last executing test programs: 1m46.490633436s ago: executing program 2 (id=154): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=r1, @ANYBLOB="04000100e200ff00100e067938fd658cacf5920010000000"], 0x2c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) openat$incfs(r4, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) creat(&(0x7f0000000140)='./file0\x00', 0x4) 1m46.454037497s ago: executing program 2 (id=155): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x9, 0x72a5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x4, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000240)={0x20, 0x24, 0xbd, {0xbd, 0x2, "70a4996802c2c266d05c70307538ce928973554548603380636014a1d99fb7490119804253e99f97d92d7ff8b999b637b8384e0e56def99aeeb024b352dadd7ec105cb5430e38258e7cf7eda85f292cccf5ac72ef561a4c9cb79038d479c133a5136bbd110eaa575fa19618a88a86503edd2889dda7166f65a994cdd5da7a6ed1f246c78ee8d4c46dfd3999d3e5f178b37b3aef8ce50e0aae208fc2d27b43bbc5ab17ddf985cc4e664d63172fe2e12733cd9b87fa6ebfc4ec5d215"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x60, 0x7, 0x4c, "6cdcd7655c4a3abbd14f9960dcd1776d90f517932c5f58f3695ddc5deb2abec7ec2558af7d257e5a3fee3650b18fa7ba25de797ab3a30fe202f402d6ff8a0d40dd0fa9845f12328ad9db64a7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x5, 0x80, 0x1, 0x4, 0x61a0, 0xfff, 0x0, 0x6, 0x1, 0x6, 0x3, 0x8}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0xc}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb4e23485090000700000060078340fd"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x224, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xd27986519c867b38, 0x80, "", [{{0x9, 0x4, 0x0, 0x8c, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x5b9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8b09ca2be2e258fe, 0x5, 0x9, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x81, 0x42}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x10, 0xb1, 0x8}, 0x35, &(0x7f0000000100)={0x5, 0xf, 0x35, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x2d, 0x3c, 0x9, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8cde8048b410ec958c9e29a9a1697251"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x3, 0xdf54}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x93, 0x6, 0x9}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m44.255691986s ago: executing program 2 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) mknod(&(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x7) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 1m44.188746508s ago: executing program 2 (id=169): getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@filename='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x2, 0x6, 0x1c0a}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x6]}, 0x8, 0x80800) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8004, &(0x7f00000003c0)={[{@huge_never}, {@huge_never}, {@huge_never}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x25]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x34, 0x39]}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_gt={'euid>', r1}}, {@appraise}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '!+]*'}}, {@smackfshat={'smackfshat', 0x3d, 'nfs_export=off'}}, {@dont_measure}]}) pselect6(0x40, &(0x7f0000003140)={0x6, 0x1, 0x7, 0xffff, 0x5, 0x38f7, 0x4, 0x8}, 0x0, &(0x7f00000031c0)={0x6d, 0x6, 0x4, 0xfffffffffffffffc, 0x0, 0x5, 0x3ff, 0xf1b}, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100820, &(0x7f0000000280)={[{@uuid_on}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}], [{@appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r0}}, {@seclabel}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@obj_role={'obj_role', 0x3d, '):#'}}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @initdev, @private}, &(0x7f0000000540)=0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000003000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000020870000004dad59bea9afab18515b1f16e59d0d3bcd70bed6eb71697d5a746c38ff6bc36a50234be8dbbd717898a62eb128fe724978ca3def7f14049f41930347fd82bc766c2f2eb9b2365de080e3fd20a47b51288821453d8c2514ef179b4311862b", @ANYRES32=0x0, @ANYBLOB="6785a97d5b8b250918c25a91610773aadefcf8f4e992d2c4a45a21e29d3958b38d3262e9bad375acec328d8b72c76bd0d465bbf67cf7b613df1c68757e5f43facfad78672d92f29cf7c82e3dd59017b891aed4bbc18459d7fd08c180f81e3411c7078859dc821a803e5b718ac7aabbffe8ff53f1094c5c41642b265d590cb18bfcc8083f085ca5d968451ac533708eeabedd301a522526ef2ae5b5747906aeba574a063be07e77c753263aa45275f9961844594d87e71639e6b2fb3785890708509d08d3d2b50d293e1f1b46906097a91e1b23906c542f2a78704cf9e53c9afc4e448b56178625392126c1ec8261", @ANYBLOB="00ea000000000000000000000000000001000000000000000000008000000000010400000000000000000000000000000500000000000000fbffffffffffffffe405000000000000000000000000400000000000000000028000000000000000020000000000000000000000000000000c0008000800080000090000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x68004010) 1m43.154596155s ago: executing program 2 (id=179): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="e00300001800290200000000000000000a000000ca031780"], 0x3e0}}, 0x20010000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17f) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000c80)="b3fe109a0a0e5fbf3f4e020000000000000099bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682059a0c2b50728dd04c80400000072a2a05c1fe85d339c80d73de2b6a42b56569966a1bc3732b5c45ab3f770b6b060e98b4c6cdf85f635529dd3cc218b9b6daf9d291f64749b323f22f4faddb0944c8bc139e1fa5d1f5c2f247e8abed25da91aa73aa16c7d950408df07f600664d4300d605d9f2045527d6758f76e6638234de183fd8af756240c96351d4f537a0cdd7e7f505876f2ea8e5a4ca3f2d3974202e7ebc21ec320345d71fe41c767bd1588e935068c48d12b872327c884799aa3a9ec698", 0x97}, {&(0x7f0000000ec0)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf254904c359cdacd7", 0x8d}, {&(0x7f0000000b00)="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", 0xd3f28783}, {&(0x7f0000000740)="c319cf272fefa48c3b8cc08760fd9d24a8b12249fa4a45c25032799042725eecb77e0d2a0191df2cd9ae72b7da6d9e5c2fb728a282ff50f4fd50488884bc66311445e2a7478c886c290dd3c0872c392e0c8145fe311cd88e6bad9f26c22b283a9d4812c3a4a1325e19be229046f9e452e3332092e806b7341f3152580d5996c980ba838a87d89f312a9486d0e2e9c280ac59d1aeebfa73970b74729ffb4dfea35e2dca68b2c2373f50315f22e443738d303584816bd35dec87", 0xb9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497e0", 0x72}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b3", 0xc5}], 0x2}}], 0x4, 0xc044) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/profiling\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='kv', 0x2) (async) write(r3, &(0x7f00000000c0)='kv', 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) (async) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10001, 