007fab98826038 R14: 00007fab98825fa0 R15: 00007ffc42e4e158 [ 85.164364][ T1862] [ 85.455123][ T65] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 85.486055][ T65] usb 5-1: device descriptor read/8, error -71 [ 85.616183][ T65] usb 5-1: device descriptor read/8, error -71 [ 85.624006][ T1876] loop5: detected capacity change from 0 to 7 [ 85.645482][ T1878] incfs: Backing dir is not set, filesystem can't be mounted. [ 85.653056][ T1878] incfs: mount failed -2 [ 85.679142][ T1880] fuse: Unknown parameter 'grnu~_id(00000000000000000000' [ 85.735140][ T603] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 85.855153][ T65] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 85.876210][ T65] usb 5-1: device descriptor read/8, error -71 [ 85.895114][ T603] usb 6-1: Using ep0 maxpacket: 32 [ 85.901551][ T603] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 85.912472][ T603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 85.923569][ T603] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 85.936625][ T603] usb 6-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.00 [ 85.945701][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.954525][ T603] usb 6-1: config 0 descriptor?? [ 86.006117][ T65] usb 5-1: device descriptor read/8, error -71 [ 86.115217][ T65] usb usb5-port1: unable to enumerate USB device [ 86.161732][ T1870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.170384][ T1870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.485111][ T312] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 86.580140][ T1870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.589496][ T1870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.598036][ T1870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.607711][ T1870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.617265][ T603] usbhid 6-1:0.0: can't add hid device: -71 [ 86.623596][ T603] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 86.636698][ T312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.641673][ T603] usb 6-1: USB disconnect, device number 12 [ 86.659111][ T312] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 86.669438][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.679818][ T312] usb 7-1: Product: syz [ 86.684020][ T312] usb 7-1: Manufacturer: syz [ 86.690554][ T312] usb 7-1: SerialNumber: syz [ 86.699429][ T312] usb 7-1: config 0 descriptor?? [ 86.707366][ T312] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 86.713772][ T312] usb 7-1: No valid video chain found. [ 86.831734][ T36] audit: type=1400 audit(1785543024.020:401): avc: denied { mounton } for pid=1902 comm="syz.3.560" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.909807][ T1886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.923696][ T1886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.946182][ T603] usb 7-1: USB disconnect, device number 7 [ 87.061408][ T36] audit: type=1400 audit(1785543024.250:402): avc: denied { bind } for pid=1910 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.129738][ T36] audit: type=1400 audit(1785543024.320:403): avc: denied { mounton } for pid=1914 comm="syz.4.564" path="/proc/288/task" dev="proc" ino=16365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.138812][ T1915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.564'. [ 87.493742][ T1935] mmap: syz.4.573 (1935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.499122][ T1937] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.515546][ T36] audit: type=1400 audit(1785543024.680:404): avc: denied { load_policy } for pid=1936 comm="syz.6.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.522163][ T1937] SELinux: failed to load policy [ 87.541266][ T1939] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.550909][ T1939] SELinux: failed to load policy [ 87.745095][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 87.835306][ T603] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.897240][ T1970] netlink: 200 bytes leftover after parsing attributes in process `syz.3.589'. [ 87.907948][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 87.914481][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.925446][ T10] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 87.935717][ T10] usb 5-1: config 2 has no interface number 0 [ 87.941851][ T10] usb 5-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 1920, setting to 1024 [ 87.953690][ T10] usb 5-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.964467][ T10] usb 5-1: config 2 interface 232 has no altsetting 0 [ 87.973059][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 87.984963][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.991972][ T36] audit: type=1400 audit(1785543025.180:405): avc: denied { mount } for pid=1976 comm="syz.3.591" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.993766][ T10] usb 5-1: Product: syz [ 88.015489][ T312] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 88.020793][ T10] usb 5-1: Manufacturer: syz [ 88.031753][ T10] usb 5-1: SerialNumber: syz [ 88.032191][ T36] audit: type=1400 audit(1785543025.180:406): avc: denied { mounton } for pid=1976 comm="syz.3.591" path="/145/debug/tracing/trace_pipe" dev="tracefs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 88.036652][ T603] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.070739][ T1935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.080044][ T603] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.085227][ T36] audit: type=1400 audit(1785543025.280:407): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.094218][ T603] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 88.120596][ T603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.129163][ T603] usb 7-1: Product: syz [ 88.133578][ T603] usb 7-1: Manufacturer: syz [ 88.138305][ T603] usb 7-1: SerialNumber: syz [ 88.225107][ T312] usb 6-1: Using ep0 maxpacket: 8 [ 88.232850][ T312] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.244351][ T312] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.254451][ T312] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.264389][ T312] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.274443][ T312] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.284447][ T312] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 88.295311][ T312] usb 6-1: string