last executing test programs: 7m59.301243382s ago: executing program 1 (id=2): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd07001000000fc000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 7m59.191907508s ago: executing program 1 (id=6): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x160}}], 0x2, 0x4000844) 7m58.331761908s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 7m58.237402104s ago: executing program 1 (id=21): mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7m58.108163112s ago: executing program 1 (id=22): write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m58.029436776s ago: executing program 1 (id=23): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 7m57.96339479s ago: executing program 32 (id=23): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 7m4.623502031s ago: executing program 2 (id=773): socket$nl_audit(0x10, 0x3, 0x9) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) 7m3.417626792s ago: executing program 2 (id=800): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0xfdef) 7m3.342952826s ago: executing program 2 (id=801): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x50, {"f3450f05c46235461b6766420fdc4c104d0f01c8470f788d0010000044d93cf266baa10066b8e70066ef66b8fd008ed8400f67dc0f20e035000040000f22e0"}}], 0x50}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m2.440816299s ago: executing program 2 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 7m2.401720951s ago: executing program 2 (id=815): socket(0x840000000002, 0x3, 0xfa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x2, 0x4e22, 0xfffc, 0xa}, {0x0, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x8000000000000000, 0x9, 0x53e5, 0x21}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0xa, @in=@multicast1, 0x1502, 0x4, 0x2, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}, 0x72d}], 0x1, 0x2000000022, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 7m2.196719913s ago: executing program 2 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000ac0)='./file1\x00', 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x11000, 0x3, &(0x7f0000fef000/0x11000)=nil) 7m2.196107633s ago: executing program 33 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000ac0)='./file1\x00', 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x11000, 0x3, &(0x7f0000fef000/0x11000)=nil) 6m57.47239993s ago: executing program 4 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 6m57.45962164s ago: executing program 4 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 6m57.410143353s ago: executing program 4 (id=853): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="8f", 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) syz_extract_tcp_res(0x0, 0xd, 0x9) 6m57.399624044s ago: executing program 4 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 6m57.344620387s ago: executing program 4 (id=855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r2) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) 6m57.263882442s ago: executing program 4 (id=857): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) 6m57.231947644s ago: executing program 34 (id=857): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) 6m1.483405326s ago: executing program 5 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 6m1.403396421s ago: executing program 5 (id=1960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) 6m1.340695805s ago: executing program 5 (id=1961): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x3000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0xa1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0xf000, 0x6, 0x9d, 0x3, 0x0, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x8080000, 0x6}, {0x2, 0x6}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m1.340527144s ago: executing program 5 (id=1962): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) 6m1.340409534s ago: executing program 5 (id=1963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x4, @private2, 0x2}, 0x1c) 6m1.25625864s ago: executing program 5 (id=1964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r0, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000", 0x3) 6m1.183954414s ago: executing program 35 (id=1964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r0, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000", 0x3) 4m43.397428206s ago: executing program 6 (id=3498): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000380)=0x2000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 4m43.372770297s ago: executing program 6 (id=3499): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) epoll_create(0x3) r0 = socket(0x23, 0xa, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) socket(0x1e, 0x2, 0x0) getgid() socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x65, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES8=r3, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x40816) syslog(0x3, &(0x7f00000001c0), 0x0) syz_usb_connect(0x5, 0x15a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xfd, 0xa7, 0x35, 0x20, 0x979, 0x280, 0x227e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x148, 0x1, 0x5, 0xfb, 0x150, 0xe9, [{{0x9, 0x4, 0x7f, 0x1, 0x4, 0x74, 0xc8, 0xad, 0xf, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c219"}, {0x5, 0x24, 0x0, 0x68}, {0xd, 0x24, 0xf, 0x1, 0xf06, 0xc6, 0x0, 0x80}, [@acm={0x4, 0x24, 0x2, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x9}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3ff}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xd, 0xc, 0x5, 0xaa6, 0x6}]}, @hid_hid={0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x78}}], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0xff, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xfe, 0xb5, 0x4, [@generic={0xb2, 0x10, "2bd4e5fd3bf5b8f807afffe571d9523029ce04fd4165aded8318b405e1ff64ecc75a9c4c1dfbfe38a8c0fcf2f01a5de7076372c06d808f13d91650749309b51cb6495aee930b507a270ab83f13cab72a4164f2739716746b1c17538c1c187eac0c84162b0f29aa3b8c3f2f8079eda4892880d94498ffbcba139a5418cd375a6ace8d05e4d3aa16b3be575800e5b1f98d728a90bc3bcfac298713820dda34b434e6645af0c4a1e244b8fdcef61dacf205"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x96, 0x9, 0x0, [@generic={0x13, 0x1dfa0c5d18573ff2, "f747bb003cf0c58da86eee79931e8faeb4"}]}}, {{0x9, 0x5, 0x3, 0x14, 0x8, 0x10, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x6000}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xfd, 0x3, 0xfc, 0x20, 0x4}, 0x3c, &(0x7f00000001c0)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x78, 0x5, 0x3, 0xf000, 0x5f1, [0xff003f, 0xff00cf, 0xff0000, 0xc030, 0x3ff0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "f9abc03cc017cd65ca7b7924b25ec981"}]}, 0x3, [{0x60, &(0x7f0000000600)=ANY=[@ANYBLOB="60031692d1c16681275f61c6882b3dfdb847270cb61c83de1e02c80bfc092eae67eb00c0b2c94b391deaf99d29f5382e95043eb8c171182283ee5e1bf5f8106c07bdbd83623b4e1450e96a1624eac59e56179454319c102146b74fdf913187004b7282f5ff27c188fbff0591a2d48b9a9675fbe771154386"]}, {0x50, &(0x7f0000000440)=@string={0x50, 0x3, "c783d5d718450e7a1d858ba55048c76f1ef9c56cded715918e954e977a5896f31d9aee1ff2c819dbf127656634e7fff9b7f36c1e213ffea4c0ea9b4251cc0ba0bc83edd7ab8a1b3ab79af506dd42"}}, {0x88, &(0x7f00000004c0)=@string={0x88, 0x3, "af3bedfbd63aa1d071acded3fac71f2eef416d32877e443c5b16736d83129be7a306e00296a39f8d0c9adab786485ae86a2ce20f926f11584be8f8f9a6efc39f68f6af689e2e5ff4232471bd296c5ebeddb02cc09f3bbd27919551fbb11c7214cfc952e34d7a6716769a231060597c63e5c075c188a72a5627d1f2536fba867496356d76a221"}}]}) 4m42.748414964s ago: executing program 6 (id=3515): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000020002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000080), &(0x7f0000000200)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r2, 0x0) cachestat(r2, &(0x7f0000000000)={0x3, 0xffffffffffffffff}, &(0x7f00000000c0), 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f00000000c0)=ANY=[], 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_GET_SECCOMP(0x15) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)="eb046a6cadd911f3decc29d74af0db97932966f64a5899fa8485fdf1cee79de88f0fcfaaf79f54f235e7b73a7d5c412598a1172ab2eb6357066454e02f59e62749891ce3de0000dfd98ee084276fc00d3b19a03c366d9d2e21f14743652d8da639cbcb3a0335816a45c1eab4a08cab51c0fb12e86e5447a3b788b5542c1b5347618463b455cca6ad8ab153fdfb5e78ae7c1d52373b8ef2f5b75d629e9c2b88ed42648dcc6e0f9322e6437a1fea69c0fc6df5adc33167b13fc797b6965fe7dd45610f0a", 0xb0, r3) keyctl$set_timeout(0xf, r4, 0x4) 4m42.231704024s ago: executing program 6 (id=3517): quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000503, 0x0, &(0x7f0000000500)) (async) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000503, 0x0, &(0x7f0000000500)) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xa, 0x24300) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x18) (async) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='\x16([%\x8e\x00\x106\xcd\xe7|\x94\x01bW\xe4\n\xea\x01\x8b\x86-\xa6\x15]\xec\x8bT\x1c\xe84\xb9\xa7&Q\xf6eC/\"\xd6\xa2\xd5\xcd\x9a\xa0\x80\xa0\fW\xb7\xf8\x95:\x91Q^\x9e\x8f\x0f\xf0RE~QT\x95\xcf@\x88', &(0x7f0000000180)='\x11\x84\xf2L%\xcf\x8b\x93\xfd2\xd5J\xaa\xaa3\x1c\x1b\x8d\x11\x87\x16A\x12_>\xa9\xa7Yt`K\xe7\x8e\x0e\xde\x1a%LSY\xc25,\x90\x88hT\xd7E\xc4\xcc\xbbh\x81\x9by&\xd9h\x98Gf\t\x90d\xca\xa3\x973]!G\x06\xea\xa8\x83\"l', 0x0) unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7018fbdbdf250900000005000500020000000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18c90000", @ANYRES16=r6, @ANYBLOB="010000000000000000001c00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) userfaultfd(0x80001) (async) r7 = userfaultfd(0x80001) prctl$PR_SET_SECCOMP(0xe, 0x0, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x500}) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x500}) getrandom(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) (async) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/49, 0x31}, 0x40000000) (async) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/49, 0x31}, 0x40000000) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) socket$vsock_stream(0x28, 0x1, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x112002d, 0x0) (async) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x112002d, 0x0) 4m42.177515447s ago: executing program 6 (id=3520): syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x2000044) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000000)=0x1) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) futex_waitv(&(0x7f0000000c00)=[{0x6, &(0x7f00000004c0)=0x3, 0x82}, {0x2, &(0x7f0000000500)=0xfffffffffffffffc, 0x82}, {0x7, &(0x7f0000000540)=0x6, 0x82}, {0x9, &(0x7f0000000580)=0x9, 0x2}, {0x3, &(0x7f00000005c0)=0x7, 0x82}, {0x1, &(0x7f0000000600), 0x82}, {0xa74, &(0x7f0000000640)=0x5, 0x82}, {0xffffffff, &(0x7f0000000680)=0x9, 0x2}, {0x9, &(0x7f00000006c0)=0x9, 0x82}, {0x5, &(0x7f0000000700), 0x82}, {0x80000000, &(0x7f0000000740)=0x401, 0x82}, {0x0, &(0x7f0000000780)=0x4, 0x2}, {0x5, &(0x7f00000007c0)=0x7fffffff, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x82}, {0x100000000000000, &(0x7f0000000840)=0x4, 0x2}, {0x9, &(0x7f0000000880)=0x8c35, 0x82}, {0x2, &(0x7f00000008c0)=0x7, 0x2}, {0x9, &(0x7f0000000900)=0xfffffffffffffff8, 0x2}, {0x200, &(0x7f0000000940)=0x1, 0x82}, {0x8, &(0x7f0000000980)=0xf, 0x82}, {0x2e, &(0x7f0000000a00)=0x6, 0x82}, {0x6, &(0x7f0000000a40)=0x1000, 0x82}, {0x3, &(0x7f0000000a80)=0x9, 0x2}, {0x646f9ae3, &(0x7f0000000ac0)=0x1, 0x82}, {0x80, &(0x7f0000000b00)=0xfffffffffffffffc, 0x82}, {0x1d4cf848, &(0x7f0000000b40)=0xae01, 0x2}, {0x9, &(0x7f0000000b80)=0x7, 0x82}, {0x9, &(0x7f0000000bc0)=0x4, 0x82}], 0x1c, 0x0, &(0x7f0000000f00)={r3, r4+10000000}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00020000090500010007000000050001000700000005000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x44) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x2000044) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000000)=0x1) (async) clock_gettime(0x0, &(0x7f0000000ec0)) (async) futex_waitv(&(0x7f0000000c00)=[{0x6, &(0x7f00000004c0)=0x3, 0x82}, {0x2, &(0x7f0000000500)=0xfffffffffffffffc, 0x82}, {0x7, &(0x7f0000000540)=0x6, 0x82}, {0x9, &(0x7f0000000580)=0x9, 0x2}, {0x3, &(0x7f00000005c0)=0x7, 0x82}, {0x1, &(0x7f0000000600), 0x82}, {0xa74, &(0x7f0000000640)=0x5, 0x82}, {0xffffffff, &(0x7f0000000680)=0x9, 0x2}, {0x9, &(0x7f00000006c0)=0x9, 0x82}, {0x5, &(0x7f0000000700), 0x82}, {0x80000000, &(0x7f0000000740)=0x401, 0x82}, {0x0, &(0x7f0000000780)=0x4, 0x2}, {0x5, &(0x7f00000007c0)=0x7fffffff, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x82}, {0x100000000000000, &(0x7f0000000840)=0x4, 0x2}, {0x9, &(0x7f0000000880)=0x8c35, 0x82}, {0x2, &(0x7f00000008c0)=0x7, 0x2}, {0x9, &(0x7f0000000900)=0xfffffffffffffff8, 0x2}, {0x200, &(0x7f0000000940)=0x1, 0x82}, {0x8, &(0x7f0000000980)=0xf, 0x82}, {0x2e, &(0x7f0000000a00)=0x6, 0x82}, {0x6, &(0x7f0000000a40)=0x1000, 0x82}, {0x3, &(0x7f0000000a80)=0x9, 0x2}, {0x646f9ae3, &(0x7f0000000ac0)=0x1, 0x82}, {0x80, &(0x7f0000000b00)=0xfffffffffffffffc, 0x82}, {0x1d4cf848, &(0x7f0000000b40)=0xae01, 0x2}, {0x9, &(0x7f0000000b80)=0x7, 0x82}, {0x9, &(0x7f0000000bc0)=0x4, 0x82}], 0x1c, 0x0, &(0x7f0000000f00)={r3, r4+10000000}, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00020000090500010007000000050001000700000005000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x44) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) (async) 4m41.945792001s ago: executing program 6 (id=3529): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x494202, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 4m41.906056493s ago: executing program 36 (id=3529): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x494202, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 8.71138481s ago: executing program 0 (id=6569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="02544cb990ebcd38233db85c28d392a6e1149346d3799441050c7fe46728db8e5df81c598766d6b9082a8ed616cafb216d170d8e2e02bfb3fcf527f6962303959dee8298d2c82e6c5187b5c7ab9b44aa113419542ab614d8a790d3ed19cdadfbe109f8f12aa31a8dfb2842d4fda56449efb440108f8640c1abaea67aa3c3ba824b569912a8c47bb6aec649124ced7228df99e8f00fa6d95641fdf12663395159a85eb374ed040de1db83774c9b807c89731f97c3bcf519ef50ed0aa52cdaaacb963777e964dee6376f21726908e36c269d0a6af9af4e92770c71c2869db1ca", 0xdf}, {&(0x7f0000000100)="518ed14ccb6f04d313f1b143808c31dae9a086fa0f4bbeb03fc7bb53ae2f300fc64a30a6425eb4f3bd4c529a72b6d222da3bc05d48b6f553b8e512d9baa74a32590d93de2d4bdf72f42bb27324d8f4", 0x4f}, {&(0x7f0000000180)="d58c984f3da6550e3fafc16e8c23c54df4c7b88013869bf365fb1679a46e7b6c415bb896ed2571a6f928ac6c0d6a4012ffa742d954cc4caaf91b88c9121c10e96c396d9cd6752fe215015061cbd095f2eacfdcd7bfbdef48498f94d6e8699d18ec9a6e23546f0369ba0fad54fff7e0fbefb62be7508330470b4182a6159d20ada1eb84ddf5f78ae6d42a1c83c826ea23250441a5", 0x94}], 0x3) 8.682775592s ago: executing program 0 (id=6570): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) fcntl$setflags(r0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0xeaa, 0x79b, 0x54, 0x2, 0xffffffffffffffff}) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 8.608603376s ago: executing program 0 (id=6571): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x6000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) 8.608245926s ago: executing program 0 (id=6572): r0 = openat$kvm(0xffffff9c, 0x0, 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x1000009, 0x8000000000000001, 0x1, 0x10000, 0x5, 0x4002004c4, 0xa, 0x5, 0x0, 0x40000000800001, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x100000091], 0xddcd0000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.607900346s ago: executing program 0 (id=6573): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 8.607662596s ago: executing program 0 (id=6574): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0xac}, 0x0) setreuid(0x0, 0x0) syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x4080, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 4.414319371s ago: executing program 3 (id=6598): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="001404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.138243606s ago: executing program 7 (id=6606): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.160788804s ago: executing program 8 (id=6608): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) write$FUSE_POLL(r0, &(0x7f0000000000)={0x30, 0xfffffffffffffff5, 0x0, {0x5}}, 0x18) (fail_nth: 1) 2.139029985s ago: executing program 8 (id=6609): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0x1, 0xe, 0x5, {0x80000000000002, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0x7c, r2, r3, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}, {{0x5, 0x2, 0x3, 0x10000007, 0x10, 0xa, {0x8000000, 0x6, 0x5, 0x80000000, 0x2000005, 0x80, 0x6e, 0x30, 0x3, 0x8000, 0x10000, r2, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x00'}}]}, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16], 0x20}}, 0x0) getdents64(r4, 0x0, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) 1.389532738s ago: executing program 3 (id=6610): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x1000009, 0x8000000000000001, 0x1, 0x10000, 0x5, 0x4002004c4, 0xa, 0x5, 0x0, 0x40000000800001, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x100000091], 0xddcd0000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.333911132s ago: executing program 3 (id=6611): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1.276632325s ago: executing program 3 (id=6612): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x3ffffd, 0x0, {0x26, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20000010) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x20) write$FUSE_POLL(r1, &(0x7f0000000000)={0x30, 0xfffffffffffffff5, 0x0, {0x5}}, 0x18) 1.276457225s ago: executing program 3 (id=6613): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x1, 0x0, 0x0}) 1.274108485s ago: executing program 3 (id=6614): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="001404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.147620213s ago: executing program 8 (id=6615): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x2, "3698"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x2d, "e44e4b891b60b99bbc776ebf9db678f7abaf7a1e85e2dc972c31cae5c19bb72704c955ea4b321a4665bbcda38b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0x1d, 0xc8, {0xc8, 0x4, "80d34527c8a66c63a07d52e7493203270b6235e00884c769dad84bf9bc1dee047c96bbfc74352ac7384bebd3e3a7ec0828974ca2898d3831ebff2b1c22166ba2e9a199a03dd54a072ffee2f7072cb05c72958df38340078c4410509c329c9d56be20ffb7e5be27c9b339b3535cd9283ad8da53757e40496e77e02fe6ca17a2d2e94b47ee1221bc56ad9010425e010409fa41afccc35ddcc55b3ba0907fe81a2b97932c3e41e22f2e7d2dbe37cbe610ba70b26aa8414f6034554a95147cc92256c6461f8c8330"}}, &(0x7f00000002c0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "cb414459ed2f9401ccb08058267f3d35604c6860d07fbf4376bcc0e2198a2fb74d67a10eff43de025e5bc10b9b34f152fd9c775702314a863cfb09603a122bdef17ae06f19daf7fdc49efe1d2cbdef4a8e5be3d05646a94d8811699a746ba27ef424af51759f8445602208feaf44f85c0cde6f32cd34f5cd665f4f9b52decc6d8f044770679da8fea083a18642dc"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000600)={0x20, 0x1, 0x61, "ebc4d10aef30f9279124964b90c4555ec023e9c7525b00fa9949d7ded8021207bc825ec654bc3a595fa88995873fb807e369888b0d1eabf4b62c7f601a61adef1292e0704054e400391874a6227c0b646bd0a43f0317d6b5f4472750d9ae2cecdc"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x81, 0x3, "c0d637"}, &(0x7f0000000740)={0x20, 0x82, 0x1, "ee"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "47ab9c"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, '$U'}, &(0x7f0000000800)={0x20, 0x85, 0x3, "d01ac3"}}) syz_clone3(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_settime(0xfffffffb, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x7, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x7fffffff, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x2, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x7c, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x20, 0x84, 0x2, "b0e0"}, 0x0}) 617.151464ms ago: executing program 8 (id=6616): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000) shutdown(r0, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0xfffffffffffff000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x68, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000480)) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x100000001, {{0xa, 0x0, 0x9, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x2, {{0xa, 0x4e23, 0xfffffffd, @local, 0x8003}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 528.526499ms ago: executing program 8 (id=6617): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="001404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000500)={0x40, 0x17, 0x2e, "095b2af766b4128127413b74b2ca16dd7a33aa5439485e540f3edb5ca964da12df4ebe01233e3e2fd2e4832e4411"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 118.887713ms ago: executing program 7 (id=6618): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x800300}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) 110.225024ms ago: executing program 7 (id=6619): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x1000009, 0x8000000000000001, 0x1, 0x10000, 0x5, 0x4002004c4, 0xa, 0x5, 0x0, 0x40000000800001, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x100000091], 0xddcd0000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.438697ms ago: executing program 7 (id=6620): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0108299d1d9f507000fadbdf2514ef"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) 591.59µs ago: executing program 8 (id=6621): timer_create(0x1, &(0x7f0000000100)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x7000001, 0x12, r2, 0x0) mincore(&(0x7f0000011000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/92) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10004, 0x4, 0x2000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x6, 0x8, 0x10, 0x2, 0x800, 0x0}) ioprio_set$pid(0x3, r5, 0x2007) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwritev(r6, &(0x7f0000000480)=[{0x0}, {&(0x7f0000002480)}, {&(0x7f0000000880)="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", 0x1c3}, {0x0}, {&(0x7f0000000380)="08e60cca41670fb6c0ce2b3c944b68524d21c98f07c13408c249ab7b3c90d76a03f83f8e42725215325fd4f4ea7dc5e4950b7eed7b70d5d86885857ffe98a189db54d3e68f72f5a5e5a3a9d63d712da08e6a13f9c9d97494ed30344edfaa82d7d6599ea2f233f88b474c44c142ff4e0195ce8eaec4f5b751ae8ff71c31b6e39fa2a7d07e7147bd2af80e97449c8edf3734908aa00c8e1e6572d35c4129ea70fa77f16ae222270b827f3b0f102bb6672670b5ea7897baf2c4d7c43f5335", 0xfd34}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0xc0085504, &(0x7f0000000080)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00090001002f6465762f726e756c6c623000"/40], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x4c) ioctl$KVM_RUN(r4, 0xae80, 0x0) 319.44µs ago: executing program 7 (id=6622): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x1, 0x0, 0x0}) 0s ago: executing program 7 (id=6623): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0x1, 0xe, 0x5, {0x80000000000002, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0x7c, r2, r3, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}, {{0x5, 0x2, 0x3, 0x10000007, 0x10, 0xa, {0x8000000, 0x6, 0x5, 0x80000000, 0x2000005, 0x80, 0x6e, 0x30, 0x3, 0x8000, 0x10000, r2, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x00'}}]}, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16], 0x20}}, 0x0) getdents64(r4, 0x0, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) kernel console output (not intermixed with test programs): t: couldn't find an available UDC or it's busy [ 408.931320][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.050406][T14988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=14988 comm=syz.0.5823 [ 409.131066][ T411] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 409.281070][ T411] usb 4-1: Using ep0 maxpacket: 32 [ 409.287777][ T411] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 409.296101][ T411] usb 4-1: config 0 has no interface number 0 [ 409.302322][ T411] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 409.314081][ T411] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 409.323253][ T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.331534][ T411] usb 4-1: Product: syz [ 409.335704][ T411] usb 4-1: Manufacturer: syz [ 409.340279][ T411] usb 4-1: SerialNumber: syz [ 409.345632][ T411] usb 4-1: config 0 descriptor?? [ 409.351029][T14978] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 409.455709][T14992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.464248][T14992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.559807][T14978] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 410.024520][T15000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.033437][T15000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.452465][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5832'. [ 411.185215][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.194592][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.374255][ T411] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 411.384507][ T411] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 411.395094][ T411] asix 4-1:0.188: probe with driver asix failed with error -71 [ 411.403775][ T411] usb 4-1: USB disconnect, device number 54 [ 412.006619][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.015973][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.536015][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.544622][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.066646][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5852'. [ 413.076326][T15061] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5852'. [ 413.086246][T15061] 9pnet_fd: Insufficient options for proto=fd [ 413.097409][ T36] audit: type=1400 audit(2000000192.607:1341): avc: denied { unmount } for pid=14687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 413.124468][T15063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.133443][T15063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.690878][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.699644][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.721121][ T36] audit: type=1326 audit(2000000193.217:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15025 comm="syz.0.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc537f9acb9 code=0x7fc00000 [ 414.111152][ T330] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 414.261131][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 414.267540][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.279060][ T330] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 414.288465][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.298285][ T330] usb 4-1: config 0 descriptor?? [ 414.505910][ T330] hid-generic 0003:0DFC:0101.0031: item fetching failed at offset 4/5 [ 414.514474][ T330] hid-generic 0003:0DFC:0101.0031: probe with driver hid-generic failed with error -22 [ 414.706856][T15091] kthread_run failed with err -4 [ 414.716362][ T45] usb 4-1: USB disconnect, device number 55 [ 415.123420][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.133354][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.146362][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.155948][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.237363][T15142] SELinux: Context OzttlX,7. is not valid (left unmapped). [ 415.481079][ T330] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 415.632407][ T330] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 415.641021][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 415.652134][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 415.663510][ T330] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 415.676229][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.699419][ T330] usb 4-1: Product: syz [ 415.703711][ T330] usb 4-1: Manufacturer: syz [ 415.708675][ T330] usb 4-1: SerialNumber: syz [ 415.717016][T15150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.723864][ T330] usb 4-1: config 0 descriptor?? [ 415.726324][T15150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.940775][ T330] usb 4-1: USB disconnect, device number 56 [ 416.453149][T15158] overlayfs: missing 'lowerdir' [ 416.982581][T15176] netlink: 'syz.0.5889': attribute type 4 has an invalid length. [ 416.990457][T15176] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5889'. [ 417.003741][ T330] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 417.149000][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.157648][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.168827][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 417.180035][ T330] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 417.189367][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.198886][ T330] usb 4-1: config 0 descriptor?? [ 417.405921][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.414562][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.547486][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5893'. [ 417.623208][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.632788][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.632982][T15188] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 417.649911][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 417.656186][ T330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 417.668914][ T330] usb 4-1: USB disconnect, device number 57 [ 418.205160][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.205257][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.214075][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.223745][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.240220][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.249822][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.259220][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.268755][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.278336][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.288085][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.297594][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.306746][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.316026][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.325157][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.334461][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.343891][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.353216][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.362796][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.371993][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.381255][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.390603][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.399930][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.409474][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.418767][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.427864][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.437079][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.446447][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.455611][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.464735][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.473907][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.483105][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.493036][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.502168][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.511430][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.520524][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.529990][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.539535][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.547312][T15212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5902'. [ 