last executing test programs: 8.947868737s ago: executing program 3 (id=729): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) 8.669623765s ago: executing program 3 (id=735): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b45, 0xfffffffffffffdfd) r2 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) fstatfs(r4, &(0x7f0000000380)=""/187) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$BLKFRASET(r7, 0x1264, &(0x7f0000000440)=0x5) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xfffffffd}, {0x6, 0x1, 0x0, 0x100}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') r8 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xc, 0xb, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xfe, 0x6, 0x5, 0x40, 0x8}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x0, 0x39f1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x70, 0x5, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xee, 0x4}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7a, &(0x7f00000003c0)=@string={0x7a, 0x3, "4aab435996e89e2864f5728baed8cd40ea1981c285f7b1e289f37067b5c312ca31c311202e7808ba1094b75f0db749d21a4c0f72599bad577067edf3b139f00e88d2ed648d83fe99038b84dcd1dd675fff6a259b86a7d4fae517850edca5ddcfc22c54e7caa3c3c1394647da1bc00a27158de8d5ef645a7e"}}, {0xd, &(0x7f0000000300)=@string={0xd, 0x3, "13c174f3b30ae06a32008b"}}, {0x96, &(0x7f0000000500)=@string={0x96, 0x3, "ca8423840a961d786594f18732b7751dcc1e08f936a8c5cf4ee543d0a61d5877f07a224c161281f21ae5a8d23adeae53b26addfa121a5c6f87d09ab2bbb84b5d41eec3a408fb2f6dd3107d8295f62aa30c24811e422f326818c6a40d5d576d12e5e01d66e6eff92b9c9372fbcfbcdbe919d5c7f3d4099c91b6b21aa4f2e5d88a3d94d38cd7d4bd22b2dabeb0010c6498c6e5bfdb"}}]}) syz_usb_control_io$printer(r8, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x1, 0x101, {0x101, 0x1, "9e9a2675346357799459c90b6d692a674b5ba33f506723b771eed965409d0f3e9d08a4b3d069f09aa78f6d5cdcd2905eb96957f7d1bc2ce204a9b934dff655d3555326166cf5f1baf4e82b72e97a27ea5820ed2ba88fc1ae077331cf52e4fe4319dc3683172937417fcdb730bc3b08fa8380dab94438289ac86a7de9c396759607b1d12334ca015c858b5577c8a90ee3ac156557a7cbc456e6e655a3ffcb19b3f09a0b77f70b0116fc97a58609b870712bc0c1ebd0490fc8c61c90bbbcfea6a263e0432362f37be703e803f7f0cee31d29ce9129b81f1c369d15bc38ff6c8ce75408e1430c59122c61ffe78d697ad7277fee026a04bb6eae6f4e5bc01d89a3"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="00030400000004030204edabec18541a4c5a309e0cb65c4ad6ad87f2201a5f97ec01fa6be00c545761d9ef500e58171da4e8c18ad5280632621335dac5c89017a6c6225097d5758adbc9faad94f5efd554a6b3c0fd4c2a2a48f7d904140ed20ec44a99ec9b9cc9ef627cfd2f2989ad1d42d5fb52f565965fb46b2bcf51ea8d79759a5b05c049e4b1dff37f654cc577836152cf86f7de0df62f29f763a2e2a1c7573dcfc8fd6277b5e1372fda85021cb794ddc185898a4a7d827945a01d0f49d1840ec871d87f7e45a5d583bcd2e1d8f385750a09623552b7920aa65af408ddf577b51390628bb21256"]}, &(0x7f0000000a40)={0x34, &(0x7f00000007c0)={0x40, 0x1, 0xfa, "dfc1792454fe83ae8752267a4f127b4b95ab160bdf1f3ea90d8f088a495397341743dc355f62265667869cc6ec11213e6008da5baf9d4ab96dccfe11b967f484cb2ed07c8aa819029f754503c6375db2bb9b8219f7afa2b9ad0edddab6eba7a75f351c1bb5bb1e51ab1f90bca62e950928afb42a50aea8a50f5ab885c2c97ed15495e46e114936a04b609ede37f6b89b79c0d6266d16bdfaa7c996b2d5f91d239b96c50aaa5c91c71cc80b134f8de99054b372020185e5923a98b4f3a66c71b2c687f30810d35ef463254307e0640f43b33afcf3fdca89507f9a321287e956dbd87bf5c8115e8aa2edab327175069552ff7fed9ab198517b72dc"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x4d, {0x4b, "3af12003f2e41052bc49e130e89d834f46fa84eba331feb04f08f1b8aa7c3de01ce05e07754a0ed5f4dd42c4faed3b2662f5754fd1bad4908c1f4cda8a5e4402f133b057011af9009127f6"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x3}}) 6.391805556s ago: executing program 2 (id=743): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r3, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0xfdef}], 0x1, 0x0, 0x0, 0x0) 6.301320876s ago: executing program 2 (id=745): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)=r0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000ff0f00000400000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1506, &(0x7f0000001d00)="$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") sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531fff30000000000000008"], 0x40}}, 0x0) 4.99463565s ago: executing program 0 (id=748): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000300)=ANY=[@ANYBLOB="757466382e312c726f6469722c756e695f786c61746506312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c636865636b3d7374726963742c6572726f72733d72656d6f756e742d726f2c636f6465706167653d3733372c726f6469722c696f636861727365743d6d6163696e7569742c726f6469722c757466383d302c00"], 0x3, 0x350, &(0x7f0000000580)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}]}, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) 4.92401051s ago: executing program 3 (id=749): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 4.83272307s ago: executing program 2 (id=750): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c011, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="17c88ed438bacd8e487220f8c185e4357e301584810766a53389afa9b3e7e996f94f583b4425476482c04f8839ed235ab3897db6637969f94bdf08f3863fa8d1440f6c8e52f780bfe0d669021ef906a6a7df1685cbfda6d49297b31754ec5b64ca21f61e3ba9ac8bb074bf4950d103c47fe54a13984ec78675347f0e030fe91862a7792b63bfbc97863fd6f91eb038b41a8f3215f5ddd8e0e5a8c080615c3c", 0x9f, 0x4800, &(0x7f0000000400)={0xa, 0x4e22, 0x9, @remote, 0x9}, 0x1c) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) sendmmsg(r7, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000700)="c3a09ce881fd1e9fffb7e4e1716563b3b20a91a61db66039af789e2f956a5f273ce69618b55db4466f9f294da651b0bfd622b23e481c73d9f39a005439849700181ae9032836140f2c3fe99a841f4621a2205725d9eb119a01d2cd802cedb22f9dfc30fe8e40575b73ce43f7e27e09a8e55aed1ba29a937b361e64b0a00d3c390b22ec39ee556fc2c7fdf2481c51c72f25841536898c3107a3adedc6b1a1042e3322a796d64cbf8725874ea6d83598fb22d76719b7fadb835c518dc0d3d96886a55b191dbc5db126c4f500644ba137a3", 0xd0}, {&(0x7f0000000580)="b50619f315da", 0x6}], 0x3, &(0x7f0000000840)=[{0xc8, 0x102, 0x2, "b592a57474086a23cfcf66e76f71dd4ccc1be66302c9052f9b3a5cf898a4b56fcacb3cbb572fb34bc4e1c4becaa660f398e6e9daccd3250d07b7b1bd7ebf602db76f2787320d15a95879a913bbcbcf597cb1968e89315951619209f6eb3bd13375a6b3a196336bf1e49022d538266530af8c1e14919dc683b6c18033482fad31b6e178b006dba3bf3f8181011972167ed68291ebb981006d415f046d2ed517de705c126564351509a6bcd10272fc5532bd08f74f3b29"}, {0x38, 0x114, 0x9d, "9f294f140fc3c7f54a38ab07096945ab90e6553b1f7b2edceea024fe5e6e774a82464aac"}], 0x100}}, {{&(0x7f0000003f80)=@ethernet={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, 0x0}}, {{&(0x7f0000004480)=@generic={0x1, "1bd5e69a3afcda93497c90173b5a3210d376ec2bdfc3ebb265d33c51f092e40454a4d8ce6d0ff806a3cb41b43ee6c867f8db89fee2370327f0c2b5cb2a2b71a17e52a36bb6f0b2e14dfdff798d8a521cee2857ecca96844a4ce18c234da3751687f731687065476d628f7e27adf09d9023c58c90603cf5326f4fd54ad7bc"}, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005540)}, {&(0x7f0000005580)="f1548826e336174be0e83e884e7c903a44ff43835491f55ec4fc500218ff98a7830d5c74221dd44b1d", 0x29}, {&(0x7f00000055c0)="ce7efb1c04f0975e85226ae1786d859db4fe25199bff31743231d1cdd36ff2efd13e30f8d1b4b7bd97fbc01dafd9f791e57f85bfec2226bbf2eba1324e0c9e25d9e3b696fc2108a2f0903402acfde512f22e748a2c2bda95b87e7986acfa9dbff6165f", 0x63}], 0x3}}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005780)="9d82965a128073cbea61ba88e2ae61a2438716cd2fb9594768e70f3f94e9216e7805f4", 0x23}], 0x1, &(0x7f0000005800)=[{0x58, 0x117, 0x9, "c88418772dee2cca75d039b323e9e76f3c731539014b8d0179a638578ce4399cd858a46d47883e839990a692761e0f7e7cb6b7f22db819652d9915f9f4cf09eea4"}, {0x10, 0x10d, 0xc1}, {0x1010, 0x10b, 0xc, "78cda09208f314cc9938be364e6a21a569c681664cde2dc8df08f1b0947cc11d1a6292ec1c0b1791ae3d803035c52183110da0696159b27e5a88180556325641a0991caea29b319740a459a3e43fff0cdbcce1285da7bb5a428245cdc64b374b7db79bc523093b0a687094875fd381002e5afda91fb7b936dd0d4f3faa8fdd72b0e061d3b18b9fe11018926022b192e14323df1dd12aaa536f1b349a7ef943669e6adb2110005b1a05232baabd47609934f21a31b484cd72f598e5e2ed7a5d3d18661cee85fb71e29df757e47c5f49f3a1f225a6367c9ffb717d5131441e8856bd97d5bb11354c55087356a6fcfcaa30d18de40766739db719f4ae81ff1fe2eaf3101828f2135b3a75716a0be266f0dab69bf2700118561375e8c406fcadb5199cafe7b07d8b90fa35d56a74279a66220fc8e6d1a8fe525d4201cd40882ad9c20a186314f2b96be94e718e3d2e4bb4fe8e979a8b098baf3f8c02a1aa5655fa754392174e152c2adae29f6f17e3c8008cbbc4d2327f58cc56ae4896e6eaafd9be55bb29169ad2e0a8b92672ba2500eb078ac8fd226015f08624e55711bfe28fa474d562809266a634e410082b237c54b22d5e38a7981969c1ad387ad59100e953772d45541fddcdcb48bd12ac8ed314b5d12a36a5389b6e109d0ef301c9da145612cedc2909dd13019ea606cbebd10dc3b316f2a6d65fcf6c90e92ef8875c16253d1c40d95a1f6c36ae012bdcf5f9e85734730f674553aaa20d32bd26c900dd57b00d7d6a3c3c4be6c36f815345fe40d8480783285b0fa1c5f9974bf4bff470f1fc7a43d5ec380d95935a05379ae8528327f4aaf19f84363307452cb2b342072dcc2f29a37e1d5848784a39ef1478fb643cc5f9632d43f40ae2d3500494a5e51bee4db1ef3e96ea7b932e78ccac0b32ebccf5248b704d503b30d22cc9ec7c428ba0a7769fbd92ad302a7e883b51beef6a7056fdc0284dc0e8b62addcf765bc8d26ac9245bb1d323d23142bfdaa9120118ad74d6640bd813aad898fdbd3b6b45c49633fde731d87c7e282f6e16b35bbb587af2ecad53b430831cd34085c42f37ab2d8e3702a73279d48fbc94eb3fe7f64b17574df55e289261cf93e31856523601be51629562b736479a6516398612f47e4ad6b3b3e7db38bc6315a0c572ce54fe701ec3945da764aa38503d48f06925417fe182a9488aef278942db05577dd246933f1d9d05fabeaba571510f19a31dbdc9be9f2abcd531ce313c50359cc9919713237577eebd3e29e04d47789ffbc7f5e3d51e59ed90f32c7d616f01f686cd3c032f0a1644db379eacbf0f5a14a17ad0233b327f2b6dd13933cc28df914c3432fd88a413ec5328a3882642c19777e783973dfba3b47e2ad21ac828a98983d157d4d78b7136ec81ccd04b5222bd2672d08d94555efd225ea1647f412df842ff302ddd727e14fae8149425fe630119e2640a6636d01c10f3260c0a9125ec293b6d795dab6dd22bf3db1fe13f72eb6a08082bf5f79b30d1c8d3568d66e0149b69064c2600bd90faddd66269e08c977f91081463c59af32d13f5946748c5a4078e625ec0bbdcc9b5c19d28b51ed0fe3fd507b9a2a763f1af9dccdd62971a0ff6fbcecb4628db6707bbf43eb3909533dda2da9f974bd086908338c12b41066c10ecc47026aa0b91fb258786829809e94909f531ae21aa9b7a0e3ee4d972c39d1cce46ff4ddeb19d84b649836cbb3c578cb070f7f7ebd157e15d0a76d82ad6667d93d6d0482c3a3a9ef9bd009394d5b4bc6e9d4cf862fbbf8727b29efd153e9e00b21378043413f0aa52891fecbb92ece7ad70862b9d9bcbd4e39f3e72f575bec9ec4c2d2ec2e7a43fe32568cce53a38ed41e8e24fc2b645e5d5cc731c9e7bde312f9f3b29dc2874ac50f002c4a4193cd0f3e3f839d45371c17ef9aaa3eea5bcce2bbf974c666ccd6c01a3b1285287ad9a53a6b9acb519055c1690310cce7423344093581c370a1a27f73732f49c1e2d037445a47efa10b79fc41f09df79026488db12f9632ba978eb3abb88ff73327092516ca5f2d0f3958022afc96288f087bc8f9c354e4b26a55a25b3af36e88b66bbda97059f789a86ce53e886d4a15805e824c4946d6ed98f950b3e58be50cad12d7376abeea21aca2dca771e6f958b5b82f871cd570fa6d6f625d471ae5829e019d0d54eaa845f81c1e4865647cb4cde211aabf82a3e8aeef3776bc580338deca64d848929d17665ce11fdee91756fbd094415c06dc1f8a2c6b2a618c53f5ca25102bd339187da4ad24db46f43f29c5c3c0020c16bb7e84e5ad6121fa806f0bf9e333525cd1c827dc1930dad424e3eb0e808cc0364198744f9373671707ebadf2c3d6c894fb767dbe2fa4dc598d4b1b9960ac16ca43b8b0b95762788ea6b1082f591f076befe1ed68be0ce22d0c4183afff4b02c60cf9aa8561e4b65e83386305cc3493edcb13cd5422602164751f8816289a5de2e7bdfa241c2919b166ad536a7c3c45bdf3ef56a12cecc6a9ac4bddabef1e39d55f93316f0b551fab7797ed56478291fee01ab21e5340aade471f545ae60d0222d5b22e4370b68f2118323d98f9112a2e4fc956b4cfeee44f057990a7f7c1dccb6640b155f8c129183672a2b2ca7910e2369817fca7851a32d04dd5c54647ac267a577849d5c6ca12ad6de8409ac864b5f0683bd31fa1485141dc5baaceb6164e8b4c0c261e7fcd9927d862cf2d1ea1cc51b5e6d1ac5aa5210ec5dec0fcb789566782b142bd3fd1169b21181ad7a03fa40f8ad4c898f20ca779028dfadb4283cdc2bcb8bd82e91f7755872b28da5ae5ce179d5f6bfe74f58335c56bb71f01c6576e6cc64cd7a59f7b2657efcf5a72e23d83e337e6660cc701419ce5e11babc278789b6e0a4ce56cbdecd354f2c2a97d66e498fb439a07fb382a7003a6400ad786b15a6054698e441966fd8b01f4666709ac8e1f0371f913c946a890bfe54257f11be8c2b778a57ac95bb29c77ef6270c6fd02e39dfd6ab81260ec3ad249d74e81eca3f77a59eeafffb57e4f72d2ab32546c726396923b3b46d77b4ff9eb5a5b18ae9f577359dc095b8a10a6c0730748b355f1a8fd45ed58e4f023b9070089258ddbebe2520c0de70916c8eaeeecdff0a1d40c3fe62e0434003060f4d82ce3b6fb1294707239caec9d1684fc613e3daf5585fa98c1fe5dcd445b4085bbb59a9137569bece2ef558c0d7ed3c83f8dd796c1ddec2ae5e1a3ff2cc641f1407b613d35f6449c8f58de9b6dc249cc4ef02317b25a66042c073f12790f6073444dc57f7a608f2e6d3840567e608d85dfeae3f8a29a7ebe82b49ae2b928ef13b3ac52494eb7a6a23b3c8baa8a76aa031cec2af05be06289ef943f4f1715296e7b961947d05a3e61fef31d062fba5e327254dbd63eac9eb24acb04ccf71f19c9358fd4ce08069ab5d44d116c43790514491b1578aae2055417524e1b0ed51ac8ae825fd2bef4174791be6f058f57a2d67370217b5c15f3e889e71640b756fc9e212698f67af94c5605bcf826e16e28b18fa091a9a7634e678013821c3e69722fbb17447c3aa19210a731cbf6f51cce0fa2ca5756e2ed4d6d894d94869ac34d94c4f7173dfe449f3ee825c2ca9a4dde6cc8f0ab054cb0cb1d3581557604604044a78173e0da6f1313871516a677f03a995daf33938717bffb1cd22dc38c43dc4494d1b13b670f50cb86385406191108ae7e268e8fdd31ff9d0838038cfc176c8b2ec8be9368f74e6cc6d4f0fd2bea6a2c212503702c795571fbf6ee4530afce04828d3c6287890ce32bd91f1e23f4aa2bcd9be6de7a86159e27dd60eab2fc09b4f98b63069483a4bcccccdd0766c16192a8110316cfb1e7a544fc6681767b8285105abeb358000d7e427887160625a66f60dc58ed62fd6ce2e840e83efe5cbe12acd9fbaa4846bab1c15c1cdd965f1032a2b26007d22c4a8f56949aa0f718d5c5103bffd532decf9f6987249d9d63be2c8194e7b901fa74755cec59c2fb0b32a689bca7a627d1214d46f06de28c996cb172d530c976c507d511e4e25af1b875e64ef8306aea12f492da726e3b32601c1bc26c787319533a46ad3a3770cc6b125919ef63b48621de8ee5d6d3615f35e3ab8b41d060fdcf0b7a73f5e779fc9c5dbe69f6947dd0ab97c2aa4c5d5cb5be259dff6685defd06379fa7b6cbd83703085dc81fe53596212840dab387eb515d0f26a1147bcef6f70d8450fc1be42c802fdd28c158e370fe23d6985202963bc4be04d9fc20ed5ff6b2583947457e351ffedbff459a60f3fda3413ff9bd3ba7f360f72db252a68c5d9ad2140f672bb2b127bec502952f0be963dc4db5aa1a08a9ff594541a74beb36b759868fd7ebf499f1ef431a9b62b24e508a3245033b3113bcc2471b565f096648b160c91cac5bfec927d8c7516b7b18e5bf16ddebd777bfc828b0a65f135837807dd06ef8f90e8ff4d102e99a66c7a882126c6ff4c1ce9ac7eb49c4e4a075513f14004b5cd7d1af8a8b3d0f32bad000e2928f9aac5f6a2725bb5dad8a2b8590a6b494d81fd9909202ca6fa0a1fcee4dc1cdd80bcce4e94fb1768456afb27795be2088de407402cde83def5fb7e4c63563d45951f937ce86bc41022c41756cd6702fdd86a73345f9d93092065ea8766ce9de3158656962df3bcc77d62414e7099bdb1e90e46037b1b86a8290c8e72a210a579ee116ddfd1443cfcfc81954e0e39ea8d8a44710959b2f0fa3f3f4ff5bf8a509d21d95de119b0952bbac080e502f3138db2a740187ff3659ac42b59e95c4280a1d8da6a2fb6c216bea48cf2387b5a83c53b18ed2f05d84e864a07b81f227c6fa04f50c865cbcac7675faa2ac614c2ddf0eb632ffccf1414197f16b1c81a69e86046e3dd9714e50fd506dc8a97fd7e6047761f59e17e01d64a38e08743e8a23712703035239bcadc526d823bb4018947ef80f7c89400b98db65e81b35d4461494075c4f9fb9e669737fbfc0b5b3c1bfe7da40cbf5d42c452647a6aa2220f4992a7c3ad35cf16b97c8a727d55baebe0c9194fd209c7c7b3d03ec5d0bba361f5a669e967c45cd36d8697efe5fbfee37b56b53aad5336e1cf16c9118bb9a4304ca370adb4a72e54390090bd4e154f60e50ee41178bcaee0076f8a8560cfc0c0360613288562bf4f8f6640c0ee941ec20963c1974b95964132af66e7f67cb1ceb81e5f1fdcb878cefa6ca2a0bfc66c8a9815d79dcd101205eabff91115d64fab1d6502411e1741379c3885cee407472ca680f4f110a99d83a6639b4b1c933c255970ce263497d5dd018ce0af2a150abcef803e01ffc11d23e8da0bec14eeb63c22af0eefcc13b2407f6e2905a989087135a14ef5434214f34619672b26a90b6a6544f7276a0262cf9d7a2c3c1c22fb2c7a92df28c0473eef42607694914c3a9607bd49d51e219ec2df1b16a9c1f735fe43fe344df1a7f03b564c7c936e315f5421c1ebd4ce293ca1a6df388d29e2860b334a7bda20e807cbe74320f5a8d57c1efec9236b680fe9a29dceececc7af40597ee8ef216f88dedbd5378f4c4f61372f688352d2052a67da7e2face87c448beab945a9a391e6112abef5ace1f0b486f6db3536b0faae29c29b157aba91fbd842bfaa17a9813796349d37fdb128cd638aad4758cf5c406060996407273d540f96a91eabe614639cae2b87d6e8684a38862b8fcf8fca658ce8eb5039b516db03781a139b711ec9e3c65598ee40b672a4725996e831d3da56f9021c2044b6bea78acaadbb16814b8163a6e7b20cc360"}, {0xd90, 0x109, 0xe, "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"}, {0x30, 0x102, 0x9, "fd28d4e3ad137a3487aa1003966adf707edace48d3569d4e8621347513bc"}, {0x58, 0x3a, 0x401, "b2a86502eaf4cdbaf318a041e8b14c91d38d5422179df9f3ea094b9ae57af2ebd00fadb9ef167b268186d79c62eba12ff963a4dbe3db4cd08d82d116da1da856e54c309826cf8450"}], 0x1e90}}, {{&(0x7f0000008980)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, &(0x7f0000008bc0)=[{0x0}, {&(0x7f0000008b00)="f8dde28fb91ebef35d80d3cbdc299258e8322658ffae6e4df25bd264fc4f4bb29a53e800b397d32fd7947a216ca0d53223eb2eedbd84d27cf9826ce1a6c4451fb7b4c0e5d03a91be6161fd32789c847b9cc35d2db0acd23d1f5628f4e550a2e42f0d83dea6e1a9dd968323d584e98ebf6d3ccf75fcc207ec0940ca1fa10569c695ff8ab50ba108fb70738326074e03ccd7bfdff226fcab0950c6a04bdc07b5f1106fdc5997ea5b79a27214196daf69", 0xaf}], 0x2}}], 0x5, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 4.610272759s ago: executing program 0 (id=752): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000300)=ANY=[@ANYBLOB="757466382e312c726f6469722c756e695f786c61746506312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c636865636b3d7374726963742c6572726f72733d72656d6f756e742d726f2c636f6465706167653d3733372c726f6469722c696f636861727365743d6d6163696e7569742c726f6469722c757466383d302c00"], 0x3, 0x350, &(0x7f0000000580)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) 4.441703628s ago: executing program 0 (id=753): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4.011054807s ago: executing program 1 (id=754): r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)={[{@fat=@errors_remount}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@tz_utc}, {@fat=@errors_continue}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@quiet}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$addseals(r0, 0x409, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) eventfd(0x9) prlimit64(0x0, 0xe, 0x0, 0x0) 3.799710756s ago: executing program 2 (id=755): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 3.734373155s ago: executing program 3 (id=757): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) 3.690360075s ago: executing program 4 (id=758): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000400), 0x1, 0x0) close(r2) io_setup(0x7f, &(0x7f0000000140)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @local}, &(0x7f00000003c0)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xcc3, 0x7, 0x6, 0x56206, r3, 0x18, '\x00', r4, r0, 0x1, 