last executing test programs: 1m5.498632782s ago: executing program 1 (id=192): syz_usb_connect(0x2, 0x5c5, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0xe5, 0x2e, 0x17, 0x8, 0x6f8, 0x300c, 0xa064, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b3, 0x2, 0x9, 0x3, 0x50, 0x9, "", [{{0x9, 0x4, 0x56, 0x2, 0x2, 0xe, 0x1, 0x0, 0x7c, [@hid_hid={0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x355}}], [{{0x9, 0x5, 0x88, 0xc, 0x8, 0x9f, 0xc2, 0x69, [@generic={0xa5, 0x23, "de5cc8dc3007d37eb21c559a4d1a3989c6eb285d3b0028a714a2e70cac32414d73552bde01bd206b80cb5575d276d26358b2d37bd2124431857643d3299cfb32313142dd8e06fd8adf15c354efaf899c5e014b6e99b41a2a031143e00f281df094b619576e7c3ced0ca2bbe0a64254cf35959f96c4cdb6cb830df0d6717227a6e74748212fed68eb3ee20370e751ade9db04969cba324cf1b5564a71caf04f09f40cd4"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x0, 0x36, 0x5, [@generic={0x101, 0x8, "c2ec497341febb6a488327700a3c3de4da08b64b11e9c120c5437f2c64ed004cfb84b72adf5198739a6b95783989f57ddd6fb5daf262dce793d0ff0e00fbfd4f80ed87a379d34fa2662ae6b5e29296f7f8d2bea9b8da4f78ce49d1f29ba48be8faff753379a2cc607e3278c3ef29f37e01e7ac87b389e894d396b021ce93f4361466d1b035d3a11d612e4f78ee44a9132c8f41eb4f2c8f2a4e0c4a1adaeaeabe003eafff18a500543bd5efc17548fdde126c95c64f7b928f67404703f01829d336cacb78f36986d0f52c74bd51bbe77e81220be7c11359751224a4ef623f36aa04ee2e079a375ab74eae743ef7731f9f3285efc11af9d60c8e07ebf00e837a"}]}}]}}, {{0x9, 0x4, 0x3, 0x9, 0x6, 0x1d, 0x77, 0x6d, 0x4, [@generic={0x2, 0x30}], [{{0x9, 0x5, 0x5, 0xb, 0x10, 0x3, 0xe0, 0xe7, [@generic={0x71, 0xf, "5af374aa67b3f17e95b47ea968e1683c21dfeb413bbb19163549ae49799df415ee9bb801370a03c34f46c7934576fb974bafb7775d933ea47c693abb48cf3e2fb827ef6e6806e2ba33602b41ee6695036fc80ca22e9db0bdc44ffd9870036df17ada99960c29cfa835e3ea69a37589"}, @generic={0x101, 0x22, "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"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x8, 0x8, 0x9, [@generic={0x8d, 0x1, "38a192318f6ac8f53be73c529766aea9dea289803b9fcc464530c3c0e79f6bda3f7f37c39e92ac102b47a2838c8fee4352efd899e66371774e83eada6ff5e2ac946d03543d419a43f8672503153aec6e016e8ddaab036166808dfcb862e77f4bc1d2ebb856b23fdae103c412ed78a736943b682f474824cc3c7cfa44881d92341984c5574ec7d61a86f96a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x7fff}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x4, 0x7, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x6, 0x9, 0xcf, [@generic={0x46, 0xa, "58fee572314c08d00e8ec9d15747aa827022824c1fa2bf269cccce68addabbec3ed29e3be8e01eded3efc61dd67a8ff8c793da9101dd15d902552afda676138cee2d19a7"}, @generic={0xca, 0x21, "c4a822ac4cac47fc7de4809243c8045c70248b2476841dd9a1ca798625fb8e51b9d63b53235c70f3785f0f7d2f458d0eca8629da723ff9ce21a1b9ce2c919f5f7ee3b375fed529e52860852b84b94f45341b746042892686f565769d4d16d16c3810d4298f170a5ad17bcddb8a62f795dc3460549fe2d235de4dfa03ecad76b1d78492a8a3efa882fce1e406dee34573c5f6811f64cc8c50631d73dd3374395b458b726f89c479fd484adaf41a6b1b24969c12ca0f32158da30431c792af522f70aafd293821b5f2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3e7, 0x0, 0x9, 0x5, [@generic={0x60, 0x11, "aed929d8c14ec74767ca3cc2836ddafc83c5a56477a6e607671b2088b3d11dade3e913735e1042a8e4423a23ce8d242e0a8a7d908f7abbad19e2a6c7f24b08cabeeb51acdbb4b1a6e4ddee6bb0530764793e863effe562a16d986bdedeb5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x67, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x7, 0x4, [@generic={0x22, 0x11, "db065cea6cf93783c23de95ae3c98a86c0f3d27f8519daaf2d26c8678898c8cc"}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x300, 0xc0, 0x8, 0x36, 0x20, 0x7}, 0x4c, &(0x7f0000001140)=ANY=[@ANYBLOB="050f4c00030b1001042000089f00000418100000000f04000f00ff00ff00ff003fffff0024100a046600000000f090040000ff003f000000300000000f000000c0000000603fff0000000000"], 0x4, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2c}}, {0x17, &(0x7f0000001200)=@string={0x17, 0x3, "1eec2e44a7cfe2d46ffb103c90c0db8a44296917c2"}}, {0xd0, &(0x7f0000001240)=@string={0xd0, 0x3, "9e783fa34452704b47dfcb6b2d530c06fc4846b46dcbf7b55bea08fb3baaccfb7cfe83a3ed5359a309bf9221b5aa2cda073c7b4ffefcce9d18bbbb2cfc6b4a11b99f40e76bb154b464f64374334a0c6326c5f2b0c17a6958807fa493d67d09a7bed42b0f3a23e67c14fd92a0580c4cd73f41995b5b3856d59eedbda4b4bb056052732d1bba9d173d5c194f605207af64a000d067b41c43119cebb0da3e80aab61c3e5e23311c66d9fdd5dc5ab50b4b640a06e87231d40e3075dade8396dd53ed15cbde3dc08da4761f5538947410"}}, {0x2, &(0x7f0000001340)=@string={0x2}}]}) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000008f40)=[{{&(0x7f0000000a40)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) 1m4.245673852s ago: executing program 1 (id=205): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = syz_open_dev$loop(0x0, 0xffffffff80000001, 0x1680a2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x8b000, 0x180) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0xffffffff80000001, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x42282, 0x0) syz_ublk_setup_io_uring(0x3218, &(0x7f00000004c0)={0x0, 0x818e, 0x4, 0x1, 0x3b9}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000001040), 0x201, 0x0) (fail_nth: 10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_pts(r3, 0x200000) 1m4.203492454s ago: executing program 1 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000100)='./file0\x00', 0x114) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x10000000) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, 0x0) unshare(0x22020600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1, 0x6, 0x0, 0xb00, 0x4, 0x200000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x100000) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @empty, 0x3, 0x6, 0x0, 0x100, 0x6, 0x1e0327, r6}) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m3.427727658s ago: executing program 1 (id=212): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x35, {0x35, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f545cb92e449c42123ec25cde38bf7914077366b487a480400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140), 0x3, 0x0, 0x4d}}], 0x2c, 0x40092) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x44041) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46050d070b050400000000000003000300f9ffffff0002000000000000400000008c00000088000000000000002c0d00000500380002007800070104000500000000000000000000000000000009000000000000000600000000000000030000000000000069020000000000000b0000000000000001ff00000800000093e152c8cb6c6dec3809a337b1f20400000000000000f8ffffffffffffff0a0000000000000005000000000000000100"], 0xb0) close_range(r0, r6, 0x2) close(r6) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m1.864263558s ago: executing program 1 (id=235): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000780)="120000001200e7ef007b462ea95ce8197900", 0x12, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000002d00)=""/4106, 0x100a}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000580)=""/86, 0x56}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}, 0xffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}, 0x1}], 0x7, 0x2000, 0x0) 1m1.795217251s ago: executing program 1 (id=236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800400, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="8edf630b35b92bc0a0e459f712597d4552ad4783e5c193eb4649c9237c08268b668fdcb9b3356a65a9fff606b02aebcb99d1dbcb0b50b0a64d95d0d8469ea89b70872dfa448c43d21ccf56c2ec91829991a311d7c378bdc6d94e3baf9401b7ee3520b98b5515b80a5e9293536b24ecfc527af496d22d3f2c4afac167a3d8392d71864774eed670e040653145c83ad07f2a902d46b8630e16fd556d1b2083d196cdaf86cf33fe815148af708e47641586732068c2e079bef3e10c1949a681551cff57c6e9640c7e6baf1a60041936f3ff7414ec", @ANYRES16=r1, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES8=r1]) write$FUSE_INIT(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r4], 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r5, &(0x7f00000000c0)=@random={'trusted.', 'overlay\x00'}, &(0x7f0000000140)='workdir', 0x7, 0x3) 46.776350112s ago: executing program 32 (id=236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x800400, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="8edf630b35b92bc0a0e459f712597d4552ad4783e5c193eb4649c9237c08268b668fdcb9b3356a65a9fff606b02aebcb99d1dbcb0b50b0a64d95d0d8469ea89b70872dfa448c43d21ccf56c2ec91829991a311d7c378bdc6d94e3baf9401b7ee3520b98b5515b80a5e9293536b24ecfc527af496d22d3f2c4afac167a3d8392d71864774eed670e040653145c83ad07f2a902d46b8630e16fd556d1b2083d196cdaf86cf33fe815148af708e47641586732068c2e079bef3e10c1949a681551cff57c6e9640c7e6baf1a60041936f3ff7414ec", @ANYRES16=r1, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES8=r1]) write$FUSE_INIT(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r4], 0x15) r5 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r5, &(0x7f00000000c0)=@random={'trusted.', 'overlay\x00'}, &(0x7f0000000140)='workdir', 0x7, 0x3) 23.023454563s ago: executing program 2 (id=796): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) mkdir(&(0x7f0000000040)='./file0\x00', 0x65) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x184) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r4, 0x5459, 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0xe, 0x28, {0x28, 0x9, "0df78207442897c1397dd2a187a37ef164212fc653aa9c277ea89a6c8a817091838929ce56aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x48, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 22.332763775s ago: executing program 2 (id=809): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x9, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x11, 0x0, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="ac14143f0000000000000000000000000000000032000000fe80000000000000000000000000003f2703000000000000090000000000000000000000000000000400000000000000ff0f0000000000000000000000000000010000000000000000000000000000000000e600000000000000000000000000000000000000000000000000000000008f000000000000000800000029bd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000202"], 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 22.314019696s ago: executing program 2 (id=810): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/118, 0x76}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x6}, 0x400c}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb81e}, 0x5}], 0x4, 0x120, 0x0) 22.251867697s ago: executing program 2 (id=811): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) read(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905", @ANYRES32=r2], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r3, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x220) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ec7000/0x3000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0, &(0x7f0000000000)) 21.759372733s ago: executing program 2 (id=813): syz_usb_connect(0x2, 0x4cb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000008f40)=[{{&(0x7f0000000a40)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) 21.619656248s ago: executing program 2 (id=815): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000020000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/108], 0x16c}}, 0x0) 21.586404568s ago: executing program 33 (id=815): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000020000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/108], 0x16c}}, 0x0) 2.348527165s ago: executing program 3 (id=1066): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001cc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2.227861109s ago: executing program 3 (id=1068): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x8, 0x9, 0x5}, 0x20, [0x40, 0x6, 0x3, 0x8000, 0x2ff, 0x8, 0x7, 0x7, 0x1, 0x4, 0x4, 0x7, 0x4, 0x9, 0x10001, 0x677, 0x8, 0x8, 0x5, 0x100, 0x8000, 0xfffffffc, 0x180, 0x7fff, 0x8, 0x80, 0x5f8, 0x6, 0x2, 0x1, 0x7fff, 0x6, 0x0, 0x24, 0x335c, 0x6, 0x9, 0x401, 0x81, 0xcf7d, 0x200009, 0xa, 0x95, 0x3, 0x80000001, 0x0, 0x2, 0x8, 0xc4ff, 0x2, 0x1, 0xefe7, 0xb, 0x5, 0x8, 0x1, 0xdd4, 0x8, 0x1, 0x4, 0x7d2, 0x2, 0x80000000, 0x6], [0x84, 0x7, 0x6, 0x1, 0x8, 0x3, 0xfff, 0x3, 0x7, 0x9, 0x6, 0xffff, 0x9, 0x8, 0x5, 0x9, 0x5, 0x5, 0x4, 0x2, 0x1ff, 0x200, 0x5a, 0x7, 0x7f, 0xff, 0x7a57c879, 0x2, 0x8, 0x8, 0x2, 0xcbbe, 0x52, 0x2, 0x6, 0x5, 0x677, 0x5, 0x80000000, 0xff, 0x7, 0x3ff, 0x80, 0x8, 0x4, 0x1, 0x1ff, 0xb, 0x5, 0xe12, 0xfffffffa, 0x8, 0xffff6ea9, 0x5, 0x0, 0x9, 0x6, 0x4, 0x9, 0x2, 0x9, 0x0, 0x9, 0x1d], [0x631b, 0x3, 0xc, 0x2, 0x1000, 0x5, 0x636, 0xad, 0x7, 0xc, 0x9c36, 0x4, 0x8, 0x52de, 0x2, 0x7, 0xa71, 0xa, 0x5, 0x3, 0x8000, 0xae7, 0x800001, 0x2, 0x81, 0xfff, 0xe4f, 0x9, 0x1, 0xfffffffa, 0x8, 0xb, 0x9, 0x7ff, 0x66, 0x2, 0x8007, 0x86, 0x3, 0x5, 0x1, 0x400, 0xe, 0xfffffff9, 0xa, 0x0, 0xc39, 0x0, 0x80000000, 0xba, 0x1, 0x0, 0x32, 0x4, 0x8001, 0x6ff8, 0x9, 0x6c9, 0x4, 0x4, 0x8001, 0x0, 0xac7, 0x400], [0x51d1, 0x8, 0x3, 0x3, 0x5, 0x1, 0x45, 0x2064262a, 0xd000, 0x7fff, 0x1fd000, 0x3, 0x6, 0xe, 0x9, 0xc0, 0x40, 0x3, 0x3, 0x9, 0x4, 0x7, 0xbb, 0x20000000, 0x10000, 0x56b09c32, 0x209f, 0x5, 0x7, 0x2, 0xb8a, 0xfffffffc, 0x5, 0x5, 0x7fff, 0x9, 0x974, 0x7, 0x0, 0xfd, 0x2, 0xa, 0x1, 0x6, 0xff, 0xb, 0x16a2, 0xb, 0xa2cba3d5, 0x27fe, 0x10000, 0x100, 0x8, 0x4, 0x8, 0x747bb767, 0xc, 0x6, 0x9, 0xc, 0x9, 0x40, 0x20000006, 0x7ff]}, 0x45c) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400090003000800ffdbdf250a000005"], 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20044010) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) listen(r4, 0x8000) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000140)=""/17, &(0x7f0000000180)=0x11) accept4(r1, 0x0, 0x0, 0x0) 2.165060831s ago: executing program 3 (id=1071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000005, 0x4000000000000180, 0x400000004, 0xffffffffffffffff, 0x3ff, 0xb, 0xfffffffffffffd7e, 0x4000000045, 0x0, 0x3b8, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x58000, 0x1a02}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8084000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x8, 0x6, 0x2f, 0x1, 0x20, 0x47, 0x6, 0x51, 0xfe, 0x9, 0x6, 0x8007}, {0x5296, 0x401, 0xa, 0xc1, 0x7, 0x1, 0x47, 0xf1, 0x7, 0x3, 0x3, 0x3, 0x3ffffffffff}, {0x7fffffff, 0x4, 0x45, 0x1, 0x5a, 0x9, 0x8, 0xf8, 0xfd, 0x6, 0x3, 0x3, 0x4}], 0xa}) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000001c0)=ANY=[@ANYBLOB="00406b1d0101eb8755f720582678daba3f7631985d20dd436dfa2a979d75d8fedc47ab8335264f811728bfc65768d683a39ea72655402fd408043256817d102cbc986b2c74b8f2548c52e383ed640831d5c6407e1b6936540664b66462ea950ec6bd000000000000006935bf1e20a86a35de4c43fa2c6187c77889f2b9"], 0x0) r5 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffe90, &(0x7f0000000340)='aI\xfe>\x9cKT\x87<\x18\x1a\x8e\x9aG\x87Q\x80\x10\xd9\xafb\xa0;5w\xac\xe9\x9e \x01.X\x88F\xa7\xb2\xc1\xd5\x8f\xcf\x81x\x87kw~\v\xcc\xb7,R\xd9\x10\xa6\x8c\x99);\xd6\x04\x9aEH\xcb\n\xb9\xc38\xd5\x8c\x1d=\xca\xcf\xc9\x99\xbeWf8\xf5\xf8p\xac\xdc\xed\x11:\xb3\v(gG\xda\xce\xa2\xff\x93\xf3]\x93\xabB\xba\xa6\x96\xa1\xfe\x83oh\x0f\xe4l\xe5\xd7 E\"\xafGHA\x1b\xc8@\xf8\xf8K\xea\x94\xa5\xe3\x88\x1bB\x9b') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(r6, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_usb_disconnect(r5) 2.056404034s ago: executing program 0 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0x0, 0x5, 0xda73, 0x5}, 0x20) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000440)="c42131e1884800000067260f01d1430f20d048b842710000000000000f23c80f21f8350000e0000f23f86868e199e8607766b84e008ed8b9190600000f320f0680f50066b875000f00d8", 0x4a}], 0x1, 0x8, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x67e, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, &(0x7f00000000c0)) process_vm_readv(0x0, &(0x7f0000000240), 0x1000000000000271, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f00000000c0)) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x2, @any, 0xf, 0x1}, 0xe) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r7, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r7]}, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ee1c5671675ce29f1636684c9a9659548383a4c488ac3108651860331fd895604fcf60a720deaca7cba4bf7ff67243e51c6e7b65098b3b17ce61c81f112b07f97ef81b8804091a9bfff085bb94ae127efbf4a100ca3dc6835af37ae3bc7fb0a970d8f9890dc88da744f969e044ac78f8d3123e113ca849723ee23542257b2b50b6a26926a55b26c34df07b285a2f9497256cb23013081535e23f1fdc35b18c53bf9892d73ed72e4b19776d3aa5a14468752af2746ebce46b8e37b207f99fc52149ea0715995eba6f6bfaa2b4eba1189531561280b07f129fde4c98"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x600, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) write$char_usb(r8, &(0x7f0000000580)="3cac557dc18ded951c65c24ad1879d10342e39fc68b925bbdcb7742d2ccdac2b3f2a5e0720e0081772c3bf76fc944ddc72e9d568c3ce0e7a2b23601fae229919fb65cc961de9f0ddb871714838e76da7b737be2c7cbf2dedd2c19014e0607110f747b6472347933a02b6e10bbca303444c93194ef110d603df528605338b25641fdc38f27f1a5b999df22d1aa6651ac91442c8ea75d75823e1fe05f58bb5686adc9b5db1d5f0c314af7ef7f4b2bb23e3e0d9993a44fc3aa36d82b52efa67b0a8771876746d89c1b0e3f6e9dce6bda24e224ef6e4682094ca63471e2a979db297d13d3f3597f7eeabdcf3335b9f663ee79adf2a", 0xf3) 1.743812604s ago: executing program 5 (id=1080): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x48, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002f00)={0x14, r1, 0x601, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r2 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='fscrypt-provisioning\x00', 0xfffffffffffffff8) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x100) (async) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) gettid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r5, r6+60000000}}, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x71, 0x31) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r8 = fcntl$dupfd(r7, 0x406, r7) sendto$inet(r7, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) write$binfmt_elf64(r8, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) 1.740704564s ago: executing program 5 (id=1081): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 1.661361467s ago: executing program 5 (id=1082): r0 = getpid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r5, 0x3, r2, 0xff, 0x80000}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) 1.618018428s ago: executing program 5 (id=1083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000102030000000000000000000a000009440001800c000280050021006100000006000340000200002c000180140003"], 0x58}, 0x1, 0x9000000, 0x0, 0x40}, 0x14) 1.56142944s ago: executing program 5 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0xfffffffffffffffe, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) read$FUSE(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x40000000, 0x10}, 0x8090) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.56029184s ago: executing program 5 (id=1085): utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000000)=ANY=[], 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) setresgid(0x0, 0x0, 0xee01) creat(&(0x7f0000000180)='./file0\x00', 0x1b6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) eventfd2(0xf9f3, 0x80001) newfstatat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x0, 0x6800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xdf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x6f2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xc, 0x6}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x5, 0x1, 0x3, 0xff, 0x5}, 0x3a, &(0x7f0000000340)={0x5, 0xf, 0x3a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x22, "b8135705a23289d9b18acd02db20b92a"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ad6ace494b0e3d64c77ae0c95931754c"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xe, 0x8}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x404}}, {0xeb, &(0x7f0000000440)=@string={0xeb, 0x3, "d6822ee73f41f238492f5273a4affa3e428ebc8bf90fb45a05ff278ebe072568016f6e6086c002caff413365899561ae038c3bd5f56212ae1588c0f423bf2120d24b3874eeee8effe48e443a67e33a264ccbed4967afb77bc05c3deb3be11cc1e40a75b89572aedf06c5dfc7a5f8f89cc2d0ebaf45ce5316e2aba44be5fe17c8138b17343e9a1d380e1aa90dec22366f642eca3119825e41ec813eddcc838f2f9b2a935f4693ce419f7b118e0e31631d5e61e894910c148076706837ae1d919555bca64f07089303046b4117891bda280f35432d409bbdfcf3bd7ce0319d3cf37c990b1160da851c0f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x32a2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}, {0x22, &(0x7f00000005c0)=@string={0x22, 0x3, "8a362edec0bc0b5baf7b1bdc5ad7b266138d88a5f89b7304372bfba39e234866"}}, {0x3d, &(0x7f0000000600)=@string={0x3d, 0x3, "84e7e335ebdbaf490acb67fb6132de40d2e534f5db1b5c6f1e5dbe83554634786f1cb001b6c3acf62844f084f2248cb53c0f541efd1ab4947a70df"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc07}}, {0x4d, &(0x7f00000006c0)=@string={0x4d, 0x3, "b9995abd304be68cb49869a971c1192fcaabd46fdc9c898aef3b12fe3906fe9445ce511107909b97286a411a0666e20f677641df170dd3eb35cd2e7fedc6792ec0ad2c03a4a7d80be76e51"}}]}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) write$cgroup_pressure(r6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) get_robust_list(r0, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}}}, &(0x7f0000000240)=0x18) 1.071950356s ago: executing program 4 (id=1089): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x0, 0x7fffffff, 0x8, 0x4, 0x8]}, &(0x7f00000001c0)=0x54) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003200000002003"]}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x0, 0x7fffffff, 0x8, 0x4, 0x8]}, &(0x7f00000001c0)=0x54) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, 0x0) (async) syz_usb_control_io$uac2(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003200000002003"]}, 0x0) (async) 882.837122ms ago: executing program 3 (id=1090): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001cc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 863.602682ms ago: executing program 3 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 811.846954ms ago: executing program 3 (id=1092): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000200)=@vmx={0x4, 0x0, 0x2080, {0xa000, 0xc000, {0x2}, 0x1, 