0x0, 0x3, 0x7, 0x200, 0x7, 0x2, 0xffffffffffffff30}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0xdffffc00}}) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r7, &(0x7f0000000680)='drop=', 0x5) (async) write(r7, &(0x7f0000000680)='drop=', 0x5) ptrace$getregset(0x4205, r5, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) ftruncate(r4, 0xffff) (async) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) (async) fcntl$addseals(r4, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x100000000, 0xb343e65a27648b4f}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x163121d4deb8cd6b) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xdf, 0x9c, 0x9f, 0x20, 0xda8c, 0x8f88, 0x943f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xe, 0xf0, 0x7, "", [{{0x9, 0x4, 0x2e, 0x8, 0x0, 0xe0, 0x1, 0x3, 0xa}}]}}]}}, 0x0) 1m41.965706758s ago: executing program 2 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_ublk_setup_io_uring(0x30, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca21, 0x10000, 0x2, 0x212}, &(0x7f0000000180), &(0x7f0000ff4000), 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x4100, 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x3, 0x2, 0x2, '\x00', 0x38bd2394}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m26.943955481s ago: executing program 32 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_ublk_setup_io_uring(0x30, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca21, 0x10000, 0x2, 0x212}, &(0x7f0000000180), &(0x7f0000ff4000), 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x4100, 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x3, 0x2, 0x2, '\x00', 0x38bd2394}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m11.3581348s ago: executing program 4 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/256, 0x100) (async, rerun: 32) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r6, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) (async, rerun: 64) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d04031f303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c3f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xffffffffffffffff) (async, rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000001680)={0x164, r6, 0x559a4df188bdc72a, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xae, 0x5, "f4a9339cedf40a9cbb119a644d1a887a949ec060273780d4e00f24bbc11ed25987625f75798e132b3dcdb576f90ce218c14952d6fb5241e4ac1d17bf158dec6d6d874a08afbff0c50570c4c5a0593ff0f8a9140ff671b54188be34afc1f1846e08ea1f3e9603f5689f1c90c31d12deb3cdb3c97a681d7c670e1a34a440aad3869a2b256f41f1143df4402f95eab2dd74d081b8854ddd03b245ff6e23ca6af8377d45126c8ec787840393"}, @ETHTOOL_A_BITSET_VALUE={0x88, 0x4, "86ae8c118e32934f11b1e57674cd9d1e97a97fb73cdb40c21b4218d18ca98cfff1a97d2239e9544105a061bba463cd4e5c31ed50cea48ecb0c622ec5f32b19bf1848cea2923f597f35a34a841c7079f1d5902fdfd6e9e5f7726b11b5979aa2cfb8fb1b41b413e08970fe90ec2dc59b42567bb11d48108a27a65a016f7528dc0000000000"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffffb}]}, 0x164}, 0x1, 0x0, 0x0, 0x20004004}, 0x8090) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00fc08bd7000fbdbf50b440000000804030018d392d2ea71665cf0e01f4cf1900f1c9047cb5fa0e4", @ANYRES32=r5, @ANYBLOB="0c009900f9ffffff3f0000000a00180003030303030300001200240030091b16982406809830b06092050000"], 0x48}, 0x1, 0x0, 0x0, 0x4040805}, 0x24044040) 1m11.296778902s ago: executing program 4 (id=434): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0xd, 0x6c, {0x6c, 0x23, "78074033ee62daa24448b59da1de84d73a2b82a27cf7813bbe0305ffeb9bc334cdbaeba6157ed34a08f38d93a734fbe402c150b96ce17512fed7ff01affeab8d27617358c1b43d7f9ffb7fa4969af4d22ecb867817890358bf101d8d397b2ab5c4aced88489ddadc0853"}}, &(0x7f0000000180)={0x0, 0x3, 0x82, @string={0xe2, 0x3, "39ece63c52da2ad9d2e9fde7a96df808e2ad45786ad07a0f68827ee5e87ec26b123f4f61be43d992610d97d4d9a4c7346bd370e492e8b7d38663476a93269bf3ace7710a16014729f4c410b9b7d33bf4f6f850392baa06a62db0c718a96f0bf7476b2b2b48d829c69a2612684ffe3aaa4f725e185ae07184e037f4217fbbc41d"}}}, &(0x7f0000000b80)={0x1c, &(0x7f00000002c0)={0x0, 0x18, 0xf3, "6a7e9b79f92f000c309eb6079abbdb4b0d79ac86f7a27687f85eb50e87460afdbb4dd21e2a17ddc8d1e909bb9dddadd6247312708c2586ac2d4d08c203214cea11db157807f6484ded43480b8d5c9634ca8af2139d44ddd924ba488acdf51d834d69590791277525776ee087eb8a31eed210267f427eced91f1754a8bdb33e0e3020e99765651ccd232491f113f80ee54bb95237e2705f0c4f7c2923512619426a56bc463175bb36c8167a63575294523ea4479e1418d005d4424a36df6b36d51d74085ad039d9b90a8715c65afa6e8dcb1cf00c47314d099fb8774bc7c7cb5ac0fa49f9be67169f1e7aeb3c31d0d166d01d7f"}, &(0x7f0000000700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b40)={0x21, 0x0, 0x3, "d4dc5c"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m8.197093585s ago: executing program 4 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x40, 0x6, 0x4}]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000000c0)=0xfffffffd, 0x4) close_range(r2, r2, 0x0) setfsgid(0xee01) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='proc_mnt/1/root/proc\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002440)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x400, 0x0, {0x7}, [@generic='~']}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000180)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000fffffffffffff8ffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 1m4.980085671s ago: executing program 4 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000302d9d4000007f64c566baf80cb864c95782ef46dade410f01c366b8fb008ec046d9c3c442b90a2c810f01c8c744240012000000c74424020b000000ff1c34", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r0, &(0x7f0000000100)="e800000000", 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) sendmmsg$inet6(r10, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000) ptrace(0x10, r9) ptrace$cont(0x7, r9, 0x0, 0x0) 1m4.931676382s ago: executing program 4 (id=488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000180)}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000540)=""/66, 0x42}, {&(0x7f0000000380)=""/16, 0x10}], 0x5, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x3008804, &(0x7f0000001cc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x10, @loopback, 0x4}, 0x1c) recvmmsg$unix(r3, &(0x7f0000005600)=[{{&(0x7f00000005c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f0000000740)=""/75, 0x4b}], 0x2, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/220, 0xdc}], 0x1, &(0x7f0000001b80)}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f00000054c0)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/248, 0xf8}], 0x2, &(0x7f0000005500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x4, 