0x6, 0x0, 0xd, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) 3.411234704s ago: executing program 0 (id=759): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c6572726f72733d636f6e74696e75652c757466383d302c636865636b3d7374726963742c696f636861727365743d6b6f69382d722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e0d5f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d302c65686f72746e616d653d6d697865642c636f6465706167653d3733372c757466383d8ed7757466383d302c00"], 0x1, 0x2b2, &(0x7f0000002880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001000370429bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="93040400000000004800128008000100736974003c00028006000f000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff0800ff03ef00000008"], 0x68}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207900060000000000000109022400010000200009040000028103100003d900"/54], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x4, 0x7, 0x2, [0x800000000, 0x6]}}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.291388044s ago: executing program 4 (id=760): syz_io_uring_setup(0xec5, 0x0, 0x0, &(0x7f0000000040)) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000003280)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x18, 0x30, 0x68, 0x0, 0x8, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x3, 0xa8}, @ra={0x94, 0x4}]}}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x9, 0x0, 0x401}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000800000000000000000000000000000000100008000000000020f827719b013231e331425edf24f57213d17fafc57cd33f9aa4b5d58176a824dee629e81b6a2e514e581c8a5cd05376204848d6854ae3e9808cfa8a2d9ae353d05a09bf2bdd0e245232147345c253193ea53445b1e5adc8a57fdf4c34c3c46d934b4bbd7cb5f85c921b9133d6d6ce949bdbe9ff61a94d3c5aedabc5c09b0d0c7885078ef91c869f4fb4315533b9884ace829d7e39ba6c8e3d8da1e53dc92c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030fb3034303030302c5fdd2de55f7334857b305bbe152e58757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) process_mrelease(r7, 0x700000000000000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x535002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2, 0x4}, 0x38) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000002e80)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="fe34c1bd2831e27712deffb06ec2ddcaf61a8c86e9f11652573bdafdaffc3cfaa0342638d467d7a7372ec93a9cc301b73710d1c143c2472fbf9d2814191e366eca82b9a64d580e4abaf368041de91906c79ce95fb92c64b228230ec9bfc1c3f0f783e09038df979ae5919ce79561e3eeb9a202d48ad577cd58", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="b03134f3786619a47a92640fb756c27c834faaa1ac2e7a5c45b7932f6c7832978c977fb928dbf8b669c57cca26f37bf749672ddf3bd554c82be439b141817bb08eb66f720979881b59e688885de7374725f66f583c7bbdb1a46a5584167ef8d152c537fd6c914adfb2d0325cec807a630fa4f0d2cf848acbc53e73e9d2f2eb10567147cdd6cba3f20b1f2e5d01453d7ea6ff408c309f5e965ed169d715ae73b83e542d18e9413f3fd2423deb5924eabf070b82ac03f126e2de", @ANYRES32, @ANYRES8], 0x25, 0x5586, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='f2fs_unlink_enter\x00', r8}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 3.004502583s ago: executing program 1 (id=761): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240)=0x9a, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="e26b5b8d11d85f3a4d810da8bb1b031de544da6b32ad7f8e5e1d72e16ed13a99ab1e3ef74f832572e6b2e18b6bb89b926f8928400018e6843a8d1f6828391b3da0b35b355a4a395daabe05e97d5ced49cdfa482f9549712833c703c2596b2f981c20c67822dfbf529184ec6e1e6f954379742746568ace1213a9a197f1e2d0c2dc5f624e3f2b9a4c06509b65a46a4afd5128b923884bc5ece3bb686947110f7fd48cba7caeecae9f6e53d1d083619f91773894d02ea2f7097e2c1971025b06e21fd3c183cfa2219f07510a73"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x140) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000440)=0x8, &(0x7f0000000500)=0x1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001"], 0x44}}, 0x0) 2.820749731s ago: executing program 2 (id=762): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4084, 0xff4) 2.745053702s ago: executing program 3 (id=763): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000300)=ANY=[@ANYBLOB="757466382e312c726f6469722c756e695f786c61746506312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c636865636b3d7374726963742c6572726f72733d72656d6f756e742d726f2c636f6465706167653d3733372c726f6469722c696f636861727365743d6d6163696e7569742c726f6469722c757466383d302c00"], 0x3, 0x350, &(0x7f0000000580)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) 2.35791144s ago: executing program 3 (id=764): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b45, 0xfffffffffffffdfd) r2 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) fstatfs(r4, &(0x7f0000000380)=""/187) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$BLKFRASET(r7, 0x1264, &(0x7f0000000440)=0x5) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xfffffffd}, {0x6, 0x1, 0x0, 0x100}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000002340)='hel') syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xc, 0xb, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xfe, 0x6, 0x5, 0x40, 0x8}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x0, 0x39f1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x70, 0x5, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xee, 0x4}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7a, &(0x7f00000003c0)=@string={0x7a, 0x3, "4aab435996e89e2864f5728baed8cd40ea1981c285f7b1e289f37067b5c312ca31c311202e7808ba1094b75f0db749d21a4c0f72599bad577067edf3b139f00e88d2ed648d83fe99038b84dcd1dd675fff6a259b86a7d4fae517850edca5ddcfc22c54e7caa3c3c1394647da1bc00a27158de8d5ef645a7e"}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x96, &(0x7f0000000500)=@string={0x96, 0x3, "ca8423840a961d786594f18732b7751dcc1e08f936a8c5cf4ee543d0a61d5877f07a224c161281f21ae5a8d23adeae53b26addfa121a5c6f87d09ab2bbb84b5d41eec3a408fb2f6dd3107d8295f62aa30c24811e422f326818c6a40d5d576d12e5e01d66e6eff92b9c9372fbcfbcdbe919d5c7f3d4099c91b6b21aa4f2e5d88a3d94d38cd7d4bd22b2dabeb0010c6498c6e5bfdb"}}]}) 2.3007757s ago: executing program 2 (id=765): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b45, 0xfffffffffffffdfd) r2 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) fstatfs(r4, &(0x7f0000000380)=""/187) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$BLKFRASET(r7, 0x1264, &(0x7f0000000440)=0x5) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0xfffffffd}, {0x6, 0x1, 0x0, 0x100}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_ep_write(r0, 0x82, 0x3, &(0x7f0000002340)='hel') syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xc, 0xb, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xfe, 0x6, 0x5, 0x40, 0x8}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x0, 0x39f1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x70, 0x5, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0xee, 0x4}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x7a, &(0x7f00000003c0)=@string={0x7a, 0x3, "4aab435996e89e2864f5728baed8cd40ea1981c285f7b1e289f37067b5c312ca31c311202e7808ba1094b75f0db749d21a4c0f72599bad577067edf3b139f00e88d2ed648d83fe99038b84dcd1dd675fff6a259b86a7d4fae517850edca5ddcfc22c54e7caa3c3c1394647da1bc00a27158de8d5ef645a7e"}}, {0x96, &(0x7f0000000500)=@string={0x96, 0x3, "ca8423840a961d786594f18732b7751dcc1e08f936a8c5cf4ee543d0a61d5877f07a224c161281f21ae5a8d23adeae53b26addfa121a5c6f87d09ab2bbb84b5d41eec3a408fb2f6dd3107d8295f62aa30c24811e422f326818c6a40d5d576d12e5e01d66e6eff92b9c9372fbcfbcdbe919d5c7f3d4099c91b6b21aa4f2e5d88a3d94d38cd7d4bd22b2dabeb0010c6498c6e5bfdb"}}]}) 2.169788579s ago: executing program 4 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) preadv2(r3, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0xfdef}], 0x1, 0x0, 0x0, 0x0) 1.939140448s ago: executing program 1 (id=767): r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)={[{@fat=@errors_remount}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@tz_utc}, {@fat=@errors_continue}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@quiet}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$addseals(r0, 0x409, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2d, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd(0x9) prlimit64(0x0, 0xe, 0x0, 0x0) 1.252285975s ago: executing program 4 (id=768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) 1.240403225s ago: executing program 4 (id=769): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4084, 0xff4) 1.016312935s ago: executing program 1 (id=770): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000400), 0x1, 0x0) close(r2) io_setup(0x7f, &(0x7f0000000140)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @local}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xcc3, 0x7, 0x6, 0x56206, r3, 0x18, '\x00', r4, r0, 0x1, 0x6, 0x0, 0xd, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) 931.433874ms ago: executing program 1 (id=771): r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)={[{@fat=@errors_remount}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@tz_utc}, {@fat=@errors_continue}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@quiet}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$addseals(r0, 0x409, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) eventfd(0x9) prlimit64(0x0, 0xe, 0x0, 0x0) 326.667622ms ago: executing program 4 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="0c906cc23e5e0b1ed40000f5009b9836137bd7a9dc9837fcf44f8d15ab7c35e00664f770c6f72f6c188a6da7bc34e6a30aeabdbd7ffdd4e4c2abc128f408d3db76101f0684c392f8b20695e0f11dde348f316bac578428657693d45651d55ad8ea9faac64850da0ef3345c7b06994c6b87bc9e11f110d155bbe5fc6c3bc698df49add8684fe1dab9bac1a2920191a948", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r2, 0x5428) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0xfdef}], 0x1, 0x0, 0x0, 0x0) 320.253872ms ago: executing program 0 (id=773): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@multicast2, 0x7}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4084, 0xff4) 1.8956ms ago: executing program 1 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)=r0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000ff0f00000400000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1506, &(0x7f0000001d00)="$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") sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531fff30000000000000008"], 0x40}}, 0x0) 0s ago: executing program 0 (id=784): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = dup(r0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="96", 0x1}], 0x1) read$FUSE(r1, &(0x7f0000001e80)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500"/19], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa4, r8, 0x101, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_SSID={0x7, 0x34, @random="271725"}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x84) ioctl$TIOCSTI(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b00010000000009044f"], 0x0) kernel console output (not intermixed with test programs): 00 R14: 00007f803a575fa0 R15: 00007fff867e87f8 [ 74.267478][ T963] [ 74.299378][ T351] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.315040][ T351] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.342612][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.356991][ T351] usb 1-1: Product: syz [ 74.362799][ T351] usb 1-1: Manufacturer: syz [ 74.367233][ T351] usb 1-1: SerialNumber: syz [ 74.402220][ T971] fuse: Unknown parameter 'fd0x0000000000000008' [ 74.939832][ T976] FAULT_INJECTION: forcing a failure. [ 74.939832][ T976] name failslab, interval 1, probability 0, space 0, times 0 [ 75.018663][ T976] CPU: 0 PID: 976 Comm: syz.2.149 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 75.028164][ T976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.038031][ T976] Call Trace: [ 75.041156][ T976] [ 75.043933][ T976] dump_stack_lvl+0x151/0x1b7 [ 75.048458][ T976] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 75.053746][ T976] dump_stack+0x15/0x18 [ 75.057742][ T976] should_fail_ex+0x3d0/0x520 [ 75.062255][ T976] ? getname_flags+0xba/0x520 [ 75.066768][ T976] __should_failslab+0xaf/0xf0 [ 75.071365][ T976] should_failslab+0x9/0x20 [ 75.075699][ T976] kmem_cache_alloc+0x3b/0x320 [ 75.080296][ T976] ? vfs_write+0x952/0xed0 [ 75.084551][ T976] ? __kasan_slab_free+0x11/0x20 [ 75.089455][ T976] getname_flags+0xba/0x520 [ 75.093791][ T976] getname+0x19/0x20 [ 75.097521][ T976] do_sys_openat2+0xe0/0x870 [ 75.101959][ T976] ? bit_wait_io_timeout+0x120/0x120 [ 75.107070][ T976] ? __mutex_lock_slowpath+0x10/0x10 [ 75.112200][ T976] ? do_sys_open+0x220/0x220 [ 75.116617][ T976] ? fput+0x15b/0x1b0 [ 75.120465][ T976] ? ksys_write+0x260/0x2c0 [ 75.124774][ T976] ? __this_cpu_preempt_check+0x13/0x20 [ 75.130159][ T976] __x64_sys_openat+0x243/0x290 [ 75.134847][ T976] ? __ia32_sys_open+0x270/0x270 [ 75.139616][ T976] ? debug_smp_processor_id+0x17/0x20 [ 75.144822][ T976] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 75.150730][ T976] ? exit_to_user_mode_prepare+0x39/0xa0 [ 75.156193][ T976] x64_sys_call+0x6bf/0x9a0 [ 75.160552][ T976] do_syscall_64+0x3b/0xb0 [ 75.164784][ T976] ? clear_bhb_loop+0x55/0xb0 [ 75.169296][ T976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.175025][ T976] RIP: 0033:0x7f803a385d29 [ 75.179290][ T976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.198718][ T976] RSP: 002b:00007f803b1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.206964][ T976] RAX: ffffffffffffffda RBX: 00007f803a575fa0 RCX: 00007f803a385d29 [ 75.214784][ T976] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 75.222584][ T976] RBP: 00007f803b1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.230390][ T976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.238202][ T976] R13: 0000000000000000 R14: 00007f803a575fa0 R15: 00007fff867e87f8 [ 75.246548][ T976] [ 75.398848][ T543] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.938463][ T543] usb 2-1: Using ep0 maxpacket: 16 [ 75.969732][ T351] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 75.975635][ T351] cdc_ncm 1-1:1.0: bind() failure [ 75.979285][ T543] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 75.982102][ T351] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 75.996690][ T351] cdc_ncm 1-1:1.1: bind() failure [ 76.002146][ T543] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.012601][ T543] usb 2-1: config 0 has no interface number 0 [ 76.060755][ T543] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 76.071641][ T543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.092014][ T543] usb 2-1: SerialNumber: syz [ 76.107223][ T543] usb 2-1: config 0 descriptor?? [ 76.119698][ T543] hub 2-1:0.79: bad descriptor, ignoring hub [ 76.125520][ T543] hub: probe of 2-1:0.79 failed with error -5 [ 76.141988][ T543] ftdi_sio 2-1:0.79: FTDI USB Serial Device converter detected [ 76.159004][ T543] usb 2-1: Detected SIO [ 76.165799][ T543] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 76.206954][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.217207][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.405991][ T28] audit: type=1400 audit(1736265797.330:171): avc: denied { create } for pid=1005 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.608608][ T1009] FAULT_INJECTION: forcing a failure. [ 76.608608][ T1009] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.621608][ T1009] CPU: 1 PID: 1009 Comm: syz.2.156 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 76.631064][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.640956][ T1009] Call Trace: [ 76.644080][ T1009] [ 76.646860][ T1009] dump_stack_lvl+0x151/0x1b7 [ 76.651370][ T1009] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 76.656674][ T1009] dump_stack+0x15/0x18 [ 76.660658][ T1009] should_fail_ex+0x3d0/0x520 [ 76.665168][ T1009] should_fail+0xb/0x10 [ 76.669159][ T1009] should_fail_usercopy+0x1a/0x20 [ 76.674021][ T1009] _copy_from_user+0x1e/0xc0 [ 76.678448][ T1009] move_addr_to_kernel+0x87/0x150 [ 76.683310][ T1009] __sys_bind+0x161/0x2e0 [ 76.687476][ T1009] ? __ia32_sys_socketpair+0xb0/0xb0 [ 76.692598][ T1009] ? fpregs_restore_userregs+0x130/0x290 [ 76.698064][ T1009] __x64_sys_bind+0x7a/0x90 [ 76.702434][ T1009] x64_sys_call+0x17f/0x9a0 [ 76.706740][ T1009] do_syscall_64+0x3b/0xb0 [ 76.710996][ T1009] ? clear_bhb_loop+0x55/0xb0 [ 76.715508][ T1009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.721234][ T1009] RIP: 0033:0x7f803a385d29 [ 76.725492][ T1009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.744929][ T1009] RSP: 002b:00007f803b194038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 76.753174][ T1009] RAX: ffffffffffffffda RBX: 00007f803a576160 RCX: 00007f803a385d29 [ 76.760989][ T1009] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000003 [ 76.768800][ T1009] RBP: 00007f803b194090 R08: 0000000000000000 R09: 0000000000000000 [ 76.776612][ T1009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.784431][ T1009] R13: 0000000000000000 R14: 00007f803a576160 R15: 00007fff867e87f8 [ 76.792411][ T1009] [ 77.388240][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.898343][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 77.953396][ T24] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 78.038833][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.061323][ T24] usb 4-1: config 0 has no interface number 0 [ 78.074351][ T24] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 78.112930][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.122226][ T24] usb 4-1: SerialNumber: syz [ 78.155361][ T403] usb 1-1: USB disconnect, device number 5 [ 78.307650][ T24] usb 4-1: config 0 descriptor?? [ 78.338025][ T472] usb 2-1: USB disconnect, device number 5 [ 78.338142][ T28] audit: type=1400 audit(1736265799.260:172): avc: denied { block_suspend } for pid=1017 comm="syz.2.159" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.344827][ T24] hub 4-1:0.79: bad descriptor, ignoring hub [ 78.372870][ T472] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 78.389709][ T1025] FAULT_INJECTION: forcing a failure. [ 78.389709][ T1025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.394022][ T472] ftdi_sio 2-1:0.79: device disconnected [ 78.410000][ T1025] CPU: 0 PID: 1025 Comm: syz.4.160 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 