descriptor 0 read error: -22 [ 88.301642][ T312] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.311081][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.322968][ T10] usb 5-1: USB disconnect, device number 23 [ 88.342737][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.232/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.364603][ T603] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.378736][ T603] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 88.396089][ T603] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 88.407706][ T36] audit: type=1400 audit(1785543025.590:408): avc: denied { ioctl } for pid=1988 comm="syz.6.594" path="socket:[15323]" dev="sockfs" ino=15323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.407847][ T603] usb 7-1: USB disconnect, device number 8 [ 88.453980][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.524452][ T1997] loop5: detected capacity change from 0 to 7 [ 88.532748][ T349] buffer_io_error: 20 callbacks suppressed [ 88.532768][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.549259][ T312] cdc_ncm 6-1:1.0: bind() failure [ 88.558461][ T312] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 88.562926][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.573342][ T312] cdc_ncm 6-1:1.1: bind() failure [ 88.580034][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.591203][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.594742][ T312] usb 6-1: USB disconnect, device number 13 [ 88.608154][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.625236][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.638299][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.646578][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.654630][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.662943][ T349] Buffer I/O error on dev loop5, logical block 0, async page read [ 88.763247][ T2012] netlink: 'syz.6.604': attribute type 1 has an invalid length. [ 88.788685][ T2010] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 88.803822][ T2018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.991673][ T2039] 9pnet_fd: Insufficient options for proto=fd [ 89.008181][ T36] audit: type=1400 audit(1785543026.200:409): avc: denied { read } for pid=2038 comm="syz.4.614" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.067557][ T2045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 89.068487][ T36] audit: type=1400 audit(1785543026.200:410): avc: denied { open } for pid=2038 comm="syz.4.614" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.176437][ T36] audit: type=1400 audit(1785543026.360:411): avc: denied { bind } for pid=2047 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.232421][ T36] audit: type=1400 audit(1785543026.360:412): avc: denied { listen } for pid=2047 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.255931][ T36] audit: type=1400 audit(1785543026.360:413): avc: denied { write } for pid=2047 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.277179][ T36] audit: type=1400 audit(1785543026.360:414): avc: denied { accept } for pid=2047 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.327364][ T36] audit: type=1400 audit(1785543026.360:415): avc: denied { read } for pid=2047 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.429245][ T2071] overlayfs: missing 'lowerdir' [ 89.436303][ T2071] overlay: ./file1 is not a directory [ 89.855143][ T603] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 89.935174][ T312] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 89.985148][ T603] usb 6-1: device descriptor read/64, error -71 [ 90.045218][ T336] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 90.088251][ T312] usb 7-1: unable to get BOS descriptor or descriptor too short [ 90.096914][ T312] usb 7-1: not running at top speed; connect to a high speed hub [ 90.106323][ T312] usb 7-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 90.116708][ T312] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.127778][ T312] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 90.136905][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.144931][ T312] usb 7-1: Product: syz [ 90.149136][ T312] usb 7-1: Manufacturer: syz [ 90.153766][ T312] usb 7-1: SerialNumber: syz [ 90.205123][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 90.211265][ T336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.221410][ T336] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 90.232462][ T336] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 90.235225][ T603] usb 6-1: device descriptor read/64, error -71 [ 90.245548][ T336] usb 4-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 90.260870][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.325116][ T65] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 90.361522][ T2109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.370160][ T2109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.379510][ T2109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.388146][ T2109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.399405][ T312] usb 7-1: invalid UAC_HEADER (v1) [ 90.406521][ T312] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.416458][ T312] usb 7-1: USB disconnect, device number 9 [ 90.425930][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.479301][ T336] usb 4-1: string descriptor 0 read error: -71 [ 90.487028][ T65] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.490872][ T336] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 90.495674][ T603] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 90.517916][ T336] usb 4-1: USB disconnect, device number 38 [ 90.520435][ T65] usb 5-1: not running at top speed; connect to a high speed hub [ 90.534475][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.547331][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.562346][ T65] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 90.571567][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.579646][ T65] usb 5-1: Product: syz [ 90.583886][ T65] usb 5-1: Manufacturer: syz [ 90.589804][ T65] usb 5-1: SerialNumber: syz [ 90.656245][ T36] audit: type=1400 audit(1785543027.850:416): avc: denied { create } for pid=2132 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 90.676492][ T603] usb 6-1: device descriptor read/64, error -71 [ 