0x40012000, &(0x7f0000005700)={0x0, 0x3938700}) 1m4.724708358s ago: executing program 4 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_open_dev$loop(0x0, 0x3, 0x32d001) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x400}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffff1000ffffaaaaaaaaaa2f88a841008100430008004509003c00650000092990787f000001ac1414bb9a07000000c32fe4e7c789a9f8cac5a6e46187b669668cbf528d18236f34091aa8095b1067a609f3"], 0x52) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000380)=0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@md0, r4, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x1, 0x4}) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, 0x0, 0x14, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xfffd}, 'syz1\x00', 0x1a}) (async) ioctl$UI_DEV_CREATE(r6, 0x5501) (async) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) (async) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x4, 0xfffffffe, 0x23f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x4000, 0x1000000, 0x2033f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe833, 0x80, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x0, 0x10000229, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e9d, 0x1, 0xffffffff, 0x1ef, 0x0, r2}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 1m4.720940638s ago: executing program 33 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_open_dev$loop(0x0, 0x3, 0x32d001) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x400}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffff1000ffffaaaaaaaaaa2f88a841008100430008004509003c00650000092990787f000001ac1414bb9a07000000c32fe4e7c789a9f8cac5a6e46187b669668cbf528d18236f34091aa8095b1067a609f3"], 0x52) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000380)=0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@md0, r4, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x1, 0x4}) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, 0x0, 0x14, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xfffd}, 'syz1\x00', 0x1a}) (async) ioctl$UI_DEV_CREATE(r6, 0x5501) (async) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) (async) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x4, 0xfffffffe, 0x23f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x4000, 0x1000000, 0x2033f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe833, 0x80, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x0, 0x10000229, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e9d, 0x1, 0xffffffff, 0x1ef, 0x0, r2}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 8.613559536s ago: executing program 5 (id=920): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) 8.552693898s ago: executing program 5 (id=921): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0xd, 0x6c, {0x6c, 0x23, "78074033ee62daa24448b59da1de84d73a2b82a27cf7813bbe0305ffeb9bc334cdbaeba6157ed34a08f38d93a734fbe402c150b96ce17512fed7ff01affeab8d27617358c1b43d7f9ffb7fa4969af4d22ecb867817890358bf101d8d397b2ab5c4aced88489ddadc0853"}}, &(0x7f0000000180)={0x0, 0x3, 0x82, @string={0xe2, 0x3, "39ece63c52da2ad9d2e9fde7a96df808e2ad45786ad07a0f68827ee5e87ec26b123f4f61be43d992610d97d4d9a4c7346bd370e492e8b7d38663476a93269bf3ace7710a16014729f4c410b9b7d33bf4f6f850392baa06a62db0c718a96f0bf7476b2b2b48d829c69a2612684ffe3aaa4f725e185ae07184e037f4217fbbc41d"}}}, &(0x7f0000000b80)={0x1c, &(0x7f00000002c0)={0x0, 0x18, 0xf3, "6a7e9b79f92f000c309eb6079abbdb4b0d79ac86f7a27687f85eb50e87460afdbb4dd21e2a17ddc8d1e909bb9dddadd6247312708c2586ac2d4d08c203214cea11db157807f6484ded43480b8d5c9634ca8af2139d44ddd924ba488acdf51d834d69590791277525776ee087eb8a31eed210267f427eced91f1754a8bdb33e0e3020e99765651ccd232491f113f80ee54bb95237e2705f0c4f7c2923512619426a56bc463175bb36c8167a63575294523ea4479e1418d005d4424a36df6b36d51d74085ad039d9b90a8715c65afa6e8dcb1cf00c47314d099fb8774bc7c7cb5ac0fa49f9be67169f1e7aeb3c31d0d166d01d7f"}, &(0x7f0000000700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b40)={0x21, 0x0, 0x3, "d4dc5c"}}) 7.178533865s ago: executing program 3 (id=927): clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x8, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x4, 0x2}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0xb, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x1068, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x8}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x4, 0x1c}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, 0x0, &(0x7f0000d23000)) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x74, 0xa0, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdef2, 0xa, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd7, 0x7, {0x8, 0x25, 0x1, 0x2, 0x6, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd7, 0xe, 0x4, {0x8, 0x25, 0x1, 0x81, 0x30, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) clock_getres(0xfffffffffffffffb, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x2, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x80}, {0x0, 0x0, 0x7}, {0xfffffffffffffffe, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 5.788769252s ago: executing program 3 (id=931): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) 5.787666532s ago: executing program 3 (id=932): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000002380)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200"], 0xff1d, 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/117, 0x75}], 0x4) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10905300}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x84810) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x74, 0xa0, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdef2, 0xa, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd7, 0x8, {0x8, 0x25, 0x1, 0x2, 0x6, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd7, 0xe, 0x4, {0x8, 0x25, 0x1, 0x81, 0x30, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x7c, 0x0}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "2a9dfea2aa724c432975adf11eee963ac6a755449770d7a0d13b95a61d4187965dd17a2f384c27db1a3c87d7c5eb1a96357570b4b620d2d5e12d4cc17e5b2e7a45d9972ed727f5ef488ff4d526a160d0fd3d93ab8d12aa375e56100def3300ca4c88d6eca1888f14a76a1e94816fb1fbd1c347076edf6e4c19ad8b1b566c8b1001090e930737a0427124900e23aa5f886da09d60bee7887c648daf3d8ecd67658cd9"}}]}) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000002380)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200"], 0xff1d, 0x3) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/117, 0x75}], 0x4) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10905300}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x84810) (async) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x74, 