78.411427][ T24] hub: probe of 4-1:0.79 failed with error -5 [ 78.419565][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.419581][ T1025] Call Trace: [ 78.419588][ T1025] [ 78.419595][ T1025] dump_stack_lvl+0x151/0x1b7 [ 78.419625][ T1025] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.425853][ T24] ftdi_sio 4-1:0.79: FTDI USB Serial Device converter detected [ 78.435346][ T1025] ? mutex_unlock+0xb2/0x260 [ 78.435386][ T1025] ? __mutex_lock_slowpath+0x10/0x10 [ 78.438934][ T24] usb 4-1: Detected SIO [ 78.441251][ T1025] dump_stack+0x15/0x18 [ 78.446320][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 78.451057][ T1025] should_fail_ex+0x3d0/0x520 [ 78.451094][ T1025] should_fail+0xb/0x10 [ 78.492288][ T1025] should_fail_usercopy+0x1a/0x20 [ 78.497143][ T1025] _copy_from_user+0x1e/0xc0 [ 78.501572][ T1025] __x64_sys_epoll_ctl+0x120/0x1a0 [ 78.506518][ T1025] ? ep_modify+0x720/0x720 [ 78.510775][ T1025] ? debug_smp_processor_id+0x17/0x20 [ 78.515975][ T1025] ? exit_to_user_mode_prepare+0x39/0xa0 [ 78.521441][ T1025] x64_sys_call+0x61e/0x9a0 [ 78.525779][ T1025] do_syscall_64+0x3b/0xb0 [ 78.530034][ T1025] ? clear_bhb_loop+0x55/0xb0 [ 78.534567][ T1025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.540715][ T1025] RIP: 0033:0x7f6aea385d29 [ 78.544965][ T1025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.564676][ T1025] RSP: 002b:00007f6aeb240038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 78.572924][ T1025] RAX: ffffffffffffffda RBX: 00007f6aea575fa0 RCX: 00007f6aea385d29 [ 78.580730][ T1025] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 78.588541][ T1025] RBP: 00007f6aeb240090 R08: 0000000000000000 R09: 0000000000000000 [ 78.596353][ T1025] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 78.604168][ T1025] R13: 0000000000000000 R14: 00007f6aea575fa0 R15: 00007ffe6c687ca8 [ 78.611982][ T1025] [ 78.677859][ T28] audit: type=1400 audit(1736265799.600:173): avc: denied { name_bind } for pid=1029 comm="syz.0.163" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.710051][ T28] audit: type=1400 audit(1736265799.630:174): avc: denied { name_bind } for pid=1021 comm="syz.1.161" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.731397][ T28] audit: type=1400 audit(1736265799.630:175): avc: denied { node_bind } for pid=1021 comm="syz.1.161" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.979380][ T1045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 80.451720][ T1047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 81.418556][ T543] usb 4-1: USB disconnect, device number 4 [ 81.439102][ T543] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 81.463535][ T543] ftdi_sio 4-1:0.79: device disconnected [ 81.665368][ T28] audit: type=1400 audit(1736265802.590:176): avc: denied { create } for pid=1055 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.691507][ T1059] FAULT_INJECTION: forcing a failure. [ 81.691507][ T1059] name failslab, interval 1, probability 0, space 0, times 0 [ 81.734305][ T1059] CPU: 1 PID: 1059 Comm: syz.1.170 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 81.744300][ T1059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.754193][ T1059] Call Trace: [ 81.757315][ T1059] [ 81.760093][ T1059] dump_stack_lvl+0x151/0x1b7 [ 81.764608][ T1059] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 81.769904][ T1059] dump_stack+0x15/0x18 [ 81.773895][ T1059] should_fail_ex+0x3d0/0x520 [ 81.778414][ T1059] ? getname_flags+0xba/0x520 [ 81.782917][ T1059] __should_failslab+0xaf/0xf0 [ 81.787515][ T1059] should_failslab+0x9/0x20 [ 81.791865][ T1059] kmem_cache_alloc+0x3b/0x320 [ 81.796455][ T1059] ? vfs_write+0x952/0xed0 [ 81.800710][ T1059] ? __kasan_slab_free+0x11/0x20 [ 81.805482][ T1059] getname_flags+0xba/0x520 [ 81.809824][ T1059] getname+0x19/0x20 [ 81.813554][ T1059] do_sys_openat2+0xe0/0x870 [ 81.817983][ T1059] ? bit_wait_io_timeout+0x120/0x120 [ 81.823116][ T1059] ? __mutex_lock_slowpath+0x10/0x10 [ 81.828291][ T1059] ? do_sys_open+0x220/0x220 [ 81.832739][ T1059] ? fput+0x15b/0x1b0 [ 81.836553][ T1059] ? ksys_write+0x260/0x2c0 [ 81.840891][ T1059] ? __this_cpu_preempt_check+0x13/0x20 [ 81.846277][ T1059] __x64_sys_openat+0x243/0x290 [ 81.850967][ T1059] ? __ia32_sys_open+0x270/0x270 [ 81.855734][ T1059] ? debug_smp_processor_id+0x17/0x20 [ 81.860943][ T1059] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 81.866844][ T1059] ? exit_to_user_mode_prepare+0x39/0xa0 [ 81.872310][ T1059] x64_sys_call+0x6bf/0x9a0 [ 81.876650][ T1059] do_syscall_64+0x3b/0xb0 [ 81.880900][ T1059] ? clear_bhb_loop+0x55/0xb0 [ 81.885413][ T1059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.891141][ T1059] RIP: 0033:0x7fa379185d29 [ 81.895396][ T1059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.914836][ T1059] RSP: 002b:00007fa379fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.923080][ T1059] RAX: ffffffffffffffda RBX: 00007fa379375fa0 RCX: 00007fa379185d29 [ 81.930893][ T1059] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 81.938709][ T1059] RBP: 00007fa379fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 81.946519][ T1059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.954416][ T1059] R13: 0000000000000000 R14: 00007fa379375fa0 R15: 00007ffe45979718 [ 81.962238][ T1059] [ 82.028152][ T543] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.219275][ T543] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.240311][ T543] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.325042][ T543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.340545][ T543] usb 5-1: Product: syz [ 82.344642][ T543] usb 5-1: Manufacturer: syz [ 82.354608][ T543] usb 5-1: SerialNumber: syz [ 82.565538][ T28] audit: type=1400 audit(1736265803.490:177): avc: denied { getopt } for pid=1077 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.604492][ T28] audit: type=1400 audit(1736265803.490:178): avc: denied { write } for pid=1077 comm="syz.3.175" path="socket:[22931]" dev="sockfs" ino=22931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.658270][ T28] audit: type=1400 audit(1736265803.490:179): avc: denied { nlmsg_read } for pid=1077 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.708157][ T1015] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.898152][ T1015] usb 1-1: Using ep0 maxpacket: 16 [ 82.904269][ T1015] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 82.920887][ T1015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.943873][ T1015] usb 1-1: config 0 has no interface number 0 [ 82.958240][ T1015] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 82.977427][ T1015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.992893][ T1015] usb 1-1: SerialNumber: syz [ 83.003271][ T1015] usb 1-1: config 0 descriptor?? [ 83.012306][ T1015] hub 1-1:0.79: bad descriptor, ignoring hub [ 83.023661][ T1015] hub: probe of 1-1:0.79 failed with error -5 [ 83.035268][ T1015] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 83.046464][ T1015] usb 1-1: Detected SIO [ 83.055349][ T1015] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 83.400179][ T543] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 83.418609][ T543] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 83.440329][ T543] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 83.448158][ T476] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 83.549239][ T1091] Zero length message leads to an empty skb [ 83.741223][ T28] audit: type=1400 audit(1736265804.480:180): avc: denied { write } for pid=1087 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.889245][ T476] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.908485][ T476] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.924631][ T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.937744][ T476] usb 2-1: Product: syz [ 83.944952][ T476] usb 2-1: Manufacturer: syz [ 83.952540][ T476] usb 2-1: SerialNumber: syz [ 84.040971][ T1054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.055868][ T1054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.142741][ T543] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 84.152181][ T543] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 84.174339][ T543] usb 5-1: USB disconnect, device number 8 [ 84.184513][ T543] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 84.592079][ T476] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 84.597984][ T476] cdc_ncm 2-1:1.0: bind() failure [ 84.617476][ T476] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 84.639627][ T476] cdc_ncm 2-1:1.1: bind() failure [ 84.859910][ T1121] fuse: Bad value for 'rootmode' [ 84.990141][ T1124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.029086][ T1124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.318401][ T476] usb 1-1: USB disconnect, device number 6 [ 85.327610][ T476] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 85.356728][ T476] ftdi_sio 1-1:0.79: device disconnected [ 85.772649][ T1121] overlayfs: './bus' not a directory [ 86.542088][ T472] usb 2-1: USB disconnect, device number 6 [ 86.551281][ T28] audit: type=1400 audit(1736265807.480:181): avc: denied { ioctl } for pid=1149 comm="syz.1.193" path="socket:[22378]" dev="sockfs" ino=22378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.778144][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.820684][ T1159] xt_TCPMSS: Only works on TCP SYN packets [ 86.959658][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.970624][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.981765][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.990198][ T24] usb 1-1: config 0 descriptor?? [ 87.254698][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 87.343499][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 87.350931][ T24] usb 1-1: USB disconnect, device number 7 [ 87.445149][ T1181] FAULT_INJECTION: forcing a failure. [ 87.445149][ T1181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.458234][ T1181] CPU: 1 PID: 1181 Comm: syz.2.200 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 87.467773][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.477668][ T1181] Call Trace: [ 87.480792][ T1181] [ 87.483570][ T1181] dump_stack_lvl+0x151/0x1b7 [ 87.488079][ T1181] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 87.493378][ T1181] dump_stack+0x15/0x18 [ 87.497367][ T1181] should_fail_ex+0x3d0/0x520 [ 87.501881][ T1181] should_fail+0xb/0x10 [ 87.505874][ T1181] should_fail_usercopy+0x1a/0x20 [ 87.510730][ T1181] _copy_from_user+0x1e/0xc0 [ 87.515160][ T1181] get_user_ifreq+0xd5/0x230 [ 87.519586][ T1181] sock_ioctl+0x60d/0x740 [ 87.523750][ T1181] ? sock_poll+0x400/0x400 [ 87.528003][ T1181] ? __fget_files+0x2cb/0x330 [ 87.532518][ T1181] ? security_file_ioctl+0x84/0xb0 [ 87.537461][ T1181] ? sock_poll+0x400/0x400 [ 87.541718][ T1181] __se_sys_ioctl+0x114/0x190 [ 87.546230][ T1181] __x64_sys_ioctl+0x7b/0x90 [ 87.550659][ T1181] x64_sys_call+0x98/0x9a0 [ 87.554909][ T1181] do_syscall_64+0x3b/0xb0 [ 87.559158][ T1181] ? clear_bhb_loop+0x55/0xb0 [ 87.563674][ T1181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.569402][ T1181] RIP: 0033:0x7f803a385d29 [ 87.573651][ T1181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.593094][ T1181] RSP: 002b:00007f803b194038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.601337][ T1181] RAX: ffffffffffffffda RBX: 00007f803a576160 RCX: 00007f803a385d29 [ 87.609147][ T1181] RDX: 0000000020001040 RSI: 00000000000089f3 RDI: 0000000000000008 [ 87.616960][ T1181] RBP: 00007f803b194090 R08: 0000000000000000 R09: 0000000000000000 [ 87.624770][ T1181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.632583][ T1181] R13: 0000000000000000 R14: 00007f803a576160 R15: 00007fff867e87f8 [ 87.640404][ T1181] [ 88.030592][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 89.342549][ T1209] fuse: Bad value for 'rootmode' [ 89.408173][ T472] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.418208][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.599359][ T472] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.611415][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.632485][ T472] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.642514][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.668135][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.676122][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.686231][ T472] usb 2-1: Product: syz [ 89.690568][ T24] usb 3-1: Product: syz [ 89.698308][ T472] usb 2-1: Manufacturer: syz [ 89.702817][ T472] usb 2-1: SerialNumber: syz [ 89.707418][ T24] usb 3-1: Manufacturer: syz [ 89.716025][ T24] usb 3-1: SerialNumber: syz [ 89.870016][ T1209] overlayfs: './bus' not a directory [ 90.457764][ T28] audit: type=1400 audit(1736265811.380:182): avc: denied { bind } for pid=1205 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.514209][ T472] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 90.520135][ T24] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 90.526010][ T24] cdc_ncm 3-1:1.0: bind() failure [ 90.528157][ T28] audit: type=1400 audit(1736265811.400:183): avc: denied { setopt } for pid=1205 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.531361][ T472] cdc_ncm 2-1:1.0: bind() failure [ 90.561164][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 90.571932][ T24] cdc_ncm 3-1:1.1: bind() failure [ 90.589006][ T472] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 90.599548][ T472] cdc_ncm 2-1:1.1: bind() failure [ 90.744991][ T1236] FAULT_INJECTION: forcing a failure. [ 90.744991][ T1236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.757899][ T1236] CPU: 1 PID: 1236 Comm: syz.4.215 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 90.767392][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.777289][ T1236] Call Trace: [ 90.780409][ T1236] [ 90.783188][ T1236] dump_stack_lvl+0x151/0x1b7 [ 90.787700][ T1236] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 90.792991][ T1236] ? kstrtouint+0xf6/0x180 [ 90.797248][ T1236] ? _kstrtol+0x150/0x150 [ 90.801412][ T1236] dump_stack+0x15/0x18 [ 90.805407][ T1236] should_fail_ex+0x3d0/0x520 [ 90.809919][ T1236] should_fail+0xb/0x10 [ 90.813908][ T1236] should_fail_usercopy+0x1a/0x20 [ 90.818767][ T1236] _copy_from_user+0x1e/0xc0 [ 90.823202][ T1236] copy_msghdr_from_user+0xaa/0x670 [ 90.828231][ T1236] ? sendmsg_copy_msghdr+0x70/0x70 [ 90.833178][ T1236] __sys_sendmsg+0x236/0x390 [ 90.837604][ T1236] ? ____sys_sendmsg+0x9a0/0x9a0 [ 90.842377][ T1236] ? __kasan_check_write+0x14/0x20 [ 90.847323][ T1236] ? mutex_unlock+0xb2/0x260 [ 90.851751][ T1236] ? __kasan_check_write+0x14/0x20 [ 90.856699][ T1236] ? __ia32_sys_read+0x90/0x90 [ 90.861299][ T1236] ? debug_smp_processor_id+0x17/0x20 [ 90.866505][ T1236] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 90.872408][ T1236] __x64_sys_sendmsg+0x7f/0x90 [ 90.877004][ T1236] x64_sys_call+0x16a/0x9a0 [ 90.881346][ T1236] do_syscall_64+0x3b/0xb0 [ 90.885596][ T1236] ? clear_bhb_loop+0x55/0xb0 [ 90.890110][ T1236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.895934][ T1236] RIP: 0033:0x7f6aea385d29 [ 90.900192][ T1236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.919743][ T1236] RSP: 002b:00007f6aeb240038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.927978][ T1236] RAX: ffffffffffffffda RBX: 00007f6aea575fa0 RCX: 00007f6aea385d29 [ 90.935790][ T1236] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 90.943603][ T1236] RBP: 00007f6aeb240090 R08: 0000000000000000 R09: 0000000000000000 [ 90.951411][ T1236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.959224][ T1236] R13: 0000000000000000 R14: 00007f6aea575fa0 R15: 00007ffe6c687ca8 [ 90.967038][ T1236] [ 90.998481][ T1237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.038969][ T1237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.047673][ T1220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.057683][ T1220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.071234][ T28] audit: type=1400 audit(1736265812.000:184): avc: denied { ioctl } for pid=1240 comm="syz.4.216" path="socket:[24023]" dev="sockfs" ino=24023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.097670][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.114889][ T28] audit: type=1400 audit(1736265812.040:185): avc: denied { nlmsg_write } for pid=1240 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.135020][ T1246] overlayfs: conflicting lowerdir path [ 91.163606][ T1251] fuse: Bad value for 'rootmode' [ 91.602204][ T1251] overlayfs: './bus' not a directory [ 91.849040][ T28] audit: type=1400 audit(1736265812.780:186): avc: denied { create } for pid=1262 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.883037][ T28] audit: type=1400 audit(1736265812.800:187): avc: denied { setopt } for pid=1262 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.152991][ T1015] usb 2-1: USB disconnect, device number 7 [ 92.246014][ T472] usb 3-1: USB disconnect, device number 6 [ 92.741825][ T28] audit: type=1400 audit(1736265813.670:188): avc: denied { create } for pid=1282 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.818760][ T28] audit: type=1400 audit(1736265813.700:189): avc: denied { write } for pid=1282 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.887666][ T28] audit: type=1400 audit(1736265813.700:190): avc: denied { read } for pid=1282 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.220048][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 94.878283][ T28] audit: type=1400 audit(1736265815.720:191): avc: denied { execute } for pid=1294 comm="syz.0.232" name="file0" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.505757][ T1308] fuse: Bad value for 'rootmode' [ 95.708610][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 95.708627][ T28] audit: type=1400 audit(1736265816.640:193): avc: denied { write } for pid=1309 comm="syz.4.235" name="icmp6" dev="proc" ino=4026532432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.988157][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.154644][ T1308] overlayfs: './bus' not a directory [ 96.388147][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 96.395212][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.418236][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.426660][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.428141][ T1015] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 