418.549201][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.567372][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.576782][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.586472][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.596385][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.606423][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.615855][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.625090][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.634405][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.644025][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.653982][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.664644][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.674227][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.685066][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.694467][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.703705][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.713035][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.722391][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.732227][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.741840][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.751432][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.760724][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.769950][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.779363][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.788728][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.797954][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.807162][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.816604][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.825787][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.835002][T15206] 9pnet_fd: p9_fd_create_tcp (15206): problem connecting socket to 127.0.0.1 [ 418.931124][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.939657][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.971043][ T411] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 419.122324][ T411] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.133944][ T411] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.145018][ T411] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 419.156197][ T411] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 419.165423][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.174578][T15219] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 419.368905][ T36] audit: type=1400 audit(2000000198.867:1343): avc: denied { lock } for pid=15227 comm="syz.0.5908" path="socket:[84679]" dev="sockfs" ino=84679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 419.519085][ T36] audit: type=1326 audit(2000000199.017:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.7.5911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6bc79acb9 code=0x0 [ 419.910359][T15238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5912'. [ 420.387397][T15252] 9pnet: p9_errstr2errno: server reported unknown error 1i\! [ 420.394385][T15258] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 420.405866][T15258] SELinux: failed to load policy [ 420.425810][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.434427][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.901881][T15219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.910421][T15219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.259595][T15287] tipc: Enabling of bearer rejected, media not registered [ 421.267995][T15287] tipc: Enabling of bearer rejected, media not registered [ 421.344115][T15293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.353279][ T411] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 421.357998][T15293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.361592][ T411] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input41 [ 421.382725][ T411] usb 4-1: USB disconnect, device number 58 [ 421.388714][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 421.909911][T15317] cgroup: Unknown subsys name 'func' [ 421.993003][T15332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=15332 comm=syz.8.5944 [ 422.032746][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.041289][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.191021][ T458] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 422.211738][T15351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.220481][T15351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.341001][ T458] usb 4-1: Using ep0 maxpacket: 32 [ 422.347345][ T458] usb 4-1: config 1 interface 0 has no altsetting 0 [ 422.360989][ T458] usb 4-1: string descriptor 0 read error: -71 [ 422.367272][ T458] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 422.376398][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.387297][ T458] usb 4-1: can't set config #1, error -71 [ 422.395424][ T458] usb 4-1: USB disconnect, device number 59 [ 422.528458][T15353] cgroup: Unknown subsys name 'func' [ 422.911364][T15364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=15364 comm=syz.3.5955 [ 422.931881][T15368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4424 sclass=netlink_route_socket pid=15368 comm=syz.3.5956 [ 422.960856][T15374] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 423.146282][T15378] cgroup: Unknown subsys name 'func' [ 423.221067][ T330] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 423.262049][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5964'. [ 423.297928][T15393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5192 sclass=netlink_route_socket pid=15393 comm=syz.8.5966 [ 423.383229][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.392977][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.404413][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 423.411526][ T330] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 423.419715][ T330] usb 4-1: config 0 has no interface number 0 [ 423.423300][T15403] cgroup: Unknown subsys name 'func' [ 423.426007][ T330] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 423.443779][ T330] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 423.453141][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.461511][ T330] usb 4-1: Product: syz [ 423.465956][ T330] usb 4-1: Manufacturer: syz [ 423.470567][ T330] usb 4-1: SerialNumber: syz [ 423.476152][ T330] usb 4-1: config 0 descriptor?? [ 423.484058][T15376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.692677][T15376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.870054][T15414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5448 sclass=netlink_route_socket pid=15414 comm=syz.0.5975 [ 424.069271][T15423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.078221][T15423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.199954][ T36] audit: type=1326 audit(2000000203.697:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15422 comm="syz.8.5978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73da99acb9 code=0x0 [ 424.404706][T15428] cgroup: Unknown subsys name 'func' [ 424.436302][T15435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59924 sclass=netlink_tcpdiag_socket pid=15435 comm=syz.0.5981 [ 424.502111][ T330] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 424.512332][ T330] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 424.523058][ T330] asix 4-1:0.188: probe with driver asix failed with error -61 [ 424.967926][T15444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7240 sclass=netlink_route_socket pid=15444 comm=syz.0.5985 [ 425.045273][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5986'. [ 425.830115][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5988'. [ 425.986532][ T411] usb 4-1: USB disconnect, device number 60 [ 425.998793][T15456] cgroup: Unknown subsys name 'func' [ 426.047059][T15458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=61204 sclass=netlink_tcpdiag_socket pid=15458 comm=syz.3.5990 [ 426.384053][T15476] cgroup: Unknown subsys name 'func' [ 426.398896][T15478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24648 sclass=netlink_route_socket pid=15478 comm=syz.0.5999 [ 426.562821][ T36] audit: type=1326 audit(2000000206.067:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15481 comm="syz.7.6001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6bc79acb9 code=0x0 [ 426.754587][T15487] netlink: 'syz.8.6003': attribute type 32 has an invalid length. [ 426.762490][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6003'. [ 426.787919][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.796587][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.211046][ T411] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 427.361007][ T411] usb 4-1: Using ep0 maxpacket: 32 [ 427.367435][ T411] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 427.375686][ T411] usb 4-1: config 0 has no interface number 0 [ 427.381920][ T411] usb 4-1: config 0 interface 230 has no altsetting 0 [ 427.390279][ T411] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 427.399460][ T411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.407497][ T411] usb 4-1: Product: syz [ 427.411903][ T411] usb 4-1: Manufacturer: syz [ 427.416552][ T411] usb 4-1: SerialNumber: syz [ 427.422100][ T411] usb 4-1: config 0 descriptor?? [ 427.427837][ T411] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 427.435612][ T411] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 427.880818][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.889931][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.890617][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.900191][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.180210][T15522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.188962][T15522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.514510][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6016'. [ 428.623052][T15529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65044 sclass=netlink_tcpdiag_socket pid=15529 comm=syz.8.6017 [ 428.690255][T15542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59976 sclass=netlink_route_socket pid=15542 comm=syz.8.6021 [ 428.713594][T15544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.722721][T15544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.246586][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.256071][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.779308][T15570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61256 sclass=netlink_route_socket pid=15570 comm=syz.8.6032 [ 430.407773][ T36] audit: type=1326 audit(2000000209.907:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.431340][ T36] audit: type=1326 audit(2000000209.907:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.432342][T15586] netlink: 'syz.7.6040': attribute type 4 has an invalid length. [ 430.456428][ T36] audit: type=1326 audit(2000000209.907:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.487169][T15587] netlink: 'syz.7.6040': attribute type 4 has an invalid length. [ 430.487372][ T411] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 430.499322][ T36] audit: type=1326 audit(2000000209.907:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.529529][ T411] usb 4-1: USB disconnect, device number 61 [ 430.530829][ T36] audit: type=1326 audit(2000000209.907:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.558958][ T36] audit: type=1326 audit(2000000209.907:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.584590][ T36] audit: type=1326 audit(2000000209.907:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.585587][T15591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61512 sclass=netlink_route_socket pid=15591 comm=syz.8.6041 [ 430.608682][ T36] audit: type=1326 audit(2000000209.907:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.647539][ T36] audit: type=1326 audit(2000000209.907:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 430.703650][T15601] netlink: 'syz.7.6046': attribute type 27 has an invalid length. [ 431.372126][T15619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65096 sclass=netlink_route_socket pid=15619 comm=syz.0.6052 [ 431.415470][T15621] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 431.469581][T15623] fuse: Bad value for 'fd' [ 431.577864][ T36] kauditd_printk_skb: 8776 callbacks suppressed [ 431.577883][ T36] audit: type=1326 audit(2000000211.077:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.613009][ T36] audit: type=1326 audit(2000000211.107:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.637172][ T36] audit: type=1326 audit(2000000211.107:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.660853][ T36] audit: type=1326 audit(2000000211.107:10135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.685287][ T36] audit: type=1326 audit(2000000211.107:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.708886][ T36] audit: type=1326 audit(2000000211.107:10137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.738291][ T36] audit: type=1326 audit(2000000211.107:10138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.762773][ T36] audit: type=1326 audit(2000000211.107:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.787169][ T36] audit: type=1326 audit(2000000211.107:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.811053][ T36] audit: type=1326 audit(2000000211.107:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15583 comm="syz.3.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14ed9acb9 code=0x50000 [ 431.853001][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.871314][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.505617][T15643] fuse: Bad value for 'fd' [ 432.703680][T15650] netlink: 'syz.8.6065': attribute type 12 has an invalid length. [ 433.674494][T15662] cgroup: Unknown subsys name 'func' [ 433.751085][ T9] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 433.902447][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 433.910849][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 433.919870][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.930166][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.941254][ T9] usb 4-1: string descriptor 0 read error: -22 [ 433.947670][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.956963][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.974253][ T9] usb 4-1: 0:2 : does not exist [ 433.984709][T15672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.004555][T15672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.014220][T15672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.023017][T15672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.224628][T15685] cgroup: Unknown subsys name 'func' [ 434.555038][T15698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.564372][T15698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.087272][T15706] FAULT_INJECTION: forcing a failure. [ 435.087272][T15706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.101200][T15706] CPU: 1 UID: 0 PID: 15706 Comm: syz.8.6090 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 435.101227][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.101241][T15706] Call Trace: [ 435.101248][T15706] [ 435.101259][T15706] __dump_stack+0x21/0x30 [ 435.101299][T15706] dump_stack_lvl+0x140/0x1c0 [ 435.101318][T15706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 435.101337][T15706] ? check_stack_object+0x106/0x150 [ 435.101359][T15706] dump_stack+0x19/0x20 [ 435.101376][T15706] should_fail_ex+0x3d7/0x530 [ 435.101396][T15706] should_fail+0xf/0x20 [ 435.101411][T15706] should_fail_usercopy+0x1e/0x30 [ 435.101428][T15706] _copy_from_user+0x20/0xa0 [ 435.101448][T15706] __sys_bind+0x1f4/0x430 [ 435.101463][T15706] ? __cfi___sys_bind+0x10/0x10 [ 435.101481][T15706] ? __kasan_check_read+0x15/0x20 [ 435.101502][T15706] __x64_sys_bind+0x7e/0x90 [ 435.101517][T15706] x64_sys_call+0x1ffd/0x2ee0 [ 435.101539][T15706] do_syscall_64+0x57/0xf0 [ 435.101560][T15706] ? clear_bhb_loop+0x50/0xa0 [ 435.101581][T15706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 435.101599][T15706] RIP: 0033:0x7f73da99acb9 [ 435.101618][T15706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.101631][T15706] RSP: 002b:00007f73db7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 435.101654][T15706] RAX: ffffffffffffffda RBX: 00007f73dac15fa0 RCX: 00007f73da99acb9 [ 435.101668][T15706] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 435.101680][T15706] RBP: 00007f73db7cb090 R08: 0000000000000000 R09: 0000000000000000 [ 435.101691][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.101702][T15706] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 435.101716][T15706] [ 435.340295][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 435.351621][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 435.361402][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 435.373386][ T9] usb 4-1: USB disconnect, device number 62 [ 435.408686][T15708] cgroup: Unknown subsys name 'func' [ 435.422333][T15711] overlayfs: empty lowerdir [ 435.620725][T15721] FAULT_INJECTION: forcing a failure. [ 435.620725][T15721] name failslab, interval 1, probability 0, space 0, times 1 [ 435.633584][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.8.6097 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 435.633618][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.633630][T15721] Call Trace: [ 435.633637][T15721] [ 435.633645][T15721] __dump_stack+0x21/0x30 [ 435.633675][T15721] dump_stack_lvl+0x140/0x1c0 [ 435.633694][T15721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 435.633713][T15721] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 435.633735][T15721] ? inode_init_always_gfp+0x756/0x9e0 [ 435.633757][T15721] ? alloc_inode+0xc5/0x270 [ 435.633775][T15721] ? new_inode+0x25/0x1e0 [ 435.633793][T15721] ? proc_pident_instantiate+0x6d/0x2c0 [ 435.633817][T15721] dump_stack+0x19/0x20 [ 435.633835][T15721] should_fail_ex+0x3d7/0x530 [ 435.633853][T15721] should_failslab+0xac/0x100 [ 435.633874][T15721] kmem_cache_alloc_noprof+0x42/0x410 [ 435.633893][T15721] ? vm_area_dup+0x42/0x570 [ 435.633909][T15721] ? avc_has_perm_noaudit+0x26c/0x360 [ 435.633930][T15721] vm_area_dup+0x42/0x570 [ 435.633944][T15721] __split_vma+0x1d5/0xab0 [ 435.633964][T15721] ? avc_has_perm+0x155/0x240 [ 435.633983][T15721] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 435.634004][T15721] ? selinux_file_open+0x46c/0x630 [ 435.634028][T15721] vms_gather_munmap_vmas+0x273/0xdd0 [ 435.634050][T15721] do_vmi_align_munmap+0x251/0x610 [ 435.634073][T15721] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 435.634093][T15721] ? mas_walk+0x3f7/0x650 [ 435.634111][T15721] ? mas_find+0x358/0x5f0 [ 435.634127][T15721] do_vmi_munmap+0x245/0x2e0 [ 435.634147][T15721] do_munmap+0xfc/0x160 [ 435.634168][T15721] ? __cfi_do_munmap+0x10/0x10 [ 435.634188][T15721] ? __cfi_mtree_load+0x10/0x10 [ 435.634204][T15721] mremap_to+0x326/0x610 [ 435.634220][T15721] __se_sys_mremap+0x5af/0xfe0 [ 435.634238][T15721] ? __cfi_vfs_write+0x10/0x10 [ 435.634257][T15721] ? __x64_sys_mremap+0xf0/0xf0 [ 435.634272][T15721] ? __kasan_check_write+0x18/0x20 [ 435.634290][T15721] ? mutex_unlock+0x90/0x240 [ 435.634304][T15721] ? __cfi_mutex_unlock+0x10/0x10 [ 435.634318][T15721] ? __fget_files+0x2c5/0x340 [ 435.634339][T15721] ? __kasan_check_write+0x18/0x20 [ 435.634357][T15721] ? fput+0x1a4/0x240 [ 435.634378][T15721] ? ksys_write+0x1f3/0x260 [ 435.634396][T15721] ? __cfi_ksys_write+0x10/0x10 [ 435.634415][T15721] __x64_sys_mremap+0xc3/0xf0 [ 435.634431][T15721] x64_sys_call+0x2ac4/0x2ee0 [ 435.634451][T15721] do_syscall_64+0x57/0xf0 [ 435.634469][T15721] ? clear_bhb_loop+0x50/0xa0 [ 435.634489][T15721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 435.634507][T15721] RIP: 0033:0x7f73da99acb9 [ 435.634524][T15721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.634537][T15721] RSP: 002b:00007f73db7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 435.634557][T15721] RAX: ffffffffffffffda RBX: 00007f73dac15fa0 RCX: 00007f73da99acb9 [ 435.634569][T15721] RDX: 0000000000001000 RSI: fffffffffffffe74 RDI: 000020000000d000 [ 435.634581][T15721] RBP: 00007f73db7cb090 R08: 0000200000007000 R09: 0000000000000000 [ 435.634593][T15721] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 435.634604][T15721] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 435.634618][T15721] [ 435.976997][T15725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.985623][T15725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.211079][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 436.275755][T15727] cgroup: Unknown subsys name 'func' [ 436.362170][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 436.370476][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 436.379386][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 436.389668][ T9] usb 4-1: config 220 has no interface number 2 [ 436.396025][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 436.409276][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 436.416175][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 436.423103][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 436.431430][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 436.440568][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.448577][ T9] usb 4-1: Product: syz [ 436.452767][ T9] usb 4-1: Manufacturer: syz [ 436.457470][ T9] usb 4-1: SerialNumber: syz [ 436.679821][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 436.686408][ T9] usb 4-1: No valid video chain found. [ 436.692303][ T9] usb 4-1: selecting invalid altsetting 0 [ 436.700540][ T9] usb 4-1: USB disconnect, device number 63 [ 436.817915][T15739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6105'. [ 437.072107][T15751] cgroup: Unknown subsys name 'func' [ 437.102549][T15753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.111577][T15753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.630542][T15772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.639115][T15772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.961036][ T453] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 438.112257][ T453] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 438.120539][ T453] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 438.129581][ T453] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 438.140011][ T453] usb 4-1: config 220 has no interface number 2 [ 438.146414][ T453] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 438.160072][ T453] usb 4-1: config 220 interface 0 has no altsetting 0 [ 438.167196][ T453] usb 4-1: config 220 interface 76 has no altsetting 0 [ 438.174156][ T453] usb 4-1: config 220 interface 1 has no altsetting 0 [ 438.183027][ T453] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 438.192328][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.194105][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.200418][ T453] usb 4-1: Product: syz [ 438.210603][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.213288][ T453] usb 4-1: Manufacturer: syz [ 438.225354][ T453] usb 4-1: SerialNumber: syz [ 438.456082][ T453] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 438.462685][ T453] usb 4-1: No valid video chain found. [ 438.468410][ T453] usb 4-1: selecting invalid altsetting 0 [ 438.478976][ T453] usb 4-1: USB disconnect, device number 64 [ 438.590483][T15807] tipc: Started in network mode [ 438.595442][T15807] tipc: Node identity ac14140f, cluster identity 4711 [ 438.602390][T15807] tipc: New replicast peer: 255.255.255.83 [ 438.608351][T15807] tipc: Enabled bearer , priority 10 [ 438.756205][T15815] FAULT_INJECTION: forcing a failure. [ 438.756205][T15815] name failslab, interval 1, probability 0, space 0, times 0 [ 438.768968][T15815] CPU: 0 UID: 0 PID: 15815 Comm: syz.8.6135 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 438.768999][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.769010][T15815] Call Trace: [ 438.769019][T15815] [ 438.769029][T15815] __dump_stack+0x21/0x30 [ 438.769062][T15815] dump_stack_lvl+0x140/0x1c0 [ 438.769082][T15815] ? __cfi_dump_stack_lvl+0x10/0x10 [ 438.769104][T15815] ? kasan_save_track+0x4f/0x80 [ 438.769127][T15815] ? kasan_save_track+0x3e/0x80 [ 438.769149][T15815] ? kasan_save_alloc_info+0x40/0x50 [ 438.769169][T15815] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 438.769193][T15815] dump_stack+0x19/0x20 [ 438.769213][T15815] should_fail_ex+0x3d7/0x530 [ 438.769234][T15815] should_failslab+0xac/0x100 [ 438.769257][T15815] kmem_cache_alloc_noprof+0x42/0x410 [ 438.769278][T15815] ? mas_alloc_nodes+0x254/0x9d0 [ 438.769299][T15815] mas_alloc_nodes+0x254/0x9d0 [ 438.769315][T15815] mas_preallocate+0x783/0xcb0 [ 438.769330][T15815] ? mas_next_slot+0xe63/0xf20 [ 438.769345][T15815] ? kasan_save_alloc_info+0x40/0x50 [ 438.769373][T15815] ? __cfi_mas_preallocate+0x10/0x10 [ 438.769383][T15815] ? __kasan_check_read+0x15/0x20 [ 438.769394][T15815] ? anon_vma_name+0x51/0xa0 [ 438.769405][T15815] ? vm_area_dup+0x41c/0x570 [ 438.769416][T15815] __split_vma+0x3ff/0xab0 [ 438.769431][T15815] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 438.769444][T15815] ? mas_find+0x3f1/0x5f0 [ 438.769454][T15815] vms_gather_munmap_vmas+0x428/0xdd0 [ 438.769467][T15815] do_vmi_align_munmap+0x251/0x610 [ 438.769481][T15815] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 438.769494][T15815] ? mas_walk+0x3f7/0x650 [ 438.769503][T15815] ? mas_find+0x358/0x5f0 [ 438.769513][T15815] do_vmi_munmap+0x245/0x2e0 [ 438.769525][T15815] do_munmap+0xfc/0x160 [ 438.769539][T15815] ? __cfi_do_munmap+0x10/0x10 [ 438.769555][T15815] ? __cfi_mtree_load+0x10/0x10 [ 438.769565][T15815] mremap_to+0x326/0x610 [ 438.769575][T15815] __se_sys_mremap+0x5af/0xfe0 [ 438.769586][T15815] ? __cfi_vfs_write+0x10/0x10 [ 438.769599][T15815] ? __x64_sys_mremap+0xf0/0xf0 [ 438.769609][T15815] ? __kasan_check_write+0x18/0x20 [ 438.769620][T15815] ? mutex_unlock+0x90/0x240 [ 438.769629][T15815] ? __cfi_mutex_unlock+0x10/0x10 [ 438.769638][T15815] ? __fget_files+0x2c5/0x340 [ 438.769652][T15815] ? __kasan_check_write+0x18/0x20 [ 438.769663][T15815] ? fput+0x1a4/0x240 [ 438.769678][T15815] ? ksys_write+0x1f3/0x260 [ 438.769689][T15815] ? __cfi_ksys_write+0x10/0x10 [ 438.769701][T15815] __x64_sys_mremap+0xc3/0xf0 [ 438.769710][T15815] x64_sys_call+0x2ac4/0x2ee0 [ 438.769724][T15815] do_syscall_64+0x57/0xf0 [ 438.769737][T15815] ? clear_bhb_loop+0x50/0xa0 [ 438.769751][T15815] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 438.769763][T15815] RIP: 0033:0x7f73da99acb9 [ 438.769774][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.769784][T15815] RSP: 002b:00007f73db7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 438.769802][T15815] RAX: ffffffffffffffda RBX: 00007f73dac15fa0 RCX: 00007f73da99acb9 [ 438.769810][T15815] RDX: 0000000000001000 RSI: fffffffffffffe74 RDI: 000020000000d000 [ 438.769818][T15815] RBP: 00007f73db7cb090 R08: 0000200000007000 R09: 0000000000000000 [ 438.769825][T15815] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 438.769832][T15815] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 438.769841][T15815] [ 439.125094][T15819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.134662][T15819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.630988][ T45] tipc: Node number set to 2886997007 [ 439.750639][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.759639][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.878516][ T36] kauditd_printk_skb: 19794 callbacks suppressed [ 439.878532][ T36] audit: type=1400 audit(2000000219.377:29936): avc: denied { write } for pid=15845 comm="syz.3.6147" name="/" dev="configfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 440.791236][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 440.920998][ T9] usb 4-1: device descriptor read/64, error -71 [ 441.160996][ T9] usb 4-1: device descriptor read/64, error -71 [ 441.193739][ T36] audit: type=1400 audit(2000000220.697:29937): avc: denied { connect } for pid=15882 comm="syz.8.6162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 441.261868][T15885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.270590][T15885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.401051][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 441.531102][ T9] usb 4-1: device descriptor read/64, error -71 [ 441.771058][ T9] usb 4-1: device descriptor read/64, error -71 [ 441.791370][T15889] FAULT_INJECTION: forcing a failure. [ 441.791370][T15889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.805170][T15889] CPU: 1 UID: 0 PID: 15889 Comm: syz.8.6165 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 441.805205][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.805217][T15889] Call Trace: [ 441.805224][T15889] [ 441.805232][T15889] __dump_stack+0x21/0x30 [ 441.805260][T15889] dump_stack_lvl+0x140/0x1c0 [ 441.805279][T15889] ? __cfi_dump_stack_lvl+0x10/0x10 [ 441.805298][T15889] ? vsnprintf+0x7b4/0x1ad0 [ 441.805317][T15889] ? check_stack_object+0x106/0x150 [ 441.805338][T15889] dump_stack+0x19/0x20 [ 441.805355][T15889] should_fail_ex+0x3d7/0x530 [ 441.805373][T15889] should_fail+0xf/0x20 [ 441.805388][T15889] should_fail_usercopy+0x1e/0x30 [ 441.805406][T15889] _copy_from_user+0x20/0xa0 [ 441.805426][T15889] kstrtouint_from_user+0xde/0x170 [ 441.805443][T15889] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 441.805458][T15889] ? selinux_file_permission+0x318/0xb60 [ 441.805477][T15889] ? __cfi_selinux_file_permission+0x10/0x10 [ 441.805492][T15889] proc_fail_nth_write+0x8f/0x220 [ 441.805510][T15889] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 441.805525][T15889] ? __kasan_check_write+0x18/0x20 [ 441.805545][T15889] ? bpf_lsm_file_permission+0xd/0x20 [ 441.805562][T15889] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 441.805577][T15889] vfs_write+0x3c8/0xf90 [ 441.805598][T15889] ? __cfi_vfs_write+0x10/0x10 [ 441.805616][T15889] ? __kasan_check_write+0x18/0x20 [ 441.805633][T15889] ? mutex_lock+0x97/0x1d0 [ 441.805655][T15889] ? __cfi_mutex_lock+0x10/0x10 [ 441.805676][T15889] ? __fget_files+0x2c5/0x340 [ 441.805698][T15889] ksys_write+0x145/0x260 [ 441.805716][T15889] ? __cfi_ksys_write+0x10/0x10 [ 441.805734][T15889] ? __kasan_check_read+0x15/0x20 [ 441.805751][T15889] __x64_sys_write+0x7f/0x90 [ 441.805769][T15889] x64_sys_call+0x271c/0x2ee0 [ 441.805789][T15889] do_syscall_64+0x57/0xf0 [ 441.805808][T15889] ? clear_bhb_loop+0x50/0xa0 [ 441.805827][T15889] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 441.805845][T15889] RIP: 0033:0x7f73da95b58e [ 441.805861][T15889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.805875][T15889] RSP: 002b:00007f73db7cafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.805894][T15889] RAX: ffffffffffffffda RBX: 00007f73db7cb6c0 RCX: 00007f73da95b58e [ 441.805907][T15889] RDX: 0000000000000001 RSI: 00007f73db7cb0a0 RDI: 0000000000000003 [ 441.805918][T15889] RBP: 00007f73db7cb090 R08: 0000000000000000 R09: 0000000000000000 [ 441.805929][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.805940][T15889] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 441.805954][T15889] [ 441.831985][T15894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.088157][ T9] usb usb4-port1: attempt power cycle [ 442.094204][T15894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.431063][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 442.452225][ T9] usb 4-1: device descriptor read/8, error -71 [ 442.582278][ T9] usb 4-1: device descriptor read/8, error -71 [ 442.620040][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.629401][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.821038][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 442.842091][ T9] usb 4-1: device descriptor read/8, error -71 [ 442.972574][ T9] usb 4-1: device descriptor read/8, error -71 [ 443.081098][ T9] usb usb4-port1: unable to enumerate USB device [ 443.155676][T15910] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 443.156251][ T36] audit: type=1400 audit(2000000222.657:29938): avc: denied { getattr } for pid=15909 comm="syz.8.6175" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 443.187856][ T36] audit: type=1400 audit(2000000222.697:29939): avc: denied { unmount } for pid=14687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 443.830034][T15931] syz.8.6185: attempt to access beyond end of device [ 443.830034][T15931] loop8: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 443.843711][T15931] EXT4-fs (loop8): unable to read superblock [ 443.851192][T15931] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6185'. [ 443.970992][ T458] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 444.120998][ T458] usb 4-1: Using ep0 maxpacket: 32 [ 444.127639][ T458] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 444.136191][ T458] usb 4-1: config 0 has no interface number 0 [ 444.143030][ T458] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 444.154531][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.163513][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.173044][ T458] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 