0xa0, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdef2, 0xa, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd7, 0x8, {0x8, 0x25, 0x1, 0x2, 0x6, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd7, 0xe, 0x4, {0x8, 0x25, 0x1, 0x81, 0x30, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x7c, 0x0}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "2a9dfea2aa724c432975adf11eee963ac6a755449770d7a0d13b95a61d4187965dd17a2f384c27db1a3c87d7c5eb1a96357570b4b620d2d5e12d4cc17e5b2e7a45d9972ed727f5ef488ff4d526a160d0fd3d93ab8d12aa375e56100def3300ca4c88d6eca1888f14a76a1e94816fb1fbd1c347076edf6e4c19ad8b1b566c8b1001090e930737a0427124900e23aa5f886da09d60bee7887c648daf3d8ecd67658cd9"}}]}) (async) 5.606554717s ago: executing program 0 (id=934): sync() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0706000001000000010902300002010080320904000001020201000705810308001009040100020a0000000705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x2, 0xbebc200}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyACM0\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='hello', 0x5) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000000cc0)="01562db1d027d65d0ee6dce1905b044d7812c979", 0x14}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0085", 0xffffffffffffff32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680), 0x1}}], 0x3, 0x119e75c40273a56f) 5.332424824s ago: executing program 0 (id=935): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x81, 0xcb}}}}}]}}]}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffffffffffff74, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x67, {0x67, 0xd, "ebc5bb5bf7080f6d12c279bdf586eaed3e6317e987a310b3fb711cf7fac93428b897b9f49ad228f54b8e997c5b403f9f57fc96d6059b1c671b993731109c34b4314f3f9f2052c311200fde378887287fe2ef15a8259a607b487b0ad575447743c9b11cbd46"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1402}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0xa, 0x8b, "856e1e34", "0b148e47"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x6, 0x4, 0xf8, 0x1, 0x101}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x13, 0x7a, "97dbc5ecb093c1d65bbabd86363c2c2958bdfd03c1a2989a524aa8ca1d928b3f5ba219f1bbf063eed3588c1db802471927800984e4e9920af79cee5294b3120c77adb6de99a4ff2a177b01c93c5b1a0b56a4bd0e288ebc62418c00f3edbc128c829071a20deeee40c62c6ed13fd9c0adacb6a989a687ae26edb4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x4}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0xe1, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xd5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9d01"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "ea69"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x10084, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1c) r7 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000840)={'#! ', './sys', [{}]}, 0xa) mmap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r7, 0xbbc61000) mount_setattr(0xffffffffffffffff, 0x0, 0x4100, 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x3, 0x2, 0x2, '\x00', 0x38bd2394}) 5.319869824s ago: executing program 5 (id=936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf25fe8000000000000000000000000000bb00000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000010001000000000000000000000000000000000000000000000003000000000000000006000000000000000900000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000002000004000000000000000000000002000000ad0000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 5.298196345s ago: executing program 5 (id=937): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf25fe8000000000000000000000000000bb00000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000400000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000003000000000000000006000000000000000900000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000002000004000000000000000000000002000000ad0000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 5.236632067s ago: executing program 5 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) 4.35648987s ago: executing program 3 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xc5, 0x5, 0x1, 0x0, 0xf7, 0x6c, 0xfa, 0x8, 0x1, 0xd5, 0x2, 0xc2, 0x7, 0x3, 0xc, 0x7}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x80000001, 0x8, 0x8, 0x8, 0x0, 0x45], 0x26000, 0x3c0251}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.157245s ago: executing program 5 (id=944): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0xd, 0x6c, {0x6c, 0x23, "78074033ee62daa24448b59da1de84d73a2b82a27cf7813bbe0305ffeb9bc334cdbaeba6157ed34a08f38d93a734fbe402c150b96ce17512fed7ff01affeab8d27617358c1b43d7f9ffb7fa4969af4d22ecb867817890358bf101d8d397b2ab5c4aced88489ddadc0853"}}, &(0x7f0000000180)={0x0, 0x3, 0x82, @string={0xe2, 0x3, "39ece63c52da2ad9d2e9fde7a96df808e2ad45786ad07a0f68827ee5e87ec26b123f4f61be43d992610d97d4d9a4c7346bd370e492e8b7d38663476a93269bf3ace7710a16014729f4c410b9b7d33bf4f6f850392baa06a62db0c718a96f0bf7476b2b2b48d829c69a2612684ffe3aaa4f725e185ae07184e037f4217fbbc41d"}}}, &(0x7f0000000b80)={0x1c, &(0x7f00000002c0)={0x0, 0x18, 0xf3, "6a7e9b79f92f000c309eb6079abbdb4b0d79ac86f7a27687f85eb50e87460afdbb4dd21e2a17ddc8d1e909bb9dddadd6247312708c2586ac2d4d08c203214cea11db157807f6484ded43480b8d5c9634ca8af2139d44ddd924ba488acdf51d834d69590791277525776ee087eb8a31eed210267f427eced91f1754a8bdb33e0e3020e99765651ccd232491f113f80ee54bb95237e2705f0c4f7c2923512619426a56bc463175bb36c8167a63575294523ea4479e1418d005d4424a36df6b36d51d74085ad039d9b90a8715c65afa6e8dcb1cf00c47314d099fb8774bc7c7cb5ac0fa49f9be67169f1e7aeb3c31d0d166d01d7f"}, &(0x7f0000000700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b40)={0x21, 0x0, 0x3, "d4dc5c"}}) 2.323723201s ago: executing program 3 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000000cc0)="01562db1d027d65d0ee6dce1905b044d7812c979", 0x14}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0085", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40273ad6f) 2.110072767s ago: executing program 0 (id=947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf25fe8000000000000000000000000000bb00000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000020001000000000000000000000000000000000000000000000003000000000000000006000000000000000900000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000002000004000000000000000000000002000000ad0000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2.040652228s ago: executing program 0 (id=948): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) userfaultfd(0x180001) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) pipe(&(0x7f00000002c0)) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000d76a05c600400001020301090224000101fb40075dbe37a70003010000002f00000001220000090581030000000000"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002140)) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r1, @ANYRES64=r0], 