96.445906][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.530392][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.540017][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.550083][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.559684][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.572438][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.581297][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.296017][ T24] usb 5-1: config 0 descriptor?? [ 97.332484][ T1015] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 97.358202][ T1015] usb 2-1: config 1 interface 0 has no altsetting 0 [ 97.410145][ T1015] usb 2-1: string descriptor 0 read error: -22 [ 97.416205][ T1015] usb 2-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 97.442467][ T1015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.462020][ T1313] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.524312][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.578255][ T543] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.667356][ T24] usb 5-1: USB disconnect, device number 9 [ 97.743831][ T24] usblp0: removed [ 97.758921][ T28] audit: type=1400 audit(1736265818.690:194): avc: denied { write } for pid=1312 comm="syz.1.236" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.808386][ T543] usb 1-1: Using ep0 maxpacket: 16 [ 97.815232][ T543] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 97.832754][ T543] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.853609][ T543] usb 1-1: config 0 has no interface number 0 [ 97.870067][ T543] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 97.881144][ T1015] usbhid 2-1:1.0: can't add hid device: -71 [ 97.886954][ T1015] usbhid: probe of 2-1:1.0 failed with error -71 [ 97.893335][ T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.901422][ T1015] usb 2-1: USB disconnect, device number 8 [ 97.912699][ T543] usb 1-1: SerialNumber: syz [ 97.927974][ T543] usb 1-1: config 0 descriptor?? [ 97.934030][ T543] hub 1-1:0.79: bad descriptor, ignoring hub [ 97.950087][ T543] hub: probe of 1-1:0.79 failed with error -5 [ 97.960474][ T543] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 97.978390][ T543] usb 1-1: Detected SIO [ 97.998697][ T543] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.028343][ T1332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.240'. [ 98.045195][ T1332] syz.2.240[1332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.045252][ T1332] syz.2.240[1332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.073657][ T1334] overlayfs: failed to resolve './file0': -2 [ 98.406066][ T28] audit: type=1400 audit(1736265819.330:195): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.435391][ T1349] syz.1.246[1349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.435472][ T1349] syz.1.246[1349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.450058][ T1349] syz.1.246[1349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.461294][ T1349] syz.1.246[1349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.505887][ T1351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 98.608210][ T543] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.632239][ T1359] FAULT_INJECTION: forcing a failure. [ 98.632239][ T1359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.645444][ T1359] CPU: 0 PID: 1359 Comm: syz.4.250 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 98.655009][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.664899][ T1359] Call Trace: [ 98.668024][ T1359] [ 98.670797][ T1359] dump_stack_lvl+0x151/0x1b7 [ 98.675312][ T1359] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 98.680605][ T1359] ? kstrtouint+0xf6/0x180 [ 98.684864][ T1359] ? _kstrtol+0x150/0x150 [ 98.689036][ T1359] dump_stack+0x15/0x18 [ 98.693019][ T1359] should_fail_ex+0x3d0/0x520 [ 98.697531][ T1359] should_fail+0xb/0x10 [ 98.701532][ T1359] should_fail_usercopy+0x1a/0x20 [ 98.706385][ T1359] _copy_from_user+0x1e/0xc0 [ 98.710807][ T1359] copy_msghdr_from_user+0xaa/0x670 [ 98.715844][ T1359] ? sendmsg_copy_msghdr+0x70/0x70 [ 98.720796][ T1359] __sys_sendmsg+0x236/0x390 [ 98.725224][ T1359] ? ____sys_sendmsg+0x9a0/0x9a0 [ 98.729999][ T1359] ? __kasan_check_write+0x14/0x20 [ 98.734950][ T1359] ? mutex_unlock+0xb2/0x260 [ 98.739367][ T1359] ? __kasan_check_write+0x14/0x20 [ 98.744315][ T1359] ? __ia32_sys_read+0x90/0x90 [ 98.748998][ T1359] ? debug_smp_processor_id+0x17/0x20 [ 98.754292][ T1359] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 98.760205][ T1359] __x64_sys_sendmsg+0x7f/0x90 [ 98.764799][ T1359] x64_sys_call+0x16a/0x9a0 [ 98.769140][ T1359] do_syscall_64+0x3b/0xb0 [ 98.773384][ T1359] ? clear_bhb_loop+0x55/0xb0 [ 98.777898][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.783624][ T1359] RIP: 0033:0x7f6aea385d29 [ 98.787877][ T1359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.807452][ T1359] RSP: 002b:00007f6aeb240038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.815708][ T1359] RAX: ffffffffffffffda RBX: 00007f6aea575fa0 RCX: 00007f6aea385d29 [ 98.823504][ T1359] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000003 [ 98.831322][ T1359] RBP: 00007f6aeb240090 R08: 0000000000000000 R09: 0000000000000000 [ 98.839129][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.846946][ T1359] R13: 0000000000000000 R14: 00007f6aea575fa0 R15: 00007ffe6c687ca8 [ 98.849522][ T543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 98.854760][ T1359] [ 98.865738][ T543] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 98.883599][ T543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.892547][ T543] usb 4-1: config 0 descriptor?? [ 100.067058][ T1369] netlink: 'syz.3.245': attribute type 27 has an invalid length. [ 100.203191][ T1372] input: syz0 as /devices/virtual/input/input5 [ 100.238217][ T28] audit: type=1400 audit(1736265821.070:196): avc: denied { read } for pid=1371 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.475417][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.482477][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.515603][ T28] audit: type=1400 audit(1736265821.070:197): avc: denied { write } for pid=1371 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.796137][ T28] audit: type=1400 audit(1736265821.090:198): avc: denied { ioctl } for pid=1371 comm="syz.4.252" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.906294][ T543] usbhid 4-1:0.0: can't add hid device: -71 [ 100.914600][ T543] usbhid: probe of 4-1:0.0 failed with error -71 [ 101.016728][ T1383] FAULT_INJECTION: forcing a failure. [ 101.016728][ T1383] name failslab, interval 1, probability 0, space 0, times 0 [ 101.043920][ T543] usb 4-1: USB disconnect, device number 5 [ 101.052316][ T24] usb 1-1: USB disconnect, device number 8 [ 101.059339][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.068949][ T24] ftdi_sio 1-1:0.79: device disconnected [ 101.075766][ T1383] CPU: 1 PID: 1383 Comm: syz.4.254 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 101.085325][ T1383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.095209][ T1383] Call Trace: [ 101.098334][ T1383] [ 101.101129][ T1383] dump_stack_lvl+0x151/0x1b7 [ 101.105626][ T1383] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 101.110916][ T1383] ? __kernel_text_address+0xd/0x40 [ 101.115955][ T1383] ? arch_stack_walk+0xf3/0x140 [ 101.120641][ T1383] dump_stack+0x15/0x18 [ 101.124628][ T1383] should_fail_ex+0x3d0/0x520 [ 101.129142][ T1383] __should_failslab+0xaf/0xf0 [ 101.133746][ T1383] ? kvmalloc_node+0x221/0x640 [ 101.138432][ T1383] should_failslab+0x9/0x20 [ 101.142768][ T1383] __kmem_cache_alloc_node+0x3d/0x2a0 [ 101.147980][ T1383] ? kvmalloc_node+0x221/0x640 [ 101.152580][ T1383] __kmalloc_node+0xa3/0x1e0 [ 101.157007][ T1383] kvmalloc_node+0x221/0x640 [ 101.161433][ T1383] ? vm_mmap+0xb0/0xb0 [ 101.165337][ T1383] ? timer_migration_handler+0xe0/0x100 [ 101.170714][ T1383] ? debug_smp_processor_id+0x17/0x20 [ 101.175928][ T1383] __kvm_mmu_topup_memory_cache+0x317/0x4a0 [ 101.181649][ T1383] ? __kasan_check_write+0x14/0x20 [ 101.186599][ T1383] kvm_mmu_topup_memory_cache+0x22/0x30 [ 101.191976][ T1383] kvm_mmu_load+0x111/0x2970 [ 101.196403][ T1383] ? __kasan_check_write+0x14/0x20 [ 101.201351][ T1383] ? mutex_unlock+0xb2/0x260 [ 101.205773][ T1383] ? kvm_mmu_unload+0x120/0x120 [ 101.210463][ T1383] ? xa_find+0x2e0/0x2e0 [ 101.214557][ T1383] ? memset+0x35/0x40 [ 101.218362][ T1383] ? vmx_flush_tlb_all+0xc2/0x380 [ 101.223218][ T1383] ? vmx_get_if_flag+0x40/0x40 [ 101.227830][ T1383] ? queue_delayed_work_on+0x13f/0x180 [ 101.233122][ T1383] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 101.238511][ T1383] ? kvm_hv_activate_synic+0x100/0x100 [ 101.243795][ T1383] ? vmx_nmi_blocked+0x108/0x280 [ 101.248568][ T1383] vcpu_enter_guest+0x6c7d/0x9490 [ 101.253434][ T1383] ? avc_has_perm+0x16f/0x260 [ 101.257942][ T1383] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 101.263328][ T1383] ? 0xffffffffa00038c0 [ 101.267315][ T1383] ? is_bpf_text_address+0x172/0x190 [ 101.272434][ T1383] ? stack_trace_save+0x1c0/0x1c0 [ 101.277303][ T1383] ? kernel_text_address+0xa9/0xe0 [ 101.282241][ T1383] ? __kernel_text_address+0xd/0x40 [ 101.287277][ T1383] ? unwind_get_return_address+0x4d/0x90 [ 101.292742][ T1383] ? arch_stack_walk+0xf3/0x140 [ 101.297435][ T1383] ? _parse_integer_limit+0x19b/0x1e0 [ 101.302636][ T1383] ? memset+0x35/0x40 [ 101.306453][ T1383] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 101.311319][ T1383] ? _parse_integer+0x40/0x40 [ 101.315927][ T1383] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 101.322349][ T1383] ? __stack_depot_save+0x36/0x480 [ 101.327298][ T1383] ? kasan_save_free_info+0x2b/0x40 [ 101.332428][ T1383] ? read_msr+0x50/0x50 [ 101.336422][ T1383] ? do_vfs_ioctl+0xba7/0x29a0 [ 101.341021][ T1383] ? __this_cpu_preempt_check+0x13/0x20 [ 101.346397][ T1383] ? xfd_validate_state+0x6f/0x170 [ 101.351525][ T1383] ? __local_bh_enable_ip+0x58/0x80 [ 101.356554][ T1383] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 101.361760][ T1383] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 101.366885][ T1383] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 101.372354][ T1383] ? __kvm_request_immediate_exit+0x70/0x70 [ 101.378079][ T1383] ? vfs_write+0x952/0xed0 [ 101.382336][ T1383] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 101.386845][ T1383] ? xa_release+0x40/0x40 [ 101.391014][ T1383] ? selinux_file_ioctl+0x3cc/0x540 [ 101.396045][ T1383] ? __mutex_lock_slowpath+0x10/0x10 [ 101.401166][ T1383] ? selinux_file_alloc_security+0x120/0x120 [ 101.406983][ T1383] ? __fget_files+0x2cb/0x330 [ 101.411495][ T1383] ? security_file_ioctl+0x84/0xb0 [ 101.416441][ T1383] ? xa_release+0x40/0x40 [ 101.420605][ T1383] __se_sys_ioctl+0x114/0x190 [ 101.425121][ T1383] __x64_sys_ioctl+0x7b/0x90 [ 101.429544][ T1383] x64_sys_call+0x98/0x9a0 [ 101.433798][ T1383] do_syscall_64+0x3b/0xb0 [ 101.438051][ T1383] ? clear_bhb_loop+0x55/0xb0 [ 101.442562][ T1383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.448293][ T1383] RIP: 0033:0x7f6aea385d29 [ 101.452545][ T1383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.471983][ T1383] RSP: 002b:00007f6aeb240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.480239][ T1383] RAX: ffffffffffffffda RBX: 00007f6aea575fa0 RCX: 00007f6aea385d29 [ 101.488126][ T1383] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 101.495934][ T1383] RBP: 00007f6aeb240090 R08: 0000000000000000 R09: 0000000000000000 [ 101.503752][ T1383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.511560][ T1383] R13: 0000000000000000 R14: 00007f6aea575fa0 R15: 00007ffe6c687ca8 [ 101.519395][ T1383] [ 101.560805][ T28] audit: type=1400 audit(1736265822.490:199): avc: denied { create } for pid=1397 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.606657][ T28] audit: type=1400 audit(1736265822.490:200): avc: denied { getopt } for pid=1397 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.665811][ T28] audit: type=1400 audit(1736265822.590:201): avc: denied { name_bind } for pid=1397 comm="syz.3.258" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 101.850113][ T28] audit: type=1400 audit(1736265822.780:202): avc: denied { remount } for pid=1397 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.001028][ T1414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 103.096048][ T1423] 9pnet_fd: Insufficient options for proto=fd [ 104.068137][ T476] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 104.247097][ T28] audit: type=1400 audit(1736265825.120:203): avc: denied { write } for pid=1442 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.548164][ T476] usb 1-1: Using ep0 maxpacket: 16 [ 104.554316][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.566120][ T476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.577869][ T476] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 104.587052][ T476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.600432][ T476] usb 1-1: config 0 descriptor?? [ 105.537555][ T1481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 107.192101][ T476] usbhid 1-1:0.0: can't add hid device: -71 [ 107.197919][ T476] usbhid: probe of 1-1:0.0 failed with error -71 [ 107.213416][ T476] usb 1-1: USB disconnect, device number 9 [ 107.749271][ T1512] syz.2.285 uses obsolete (PF_INET,SOCK_PACKET) [ 107.930516][ T1519] block device autoloading is deprecated and will be removed. [ 107.938123][ T1519] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 107.947095][ T1519] FAT-fs (loop1): unable to read boot sector [ 107.954111][ T28] audit: type=1400 audit(1736265828.690:204): avc: denied { create } for pid=1509 comm="syz.0.287" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.974548][ T28] audit: type=1400 audit(1736265828.690:205): avc: denied { mounton } for pid=1509 comm="syz.0.287" path="/58/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.346227][ T28] audit: type=1400 audit(1736265829.270:206): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.477799][ T28] audit: type=1400 audit(1736265830.400:207): avc: denied { ioctl } for pid=1532 comm="syz.3.291" path="socket:[27067]" dev="sockfs" ino=27067 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.797707][ T1550] loop1: detected capacity change from 0 to 256 [ 109.920483][ T1550] FAT-fs (loop1): Unrecognized mount option "utf8.1" or missing value [ 110.048144][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 111.738208][ T349] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.938207][ T349] usb 3-1: Using ep0 maxpacket: 16 [ 111.945367][ T349] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 112.055278][ T349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.192435][ T349] usb 3-1: config 0 has no interface number 0 [ 112.265874][ T349] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 112.363522][ T349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.424445][ T349] usb 3-1: SerialNumber: syz [ 112.487878][ T349] usb 3-1: config 0 descriptor?? [ 112.541099][ T349] hub 3-1:0.79: bad descriptor, ignoring hub [ 112.586076][ T349] hub: probe of 3-1:0.79 failed with error -5 [ 112.615176][ T349] ftdi_sio 3-1:0.79: FTDI USB Serial Device converter detected [ 112.632340][ T349] usb 3-1: Detected SIO [ 112.639210][ T349] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.795128][ T1584] loop1: detected capacity change from 0 to 256 [ 112.815834][ T28] audit: type=1400 audit(1736265833.740:208): avc: denied { mount } for pid=1583 comm="syz.1.303" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 113.776157][ T28] audit: type=1400 audit(1736265834.700:209): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 113.789074][ T1597] FAULT_INJECTION: forcing a failure. [ 113.789074][ T1597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.856371][ T1597] CPU: 1 PID: 1597 Comm: syz.4.305 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 113.866184][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.876058][ T1597] Call Trace: [ 113.879181][ T1597] [ 113.881959][ T1597] dump_stack_lvl+0x151/0x1b7 [ 113.886474][ T1597] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 113.891772][ T1597] ? __kasan_check_write+0x14/0x20 [ 113.896713][ T1597] dump_stack+0x15/0x18 [ 113.900703][ T1597] should_fail_ex+0x3d0/0x520 [ 113.905219][ T1597] should_fail+0xb/0x10 [ 113.909211][ T1597] should_fail_usercopy+0x1a/0x20 [ 113.914073][ T1597] _copy_to_user+0x1e/0x90 [ 113.918325][ T1597] simple_read_from_buffer+0xc7/0x150 [ 113.923531][ T1597] proc_fail_nth_read+0x1a3/0x210 [ 113.928391][ T1597] ? proc_fault_inject_write+0x390/0x390 [ 113.933857][ T1597] ? fsnotify_perm+0x269/0x5b0 [ 113.938473][ T1597] ? security_file_permission+0x86/0xb0 [ 113.943839][ T1597] ? proc_fault_inject_write+0x390/0x390 [ 113.949308][ T1597] vfs_read+0x26c/0xae0 [ 113.953303][ T1597] ? kernel_read+0x1f0/0x1f0 [ 113.957725][ T1597] ? mutex_lock+0xb1/0x1e0 [ 113.961989][ T1597] ? bit_wait_io_timeout+0x120/0x120 [ 113.967110][ T1597] ? __fdget_pos+0x2e2/0x390 [ 113.971523][ T1597] ? ksys_read+0x77/0x2c0 [ 113.975690][ T1597] ksys_read+0x199/0x2c0 [ 113.979773][ T1597] ? vfs_write+0xed0/0xed0 [ 113.984025][ T1597] ? debug_smp_processor_id+0x17/0x20 [ 113.989230][ T1597] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 113.995233][ T1597] __x64_sys_read+0x7b/0x90 [ 113.999576][ T1597] x64_sys_call+0x28/0x9a0 [ 114.003996][ T1597] do_syscall_64+0x3b/0xb0 [ 114.008248][ T1597] ? clear_bhb_loop+0x55/0xb0 [ 114.012776][ T1597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.018493][ T1597] RIP: 0033:0x7f6aea38473c [ 114.022747][ T1597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.042186][ T1597] RSP: 002b:00007f6aeb240030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.050429][ T1597] RAX: ffffffffffffffda RBX: 00007f6aea575fa0 RCX: 00007f6aea38473c [ 114.058247][ T1597] RDX: 000000000000000f RSI: 00007f6aeb2400a0 RDI: 0000000000000008 [ 114.066064][ T1597] RBP: 00007f6aeb240090 R08: 0000000000000000 R09: 0000000000000000 [ 114.073865][ T1597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.081674][ T1597] R13: 0000000000000000 R14: 00007f6aea575fa0 R15: 00007ffe6c687ca8 [ 114.089589][ T1597] [ 114.093995][ T1600] loop1: detected capacity change from 0 to 256 [ 114.108511][ T403] usb 3-1: USB disconnect, device number 7 [ 