90.801302][ T65] usb 5-1: unit 3 not found! [ 90.814139][ T65] usb 5-1: USB disconnect, device number 24 [ 90.828496][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.915144][ T603] usb 6-1: device descriptor read/64, error -71 [ 91.025184][ T603] usb usb6-port1: attempt power cycle [ 91.065155][ T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 91.216365][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.227434][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.237271][ T45] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.246369][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.255028][ T45] usb 4-1: config 0 descriptor?? [ 91.365107][ T603] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 91.383968][ T2168] incfs: Can't find or create .index dir in ./cgroup [ 91.390836][ T2168] incfs: mount failed -22 [ 91.396553][ T603] usb 6-1: device descriptor read/8, error -71 [ 91.470506][ T36] audit: type=1400 audit(1785543028.660:417): avc: denied { write } for pid=2143 comm="syz.3.656" path="socket:[17980]" dev="sockfs" ino=17980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.473006][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 91.502731][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.515588][ T45] usb 4-1: USB disconnect, device number 39 [ 91.536126][ T603] usb 6-1: device descriptor read/8, error -71 [ 91.785347][ T603] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 91.806478][ T603] usb 6-1: device descriptor read/8, error -71 [ 91.936484][ T603] usb 6-1: device descriptor read/8, error -71 [ 92.009856][ T2199] loop5: detected capacity change from 0 to 7 [ 92.047970][ T603] usb usb6-port1: unable to enumerate USB device [ 92.065141][ T65] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 92.216193][ T65] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 92.224452][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.235690][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.245633][ T65] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 92.254717][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.263519][ T65] usb 5-1: config 0 descriptor?? [ 92.305114][ T603] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 92.305114][ T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 92.456445][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.467021][ T603] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 92.467674][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.479679][ T603] usb 4-1: config 0 has no interface number 0 [ 92.487360][ T45] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 92.491733][ T603] usb 4-1: config 0 interface 41 has no altsetting 0 [ 92.501086][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.509539][ T603] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 92.518295][ T45] usb 7-1: config 0 descriptor?? [ 92.529918][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.537993][ T603] usb 4-1: Product: syz [ 92.542235][ T603] usb 4-1: Manufacturer: syz [ 92.546896][ T603] usb 4-1: SerialNumber: syz [ 92.552544][ T603] usb 4-1: config 0 descriptor?? [ 92.680296][ T2195] veth0_to_bond: mtu less than device minimum [ 92.690585][ T65] logitech 0003:046D:C29C.0007: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 92.733158][ T2205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.742753][ T2205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.762708][ T603] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 92.772341][ T603] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 92.784263][ T603] usb 4-1: USB disconnect, device number 40 [ 92.894233][ T65] logitech 0003:046D:C29C.0007: no inputs found [ 92.905704][ T65] usb 5-1: USB disconnect, device number 25 [ 92.986566][ T2228] loop5: detected capacity change from 0 to 7 [ 93.152774][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 93.161281][ T2249] loop5: detected capacity change from 0 to 7 [ 93.165189][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 93.191795][ T45] usb 7-1: USB disconnect, device number 10 [ 93.235530][ T1648] ------------[ cut here ]------------ [ 93.241067][ T1648] WARNING: CPU: 1 PID: 1648 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 93.251777][ T1648] Modules linked in: [ 93.255743][ T1648] CPU: 1 UID: 0 PID: 1648 Comm: kworker/u8:16 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 93.267606][ T1648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.277735][ T1648] Workqueue: iou_exit io_ring_exit_work [ 93.283355][ T1648] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 93.289746][ T1648] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 93.309467][ T1648] RSP: 0018:ffffc9000b6bf990 EFLAGS: 00010293 [ 93.315597][ T1648] RAX: ffffffff8353e1c1 RBX: 1ffff1102087291d RCX: ffff888121085f00 [ 93.323606][ T1648] RDX: 0000000000000000 RSI: 0000000000000055 RDI: 0000000000000104 [ 93.331639][ T1648] RBP: ffffc9000b6bf9e0 R08: 0000000000000003 R09: 0000000000000004 [ 93.339699][ T1648] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff88811e649300 [ 93.347742][ T1648] R13: ffff8881043948c0 R14: ffff88810e7e18a8 R15: ffff88810e7e18b8 [ 93.355776][ T1648] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 93.364745][ T1648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.371385][ T1648] CR2: 00007f20cda04000 CR3: 000000013de40000 CR4: 00000000003526b0 [ 93.379430][ T1648] Call Trace: [ 93.382743][ T1648] [ 93.385762][ T1648] ublk_ch_uring_cmd+0x6f/0xa0 [ 93.390576][ T1648] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 93.396645][ T1648] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 93.402589][ T1648] ? io_uring_cancel_generic+0x6eb/0x6eb [ 93.408378][ T1648] io_ring_exit_work+0x23d/0x83b [ 93.413359][ T1648] ? finish_task_switch+0x139/0x770 [ 93.418632][ T1648] ? __cfi_io_ring_exit_work+0x10/0x10 [ 93.424136][ T1648] ? kick_pool+0xb9/0x540 [ 93.428550][ T1648] process_scheduled_works+0x7f7/0x1060 [ 93.434138][ T1648] worker_thread+0xc99/0x13f0 [ 93.438900][ T1648] kthread+0x2c7/0x360 [ 93.443018][ T1648] ? __cfi_worker_thread+0x10/0x10 [ 93.448210][ T1648] ? __cfi_kthread+0x10/0x10 [ 93.452843][ T1648] ret_from_fork+0x67/0xa0 [ 93.457355][ T1648] ? __cfi_kthread+0x10/0x10 [ 93.461984][ T1648] ret_from_fork_asm+0x1a/0x30 [ 93.466834][ T1648] [ 93.469882][ T1648] ---[ end trace 0000000000000000 ]---