0x3}, {"916f6f5566e493713ac03b52d045c7c8a5d1cd45415a0dfd3a069b9c0944c65efc7ae88c6b835f0cb7f3140f3d43bbddb041c7a9074821cb1884a2f0abcd3c688f141954d096b1a9250ebdc7c8fd6c9546da9c0ab5b86e5e61d1082d17ca88bfbebea24899b0915775814a6a092bbb7205a0b9a6c108af6e136da6c0470d1a2a05705a7e3dad39d4614ef270771183a116c59b10e2897ace2a4fcdc185f8bee75fdafee2d7266ac6a2e0f39c155912a6533ec2e64c73980c2bd3db5a52ed13cd01bc59ed8ffc9eaf4b7f511d2219777e281b00e95078742961392cdd303893ea75902b61cd65908628c77e629cbaf401c0a15c07f819b73df4df33d81e37046d1ff552dc6e889afb7acc311d084fd4ed5244a93f6911d471c6b7797175e4b79c3e5e04f6a571d4a0f18ead6330a4426dd65ecee5ee7671afd7aaeca3160a4ec4916a763eccee82800c365bda4c26f1d05cc0f9f6f85280a8bbfa1317fb496d5252cdb5a80c7c5e49f699b02dd907b2ca684ca0581feb4c62ddc0781fe9ac1c95339943bafa3a053599238a9f474280346170400820e831ae19395ffb1e9650152cab37b5eb0f976ed01e4e2d150d3dec70fdf97802cd21cc7288124538c5211298341c34f6a36b2104aa09ba42b9df2f5ed525f87d737edc374b48e56b8b0b1318bdd2d6cc59a5bb00190fcb80c769243f7c804c51a3ad4115a0a2aed00762dd995dc5aa79b8266cb6ec2ad18e50b514cfb119e2a80810bdc9b38cabac4a862362a5ea7f0092d04ad66df3ada791d695242645ed708181206fc1848815c9229fbbc7af9c8da716dd065d083a14f3118b9784d9f958b2a2a7e6885677f1d1618340cc1560db8bc4bb69f64ce45cc21112241f12f7031a7a994f9235ba719f66af4551d80bdc7ff80456f1d0b662a48acdd6fa434b031c061db93c13366c83ab10497bc4119fd29156bdd70128f98b2c97efc8b6ec6d5a6ef840d94c66f89dccfbaa134693289424964dbdf31b71f43827b252dadd3da6127e8faa6a50c85ce3e4a0b85463a6b648df2a2abbc0f7ee2d21d9b3ceb5604627d00bcdda94c43eaec9fe3e5e5872bb695021083db808e2aeb51b5b44111e11c5523f91477cbfa11eb6d0289fa9de46b75b3d1bd1aec424c9ae3f638e3af774bb3184024b23e53a7c4c26508712530008a9e7ee23204209cbe24018cea8b545e50abd3a36277219613180ea614782f2ad1c7417a55fc7c5beb3c7e90c7f72b0fd8b73e268c1c9145f50712916b869d7bb6b28fcf5655fb40c3c0d1436c7824d2fcfae4294e6c1b1691c374d38103a859c13531516605c5d5407d04272bd63207a4c50d1eefc7166de7e65a471c368cca36591f106256dab6835484b6b667e74f60157c5dcdcc88e896bc1f60cd51742dbaca21949b19348914555e0c1754bd76562188926da57480359cc1068b9c5f7b4f8ee59fbf0a2012b1ec6f8b660259488dcd9334e757d29f447ea38903bb58932c9fc484c89369ed07c8cf5211d1d5d23efa785003c3ad037e16c123a5a949d2fbb4b93cdccea4f5ebcc8a79dd9b500411d49899df428a4e7654005c24760dcb19bf7e70bc478272d30e29acc0a4f92b076d001c352a94de92158b1680c1243fad3f9668f0f539faa8377b6168739ebf72b2dac850a2f8254c803bcb0c46f982b362db77da9d9d23c00a0114690c2dc2c839baa8d0731bde094d4e6a34d4928dce3439db54bbe8379029e789c74dde366f2f7c7ac78c4d35aad86205648e676794df3277c3f81525b5f6504410ff11e6095e8b64fb6353f58dac019f16147dc2e233919b21f6583dff22282fdd61333f0f5d13abff48e6efdd6320d8bdef44a2bd599cc4fbf69b651a799c515cde2c708c274669914e61a837135e059c7d4653c4d196346f82a67f111943ac79aa0bb6d3a892528920a98185dfa27ff10951f5163258642a5d6d65a03c18517e058262ef02d3e63ca6696ddfe598243ab5107eeed92a1af887672fc2884e6ec6080ce747ed544897549cfebd0d4fec869874294de1950cdc714fb6494e0d165650954a3e87064dfefc23a03bdea0258c9836ff9a19b400954cdef71a87ee06516fd46b34fc6ab5e7f5f1dd3eb2cb430064c984f8eefec2d0b2dd10f68c1bde8d9961546278f880d3df0ea6f93ac9e147b948e31b4abff16ac148a46291d32d75581c1297ff42715238643014497944566a3b69982e6d8602d9ff6a445219e730a53eb4c829b75a8174df221129da69a2d10be74aadbbe182d5d7760d851f655a49f39c855d73f3d9d402ec1bd21fdf38c9255b35c948516ca9336b7df55b08725a41dfb2a9773fcbfcfcb1d443b51c1cc698bef2b397ac79a69371369f47a9f600874f6967292dde958ae54683abe4080fdb089bf12a31074c5a88bb47772d87e6ac95fde68b645f56cfb60a59aa219c642baf09bcf7b285816f06be657b70ca85c33e6c9a25f92b3a2b711c95ae7ec7759f819acb656bab11e09a14aa1433b6af143c37c3b74f75c8d8199132572815772c14b74df0c32e70f2ceb10a4f32fd658c111cd5e3907476af51e1a0fc180207e5ea56c1caa73d4a70046a0bc340823490aa8904992512401faa42a6678e65981cc3840aa17b4296aa9528717dfb58b4b70535c602b744e6cb55120f243579c81ce5d016e895fa3201f21e3401fd407c0824a85965479a439910ce9ece18f7c6fcff294f7e63366752073b709501ea394724d6492d38eaeb5eca8484a4d4273c644c110f9b88a085149bfe8a30259e13c6aeb13e53a351b0ddd0686db77826d9dbb2d8465aa5b1bcbc6fe212bb28371ec70ab1dd933468feff4eec4689b625db04a21786a52e709269fdf96b046476d45ce76eff13fcb04810ada76496aacc3ac8522ddcd083c0b58f21679e58ad78aab16a9bcd8bffbf52213e9d612fdbcb3465163ad0d678ed437db9d9cfb75d77e6632ad6c187b29d2f27aeb7254ec3a54bc9898977d769e7ef5116266e74e517c6fc7f4c8c8b855a514d93dfe262b5a4a197d24ff5c76d788d8b3de6f53c999d95eaa4e512984ade5e62264b977868577be5904315df681189bded72d885febe367bb528e0a9ffe81599733105da47d2e61091c2922ab01ec2515c5fa3f9ff1e2ad8e9a984f3756cb361207e1e5978eeb37efc67f98fb05c951c5bd5c37639c268a98e6c5f8626a2ae7e90b3973ec7fedfddb9ce598a1ceb0c6025de23f08fb6ad1a6e1930b483c40b77a071a55f1c7441dcf8d889302b490ad0dbe51e922e8178d0b648b9312fda806b897b11cfe501a459bb17938011712e58df9418d1fa618e72c1a060ca01b308b48a5f783e7ec307680df64c2d22d47dc94c58cb58f562b988014d40c75d32b008f2488d869a5c43eba3bd4d4fba064d1ffe9e2f25502b30c2b4a823963bd427df7cdee30d3e9173804166afc9c5954e52cc221ed80a9ce8166ea4ec4ae1b83133f093ea56eb96cb0a0fbfda5bfc9682aab1e4aef132fc99eb5667c5496f96ea17736b73d973c72b10a8f0822aeda76ea58f54700b99e4f6e82745dd411a03f5b5eafa93dc6df0bf67d2cddac2bc8e04b5aa0158a918f135f4b402eb9274f839c6e4ba830827bc1af93b6da4c96508d8a7662ab1caed203af08e373c3c91dc16eb3939ac86b8f85d3ba90c936ef2ec96e05dac263a0703c8af1b98aad7e900606d45262dcef7d566308a58559f4a941cf6bde553ecb5532ffec70d0a48ed7ae52b60b0ff6625302b1bb5de2dc48802b1e16090912b0f351dae8771393d0f0c277bbd5fce0ae0949046fd957eac737f41d1b93c8630752504ae6702fe6256f4bcfd09f170d28d565671afe68c5622d119476a5f18df6eb2834a568c4b6fb64de4168aa44764a5d4946c3b5c2f32c1fd22180e68a80d7709b1dff5cb98dcf94c1994f116dcd85315ca972b3d254562a3b1e328b370928aa47c7490b367daaac22777e6bfeb908c0f11d7c7462d9ba13759962688a4822642950492c0612a261879f91574842ab9a0af275887c6fc9936f862b0fcafd64921a1db97f892ba01a15b37a3f4dafe28d6d1826d6522b7b2f560964b7916ad85a4ffd449cb0cd953460bbd7863447050f73028c7504d2581f84bb1008f431df79e00e1547f1f4daf087e4b6c7250863ca38ed8b61af14abe3d55071fd621b86c7f0761f76e5f805f8c33dc31317b05038c8d1294a3201136d4be0955d54a764546ee57cef0bdd998e2da0b8fe7e5a32bb29e36f793dbf565f35dd2b4a9c9a79fd6a759046ee25b16e9dc9ef6e175e6aefa9a0346a5855e62479ed5c70ffee7753b3c393c1788070d93d7a277130a5c2955be7c347b1f54712d7cd96c95b11e8d15fa783f8c9f9d328b4eccf19a62184941533e0524eb5ec194cdf95d95802e1fa088c67d35d8d0f09eecd35d54d91dc7089974a972cb4f4816670548fc9de3ff6edb858558f797bfeccc5540ce714e69a09e2b41fe9471e23bfd71e83a3e21a09bf7ce50039cdf0198d384faad05fc1644c9a9fdf7de022a45f8cbe782bc5789f5529a7160e2ea5b1eaaaa2d3d95298dd2bf81ba5cfd9a246c82f1c1952e2068237b542faeec0d9c1bf02eba454b7fa670529435ecc535dc4ac43aac2102e4d8495115a830d0daf18d7f1b3272a4ba3c202d94ee830b65ca68cb85db8d11fb0bb398f1063507dc432f34a8d747e27c3ddbbcec2fb86daad816db42018fe2790eac9005087fdac5a25544078db40a66e3218225c45ecf518a54935d3599a7d9220b2149099df1e49aeb39bf102a7dd343ea37a3f3927b3b84a2721596cdf763b2437d2a28114d66116f8e5db5248d29e3113692dba2e498cf0972e2edf5409780fea530fba328ca8a6c3512f67c54e7c24fc3404626f0361609fb94819a835f1db82061a280a1efb3758d9cb0b280e53e5b87c00f942895dfcbb4e61343eb2ace7db7094cc73650e0302a0b5506058f27985c42b46cd46df5d7dd00adfd63330da761b703452a643e4a9620bcfca74f8867221730998b8f1856949ee1642b1139339225033e136ae20e350cc75692157788d62d9436463eb101288a8e21be27b31c337bdcdd81f69da2226b29e7231e2b9ce397a8d47530c8f037f8a1575b9a3d8a8a8684b6a9d64b66f38a3ebb7056d3bc0e67ee8efc642c39c100bf0f01e31e702373bb7ba978cf6c54f928911a20b960bfa1954775be839e48fae376331a3fed89762f6b4027241dd6748d500d99e8e43caa55d701fa5f486582a8769a64984b0630861ef7e0c502ed58f95ab84a57b73cc9d46ddfe9f61a8ac6895ea6704409e11d19073bd8829c20f5b4948244cb6ca8f907d139188cdda202358337a61b2f56bc46414be606d96cd7bda3f97977d7515faee14754ba37167db369543144db0193881373d6adb300c1cc868db8e3f8c55c71f0d837d764f00691e576fa48f2ecf5dc7043e25aa12fe2dfc99164a805a0695892136e4161ecce9c3ccc0b578cb28bc879bf76ce381b6a6b560197ca6b2f6919901c744f16ecdf1750a68c0a6cad149cf66b4f8350e29848917b4fcecb5c432c2926719f9aae56790b1a28dd5975c821700d1813c795c6aeeddd263bb2035dc4eebcca7bb76b1c1e25392fa50a2d364857bbacd5990775bd1649ee5ecfff09d3015a8c8347187416e0be6a9dd4d154eb11d3f15984683ffb167899818aacccc00d9ffae2057f0eeb053c1333609d94ac209bc384c1e0988e8a7af9e5de6facd3367751eff27dee7231031731a84903e040c0fada37d3d730344", "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"}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc001001b, 0x0, 0x5}]}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f0000002280)=ANY=[@ANYBLOB="a02306000000060d50744230a4b1b10aa25e1a58b73951279691aed8bd9b9b7b2359385af9d58b44e37d7e822485ecbdbbcb0962751c3289267f202ed3d6f2790db4140a6c9c22f33babe0cc476cbbb33064b8"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0x0, 0x2b, "a95ed498c2ca3ea34f9a810498982df2e38e4bbfbe3cfd833e8c08c3ecf8a7fbaca00c5c4ef8149a89ad30"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40000800000007000000391101c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4"], 0x0) syz_usb_control_io(r5, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x18, @string={0x18, 0x3, "557757cc441de081054ec7eb6768e802ce9c53a289e5"}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$ublk_chdev(&(0x7f00000003c0), 0x0, 0x400000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x2, 0x198, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x34}}}, &(0x7f00000004c0)) syz_ublk_setup_io_uring(0x66fe, &(0x7f0000000500)={0x0, 0xaf6f, 0x8, 0x2, 0x39}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x0, 0xb1dc, 0x10105, 0x2, 0xc7}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x1, 0x1cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x599c, 0x0, 0x1, 0x167}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee1f, 0x200, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f7a, 0x8, 0x1, 0x2fe}}], 0x4, &(0x7f0000002140)={0x2e, 0x49, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x1, 0x553, 0x0, &(0x7f0000001140)=@buf_512="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"}}, &(0x7f00000021c0)) syz_open_dev$ublk_chdev(&(0x7f0000002480), 0x0, 0x204100) 563.587192ms ago: executing program 4 (id=1093): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=1']) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@subsystem='cpuset'}, {@none}]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 540.247763ms ago: executing program 4 (id=1094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 270.501091ms ago: executing program 4 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x4000000000000000, 0x6040000}) 268.701271ms ago: executing program 0 (id=1096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000002c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa40a000000000000) 268.535811ms ago: executing program 4 (id=1097): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000780)="120000001200e7ef007b462ea95ce8197900", 0x12, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000002d00)=""/4106, 0x100a}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000580)=""/86, 0x56}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x12, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x600, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}, 0x1}], 0x7, 0x2000, 0x0) 203.994424ms ago: executing program 4 (id=1098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 187.873374ms ago: executing program 0 (id=1099): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 160.855275ms ago: executing program 0 (id=1100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0) 99.794457ms ago: executing program 0 (id=1101): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000300000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/108], 0x16c}}, 0x0) 0s ago: executing program 0 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000500)={0x2c}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 21.905297][ T36] audit: type=1400 audit(1780667370.449:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.906457][ T286] cgroup: Unknown subsys name 'net' [ 21.927953][ T36] audit: type=1400 audit(1780667370.449:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.955234][ T36] audit: type=1400 audit(1780667370.489:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.955420][ T286] cgroup: Unknown subsys name 'devices' [ 22.083137][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.088761][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.201014][ T36] audit: type=1400 audit(1780667370.739:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.224261][ T36] audit: type=1400 audit(1780667370.739:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.232784][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.249188][ T36] audit: type=1400 audit(1780667370.749:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.280645][ T36] audit: type=1400 audit(1780667370.809:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.306071][ T36] audit: type=1400 audit(1780667370.809:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.342279][ T36] audit: type=1400 audit(1780667370.889:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.367861][ T36] audit: type=1400 audit(1780667370.889:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.368141][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.161779][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.168837][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.175984][ T293] bridge_slave_0: entered allmulticast mode [ 23.182388][ T293] bridge_slave_0: entered promiscuous mode [ 23.189035][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.196101][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.203157][ T293] bridge_slave_1: entered allmulticast mode [ 23.209277][ T293] bridge_slave_1: entered promiscuous mode [ 23.251983][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.259030][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.266145][ T295] bridge_slave_0: entered allmulticast mode [ 23.272322][ T295] bridge_slave_0: entered promiscuous mode [ 23.288972][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.296045][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.303122][ T295] bridge_slave_1: entered allmulticast mode [ 23.309277][ T295] bridge_slave_1: entered promiscuous mode [ 23.331840][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.338893][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.346022][ T294] bridge_slave_0: entered allmulticast mode [ 23.352294][ T294] bridge_slave_0: entered promiscuous mode [ 23.358669][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.365741][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.372898][ T294] bridge_slave_1: entered allmulticast mode [ 23.379039][ T294] bridge_slave_1: entered promiscuous mode [ 23.385040][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.392116][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.399167][ T296] bridge_slave_0: entered allmulticast mode [ 23.405406][ T296] bridge_slave_0: entered promiscuous mode [ 23.432417][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.439467][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.446575][ T296] bridge_slave_1: entered allmulticast mode [ 23.452756][ T296] bridge_slave_1: entered promiscuous mode [ 23.581445][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.588510][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.595834][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.602866][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.620277][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.627352][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.634628][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.641661][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.650706][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.657784][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.665044][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.672071][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.690714][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.697797][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.705081][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.712114][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.739669][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.747458][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.754947][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.762520][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.769688][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.776890][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.784108][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.791416][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.809784][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.816845][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.827808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.834865][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.849605][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.856689][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.864302][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.871350][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.894362][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.901432][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.909569][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.916619][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.943513][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.950574][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.958371][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.965426][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.996376][ T296] veth0_vlan: entered promiscuous mode [ 24.003420][ T293] veth0_vlan: entered promiscuous mode [ 24.022404][ T296] veth1_macvtap: entered promiscuous mode [ 24.031555][ T293] veth1_macvtap: entered promiscuous mode [ 24.042390][ T295] veth0_vlan: entered promiscuous mode [ 24.057802][ T294] veth0_vlan: entered promiscuous mode [ 24.077432][ T295] veth1_macvtap: entered promiscuous mode [ 24.099569][ T294] veth1_macvtap: entered promiscuous mode [ 24.108827][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.205471][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.226637][ T324] netlink: 'syz.3.5': attribute type 27 has an invalid length. [ 24.441268][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.471374][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.495973][ T340] IPv6: Can't replace route, no match found [ 24.591254][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 24.597573][ T45] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 24.606064][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.616255][ T45] usb 3-1: config 0 has no interface number 0 [ 24.622374][ T45] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 24.640215][ T45] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.653606][ T45] usb 3-1: config 0 interface 196 has no altsetting 0 [ 24.660800][ T311] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 24.671694][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.682841][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.692713][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 24.706357][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 24.715506][ T311] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 24.724944][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.733028][ T311] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 24.741095][ T311] usb 2-1: Manufacturer: syz [ 24.745786][ T45] usb 3-1: Product: syz [ 24.749945][ T45] usb 3-1: Manufacturer: syz [ 24.754836][ T45] usb 3-1: SerialNumber: syz [ 24.759636][ T311] usb 2-1: config 0 descriptor?? [ 24.766132][ T45] usb 3-1: config 0 descriptor?? [ 24.781243][ T326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.951179][ T326] usb 1-1: Using ep0 maxpacket: 16 [ 24.957566][ T326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.972180][ T326] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 24.984471][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.985032][ T45] ipheth 3-1:0.196: Unable to find endpoints [ 24.999601][ T326] usb 1-1: config 0 descriptor?? [ 25.172886][ T311] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 25.180126][ T311] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 25.189308][ T311] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 25.272247][ T326] usbhid 1-1:0.0: can't add hid device: -71 [ 25.278353][ T326] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 25.287408][ T326] usb 1-1: USB disconnect, device number 2 [ 25.311223][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.330816][ T360] FAULT_INJECTION: forcing a failure. [ 25.330816][ T360] name failslab, interval 1, probability 0, space 0, times 1 [ 25.343738][ T360] CPU: 1 UID: 0 PID: 360 Comm: syz.0.16 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 25.343769][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.343796][ T360] Call Trace: [ 25.343802][ T360] [ 25.343809][ T360] __dump_stack+0x21/0x30 [ 25.343845][ T360] dump_stack_lvl+0x140/0x1c0 [ 25.343870][ T360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.343892][ T360] ? __cfi_avc_has_perm+0x10/0x10 [ 25.343911][ T360] ? kasan_save_alloc_info+0x40/0x50 [ 25.343938][ T360] dump_stack+0x19/0x20 [ 25.343961][ T360] should_fail_ex+0x3d7/0x530 [ 25.343979][ T360] should_failslab+0xac/0x100 [ 25.344000][ T360] __kmalloc_cache_noprof+0x41/0x470 [ 25.344019][ T360] ? vhost_task_create+0x12c/0x400 [ 25.344040][ T360] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 25.344063][ T360] vhost_task_create+0x12c/0x400 [ 25.344081][ T360] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 25.344101][ T360] ? __cfi_vhost_task_create+0x10/0x10 [ 25.344121][ T360] ? __cfi_vhost_task_fn+0x10/0x10 [ 25.344139][ T360] ? __kasan_check_write+0x18/0x20 [ 25.344155][ T360] ? mutex_lock+0x97/0x1d0 [ 25.344176][ T360] ? __cfi_mutex_lock+0x10/0x10 [ 25.344196][ T360] ? kernel_text_address+0xa9/0xe0 [ 25.344221][ T360] kvm_mmu_post_init_vm+0x161/0x300 [ 25.344246][ T360] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 25.344271][ T360] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 25.344293][ T360] ? kstrtoull+0x13b/0x1e0 [ 25.344315][ T360] ? kstrtouint+0x78/0xf0 [ 25.344338][ T360] ? ioctl_has_perm+0x1bc/0x500 [ 25.344353][ T360] ? __asan_memcpy+0x5a/0x80 [ 25.344365][ T360] ? ioctl_has_perm+0x408/0x500 [ 25.344374][ T360] ? has_cap_mac_admin+0xd0/0xd0 [ 25.344383][ T360] ? __kasan_check_write+0x18/0x20 [ 25.344392][ T360] ? mutex_lock_killable+0x97/0x1d0 [ 25.344405][ T360] ? __cfi_mutex_lock_killable+0x10/0x10 [ 25.344417][ T360] ? proc_fail_nth_write+0x184/0x220 [ 25.344432][ T360] kvm_vcpu_ioctl+0xa48/0x1000 [ 25.344443][ T360] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.344453][ T360] ? __cfi_vfs_write+0x10/0x10 [ 25.344463][ T360] ? __kasan_check_write+0x18/0x20 [ 25.344473][ T360] ? mutex_unlock+0x90/0x240 [ 25.344485][ T360] ? __cfi_mutex_unlock+0x10/0x10 [ 25.344496][ T360] ? __fget_files+0x2c5/0x340 [ 25.344509][ T360] ? __fget_files+0x2c5/0x340 [ 25.344520][ T360] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.344534][ T360] ? security_file_ioctl+0x3e/0x110 [ 25.344549][ T360] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.344558][ T360] __se_sys_ioctl+0x132/0x1b0 [ 25.344570][ T360] __x64_sys_ioctl+0x7f/0xa0 [ 25.344581][ T360] x64_sys_call+0x1878/0x2ee0 [ 25.344591][ T360] do_syscall_64+0x57/0xf0 [ 25.344601][ T360] ? clear_bhb_loop+0x50/0xa0 [ 25.344614][ T360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.344626][ T360] RIP: 0033:0x7fe4d039ce59 [ 25.344641][ T360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.344649][ T360] RSP: 002b:00007fe4d122d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.344666][ T360] RAX: ffffffffffffffda RBX: 00007fe4d0615fa0 RCX: 00007fe4d039ce59 [ 25.344674][ T360] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 25.344680][ T360] RBP: 00007fe4d122d090 R08: 0000000000000000 R09: 0000000000000000 [ 25.344687][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.344696][ T360] R13: 00007fe4d0616038 R14: 00007fe4d0615fa0 R15: 00007ffd029de188 [ 25.344710][ T360] [ 25.772271][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.782421][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 25.792021][ T45] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 25.802944][ T45] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 25.817565][ T45] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 25.826750][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.834853][ T45] usb 4-1: Product: syz [ 25.839643][ T45] usb 4-1: Manufacturer: syz [ 25.844370][ T45] usb 4-1: SerialNumber: syz [ 25.895826][ T378] futex_wake_op: syz.0.23 tries to shift op by 144; fix this program [ 26.057465][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.069396][ T45] usb 4-1: USB disconnect, device number 2 [ 26.082489][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.201210][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.352271][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.363270][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.372495][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.381205][ T10] usb 1-1: config 0 descriptor?? [ 26.641954][ T390] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 26.795761][ T10] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 26.805335][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input4 [ 26.877679][ T10] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 26.890145][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.021207][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.202927][ T10] usb 3-1: USB disconnect, device number 2 [ 27.253267][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 27.253283][ T36] audit: type=1400 audit(1780667375.799:132): avc: denied { ioctl } for pid=396 comm="syz.1.30" path="socket:[4645]" dev="sockfs" ino=4645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.259112][ T397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 27.292451][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.357269][ T36] audit: type=1400 audit(1780667375.899:133): avc: denied { create } for pid=400 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 27.384239][ T403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=403 comm=syz.2.33 [ 27.431218][ T36] audit: type=1400 audit(1780667375.969:134): avc: denied { read } for pid=406 comm="syz.1.35" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.457405][ T410] IPv6: Can't replace route, no match found [ 27.470206][ T36] audit: type=1400 audit(1780667375.969:135): avc: denied { open } for pid=406 comm="syz.1.35" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.506599][ T326] usb 2-1: USB disconnect, device number 2 [ 27.531463][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.681380][ T9] usb 4-1: device descriptor read/64, error -71 [ 27.753913][ T427] FAULT_INJECTION: forcing a failure. [ 27.753913][ T427] name failslab, interval 1, probability 0, space 0, times 0 [ 27.766894][ T427] CPU: 1 UID: 0 PID: 427 Comm: syz.0.44 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 27.766925][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.766936][ T427] Call Trace: [ 27.766941][ T427] [ 27.766946][ T427] __dump_stack+0x21/0x30 [ 27.766977][ T427] dump_stack_lvl+0x140/0x1c0 [ 27.767010][ T427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.767034][ T427] ? __kasan_check_write+0x18/0x20 [ 27.767054][ T427] ? proc_fail_nth_write+0x184/0x220 [ 27.767079][ T427] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 27.767104][ T427] dump_stack+0x19/0x20 [ 27.767127][ T427] should_fail_ex+0x3d7/0x530 [ 27.767145][ T427] should_failslab+0xac/0x100 [ 27.767168][ T427] kmem_cache_alloc_noprof+0x42/0x410 [ 27.767186][ T427] ? getname_flags+0xc5/0x700 [ 27.767206][ T427] getname_flags+0xc5/0x700 [ 27.767224][ T427] ? __cfi_mutex_unlock+0x10/0x10 [ 27.767248][ T427] getname+0x1b/0x30 [ 27.767266][ T427] do_sys_openat2+0xda/0x1d0 [ 27.767290][ T427] ? fput+0x1a4/0x240 [ 27.767312][ T427] ? do_sys_open+0x100/0x100 [ 27.767335][ T427] ? ksys_write+0x1f3/0x260 [ 27.767353][ T427] ? __cfi_ksys_write+0x10/0x10 [ 27.767372][ T427] __x64_sys_openat+0x13a/0x170 [ 27.767396][ T427] x64_sys_call+0xe69/0x2ee0 [ 27.767414][ T427] do_syscall_64+0x57/0xf0 [ 27.767432][ T427] ? clear_bhb_loop+0x50/0xa0 [ 27.767454][ T427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.767475][ T427] RIP: 0033:0x7fe4d039ce59 [ 27.767492][ T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.767505][ T427] RSP: 002b:00007fe4d122d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 27.767525][ T427] RAX: ffffffffffffffda RBX: 00007fe4d0615fa0 RCX: 00007fe4d039ce59 [ 27.767539][ T427] RDX: 0000000000000201 RSI: 0000200000001040 RDI: 0000000000000004 [ 27.767551][ T427] RBP: 00007fe4d122d090 R08: 0000000000000000 R09: 0000000000000000 [ 27.767563][ T427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.767574][ T427] R13: 00007fe4d0616038 R14: 00007fe4d0615fa0 R15: 00007ffd029de188 [ 27.767590][ T427] [ 27.791199][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.871182][ T326] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.976729][ T431] 9pnet_fd: Insufficient options for proto=fd [ 28.031195][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.038637][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 28.049676][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.063602][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.073549][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 28.087459][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 28.096733][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 28.104905][ T10] usb 3-1: Manufacturer: syz [ 28.110829][ T10] usb 3-1: config 0 descriptor?? [ 28.117604][ T433] kvm: pic: single mode not supported [ 28.121972][ T326] usb 2-1: device descriptor read/64, error -71 [ 28.141287][ T9] usb usb4-port1: attempt power cycle [ 28.371198][ T326] usb 2-1: device descriptor read/64, error -71 [ 28.481200][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.502271][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.518832][ T10] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 28.526201][ T10] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 28.534816][ T10] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 28.611210][ T326] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 28.632160][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.723472][ T438] netlink: 'syz.0.47': attribute type 27 has an invalid length. [ 28.725871][ T45] usb 3-1: USB disconnect, device number 3 [ 28.741192][ T326] usb 2-1: device descriptor read/64, error -71 [ 28.746691][ T36] audit: type=1400 audit(1780667377.289:136): avc: denied { read } for pid=439 comm="syz.0.48" dev="nsfs" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.768333][ T36] audit: type=1400 audit(1780667377.289:137): avc: denied { open } for pid=439 comm="syz.0.48" path="net:[4026532319]" dev="nsfs" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.777627][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.800016][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.813054][ T36] audit: type=1400 audit(1780667377.289:138): avc: denied { ioctl } for pid=439 comm="syz.0.48" path="socket:[3851]" dev="sockfs" ino=3851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.871198][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 28.892123][ T9] usb 4-1: device descriptor read/8, error -71 [ 28.981205][ T326] usb 2-1: device descriptor read/64, error -71 [ 29.022146][ T9] usb 4-1: device descriptor read/8, error -71 [ 29.091287][ T326] usb usb2-port1: attempt power cycle [ 29.141371][ T9] usb usb4-port1: unable to enumerate USB device [ 29.332993][ T447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.341661][ T447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.431202][ T326] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 29.452285][ T326] usb 2-1: device descriptor read/8, error -71 [ 29.460409][ T36] audit: type=1400 audit(1780667377.999:139): avc: denied { read write } for pid=446 comm="syz.0.50" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.483438][ T36] audit: type=1400 audit(1780667377.999:140): avc: denied { open } for pid=446 comm="syz.0.50" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.506438][ T36] audit: type=1400 audit(1780667377.999:141): avc: denied { ioctl } for pid=446 comm="syz.0.50" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.533969][ T447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 29.582224][ T326] usb 2-1: device descriptor read/8, error -71 [ 29.591217][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.652823][ T453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.742253][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.753291][ T310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 29.762924][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.771888][ T310] usb 3-1: config 0 descriptor?? [ 29.831219][ T326] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 29.852239][ T326] usb 2-1: device descriptor read/8, error -71 [ 29.982209][ T326] usb 2-1: device descriptor read/8, error -71 [ 30.091285][ T326] usb usb2-port1: unable to enumerate USB device [ 30.179797][ T471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 30.187639][ T310] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 30.199015][ T310] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input5 [ 30.226753][ T474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.235451][ T474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.245100][ T474] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 30.252823][ T474] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.60'. [ 30.277423][ T310] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 30.345959][ T479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 30.497267][ T487] futex_wake_op: syz.3.66 tries to shift op by 144; fix this program [ 30.633053][ T498] FAULT_INJECTION: forcing a failure. [ 30.633053][ T498] name failslab, interval 1, probability 0, space 0, times 0 [ 30.645720][ T498] CPU: 1 UID: 0 PID: 498 Comm: syz.3.71 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 30.645748][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.645761][ T498] Call Trace: [ 30.645768][ T498] [ 30.645776][ T498] __dump_stack+0x21/0x30 [ 30.645806][ T498] dump_stack_lvl+0x140/0x1c0 [ 30.645832][ T498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.645846][ T498] ? __kasan_kmalloc+0x96/0xb0 [ 30.645860][ T498] dump_stack+0x19/0x20 [ 30.645872][ T498] should_fail_ex+0x3d7/0x530 [ 30.645886][ T498] should_failslab+0xac/0x100 [ 30.645908][ T498] kmem_cache_alloc_noprof+0x42/0x410 [ 30.645926][ T498] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 30.645952][ T498] ? __kasan_check_write+0x18/0x20 [ 30.645968][ T498] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 30.645983][ T498] ? mutex_unlock+0x90/0x240 [ 30.645997][ T498] kvm_mmu_topup_memory_cache+0x24/0x30 [ 30.646011][ T498] kvm_mmu_load+0xa2/0x2890 [ 30.646025][ T498] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 30.646049][ T498] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 30.646070][ T498] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 30.646094][ T498] ? kvm_service_local_tlb_flush_requests+0x101/0x150 [ 30.646112][ T498] vcpu_run+0x4e31/0x78e0 [ 30.646131][ T498] ? signal_pending+0xc0/0xc0 [ 30.646143][ T498] ? __kasan_check_write+0x18/0x20 [ 30.646153][ T498] ? xfd_validate_state+0x68/0x140 [ 30.646167][ T498] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 30.646186][ T498] ? __kasan_check_write+0x18/0x20 [ 30.646203][ T498] ? fpregs_mark_activate+0x68/0x160 [ 30.646224][ T498] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 30.646245][ T498] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 30.646261][ T498] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 30.646275][ T498] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 30.646288][ T498] ? kstrtoull+0x13b/0x1e0 [ 30.646302][ T498] ? kstrtouint+0x78/0xf0 [ 30.646317][ T498] ? ioctl_has_perm+0x1bc/0x500 [ 30.646334][ T498] ? __asan_memcpy+0x5a/0x80 [ 30.646352][ T498] ? ioctl_has_perm+0x408/0x500 [ 30.646368][ T498] ? has_cap_mac_admin+0xd0/0xd0 [ 30.646385][ T498] ? __kasan_check_write+0x18/0x20 [ 30.646401][ T498] ? mutex_lock_killable+0x97/0x1d0 [ 30.646414][ T498] ? __cfi_mutex_lock_killable+0x10/0x10 [ 30.646426][ T498] ? proc_fail_nth_write+0x184/0x220 [ 30.646441][ T498] kvm_vcpu_ioctl+0xa48/0x1000 [ 30.646451][ T498] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.646462][ T498] ? __cfi_vfs_write+0x10/0x10 [ 30.646479][ T498] ? __kasan_check_write+0x18/0x20 [ 30.646496][ T498] ? mutex_unlock+0x90/0x240 [ 30.646518][ T498] ? __cfi_mutex_unlock+0x10/0x10 [ 30.646539][ T498] ? __fget_files+0x2c5/0x340 [ 30.646554][ T498] ? __fget_files+0x2c5/0x340 [ 30.646564][ T498] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.646577][ T498] ? security_file_ioctl+0x3e/0x110 [ 30.646591][ T498] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.646601][ T498] __se_sys_ioctl+0x132/0x1b0 [ 30.646617][ T498] __x64_sys_ioctl+0x7f/0xa0 [ 30.646638][ T498] x64_sys_call+0x1878/0x2ee0 [ 30.646656][ T498] do_syscall_64+0x57/0xf0 [ 30.646674][ T498] ? clear_bhb_loop+0x50/0xa0 [ 30.646694][ T498] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.646706][ T498] RIP: 0033:0x7f3f6299ce59 [ 30.646716][ T498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.646724][ T498] RSP: 002b:00007f3f63926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.646736][ T498] RAX: ffffffffffffffda RBX: 00007f3f62c15fa0 RCX: 00007f3f6299ce59 [ 30.646743][ T498] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 30.646750][ T498] RBP: 00007f3f63926090 R08: 0000000000000000 R09: 0000000000000000 [ 30.646760][ T498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.646771][ T498] R13: 00007f3f62c16038 R14: 00007f3f62c15fa0 R15: 00007ffe0524d2b8 [ 30.646788][ T498] [ 31.062237][ T501] netlink: 'syz.3.72': attribute type 27 has an invalid length. [ 31.127606][ T509] futex_wake_op: syz.2.76 tries to shift op by 144; fix this program [ 31.217177][ T516] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=288 (576 ns) > initial count (504 ns). Using initial count to start timer. [ 31.311352][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.331189][ T45] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 31.461193][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 31.467504][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 31.475805][ T9] usb 4-1: config 0 has no interface number 0 [ 31.482023][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 31.492233][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.492239][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 31.492262][ T45] usb 2-1: config 0 has no interface number 0 [ 31.511187][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.515679][ T45] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 31.527833][ T9] usb 4-1: Product: syz [ 31.534327][ T45] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 31.543791][ T9] usb 4-1: Manufacturer: syz [ 31.549476][ T45] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 31.563678][ T9] usb 4-1: SerialNumber: syz [ 31.564901][ T45] usb 2-1: config 0 interface 2 has no altsetting 0 [ 31.575549][ T9] usb 4-1: config 0 descriptor?? [ 31.582432][ T45] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 31.591810][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.592233][ T9] smsc75xx v1.0.0 [ 31.600050][ T45] usb 2-1: Product: syz [ 31.608142][ T45] usb 2-1: Manufacturer: syz [ 31.612938][ T45] usb 2-1: SerialNumber: syz [ 31.621054][ T45] usb 2-1: config 0 descriptor?? [ 31.628153][ T490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 31.635567][ T490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 31.845865][ T490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'. [ 31.875011][ T45] usb 2-1: USB disconnect, device number 7 [ 32.142462][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.150999][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.202537][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 32.213463][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.419231][ T538] futex_wake_op: syz.1.87 tries to shift op by 144; fix this program [ 32.429515][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 32.440585][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 32.450623][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 32.460164][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 32.507651][ T542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 32.592624][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 32.592635][ T36] audit: type=1400 audit(1780667381.139:159): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.625917][ T551] netlink: 64 bytes leftover after parsing attributes in process `syz.1.92'. [ 32.695561][ T562] futex_wake_op: syz.2.98 tries to shift op by 144; fix this program [ 32.951210][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.111197][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 33.121972][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.130151][ T31] usb 2-1: config 0 has no interface number 0 [ 33.143301][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.152455][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.160492][ T31] usb 2-1: Product: syz [ 33.164864][ T31] usb 2-1: Manufacturer: syz [ 33.169726][ T31] usb 2-1: SerialNumber: syz [ 33.178143][ T31] usb 2-1: config 0 descriptor?? [ 33.187026][ T31] smsc95xx v2.0.0 [ 33.339147][ T575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.349951][ T575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.358185][ T575] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 33.366041][ T575] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.103'. [ 33.377355][ T36] audit: type=1400 audit(1780667381.919:160): avc: denied { create } for pid=574 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.392847][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 33.416776][ T36] audit: type=1400 audit(1780667381.939:161): avc: denied { create } for pid=574 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 33.421727][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.458039][ T36] audit: type=1400 audit(1780667381.939:162): avc: denied { sys_admin } for pid=574 comm="syz.0.103" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 33.613845][ T582] FAULT_INJECTION: forcing a failure. [ 33.613845][ T582] name failslab, interval 1, probability 0, space 0, times 0 [ 33.626718][ T582] CPU: 1 UID: 0 PID: 582 Comm: syz.2.105 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 33.626749][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.626760][ T582] Call Trace: [ 33.626767][ T582] [ 33.626773][ T582] __dump_stack+0x21/0x30 [ 33.626805][ T582] dump_stack_lvl+0x140/0x1c0 [ 33.626832][ T582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.626857][ T582] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 33.626877][ T582] ? init_file+0x9e/0x210 [ 33.626898][ T582] ? alloc_empty_file+0xd9/0x270 [ 33.626919][ T582] ? path_openat+0xfe/0x34f0 [ 33.626941][ T582] ? do_sys_openat2+0x134/0x1d0 [ 33.626965][ T582] dump_stack+0x19/0x20 [ 33.626988][ T582] should_fail_ex+0x3d7/0x530 [ 33.627006][ T582] should_failslab+0xac/0x100 [ 33.627028][ T582] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 33.627047][ T582] ? __d_alloc+0x42/0x8e0 [ 33.627064][ T582] __d_alloc+0x42/0x8e0 [ 33.627080][ T582] ? __cfi_selinux_inode_permission+0x10/0x10 [ 33.627106][ T582] d_alloc_parallel+0xe4/0x1320 [ 33.627125][ T582] ? __kasan_check_write+0x18/0x20 [ 33.627143][ T582] ? rwsem_read_trylock+0x274/0x5b0 [ 33.627159][ T582] ? security_inode_permission+0x77/0x150 [ 33.627183][ T582] ? downgrade_write+0x460/0x460 [ 33.627208][ T582] ? make_vfsuid+0x4d/0xa0 [ 33.627233][ T582] ? __cfi_d_alloc_parallel+0x10/0x10 [ 33.627251][ T582] ? down_read+0x7f/0xe0 [ 33.627274][ T582] ? __cfi_down_read+0x10/0x10 [ 33.627297][ T582] path_openat+0xa28/0x34f0 [ 33.627319][ T582] ? stack_depot_save_flags+0x38/0x800 [ 33.627339][ T582] ? do_sys_openat2+0xda/0x1d0 [ 33.627362][ T582] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.627385][ T582] ? do_filp_open+0x440/0x440 [ 33.627409][ T582] do_filp_open+0x1f5/0x440 [ 33.627432][ T582] ? __cfi_do_filp_open+0x10/0x10 [ 33.627457][ T582] ? alloc_fd+0x4e6/0x5a0 [ 33.627478][ T582] do_sys_openat2+0x134/0x1d0 [ 33.627502][ T582] ? fput+0x1a4/0x240 [ 33.627523][ T582] ? do_sys_open+0x100/0x100 [ 33.627546][ T582] ? ksys_write+0x1f3/0x260 [ 33.627564][ T582] ? __cfi_ksys_write+0x10/0x10 [ 33.627583][ T582] __x64_sys_openat+0x13a/0x170 [ 33.627608][ T582] x64_sys_call+0xe69/0x2ee0 [ 33.627625][ T582] do_syscall_64+0x57/0xf0 [ 33.627643][ T582] ? clear_bhb_loop+0x50/0xa0 [ 33.627664][ T582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.627685][ T582] RIP: 0033:0x7f7b2b99ce59 [ 33.627702][ T582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.627716][ T582] RSP: 002b:00007f7b2c7a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.627737][ T582] RAX: ffffffffffffffda RBX: 00007f7b2bc15fa0 RCX: 00007f7b2b99ce59 [ 33.627750][ T582] RDX: 0000000000000201 RSI: 0000200000001040 RDI: 0000000000000004 [ 33.627763][ T582] RBP: 00007f7b2c7a9090 R08: 0000000000000000 R09: 0000000000000000 [ 33.627775][ T582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.627786][ T582] R13: 00007f7b2bc16038 R14: 00007f7b2bc15fa0 R15: 00007fff39f10858 [ 33.627802][ T582] [ 33.939714][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 33.950504][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 33.963712][ T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.972252][ T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.003125][ T591] netlink: 68 bytes leftover after parsing attributes in process `syz.2.109'. [ 34.104388][ T9] usb 4-1: USB disconnect, device number 7 [ 34.132319][ T600] futex_wake_op: syz.3.113 tries to shift op by 144; fix this program [ 34.199525][ T596] overlayfs: missing 'lowerdir' [ 34.657855][ T622] netlink: 'syz.0.120': attribute type 27 has an invalid length. [ 34.667320][ T435] usb 2-1: USB disconnect, device number 8 [ 34.695925][ T36] audit: type=1400 audit(1780667383.239:163): avc: denied { create } for pid=623 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.699143][ T626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.725178][ T626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.740240][ T36] audit: type=1400 audit(1780667383.269:164): avc: denied { setopt } for pid=623 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.770216][ T628] FAULT_INJECTION: forcing a failure. [ 34.770216][ T628] name failslab, interval 1, probability 0, space 0, times 0 [ 34.783128][ T628] CPU: 0 UID: 0 PID: 628 Comm: syz.1.123 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 34.783164][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.783176][ T628] Call Trace: [ 34.783182][ T628] [ 34.783190][ T628] __dump_stack+0x21/0x30 [ 34.783221][ T628] dump_stack_lvl+0x140/0x1c0 [ 34.783246][ T628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.783274][ T628] dump_stack+0x19/0x20 [ 34.783297][ T628] should_fail_ex+0x3d7/0x530 [ 34.783317][ T628] should_failslab+0xac/0x100 [ 34.783341][ T628] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 34.783361][ T628] ? __kasan_slab_alloc+0x73/0x90 [ 34.783384][ T628] ? alloc_inode+0xa9/0x270 [ 34.783407][ T628] alloc_inode+0xa9/0x270 [ 34.783430][ T628] iget_locked+0x195/0x980 [ 34.783454][ T628] ? __cfi_iget_locked+0x10/0x10 [ 34.783477][ T628] ? __kasan_check_write+0x18/0x20 [ 34.783495][ T628] ? rwsem_read_trylock+0x274/0x5b0 [ 34.783514][ T628] ? downgrade_write+0x460/0x460 [ 34.783552][ T628] kernfs_get_inode+0x50/0x850 [ 34.783574][ T628] kernfs_iop_lookup+0x213/0x320 [ 34.783598][ T628] path_openat+0x1315/0x34f0 [ 34.783628][ T628] ? do_filp_open+0x440/0x440 [ 34.783653][ T628] do_filp_open+0x1f5/0x440 [ 34.783677][ T628] ? __cfi_do_filp_open+0x10/0x10 [ 34.783704][ T628] ? alloc_fd+0x4e6/0x5a0 [ 34.783727][ T628] do_sys_openat2+0x134/0x1d0 [ 34.783751][ T628] ? fput+0x1a4/0x240 [ 34.783774][ T628] ? do_sys_open+0x100/0x100 [ 34.783798][ T628] ? ksys_write+0x1f3/0x260 [ 34.783816][ T628] ? __cfi_ksys_write+0x10/0x10 [ 34.783837][ T628] __x64_sys_openat+0x13a/0x170 [ 34.783862][ T628] x64_sys_call+0xe69/0x2ee0 [ 34.783881][ T628] do_syscall_64+0x57/0xf0 [ 34.783901][ T628] ? clear_bhb_loop+0x50/0xa0 [ 34.783923][ T628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.783945][ T628] RIP: 0033:0x7f408459ce59 [ 34.783962][ T628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.783978][ T628] RSP: 002b:00007f4085426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.783999][ T628] RAX: ffffffffffffffda RBX: 00007f4084815fa0 RCX: 00007f408459ce59 [ 34.784013][ T628] RDX: 0000000000000201 RSI: 0000200000001040 RDI: 0000000000000004 [ 34.784026][ T628] RBP: 00007f4085426090 R08: 0000000000000000 R09: 0000000000000000 [ 34.784036][ T628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.784047][ T628] R13: 00007f4084816038 R14: 00007f4084815fa0 R15: 00007fff21562a18 [ 34.784060][ T628] [ 35.077384][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.081217][ T36] audit: type=1400 audit(1780667383.619:165): avc: denied { create } for pid=632 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.085964][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.132808][ T36] audit: type=1400 audit(1780667383.679:166): avc: denied { setopt } for pid=632 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.136800][ T639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.127'. [ 35.242587][ T36] audit: type=1400 audit(1780667383.789:167): avc: denied { ioctl } for pid=645 comm="syz.1.130" path="socket:[6782]" dev="sockfs" ino=6782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.266859][ T36] audit: type=1400 audit(1780667383.789:168): avc: denied { connect } for pid=645 comm="syz.1.130" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.354849][ T652] syzkaller1: entered promiscuous mode [ 35.360389][ T652] syzkaller1: entered allmulticast mode [ 35.421220][ T326] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.449345][ T656] futex_wake_op: syz.1.135 tries to shift op by 144; fix this program [ 35.516253][ T662] netlink: 'syz.0.137': attribute type 27 has an invalid length. [ 35.581181][ T326] usb 4-1: Using ep0 maxpacket: 32 [ 35.592281][ T326] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.608355][ T326] usb 4-1: config 0 has no interface number 0 [ 35.622184][ T326] usb 4-1: config 0 interface 184 has no altsetting 0 [ 35.630572][ T326] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.644639][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.652908][ T326] usb 4-1: Product: syz [ 35.657151][ T326] usb 4-1: Manufacturer: syz [ 35.662018][ T326] usb 4-1: SerialNumber: syz [ 35.675737][ T326] usb 4-1: config 0 descriptor?? [ 35.686574][ T326] smsc75xx v1.0.0 [ 35.726053][ T673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.735147][ T673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.102213][ T326] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 36.119659][ T326] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 36.129880][ T326] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 36.140490][ T326] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 36.150393][ T326] usb 4-1: USB disconnect, device number 8 [ 36.198617][ T677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.208047][ T677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.259725][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.268883][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.325691][ T682] FAULT_INJECTION: forcing a failure. [ 36.325691][ T682] name failslab, interval 1, probability 0, space 0, times 0 [ 36.338415][ T682] CPU: 0 UID: 0 PID: 682 Comm: syz.1.146 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 36.338445][ T682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.338457][ T682] Call Trace: [ 36.338463][ T682] [ 36.338470][ T682] __dump_stack+0x21/0x30 [ 36.338498][ T682] dump_stack_lvl+0x140/0x1c0 [ 36.338519][ T682] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.338540][ T682] dump_stack+0x19/0x20 [ 36.338560][ T682] should_fail_ex+0x3d7/0x530 [ 36.338578][ T682] should_failslab+0xac/0x100 [ 36.338600][ T682] kmem_cache_alloc_noprof+0x42/0x410 [ 36.338617][ T682] ? security_inode_alloc+0x51/0x230 [ 36.338637][ T682] ? __cfi_make_kgid+0x10/0x10 [ 36.338658][ T682] security_inode_alloc+0x51/0x230 [ 36.338677][ T682] inode_init_always_gfp+0x756/0x9e0 [ 36.338700][ T682] alloc_inode+0xc5/0x270 [ 36.338718][ T682] iget_locked+0x195/0x980 [ 36.338733][ T682] ? __cfi_iget_locked+0x10/0x10 [ 36.338745][ T682] ? __kasan_check_write+0x18/0x20 [ 36.338755][ T682] ? rwsem_read_trylock+0x274/0x5b0 [ 36.338765][ T682] ? downgrade_write+0x460/0x460 [ 36.338781][ T682] kernfs_get_inode+0x50/0x850 [ 36.338794][ T682] kernfs_iop_lookup+0x213/0x320 [ 36.338807][ T682] path_openat+0x1315/0x34f0 [ 36.338822][ T682] ? do_filp_open+0x440/0x440 [ 36.338835][ T682] do_filp_open+0x1f5/0x440 [ 36.338847][ T682] ? __cfi_do_filp_open+0x10/0x10 [ 36.338861][ T682] ? alloc_fd+0x4e6/0x5a0 [ 36.338873][ T682] do_sys_openat2+0x134/0x1d0 [ 36.338890][ T682] ? fput+0x1a4/0x240 [ 36.338902][ T682] ? do_sys_open+0x100/0x100 [ 36.338915][ T682] ? ksys_write+0x1f3/0x260 [ 36.338924][ T682] ? __cfi_ksys_write+0x10/0x10 [ 36.338935][ T682] __x64_sys_openat+0x13a/0x170 [ 36.338948][ T682] x64_sys_call+0xe69/0x2ee0 [ 36.338958][ T682] do_syscall_64+0x57/0xf0 [ 36.338968][ T682] ? clear_bhb_loop+0x50/0xa0 [ 36.338981][ T682] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.338992][ T682] RIP: 0033:0x7f408459ce59 [ 36.339003][ T682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.339011][ T682] RSP: 002b:00007f4085426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.339023][ T682] RAX: ffffffffffffffda RBX: 00007f4084815fa0 RCX: 00007f408459ce59 [ 36.339031][ T682] RDX: 0000000000000201 RSI: 0000200000001040 RDI: 0000000000000004 [ 36.339038][ T682] RBP: 00007f4085426090 R08: 0000000000000000 R09: 0000000000000000 [ 36.339044][ T682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.339051][ T682] R13: 00007f4084816038 R14: 00007f4084815fa0 R15: 00007fff21562a18 [ 36.339059][ T682] [ 36.674772][ T686] netlink: 64 bytes leftover after parsing attributes in process `syz.1.148'. [ 37.176197][ T730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.191356][ T730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.231193][ T326] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.300358][ T736] netlink: 'syz.1.165': attribute type 27 has an invalid length. [ 37.392262][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.403605][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.413569][ T326] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 37.432117][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.445613][ T326] usb 4-1: config 0 descriptor?? [ 37.461561][ T743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.470111][ T743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.581204][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 37.732563][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 37.741208][ T10] usb 2-1: config 9 has an invalid interface number: 86 but max is 1 [ 37.749324][ T10] usb 2-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 37.759453][ T10] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 37.768372][ T10] usb 2-1: config 9 has no interface number 0 [ 37.774509][ T10] usb 2-1: config 9 interface 86 has no altsetting 0 [ 37.782580][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=a0.64 [ 37.791676][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.799669][ T10] usb 2-1: Product: 碞ꌿ剄䭰毋匭،䣼둆쭭뗷﬈꨻﯌ﹼꎃ叭ꍙ뼉→ꪵ㰇佻ﳾ鷎묘ⲻ毼ᅊ龹녫둔瑃䨳挌씦냲竁塩羀鎤緖꜉풾༫⌺糦ﴔꂒౘ흌䄿宙㡛핖꒽뮴怅獒ᬭ鶺㴗ᥜ恏ݒ撯 某Ჴᅃ耾뚪㸜⍞ᰱ헽嫜வ摋؊狨퐱『菞쬕㷞跀皤唟鐸ၴ [ 37.828530][ T10] usb 2-1: Manufacturer: 䐮쾧퓢ﭯ㰐삐諛⥄ᝩ [ 37.862796][ T716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.871451][ T716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.909847][ T326] usbhid 4-1:0.0: can't add hid device: -71 [ 37.918396][ T326] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 37.930500][ T326] usb 4-1: USB disconnect, device number 9 [ 37.992170][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 37.992186][ T36] audit: type=1400 audit(1780667386.539:180): avc: denied { create } for pid=760 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.040512][ T36] audit: type=1400 audit(1780667386.579:181): avc: denied { write } for pid=760 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 38.068831][ T10] usb 2-1: Found UVC 0.00 device 碞ꌿ剄䭰毋匭،䣼둆쭭뗷﬈꨻﯌ﹼꎃ叭ꍙ뼉→ꪵ㰇佻ﳾ鷎묘ⲻ毼ᅊ龹녫둔瑃䨳挌씦냲竁塩羀鎤緖꜉풾༫⌺糦ﴔꂒౘ흌䄿宙㡛핖꒽뮴怅獒ᬭ鶺㴗ᥜ恏ݒ撯 某Ჴᅃ耾뚪㸜⍞ᰱ헽嫜வ摋؊狨퐱『菞쬕㷞跀皤唟鐸ၴ (06f8:300c) [ 38.101529][ T10] usb 2-1: No valid video chain found. [ 38.109614][ T10] usb 2-1: USB disconnect, device number 9 [ 38.116010][ T36] audit: type=1400 audit(1780667386.669:182): avc: denied { read } for pid=760 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.169770][ T36] audit: type=1400 audit(1780667386.709:183): avc: denied { write } for pid=760 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.195304][ T768] IPv6: Can't replace route, no match found [ 38.214931][ T770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 38.345030][ T36] audit: type=1400 audit(1780667386.889:184): avc: denied { watch } for pid=771 comm="syz.0.178" path="/64/bus" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.454784][ T781] netlink: 'syz.3.181': attribute type 27 has an invalid length. [ 38.480514][ T783] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 38.494585][ T786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.503497][ T786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.540478][ T783] netlink: 'syz.3.182': attribute type 15 has an invalid length. [ 38.548325][ T783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 38.627293][ T36] audit: type=1400 audit(1780667387.169:185): avc: denied { ioctl } for pid=795 comm="syz.1.187" path="socket:[7552]" dev="sockfs" ino=7552 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.657931][ T36] audit: type=1400 audit(1780667387.169:186): avc: denied { setattr } for pid=795 comm="syz.1.187" path="socket:[7552]" dev="sockfs" ino=7552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.732626][ T805] cgroup: fork rejected by pids controller in /syz1 [ 38.811655][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.961349][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 38.967464][ T10] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 38.975692][ T10] usb 4-1: config 0 has no interface number 0 [ 38.981811][ T10] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 38.993487][ T10] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 39.004627][ T10] usb 4-1: config 0 interface 200 has no altsetting 0 [ 39.012819][ T10] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 39.021949][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.030297][ T10] usb 4-1: Product: syz [ 39.035075][ T10] usb 4-1: Manufacturer: syz [ 39.037167][ T938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 39.039746][ T10] usb 4-1: SerialNumber: syz [ 39.056870][ T10] usb 4-1: config 0 descriptor?? [ 39.062004][ T326] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 39.085878][ T942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.091204][ T36] audit: type=1400 audit(1780667387.629:187): avc: denied { map } for pid=941 comm="syz.2.195" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.094523][ T942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.120098][ T36] audit: type=1400 audit(1780667387.629:188): avc: denied { write } for pid=941 comm="syz.2.195" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.232921][ T326] usb 2-1: not running at top speed; connect to a high speed hub [ 39.241713][ T326] usb 2-1: config 9 has an invalid interface number: 86 but max is 1 [ 39.249791][ T326] usb 2-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 39.259938][ T326] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 39.268824][ T326] usb 2-1: config 9 has no interface number 0 [ 39.276253][ T326] usb 2-1: config 9 interface 86 has no altsetting 0 [ 39.284454][ T326] usb 2-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=a0.64 [ 39.293626][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.301684][ T326] usb 2-1: Product: 碞ꌿ剄䭰毋匭،䣼둆쭭뗷﬈꨻﯌ﹼꎃ叭ꍙ뼉→ꪵ㰇佻ﳾ鷎묘ⲻ毼ᅊ龹녫둔瑃䨳挌씦냲竁塩羀鎤緖꜉풾༫⌺糦ﴔꂒౘ흌䄿宙㡛핖꒽뮴怅獒ᬭ鶺㴗ᥜ恏ݒ撯 某Ჴᅃ耾뚪㸜⍞ᰱ헽嫜வ摋؊狨퐱『菞쬕㷞跀皤唟鐸ၴ [ 39.330647][ T326] usb 2-1: Manufacturer: 䐮쾧퓢ﭯ㰐삐諛⥄ᝩ [ 39.426335][ T949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.434849][ T950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.435001][ T949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.444667][ T950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.543731][ T326] usb 2-1: Found UVC 0.00 device 碞ꌿ剄䭰毋匭،䣼둆쭭뗷﬈꨻﯌ﹼꎃ叭ꍙ뼉→ꪵ㰇佻ﳾ鷎묘ⲻ毼ᅊ龹녫둔瑃䨳挌씦냲竁塩羀鎤緖꜉풾༫⌺糦ﴔꂒౘ흌䄿宙㡛핖꒽뮴怅獒ᬭ鶺㴗ᥜ恏ݒ撯 某Ჴᅃ耾뚪㸜⍞ᰱ헽嫜வ摋؊狨퐱『菞쬕㷞跀皤唟鐸ၴ (06f8:300c) [ 39.574816][ T326] usb 2-1: No valid video chain found. [ 39.581706][ T326] usb 2-1: USB disconnect, device number 10 [ 39.687635][ T952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.198'. [ 39.747007][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.755511][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.768760][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.777675][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.783739][ T10] usb 4-1: USB disconnect, device number 10 [ 40.018661][ T960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'. [ 40.079826][ T968] FAULT_INJECTION: forcing a failure. [ 40.079826][ T968] name failslab, interval 1, probability 0, space 0, times 0 [ 40.092636][ T968] CPU: 0 UID: 0 PID: 968 Comm: syz.1.205 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 40.092681][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.092693][ T968] Call Trace: [ 40.092699][ T968] [ 40.092706][ T968] __dump_stack+0x21/0x30 [ 40.092734][ T968] dump_stack_lvl+0x140/0x1c0 [ 40.092757][ T968] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.092789][ T968] dump_stack+0x19/0x20 [ 40.092813][ T968] should_fail_ex+0x3d7/0x530 [ 40.092833][ T968] should_failslab+0xac/0x100 [ 40.092854][ T968] __kmalloc_cache_noprof+0x41/0x470 [ 40.092879][ T968] ? cgroup_file_open+0x9b/0x390 [ 40.092911][ T968] ? mutex_unlock+0x90/0x240 [ 40.092941][ T968] cgroup_file_open+0x9b/0x390 [ 40.092972][ T968] kernfs_fop_open+0x9eb/0xe10 [ 40.093000][ T968] ? __cfi_kernfs_fop_open+0x10/0x10 [ 40.093026][ T968] do_dentry_open+0x978/0x1510 [ 40.093058][ T968] vfs_open+0x86/0x240 [ 40.093082][ T968] ? __cfi_vfs_open+0x10/0x10 [ 40.093107][ T968] ? may_open+0x352/0x430 [ 40.093134][ T968] path_openat+0x2bb1/0x34f0 [ 40.093162][ T968] ? stack_depot_save_flags+0x38/0x800 [ 40.093185][ T968] ? kasan_save_track+0x3e/0x80 [ 40.093206][ T968] ? kasan_save_alloc_info+0x40/0x50 [ 40.093238][ T968] ? do_sys_openat2+0xda/0x1d0 [ 40.093263][ T968] ? __x64_sys_openat+0x13a/0x170 [ 40.093287][ T968] ? x64_sys_call+0xe69/0x2ee0 [ 40.093311][ T968] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.093336][ T968] ? do_filp_open+0x440/0x440 [ 40.093362][ T968] do_filp_open+0x1f5/0x440 [ 40.093391][ T968] ? __cfi_do_filp_open+0x10/0x10 [ 40.093418][ T968] ? alloc_fd+0x4e6/0x5a0 [ 40.093438][ T968] do_sys_openat2+0x134/0x1d0 [ 40.093460][ T968] ? fput+0x1a4/0x240 [ 40.093483][ T968] ? do_sys_open+0x100/0x100 [ 40.093508][ T968] ? ksys_write+0x1f3/0x260 [ 40.093528][ T968] ? __cfi_ksys_write+0x10/0x10 [ 40.093549][ T968] __x64_sys_openat+0x13a/0x170 [ 40.093576][ T968] x64_sys_call+0xe69/0x2ee0 [ 40.093595][ T968] do_syscall_64+0x57/0xf0 [ 40.093614][ T968] ? clear_bhb_loop+0x50/0xa0 [ 40.093649][ T968] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.093671][ T968] RIP: 0033:0x7f408459ce59 [ 40.093688][ T968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.093704][ T968] RSP: 002b:00007f4085426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.093727][ T968] RAX: ffffffffffffffda RBX: 00007f4084815fa0 RCX: 00007f408459ce59 [ 40.093742][ T968] RDX: 0000000000000201 RSI: 0000200000001040 RDI: 0000000000000004 [ 40.093756][ T968] RBP: 00007f4085426090 R08: 0000000000000000 R09: 0000000000000000 [ 40.093768][ T968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.093779][ T968] R13: 00007f4084816038 R14: 00007f4084815fa0 R15: 00007fff21562a18 [ 40.093797][ T968] [ 40.501198][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.652265][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.663583][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.672675][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.681719][ T10] usb 4-1: config 0 descriptor?? [ 40.848851][ T36] audit: type=1400 audit(1780667389.389:189): avc: denied { read write } for pid=983 comm="syz.1.212" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.915932][ T988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.925235][ T988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.983709][ T990] netlink: 'syz.0.215': attribute type 27 has an invalid length. [ 41.002987][ T992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 41.022634][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.031272][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.040212][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.048780][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.081215][ T45] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 41.113328][ T10] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 41.123951][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input6 [ 41.201403][ T10] keytouch 0003:0926:3333.0005: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 41.242244][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 41.253181][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 41.264119][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 41.277114][ T45] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 41.286201][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.294841][ T45] usb 2-1: config 0 descriptor?? [ 41.300089][ T984] raw-gadget.9 gadget.1: fail, usb_ep_enable returned -22 [ 41.539639][ T1004] syzkaller0: entered promiscuous mode [ 41.585089][ T1003] syzkaller0: left promiscuous mode [ 41.593739][ T1008] netlink: 136 bytes leftover after parsing attributes in process `syz.0.223'. [ 41.607016][ T1010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.615768][ T1010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.639129][ T1012] rust_binder: 1011:1012 transaction to 0 failed: ENOENT [ 41.639310][ T1012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 41.703792][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.712445][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.713995][ T45] hid-multitouch 0003:1FD2:6007.0006: ignoring exceeding usage max [ 41.728962][ T45] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x2 [ 41.737445][ T45] hid-multitouch 0003:1FD2:6007.0006: hidraw3: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 41.927244][ T10] usb 2-1: USB disconnect, device number 11 [ 42.036877][ T1017] capability: warning: `syz.3.227' uses deprecated v2 capabilities in a way that may be insecure [ 42.192183][ T1021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 42.213999][ T1023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.222629][ T1023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.246109][ T1027] FAULT_INJECTION: forcing a failure. [ 42.246109][ T1027] name failslab, interval 1, probability 0, space 0, times 0 [ 42.258859][ T1027] CPU: 1 UID: 0 PID: 1027 Comm: syz.0.231 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 42.258887][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 42.258898][ T1027] Call Trace: [ 42.258905][ T1027] [ 42.258913][ T1027] __dump_stack+0x21/0x30 [ 42.258943][ T1027] dump_stack_lvl+0x140/0x1c0 [ 42.258963][ T1027] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.258977][ T1027] ? release_sock+0x171/0x1f0 [ 42.258992][ T1027] dump_stack+0x19/0x20 [ 42.259015][ T1027] should_fail_ex+0x3d7/0x530 [ 42.259042][ T1027] should_failslab+0xac/0x100 [ 42.259064][ T1027] kmem_cache_alloc_node_noprof+0x45/0x420 [ 42.259079][ T1027] ? netlink_data_ready+0x20/0x20 [ 42.259093][ T1027] ? __alloc_skb+0x108/0x370 [ 42.259105][ T1027] __alloc_skb+0x108/0x370 [ 42.259118][ T1027] netlink_alloc_large_skb+0xf7/0x1b0 [ 42.259131][ T1027] netlink_sendmsg+0x594/0xb10 [ 42.259150][ T1027] ? __cfi_netlink_sendmsg+0x10/0x10 [ 42.259168][ T1027] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 42.259189][ T1027] ? security_socket_sendmsg+0x3d/0x100 [ 42.259212][ T1027] ? __cfi_netlink_sendmsg+0x10/0x10 [ 42.259223][ T1027] ____sys_sendmsg+0x9de/0xa30 [ 42.259233][ T1027] ? __import_iovec+0x5ad/0x7c0 [ 42.259245][ T1027] ? __sys_sendmsg_sock+0x50/0x50 [ 42.259255][ T1027] ? import_iovec+0x80/0xb0 [ 42.259267][ T1027] ___sys_sendmsg+0x2a6/0x370 [ 42.259277][ T1027] ? __sys_sendmsg+0x2a0/0x2a0 [ 42.259295][ T1027] ? proc_fail_nth_write+0x184/0x220 [ 42.259320][ T1027] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 42.259350][ T1027] __x64_sys_sendmsg+0x1fb/0x2d0 [ 42.259363][ T1027] ? fput+0x1a4/0x240 [ 42.259376][ T1027] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 42.259386][ T1027] ? ksys_write+0x1f3/0x260 [ 42.259397][ T1027] ? __kasan_check_read+0x15/0x20 [ 42.259407][ T1027] x64_sys_call+0x2a4c/0x2ee0 [ 42.259416][ T1027] do_syscall_64+0x57/0xf0 [ 42.259434][ T1027] ? clear_bhb_loop+0x50/0xa0 [ 42.259456][ T1027] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.259477][ T1027] RIP: 0033:0x7fe4d039ce59 [ 42.259493][ T1027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.259504][ T1027] RSP: 002b:00007fe4d122d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.259516][ T1027] RAX: ffffffffffffffda RBX: 00007fe4d0615fa0 RCX: 00007fe4d039ce59 [ 42.259525][ T1027] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 42.259533][ T1027] RBP: 00007fe4d122d090 R08: 0000000000000000 R09: 0000000000000000 [ 42.259540][ T1027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.259546][ T1027] R13: 00007fe4d0616038 R14: 00007fe4d0615fa0 R15: 00007ffd029de188 [ 42.259554][ T1027] [ 42.371202][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 42.388095][ T1033] futex_wake_op: syz.0.234 tries to shift op by 144; fix this program [ 42.545242][ T1038] fuse: Bad value for 'group_id' [ 42.567139][ T1038] fuse: Bad value for 'group_id' [ 42.574673][ T1041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.583913][ T1041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.625197][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.633726][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.839764][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.848371][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.180430][ T1057] netlink: 'syz.0.244': attribute type 27 has an invalid length. [ 43.251902][ T1063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.260476][ T1063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.825313][ T1065] futex_wake_op: syz.2.247 tries to shift op by 144; fix this program [ 44.052971][ T1071] __nla_validate_parse: 2 callbacks suppressed [ 44.053011][ T1071] netlink: 68 bytes leftover after parsing attributes in process `syz.0.249'. [ 44.096010][ T1073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.105341][ T1073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.222077][ T1075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.230658][ T1075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.763745][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 44.795470][ T1087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.804103][ T1087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.829123][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 44.829153][ T36] audit: type=1400 audit(1780667393.369:212): avc: denied { create } for pid=1092 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.881168][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.048939][ T1100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.057516][ T1100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.325006][ T36] audit: type=1400 audit(1780667393.869:213): avc: denied { map } for pid=1101 comm="syz.0.264" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.325141][ T1102] rust_binder: 1101:1102 transaction to 0 failed: EINVAL [ 45.348799][ T36] audit: type=1400 audit(1780667393.869:214): avc: denied { call } for pid=1101 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 45.365298][ T1104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.378568][ T36] audit: type=1400 audit(1780667393.869:215): avc: denied { transfer } for pid=1101 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 45.385625][ T1104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.426170][ T1106] process 'syz.3.266' launched './file0' with NULL argv: empty string added [ 45.435154][ T36] audit: type=1400 audit(1780667393.989:216): avc: denied { execute_no_trans } for pid=1105 comm="syz.3.266" path="/44/file0" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.459673][ T36] audit: type=1400 audit(1780667394.009:217): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.660675][ T1123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.669359][ T1123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.769419][ T1125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.777950][ T1125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.930690][ T1128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.939274][ T1128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.190318][ T1130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.198851][ T1130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.523045][ T1136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.531691][ T1136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.833753][ T1147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.842354][ T1147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.378438][ T1153] futex_wake_op: syz.3.287 tries to shift op by 144; fix this program [ 47.595444][ T1156] FAULT_INJECTION: forcing a failure. [ 47.595444][ T1156] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.608913][ T1156] CPU: 0 UID: 0 PID: 1156 Comm: syz.0.288 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 47.608947][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 47.608959][ T1156] Call Trace: [ 47.608967][ T1156] [ 47.608975][ T1156] __dump_stack+0x21/0x30 [ 47.609008][ T1156] dump_stack_lvl+0x140/0x1c0 [ 47.609039][ T1156] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.609067][ T1156] dump_stack+0x19/0x20 [ 47.609092][ T1156] should_fail_ex+0x3d7/0x530 [ 47.609107][ T1156] should_fail+0xf/0x20 [ 47.609119][ T1156] should_fail_usercopy+0x1e/0x30 [ 47.609138][ T1156] _copy_from_iter+0x1a9/0x1510 [ 47.609159][ T1156] ? kmalloc_reserve+0xcf/0x4f0 [ 47.609187][ T1156] ? __virt_addr_valid+0x2a6/0x380 [ 47.609211][ T1156] ? __cfi__copy_from_iter+0x10/0x10 [ 47.609232][ T1156] ? __check_object_size+0x527/0x830 [ 47.609254][ T1156] ? __cfi___check_object_size+0x10/0x10 [ 47.609276][ T1156] ? skb_put+0x112/0x1f0 [ 47.609300][ T1156] netlink_sendmsg+0x68e/0xb10 [ 47.609321][ T1156] ? __cfi_netlink_sendmsg+0x10/0x10 [ 47.609341][ T1156] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 47.609363][ T1156] ? security_socket_sendmsg+0x3d/0x100 [ 47.609388][ T1156] ? __cfi_netlink_sendmsg+0x10/0x10 [ 47.609407][ T1156] ____sys_sendmsg+0x9de/0xa30 [ 47.609428][ T1156] ? __import_iovec+0x5ad/0x7c0 [ 47.609450][ T1156] ? __sys_sendmsg_sock+0x50/0x50 [ 47.609471][ T1156] ? import_iovec+0x80/0xb0 [ 47.609495][ T1156] ___sys_sendmsg+0x2a6/0x370 [ 47.609514][ T1156] ? __sys_sendmsg+0x2a0/0x2a0 [ 47.609533][ T1156] ? proc_fail_nth_write+0x184/0x220 [ 47.609560][ T1156] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 47.609601][ T1156] __x64_sys_sendmsg+0x1fb/0x2d0 [ 47.609621][ T1156] ? fput+0x1a4/0x240 [ 47.609646][ T1156] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 47.609665][ T1156] ? ksys_write+0x1f3/0x260 [ 47.609687][ T1156] ? __kasan_check_read+0x15/0x20 [ 47.609707][ T1156] x64_sys_call+0x2a4c/0x2ee0 [ 47.609727][ T1156] do_syscall_64+0x57/0xf0 [ 47.609748][ T1156] ? clear_bhb_loop+0x50/0xa0 [ 47.609771][ T1156] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.609795][ T1156] RIP: 0033:0x7fe4d039ce59 [ 47.609813][ T1156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.609829][ T1156] RSP: 002b:00007fe4d122d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.609853][ T1156] RAX: ffffffffffffffda RBX: 00007fe4d0615fa0 RCX: 00007fe4d039ce59 [ 47.609868][ T1156] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 47.609883][ T1156] RBP: 00007fe4d122d090 R08: 0000000000000000 R09: 0000000000000000 [ 47.609895][ T1156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.609909][ T1156] R13: 00007fe4d0616038 R14: 00007fe4d0615fa0 R15: 00007ffd029de188 [ 47.609925][ T1156] [ 47.918641][ T1160] netlink: 'syz.0.290': attribute type 10 has an invalid length. [ 47.926438][ T1160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'. [ 47.935439][ T1160] veth1: entered promiscuous mode [ 48.036630][ T1170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.045229][ T1170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.579256][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 48.714227][ T1182] futex_wake_op: syz.3.299 tries to shift op by 144; fix this program [ 48.796125][ T1185] IPv6: Can't replace route, no match found [ 48.829680][ T1187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.839275][ T1187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.849605][ T1189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.859886][ T1189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.904979][ T1193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 48.934091][ T1195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.944343][ T1195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.182054][ T36] audit: type=1400 audit(1780667397.729:218): avc: denied { read write } for pid=1198 comm="syz.3.306" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.184089][ T1199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.206048][ T36] audit: type=1400 audit(1780667397.729:219): avc: denied { open } for pid=1198 comm="syz.3.306" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.215392][ T1199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.238470][ T36] audit: type=1400 audit(1780667397.729:220): avc: denied { ioctl } for pid=1198 comm="syz.3.306" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.402654][ T1206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.411424][ T1206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.422432][ T36] audit: type=1400 audit(1780667397.969:221): avc: denied { associate } for pid=1205 comm="syz.2.309" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.465994][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.474535][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.783261][ T1211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 49.816877][ T1215] futex_wake_op: syz.3.313 tries to shift op by 144; fix this program [ 49.926621][ T1223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.940870][ T1223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.958034][ T1228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.966916][ T1228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.509767][ T1239] futex_wake_op: syz.2.323 tries to shift op by 144; fix this program [ 50.601408][ T1247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.609981][ T1247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.890515][ T1252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.899127][ T1252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.176227][ T1255] netlink: 'syz.3.328': attribute type 27 has an invalid length. [ 51.195853][ T36] audit: type=1400 audit(1780667399.739:222): avc: denied { name_bind } for pid=1256 comm="syz.3.329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.218416][ T36] audit: type=1400 audit(1780667399.739:223): avc: denied { node_bind } for pid=1256 comm="syz.3.329" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.267723][ T1259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 51.409511][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 51.434945][ T1267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.443513][ T1267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.446149][ T1269] futex_wake_op: syz.0.334 tries to shift op by 144; fix this program [ 51.537719][ T1276] loop0: detected capacity change from 0 to 7 [ 51.594309][ T36] audit: type=1400 audit(1780667400.139:224): avc: denied { write } for pid=1275 comm="syz.0.337" name="unix" dev="proc" ino=4026532361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.723911][ T1281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.732488][ T1281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.742490][ T1281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.750997][ T1281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.968378][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 52.019889][ T1290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.028558][ T1290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.632790][ T1306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.642396][ T1306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.842777][ T1309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.851806][ T1309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.171221][ T1311] netlink: 'syz.3.349': attribute type 27 has an invalid length. [ 53.286294][ T1320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.352'. [ 53.296413][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.306189][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.315770][ T1320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.324373][ T1320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.431615][ T1325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.440160][ T1325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.681751][ T1328] Zero length message leads to an empty skb [ 53.805283][ T1334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.813839][ T1334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.842479][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.851079][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.024617][ T1340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.033191][ T1340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.332923][ T1342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.341563][ T1342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.373467][ T36] audit: type=1400 audit(1780667402.919:225): avc: denied { getattr } for pid=1343 comm="syz.3.363" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.409488][ T1346] futex_wake_op: syz.3.364 tries to shift op by 144; fix this program [ 54.566014][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.574670][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.176934][ T36] audit: type=1400 audit(1780667403.719:226): avc: denied { write } for pid=1361 comm="syz.2.370" path="socket:[10980]" dev="sockfs" ino=10980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.236348][ T1375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.245756][ T1375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.340784][ T1379] raw_sendmsg: syz.3.377 forgot to set AF_INET. Fix it! [ 55.341337][ T1380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.356272][ T36] audit: type=1400 audit(1780667403.899:227): avc: denied { setopt } for pid=1378 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.367731][ T1380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.376785][ T36] audit: type=1400 audit(1780667403.909:228): avc: denied { bind } for pid=1378 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.410875][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.419553][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.790723][ T36] audit: type=1326 audit(1780667404.329:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1388 comm="syz.2.380" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b2b99ce59 code=0x0 [ 55.820078][ T1393] netlink: 'syz.0.382': attribute type 5 has an invalid length. [ 55.840900][ T1395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.849938][ T1395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.970710][ T1404] netlink: 68 bytes leftover after parsing attributes in process `syz.3.387'. [ 56.061796][ T1410] netlink: 'syz.3.390': attribute type 27 has an invalid length. [ 56.130489][ T36] audit: type=1400 audit(1780667404.669:230): avc: denied { map } for pid=1411 comm="syz.3.391" path="socket:[11179]" dev="sockfs" ino=11179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 56.372306][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.380814][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.643023][ T1420] overlayfs: upper fs does not support tmpfile. [ 56.668875][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 56.689627][ T1426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 56.735070][ T1434] netlink: 'syz.2.401': attribute type 27 has an invalid length. [ 56.751714][ T1436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.760437][ T1436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.913214][ T1438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.916740][ T36] audit: type=1400 audit(1780667405.459:231): avc: denied { append } for pid=1437 comm="syz.0.403" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.922611][ T1438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.953818][ T1440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.964405][ T1440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.990543][ T1445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.000275][ T1445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.008446][ T36] audit: type=1400 audit(1780667405.539:232): avc: denied { ioctl } for pid=1437 comm="syz.0.403" path="cgroup:[4026532299]" dev="nsfs" ino=4026532299 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.010828][ T1445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.041856][ T1445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.280879][ T1447] IPv6: Can't replace route, no match found [ 57.296192][ T1449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.407'. [ 57.313817][ T1451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.322431][ T1451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.541797][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.562532][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.583264][ T1458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.601255][ T1458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.612863][ T1458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.621527][ T1458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.631562][ T1458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.640163][ T1458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.654332][ T36] audit: type=1400 audit(1780667406.199:233): avc: denied { mounton } for pid=1460 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.692785][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.699872][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.707161][ T1460] bridge_slave_0: entered allmulticast mode [ 57.713846][ T1460] bridge_slave_0: entered promiscuous mode [ 57.720318][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.727415][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.734503][ T1460] bridge_slave_1: entered allmulticast mode [ 57.740710][ T1460] bridge_slave_1: entered promiscuous mode [ 57.786433][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.793506][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.800772][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.807820][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.831055][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.838583][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.850625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.857732][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.867625][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.868473][ T1465] usb usb7: usbfs: process 1465 (syz.2.413) did not claim interface 0 before use [ 57.874710][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.875485][ T36] audit: type=1400 audit(1780667406.409:234): avc: denied { write } for pid=1464 comm="syz.2.413" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.926871][ T1460] veth0_vlan: entered promiscuous mode [ 57.937959][ T1460] veth1_macvtap: entered promiscuous mode [ 57.957583][ T36] audit: type=1400 audit(1780667406.499:235): avc: denied { mounton } for pid=1460 comm="syz-executor" path="/root/syzkaller.a17KJ8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.015688][ T36] audit: type=1400 audit(1780667406.559:236): avc: denied { connect } for pid=1470 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.051790][ T36] audit: type=1400 audit(1780667406.599:237): avc: denied { create } for pid=1474 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.077497][ T1477] netlink: 'syz.2.418': attribute type 27 has an invalid length. [ 58.151483][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.175914][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.214443][ T1493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.225821][ T1497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.236755][ T1493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.238387][ T1497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.246174][ T1500] IPv6: Can't replace route, no match found [ 58.278050][ T1505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.427'. [ 58.314288][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 58.440694][ T1521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.449254][ T1521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.521194][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.672224][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.683229][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.692314][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.701069][ T45] usb 5-1: config 0 descriptor?? [ 58.808086][ T36] audit: type=1400 audit(1780667407.349:238): avc: denied { create } for pid=1530 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.848793][ T1538] netlink: 'syz.3.440': attribute type 27 has an invalid length. [ 58.884773][ T1543] futex_wake_op: syz.3.442 tries to shift op by 144; fix this program [ 59.024943][ T1552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 59.119701][ T1557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 59.123501][ T45] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 59.146608][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input8 [ 59.183546][ T1561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.192333][ T1561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.229436][ T45] keytouch 0003:0926:3333.0007: input,hidraw3: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 59.277217][ T1564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.286680][ T1564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.337171][ T36] audit: type=1400 audit(1780667407.879:239): avc: denied { read } for pid=1569 comm="syz.3.454" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.338262][ T1570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.366797][ T1570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.377378][ T1572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.386536][ T1572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.394998][ T1570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.403653][ T1570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.762681][ T1574] netlink: 68 bytes leftover after parsing attributes in process `syz.2.455'. [ 59.828438][ T1582] netlink: 'syz.0.459': attribute type 27 has an invalid length. [ 59.849522][ T1585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.858104][ T1585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.988046][ T1602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 60.012469][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.021011][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.030111][ T1606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.038688][ T1606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.559796][ T1610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.570014][ T1610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.585933][ T36] audit: type=1400 audit(1780667409.129:240): avc: denied { append } for pid=1611 comm="syz.0.469" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.623955][ T1614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.634399][ T1614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.644685][ T1615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.656617][ T1615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.844940][ T1634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.853559][ T1634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.868551][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.877111][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.204152][ T1649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.212793][ T1649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.409979][ T1651] can0: slcan on ttynull. [ 61.442799][ T1650] can0 (unregistered): slcan off ttynull. [ 61.502210][ T1653] __nla_validate_parse: 3 callbacks suppressed [ 61.502229][ T1653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.486'. [ 61.579565][ T1658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.488'. [ 61.648656][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.660550][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.741110][ T1672] netlink: 68 bytes leftover after parsing attributes in process `syz.0.494'. [ 61.763280][ T1674] netlink: 'syz.0.495': attribute type 27 has an invalid length. [ 61.783799][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.792369][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.802517][ T1678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.811041][ T1680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.812464][ T1678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.819841][ T1680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.201974][ T1684] netlink: 72 bytes leftover after parsing attributes in process `syz.2.500'. [ 62.211019][ T1684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 62.270546][ T1695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.279311][ T1695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.351484][ T1697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 62.402390][ T1705] netlink: 68 bytes leftover after parsing attributes in process `syz.4.509'. [ 62.425500][ T1708] usb usb8: check_ctrlrecip: process 1708 (syz.4.510) requesting ep 01 but needs 81 [ 62.485727][ T1717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.494289][ T1717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.522853][ T1720] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.553840][ T1723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 62.588817][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 62.588849][ T36] audit: type=1400 audit(1780667411.129:251): avc: denied { read } for pid=1726 comm="syz.0.518" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.629765][ T36] audit: type=1400 audit(1780667411.169:252): avc: denied { mounton } for pid=1728 comm="syz.0.519" path="/161/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.629928][ T1729] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 62.683190][ T1731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 62.730797][ T1737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.739537][ T1737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.829641][ T1739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.839018][ T1739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.030841][ T1743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.039410][ T1743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.296664][ T1750] futex_wake_op: syz.3.528 tries to shift op by 144; fix this program [ 63.354084][ T1752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 63.376127][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.385167][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.554439][ T36] audit: type=1400 audit(1780667412.099:253): avc: denied { write } for pid=1766 comm="syz.2.535" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.635552][ T1773] futex_wake_op: syz.4.538 tries to shift op by 144; fix this program [ 63.701554][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.710138][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.905160][ T1782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.913749][ T1782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.366094][ T1794] futex_wake_op: syz.4.548 tries to shift op by 144; fix this program [ 64.381720][ T36] audit: type=1400 audit(1780667412.929:254): avc: denied { read } for pid=1795 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.406962][ T36] audit: type=1400 audit(1780667412.929:255): avc: denied { audit_write } for pid=1795 comm="syz.0.549" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.448425][ T36] audit: type=1400 audit(1780667412.989:256): avc: denied { mount } for pid=1802 comm="syz.4.551" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.471361][ T1798] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 64.509541][ T36] audit: type=1400 audit(1780667413.049:257): avc: denied { unmount } for pid=1460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.640139][ T1819] netlink: 'syz.3.556': attribute type 27 has an invalid length. [ 64.669131][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.677704][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.690513][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.699103][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.717901][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.726831][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.737490][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.746023][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.222538][ T1827] futex_wake_op: syz.3.559 tries to shift op by 144; fix this program [ 65.306003][ T1835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.315539][ T1834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.316322][ T1835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.326685][ T1834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.340819][ T1835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.350162][ T1835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.537642][ T1841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.546338][ T1841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.913893][ T1849] futex_wake_op: syz.3.569 tries to shift op by 144; fix this program [ 65.984926][ T1852] capability: warning: `syz.3.570' uses 32-bit capabilities (legacy support in use) [ 65.995856][ T36] audit: type=1400 audit(1780667414.549:258): avc: denied { getopt } for pid=1851 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.093067][ T1856] input: syz0 as /devices/virtual/input/input9 [ 66.134372][ T1864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.143037][ T1864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.152383][ T1864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.160983][ T1864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.179805][ T1865] netlink: 'syz.0.575': attribute type 93 has an invalid length. [ 66.275799][ T1870] cgroup: fork rejected by pids controller in /syz0 [ 66.329519][ T1993] futex_wake_op: syz.0.578 tries to shift op by 144; fix this program [ 66.523647][ T2002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.532254][ T2002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.141794][ T2008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.150404][ T2008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.578412][ T2010] __nla_validate_parse: 8 callbacks suppressed [ 67.578447][ T2010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 67.605359][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 67.617825][ T2014] FAULT_INJECTION: forcing a failure. [ 67.617825][ T2014] name failslab, interval 1, probability 0, space 0, times 0 [ 67.630060][ T2016] tmpfs: Bad value for 'huge' [ 67.630635][ T2014] CPU: 1 UID: 0 PID: 2014 Comm: syz.4.588 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 67.630671][ T2014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.630683][ T2014] Call Trace: [ 67.630689][ T2014] [ 67.630696][ T2014] __dump_stack+0x21/0x30 [ 67.630726][ T2014] dump_stack_lvl+0x140/0x1c0 [ 67.630748][ T2014] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.630774][ T2014] dump_stack+0x19/0x20 [ 67.630796][ T2014] should_fail_ex+0x3d7/0x530 [ 67.630814][ T2014] should_failslab+0xac/0x100 [ 67.630835][ T2014] kmem_cache_alloc_noprof+0x42/0x410 [ 67.630853][ T2014] ? security_inode_alloc+0x51/0x230 [ 67.630874][ T2014] security_inode_alloc+0x51/0x230 [ 67.630895][ T2014] inode_init_always_gfp+0x756/0x9e0 [ 67.630916][ T2014] alloc_inode+0xc5/0x270 [ 67.630938][ T2014] new_inode_pseudo+0x19/0x40 [ 67.630958][ T2014] path_from_stashed+0x207/0x8a0 [ 67.630983][ T2014] ? __cfi_path_from_stashed+0x10/0x10 [ 67.631007][ T2014] ? selinux_file_ioctl+0x732/0x1480 [ 67.631032][ T2014] ? vfs_write+0x9a4/0xf90 [ 67.631050][ T2014] open_namespace+0x9a/0x180 [ 67.631070][ T2014] ? __cfi_open_namespace+0x10/0x10 [ 67.631090][ T2014] ? __kasan_check_write+0x18/0x20 [ 67.631108][ T2014] ns_ioctl+0x602/0xc20 [ 67.631128][ T2014] ? __cfi_ns_ioctl+0x10/0x10 [ 67.631147][ T2014] ? __fget_files+0x2c5/0x340 [ 67.631174][ T2014] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.631196][ T2014] ? security_file_ioctl+0x3e/0x110 [ 67.631220][ T2014] ? __cfi_ns_ioctl+0x10/0x10 [ 67.631239][ T2014] __se_sys_ioctl+0x132/0x1b0 [ 67.631259][ T2014] __x64_sys_ioctl+0x7f/0xa0 [ 67.631279][ T2014] x64_sys_call+0x1878/0x2ee0 [ 67.631296][ T2014] do_syscall_64+0x57/0xf0 [ 67.631314][ T2014] ? clear_bhb_loop+0x50/0xa0 [ 67.631336][ T2014] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.631356][ T2014] RIP: 0033:0x7f88da99ce59 [ 67.631372][ T2014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.631387][ T2014] RSP: 002b:00007f88db7bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.631406][ T2014] RAX: ffffffffffffffda RBX: 00007f88dac15fa0 RCX: 00007f88da99ce59 [ 67.631420][ T2014] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 67.631432][ T2014] RBP: 00007f88db7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 67.631444][ T2014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.631454][ T2014] R13: 00007f88dac16038 R14: 00007f88dac15fa0 R15: 00007ffd5327aa38 [ 67.631469][ T2014] [ 67.697823][ T2023] netlink: 'syz.0.592': attribute type 27 has an invalid length. [ 67.803379][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 67.897641][ T36] audit: type=1400 audit(1780667416.439:259): avc: denied { append } for pid=2029 comm="syz.0.595" name="pfkey" dev="proc" ino=4026532444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.901740][ T2027] bridge_slave_1: left allmulticast mode [ 67.908626][ T2030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.931575][ T2027] bridge_slave_1: left promiscuous mode [ 67.935295][ T2030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.943711][ T2027] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.964923][ T2027] bridge_slave_0: left allmulticast mode [ 67.970656][ T2027] bridge_slave_0: left promiscuous mode [ 67.976453][ T2027] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.097854][ T2039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.107067][ T2039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.136483][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 68.160752][ T2043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.169383][ T2043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.525383][ T2045] tmpfs: Bad value for 'huge' [ 68.592904][ T2047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.601496][ T2047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.612977][ T2047] syzkaller1: entered promiscuous mode [ 68.618534][ T2047] syzkaller1: entered allmulticast mode [ 68.632927][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.642144][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.651798][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.660362][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.668773][ T2049] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 68.691333][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 68.724689][ T36] audit: type=1400 audit(1780667417.269:260): avc: denied { setopt } for pid=2054 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.788227][ T2059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 68.823574][ T2063] tmpfs: Bad value for 'huge' [ 68.930618][ T2069] futex_wake_op: syz.4.613 tries to shift op by 144; fix this program [ 69.208405][ T2087] tmpfs: Unknown parameter 'n' [ 69.396206][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 69.496379][ T36] audit: type=1400 audit(1780667418.039:261): avc: denied { shutdown } for pid=2100 comm="syz.0.625" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.617072][ T36] audit: type=1400 audit(1780667418.159:262): avc: denied { create } for pid=2102 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.695603][ T2106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.707045][ T2106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.717045][ T2106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.717092][ T2106] rust_binder: 2105:2106 transaction to 2105 failed: EINVAL [ 69.730497][ T2109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.730840][ T2106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.746458][ T2106] rust_binder: 2105:2106 transaction to 2105 failed: EINVAL [ 69.782813][ T2109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.812296][ T36] audit: type=1400 audit(1780667418.359:263): avc: denied { map } for pid=2111 comm="syz.2.629" path="cgroup:[4026532307]" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.843264][ T36] audit: type=1400 audit(1780667418.359:264): avc: denied { execute } for pid=2111 comm="syz.2.629" path="cgroup:[4026532307]" dev="nsfs" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.865418][ T2117] tmpfs: Unknown parameter 'n' [ 69.969941][ T2122] netlink: 'syz.2.633': attribute type 27 has an invalid length. [ 70.001737][ T36] audit: type=1400 audit(1780667418.549:265): avc: denied { map } for pid=2123 comm="syz.0.634" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.008283][ T2125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.038143][ T2127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 70.038172][ T2125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.069267][ T36] audit: type=1400 audit(1780667418.609:266): avc: denied { append } for pid=2129 comm="syz.2.636" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.074280][ T2130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.101920][ T2130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.370963][ T2135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 70.395656][ T36] audit: type=1400 audit(1780667418.939:267): avc: denied { setopt } for pid=2136 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.416138][ T36] audit: type=1400 audit(1780667418.939:268): avc: denied { write } for pid=2136 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.458274][ T2138] 9pnet: Could not find request transport: xen [ 70.602040][ T2141] tmpfs: Unknown parameter 'n' [ 70.638552][ T2143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.671386][ T2143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.687985][ T2143] netlink: 'syz.2.641': attribute type 4 has an invalid length. [ 70.871053][ T2147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.901362][ T2147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.151102][ T2153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.159780][ T2153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.241543][ T2155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 71.287974][ T2161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.297819][ T2161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.423420][ T2171] tmpfs: Unknown parameter 'nr_blo' [ 71.468861][ T2173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.494196][ T2173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.510380][ T2173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.519775][ T2173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.749634][ T2184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.767738][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.776466][ T2184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.786410][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.797507][ T2184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.806979][ T2184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.834239][ T2184] syzkaller0: entered promiscuous mode [ 71.839833][ T2184] syzkaller0: entered allmulticast mode [ 72.204924][ T2187] Invalid ELF header len 9 [ 72.348212][ T2204] tmpfs: Unknown parameter 'nr_blo' [ 72.426358][ T2209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.437441][ T2209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.470037][ T2211] fuse: Bad value for 'fd' [ 72.517922][ T2218] tmpfs: Invalid uid '0x00000000ffffffff' [ 73.015114][ T2261] tmpfs: Unknown parameter 'nr_blo' [ 73.032734][ T2263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.043131][ T2263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.130344][ T2264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.159290][ T2264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.183515][ T2270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.195265][ T2270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.377016][ T2272] __nla_validate_parse: 2 callbacks suppressed [ 73.377031][ T2272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.678'. [ 73.453801][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 73.453818][ T36] audit: type=1400 audit(1780667421.999:277): avc: denied { write } for pid=2278 comm="syz.3.681" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.483925][ T36] audit: type=1400 audit(1780667421.999:278): avc: denied { open } for pid=2278 comm="syz.3.681" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.520798][ T2279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.529540][ T2279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.946996][ T2286] tmpfs: Bad value for 'nr_blocks' [ 74.050761][ T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 74.072714][ T36] audit: type=1400 audit(1780667422.619:279): avc: denied { create } for pid=2295 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.092438][ T36] audit: type=1400 audit(1780667422.619:280): avc: denied { lock } for pid=2295 comm="syz.0.689" path="/dev/vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.278061][ T2310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 74.299226][ T2311] ======================================================= [ 74.299226][ T2311] WARNING: The mand mount option has been deprecated and [ 74.299226][ T2311] and is ignored by this kernel. Remove the mand [ 74.299226][ T2311] option from the mount to silence this warning. [ 74.299226][ T2311] ======================================================= [ 74.316359][ T36] audit: type=1400 audit(1780667422.839:281): avc: denied { remount } for pid=2309 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.334753][ T2311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.364090][ T2311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.392035][ T2318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'. [ 74.432213][ T36] audit: type=1400 audit(1780667422.979:282): avc: denied { setattr } for pid=2321 comm="syz.0.700" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.585510][ T435] usb 1-1: USB disconnect, device number 3 [ 74.737371][ T2232] bridge_slave_1: left allmulticast mode [ 74.743851][ T2232] bridge_slave_1: left promiscuous mode [ 74.749552][ T2232] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.757470][ T2232] bridge_slave_0: left allmulticast mode [ 74.763264][ T2232] bridge_slave_0: left promiscuous mode [ 74.768948][ T2232] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.874404][ T2232] veth1_macvtap: left promiscuous mode [ 74.880051][ T2232] veth0_vlan: left promiscuous mode [ 74.970310][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.977418][ T2333] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.984520][ T2333] bridge_slave_0: entered allmulticast mode [ 74.990852][ T2333] bridge_slave_0: entered promiscuous mode [ 74.997806][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.005024][ T2333] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.012279][ T2333] bridge_slave_1: entered allmulticast mode [ 75.018777][ T2333] bridge_slave_1: entered promiscuous mode [ 75.032018][ T36] audit: type=1400 audit(1780667423.579:283): avc: denied { bind } for pid=2337 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.052439][ T36] audit: type=1400 audit(1780667423.599:284): avc: denied { setopt } for pid=2337 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.085249][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.092367][ T2333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.099691][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.106751][ T2333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.137583][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.145788][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.159274][ T2242] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.166377][ T2242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.175800][ T2244] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.182870][ T2244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.213889][ T2333] veth0_vlan: entered promiscuous mode [ 75.226259][ T2333] veth1_macvtap: entered promiscuous mode [ 75.274221][ T2349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.283856][ T2349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.296104][ T2349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.305562][ T2349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.505209][ T2355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.513840][ T2355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.561238][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 75.712569][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.720649][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 75.729316][ T45] usb 1-1: config 1 interface 0 altsetting 97 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 75.740700][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 75.749003][ T45] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 75.758145][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.766379][ T45] usb 1-1: Product: syz [ 75.770570][ T45] usb 1-1: Manufacturer: syz [ 75.775206][ T45] usb 1-1: SerialNumber: syz [ 75.780869][ T2350] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 75.992206][ T45] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 97 proto 2 vid 0x04B8 pid 0x0202 [ 76.004365][ T45] usb 1-1: USB disconnect, device number 4 [ 76.011529][ T45] usblp0: removed [ 76.153632][ T2371] netlink: 'syz.4.715': attribute type 27 has an invalid length. [ 76.173638][ T2363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.183588][ T2363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.194991][ T36] audit: type=1400 audit(1780667424.739:285): avc: denied { mounton } for pid=2362 comm="syz.2.712" path="/177/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 76.196629][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.225812][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.569022][ T36] audit: type=1400 audit(1780667425.109:286): avc: denied { connect } for pid=2381 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.752485][ T2388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 76.772962][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.781610][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.795472][ T2390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 76.991174][ T435] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 77.131211][ T435] usb 1-1: device descriptor read/64, error -71 [ 77.365010][ T2396] usb usb7: usbfs: process 2396 (syz.4.723) did not claim interface 0 before use [ 77.381256][ T435] usb 1-1: device descriptor read/64, error -71 [ 77.386799][ T2398] netlink: 'syz.4.724': attribute type 27 has an invalid length. [ 77.410774][ T2400] netlink: 'syz.4.725': attribute type 4 has an invalid length. [ 77.561862][ T2415] netlink: 68 bytes leftover after parsing attributes in process `syz.4.731'. [ 77.594289][ T2420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.603000][ T2420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.612325][ T2420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 77.621522][ T2420] netlink: 140 bytes leftover after parsing attributes in process `syz.4.733'. [ 77.631080][ T2420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.639753][ T2420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.651180][ T435] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 77.660485][ T2425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 77.706733][ T2434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.715294][ T2434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.724354][ T2434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.732911][ T2434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.781202][ T435] usb 1-1: device descriptor read/64, error -71 [ 78.021224][ T435] usb 1-1: device descriptor read/64, error -71 [ 78.063011][ T2457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.072306][ T2457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.082283][ T2457] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 78.090614][ T2457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.099304][ T2457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.131324][ T435] usb usb1-port1: attempt power cycle [ 78.302991][ T2461] 9pnet_fd: Insufficient options for proto=fd [ 78.341994][ T2463] rust_binder: 450: no such ref 2 [ 78.347537][ T2463] rust_binder: 2462:2463 transaction to 0 failed: ENOENT [ 78.372083][ T2467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.387760][ T2467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.471192][ T435] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 78.492117][ T435] usb 1-1: device descriptor read/8, error -71 [ 78.622281][ T435] usb 1-1: device descriptor read/8, error -71 [ 78.637668][ T2471] __nla_validate_parse: 3 callbacks suppressed [ 78.637687][ T2471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.753'. [ 78.687847][ T2477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 78.709605][ T2479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.718254][ T2479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.861200][ T435] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 78.882703][ T435] usb 1-1: device descriptor read/8, error -71 [ 78.937269][ T2481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.945844][ T2481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.954476][ T2481] netlink: 88 bytes leftover after parsing attributes in process `syz.3.758'. [ 79.012274][ T435] usb 1-1: device descriptor read/8, error -71 [ 79.121553][ T435] usb usb1-port1: unable to enumerate USB device [ 79.189737][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 79.189752][ T36] audit: type=1400 audit(1780667427.729:293): avc: denied { read append } for pid=2484 comm="syz.2.759" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.190561][ T2485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.196035][ T36] audit: type=1400 audit(1780667427.729:294): avc: denied { open } for pid=2484 comm="syz.2.759" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.222450][ T2485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.266536][ T36] audit: type=1400 audit(1780667427.809:295): avc: denied { ioctl } for pid=2484 comm="syz.2.759" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.290364][ T2487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.301593][ T2487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.312362][ T2487] tipc: Enabling of bearer rejected, failed to enable media [ 79.587576][ T2494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.596302][ T2494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.834894][ T2496] netlink: 100 bytes leftover after parsing attributes in process `syz.4.764'. [ 79.864965][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 79.887594][ T36] audit: type=1400 audit(1780667428.429:296): avc: denied { append } for pid=2501 comm="syz.2.766" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.910715][ T36] audit: type=1400 audit(1780667428.429:297): avc: denied { ioctl } for pid=2501 comm="syz.2.766" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.931191][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 79.938582][ T36] audit: type=1400 audit(1780667428.479:298): avc: denied { lock } for pid=2505 comm="syz.2.768" path="socket:[18257]" dev="sockfs" ino=18257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 80.039378][ T2519] netlink: 72 bytes leftover after parsing attributes in process `syz.2.774'. [ 80.049878][ T36] audit: type=1400 audit(1780667428.599:299): avc: denied { create } for pid=2517 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.063789][ T2521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 80.099427][ T2526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.109243][ T2526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.117765][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.141038][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.151116][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 80.160320][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.170218][ T9] usb 1-1: config 0 descriptor?? [ 80.242768][ T2538] can: request_module (can-proto-7) failed. [ 80.403463][ T36] audit: type=1400 audit(1780667428.949:300): avc: denied { create } for pid=2551 comm="syz.3.786" name="#20" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.423995][ T36] audit: type=1400 audit(1780667428.949:301): avc: denied { link } for pid=2551 comm="syz.3.786" name="#20" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.447201][ T36] audit: type=1400 audit(1780667428.949:302): avc: denied { rename } for pid=2551 comm="syz.3.786" name="#21" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.592373][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.599220][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.606199][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.613150][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.620043][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.626885][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.633754][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 80.641581][ T9] pyra 0003:1E7D:2CF6.0008: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 80.666932][ T2556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 80.686430][ T2558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.695730][ T2558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.696250][ T2559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.712089][ T2559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.781982][ T2567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.790426][ T9] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 80.792303][ T2567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.797929][ T9] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 80.810044][ T2567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.815675][ T9] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -32 [ 80.822113][ T2567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.336684][ T2577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.347912][ T2577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.365291][ T2579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 81.403925][ T2583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.799'. [ 81.428936][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.437651][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.686630][ T2603] syzkaller0: entered promiscuous mode [ 82.012787][ T2612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.022370][ T2612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.384693][ T2614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.393304][ T2614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.560789][ T45] usb 1-1: USB disconnect, device number 9 [ 82.591952][ T31] usb 3-1: USB disconnect, device number 4 [ 82.743186][ T2622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.756435][ T2622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.798718][ T2232] veth1_macvtap: left promiscuous mode [ 82.808617][ T2232] veth0_vlan: left promiscuous mode [ 82.978521][ T2630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.997789][ T2630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.055712][ T2628] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.063077][ T2628] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.070242][ T2628] bridge_slave_0: entered allmulticast mode [ 83.077234][ T2628] bridge_slave_0: entered promiscuous mode [ 83.084314][ T2628] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.091808][ T2628] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.099020][ T2628] bridge_slave_1: entered allmulticast mode [ 83.106070][ T2628] bridge_slave_1: entered promiscuous mode [ 83.180889][ T2628] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.188085][ T2628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.195415][ T2628] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.202566][ T2628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.231424][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.239122][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.250762][ T2244] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.257870][ T2244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.265896][ T2244] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.272990][ T2244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.313595][ T2628] veth0_vlan: entered promiscuous mode [ 83.331565][ T2628] veth1_macvtap: entered promiscuous mode [ 83.392450][ T2639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.402133][ T2639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.413147][ T2641] mmap: syz.5.823 (2641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.415129][ T2639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.435157][ T2639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.670800][ T2646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.679558][ T2646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.703415][ T2648] __nla_validate_parse: 2 callbacks suppressed [ 83.703433][ T2648] netlink: 68 bytes leftover after parsing attributes in process `syz.0.827'. [ 83.721283][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 83.884499][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 83.893465][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 83.901047][ T9] usb 6-1: can't read configurations, error -71 [ 83.962430][ T2654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 84.001917][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 84.152240][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.162640][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.172484][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.181618][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 84.189750][ T10] usb 1-1: SerialNumber: syz [ 84.402781][ T10] usb 1-1: 0:2 : does not exist [ 84.411264][ T10] usb 1-1: USB disconnect, device number 10 [ 84.429553][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.834407][ T2671] netlink: 'syz.3.836': attribute type 9 has an invalid length. [ 84.842446][ T2671] netlink: 'syz.3.836': attribute type 2 has an invalid length. [ 85.074325][ T2684] netlink: 'syz.0.841': attribute type 27 has an invalid length. [ 85.390601][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 85.390619][ T36] audit: type=1326 audit(1780667433.929:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.422048][ T36] audit: type=1326 audit(1780667433.929:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.447312][ T36] audit: type=1326 audit(1780667433.929:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.474543][ T2710] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 85.477576][ T36] audit: type=1326 audit(1780667433.929:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.484420][ T2710] overlayfs: missing 'lowerdir' [ 85.508447][ T36] audit: type=1326 audit(1780667433.929:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.538192][ T36] audit: type=1326 audit(1780667433.929:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.563989][ T36] audit: type=1326 audit(1780667433.929:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.589421][ T36] audit: type=1326 audit(1780667433.929:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.614775][ T36] audit: type=1326 audit(1780667433.929:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.641101][ T36] audit: type=1326 audit(1780667433.929:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2706 comm="syz.5.