444.182184][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.190284][ T458] usb 4-1: Product: syz [ 444.194491][ T458] usb 4-1: Manufacturer: syz [ 444.199108][ T458] usb 4-1: SerialNumber: syz [ 444.204740][ T458] usb 4-1: config 0 descriptor?? [ 444.210008][T15923] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 444.418806][T15923] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 445.027544][ T458] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 445.227884][ T458] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 445.238282][ T458] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 445.249165][ T458] asix 4-1:0.188: probe with driver asix failed with error -61 [ 445.563942][T15957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.572595][T15957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.093241][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.102393][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.583752][ T453] usb 4-1: USB disconnect, device number 69 [ 446.624756][ T36] audit: type=1326 audit(2000000226.127:29940): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.8.6207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73da99acb9 code=0x0 [ 446.891024][ T453] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 447.040998][ T453] usb 4-1: Using ep0 maxpacket: 32 [ 447.047311][ T453] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 447.055525][ T453] usb 4-1: config 0 has no interface number 0 [ 447.061654][ T453] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 447.073125][ T453] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 447.082211][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.090223][ T453] usb 4-1: Product: syz [ 447.094407][ T453] usb 4-1: Manufacturer: syz [ 447.099088][ T453] usb 4-1: SerialNumber: syz [ 447.104493][ T453] usb 4-1: config 0 descriptor?? [ 447.109756][T15981] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 447.318349][T15981] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 447.504524][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.513998][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.927634][ T453] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 448.098967][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.107733][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.128104][ T453] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 448.138457][ T453] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 448.149927][ T453] asix 4-1:0.188: probe with driver asix failed with error -61 [ 448.629552][T16014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.638284][T16014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.169433][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.183572][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.604226][ T458] usb 4-1: USB disconnect, device number 70 [ 449.619889][T16047] overlayfs: missing 'lowerdir' [ 449.702985][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.711944][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.941029][ T458] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 450.092217][ T458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.103412][ T458] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 450.113090][ T458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.121795][ T458] usb 4-1: config 0 descriptor?? [ 450.204906][T16066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16066 comm=syz.0.6241 [ 450.273298][T16073] overlayfs: missing 'lowerdir' [ 450.361819][T16076] FAULT_INJECTION: forcing a failure. [ 450.361819][T16076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.375091][T16076] CPU: 0 UID: 0 PID: 16076 Comm: syz.8.6245 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 450.375124][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.375135][T16076] Call Trace: [ 450.375141][T16076] [ 450.375150][T16076] __dump_stack+0x21/0x30 [ 450.375179][T16076] dump_stack_lvl+0x140/0x1c0 [ 450.375197][T16076] ? __cfi_dump_stack_lvl+0x10/0x10 [ 450.375217][T16076] ? kernel_text_address+0xa9/0xe0 [ 450.375237][T16076] dump_stack+0x19/0x20 [ 450.375256][T16076] should_fail_ex+0x3d7/0x530 [ 450.375275][T16076] should_fail+0xf/0x20 [ 450.375290][T16076] should_fail_usercopy+0x1e/0x30 [ 450.375307][T16076] _copy_from_user+0x20/0xa0 [ 450.375327][T16076] ___sys_sendmsg+0x1c7/0x370 [ 450.375348][T16076] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.375366][T16076] ? kstrtouint+0x78/0xf0 [ 450.375402][T16076] __sys_sendmmsg+0x2b4/0x4e0 [ 450.375422][T16076] ? __cfi___sys_sendmmsg+0x10/0x10 [ 450.375444][T16076] ? __cfi_ksys_write+0x10/0x10 [ 450.375466][T16076] __x64_sys_sendmmsg+0xa4/0xc0 [ 450.375485][T16076] x64_sys_call+0xfec/0x2ee0 [ 450.375505][T16076] do_syscall_64+0x57/0xf0 [ 450.375528][T16076] ? clear_bhb_loop+0x50/0xa0 [ 450.375548][T16076] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 450.375567][T16076] RIP: 0033:0x7f73da99acb9 [ 450.375582][T16076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.375597][T16076] RSP: 002b:00007f73db7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 450.375615][T16076] RAX: ffffffffffffffda RBX: 00007f73dac15fa0 RCX: 00007f73da99acb9 [ 450.375628][T16076] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 450.375640][T16076] RBP: 00007f73db7cb090 R08: 0000000000000000 R09: 0000000000000000 [ 450.375653][T16076] R10: 00000000200400c1 R11: 0000000000000246 R12: 0000000000000001 [ 450.375664][T16076] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 450.375679][T16076] [ 450.590617][ T458] steelseries 0003:1038:12B6.0032: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 450.602890][T16080] fuse: Bad value for 'fd' [ 450.986394][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.994980][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.135267][T16089] overlayfs: failed to resolve './file0': -2 [ 451.150673][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.159319][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.331522][T16104] fuse: Bad value for 'fd' [ 452.373955][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.382689][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.629202][ T453] usb 4-1: USB disconnect, device number 71 [ 452.905883][ T36] audit: type=1400 audit(2000000232.407:29941): avc: denied { module_load } for pid=16153 comm="syz.8.6277" path="/192/file0" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 452.905915][T16154] Invalid ELF header len 1 [ 452.958227][ T36] audit: type=1400 audit(2000000232.457:29942): avc: denied { mounton } for pid=16157 comm="syz.8.6279" path="/194/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 452.980975][ T453] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 453.062762][T16166] overlayfs: missing 'lowerdir' [ 453.132809][ T453] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 453.141176][ T453] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 453.150252][ T453] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 453.160526][ T453] usb 4-1: config 220 has no interface number 2 [ 453.166938][ T453] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 453.180208][ T453] usb 4-1: config 220 interface 0 has no altsetting 0 [ 453.187045][ T453] usb 4-1: config 220 interface 76 has no altsetting 0 [ 453.194003][ T453] usb 4-1: config 220 interface 1 has no altsetting 0 [ 453.202452][ T453] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 453.211883][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.219937][ T453] usb 4-1: Product: syz [ 453.224257][ T453] usb 4-1: Manufacturer: syz [ 453.228873][ T453] usb 4-1: SerialNumber: syz [ 453.454381][ T453] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 453.460838][ T453] usb 4-1: No valid video chain found. [ 453.466407][ T453] usb 4-1: selecting invalid altsetting 0 [ 453.474678][ T453] usb 4-1: USB disconnect, device number 72 [ 453.710191][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.717312][T16177] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.724576][T16177] bridge_slave_0: entered allmulticast mode [ 453.730773][T16177] bridge_slave_0: entered promiscuous mode [ 453.737210][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.744499][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.752446][T16177] bridge_slave_1: entered allmulticast mode [ 453.758671][T16177] bridge_slave_1: entered promiscuous mode [ 453.797057][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.804264][T16177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.811730][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.818771][T16177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.837784][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.845305][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.855135][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.862291][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.871223][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.878264][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.901242][T16177] veth0_vlan: entered promiscuous mode [ 453.912430][T16177] veth1_macvtap: entered promiscuous mode [ 453.946762][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6288'. [ 453.986898][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6291'. [ 453.996852][T16198] overlayfs: failed to resolve './file1/file0': -2 [ 454.004727][T16198] overlay: ./file1/file0 is not a directory [ 454.019548][T16200] overlayfs: missing 'lowerdir' [ 454.201070][ T458] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 454.341111][ T330] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 454.351052][ T458] usb 1-1: Using ep0 maxpacket: 32 [ 454.357613][ T458] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 454.366031][ T458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.376452][ T458] usb 1-1: config 0 has no interface number 0 [ 454.382682][ T458] usb 1-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.393782][ T458] usb 1-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.408602][ T458] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 454.417800][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.425969][ T458] usb 1-1: Product: syz [ 454.430144][ T458] usb 1-1: Manufacturer: syz [ 454.434780][ T458] usb 1-1: SerialNumber: syz [ 454.439938][ T458] usb 1-1: config 0 descriptor?? [ 454.445856][ T458] asix 1-1:0.188: probe with driver asix failed with error -22 [ 454.502639][ T330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.510717][ T330] usb 4-1: not running at top speed; connect to a high speed hub [ 454.519415][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.529850][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.541258][ T330] usb 4-1: string descriptor 0 read error: -22 [ 454.547545][ T330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.556836][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.567116][ T330] usb 4-1: 0:2 : does not exist [ 455.819742][ T330] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 455.830616][ T330] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 455.840467][ T330] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 455.857432][ T330] usb 4-1: USB disconnect, device number 73 [ 456.153203][T16231] SELinux: Context is not valid (left unmapped). [ 456.159970][ T36] audit: type=1400 audit(2000000235.657:29943): avc: denied { relabelto } for pid=16230 comm="syz.8.6301" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 456.185413][ T36] audit: type=1400 audit(2000000235.657:29944): avc: denied { associate } for pid=16230 comm="syz.8.6301" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1081 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 456.330447][T16234] fuse: Unknown parameter '00000000000000000000000YpZB$m6T0|_%(Ơ<6J &;ʿMK \d 0x0000000000000007000000000000000000000050000000000000000000000300000000000000000000' [ 456.978362][ T330] usb 1-1: USB disconnect, device number 27 [ 456.999696][ T36] audit: type=1400 audit(2000000236.497:29945): avc: denied { unlink } for pid=14687 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 457.039336][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.048476][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.161010][ T458] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 457.311081][ T458] usb 4-1: Using ep0 maxpacket: 16 [ 457.317684][ T458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.328723][ T458] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.338526][ T458] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.351422][ T458] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.360560][ T458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.368643][ T330] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 457.377218][ T458] usb 4-1: config 0 descriptor?? [ 457.532494][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.540696][ T330] usb 1-1: not running at top speed; connect to a high speed hub [ 457.549223][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.559467][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.571127][ T330] usb 1-1: string descriptor 0 read error: -22 [ 457.577393][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.586959][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.598025][ T330] usb 1-1: 0:2 : does not exist [ 457.631280][T16260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16260 comm=syz.8.6312 [ 457.988532][ T458] usbhid 4-1:0.0: can't add hid device: -71 [ 457.994767][ T458] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 458.003714][ T458] usb 4-1: USB disconnect, device number 74 [ 458.222755][T16266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.231920][T16266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.753045][ T458] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 458.771115][T16278] overlayfs: missing 'lowerdir' [ 458.851956][ T330] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 458.866731][ T330] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 458.882165][ T330] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 458.896679][ T330] usb 1-1: USB disconnect, device number 28 [ 458.921018][ T458] usb 4-1: Using ep0 maxpacket: 16 [ 458.927277][ T458] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.940213][ T458] usb 4-1: config 0 interface 0 has no altsetting 0 [ 458.946946][ T458] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 458.956399][ T458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.965154][ T458] usb 4-1: config 0 descriptor?? [ 459.171881][T16272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.180660][T16272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.398338][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.413391][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.420254][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.427090][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.434013][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.441243][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.448297][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.455224][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.462063][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.468868][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.475974][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.482788][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.490085][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.496929][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.503760][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.510538][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.518207][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.525589][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.532436][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.539254][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.546245][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.553368][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.560097][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.567178][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.568678][T16302] overlayfs: missing 'lowerdir' [ 