114.124575][ T403] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 114.134272][ T1600] FAT-fs (loop1): Unrecognized mount option "un_xlate=0" or missing value [ 114.150975][ T403] ftdi_sio 3-1:0.79: device disconnected [ 114.983722][ T1615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 115.345357][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 115.487231][ T28] audit: type=1400 audit(1736265836.410:210): avc: denied { create } for pid=1618 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 115.808149][ T850] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.008123][ T850] usb 2-1: Using ep0 maxpacket: 32 [ 116.019177][ T850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.038118][ T850] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.068151][ T403] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.076212][ T850] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 116.088350][ T850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.100458][ T850] usb 2-1: config 0 descriptor?? [ 116.299329][ T403] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.318533][ T403] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.328863][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.337027][ T403] usb 5-1: Product: syz [ 116.344676][ T403] usb 5-1: Manufacturer: syz [ 116.349958][ T403] usb 5-1: SerialNumber: syz [ 116.385778][ T1648] FAULT_INJECTION: forcing a failure. [ 116.385778][ T1648] name failslab, interval 1, probability 0, space 0, times 0 [ 116.398408][ T1648] CPU: 1 PID: 1648 Comm: syz.3.320 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 116.407877][ T1648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.417770][ T1648] Call Trace: [ 116.420895][ T1648] [ 116.423855][ T1648] dump_stack_lvl+0x151/0x1b7 [ 116.428368][ T1648] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 116.433668][ T1648] ? bpf_send_signal_common+0x341/0x420 [ 116.439052][ T1648] dump_stack+0x15/0x18 [ 116.443036][ T1648] should_fail_ex+0x3d0/0x520 [ 116.447562][ T1648] ? getname_flags+0xba/0x520 [ 116.452059][ T1648] __should_failslab+0xaf/0xf0 [ 116.456664][ T1648] should_failslab+0x9/0x20 [ 116.461019][ T1648] kmem_cache_alloc+0x3b/0x320 [ 116.465611][ T1648] getname_flags+0xba/0x520 [ 116.469940][ T1648] getname+0x19/0x20 [ 116.473668][ T1648] do_sys_openat2+0xe0/0x870 [ 116.478101][ T1648] ? __schedule+0xcbd/0x1560 [ 116.482525][ T1648] ? do_sys_open+0x220/0x220 [ 116.486951][ T1648] ? __sched_text_start+0x8/0x8 [ 116.491635][ T1648] ? ksys_write+0x260/0x2c0 [ 116.496002][ T1648] __x64_sys_openat+0x243/0x290 [ 116.500663][ T1648] ? __ia32_sys_open+0x270/0x270 [ 116.505436][ T1648] ? switch_fpu_return+0xe/0x10 [ 116.510122][ T1648] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 116.515592][ T1648] x64_sys_call+0x6bf/0x9a0 [ 116.519931][ T1648] do_syscall_64+0x3b/0xb0 [ 116.524182][ T1648] ? clear_bhb_loop+0x55/0xb0 [ 116.528697][ T1648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.534423][ T1648] RIP: 0033:0x7feeebb85d29 [ 116.538678][ T1648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.558121][ T1648] RSP: 002b:00007feeeb9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.566361][ T1648] RAX: ffffffffffffffda RBX: 00007feeebd76160 RCX: 00007feeebb85d29 [ 116.574173][ T1648] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 116.581988][ T1648] RBP: 00007feeeb9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 116.589802][ T1648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.597605][ T1648] R13: 0000000000000000 R14: 00007feeebd76160 R15: 00007fffc28ad228 [ 116.605425][ T1648] [ 117.374285][ T403] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 117.380415][ T403] cdc_ncm 5-1:1.0: bind() failure [ 117.397970][ T403] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 117.415219][ T403] cdc_ncm 5-1:1.1: bind() failure [ 117.454397][ T1662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 117.622623][ T403] usb 2-1: USB disconnect, device number 9 [ 118.451937][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.501359][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.838393][ T1678] syz.1.328[1678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.838501][ T1678] syz.1.328[1678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.630445][ T565] usb 5-1: USB disconnect, device number 10 [ 119.743866][ T1704] overlayfs: unrecognized mount option "uuid=null" or missing value [ 119.858727][ T1693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 120.018165][ T1015] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 120.025649][ T565] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 120.209940][ T565] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.220847][ T1015] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 120.231644][ T1015] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 120.244936][ T1015] usb 2-1: config 1 interface 0 has no altsetting 0 [ 120.257913][ T565] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.266981][ T565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.276733][ T565] usb 5-1: Product: syz [ 120.280916][ T1015] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.290259][ T1015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.298257][ T565] usb 5-1: Manufacturer: syz [ 120.302735][ T565] usb 5-1: SerialNumber: syz [ 120.307224][ T1015] usb 2-1: Product: syz [ 120.314431][ T1015] usb 2-1: Manufacturer: syz [ 120.319611][ T1015] usb 2-1: SerialNumber: syz [ 120.888294][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.070413][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.084049][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.107646][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.116884][ T24] usb 4-1: Product: syz [ 121.144896][ T24] usb 4-1: Manufacturer: syz [ 121.158238][ T403] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.175653][ T24] usb 4-1: SerialNumber: syz [ 121.368178][ T403] usb 1-1: Using ep0 maxpacket: 16 [ 121.375468][ T403] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 121.385541][ T403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.397016][ T403] usb 1-1: config 0 has no interface number 0 [ 121.405121][ T403] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 121.415472][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.424935][ T403] usb 1-1: SerialNumber: syz [ 121.475154][ T403] usb 1-1: config 0 descriptor?? [ 121.493791][ T403] hub 1-1:0.79: bad descriptor, ignoring hub [ 121.499941][ T403] hub: probe of 1-1:0.79 failed with error -5 [ 121.507950][ T403] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 121.528034][ T403] usb 1-1: Detected SIO [ 121.551536][ T403] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.729748][ T1741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.762889][ T1741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.871138][ T24] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 121.886162][ T1740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.894789][ T24] cdc_ncm 4-1:1.0: bind() failure [ 121.905686][ T1740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.928543][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 121.946990][ T24] cdc_ncm 4-1:1.1: bind() failure [ 122.008795][ T6] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 122.016309][ T565] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 122.022230][ T565] cdc_ncm 5-1:1.0: bind() failure [ 122.028039][ T565] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 122.034700][ T565] cdc_ncm 5-1:1.1: bind() failure [ 122.219220][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.229243][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.240183][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 122.249093][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.256879][ T6] usb 3-1: SerialNumber: syz [ 122.267354][ T6] usb 3-1: 0:2 : does not exist [ 122.268485][ T1744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.280650][ T1744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.742550][ T6] usb 3-1: USB disconnect, device number 8 [ 122.948935][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.016203][ T1015] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 123.032062][ T1015] usb 2-1: USB disconnect, device number 10 [ 123.039286][ T1015] usblp0: removed [ 123.119776][ T6] usb 5-1: USB disconnect, device number 11 [ 123.768304][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 123.978213][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 123.985177][ T24] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 124.066853][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.191261][ T24] usb 2-1: config 0 has no interface number 0 [ 124.264375][ T24] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 124.361859][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.450184][ T24] usb 2-1: SerialNumber: syz [ 124.529317][ T24] usb 2-1: config 0 descriptor?? [ 124.537295][ T427] usb 1-1: USB disconnect, device number 10 [ 124.558771][ T24] hub 2-1:0.79: bad descriptor, ignoring hub [ 124.566474][ T427] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 124.586483][ T24] hub: probe of 2-1:0.79 failed with error -5 [ 124.605272][ T427] ftdi_sio 1-1:0.79: device disconnected [ 124.611710][ T24] ftdi_sio 2-1:0.79: FTDI USB Serial Device converter detected [ 124.631771][ T24] usb 2-1: Detected SIO [ 124.638878][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 124.701880][ T6] usb 4-1: USB disconnect, device number 6 [ 124.718861][ T1766] FAULT_INJECTION: forcing a failure. [ 124.718861][ T1766] name failslab, interval 1, probability 0, space 0, times 0 [ 124.731412][ T1766] CPU: 0 PID: 1766 Comm: syz.3.349 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 124.740916][ T1766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.750808][ T1766] Call Trace: [ 124.753931][ T1766] [ 124.756709][ T1766] dump_stack_lvl+0x151/0x1b7 [ 124.761226][ T1766] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 124.766520][ T1766] dump_stack+0x15/0x18 [ 124.770509][ T1766] should_fail_ex+0x3d0/0x520 [ 124.775029][ T1766] ? inet_bind_bucket_create+0x33/0x280 [ 124.780402][ T1766] __should_failslab+0xaf/0xf0 [ 124.785002][ T1766] should_failslab+0x9/0x20 [ 124.789342][ T1766] kmem_cache_alloc+0x3b/0x320 [ 124.793942][ T1766] ? inet_bind2_bucket_find+0x5dc/0x620 [ 124.799411][ T1766] ? _raw_spin_trylock_bh+0x190/0x190 [ 124.804619][ T1766] inet_bind_bucket_create+0x33/0x280 [ 124.809827][ T1766] inet_csk_get_port+0xc0c/0x1540 [ 124.814692][ T1766] ? inet_csk_get_port+0xcc1/0x1540 [ 124.819716][ T1766] ? inet_csk_update_fastreuse+0xa80/0xa80 [ 124.825362][ T1766] inet_csk_listen_start+0x13b/0x330 [ 124.830479][ T1766] inet_listen+0x2c7/0x710 [ 124.834731][ T1766] ? inet_sock_destruct+0x750/0x750 [ 124.839765][ T1766] ? __fget_files+0x2cb/0x330 [ 124.844279][ T1766] ? security_socket_listen+0x7b/0xa0 [ 124.849497][ T1766] __sys_listen+0x1df/0x260 [ 124.853913][ T1766] __x64_sys_listen+0x5a/0x70 [ 124.858435][ T1766] x64_sys_call+0x186/0x9a0 [ 124.862854][ T1766] do_syscall_64+0x3b/0xb0 [ 124.867105][ T1766] ? clear_bhb_loop+0x55/0xb0 [ 124.871627][ T1766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.877353][ T1766] RIP: 0033:0x7feeebb85d29 [ 124.881597][ T1766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.901126][ T1766] RSP: 002b:00007feeec8f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 124.909377][ T1766] RAX: ffffffffffffffda RBX: 00007feeebd75fa0 RCX: 00007feeebb85d29 [ 124.917192][ T1766] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 124.924993][ T1766] RBP: 00007feeec8f5090 R08: 0000000000000000 R09: 0000000000000000 [ 124.932801][ T1766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.940742][ T1766] R13: 0000000000000000 R14: 00007feeebd75fa0 R15: 00007fffc28ad228 [ 124.948646][ T1766] [ 125.003746][ T1768] FAULT_INJECTION: forcing a failure. [ 125.003746][ T1768] name failslab, interval 1, probability 0, space 0, times 0 [ 125.016393][ T1768] CPU: 0 PID: 1768 Comm: syz.2.350 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 125.025945][ T1768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.035840][ T1768] Call Trace: [ 125.038960][ T1768] [ 125.041741][ T1768] dump_stack_lvl+0x151/0x1b7 [ 125.046259][ T1768] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 125.051547][ T1768] ? __kernel_text_address+0xd/0x40 [ 125.056576][ T1768] ? arch_stack_walk+0xf3/0x140 [ 125.061266][ T1768] dump_stack+0x15/0x18 [ 125.065257][ T1768] should_fail_ex+0x3d0/0x520 [ 125.069771][ T1768] __should_failslab+0xaf/0xf0 [ 125.074370][ T1768] ? kvmalloc_node+0x221/0x640 [ 125.078968][ T1768] should_failslab+0x9/0x20 [ 125.083309][ T1768] __kmem_cache_alloc_node+0x3d/0x2a0 [ 125.088514][ T1768] ? kvmalloc_node+0x221/0x640 [ 125.093111][ T1768] __kmalloc_node+0xa3/0x1e0 [ 125.097537][ T1768] kvmalloc_node+0x221/0x640 [ 125.101966][ T1768] ? vm_mmap+0xb0/0xb0 [ 125.105957][ T1768] ? timer_migration_handler+0xe0/0x100 [ 125.111339][ T1768] ? debug_smp_processor_id+0x17/0x20 [ 125.116543][ T1768] __kvm_mmu_topup_memory_cache+0x317/0x4a0 [ 125.122273][ T1768] ? __kasan_check_write+0x14/0x20 [ 125.127332][ T1768] kvm_mmu_topup_memory_cache+0x22/0x30 [ 125.132714][ T1768] kvm_mmu_load+0x111/0x2970 [ 125.137146][ T1768] ? __kasan_check_write+0x14/0x20 [ 125.142084][ T1768] ? mutex_unlock+0xb2/0x260 [ 125.146517][ T1768] ? kvm_mmu_unload+0x120/0x120 [ 125.151198][ T1768] ? xa_find+0x2e0/0x2e0 [ 125.155280][ T1768] ? memset+0x35/0x40 [ 125.159097][ T1768] ? vmx_flush_tlb_all+0xc2/0x380 [ 125.163957][ T1768] ? vmx_get_if_flag+0x40/0x40 [ 125.168560][ T1768] ? queue_delayed_work_on+0x13f/0x180 [ 125.173849][ T1768] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 125.179231][ T1768] ? kvm_hv_activate_synic+0x100/0x100 [ 125.184524][ T1768] ? vmx_nmi_blocked+0x108/0x280 [ 125.189304][ T1768] ? vmx_enable_irq_window+0x8b/0x130 [ 125.194512][ T1768] vcpu_enter_guest+0x6c7d/0x9490 [ 125.199376][ T1768] ? avc_has_perm+0x16f/0x260 [ 125.203904][ T1768] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 125.209293][ T1768] ? 0xffffffffa00007d8 [ 125.213254][ T1768] ? is_bpf_text_address+0x172/0x190 [ 125.218375][ T1768] ? stack_trace_save+0x1c0/0x1c0 [ 125.223356][ T1768] ? kernel_text_address+0xa9/0xe0 [ 125.228314][ T1768] ? __kernel_text_address+0xd/0x40 [ 125.233335][ T1768] ? unwind_get_return_address+0x4d/0x90 [ 125.238824][ T1768] ? arch_stack_walk+0xf3/0x140 [ 125.243491][ T1768] ? _parse_integer_limit+0x19b/0x1e0 [ 125.248697][ T1768] ? memset+0x35/0x40 [ 125.252767][ T1768] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 125.257618][ T1768] ? _parse_integer+0x40/0x40 [ 125.262138][ T1768] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 125.268561][ T1768] ? __stack_depot_save+0x36/0x480 [ 125.273504][ T1768] ? kasan_save_free_info+0x2b/0x40 [ 125.278547][ T1768] ? read_msr+0x50/0x50 [ 125.282525][ T1768] ? do_vfs_ioctl+0xba7/0x29a0 [ 125.287175][ T1768] ? __this_cpu_preempt_check+0x13/0x20 [ 125.292503][ T1768] ? xfd_validate_state+0x6f/0x170 [ 125.297460][ T1768] ? __local_bh_enable_ip+0x58/0x80 [ 125.302574][ T1768] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 125.307787][ T1768] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 125.312906][ T1768] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 125.318376][ T1768] ? __kvm_request_immediate_exit+0x70/0x70 [ 125.324106][ T1768] ? vfs_write+0x952/0xed0 [ 125.328354][ T1768] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 125.332863][ T1768] ? xa_release+0x40/0x40 [ 125.337033][ T1768] ? selinux_file_ioctl+0x3cc/0x540 [ 125.342069][ T1768] ? __mutex_lock_slowpath+0x10/0x10 [ 125.347189][ T1768] ? selinux_file_alloc_security+0x120/0x120 [ 125.353001][ T1768] ? __fget_files+0x2cb/0x330 [ 125.357511][ T1768] ? security_file_ioctl+0x84/0xb0 [ 125.362455][ T1768] ? xa_release+0x40/0x40 [ 125.366623][ T1768] __se_sys_ioctl+0x114/0x190 [ 125.371141][ T1768] __x64_sys_ioctl+0x7b/0x90 [ 125.375564][ T1768] x64_sys_call+0x98/0x9a0 [ 125.379819][ T1768] do_syscall_64+0x3b/0xb0 [ 125.384070][ T1768] ? clear_bhb_loop+0x55/0xb0 [ 125.388588][ T1768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.394312][ T1768] RIP: 0033:0x7f803a385d29 [ 125.398568][ T1768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.418003][ T1768] RSP: 002b:00007f803b1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.426252][ T1768] RAX: ffffffffffffffda RBX: 00007f803a575fa0 RCX: 00007f803a385d29 [ 125.434068][ T1768] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 125.441871][ T1768] RBP: 00007f803b1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.449683][ T1768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.457492][ T1768] R13: 0000000000000000 R14: 00007f803a575fa0 R15: 00007fff867e87f8 [ 125.465309][ T1768] [ 127.082173][ T1796] fuse: Bad value for 'rootmode' [ 127.151606][ T24] usb 2-1: USB disconnect, device number 11 [ 127.158511][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.168012][ T24] ftdi_sio 2-1:0.79: device disconnected [ 127.235867][ T28] audit: type=1400 audit(1736265848.160:211): avc: denied { ioctl } for pid=1806 comm="syz.4.362" path="socket:[29229]" dev="sockfs" ino=29229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.305832][ T28] audit: type=1400 audit(1736265848.220:212): avc: denied { getopt } for pid=1806 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.079300][ T1796] overlayfs: './bus' not a directory [ 128.149986][ T1834] fuse: Bad value for 'rootmode' [ 130.389253][ T1834] overlayfs: './bus' not a directory [ 130.574444][ T1879] fuse: Bad value for 'rootmode' [ 131.518161][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.708152][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 131.714384][ T60] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 131.738244][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.758149][ T60] usb 5-1: config 0 has no interface number 0 [ 131.769349][ T60] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 131.788144][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.796064][ T60] usb 5-1: SerialNumber: syz [ 131.802002][ T60] usb 5-1: config 0 descriptor?? [ 131.809428][ T60] hub 5-1:0.79: bad descriptor, ignoring hub [ 131.815242][ T60] hub: probe of 5-1:0.79 failed with error -5 [ 131.838528][ T60] ftdi_sio 5-1:0.79: FTDI USB Serial Device converter detected [ 131.857826][ T60] usb 5-1: Detected SIO [ 131.862857][ T60] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 132.818492][ T60] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.026305][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 133.032650][ T60] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 133.048122][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.068146][ T60] usb 1-1: config 0 has no interface number 0 [ 133.074978][ T60] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 133.248145][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.258193][ T60] usb 1-1: SerialNumber: syz [ 133.266009][ T60] usb 1-1: config 0 descriptor?? [ 133.277090][ T60] hub 1-1:0.79: bad descriptor, ignoring hub [ 133.292394][ T60] hub: probe of 1-1:0.79 failed with error -5 [ 133.303921][ T60] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 133.348637][ T60] usb 1-1: Detected SIO [ 133.356639][ T60] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 133.389078][ T1879] overlayfs: './bus' not a directory [ 133.519562][ T349] usb 5-1: USB disconnect, device number 12 [ 133.528697][ T349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 133.541367][ T349] ftdi_sio 5-1:0.79: device disconnected [ 135.196640][ T349] usb 1-1: USB disconnect, device number 11 [ 135.204100][ T349] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 135.215673][ T28] audit: type=1400 audit(1736265856.140:213): avc: denied { read append } for pid=1929 comm="syz.3.396" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 135.240117][ T349] ftdi_sio 1-1:0.79: device disconnected [ 135.250511][ T28] audit: type=1400 audit(1736265856.140:214): avc: denied { open } for pid=1929 comm="syz.3.396" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.777125][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 137.489908][ T1958] fuse: Bad value for 'rootmode' [ 138.758779][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 138.958198][ T1015] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.275434][ T1015] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.553769][ T1958] overlayfs: './bus' not a directory [ 139.631603][ T1015] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.875112][ T1015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.883082][ T1015] usb 2-1: Product: syz [ 139.887077][ T1015] usb 2-1: Manufacturer: syz [ 139.891743][ T1015] usb 2-1: SerialNumber: syz [ 140.608606][ T1015] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 140.641471][ T2022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 140.885262][ T1015] cdc_ncm 2-1:1.0: bind() failure [ 140.892384][ T1015] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 140.899040][ T1015] cdc_ncm 2-1:1.1: bind() failure [ 140.978189][ T543] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.992809][ T2029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.002008][ T2029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.168107][ T543] usb 4-1: Using ep0 maxpacket: 32 [ 141.174395][ T543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.184906][ T543] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.197981][ T543] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 141.207260][ T543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.229091][ T543] usb 4-1: config 0 descriptor?? [ 141.278112][ T427] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 141.484012][ T427] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.501498][ T427] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.515988][ T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.531600][ T427] usb 1-1: Product: syz [ 141.538991][ T427] usb 1-1: Manufacturer: syz [ 141.547865][ T427] usb 1-1: SerialNumber: syz [ 142.209046][ T427] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 142.349856][ T565] usb 2-1: USB disconnect, device number 12 [ 142.442440][ T427] cdc_ncm 1-1:1.0: bind() failure [ 142.611036][ T427] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 142.623026][ T427] cdc_ncm 1-1:1.1: bind() failure [ 142.739293][ T2053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.910526][ T2053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.931269][ T2055] fuse: Bad value for 'rootmode' [ 143.705575][ T565] usb 4-1: USB disconnect, device number 7 [ 143.827068][ T2055] overlayfs: './bus' not a directory [ 145.236534][ T427] usb 1-1: USB disconnect, device number 12 [ 147.329423][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 148.483696][ T2116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 148.582719][ T349] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.960918][ T2121] fuse: Bad value for 'rootmode' [ 149.963239][ T2121] overlayfs: './bus' not a directory [ 150.588276][ T427] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.633688][ T2164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 150.840682][ T427] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.875221][ T427] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.903526][ T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.923882][ T427] usb 3-1: Product: syz [ 150.932278][ T427] usb 3-1: Manufacturer: syz [ 150.939867][ T427] usb 3-1: SerialNumber: syz [ 151.035767][ T2171] fuse: Unknown parameter 'GPL' [ 152.060786][ T2186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 152.809553][ T427] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 152.815804][ T427] cdc_ncm 3-1:1.0: bind() failure [ 152.932484][ T427] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 153.294933][ T427] cdc_ncm 3-1:1.1: bind() failure [ 153.398648][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.407045][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.513207][ T2199] fuse: Bad value for 'rootmode' [ 154.393557][ T2199] overlayfs: './bus' not a directory [ 154.570067][ T565] usb 3-1: USB disconnect, device number 9 [ 156.633927][ T427] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 156.858312][ T427] usb 5-1: Using ep0 maxpacket: 16 [ 156.865365][ T427] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 156.946974][ T427] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.957292][ T427] usb 5-1: config 0 has no interface number 0 [ 156.970886][ T427] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 156.979937][ T427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.987865][ T427] usb 5-1: SerialNumber: syz [ 156.999753][ T427] usb 5-1: config 0 descriptor?? [ 157.016687][ T427] hub 5-1:0.79: bad descriptor, ignoring hub [ 157.026045][ T427] hub: probe of 5-1:0.79 failed with error -5 [ 157.033348][ T427] ftdi_sio 5-1:0.79: FTDI USB Serial Device converter detected [ 157.041624][ T427] usb 5-1: Detected SIO [ 157.053542][ T427] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 157.200114][ T2255] fuse: Bad value for 'rootmode' [ 157.658123][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 157.665580][ T427] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.692539][ T2255] overlayfs: './bus' not a directory [ 157.848219][ T427] usb 3-1: Using ep0 maxpacket: 16 [ 157.854433][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.865761][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.876822][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.886544][ T427] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.899703][ T427] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.909181][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.917246][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.927098][ T427] usb 3-1: config 0 descriptor?? [ 157.932154][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.940229][ T24] usb 1-1: Product: syz [ 157.945217][ T24] usb 1-1: Manufacturer: syz [ 157.949943][ T24] usb 1-1: SerialNumber: syz [ 158.373619][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.384192][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.416506][ T427] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input6 [ 158.431002][ T427] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 158.444548][ T349] usb 5-1: USB disconnect, device number 13 [ 158.451118][ T349] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 158.461017][ T349] ftdi_sio 5-1:0.79: device disconnected [ 158.478132][ T1015] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 158.590166][ T2283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'. [ 158.727786][ T476] usb 3-1: USB disconnect, device number 10 [ 159.094506][ T1015] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.106944][ T1015] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.117020][ T1015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.125058][ T1015] usb 2-1: Product: syz [ 159.129118][ T1015] usb 2-1: Manufacturer: syz [ 159.133603][ T1015] usb 2-1: SerialNumber: syz [ 159.246193][ T24] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 159.252777][ T24] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 159.260428][ T24] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 159.455999][ T2300] fuse: Bad value for 'rootmode' [ 159.643834][ T2253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.841503][ T1015] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 159.841745][ T2253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.847347][ T1015] cdc_ncm 2-1:1.0: bind() failure [ 159.879413][ T1015] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 159.886161][ T1015] cdc_ncm 2-1:1.1: bind() failure [ 159.960242][ T24] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 159.969831][ T24] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 159.988892][ T24] usb 1-1: USB disconnect, device number 13 [ 159.998360][ T24] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 160.098544][ T2300] overlayfs: './bus' not a directory [ 160.233287][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.248322][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.506159][ T24] usb 2-1: USB disconnect, device number 13 [ 161.761468][ T2374] fuse: Bad value for 'rootmode' [ 161.971041][ T1015] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.258251][ T1015] usb 4-1: Using ep0 maxpacket: 16 [ 162.269522][ T1015] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 162.290033][ T1015] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.488135][ T1015] usb 4-1: config 0 has no interface number 0 [ 162.497435][ T1015] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 162.531656][ T1015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.551895][ T1015] usb 4-1: SerialNumber: syz [ 162.593069][ T1015] usb 4-1: config 0 descriptor?? [ 162.620086][ T1015] hub 4-1:0.79: bad descriptor, ignoring hub [ 162.644821][ T1015] hub: probe of 4-1:0.79 failed with error -5 [ 162.671995][ T1015] ftdi_sio 4-1:0.79: FTDI USB Serial Device converter detected [ 162.704714][ T1015] usb 4-1: Detected SIO [ 162.728858][ T1015] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.491704][ T2374] overlayfs: './bus' not a directory [ 164.693674][ T2436] fuse: Bad value for 'rootmode' [ 164.848546][ T1015] usb 4-1: USB disconnect, device number 9 [ 164.854898][ T1015] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.887296][ T1015] ftdi_sio 4-1:0.79: device disconnected [ 166.305386][ T2436] overlayfs: './bus' not a directory [ 166.348193][ T349] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.470292][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 166.672601][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.683826][ T349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.709981][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.725887][ T349] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.769262][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 166.782206][ T349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.860114][ T349] usb 5-1: Product: syz [ 166.864126][ T349] usb 5-1: Manufacturer: syz [ 166.868892][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.876751][ T24] usb 2-1: SerialNumber: syz [ 166.881488][ T349] usb 5-1: SerialNumber: syz [ 166.888004][ T24] usb 2-1: 0:2 : does not exist [ 167.621088][ T24] usb 2-1: USB disconnect, device number 14 [ 167.808186][ T349] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 167.814140][ T349] cdc_ncm 5-1:1.0: bind() failure [ 167.821551][ T349] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 167.828887][ T349] cdc_ncm 5-1:1.1: bind() failure [ 167.839114][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.179074][ T2507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.187462][ T2507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.215462][ T2511] fuse: Bad value for 'rootmode' [ 168.537777][ T2511] overlayfs: './bus' not a directory [ 169.513556][ T1015] usb 5-1: USB disconnect, device number 14 [ 169.762359][ T2548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 171.405128][ T2569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 171.842951][ T2574] fuse: Bad value for 'rootmode' [ 176.176661][ T2608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 178.018122][ T427] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 178.170482][ T1015] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.239962][ T427] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.860406][ T1015] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.012132][ T1015] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.165324][ T1015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.185541][ T1015] usb 3-1: Product: syz [ 179.201614][ T1015] usb 3-1: Manufacturer: syz [ 179.206111][ T1015] usb 3-1: SerialNumber: syz [ 180.021563][ T427] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.030675][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.042035][ T427] usb 2-1: Product: syz [ 180.047977][ T427] usb 2-1: Manufacturer: syz [ 180.053148][ T427] usb 2-1: SerialNumber: syz [ 181.063749][ T2653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.112523][ T2653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.395315][ T1015] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 181.401225][ T1015] cdc_ncm 3-1:1.0: bind() failure [ 181.406969][ T1015] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 181.413639][ T1015] cdc_ncm 3-1:1.1: bind() failure [ 181.420284][ T1015] usb 3-1: USB disconnect, device number 11 [ 181.486891][ T427] cdc_ncm 2-1:1.0: bind() failure [ 181.500793][ T427] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 181.512754][ T427] cdc_ncm 2-1:1.1: bind() failure [ 181.598485][ T427] usb 2-1: USB disconnect, device number 15 [ 181.741114][ T2677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 184.312922][ T349] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.684657][ T2702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 185.148113][ T349] usb 2-1: Using ep0 maxpacket: 16 [ 185.154852][ T349] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 185.162794][ T349] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.173204][ T349] usb 2-1: config 0 has no interface number 0 [ 185.203201][ T349] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 185.417216][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.455094][ T349] usb 2-1: SerialNumber: syz [ 185.530743][ T349] usb 2-1: config 0 descriptor?? [ 185.728190][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 185.838296][ T543] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 185.936001][ T349] usb 2-1: can't set config #0, error -71 [ 185.948215][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 185.969287][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.997198][ T349] usb 2-1: USB disconnect, device number 16 [ 186.038141][ T543] usb 3-1: Using ep0 maxpacket: 16 [ 186.045011][ T543] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 186.082114][ T543] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.113934][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.189527][ T543] usb 3-1: config 0 has no interface number 0 [ 186.197114][ T543] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 186.239450][ T24] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 186.279089][ T543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.320104][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.353950][ T543] usb 3-1: SerialNumber: syz [ 186.373185][ T543] usb 3-1: config 0 descriptor?? [ 186.383302][ T24] usb 5-1: config 0 descriptor?? [ 186.390468][ T543] hub 3-1:0.79: bad descriptor, ignoring hub [ 186.396284][ T543] hub: probe of 3-1:0.79 failed with error -5 [ 186.409277][ T543] ftdi_sio 3-1:0.79: FTDI USB Serial Device converter detected [ 186.421221][ T543] usb 3-1: Detected SIO [ 186.427021][ T543] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 186.508161][ T1015] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.688130][ T565] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 186.719266][ T1015] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.732167][ T1015] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.741390][ T1015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.749411][ T1015] usb 4-1: Product: syz [ 186.753487][ T1015] usb 4-1: Manufacturer: syz [ 186.757853][ T1015] usb 4-1: SerialNumber: syz [ 186.869257][ T565] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.879312][ T565] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.896195][ T565] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 186.905120][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.913200][ T565] usb 2-1: SerialNumber: syz [ 186.925206][ T565] usb 2-1: 0:2 : does not exist [ 187.331363][ T565] usb 2-1: USB disconnect, device number 17 [ 187.370931][ T1015] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 187.376847][ T1015] cdc_ncm 4-1:1.0: bind() failure [ 187.384032][ T1015] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 187.390858][ T1015] cdc_ncm 4-1:1.1: bind() failure [ 187.679829][ T1015] usb 5-1: USB disconnect, device number 15 [ 187.799171][ T24] usb 3-1: USB disconnect, device number 12 [ 187.807268][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 187.810218][ T2735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.819403][ T24] ftdi_sio 3-1:0.79: device disconnected [ 187.831557][ T2735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.948429][ T2745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 189.245917][ T565] usb 4-1: USB disconnect, device number 10 [ 189.518828][ T2776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 190.899917][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 191.958095][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 191.989164][ T6] usb 1-1: device descriptor read/all, error -71 [ 193.897173][ T60] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.158591][ T2831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 195.046729][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.502870][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.511805][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.519644][ T60] usb 2-1: Product: syz [ 195.523546][ T60] usb 2-1: Manufacturer: syz [ 195.527968][ T60] usb 2-1: SerialNumber: syz [ 195.888107][ T850] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 196.140319][ T850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.216941][ T850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.248172][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 196.282794][ T850] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 196.342270][ T60] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 196.344284][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.350547][ T60] cdc_ncm 2-1:1.0: bind() failure [ 196.428152][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 196.435342][ T24] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 196.456929][ T850] usb 5-1: SerialNumber: syz [ 196.495341][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.544847][ T850] usb 5-1: 0:2 : does not exist [ 196.594643][ T24] usb 4-1: config 0 has no interface number 0 [ 196.634175][ T60] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 196.644070][ T24] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 196.644944][ T60] cdc_ncm 2-1:1.1: bind() failure [ 196.763944][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.812058][ T2872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.852089][ T24] usb 4-1: SerialNumber: syz [ 196.890233][ T24] usb 4-1: config 0 descriptor?? [ 196.940758][ T2872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.970936][ T850] usb 5-1: USB disconnect, device number 16 [ 197.077794][ T24] hub 4-1:0.79: bad descriptor, ignoring hub [ 197.144052][ T24] hub: probe of 4-1:0.79 failed with error -5 [ 197.220238][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.244212][ T24] ftdi_sio 4-1:0.79: FTDI USB Serial Device converter detected [ 197.253945][ T24] usb 4-1: Detected SIO [ 197.266627][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 197.407823][ T2878] fuse: Bad value for 'rootmode' [ 197.909884][ T2878] overlayfs: './bus' not a directory [ 197.983842][ T24] usb 2-1: USB disconnect, device number 18 [ 198.430952][ T2894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 199.008986][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 199.259714][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.302279][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.334152][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.350542][ T24] usb 2-1: Product: syz [ 199.355079][ T24] usb 2-1: Manufacturer: syz [ 199.360508][ T24] usb 2-1: SerialNumber: syz [ 199.418242][ T850] usb 4-1: USB disconnect, device number 11 [ 199.434358][ T850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 199.454417][ T850] ftdi_sio 4-1:0.79: device disconnected [ 199.598092][ T565] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 200.381077][ T565] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.399528][ T565] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.418091][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.425986][ T565] usb 1-1: Product: syz [ 200.429981][ T565] usb 1-1: Manufacturer: syz [ 200.434330][ T565] usb 1-1: SerialNumber: syz [ 201.278096][ T1015] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 201.358110][ T403] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.387619][ T24] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 201.393905][ T24] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 201.401393][ T24] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 201.459136][ T1015] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.469187][ T1015] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.478768][ T1015] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 201.487686][ T1015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.495523][ T1015] usb 4-1: SerialNumber: syz [ 201.502306][ T1015] usb 4-1: 0:2 : does not exist [ 201.549152][ T403] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.561643][ T403] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.570892][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.578738][ T403] usb 5-1: Product: syz [ 201.582721][ T403] usb 5-1: Manufacturer: syz [ 201.587142][ T403] usb 5-1: SerialNumber: syz [ 201.804894][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.813329][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.821173][ T565] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 201.827482][ T565] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 201.834909][ T565] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 201.889619][ T24] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 201.897159][ T24] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 201.910539][ T24] usb 2-1: USB disconnect, device number 19 [ 201.916816][ T24] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 201.921249][ T1015] usb 4-1: USB disconnect, device number 12 [ 202.138684][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.199000][ T403] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 202.204881][ T403] cdc_ncm 5-1:1.0: bind() failure [ 202.211003][ T403] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 202.217614][ T403] cdc_ncm 5-1:1.1: bind() failure [ 202.230166][ T2903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.238598][ T2903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.309653][ T565] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 202.323391][ T565] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 202.344761][ T565] usb 1-1: USB disconnect, device number 16 [ 202.352135][ T565] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 202.365451][ T28] audit: type=1400 audit(1736265923.290:215): avc: denied { unlink } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.076965][ T2948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.738468][ T2948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.491520][ T2961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'. [ 205.583420][ T427] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 205.788194][ T427] usb 2-1: Using ep0 maxpacket: 16 [ 205.795571][ T427] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 205.806990][ T427] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.824672][ T565] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.837146][ T427] usb 2-1: config 0 has no interface number 0 [ 205.888273][ T24] usb 5-1: USB disconnect, device number 17 [ 205.963473][ T427] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 206.054140][ T427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.149078][ T427] usb 2-1: SerialNumber: syz [ 206.520467][ T427] usb 2-1: config 0 descriptor?? [ 206.529932][ T427] hub 2-1:0.79: bad descriptor, ignoring hub [ 206.535780][ T427] hub: probe of 2-1:0.79 failed with error -5 [ 206.543059][ T427] ftdi_sio 2-1:0.79: FTDI USB Serial Device converter detected [ 206.553194][ T427] usb 2-1: Detected SIO [ 206.560201][ T427] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 206.615101][ T565] usb 4-1: Using ep0 maxpacket: 32 [ 206.659556][ T565] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.670563][ T565] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.736128][ T565] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 206.750989][ T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.769559][ T565] usb 4-1: config 0 descriptor?? [ 206.775519][ T565] usb 4-1: can't set config #0, error -71 [ 206.792501][ T565] usb 4-1: USB disconnect, device number 13 [ 207.435814][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.585559][ T2993] fuse: Bad value for 'rootmode' [ 207.854339][ T3002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 208.244936][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.262099][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.283394][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.296678][ T24] usb 1-1: Product: syz [ 208.308424][ T24] usb 1-1: Manufacturer: syz [ 208.318174][ T24] usb 1-1: SerialNumber: syz [ 208.438250][ T850] usb 2-1: USB disconnect, device number 20 [ 208.446406][ T850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 208.463316][ T850] ftdi_sio 2-1:0.79: device disconnected [ 208.518152][ T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.658543][ T2993] overlayfs: './bus' not a directory [ 208.708231][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 208.724663][ T60] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.748373][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.775479][ T60] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 208.786410][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.799400][ T60] usb 3-1: config 0 descriptor?? [ 210.570594][ T24] cdc_ncm 1-1:1.0: bind() failure [ 210.576733][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 210.583410][ T24] cdc_ncm 1-1:1.1: bind() failure [ 210.589536][ T24] usb 1-1: USB disconnect, device number 17 [ 210.880672][ T3037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 211.160416][ T565] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 211.178120][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 211.359188][ T565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.369216][ T565] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.388083][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 211.393193][ T565] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 211.395176][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.408091][ T565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.428064][ T565] usb 5-1: SerialNumber: syz [ 211.429017][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.446221][ T565] usb 5-1: 0:2 : does not exist [ 211.465224][ T24] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 211.484539][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.506392][ T24] usb 4-1: config 0 descriptor?? [ 211.566296][ T1015] usb 3-1: USB disconnect, device number 13 [ 211.778095][ T60] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 211.853704][ T565] usb 5-1: USB disconnect, device number 18 [ 211.959289][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.969291][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.978922][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 211.987840][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.995661][ T60] usb 1-1: SerialNumber: syz [ 212.001877][ T60] usb 1-1: 0:2 : does not exist [ 212.058098][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 212.239231][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.251613][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.260666][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.268509][ T24] usb 2-1: Product: syz [ 212.272466][ T24] usb 2-1: Manufacturer: syz [ 212.276888][ T24] usb 2-1: SerialNumber: syz [ 212.409350][ T60] usb 1-1: USB disconnect, device number 18 [ 212.417656][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.884985][ T24] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 212.891026][ T24] cdc_ncm 2-1:1.0: bind() failure [ 212.898219][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 212.904987][ T24] cdc_ncm 2-1:1.1: bind() failure [ 213.259937][ T3074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.268794][ T3074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.138790][ T24] usb 4-1: USB disconnect, device number 14 [ 214.186492][ T3090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 215.314867][ T565] usb 2-1: USB disconnect, device number 21 [ 216.178077][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.358064][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 216.364982][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.385290][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.415285][ T24] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 216.434047][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.451840][ T24] usb 4-1: config 0 descriptor?? [ 216.608174][ T850] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.799269][ T850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.824510][ T850] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.842413][ T850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.859758][ T850] usb 5-1: Product: syz [ 216.869364][ T850] usb 5-1: Manufacturer: syz [ 216.878008][ T850] usb 5-1: SerialNumber: syz [ 218.799396][ T24] usb 4-1: USB disconnect, device number 15 [ 219.050467][ T850] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 219.057213][ T850] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 219.065184][ T850] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 219.368179][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 219.478107][ T565] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 219.568682][ T3171] FAULT_INJECTION: forcing a failure. [ 219.568682][ T3171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.581628][ T3171] CPU: 1 PID: 3171 Comm: syz.0.711 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 219.591107][ T3171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.601082][ T3171] Call Trace: [ 219.604209][ T3171] [ 219.606998][ T3171] dump_stack_lvl+0x151/0x1b7 [ 219.611500][ T3171] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 219.616790][ T3171] ? __kasan_check_write+0x14/0x20 [ 219.621863][ T3171] ? push_rt_task+0x46e/0x5c0 [ 219.626374][ T3171] dump_stack+0x15/0x18 [ 219.630362][ T3171] should_fail_ex+0x3d0/0x520 [ 219.634880][ T3171] should_fail+0xb/0x10 [ 219.638870][ T3171] should_fail_usercopy+0x1a/0x20 [ 219.643728][ T3171] _copy_to_user+0x1e/0x90 [ 219.647988][ T3171] simple_read_from_buffer+0xc7/0x150 [ 219.653194][ T3171] proc_fail_nth_read+0x1a3/0x210 [ 219.658052][ T3171] ? proc_fault_inject_write+0x390/0x390 [ 219.663515][ T3171] ? fsnotify_perm+0x269/0x5b0 [ 219.668121][ T3171] ? security_file_permission+0x86/0xb0 [ 219.673499][ T3171] ? proc_fault_inject_write+0x390/0x390 [ 219.678970][ T3171] vfs_read+0x26c/0xae0 [ 219.682960][ T3171] ? kernel_read+0x1f0/0x1f0 [ 219.687384][ T3171] ? mutex_lock+0xb1/0x1e0 [ 219.691644][ T3171] ? bit_wait_io_timeout+0x120/0x120 [ 219.696760][ T3171] ? __fdget_pos+0x2e2/0x390 [ 219.698444][ T3126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.701185][ T3171] ? ksys_read+0x77/0x2c0 [ 219.709806][ T3126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.713506][ T3171] ksys_read+0x199/0x2c0 [ 219.725145][ T3171] ? __kasan_check_write+0x14/0x20 [ 219.730092][ T3171] ? vfs_write+0xed0/0xed0 [ 219.734339][ T3171] ? fpregs_restore_userregs+0x130/0x290 [ 219.739805][ T3171] __x64_sys_read+0x7b/0x90 [ 219.744143][ T3171] x64_sys_call+0x28/0x9a0 [ 219.748396][ T3171] do_syscall_64+0x3b/0xb0 [ 219.752646][ T3171] ? clear_bhb_loop+0x55/0xb0 [ 219.757159][ T3171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.762888][ T3171] RIP: 0033:0x7fc24918473c [ 219.767141][ T3171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.786585][ T3171] RSP: 002b:00007fc248fff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.794828][ T3171] RAX: ffffffffffffffda RBX: 00007fc249376160 RCX: 00007fc24918473c [ 219.802644][ T3171] RDX: 000000000000000f RSI: 00007fc248fff0a0 RDI: 0000000000000009 [ 219.809283][ T565] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.810449][ T3171] RBP: 00007fc248fff090 R08: 0000000000000000 R09: 0000000000000000 [ 219.820509][ T565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.828160][ T3171] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.828177][ T3171] R13: 0000000000000000 R14: 00007fc249376160 R15: 00007ffd95906058 [ 219.828194][ T3171] ? 