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0a4ef9ce59 code=0x7ffc0000 [ 85.711466][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 85.721721][ T2718] SELinux: policydb string length 1288 does not match expected length 8 [ 85.730207][ T2718] SELinux: failed to load policy [ 85.760402][ T2724] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 85.770465][ T2724] syzkaller0: entered promiscuous mode [ 85.775987][ T2724] syzkaller0: entered allmulticast mode [ 85.871198][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 85.877416][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.888378][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.898150][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 85.907260][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.917728][ T45] usb 1-1: config 0 descriptor?? [ 85.971220][ T326] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.004817][ T2732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.013398][ T2732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.101230][ T326] usb 6-1: device descriptor read/64, error -71 [ 86.325438][ T45] apple 0003:05AC:024B.0009: unknown global tag 0xe [ 86.332139][ T45] apple 0003:05AC:024B.0009: item 0 1 1 14 parsing failed [ 86.344847][ T326] usb 6-1: device descriptor read/64, error -71 [ 86.351369][ T45] apple 0003:05AC:024B.0009: parse failed [ 86.357433][ T45] apple 0003:05AC:024B.0009: probe with driver apple failed with error -22 [ 86.513001][ T2742] FAULT_INJECTION: forcing a failure. [ 86.513001][ T2742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.526165][ T2742] CPU: 0 UID: 0 PID: 2742 Comm: syz.3.862 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 86.526196][ T2742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 86.526209][ T2742] Call Trace: [ 86.526215][ T2742] [ 86.526226][ T2742] __dump_stack+0x21/0x30 [ 86.526256][ T2742] dump_stack_lvl+0x140/0x1c0 [ 86.526280][ T2742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.526315][ T2742] dump_stack+0x19/0x20 [ 86.526338][ T2742] should_fail_ex+0x3d7/0x530 [ 86.526357][ T2742] should_fail+0xf/0x20 [ 86.526373][ T2742] should_fail_usercopy+0x1e/0x30 [ 86.526392][ T2742] _copy_from_user+0x20/0xa0 [ 86.526414][ T2742] userfaultfd_ioctl+0x996/0x4860 [ 86.526435][ T2742] ? __asan_set_shadow_00+0x12/0x20 [ 86.526460][ T2742] ? do_vfs_ioctl+0x182d/0x2010 [ 86.526482][ T2742] ? arch_stack_walk+0x10a/0x170 [ 86.526502][ T2742] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 86.526525][ T2742] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 86.526546][ T2742] ? _parse_integer+0x2e/0x40 [ 86.526572][ T2742] ? ioctl_has_perm+0x39a/0x500 [ 86.526589][ T2742] ? has_cap_mac_admin+0xd0/0xd0 [ 86.526608][ T2742] ? selinux_file_ioctl+0x732/0x1480 [ 86.526634][ T2742] ? vfs_write+0x9a4/0xf90 [ 86.526652][ T2742] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 86.526684][ T2742] ? __cfi_vfs_write+0x10/0x10 [ 86.526702][ T2742] ? __kasan_check_write+0x18/0x20 [ 86.526720][ T2742] ? mutex_unlock+0x90/0x240 [ 86.526743][ T2742] ? __cfi_mutex_unlock+0x10/0x10 [ 86.526765][ T2742] ? __fget_files+0x2c5/0x340 [ 86.526786][ T2742] ? __fget_files+0x2c5/0x340 [ 86.526807][ T2742] ? bpf_lsm_file_ioctl+0xd/0x20 [ 86.526830][ T2742] ? security_file_ioctl+0x3e/0x110 [ 86.526856][ T2742] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 86.526876][ T2742] __se_sys_ioctl+0x132/0x1b0 [ 86.526897][ T2742] __x64_sys_ioctl+0x7f/0xa0 [ 86.526917][ T2742] x64_sys_call+0x1878/0x2ee0 [ 86.526936][ T2742] do_syscall_64+0x57/0xf0 [ 86.526954][ T2742] ? clear_bhb_loop+0x50/0xa0 [ 86.526977][ T2742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.526998][ T2742] RIP: 0033:0x7f3f6299ce59 [ 86.527015][ T2742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.527031][ T2742] RSP: 002b:00007f3f63926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.527052][ T2742] RAX: ffffffffffffffda RBX: 00007f3f62c15fa0 RCX: 00007f3f6299ce59 [ 86.527067][ T2742] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 86.527080][ T2742] RBP: 00007f3f63926090 R08: 0000000000000000 R09: 0000000000000000 [ 86.527092][ T2742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.527105][ T2742] R13: 00007f3f62c16038 R14: 00007f3f62c15fa0 R15: 00007ffe0524d2b8 [ 86.527122][ T2742] [ 86.528083][ T2712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.600857][ T2750] incfs: Options parsing error. -22 [ 86.604479][ T326] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.608447][ T2750] incfs: mount failed -22 [ 86.634662][ T2712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.649011][ T2750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.761171][ T326] usb 6-1: device descriptor read/64, error -71 [ 86.768558][ T2750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.938820][ T2757] overlay: Unknown parameter '/' [ 87.024117][ T2766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.871'. [ 87.033112][ T326] usb 6-1: device descriptor read/64, error -71 [ 87.141264][ T326] usb usb6-port1: attempt power cycle [ 87.272291][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.280829][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.435069][ T2789] netlink: 68 bytes leftover after parsing attributes in process `syz.4.879'. [ 87.465404][ T2791] netlink: 'syz.4.880': attribute type 28 has an invalid length. [ 87.501249][ T326] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.532309][ T326] usb 6-1: device descriptor read/8, error -71 [ 87.568187][ T2800] netlink: 44 bytes leftover after parsing attributes in process `syz.4.884'. [ 87.662194][ T326] usb 6-1: device descriptor read/8, error -71 [ 87.727568][ T2817] FAULT_INJECTION: forcing a failure. [ 87.727568][ T2817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.740939][ T2817] CPU: 0 UID: 0 PID: 2817 Comm: syz.4.890 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 87.740968][ T2817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.740979][ T2817] Call Trace: [ 87.740984][ T2817] [ 87.740991][ T2817] __dump_stack+0x21/0x30 [ 87.741021][ T2817] dump_stack_lvl+0x140/0x1c0 [ 87.741044][ T2817] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.741067][ T2817] ? __kasan_check_write+0x18/0x20 [ 87.741084][ T2817] dump_stack+0x19/0x20 [ 87.741105][ T2817] should_fail_ex+0x3d7/0x530 [ 87.741121][ T2817] should_fail_alloc_page+0xec/0x110 [ 87.741143][ T2817] __alloc_pages_noprof+0x1c0/0x7e0 [ 87.741165][ T2817] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 87.741193][ T2817] __folio_alloc_noprof+0x14/0x80 [ 87.741214][ T2817] shmem_mfill_atomic_pte+0x276/0x9e0 [ 87.741233][ T2817] ? __pte_alloc+0x1ae/0x440 [ 87.741249][ T2817] ? __cfi_shmem_mfill_atomic_pte+0x10/0x10 [ 87.741270][ T2817] mfill_atomic_copy+0x6a6/0xd60 [ 87.741287][ T2817] ? __cfi_mfill_atomic_copy+0x10/0x10 [ 87.741303][ T2817] userfaultfd_ioctl+0x3488/0x4860 [ 87.741325][ T2817] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 87.741345][ T2817] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 87.741362][ T2817] ? _parse_integer+0x2e/0x40 [ 87.741387][ T2817] ? ioctl_has_perm+0x39a/0x500 [ 87.741403][ T2817] ? has_cap_mac_admin+0xd0/0xd0 [ 87.741420][ T2817] ? selinux_file_ioctl+0x732/0x1480 [ 87.741444][ T2817] ? vfs_write+0x9a4/0xf90 [ 87.741461][ T2817] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 87.741484][ T2817] ? __cfi_vfs_write+0x10/0x10 [ 87.741500][ T2817] ? __kasan_check_write+0x18/0x20 [ 87.741516][ T2817] ? mutex_unlock+0x90/0x240 [ 87.741535][ T2817] ? __cfi_mutex_unlock+0x10/0x10 [ 87.741555][ T2817] ? __fget_files+0x2c5/0x340 [ 87.741576][ T2817] ? __fget_files+0x2c5/0x340 [ 87.741594][ T2817] ? bpf_lsm_file_ioctl+0xd/0x20 [ 87.741614][ T2817] ? security_file_ioctl+0x3e/0x110 [ 87.741636][ T2817] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 87.741653][ T2817] __se_sys_ioctl+0x132/0x1b0 [ 87.741672][ T2817] __x64_sys_ioctl+0x7f/0xa0 [ 87.741689][ T2817] x64_sys_call+0x1878/0x2ee0 [ 87.741706][ T2817] do_syscall_64+0x57/0xf0 [ 87.741723][ T2817] ? clear_bhb_loop+0x50/0xa0 [ 87.741750][ T2817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.741768][ T2817] RIP: 0033:0x7f88da99ce59 [ 87.741783][ T2817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.741797][ T2817] RSP: 002b:00007f88db7bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.741816][ T2817] RAX: ffffffffffffffda RBX: 00007f88dac15fa0 RCX: 00007f88da99ce59 [ 87.741828][ T2817] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 87.741841][ T2817] RBP: 00007f88db7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 87.741852][ T2817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.741862][ T2817] R13: 00007f88dac16038 R14: 00007f88dac15fa0 R15: 00007ffd5327aa38 [ 87.741877][ T2817] [ 88.001232][ T326] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 88.056314][ T2821] netlink: 276 bytes leftover after parsing attributes in process `syz.4.892'. [ 88.066366][ T326] usb 6-1: device descriptor read/8, error -71 [ 88.067190][ T2821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.082132][ T2821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.109692][ T2828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.118343][ T2828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.131313][ T2828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.139900][ T2828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.202152][ T326] usb 6-1: device descriptor read/8, error -71 [ 88.311301][ T326] usb usb6-port1: unable to enumerate USB device [ 88.487309][ T310] usb 1-1: USB disconnect, device number 11 [ 88.496540][ T2831] netlink: 68 bytes leftover after parsing attributes in process `syz.0.896'. [ 88.653694][ T2837] netlink: 'syz.4.899': attribute type 27 has an invalid length. [ 88.664451][ T2839] veth1_macvtap: left promiscuous mode [ 88.670169][ T2839] macsec0: entered allmulticast mode [ 88.677894][ T2839] veth1_macvtap: entered promiscuous mode [ 88.684573][ T2839] veth1_macvtap: entered allmulticast mode [ 88.690792][ T2839] macsec0: left allmulticast mode [ 88.698221][ T2839] veth1_macvtap: left allmulticast mode [ 88.763549][ T2853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 88.821191][ T310] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 88.830241][ T2857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.836201][ T2864] netlink: 68 bytes leftover after parsing attributes in process `syz.3.911'. [ 88.837460][ T2857] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.885796][ T2870] netlink: 'syz.4.914': attribute type 27 has an invalid length. [ 88.910847][ T2872] netlink: 44 bytes leftover after parsing attributes in process `syz.4.915'. [ 88.993585][ T310] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 89.003316][ T310] usb 1-1: config 0 has no interface number 0 [ 89.009442][ T310] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 89.044601][ T310] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 89.067036][ T310] usb 1-1: config 0 interface 200 has no altsetting 0 [ 89.073807][ T2886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 89.081210][ T2888] rust_binder: Write failure EFAULT in pid:603 [ 89.086111][ T310] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 89.101664][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.109987][ T310] usb 1-1: Product: syz [ 89.117300][ T310] usb 1-1: Manufacturer: syz [ 89.123206][ T310] usb 1-1: SerialNumber: syz [ 89.128668][ T310] usb 1-1: config 0 descriptor?? [ 89.134461][ T2892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.143178][ T2892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.194905][ T2894] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 89.203456][ T2894] rust_binder: 2893:2894 transaction to 0 failed: EINVAL [ 89.204256][ T2894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.219959][ T2894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.291206][ T345] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.442237][ T345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.452405][ T345] usb 6-1: config 0 has no interfaces? [ 89.457910][ T345] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 89.466985][ T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.475745][ T345] usb 6-1: config 0 descriptor?? [ 89.537714][ T310] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input10 [ 89.553362][ T310] usb 1-1: USB disconnect, device number 12 [ 89.685141][ T2883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.693749][ T2883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.705149][ T2883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2883 comm=syz.5.921 [ 89.717602][ T2883] netlink: 20 bytes leftover after parsing attributes in process `syz.5.921'. [ 89.747936][ T345] usb 6-1: USB disconnect, device number 8 [ 89.773745][ T2905] netlink: 44 bytes leftover after parsing attributes in process `syz.3.929'. [ 89.828165][ T2915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.837597][ T2915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.299559][ T2934] netlink: 'syz.5.935': attribute type 27 has an invalid length. [ 90.356076][ T2936] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 90.572327][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 90.572343][ T36] audit: type=1400 audit(2000000002.970:350): avc: denied { connect } for pid=2944 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.741890][ T36] audit: type=1400 audit(2000000003.140:351): avc: denied { create } for pid=2953 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 90.766637][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 90.932534][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 90.941025][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.951934][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.960925][ T9] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.972238][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 90.980671][ T2959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.985476][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.995104][ T2959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.998970][ T9] usb 6-1: Product: syz [ 91.007604][ T2970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 91.009685][ T9] usb 6-1: Manufacturer: syz [ 91.023013][ T9] usb 6-1: SerialNumber: syz [ 91.234866][ T9] usb 6-1: unit 6 not found! [ 91.251235][ T9] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 91.276048][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.302404][ T9] usb 6-1: unit 6 not found! [ 91.311443][ T9] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 91.335518][ T9] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 91.369125][ T9] usb 6-1: USB disconnect, device number 9 [ 91.383495][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.633312][ T36] audit: type=1400 audit(2000000004.030:352): avc: denied { execute } for pid=2979 comm="syz.3.954" name="file1" dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.656362][ T2980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.691392][ T2980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.734861][ T36] audit: type=1400 audit(2000000004.130:353): avc: denied { accept } for pid=2979 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.777198][ T36] audit: type=1400 audit(2000000004.130:354): avc: denied { accept } for pid=2979 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.790464][ T2988] netlink: 'syz.5.956': attribute type 27 has an invalid length. [ 91.851472][ T2992] ip6_tunnel: non-ECT from fe80:0000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee [ 91.887041][ T2992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 91.894775][ T2996] FAULT_INJECTION: forcing a failure. [ 91.894775][ T2996] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.916707][ T2996] CPU: 0 UID: 0 PID: 2996 Comm: syz.5.960 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 91.916734][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.916744][ T2996] Call Trace: [ 91.916749][ T2996] [ 91.916755][ T2996] __dump_stack+0x21/0x30 [ 91.916780][ T2996] dump_stack_lvl+0x140/0x1c0 [ 91.916802][ T2996] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.916824][ T2996] ? mas_leaf_max_gap+0x496/0x690 [ 91.916840][ T2996] dump_stack+0x19/0x20 [ 91.916859][ T2996] should_fail_ex+0x3d7/0x530 [ 91.916881][ T2996] should_fail_alloc_page+0xec/0x110 [ 91.916900][ T2996] __alloc_pages_noprof+0x1c0/0x7e0 [ 91.916924][ T2996] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 91.916946][ T2996] ? is_bpf_text_address+0x17b/0x1a0 [ 91.916971][ T2996] __folio_alloc_noprof+0x14/0x80 [ 91.916991][ T2996] shmem_alloc_and_add_folio+0x46b/0x10b0 [ 91.917010][ T2996] ? shmem_replace_folio+0x9b0/0x9b0 [ 91.917028][ T2996] ? shmem_allowable_huge_orders+0x19c/0x430 [ 91.917045][ T2996] shmem_get_folio_gfp+0x607/0x1390 [ 91.917060][ T2996] ? __folio_alloc_noprof+0x14/0x80 [ 91.917079][ T2996] ? shmem_mfill_atomic_pte+0x276/0x9e0 [ 91.917100][ T2996] ? shmem_get_folio+0xc0/0xc0 [ 91.917114][ T2996] ? __set_page_owner+0x3fe/0x600 [ 91.917132][ T2996] ? __cfi___set_page_owner+0x10/0x10 [ 91.917150][ T2996] shmem_fault+0x17d/0x350 [ 91.917167][ T2996] do_pte_missing+0x360d/0x4410 [ 91.917185][ T2996] ? rep_movs_alternative+0x4a/0xa0 [ 91.917205][ T2996] ? __kasan_check_write+0x18/0x20 [ 91.917220][ T2996] ? rep_movs_alternative+0x4a/0xa0 [ 91.917240][ T2996] ? pte_marker_clear+0x1b0/0x1b0 [ 91.917258][ T2996] ? fixup_exception+0x134b/0x1df0 [ 91.917273][ T2996] ? unwind_get_return_address+0x51/0x90 [ 91.917292][ T2996] ? __cfi_fixup_exception+0x10/0x10 [ 91.917306][ T2996] ? __pte_offset_map+0x1b0/0x230 [ 91.917320][ T2996] ? pte_offset_map_rw_nolock+0xba/0x110 [ 91.917334][ T2996] handle_mm_fault+0x11b8/0x1bf0 [ 91.917355][ T2996] ? __cfi_handle_mm_fault+0x10/0x10 [ 91.917373][ T2996] ? find_vma+0xd3/0x120 [ 91.917388][ T2996] ? __cfi__raw_spin_lock+0x10/0x10 [ 91.917403][ T2996] ? lock_mm_and_find_vma+0xb8/0x390 [ 91.917420][ T2996] do_user_addr_fault+0x4c9/0x11e0 [ 91.917435][ T2996] exc_page_fault+0x58/0xc0 [ 91.917454][ T2996] asm_exc_page_fault+0x2b/0x30 [ 91.917470][ T2996] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 91.917495][ T2996] Code: 75 f1 e9 d9 6a 03 00 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 91.917507][ T2996] RSP: 0018:ffffc9000874f7d0 EFLAGS: 00050206 [ 91.917522][ T2996] RAX: 00007ffffffff001 RBX: 0000000000001000 RCX: 0000000000001000 [ 91.917533][ T2996] RDX: 0000000000000001 RSI: 000020000018b000 RDI: ffff88813f96f000 [ 91.917544][ T2996] RBP: ffffc9000874f7f0 R08: ffff88813f96ffff R09: 1ffff11027f2dfff [ 91.917555][ T2996] R10: dffffc0000000000 R11: ffffed1027f2e000 R12: 0000000000000000 [ 91.917566][ T2996] R13: dffffc0000000000 R14: ffff88813f96f000 R15: 000020000018b000 [ 91.917579][ T2996] ? _copy_from_user+0x6d/0xa0 [ 91.917597][ T2996] mfill_atomic_copy+0x89d/0xd60 [ 91.917612][ T2996] ? __cfi_mfill_atomic_copy+0x10/0x10 [ 91.917630][ T2996] userfaultfd_ioctl+0x3488/0x4860 [ 91.917647][ T2996] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 91.917666][ T2996] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 91.917682][ T2996] ? _parse_integer+0x2e/0x40 [ 91.917704][ T2996] ? ioctl_has_perm+0x39a/0x500 [ 91.917717][ T2996] ? has_cap_mac_admin+0xd0/0xd0 [ 91.917732][ T2996] ? selinux_file_ioctl+0x732/0x1480 [ 91.917756][ T2996] ? vfs_write+0x9a4/0xf90 [ 91.917770][ T2996] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 91.917791][ T2996] ? __cfi_vfs_write+0x10/0x10 [ 91.917805][ T2996] ? __kasan_check_write+0x18/0x20 [ 91.917819][ T2996] ? mutex_unlock+0x90/0x240 [ 91.917836][ T2996] ? __cfi_mutex_unlock+0x10/0x10 [ 91.917853][ T2996] ? __fget_files+0x2c5/0x340 [ 91.917876][ T2996] ? __fget_files+0x2c5/0x340 [ 91.917895][ T2996] ? bpf_lsm_file_ioctl+0xd/0x20 [ 91.917914][ T2996] ? security_file_ioctl+0x3e/0x110 [ 91.917934][ T2996] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 91.917949][ T2996] __se_sys_ioctl+0x132/0x1b0 [ 91.917967][ T2996] __x64_sys_ioctl+0x7f/0xa0 [ 91.917983][ T2996] x64_sys_call+0x1878/0x2ee0 [ 91.917997][ T2996] do_syscall_64+0x57/0xf0 [ 91.918013][ T2996] ? clear_bhb_loop+0x50/0xa0 [ 91.918031][ T2996] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.918048][ T2996] RIP: 0033:0x7f0a4ef9ce59 [ 91.918060][ T2996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.918072][ T2996] RSP: 002b:00007f0a4fed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.918087][ T2996] RAX: ffffffffffffffda RBX: 00007f0a4f215fa0 RCX: 00007f0a4ef9ce59 [ 91.918098][ T2996] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 91.918109][ T2996] RBP: 00007f0a4fed8090 R08: 0000000000000000 R09: 0000000000000000 [ 91.918118][ T2996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.918128][ T2996] R13: 00007f0a4f216038 R14: 00007f0a4f215fa0 R15: 00007ffc79bb0db8 [ 91.918140][ T2996] [ 92.046140][ T3000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.441901][ T3000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.471760][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.962'. [ 92.550811][ T36] audit: type=1400 audit(2000000004.939:355): avc: denied { compute_member } for pid=2997 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.636916][ T3007] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 92.643789][ T2242] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.901188][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 93.054700][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.063547][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 93.071336][ T9] usb 1-1: can't read configurations, error -71 [ 93.185832][ T3016] netlink: 'syz.3.968': attribute type 27 has an invalid length. [ 93.286933][ T3027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.295625][ T3027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.430195][ T3038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.438785][ T3038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.500414][ T36] audit: type=1400 audit(2000000005.889:356): avc: denied { listen } for pid=3043 comm="syz.4.