459.574241][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.587404][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.595258][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.604595][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.611810][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.618565][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.625537][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.632637][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.639342][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.646083][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.652857][ T330] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 459.660577][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.667534][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.674712][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.681908][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.688657][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.695699][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.702471][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.712182][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.718934][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.727911][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.732972][ T36] audit: type=1400 audit(2000000239.237:29946): avc: denied { setattr } for pid=16306 comm="syz.7.6332" name="/" dev="incremental-fs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.734905][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.766882][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.773922][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.781001][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.787821][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.794749][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.801602][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.808367][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.815262][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.822148][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 459.827328][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.834127][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.840984][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.847974][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.854812][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.861707][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x1 [ 459.868579][ T330] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 459.877010][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.883821][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.890698][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x3 [ 459.897422][ T330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.907748][ T330] usb 1-1: config 0 has no interface number 0 [ 459.914067][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x4 [ 459.921045][ T330] usb 1-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.934183][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.940891][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.947943][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.954922][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.962498][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.969313][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.976105][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 459.984036][ T330] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 459.993468][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.001700][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.008571][ T330] usb 1-1: Product: syz [ 460.012951][ T330] usb 1-1: Manufacturer: syz [ 460.017592][ T330] usb 1-1: SerialNumber: syz [ 460.022492][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.029212][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.037037][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.044256][ T330] usb 1-1: config 0 descriptor?? [ 460.049390][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.056890][ T330] asix 1-1:0.188: probe with driver asix failed with error -22 [ 460.065859][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.072740][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.079540][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x0 [ 460.086525][ T458] kye 0003:0458:0138.0033: unknown main item tag 0x1 [ 460.093475][ T458] kye 0003:0458:0138.0033: unexpected long global item [ 460.100568][ T458] kye 0003:0458:0138.0033: parse failed [ 460.106322][ T458] kye 0003:0458:0138.0033: probe with driver kye failed with error -22 [ 460.118028][ T458] usb 4-1: USB disconnect, device number 75 [ 460.751103][T16326] overlayfs: missing 'lowerdir' [ 461.024759][T16342] tap0: tun_chr_ioctl cmd 1074025676 [ 461.030260][T16342] tap0: owner set to 60928 [ 461.041017][ T330] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 461.081201][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.089739][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.099081][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.107745][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.171038][ T330] usb 4-1: device descriptor read/64, error -71 [ 461.411051][ T330] usb 4-1: device descriptor read/64, error -71 [ 461.636949][T16350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.646191][T16350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.651011][ T330] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 461.791065][ T330] usb 4-1: device descriptor read/64, error -71 [ 462.031060][ T330] usb 4-1: device descriptor read/64, error -71 [ 462.141275][ T330] usb usb4-port1: attempt power cycle [ 462.170716][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.179627][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.408230][ T458] usb 1-1: USB disconnect, device number 29 [ 462.481061][ T330] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 462.502114][ T330] usb 4-1: device descriptor read/8, error -71 [ 462.632382][ T330] usb 4-1: device descriptor read/8, error -71 [ 462.741053][ T458] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 462.871060][ T330] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 462.891109][ T458] usb 1-1: Using ep0 maxpacket: 32 [ 462.897715][ T330] usb 4-1: device descriptor read/8, error -71 [ 462.904175][ T458] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 462.912510][ T458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.922648][ T458] usb 1-1: config 0 has no interface number 0 [ 462.928855][ T458] usb 1-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.943558][ T458] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 462.952855][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.960851][ T458] usb 1-1: Product: syz [ 462.965102][ T458] usb 1-1: Manufacturer: syz [ 462.969690][ T458] usb 1-1: SerialNumber: syz [ 462.974970][ T458] usb 1-1: config 0 descriptor?? [ 462.980746][ T458] asix 1-1:0.188: probe with driver asix failed with error -22 [ 463.032345][ T330] usb 4-1: device descriptor read/8, error -71 [ 463.141218][ T330] usb usb4-port1: unable to enumerate USB device [ 463.794762][T16374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.803707][T16374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.211106][ T458] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 464.360993][ T458] usb 4-1: Using ep0 maxpacket: 32 [ 464.372166][ T458] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 464.380469][ T458] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.392493][ T458] usb 4-1: config 0 has no interface number 0 [ 464.398670][ T458] usb 4-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.414404][ T458] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 464.423985][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.434634][ T458] usb 4-1: Product: syz [ 464.439020][ T458] usb 4-1: Manufacturer: syz [ 464.444070][ T458] usb 4-1: SerialNumber: syz [ 464.455188][ T458] usb 4-1: config 0 descriptor?? [ 464.466592][ T458] asix 4-1:0.188: probe with driver asix failed with error -22 [ 465.448041][ T458] usb 1-1: USB disconnect, device number 30 [ 465.781002][ T458] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 465.850687][T16412] overlayfs: missing 'lowerdir' [ 465.911766][ T458] usb 1-1: device descriptor read/64, error -71 [ 465.950345][T16421] overlay: ./file0 is not a directory [ 465.990657][T16427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.000351][T16427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.151007][ T458] usb 1-1: device descriptor read/64, error -71 [ 466.391060][ T458] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 466.520994][ T458] usb 1-1: device descriptor read/64, error -71 [ 466.761089][ T458] usb 1-1: device descriptor read/64, error -71 [ 466.834303][ T9] usb 4-1: USB disconnect, device number 80 [ 466.847100][T16439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16439 comm=syz.3.6380 [ 466.871281][ T458] usb usb1-port1: attempt power cycle [ 466.879058][T16445] overlayfs: missing 'lowerdir' [ 467.046793][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.055478][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.211085][ T458] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 467.232356][ T458] usb 1-1: device descriptor read/8, error -71 [ 467.251023][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 467.362354][ T458] usb 1-1: device descriptor read/8, error -71 [ 467.401054][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 467.407683][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 467.416307][ T9] usb 4-1: config 0 has no interface number 0 [ 467.422648][ T9] usb 4-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.435518][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 467.444713][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.452733][ T9] usb 4-1: Product: syz [ 467.456875][ T9] usb 4-1: Manufacturer: syz [ 467.461489][ T9] usb 4-1: SerialNumber: syz [ 467.467029][ T9] usb 4-1: config 0 descriptor?? [ 467.473055][ T9] asix 4-1:0.188: probe with driver asix failed with error -22 [ 467.611014][ T458] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 467.632075][ T458] usb 1-1: device descriptor read/8, error -71 [ 467.762248][ T458] usb 1-1: device descriptor read/8, error -71 [ 467.871148][ T458] usb usb1-port1: unable to enumerate USB device [ 468.432366][T16463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.441322][T16463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.871111][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 469.022140][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.032421][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.041481][ T9] usb 1-1: config 1 has no interface number 1 [ 469.047677][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 469.060583][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 469.072904][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.083984][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.092461][ T9] usb 1-1: Product: syz [ 469.099024][ T9] usb 1-1: Manufacturer: syz [ 469.100226][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.107595][ T9] usb 1-1: SerialNumber: syz [ 469.112935][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.129830][T16465] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 469.343355][ T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 469.351594][ T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 469.365052][ T9] usb 1-1: USB disconnect, device number 35 [ 469.641953][T16477] overlayfs: missing 'lowerdir' [ 469.959037][ T9] usb 4-1: USB disconnect, device number 81 [ 470.091040][ T458] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 470.224297][T16492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.233184][T16492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.251025][ T458] usb 1-1: Using ep0 maxpacket: 32 [ 470.257506][ T458] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 470.265810][ T458] usb 1-1: config 0 has no interface number 0 [ 470.272064][ T458] usb 1-1: config 0 interface 184 has no altsetting 0 [ 470.280601][ T458] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 470.289727][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.297775][ T458] usb 1-1: Product: syz [ 470.302083][ T458] usb 1-1: Manufacturer: syz [ 470.306779][ T458] usb 1-1: SerialNumber: syz [ 470.312391][ T458] usb 1-1: config 0 descriptor?? [ 470.318298][ T458] smsc75xx v1.0.0 [ 470.392742][ T3676] z00X: left promiscuous mode [ 470.398135][ T3676] bridge0: port 4(z00X) entered disabled state [ 470.405201][ T3676] bond_slave_0: left allmulticast mode [ 470.410809][ T3676] bond_slave_0: left promiscuous mode [ 470.416466][ T3676] bridge0: port 3(bond_slave_0) entered disabled state [ 470.423768][ T3676] bridge_slave_1: left allmulticast mode [ 470.429515][ T3676] bridge_slave_1: left promiscuous mode [ 470.435238][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.442847][ T3676] bridge_slave_0: left allmulticast mode [ 470.448612][ T3676] bridge_slave_0: left promiscuous mode [ 470.454305][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.562506][ T3676] tipc: Left network mode [ 470.568085][ T3676] veth1_macvtap: left promiscuous mode [ 470.573754][ T3676] veth0_vlan: left promiscuous mode [ 470.720199][ T458] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 470.731430][ T458] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 470.741103][ T458] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 470.751625][ T458] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 470.758287][T16494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.769057][T16494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.046502][ T36] audit: type=1400 audit(2000000250.547:29947): avc: denied { read write } for pid=16507 comm="syz.3.6405" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 471.072201][ T36] audit: type=1400 audit(2000000250.547:29948): avc: denied { open } for pid=16507 comm="syz.3.6405" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 472.216230][T16540] tipc: Started in network mode [ 472.221247][T16540] tipc: Node identity ac14141b, cluster identity 4711 [ 472.228134][T16540] tipc: New replicast peer: 255.255.255.255 [ 472.234382][T16540] tipc: Enabled bearer , priority 10 [ 472.263431][T16544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.272499][T16544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.842036][T16551] FAULT_INJECTION: forcing a failure. [ 472.842036][T16551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.855262][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.3.6417 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 472.855293][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.855304][T16551] Call Trace: [ 472.855310][T16551] [ 472.855318][T16551] __dump_stack+0x21/0x30 [ 472.855344][T16551] dump_stack_lvl+0x140/0x1c0 [ 472.855362][T16551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 472.855381][T16551] dump_stack+0x19/0x20 [ 472.855423][T16551] should_fail_ex+0x3d7/0x530 [ 472.855455][T16551] should_fail+0xf/0x20 [ 472.855477][T16551] should_fail_usercopy+0x1e/0x30 [ 472.855496][T16551] _copy_from_iter+0x1a9/0x1510 [ 472.855516][T16551] ? __virt_addr_valid+0x2a6/0x380 [ 472.855535][T16551] ? __cfi__copy_from_iter+0x10/0x10 [ 472.855552][T16551] ? __check_object_size+0x527/0x830 [ 472.855573][T16551] ? __cfi___check_object_size+0x10/0x10 [ 472.855588][T16551] ? __kmalloc_noprof+0x230/0x500 [ 472.855601][T16551] ? kernfs_fop_write_iter+0x162/0x510 [ 472.855612][T16551] kernfs_fop_write_iter+0x1ad/0x510 [ 472.855623][T16551] vfs_write+0x761/0xf90 [ 472.855635][T16551] ? __cfi_vfs_write+0x10/0x10 [ 472.855647][T16551] ? __cfi_mutex_lock+0x10/0x10 [ 472.855665][T16551] ksys_write+0x145/0x260 [ 472.855677][T16551] ? __cfi_ksys_write+0x10/0x10 [ 472.855695][T16551] ? __kasan_check_read+0x15/0x20 [ 472.855708][T16551] __x64_sys_write+0x7f/0x90 [ 472.855723][T16551] x64_sys_call+0x271c/0x2ee0 [ 472.855739][T16551] do_syscall_64+0x57/0xf0 [ 472.855752][T16551] ? clear_bhb_loop+0x50/0xa0 [ 472.855765][T16551] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 472.855781][T16551] RIP: 0033:0x7fd14ed9acb9 [ 472.855798][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.855808][T16551] RSP: 