0xffffffff81000000 [ 219.828214][ T3171] [ 219.839368][ T565] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 219.879784][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.892440][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.901380][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.909580][ T24] usb 4-1: Product: syz [ 219.912392][ T565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.925041][ T565] usb 3-1: SerialNumber: syz [ 219.940110][ T565] usb 3-1: 0:2 : does not exist [ 219.952420][ T24] usb 4-1: Manufacturer: syz [ 219.957882][ T24] usb 4-1: SerialNumber: syz [ 219.970125][ T850] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 219.978257][ T850] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 219.994211][ T850] usb 5-1: USB disconnect, device number 19 [ 220.000289][ T850] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 220.146283][ T565] usb 3-1: USB disconnect, device number 14 [ 220.851208][ T3219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'. [ 220.977127][ T24] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 221.005110][ T24] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 221.070179][ T24] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 221.396995][ T3157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.407889][ T3157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.418080][ T565] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.491145][ T24] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 221.499533][ T24] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 221.524041][ T24] usb 4-1: USB disconnect, device number 16 [ 221.537206][ T24] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 221.548079][ T60] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 221.598135][ T565] usb 5-1: Using ep0 maxpacket: 32 [ 221.604741][ T565] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.623507][ T565] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.637370][ T565] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 221.646661][ T565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.655850][ T565] usb 5-1: config 0 descriptor?? [ 221.739684][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.753805][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.769300][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.778905][ T60] usb 3-1: Product: syz [ 221.782968][ T60] usb 3-1: Manufacturer: syz [ 221.789482][ T60] usb 3-1: SerialNumber: syz [ 222.147414][ T3269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 225.551677][ T60] cdc_ncm 3-1:1.0: bind() failure [ 225.559344][ T60] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 225.569607][ T60] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 225.580756][ T60] usb 3-1: USB disconnect, device number 15 [ 225.867021][ T403] usb 5-1: USB disconnect, device number 20 [ 226.231972][ T28] audit: type=1400 audit(1736265947.160:216): avc: denied { setopt } for pid=3286 comm="syz.0.728" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.355996][ T28] audit: type=1400 audit(1736265947.160:217): avc: denied { connect } for pid=3286 comm="syz.0.728" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.498093][ T3271] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 226.679210][ T3271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.691717][ T3271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.701023][ T3271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.714192][ T3271] usb 3-1: Product: syz [ 226.718651][ T3271] usb 3-1: Manufacturer: syz [ 226.723315][ T3271] usb 3-1: SerialNumber: syz [ 227.268104][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 227.319089][ T3318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 227.500007][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.551954][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.568236][ T3271] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 227.574085][ T3271] cdc_ncm 3-1:1.0: bind() failure [ 227.580184][ T3271] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 227.586950][ T3271] cdc_ncm 3-1:1.1: bind() failure [ 227.592382][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.600658][ T24] usb 4-1: Product: syz [ 227.609782][ T24] usb 4-1: Manufacturer: syz [ 227.617641][ T24] usb 4-1: SerialNumber: syz [ 227.698101][ T403] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 227.878333][ T403] usb 1-1: Using ep0 maxpacket: 32 [ 227.885975][ T403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.969852][ T403] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.072472][ T403] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 228.081838][ T3329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.095134][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.109291][ T3329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.129683][ T403] usb 1-1: config 0 descriptor?? [ 228.373731][ T24] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 228.379821][ T24] cdc_ncm 4-1:1.0: bind() failure [ 228.385443][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 228.393847][ T24] cdc_ncm 4-1:1.1: bind() failure [ 228.528117][ T427] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 228.680801][ T3345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.696576][ T3345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.725671][ T427] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.746382][ T427] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.756214][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.764144][ T427] usb 2-1: Product: syz [ 228.768264][ T427] usb 2-1: Manufacturer: syz [ 228.772681][ T427] usb 2-1: SerialNumber: syz [ 229.188855][ T60] usb 3-1: USB disconnect, device number 16 [ 229.645673][ T3360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 229.921847][ T427] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 229.931053][ T427] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 229.969276][ T427] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 230.595183][ T24] usb 1-1: USB disconnect, device number 19 [ 230.653121][ T403] usb 4-1: USB disconnect, device number 17 [ 230.811740][ T3335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.834864][ T3335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.911867][ T427] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 230.922374][ T427] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 230.947873][ T427] usb 2-1: USB disconnect, device number 22 [ 230.961639][ T427] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 232.465101][ T3411] fuse: Bad value for 'rootmode' [ 232.626939][ T3414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'. [ 233.138086][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 233.320451][ T3411] overlayfs: './bus' not a directory [ 233.338158][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 233.345644][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.355678][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.368516][ T24] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 233.377378][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.391307][ T24] usb 1-1: config 0 descriptor?? [ 233.548080][ T403] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.578088][ T427] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.749337][ T403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.761528][ T403] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.770477][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.778543][ T403] usb 4-1: Product: syz [ 233.782692][ T403] usb 4-1: Manufacturer: syz [ 233.787151][ T403] usb 4-1: SerialNumber: syz [ 233.809929][ T427] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.921266][ T427] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.965443][ T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.975909][ T427] usb 3-1: Product: syz [ 233.981070][ T427] usb 3-1: Manufacturer: syz [ 233.986021][ T427] usb 3-1: SerialNumber: syz [ 234.938745][ T403] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 234.945270][ T403] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 234.953297][ T403] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 234.999642][ T427] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 235.006184][ T427] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 235.013950][ T427] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 235.259854][ T476] usb 1-1: USB disconnect, device number 20 [ 235.356018][ T3430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.366367][ T3430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.414631][ T3432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.423423][ T3432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.431516][ T403] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 235.443278][ T403] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 235.462230][ T403] usb 4-1: USB disconnect, device number 18 [ 235.480764][ T427] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 235.497164][ T427] cdc_ncm 3-1:1.0 eth2: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 235.508381][ T403] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 235.548160][ T427] usb 3-1: USB disconnect, device number 17 [ 235.575087][ T427] cdc_ncm 3-1:1.0 eth2: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 235.654685][ T850] ================================================================== [ 235.662587][ T850] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 235.669612][ T850] Read of size 8 at addr ffff88810d4cece0 by task kworker/1:9/850 [ 235.677252][ T850] [ 235.679423][ T850] CPU: 1 PID: 850 Comm: kworker/1:9 Not tainted 6.1.118-syzkaller-00080-g66ae563a6598 #0 [ 235.689055][ T850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.698950][ T850] Workqueue: 0x0 (rcu_gp) [ 235.703205][ T850] Call Trace: [ 235.706327][ T850] [ 235.709101][ T850] dump_stack_lvl+0x151/0x1b7 [ 235.713758][ T850] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 235.719056][ T850] ? _printk+0xd1/0x111 [ 235.723048][ T850] ? __virt_addr_valid+0x242/0x2f0 [ 235.727992][ T850] print_report+0x158/0x4e0 [ 235.732337][ T850] ? __virt_addr_valid+0x242/0x2f0 [ 235.737278][ T850] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 235.743355][ T850] ? worker_thread+0xa36/0x1260 [ 235.748060][ T850] kasan_report+0x13c/0x170 [ 235.752381][ T850] ? worker_thread+0xa36/0x1260 [ 235.757067][ T850] __asan_report_load8_noabort+0x14/0x20 [ 235.762539][ T850] worker_thread+0xa36/0x1260 [ 235.767063][ T850] kthread+0x26d/0x300 [ 235.770950][ T850] ? worker_clr_flags+0x1a0/0x1a0 [ 235.775815][ T850] ? kthread_blkcg+0xd0/0xd0 [ 235.780237][ T850] ret_from_fork+0x1f/0x30 [ 235.784497][ T850] [ 235.787366][ T850] [ 235.789522][ T850] Allocated by task 403: [ 235.793599][ T850] kasan_set_track+0x4b/0x70 [ 235.798025][ T850] kasan_save_alloc_info+0x1f/0x30 [ 235.802974][ T850] __kasan_kmalloc+0x9c/0xb0 [ 235.807404][ T850] __kmalloc_node+0xb4/0x1e0 [ 235.811956][ T850] kvmalloc_node+0x221/0x640 [ 235.816410][ T850] alloc_netdev_mqs+0x8c/0xf90 [ 235.820971][ T850] alloc_etherdev_mqs+0x36/0x40 [ 235.825657][ T850] usbnet_probe+0x213/0x28a0 [ 235.830083][ T850] usb_probe_interface+0x5b6/0xa90 [ 235.835039][ T850] really_probe+0x2b8/0x920 [ 235.839371][ T850] __driver_probe_device+0x1a0/0x310 [ 235.844508][ T850] driver_probe_device+0x54/0x3d0 [ 235.849354][ T850] __device_attach_driver+0x2e3/0x490 [ 235.854561][ T850] bus_for_each_drv+0x183/0x200 [ 235.859253][ T850] __device_attach+0x312/0x510 [ 235.863844][ T850] device_initial_probe+0x1a/0x20 [ 235.868707][ T850] bus_probe_device+0xbe/0x1e0 [ 235.873304][ T850] device_add+0xb60/0xf10 [ 235.877476][ T850] usb_set_configuration+0x190f/0x1e80 [ 235.882778][ T850] usb_generic_driver_probe+0x8b/0x150 [ 235.888062][ T850] usb_probe_device+0x144/0x260 [ 235.892745][ T850] really_probe+0x2b8/0x920 [ 235.897083][ T850] __driver_probe_device+0x1a0/0x310 [ 235.902220][ T850] driver_probe_device+0x54/0x3d0 [ 235.907067][ T850] __device_attach_driver+0x2e3/0x490 [ 235.912283][ T850] bus_for_each_drv+0x183/0x200 [ 235.916979][ T850] __device_attach+0x312/0x510 [ 235.921567][ T850] device_initial_probe+0x1a/0x20 [ 235.926423][ T850] bus_probe_device+0xbe/0x1e0 [ 235.931025][ T850] device_add+0xb60/0xf10 [ 235.935274][ T850] usb_new_device+0xf2f/0x1820 [ 235.939875][ T850] hub_event+0x2db1/0x4830 [ 235.944214][ T850] process_one_work+0x73d/0xcb0 [ 235.948902][ T850] worker_thread+0xa60/0x1260 [ 235.953412][ T850] kthread+0x26d/0x300 [ 235.957314][ T850] ret_from_fork+0x1f/0x30 [ 235.961573][ T850] [ 235.963737][ T850] Freed by task 403: [ 235.967479][ T850] kasan_set_track+0x4b/0x70 [ 235.971900][ T850] kasan_save_free_info+0x2b/0x40 [ 235.976760][ T850] ____kasan_slab_free+0x131/0x180 [ 235.981705][ T850] __kasan_slab_free+0x11/0x20 [ 235.986304][ T850] __kmem_cache_free+0x21d/0x410 [ 235.991167][ T850] kfree+0x7a/0xf0 [ 235.994725][ T850] kvfree+0x35/0x40 [ 235.998369][ T850] netdev_freemem+0x3f/0x60 [ 236.002707][ T850] netdev_release+0x7f/0xb0 [ 236.007048][ T850] device_release+0x95/0x1c0 [ 236.011472][ T850] kobject_put+0x178/0x260 [ 236.015729][ T850] put_device+0x1f/0x30 [ 236.019717][ T850] free_netdev+0x393/0x480 [ 236.023970][ T850] usbnet_disconnect+0x25f/0x3b0 [ 236.028746][ T850] usb_unbind_interface+0x1fa/0x8c0 [ 236.033777][ T850] device_release_driver_internal+0x53e/0x870 [ 236.039683][ T850] device_release_driver+0x19/0x20 [ 236.044626][ T850] bus_remove_device+0x2fa/0x360 [ 236.049404][ T850] device_del+0x663/0xe90 [ 236.053569][ T850] usb_disable_device+0x380/0x720 [ 236.058432][ T850] usb_disconnect+0x32a/0x890 [ 236.062945][ T850] hub_event+0x1ed8/0x4830 [ 236.067194][ T850] process_one_work+0x73d/0xcb0 [ 236.071884][ T850] worker_thread+0xd71/0x1260 [ 236.076395][ T850] kthread+0x26d/0x300 [ 236.080296][ T850] ret_from_fork+0x1f/0x30 [ 236.084554][ T850] [ 236.086723][ T850] Last potentially related work creation: [ 236.092492][ T850] kasan_save_stack+0x3b/0x60 [ 236.097015][ T850] __kasan_record_aux_stack+0xb4/0xc0 [ 236.102207][ T850] kasan_record_aux_stack_noalloc+0xb/0x10 [ 236.107933][ T850] insert_work+0x56/0x310 [ 236.112187][ T850] __queue_work+0x9b6/0xd70 [ 236.116612][ T850] queue_work_on+0x105/0x170 [ 236.121038][ T850] usbnet_link_change+0x182/0x1a0 [ 236.125898][ T850] usbnet_probe+0x1e1e/0x28a0 [ 236.130421][ T850] usb_probe_interface+0x5b6/0xa90 [ 236.135357][ T850] really_probe+0x2b8/0x920 [ 236.139698][ T850] __driver_probe_device+0x1a0/0x310 [ 236.144821][ T850] driver_probe_device+0x54/0x3d0 [ 236.149679][ T850] __device_attach_driver+0x2e3/0x490 [ 236.154907][ T850] bus_for_each_drv+0x183/0x200 [ 236.159573][ T850] __device_attach+0x312/0x510 [ 236.164180][ T850] device_initial_probe+0x1a/0x20 [ 236.169035][ T850] bus_probe_device+0xbe/0x1e0 [ 236.173634][ T850] device_add+0xb60/0xf10 [ 236.177801][ T850] usb_set_configuration+0x190f/0x1e80 [ 236.183093][ T850] usb_generic_driver_probe+0x8b/0x150 [ 236.188389][ T850] usb_probe_device+0x144/0x260 [ 236.193077][ T850] really_probe+0x2b8/0x920 [ 236.197413][ T850] __driver_probe_device+0x1a0/0x310 [ 236.202533][ T850] driver_probe_device+0x54/0x3d0 [ 236.207484][ T850] __device_attach_driver+0x2e3/0x490 [ 236.212690][ T850] bus_for_each_drv+0x183/0x200 [ 236.217378][ T850] __device_attach+0x312/0x510 [ 236.221979][ T850] device_initial_probe+0x1a/0x20 [ 236.226921][ T850] bus_probe_device+0xbe/0x1e0 [ 236.231524][ T850] device_add+0xb60/0xf10 [ 236.235775][ T850] usb_new_device+0xf2f/0x1820 [ 236.240374][ T850] hub_event+0x2db1/0x4830 [ 236.244629][ T850] process_one_work+0x73d/0xcb0 [ 236.249316][ T850] worker_thread+0xa60/0x1260 [ 236.253827][ T850] kthread+0x26d/0x300 [ 236.257733][ T850] ret_from_fork+0x1f/0x30 [ 236.261986][ T850] [ 236.264156][ T850] The buggy address belongs to the object at ffff88810d4ce000 [ 236.264156][ T850] which belongs to the cache kmalloc-4k of size 4096 [ 236.278047][ T850] The buggy address is located 3296 bytes inside of [ 236.278047][ T850] 4096-byte region [ffff88810d4ce000, ffff88810d4cf000) [ 236.291407][ T850] [ 236.293580][ T850] The buggy address belongs to the physical page: [ 236.299830][ T850] page:ffffea0004353200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d4c8 [ 236.309895][ T850] head:ffffea0004353200 order:3 compound_mapcount:0 compound_pincount:0 [ 236.318059][ T850] flags: 0x4000000000010200(slab|head|zone=1) [ 236.323964][ T850] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 236.332382][ T850] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 236.340794][ T850] page dumped because: kasan: bad access detected [ 236.347055][ T850] page_owner tracks the page as allocated [ 236.352597][ T850] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 403, tgid 403 (kworker/1:5), ts 233877269607, free_ts 233715835358 [ 236.376902][ T850] post_alloc_hook+0x213/0x220 [ 236.381496][ T850] prep_new_page+0x1b/0x110 [ 236.385839][ T850] get_page_from_freelist+0x2f41/0x2fc0 [ 236.391219][ T850] __alloc_pages+0x234/0x610 [ 236.395820][ T850] alloc_slab_page+0x6c/0xf0 [ 236.400242][ T850] new_slab+0x90/0x3e0 [ 236.404148][ T850] ___slab_alloc+0x6f9/0xb80 [ 236.408575][ T850] __slab_alloc+0x5d/0xa0 [ 236.412742][ T850] __kmem_cache_alloc_node+0x207/0x2a0 [ 236.418036][ T850] __kmalloc_node+0xa3/0x1e0 [ 236.422460][ T850] kvmalloc_node+0x221/0x640 [ 236.426910][ T850] alloc_netdev_mqs+0x8c/0xf90 [ 236.431497][ T850] alloc_etherdev_mqs+0x36/0x40 [ 236.436178][ T850] usbnet_probe+0x213/0x28a0 [ 236.440601][ T850] usb_probe_interface+0x5b6/0xa90 [ 236.445546][ T850] really_probe+0x2b8/0x920 [ 236.449888][ T850] page last free stack trace: [ 236.454409][ T850] free_unref_page_prepare+0x83d/0x850 [ 236.459692][ T850] free_unref_page+0xb2/0x5c0 [ 236.464206][ T850] __free_pages+0x61/0xf0 [ 236.468375][ T850] __free_slab+0xce/0x1a0 [ 236.472540][ T850] __unfreeze_partials+0x165/0x1a0 [ 236.477485][ T850] put_cpu_partial+0xa9/0x100 [ 236.482003][ T850] __slab_free+0x1c8/0x280 [ 236.486251][ T850] ___cache_free+0xc6/0xd0 [ 236.490506][ T850] qlist_free_all+0xc5/0x140 [ 236.494936][ T850] kasan_quarantine_reduce+0x15a/0x180 [ 236.500313][ T850] __kasan_slab_alloc+0x24/0x80 [ 236.505000][ T850] slab_post_alloc_hook+0x53/0x2c0 [ 236.509952][ T850] __kmem_cache_alloc_node+0x193/0x2a0 [ 236.515241][ T850] kmalloc_trace+0x2a/0xa0 [ 236.519496][ T850] usb_control_msg+0xb7/0x4c0 [ 236.524008][ T850] hub_ext_port_status+0xfe/0x6b0 [ 236.528867][ T850] [ 236.531040][ T850] Memory state around the buggy address: [ 236.536511][ T850] ffff88810d4ceb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.544408][ T850] ffff88810d4cec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.552305][ T850] >ffff88810d4cec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.560290][ T850] ^ [ 236.567320][ T850] ffff88810d4ced00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.575219][ T850] ffff88810d4ced80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.583109][ T850] ================================================================== [ 236.591012][ T850] Disabling lock debugging due to kernel taint [ 236.614534][ T3467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 237.708123][ T427] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 237.898104][ T427] usb 1-1: Using ep0 maxpacket: 16 [ 237.904860][ T427] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 237.914480][ T427] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.925507][ T427] usb 1-1: config 0 has no interface number 0 [ 237.933474][ T427] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 237.943485][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.952234][ T427] usb 1-1: SerialNumber: syz [ 237.985804][ T427] usb 1-1: config 0 descriptor?? [ 238.001225][ T427] hub 1-1:0.79: bad descriptor, ignoring hub [ 238.007290][ T427] hub: probe of 1-1:0.79 failed with error -5 [ 238.014335][ T427] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 238.028392][ T427] usb 1-1: Detected SIO [ 238.035043][ T427] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 239.768163][ T3271] usb 1-1: USB disconnect, device number 21 [ 239.774487][ T3271] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 239.783846][ T3271] ftdi_sio 1-1:0.79: device disconnected