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.669411][ T3061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.986'. [ 93.899760][ T36] audit: type=1400 audit(2000000006.289:357): avc: denied { map } for pid=3062 comm="syz.4.987" path="socket:[23842]" dev="sockfs" ino=23842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.922782][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 93.932842][ T36] audit: type=1400 audit(2000000006.289:358): avc: denied { read accept } for pid=3062 comm="syz.4.987" path="socket:[23842]" dev="sockfs" ino=23842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.106146][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.116524][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.126846][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.135946][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.144108][ T9] usb 1-1: SerialNumber: syz [ 94.225856][ T3074] netlink: 'syz.3.989': attribute type 27 has an invalid length. [ 94.265884][ T3078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.275308][ T3078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.396221][ T9] usb 1-1: 0:2 : does not exist [ 94.412031][ T9] usb 1-1: USB disconnect, device number 14 [ 94.420499][ T3083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.432605][ T3083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.444137][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.445309][ T3083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.469013][ T3083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.533368][ T3084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.541930][ T3084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.550540][ T3084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.559476][ T3084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.721247][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.817152][ T3092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.825745][ T3092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.966206][ T3099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 94.991073][ T36] audit: type=1326 audit(2000000007.379:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3100 comm="syz.0.999" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3525f9ce59 code=0x0 [ 95.301185][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 95.361205][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 95.461188][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 95.467396][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.477589][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.487778][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.496930][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.505030][ T9] usb 6-1: Product: syz [ 95.509220][ T9] usb 6-1: Manufacturer: syz [ 95.513837][ T9] usb 6-1: SerialNumber: syz [ 95.524685][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 95.531076][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 95.539251][ T10] usb 1-1: config 0 has no interface number 0 [ 95.550062][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 95.557599][ T3113] netlink: 'syz.3.1003': attribute type 27 has an invalid length. [ 95.560318][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 95.582621][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 95.592246][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.593547][ T3115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.600774][ T10] usb 1-1: Product: syz [ 95.609711][ T3115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.613546][ T10] usb 1-1: Manufacturer: syz [ 95.625368][ T10] usb 1-1: SerialNumber: syz [ 95.630766][ T10] usb 1-1: config 0 descriptor?? [ 95.637301][ T3110] raw-gadget.11 gadget.0: fail, usb_ep_enable returned -22 [ 95.644685][ T3110] raw-gadget.11 gadget.0: fail, usb_ep_enable returned -22 [ 95.720821][ T9] usb 6-1: 0:2 : does not exist [ 95.728917][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 95.740224][ T9] usb 6-1: USB disconnect, device number 10 [ 95.749336][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.853351][ T3110] raw-gadget.11 gadget.0: fail, usb_ep_enable returned -22 [ 95.860693][ T3110] raw-gadget.11 gadget.0: fail, usb_ep_enable returned -22 [ 96.247813][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 96.247829][ T36] audit: type=1326 audit(2000000008.639:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3125 comm="syz.5.1008" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a4ef9ce59 code=0x0 [ 96.301722][ T36] audit: type=1400 audit(2000000008.699:363): avc: denied { mounton } for pid=3125 comm="syz.5.1008" path="/proc/69/cgroup" dev="proc" ino=24100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 96.306672][ T3131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 96.561212][ T345] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.711210][ T345] usb 6-1: Using ep0 maxpacket: 16 [ 96.717540][ T345] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.727828][ T345] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.738116][ T345] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.747221][ T345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.755246][ T345] usb 6-1: Product: syz [ 96.759452][ T345] usb 6-1: Manufacturer: syz [ 96.764079][ T345] usb 6-1: SerialNumber: syz [ 97.209384][ T3138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.217963][ T3138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.281034][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.291979][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 97.302420][ T10] asix 1-1:0.34: probe with driver asix failed with error -71 [ 97.317280][ T10] usb 1-1: USB disconnect, device number 15 [ 97.437467][ T3140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.447409][ T3140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.469174][ T3145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.477808][ T3145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.492861][ T3145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.501460][ T3145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.509915][ T36] audit: type=1400 audit(2000000009.899:364): avc: denied { create } for pid=3144 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.783633][ T3152] FAULT_INJECTION: forcing a failure. [ 97.783633][ T3152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.796806][ T3152] CPU: 1 UID: 0 PID: 3152 Comm: syz.3.1017 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 97.796835][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.796847][ T3152] Call Trace: [ 97.796853][ T3152] [ 97.796861][ T3152] __dump_stack+0x21/0x30 [ 97.796894][ T3152] dump_stack_lvl+0x140/0x1c0 [ 97.796925][ T3152] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.796951][ T3152] dump_stack+0x19/0x20 [ 97.796974][ T3152] should_fail_ex+0x3d7/0x530 [ 97.796993][ T3152] should_fail+0xf/0x20 [ 97.797010][ T3152] should_fail_usercopy+0x1e/0x30 [ 97.797036][ T3152] _copy_from_user+0x20/0xa0 [ 97.797058][ T3152] shmem_mfill_atomic_pte+0x31a/0x9e0 [ 97.797080][ T3152] ? __cfi_shmem_mfill_atomic_pte+0x10/0x10 [ 97.797101][ T3152] mfill_atomic_copy+0x6a6/0xd60 [ 97.797121][ T3152] ? __cfi_mfill_atomic_copy+0x10/0x10 [ 97.797139][ T3152] userfaultfd_ioctl+0x3488/0x4860 [ 97.797161][ T3152] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 97.797184][ T3152] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 97.797203][ T3152] ? _parse_integer+0x2e/0x40 [ 97.797228][ T3152] ? ioctl_has_perm+0x39a/0x500 [ 97.797245][ T3152] ? has_cap_mac_admin+0xd0/0xd0 [ 97.797263][ T3152] ? _raw_spin_lock_irq+0x93/0x120 [ 97.797283][ T3152] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 97.797320][ T3152] ? selinux_file_ioctl+0x732/0x1480 [ 97.797348][ T3152] ? vfs_write+0x9a4/0xf90 [ 97.797365][ T3152] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 97.797393][ T3152] ? __cfi_vfs_write+0x10/0x10 [ 97.797410][ T3152] ? __kasan_check_write+0x18/0x20 [ 97.797430][ T3152] ? mutex_unlock+0x90/0x240 [ 97.797452][ T3152] ? __cfi_mutex_unlock+0x10/0x10 [ 97.797474][ T3152] ? __fget_files+0x2c5/0x340 [ 97.797496][ T3152] ? __fget_files+0x2c5/0x340 [ 97.797517][ T3152] ? bpf_lsm_file_ioctl+0xd/0x20 [ 97.797540][ T3152] ? security_file_ioctl+0x3e/0x110 [ 97.797566][ T3152] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 97.797586][ T3152] __se_sys_ioctl+0x132/0x1b0 [ 97.797608][ T3152] __x64_sys_ioctl+0x7f/0xa0 [ 97.797629][ T3152] x64_sys_call+0x1878/0x2ee0 [ 97.797646][ T3152] do_syscall_64+0x57/0xf0 [ 97.797665][ T3152] ? clear_bhb_loop+0x50/0xa0 [ 97.797687][ T3152] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.797709][ T3152] RIP: 0033:0x7f3f6299ce59 [ 97.797726][ T3152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.797742][ T3152] RSP: 002b:00007f3f63926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.797763][ T3152] RAX: ffffffffffffffda RBX: 00007f3f62c15fa0 RCX: 00007f3f6299ce59 [ 97.797777][ T3152] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 97.797790][ T3152] RBP: 00007f3f63926090 R08: 0000000000000000 R09: 0000000000000000 [ 97.797802][ T3152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.797814][ T3152] R13: 00007f3f62c16038 R14: 00007f3f62c15fa0 R15: 00007ffe0524d2b8 [ 97.797831][ T3152] [ 97.867491][ T3155] bridge0: port 3(team_slave_1) entered blocking state [ 98.100812][ T3155] bridge0: port 3(team_slave_1) entered disabled state [ 98.108362][ T3155] team_slave_1: entered allmulticast mode [ 98.114707][ T3155] team_slave_1: entered promiscuous mode [ 98.140897][ T36] audit: type=1400 audit(2000000010.529:365): avc: denied { setopt } for pid=3162 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.714126][ T3172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.722898][ T3172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.256106][ T345] usb 6-1: 0:2 : does not exist [ 99.261503][ T345] usb 6-1: unit 9 not found! [ 99.269518][ T345] usb 6-1: USB disconnect, device number 11 [ 99.270846][ T3184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1028'. [ 99.288762][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.318009][ T3186] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1029'. [ 99.699856][ T3190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.708501][ T3190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.718196][ T36] audit: type=1400 audit(2000000012.109:366): avc: denied { execute_no_trans } for pid=3189 comm="syz.3.1031" path="/283/file0" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.821284][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 99.981192][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 99.989132][ T10] usb 6-1: config 0 has no interfaces? [ 99.998441][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 100.007710][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.015935][ T10] usb 6-1: Product: syz [ 100.020462][ T10] usb 6-1: Manufacturer: syz [ 100.025133][ T10] usb 6-1: SerialNumber: syz [ 100.033339][ T10] usb 6-1: config 0 descriptor?? [ 100.242733][ T326] usb 6-1: USB disconnect, device number 12 [ 100.316845][ T3210] FAULT_INJECTION: forcing a failure. [ 100.316845][ T3210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.330126][ T3210] CPU: 0 UID: 0 PID: 3210 Comm: syz.3.1040 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 100.330155][ T3210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.330165][ T3210] Call Trace: [ 100.330171][ T3210] [ 100.330177][ T3210] __dump_stack+0x21/0x30 [ 100.330208][ T3210] dump_stack_lvl+0x140/0x1c0 [ 100.330235][ T3210] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.330259][ T3210] ? check_stack_object+0x12b/0x150 [ 100.330271][ T3210] dump_stack+0x19/0x20 [ 100.330285][ T3210] should_fail_ex+0x3d7/0x530 [ 100.330296][ T3210] should_fail+0xf/0x20 [ 100.330304][ T3210] should_fail_usercopy+0x1e/0x30 [ 100.330315][ T3210] _copy_to_user+0x24/0xa0 [ 100.330333][ T3210] simple_read_from_buffer+0xed/0x160 [ 100.330357][ T3210] proc_fail_nth_read+0x1aa/0x220 [ 100.330382][ T3210] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 100.330407][ T3210] ? bpf_lsm_file_permission+0xd/0x20 [ 100.330426][ T3210] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 100.330439][ T3210] vfs_read+0x286/0xcb0 [ 100.330449][ T3210] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 100.330465][ T3210] ? __cfi_vfs_read+0x10/0x10 [ 100.330478][ T3210] ? __kasan_check_write+0x18/0x20 [ 100.330497][ T3210] ? mutex_lock+0x97/0x1d0 [ 100.330520][ T3210] ? __cfi_mutex_lock+0x10/0x10 [ 100.330542][ T3210] ? __fget_files+0x2c5/0x340 [ 100.330558][ T3210] ksys_read+0x145/0x260 [ 100.330568][ T3210] ? __cfi_ksys_read+0x10/0x10 [ 100.330578][ T3210] ? __kasan_check_read+0x15/0x20 [ 100.330588][ T3210] __x64_sys_read+0x7f/0x90 [ 100.330597][ T3210] x64_sys_call+0x2638/0x2ee0 [ 100.330607][ T3210] do_syscall_64+0x57/0xf0 [ 100.330621][ T3210] ? clear_bhb_loop+0x50/0xa0 [ 100.330645][ T3210] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.330666][ T3210] RIP: 0033:0x7f3f6295d68e [ 100.330682][ T3210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.330696][ T3210] RSP: 002b:00007f3f63925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.330708][ T3210] RAX: ffffffffffffffda RBX: 00007f3f639266c0 RCX: 00007f3f6295d68e [ 100.330716][ T3210] RDX: 000000000000000f RSI: 00007f3f639260a0 RDI: 0000000000000005 [ 100.330723][ T3210] RBP: 00007f3f63926090 R08: 0000000000000000 R09: 0000000000000000 [ 100.330730][ T3210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.330744][ T3210] R13: 00007f3f62c16038 R14: 00007f3f62c15fa0 R15: 00007ffe0524d2b8 [ 100.330753][ T3210] [ 100.573633][ T345] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 100.732375][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.743533][ T345] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.752665][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.768618][ T345] usb 1-1: config 0 descriptor?? [ 100.814222][ T3219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 100.962082][ T3224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 101.035556][ T3230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'. [ 101.111850][ T3235] syzkaller1: entered promiscuous mode [ 101.117440][ T3235] syzkaller1: entered allmulticast mode [ 101.195180][ T345] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 101.209725][ T345] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input11 [ 101.221197][ T36] audit: type=1400 audit(2000000013.599:367): avc: denied { write } for pid=3240 comm="syz.5.1051" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.292415][ T345] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 101.353920][ T3252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1054'. [ 101.357449][ T3202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.391399][ T3202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.397867][ T3255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 101.516298][ T36] audit: type=1400 audit(2000000013.909:368): avc: denied { read } for pid=3259 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 101.717370][ T10] usb 1-1: USB disconnect, device number 16 [ 101.809270][ T3288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK [ 101.907649][ T3301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1064'. Stopping dhcpcd... [ 101.960795][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 101.969901][ T36] audit: type=1400 audit(2000000014.349:369): avc: denied { sys_module } for pid=3306 comm="syz.3.1066" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 stopped /sbin/dhcpcd (pid 148) [ 102.038898][ T36] audit: type=1400 audit(2000000014.429:370): avc: denied { execmem } for pid=3310 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Stopping network: [ 102.104269][ T36] audit: type=1400 audit(2000000014.499:371): avc: denied { accept } for pid=3314 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.194972][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 102.199064][ T36] audit: type=1400 audit(2000000014.589:372): avc: denied { read write } for pid=3334 comm="ip" path="/dev/console" dev="rootfs" ino=47 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 102.251471][ T36] audit: type=1400 audit(2000000014.609:373): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 102.305057][ T3339] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 102.360629][ T36] audit: type=1400 audit(2000000014.749:374): avc: denied { read write } for pid=3338 comm="syz.0.1073" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.384660][ T3350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1076'. [ 102.392072][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy OK [ 102.404398][ T3352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.413551][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.421703][ T3352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping iptable[ 102.430077][ T36] audit: type=1400 audit(2000000014.749:375): avc: denied { open } for pid=3338 comm="syz.0.1073" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 s: [ 102.457449][ T3330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.470560][ T36] audit: type=1400 audit(2000000014.749:376): avc: denied { ioctl } for pid=3338 comm="syz.0.1073" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.495568][ T3352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy OK[ 102.495571][ T3330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.513674][ T36] audit: type=1400 audit(2000000014.849:377): avc: denied { read write } for pid=3356 comm="iptables" path="/dev/console" dev="rootfs" ino=47 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping system message bus: [ 102.539214][ T3352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.591202][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd done [ 102.751593][ T10] usb 1-1: too many configurations: 126, using maximum allowed: 8 [ 102.792556][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 102.811261][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.819849][ T10] usb 1-1: Product: syz [ 102.829461][ T10] usb 1-1: Manufacturer: syz [ 102.834319][ T10] usb 1-1: SerialNumber: syz Stopping klogd: OK Stopping acpid: [ 103.021182][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 103.044234][ T3339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.052853][ T3339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.151338][ T10] usb 6-1: device descriptor read/64, error -71 [ 103.192271][ T3402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.200804][ T3402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.209672][ T3404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.218167][ T3404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.303197][ T326] usb 1-1: USB disconnect, device number 17 [ 103.391184][ T10] usb 6-1: device descriptor read/64, error -71 [ 103.450550][ T3411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.459091][ T3411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.631211][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 103.668609][ T3411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.677197][ T3411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.685758][ T3411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.694252][ T3411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.707275][ T3411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.715766][ T3411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.748687][ T3413] cgroup: none used incorrectly [ 103.762374][ T10] usb 6-1: device descriptor read/64, error -71 [ 103.772385][ T3415] FAULT_INJECTION: forcing a failure. [ 103.772385][ T3415] name failslab, interval 1, probability 0, space 0, times 0 [ 103.785071][ T3415] CPU: 0 UID: 0 PID: 3415 Comm: syz.4.1094 Not tainted syzkaller #0 e2ac3d7d55ca18249f04a3621c430213fcbfc4af [ 103.785100][ T3415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.785113][ T3415] Call Trace: [ 103.785120][ T3415] [ 103.785128][ T3415] __dump_stack+0x21/0x30 [ 103.785158][ T3415] dump_stack_lvl+0x140/0x1c0 [ 103.785186][ T3415] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.785211][ T3415] ? get_random_u64+0x2f5/0x4a0 [ 103.785226][ T3415] dump_stack+0x19/0x20 [ 103.785239][ T3415] should_fail_ex+0x3d7/0x530 [ 103.785250][ T3415] should_failslab+0xac/0x100 [ 103.785263][ T3415] kmem_cache_alloc_noprof+0x42/0x410 [ 103.785274][ T3415] ? prepare_creds+0x47/0x6b0 [ 103.785292][ T3415] prepare_creds+0x47/0x6b0 [ 103.785313][ T3415] copy_creds+0xe8/0x5d0 [ 103.785334][ T3415] copy_process+0x8b6/0x32a0 [ 103.785359][ T3415] ? __cfi_copy_process+0x10/0x10 [ 103.785373][ T3415] ? proc_fail_nth_write+0x184/0x220 [ 103.785388][ T3415] kernel_clone+0x233/0x830 [ 103.785401][ T3415] ? __cfi_kernel_clone+0x10/0x10 [ 103.785415][ T3415] __x64_sys_clone+0x1b7/0x230 [ 103.785431][ T3415] ? __cfi___x64_sys_clone+0x10/0x10 [ 103.785458][ T3415] ? __kasan_check_read+0x15/0x20 [ 103.785476][ T3415] x64_sys_call+0x2b3c/0x2ee0 [ 103.785494][ T3415] do_syscall_64+0x57/0xf0 [ 103.785509][ T3415] ? clear_bhb_loop+0x50/0xa0 [ 103.785528][ T3415] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.785540][ T3415] RIP: 0033:0x7f88da99ce59 [ 103.785550][ T3415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.785558][ T3415] RSP: 002b:00007f88db7bcfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 103.785572][ T3415] RAX: ffffffffffffffda RBX: 00007f88dac15fa0 RCX: 00007f88da99ce59 [ 103.785586][ T3415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006800c000 [ 103.785599][ T3415] RBP: 00007f88db7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 103.785612][ T3415] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 103.785624][ T3415] R13: 00007f88dac16038 R14: 00007f88dac15fa0 R15: 00007ffd5327aa38 [ 103.785640][ T3415] OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 104.131197][ T10] usb 6-1: device descriptor read/64, error -71 umount: can't remount debugfs read-only [ 104.241731][ T10] usb usb6-port1: attempt power cycle umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.181 closed by remote host. [ 104.343919][ T3111] usb 4-1: USB disconnect, device number 11 [ 104.445908][ T345] usb 5-1: USB disconnect, device number 2 [ 104.592614][ T2244] bridge_slave_1: left allmulticast mode [ 104.598375][ T2244] bridge_slave_1: left promiscuous mode [ 104.604059][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.611461][ T2244] bridge_slave_0: left allmulticast mode [ 104.617088][ T2244] bridge_slave_0: left promiscuous mode [ 104.623527][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.713539][ T2244] veth1_macvtap: left promiscuous mode [ 104.719055][ T2244] veth0_vlan: left promiscuous mode [ 104.963341][ T2244] bridge_slave_1: left allmulticast mode [ 104.969018][ T2244] bridge_slave_1: left promiscuous mode [ 104.974648][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.982231][ T2244] bridge_slave_0: left allmulticast mode [ 104.987871][ T2244] bridge_slave_0: left promiscuous mode [ 104.993514][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.001200][ T2244] bridge_slave_1: left allmulticast mode [ 105.006831][ T2244] bridge_slave_1: left promiscuous mode [ 105.012482][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.019885][ T2244] bridge_slave_0: left allmulticast mode [ 105.025558][ T2244] bridge_slave_0: left promiscuous mode [ 105.031209][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.038724][ T2244] team_slave_1: left allmulticast mode [ 105.044278][ T2244] team_slave_1: left promiscuous mode [ 105.049695][ T2244] bridge0: port 3(team_slave_1) entered disabled state [ 105.056823][ T2244] bridge_slave_1: left allmulticast mode [ 105.062471][ T2244] bridge_slave_1: left promiscuous mode [ 105.068038][ T2244] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.075393][ T2244] bridge_slave_0: left allmulticast mode [ 105.081007][ T2244] bridge_slave_0: left promiscuous mode [ 105.086677][ T2244] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.275602][ T2244] veth1_macvtap: left promiscuous mode [ 105.281107][ T2244] veth0_vlan: left promiscuous mode [ 105.286597][ T2244] veth1_macvtap: left promiscuous mode [ 105.292118][ T2244] veth0_vlan: left promiscuous mode [ 105.297560][ T2244] veth1_macvtap: left promiscuous mode [ 105.303052][ T2244] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 106.509221][ T3440] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 106.516043][ T3440] ACPI: PM: Preparing to enter system sleep state S5 [ 106.522919][ T3440] kvm: exiting hardware virtualization [ 106.528434][ T3440] reboot: Power down serialport: VM disconnected.