002b:00007fd14fbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.855822][T16551] RAX: ffffffffffffffda RBX: 00007fd14f015fa0 RCX: 00007fd14ed9acb9 [ 472.855830][T16551] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000003 [ 472.855837][T16551] RBP: 00007fd14fbde090 R08: 0000000000000000 R09: 0000000000000000 [ 472.855844][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.855851][T16551] R13: 00007fd14f016038 R14: 00007fd14f015fa0 R15: 00007fff5b04c6b8 [ 472.855860][T16551] [ 473.098006][ T9] usb 1-1: USB disconnect, device number 36 [ 473.134181][T16558] netlink: 'syz.7.6420': attribute type 4 has an invalid length. [ 473.143633][T16558] netlink: 'syz.7.6420': attribute type 4 has an invalid length. [ 473.221454][ T330] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 473.250993][ T458] tipc: Node number set to 2886997019 [ 473.372070][ T330] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.383262][ T330] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.393468][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.400182][ T330] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 473.409320][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.418001][ T330] usb 4-1: config 0 descriptor?? [ 473.561014][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 473.712160][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.723337][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.733315][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 473.742509][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.751307][ T9] usb 1-1: config 0 descriptor?? [ 473.827084][ T330] wacom 0003:056A:0018.0034: unknown main item tag 0x2 [ 473.834606][ T330] wacom 0003:056A:0018.0034: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 473.844979][ T330] wacom 0003:056A:0018.0034: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 473.857884][ T330] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0034/input/input51 [ 474.027335][ T453] usb 4-1: USB disconnect, device number 82 [ 474.160040][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 474.166325][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 474.175210][ T9] usb 1-1: USB disconnect, device number 37 [ 474.193559][T16581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.202292][T16581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.724975][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.733547][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.522830][T16604] overlayfs: missing 'lowerdir' [ 476.107950][T16631] FAULT_INJECTION: forcing a failure. [ 476.107950][T16631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.121244][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.8.6447 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 476.121274][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.121284][T16631] Call Trace: [ 476.121290][T16631] [ 476.121298][T16631] __dump_stack+0x21/0x30 [ 476.121324][T16631] dump_stack_lvl+0x140/0x1c0 [ 476.121342][T16631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 476.121363][T16631] ? check_stack_object+0x12b/0x150 [ 476.121381][T16631] dump_stack+0x19/0x20 [ 476.121391][T16631] should_fail_ex+0x3d7/0x530 [ 476.121402][T16631] should_fail+0xf/0x20 [ 476.121411][T16631] should_fail_usercopy+0x1e/0x30 [ 476.121422][T16631] _copy_to_user+0x24/0xa0 [ 476.121434][T16631] simple_read_from_buffer+0xed/0x160 [ 476.121452][T16631] proc_fail_nth_read+0x1aa/0x220 [ 476.121464][T16631] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 476.121473][T16631] ? exc_page_fault+0x65/0xc0 [ 476.121485][T16631] ? bpf_lsm_file_permission+0xd/0x20 [ 476.121495][T16631] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 476.121505][T16631] vfs_read+0x286/0xcb0 [ 476.121517][T16631] ? __asan_memset+0x39/0x50 [ 476.121528][T16631] ? __cfi_vfs_read+0x10/0x10 [ 476.121539][T16631] ? __kasan_check_write+0x18/0x20 [ 476.121550][T16631] ? mutex_lock+0x97/0x1d0 [ 476.121564][T16631] ? __cfi_mutex_lock+0x10/0x10 [ 476.121578][T16631] ? __fget_files+0x2c5/0x340 [ 476.121592][T16631] ksys_read+0x145/0x260 [ 476.121603][T16631] ? __cfi_ksys_read+0x10/0x10 [ 476.121615][T16631] ? __kasan_check_read+0x15/0x20 [ 476.121626][T16631] __x64_sys_read+0x7f/0x90 [ 476.121637][T16631] x64_sys_call+0x2638/0x2ee0 [ 476.121651][T16631] do_syscall_64+0x57/0xf0 [ 476.121663][T16631] ? clear_bhb_loop+0x50/0xa0 [ 476.121675][T16631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 476.121687][T16631] RIP: 0033:0x7f73da95b58e [ 476.121698][T16631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 476.121707][T16631] RSP: 002b:00007f73db7cafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.121720][T16631] RAX: ffffffffffffffda RBX: 00007f73db7cb6c0 RCX: 00007f73da95b58e [ 476.121728][T16631] RDX: 000000000000000f RSI: 00007f73db7cb0a0 RDI: 0000000000000006 [ 476.121735][T16631] RBP: 00007f73db7cb090 R08: 0000000000000000 R09: 0000000000000000 [ 476.121741][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.121748][T16631] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 476.121757][T16631] [ 476.397245][T16635] overlayfs: missing 'lowerdir' [ 476.413991][T16637] binder: Bad value for 'stats' [ 476.560553][T16658] overlayfs: missing 'lowerdir' [ 476.576097][ T36] audit: type=1400 audit(2000000256.077:29949): avc: denied { compute_member } for pid=16659 comm="syz.0.6459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 477.093908][T16663] x_tables: unsorted entry at hook 2 [ 477.431054][ T453] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 477.451479][T16683] netlink: 'syz.7.6467': attribute type 46 has an invalid length. [ 477.459334][T16683] netlink: 'syz.7.6467': attribute type 28 has an invalid length. [ 477.560993][ T453] usb 1-1: device descriptor read/64, error -71 [ 477.801012][ T453] usb 1-1: device descriptor read/64, error -71 [ 478.041027][ T453] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 478.091080][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 478.170989][ T453] usb 1-1: device descriptor read/64, error -71 [ 478.242241][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.252510][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.262239][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.271341][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 478.279406][ T9] usb 4-1: SerialNumber: syz [ 478.410982][ T453] usb 1-1: device descriptor read/64, error -71 [ 478.490945][ T9] usb 4-1: 0:2 : does not exist [ 478.501654][ T9] usb 4-1: USB disconnect, device number 83 [ 478.508900][T15679] udevd[15679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 478.521067][ T453] usb usb1-port1: attempt power cycle [ 478.801017][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 478.861011][ T453] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 478.882207][ T453] usb 1-1: device descriptor read/8, error -71 [ 478.951022][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 478.957391][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 478.965734][ T9] usb 4-1: config 0 has no interface number 0 [ 478.971890][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 478.980420][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 478.989693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.997753][ T9] usb 4-1: Product: syz [ 479.001996][ T9] usb 4-1: Manufacturer: syz [ 479.006665][ T9] usb 4-1: SerialNumber: syz [ 479.012457][ T453] usb 1-1: device descriptor read/8, error -71 [ 479.018833][ T9] usb 4-1: config 0 descriptor?? [ 479.024529][ T9] smsc75xx v1.0.0 [ 479.127736][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.136923][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.251011][ T453] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 479.272241][ T453] usb 1-1: device descriptor read/8, error -71 [ 479.402180][ T453] usb 1-1: device descriptor read/8, error -71 [ 479.521120][ T453] usb usb1-port1: unable to enumerate USB device [ 479.627605][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 479.638457][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 479.659824][T16694] rust_binder: 666: no such ref 0 [ 479.848433][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 479.860090][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 479.869765][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 479.880226][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 479.889800][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 480.213284][T16702] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 480.213895][T16702] netlink: 57 bytes leftover after parsing attributes in process `syz.8.6474'. [ 480.351731][T16709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.360327][T16709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.381037][ T330] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 481.465131][T16731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.473901][T16731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.508687][ T9] usb 4-1: USB disconnect, device number 84 [ 481.531021][ T330] usb 1-1: Using ep0 maxpacket: 8 [ 481.537647][ T330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.546024][ T330] usb 1-1: config 0 has an invalid interface number: 125 but max is 2 [ 481.554346][ T330] usb 1-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 481.564986][ T330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 481.573912][ T330] usb 1-1: config 0 has no interface number 0 [ 481.580002][ T330] usb 1-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.593647][ T330] usb 1-1: config 0 interface 125 has no altsetting 0 [ 481.601767][ T330] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 481.611222][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.619300][ T330] usb 1-1: Product: syz [ 481.623606][ T330] usb 1-1: Manufacturer: syz [ 481.628208][ T330] usb 1-1: SerialNumber: syz [ 481.634580][ T330] usb 1-1: config 0 descriptor?? [ 481.841897][ T330] hub 1-1:0.125: bad descriptor, ignoring hub [ 481.848013][ T330] hub 1-1:0.125: probe with driver hub failed with error -5 [ 481.856125][ T330] usb 1-1: Found UVC 15.ff device syz (17dc:0202) [ 481.862930][ T330] usb 1-1: No valid video chain found. [ 481.881513][ T330] usb 1-1: USB disconnect, device number 42 [ 481.941013][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 481.995883][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.004669][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.091020][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 482.097445][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 482.105777][ T9] usb 4-1: config 0 has no interface number 0 [ 482.112008][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 482.120125][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 482.129564][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.137582][ T9] usb 4-1: Product: syz [ 482.141752][ T9] usb 4-1: Manufacturer: syz [ 482.146365][ T9] usb 4-1: SerialNumber: syz [ 482.151791][ T9] usb 4-1: config 0 descriptor?? [ 482.157475][ T9] smsc75xx v1.0.0 [ 482.586602][T16745] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6490'. [ 482.705760][T16748] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 482.759593][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 482.770644][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 483.544886][T16760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.553487][T16760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.772067][T16762] kernel profiling enabled (shift: 0) [ 483.982571][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 483.993742][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 484.004029][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 484.014293][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 484.229573][T16768] fuse: Unknown parameter 'Jc ^ð vxy>p pe$F|!' [ 484.239564][ T36] audit: type=1400 audit(2000000263.737:29950): avc: denied { name_bind } for pid=16767 comm="syz.0.6501" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 484.313812][T16769] netlink: 'syz.8.6500': attribute type 1 has an invalid length. [ 484.321592][T16769] netlink: 1 bytes leftover after parsing attributes in process `syz.8.6500'. [ 484.501078][ T458] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 484.650968][ T458] usb 1-1: Using ep0 maxpacket: 32 [ 484.657460][ T458] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 484.665787][ T458] usb 1-1: config 0 has no interface number 0 [ 484.672045][ T458] usb 1-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.682089][ T458] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 484.693937][ T458] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 484.703283][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.711792][ T458] usb 1-1: Product: syz [ 484.716060][ T458] usb 1-1: Manufacturer: syz [ 484.720655][ T458] usb 1-1: SerialNumber: syz [ 484.726229][ T458] usb 1-1: config 0 descriptor?? [ 484.732095][ T458] asix 1-1:0.188: probe with driver asix failed with error -22 [ 484.997899][ T458] usb 4-1: USB disconnect, device number 85 [ 485.341024][ T458] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 485.491090][ T458] usb 4-1: Using ep0 maxpacket: 32 [ 485.497621][ T458] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 485.506309][ T458] usb 4-1: config 0 has no interface number 0 [ 485.512472][ T458] usb 4-1: config 0 interface 184 has no altsetting 0 [ 485.520972][ T458] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 485.530054][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.538415][ T458] usb 4-1: Product: syz [ 485.542404][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.542826][ T458] usb 4-1: Manufacturer: syz [ 485.552590][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.556267][ T458] usb 4-1: SerialNumber: syz [ 485.569230][ T458] usb 4-1: config 0 descriptor?? [ 485.575566][ T458] smsc75xx v1.0.0 [ 486.167916][T16794] can0: slcan on ttyS3. [ 486.178473][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 486.189507][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 486.199855][T16794] can0 (unregistered): slcan off ttyS3. [ 486.206047][T16794] Falling back ldisc for ttyS3. [ 486.214301][T16794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.223254][T16794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.744293][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.752930][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.289193][ T9] usb 1-1: USB disconnect, device number 43 [ 487.402901][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 487.413869][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 487.423805][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 487.433391][ T458] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 487.444246][ T458] usb 4-1: USB disconnect, device number 86 [ 488.037683][ T36] audit: type=1400 audit(2000000267.537:29951): avc: denied { setattr } for pid=16842 comm="syz.3.6518" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 488.061057][ T453] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 488.126412][T16848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.135153][T16848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.210977][ T453] usb 1-1: Using ep0 maxpacket: 32 [ 488.217746][ T453] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 488.226005][ T453] usb 1-1: config 0 has no interface number 0 [ 488.232930][ T453] usb 1-1: config 0 interface 184 has no altsetting 0 [ 488.241146][ T453] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 488.250201][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.258264][ T453] usb 1-1: Product: syz [ 488.262459][ T453] usb 1-1: Manufacturer: syz [ 488.267054][ T453] usb 1-1: SerialNumber: syz [ 488.272601][ T453] usb 1-1: config 0 descriptor?? [ 488.278346][ T453] smsc75xx v1.0.0 [ 488.655471][T16850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.664248][T16850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.880459][ T453] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 488.891391][ T453] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 489.187602][ T36] audit: type=1326 audit(2000000268.687:29952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16858 comm="syz.8.6525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73da99acb9 code=0x0 [ 489.831031][ T1043] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 489.981002][ T1043] usb 4-1: Using ep0 maxpacket: 32 [ 489.987349][ T1043] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.997781][ T1043] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.008636][ T1043] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 490.018156][ T1043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.026427][ T1043] usb 4-1: Product: syz [ 490.030852][ T1043] usb 4-1: Manufacturer: syz [ 490.036231][ T1043] usb 4-1: SerialNumber: syz [ 490.041939][ T1043] usb 4-1: config 0 descriptor?? [ 490.103637][ T453] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 490.114699][ T453] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 490.125097][ T453] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 490.130685][T16879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.134937][ T453] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 490.144753][T16879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.155839][ T453] usb 1-1: USB disconnect, device number 44 [ 490.672496][T16884] sock: sock_timestamping_bind_phc: sock not bind to device [ 490.762239][T16895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 490.762324][T16895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:751 [ 490.869093][ T36] audit: type=1400 audit(2000000270.367:29953): avc: denied { accept } for pid=16904 comm="syz.8.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 490.879102][T16905] kvm: kvm [16904]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xa [ 490.912871][T16905] netlink: 'syz.8.6542': attribute type 1 has an invalid length. [ 490.979398][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.988026][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.420997][ T1043] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 491.571084][ T1043] usb 1-1: Using ep0 maxpacket: 32 [ 491.577825][ T1043] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 491.586653][ T1043] usb 1-1: config 0 has no interface number 0 [ 491.593542][T16923] fuse: Unknown parameter '000000000000000000000120x000000000000000a' [ 491.594988][ T1043] usb 1-1: config 0 interface 184 has no altsetting 0 [ 491.610657][ T1043] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 491.619823][ T1043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.627960][ T1043] usb 1-1: Product: syz [ 491.632202][ T1043] usb 1-1: Manufacturer: syz [ 491.636790][ T1043] usb 1-1: SerialNumber: syz [ 491.644912][ T1043] usb 1-1: config 0 descriptor?? [ 491.651122][ T1043] smsc75xx v1.0.0 [ 491.703468][ T36] audit: type=1400 audit(2000000271.207:29954): avc: denied { execute } for pid=16926 comm="syz.8.6550" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 492.252777][ T1043] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 492.264000][ T1043] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 492.352765][T16932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.361509][T16932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.600129][ T453] usb 4-1: USB disconnect, device number 87 [ 492.641158][T16939] tipc: Enabling of bearer rejected, failed to enable media [ 492.649922][T16939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6555'. [ 492.884074][T16946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.892928][T16946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.011001][ T458] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 493.160963][ T458] usb 4-1: Using ep0 maxpacket: 32 [ 493.167713][ T458] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 493.176107][ T458] usb 4-1: config 0 has no interface number 0 [ 493.182406][ T458] usb 4-1: config 0 interface 184 has no altsetting 0 [ 493.190635][ T458] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 493.200370][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.208515][ T458] usb 4-1: Product: syz [ 493.212740][ T458] usb 4-1: Manufacturer: syz [ 493.217332][ T458] usb 4-1: SerialNumber: syz [ 493.222671][ T458] usb 4-1: config 0 descriptor?? [ 493.228464][ T458] smsc75xx v1.0.0 [ 493.480010][ T1043] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 493.491318][ T1043] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 493.502213][ T1043] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 493.514007][ T1043] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 493.525664][ T1043] usb 1-1: USB disconnect, device number 45 [ 493.595975][T16973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.604783][T16973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.834002][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 493.845231][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 493.995196][ T36] audit: type=1400 audit(2000000273.497:29955): avc: denied { bind } for pid=16974 comm="syz.0.6569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 494.023487][ T36] audit: type=1400 audit(2000000273.527:29956): avc: denied { mounton } for pid=16976 comm="syz.0.6570" path="/proc/156/cgroup" dev="proc" ino=97022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 494.712854][T16999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.722178][T16999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.057163][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 495.068135][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 495.078284][ T458] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 495.087761][ T458] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 495.097604][ T458] usb 4-1: USB disconnect, device number 88 [ 495.241608][ T36] audit: type=1400 audit(2000000274.747:29957): avc: denied { ioctl } for pid=17000 comm="syz.8.6579" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 495.831325][T17022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.839900][T17022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.921082][ T330] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 496.081066][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 496.087866][ T330] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 496.096247][ T330] usb 4-1: config 0 has no interface number 0 [ 496.102412][ T330] usb 4-1: config 0 interface 184 has no altsetting 0 [ 496.110839][ T330] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 496.120069][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.128245][ T330] usb 4-1: Product: syz [ 496.132569][ T330] usb 4-1: Manufacturer: syz [ 496.137176][ T330] usb 4-1: SerialNumber: syz [ 496.142560][ T330] usb 4-1: config 0 descriptor?? [ 496.148450][ T330] smsc75xx v1.0.0 [ 496.370737][T17024] cgroup: Setting release_agent not allowed [ 496.403301][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.413779][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.753029][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.764139][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 497.362909][T17042] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6594'. [ 497.432616][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.441361][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.776197][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 497.787520][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 497.797639][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 497.807266][ T330] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 497.817024][ T330] usb 4-1: USB disconnect, device number 89 [ 497.962739][T17048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.971395][T17048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.521016][ T453] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 498.671035][ T453] usb 4-1: Using ep0 maxpacket: 32 [ 498.677611][ T453] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 498.686163][ T453] usb 4-1: config 0 has no interface number 0 [ 498.692418][ T453] usb 4-1: config 0 interface 184 has no altsetting 0 [ 498.701125][ T453] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 498.710753][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.718917][ T453] usb 4-1: Product: syz [ 498.723107][ T453] usb 4-1: Manufacturer: syz [ 498.727712][ T453] usb 4-1: SerialNumber: syz [ 498.733051][ T453] usb 4-1: config 0 descriptor?? [ 498.739558][ T453] smsc75xx v1.0.0 [ 498.743372][ T453] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 498.753632][ T453] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 499.485910][T17068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.494770][T17068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.015272][T17074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.024007][T17074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.542961][T17077] FAULT_INJECTION: forcing a failure. [ 500.542961][T17077] name failslab, interval 1, probability 0, space 0, times 0 [ 500.555829][T17077] CPU: 1 UID: 0 PID: 17077 Comm: syz.8.6608 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 500.555857][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.555869][T17077] Call Trace: [ 500.555876][T17077] [ 500.555885][T17077] __dump_stack+0x21/0x30 [ 500.555909][T17077] dump_stack_lvl+0x140/0x1c0 [ 500.555921][T17077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 500.555935][T17077] dump_stack+0x19/0x20 [ 500.555946][T17077] should_fail_ex+0x3d7/0x530 [ 500.555959][T17077] ? kernfs_fop_write_iter+0x162/0x510 [ 500.555970][T17077] should_failslab+0xac/0x100 [ 500.555985][T17077] __kmalloc_noprof+0x69/0x500 [ 500.555999][T17077] ? kernfs_fop_write_iter+0x162/0x510 [ 500.556009][T17077] ? __kasan_check_write+0x18/0x20 [ 500.556021][T17077] ? proc_fail_nth_write+0x184/0x220 [ 500.556032][T17077] kernfs_fop_write_iter+0x162/0x510 [ 500.556043][T17077] vfs_write+0x761/0xf90 [ 500.556056][T17077] ? __cfi_vfs_write+0x10/0x10 [ 500.556068][T17077] ? __cfi_mutex_lock+0x10/0x10 [ 500.556084][T17077] ksys_write+0x145/0x260 [ 500.556095][T17077] ? __cfi_ksys_write+0x10/0x10 [ 500.556107][T17077] ? __kasan_check_read+0x15/0x20 [ 500.556118][T17077] __x64_sys_write+0x7f/0x90 [ 500.556129][T17077] x64_sys_call+0x271c/0x2ee0 [ 500.556142][T17077] do_syscall_64+0x57/0xf0 [ 500.556154][T17077] ? clear_bhb_loop+0x50/0xa0 [ 500.556168][T17077] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 500.556180][T17077] RIP: 0033:0x7f73da99acb9 [ 500.556190][T17077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.556199][T17077] RSP: 002b:00007f73db7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.556212][T17077] RAX: ffffffffffffffda RBX: 00007f73dac15fa0 RCX: 00007f73da99acb9 [ 500.556220][T17077] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000003 [ 500.556228][T17077] RBP: 00007f73db7cb090 R08: 0000000000000000 R09: 0000000000000000 [ 500.556234][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.556241][T17077] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 500.556249][T17077] [ 501.302511][ T330] usb 4-1: USB disconnect, device number 90 [ 501.556890][T17095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.565505][T17095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.721006][ T330] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 501.870984][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 501.877183][ T330] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 501.885402][ T330] usb 4-1: config 0 has no interface number 0 [ 501.891508][ T330] usb 4-1: config 0 interface 184 has no altsetting 0 [ 501.899844][ T330] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 501.909034][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.917272][ T330] usb 4-1: Product: syz [ 501.921458][ T330] usb 4-1: Manufacturer: syz [ 501.926050][ T330] usb 4-1: SerialNumber: syz [ 501.931302][ T330] usb 4-1: config 0 descriptor?? [ 501.936984][ T330] smsc75xx v1.0.0 [ 502.092217][T17097] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 502.132218][T17099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.141192][T17099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.541666][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 502.552786][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 502.894321][T17108] ------------[ cut here ]------------ [ 502.899846][T17108] WARNING: CPU: 1 PID: 17108 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 502.909728][T17108] Modules linked in: [ 502.913768][T17108] CPU: 1 UID: 0 PID: 17108 Comm: syz.8.6621 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 502.925679][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.935954][T17108] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 502.941986][T17108] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d ea a8 0b 06 00 0f 85 c2 00 00 00 c6 05 dd a8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 502.962098][T17108] RSP: 0018:ffffc90007ebf960 EFLAGS: 00010246 [ 502.968222][T17108] RAX: 0000000000000000 RBX: 000000000000000d RCX: 0000000000000000 [ 502.976233][T17108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90007ebfa18 [ 502.984403][T17108] RBP: ffffc90007ebfa88 R08: ffffc90007ebfa17 R09: 0000000000000000 [ 502.992737][T17108] R10: ffffc90007ebfa00 R11: fffff52000fd7f43 R12: ffffc90007ebf9a0 [ 503.000836][T17108] R13: dffffc0000000000 R14: 1ffff92000fd7f30 R15: 0000000000000000 [ 503.008935][T17108] FS: 00007f73db7cb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 503.018012][T17108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.024758][T17108] CR2: 00007f73dad40300 CR3: 0000000151f22000 CR4: 00000000003526b0 [ 503.032899][T17108] Call Trace: [ 503.036360][T17108] [ 503.039384][T17108] ? __asan_set_shadow_00+0x12/0x20 [ 503.044785][T17108] ? do_vfs_ioctl+0x182d/0x2010 [ 503.049666][T17108] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 503.055425][T17108] ? raw_ioctl+0x1888/0x3740 [ 503.060024][T17108] ___kmalloc_large_node+0x81/0x210 [ 503.065349][T17108] ? raw_ioctl+0x1888/0x3740 [ 503.070067][T17108] __kmalloc_large_node_noprof+0x1e/0xd0 [ 503.075882][T17108] ? raw_ioctl+0x1888/0x3740 [ 503.080510][T17108] __kmalloc_noprof+0x326/0x500 [ 503.085419][T17108] raw_ioctl+0x1888/0x3740 [ 503.090235][T17108] ? futex_wait+0x2ac/0x7b0 [ 503.094780][T17108] ? __cfi_futex_wait+0x10/0x10 [ 503.099836][T17108] ? _raw_spin_lock_irq+0x93/0x120 [ 503.105173][T17108] ? __cfi_raw_ioctl+0x10/0x10 [ 503.110208][T17108] ? selinux_file_ioctl+0x732/0x1480 [ 503.115666][T17108] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 503.121386][T17108] ? __hrtimer_run_queues+0x983/0x9e0 [ 503.127078][T17108] ? do_futex+0x32a/0x510 [ 503.131465][T17108] ? __cfi_do_futex+0x10/0x10 [ 503.136175][T17108] ? __fget_files+0x2c5/0x340 [ 503.140885][T17108] ? bpf_lsm_file_ioctl+0xd/0x20 [ 503.145969][T17108] ? security_file_ioctl+0x3e/0x110 [ 503.151316][T17108] ? __cfi_raw_ioctl+0x10/0x10 [ 503.156369][T17108] __se_sys_ioctl+0x132/0x1b0 [ 503.161093][T17108] __x64_sys_ioctl+0x7f/0xa0 [ 503.165734][T17108] x64_sys_call+0x1878/0x2ee0 [ 503.170431][T17108] do_syscall_64+0x57/0xf0 [ 503.175147][T17108] ? clear_bhb_loop+0x50/0xa0 [ 503.179850][T17108] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 503.186274][T17108] RIP: 0033:0x7f73da99acb9 [ 503.190971][T17108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.211083][T17108] RSP: 002b:00007f73db7cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.219533][T17108] RAX: ffffffffffffffda RBX: 00007f73dac15fa0 RCX: 00007f73da99acb9 [ 503.227648][T17108] RDX: 0000200000000080 RSI: 00000000c0085504 RDI: 0000000000000009 [ 503.235772][T17108] RBP: 00007f73daa08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 503.244169][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.252375][T17108] R13: 00007f73dac16038 R14: 00007f73dac15fa0 R15: 00007ffcda5a46a8 [ 503.260373][T17108] [ 503.263421][T17108] ---[ end trace 0000000000000000 ]--- [ 503.481935][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 503.492875][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 503.502730][ T330] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 503.512216][ T330] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 504.497156][ T10] usb 4-1: USB disconnect, device number 91 [ 506.274307][ T3676] tipc: Disabling bearer [ 506.279363][ T3676] tipc: Left network mode [ 506.284440][ T3676] veth1_macvtap: left promiscuous mode