0x0) 1.513517272s ago: executing program 0 (id=953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) 1.257046508s ago: executing program 3 (id=958): gettid() clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) r0 = open$dir(&(0x7f0000000100)='./bus\x00', 0x60400, 0x122) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) getdents64(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x20002, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5ca4d508bf4e24b2f9d759927962f125a690beadb6462527ca2545b0151d2262c7d99ec104906f76f2bef5947d2f1f1474", @ANYRES16=r6, @ANYBLOB="00032bbd7000fcdbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x100, 0xbb89, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40) socket(0x2b, 0x3, 0xfff) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x3000) renameat(r0, &(0x7f0000000180)='./bus\x00', r3, &(0x7f0000000240)='./bus\x00') mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r9, 0x40086e81, &(0x7f0000000340)=0x10000) chdir(&(0x7f0000000280)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYBLOB="7fd991428f493eb5a49c5cb620a571b002f6800c1c1ff11c39a6cd7c36faaa15ef86052d0bda1ae6e88fe344da61bffe6a0da14437a1d263c1a9e363a19f902ce2d929eec7a34b5fa7a95cc238c40c5d45a508d254012688e555bac92e01099dd5156965cb161d8d37538c68c05ddb20847b430fb7d64ad8264d2c4f2923bf29212ba023d6da9b5932d98663ac1e76ddaadffc83ad", @ANYBLOB, @ANYRESHEX=r0, @ANYRESDEC=r3], &(0x7f0000000600)={0x37, 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.140700701s ago: executing program 1 (id=959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf25fe8000000000000000000000000000bb00000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000001400000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000003000000000000000006000000000000000900000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000002000004000000000000000000000002000000ad0000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000000000000000000000000000000000000002"], 0x158}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.140324431s ago: executing program 1 (id=960): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xc4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x800008, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x3}}, 0x24, 0x3) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x24, 0x25, {0x25, 0x4, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) (async) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000004c0)='./file1\x00', 0x5) (async) r3 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x0) (async, rerun: 32) stat(&(0x7f0000000040)='./dev/ttyACM0\x00', &(0x7f0000000180)) (async, rerun: 32) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r4 = open(&(0x7f0000000240)='./dev/ttyACM0\x00', 0x400202, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyACM0\x00', 0xe142, 0x0) (async) syz_usb_disconnect(r3) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write$P9_RCLUNK(r4, 0xfffffffffffffffc, 0x0) (async) write(r5, &(0x7f0000000180)='r:s/p ./file0:0\f(', 0x11) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) renameat2(r5, &(0x7f0000000140)='./dev/ttyACM0\x00', r1, &(0x7f0000000200)='./dev\x00', 0x0) 381.83239ms ago: executing program 0 (id=961): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) userfaultfd(0x180001) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000d76a05c600400001020301090224000101fb40075dbe37a70003010000002f00000001220000090581030000000000"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002140)) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r2, @ANYRES64=r1], 0x0) 203.145705ms ago: executing program 1 (id=962): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) 128.598847ms ago: executing program 1 (id=963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000002c0)="640f09450f01c3673e6467470f792a650f23d166b8d0008ed866b88f000f00d0430f23c20f20dd", 0x27}], 0x1, 0xc1, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_matches\x00') write$binfmt_script(r3, 0x0, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0x3, 0x5, 0x0, 0x7f, 0xfe, 0x7, 0x6f, 0x1, 0x44, 0x3, 0xf8, 0x0, 0x5, 0x7, 0xa9, 0x5, 0xbd, 0xa, '\x00', 0xcc, 0x401}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000380)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (async) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2, 0x0, r4}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddd, 0x4000, 0x8000001, 0x3ab, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x100, 0xa, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0xfffffffd, 0x902c7, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x4000, 0x2, 0x821b, 0x0, r4}}], 0x4, &(0x7f0000001540)={0x2e, 0x4fbda717049eee21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 75.997898ms ago: executing program 1 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="643664363e0f01d10284777a66b8000001000f23d00f21f86635300000000f23f866b8030000000f23c00f21f8663503000b000f23f89a000023000f01c565650fae609426660f383dd40f01cf0f06", 0x4f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x2, 0x8, 0x7, '\x00', 0x3}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x20000400) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=965): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0xfffffd71) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000778000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xb, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x10004, 0x2}}}) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): unning [ 80.797780][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 80.805109][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 80.812327][ T419] raw-gadget.2 gadget.0: failed to queue reset event [ 80.875771][ T1536] netlink: 208 bytes leftover after parsing attributes in process `syz.0.397'. [ 80.886610][ T1536] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.397'. [ 80.895757][ T419] raw-gadget.2 gadget.0: failed to queue resume event [ 80.903742][ T1537] netlink: 'syz.4.395': attribute type 11 has an invalid length. [ 80.967604][ T419] usb 1-1: device descriptor read/64, error -32 [ 81.087776][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.095106][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.102588][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.109856][ T419] raw-gadget.2 gadget.0: failed to queue reset event [ 81.157595][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 81.187617][ T419] raw-gadget.2 gadget.0: failed to queue resume event [ 81.247603][ T419] usb 1-1: device descriptor read/64, error -32 [ 81.307597][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 81.313828][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 81.322013][ T9] usb 4-1: config 0 has no interface number 0 [ 81.328176][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 81.338270][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 81.349535][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 81.358828][ T419] raw-gadget.2 gadget.0: failed to queue suspend event [ 81.365722][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.373848][ T419] usb usb1-port1: attempt power cycle [ 81.379289][ T419] raw-gadget.2 gadget.0: failed to queue disconnect event [ 81.386444][ T9] usb 4-1: Product: syz [ 81.390869][ T9] usb 4-1: Manufacturer: syz [ 81.395590][ T419] raw-gadget.2 gadget.0: failed to queue reset event [ 81.402384][ T9] usb 4-1: SerialNumber: syz [ 81.407674][ T9] usb 4-1: config 0 descriptor?? [ 81.412973][ T1541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.420156][ T609] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 81.428280][ T1541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.467644][ T419] raw-gadget.2 gadget.0: failed to queue resume event [ 81.474646][ T419] raw-gadget.2 gadget.0: failed to queue reset event [ 81.577604][ T609] usb 2-1: Using ep0 maxpacket: 8 [ 81.583977][ T609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.592366][ T609] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 81.600497][ T609] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 81.609520][ T609] usb 2-1: config 17 has no interface number 0 [ 81.615754][ T609] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 81.626706][ T609] usb 2-1: config 17 interface 8 has no altsetting 0 [ 81.634836][ T609] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 81.644403][ T1541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.651656][ T1541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.658854][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.666968][ T609] usb 2-1: Product: syz [ 81.671640][ T609] usb 2-1: Manufacturer: syz [ 81.676287][ T609] usb 2-1: SerialNumber: syz [ 81.688527][ T419] raw-gadget.2 gadget.0: failed to queue resume event [ 81.725299][ T36] audit: type=1400 audit(1787000668.125:367): avc: denied { connect } for pid=1562 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.754332][ T1565] syzkaller1: entered promiscuous mode [ 81.760001][ T419] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 81.762793][ T1565] syzkaller1: entered allmulticast mode [ 81.787759][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.795068][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.802479][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.809643][ T419] usb 1-1: device descriptor read/8, error -32 [ 81.863256][ T1567] kvm: kvm [1566]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 81.872724][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 81.883112][ T1567] kvm: kvm [1566]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 81.893319][ T609] usb 2-1: selecting invalid altsetting 0 [ 81.901807][ T1567] kvm: kvm [1566]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 81.910948][ T609] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc [ 81.916597][ T609] usb 2-1: selecting invalid altsetting 0 [ 81.927747][ T609] usb 2-1: USB disconnect, device number 39 [ 81.934683][ T1567] kvm: kvm [1566]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 81.944054][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.951341][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.958614][ T1567] kvm: kvm [1566]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 81.958648][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 81.974788][ T419] usb 1-1: device descriptor read/8, error -32 [ 82.065280][ T36] audit: type=1400 audit(1787000668.465:368): avc: denied { ioctl } for pid=1575 comm="syz.0.408" path="socket:[14422]" dev="sockfs" ino=14422 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.089435][ T419] raw-gadget.2 gadget.0: failed to queue suspend event [ 82.106815][ T419] raw-gadget.2 gadget.0: failed to queue reset event [ 82.187144][ T419] raw-gadget.2 gadget.0: failed to queue resume event [ 82.232583][ T36] audit: type=1400 audit(1787000668.623:369): avc: denied { setopt } for pid=1584 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.264568][ T419] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 82.306271][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 82.321386][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 82.328760][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 82.335964][ T419] usb 1-1: device descriptor read/8, error -32 [ 82.421761][ T1593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.430563][ T1593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.474354][ T36] audit: type=1400 audit(1787000668.844:370): avc: denied { create } for pid=1595 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.501919][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 82.509188][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 82.516445][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 82.523732][ T419] usb 1-1: device descriptor read/8, error -32 [ 82.640558][ T419] raw-gadget.2 gadget.0: failed to queue suspend event [ 82.647539][ T419] usb usb1-port1: unable to enumerate USB device [ 82.888604][ T312] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 83.015184][ T1614] kvm: MONITOR instruction emulated as NOP! [ 83.022053][ T36] audit: type=1400 audit(1787000669.400:371): avc: denied { write } for pid=1613 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.023245][ T1614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.050454][ T1614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.059042][ T312] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 83.067296][ T312] usb 2-1: config 0 has no interface number 0 [ 83.080355][ T312] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 83.091888][ T36] audit: type=1400 audit(1787000669.473:372): avc: denied { getattr } for pid=1613 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.092053][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.123644][ T312] usb 2-1: Product: syz [ 83.128035][ T312] usb 2-1: Manufacturer: syz [ 83.132719][ T312] usb 2-1: SerialNumber: syz [ 83.138464][ T312] usb 2-1: config 0 descriptor?? [ 83.503219][ T36] audit: type=1400 audit(1787000669.903:373): avc: denied { ioctl } for pid=1538 comm="syz.3.398" path="socket:[14303]" dev="sockfs" ino=14303 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.540319][ T312] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 83.550629][ T312] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 83.560425][ T312] asix 2-1:0.251: probe with driver asix failed with error -5 [ 83.569743][ T312] usb 2-1: USB disconnect, device number 40 [ 83.586621][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.596904][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 83.607366][ T9] asix 4-1:0.34: probe with driver asix failed with error -71 [ 83.615868][ T9] usb 4-1: USB disconnect, device number 38 [ 83.710384][ T1618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.718986][ T1618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.784704][ T1625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 83.812949][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.821564][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.053486][ T1633] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.427'. [ 84.197639][ T36] audit: type=1400 audit(1787000670.618:374): avc: denied { read } for pid=1641 comm="syz.3.431" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.220853][ T36] audit: type=1400 audit(1787000670.618:375): avc: denied { open } for pid=1641 comm="syz.3.431" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.322295][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 84.340391][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.349027][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.358250][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.366876][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.395347][ T1644] kvm: kvm [1643]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 84.404138][ T1644] kvm: kvm [1643]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 84.430862][ T312] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 84.441478][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.449946][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.499275][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 84.504802][ T9] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 84.526279][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 84.535571][ T9] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 84.543947][ T9] usb 2-1: Product: syz [ 84.549442][ T9] usb 2-1: Manufacturer: syz [ 84.555708][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 84.562086][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 84.569217][ T9] cdc_acm 2-1:0.0: Zero length descriptor references [ 84.575968][ T9] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 84.588099][ T312] usb 4-1: device descriptor read/64, error -71 [ 84.771283][ T9] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 84.829541][ T312] usb 4-1: device descriptor read/64, error -71 [ 84.845551][ T36] audit: type=1326 audit(1787000671.263:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1646 comm="syz.4.433" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2599d9e0d9 code=0x0 [ 85.071126][ T312] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 85.201984][ T312] usb 4-1: device descriptor read/64, error -71 [ 85.253915][ T1657] Invalid argument reading file caps for ./file0 [ 85.453566][ T312] usb 4-1: device descriptor read/64, error -71 [ 85.544167][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 85.568865][ T312] usb usb4-port1: attempt power cycle [ 85.599854][ T1693] erspan0: mtu less than device minimum [ 85.707402][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 85.713539][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.724348][ T9] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 85.733406][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.749817][ T9] usb 2-1: SerialNumber: syz [ 85.756912][ T1696] tipc: Started in network mode [ 85.762084][ T9] usb 2-1: config 0 descriptor?? [ 85.767540][ T1696] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 85.776892][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 85.782844][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 85.790182][ T1696] tipc: Enabling of bearer rejected, failed to enable media [ 85.799801][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 85.814108][ T9] usb 2-1: Detected SIO [ 85.823884][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.923392][ T312] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 85.951380][ T1708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.960799][ T312] usb 4-1: device descriptor read/8, error -71 [ 85.973791][ T1708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.996166][ T1713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.004804][ T1713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.013578][ T1713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.022463][ T1713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.099817][ T312] usb 4-1: device descriptor read/8, error -71 [ 86.250452][ T9] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 86.342677][ T312] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 86.364134][ T312] usb 4-1: device descriptor read/8, error -71 [ 86.497362][ T312] usb 4-1: device descriptor read/8, error -71 [ 86.619717][ T312] usb usb4-port1: unable to enumerate USB device [ 86.630868][ T1714] mmap: syz.0.454 (1714): VmData 12685312 exceed data ulimit 34. Update limits or use boot option ignore_rlimit_data. [ 86.727287][ T419] usb 2-1: USB disconnect, device number 42 [ 86.744616][ T419] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 86.754147][ T419] ftdi_sio 2-1:0.0: device disconnected [ 87.378648][ T1729] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.398758][ T1729] SELinux: failed to load policy [ 87.440031][ T419] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 87.586057][ T1731] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 87.617216][ T419] usb 2-1: Using ep0 maxpacket: 16 [ 87.632846][ T419] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.655678][ T419] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 87.667938][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.680032][ T419] usb 2-1: Product: syz [ 87.684223][ T419] usb 2-1: Manufacturer: syz [ 87.689027][ T419] usb 2-1: SerialNumber: syz [ 87.694635][ T419] usb 2-1: config 0 descriptor?? [ 87.701522][ T419] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 87.931207][ T419] usb 2-1: USB disconnect, device number 43 [ 88.222622][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 88.222641][ T36] audit: type=1400 audit(1787000674.548:384): avc: denied { write } for pid=1745 comm="syz.0.467" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.222873][ T1746] rust_binder: 1745:1746 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 88.260162][ T1746] rust_binder: Write failure EINVAL in pid:532 [ 88.269910][ T1746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.284618][ T1746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.488483][ T36] audit: type=1400 audit(1787000674.805:385): avc: denied { write } for pid=1747 comm="syz.1.468" name="tcp" dev="proc" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.510940][ T36] audit: type=1400 audit(1787000674.815:386): avc: denied { bind } for pid=1750 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.538267][ T36] audit: type=1400 audit(1787000674.815:387): avc: denied { name_bind } for pid=1750 comm="syz.1.469" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 88.564640][ T36] audit: type=1400 audit(1787000674.815:388): avc: denied { node_bind } for pid=1750 comm="syz.1.469" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 88.587559][ T36] audit: type=1400 audit(1787000674.815:389): avc: denied { write } for pid=1750 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.606499][ T36] audit: type=1400 audit(1787000674.910:390): avc: denied { bind } for pid=1767 comm="syz.3.473" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.626638][ T36] audit: type=1400 audit(1787000674.910:391): avc: denied { name_bind } for pid=1767 comm="syz.3.473" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 88.648893][ T36] audit: type=1400 audit(1787000674.910:392): avc: denied { node_bind } for pid=1767 comm="syz.3.473" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 88.834815][ T312] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 88.849039][ T419] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 88.858914][ T36] audit: type=1400 audit(1787000675.157:393): avc: denied { listen } for pid=1771 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.861145][ T1772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.886787][ T1772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.015611][ T312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 89.025480][ T312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 89.036677][ T312] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 89.045727][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.053793][ T419] usb 4-1: Using ep0 maxpacket: 16 [ 89.058997][ T312] usb 2-1: Product: syz [ 89.063286][ T312] usb 2-1: Manufacturer: syz [ 89.068006][ T419] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 89.075893][ T312] usb 2-1: SerialNumber: syz [ 89.081443][ T312] usb 2-1: config 0 descriptor?? [ 89.086764][ T1766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.094003][ T1766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.105977][ T419] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 89.115106][ T419] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 89.123484][ T419] usb 4-1: Product: syz [ 89.127712][ T419] usb 4-1: Manufacturer: syz [ 89.134796][ T419] r8152-cfgselector 4-1: Unknown version 0x0000 [ 89.141107][ T419] r8152-cfgselector 4-1: config 0 descriptor?? [ 89.314078][ T1766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.321369][ T1766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.965513][ T312] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 90.127864][ T1786] kvm: kvm [1785]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9123 [ 90.188701][ T312] usb 2-1: USB disconnect, device number 44 [ 90.222324][ T1789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.230913][ T1789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.239284][ T1789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.248767][ T1789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.266318][ T1794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.274961][ T1794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.832658][ T1796] kvm: kvm [1795]: vcpu1, guest rIP: 0x914e Unhandled WRMSR(0x11e) = 0x0 [ 90.844083][ T1796] kvm: kvm [1795]: vcpu1, guest rIP: 0x9150 Unhandled WRMSR(0x11e) = 0x0 [ 91.214450][ T312] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 91.364082][ T312] usb 2-1: device descriptor read/64, error -71 [ 91.431871][ T566] bridge_slave_1: left allmulticast mode [ 91.437704][ T566] bridge_slave_1: left promiscuous mode [ 91.443503][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.451748][ T566] bridge_slave_0: left allmulticast mode [ 91.457561][ T566] bridge_slave_0: left promiscuous mode [ 91.463429][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.584519][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.591983][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.599387][ T1811] bridge_slave_0: entered allmulticast mode [ 91.605904][ T1811] bridge_slave_0: entered promiscuous mode [ 91.612956][ T566] veth1_macvtap: left promiscuous mode [ 91.618462][ T566] veth0_vlan: left promiscuous mode [ 91.620610][ T312] usb 2-1: device descriptor read/64, error -71 [ 91.674430][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.681488][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.688602][ T1811] bridge_slave_1: entered allmulticast mode [ 91.695212][ T1811] bridge_slave_1: entered promiscuous mode [ 91.754820][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.757762][ T1816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 91.761909][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.761999][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.785030][ T1811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.806114][ T419] r8152-cfgselector 4-1: bad CDC descriptors [ 91.817773][ T419] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 91.842627][ T1819] rust_binder: Write failure EINVAL in pid:340 [ 91.845629][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.859771][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.867339][ T1816] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 91.878652][ T312] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 91.883843][ T658] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.888460][ T1826] usbcore.quirks: string doesn't fit in 127 chars. [ 91.893271][ T658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.907414][ T1816] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 91.918465][ T658] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.925561][ T658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.941552][ T1828] netlink: 'syz.0.494': attribute type 22 has an invalid length. [ 91.972831][ T1811] veth0_vlan: entered promiscuous mode [ 91.979297][ T1832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.988714][ T1832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.994385][ T1811] veth1_macvtap: entered promiscuous mode [ 92.048505][ T312] usb 2-1: device descriptor read/64, error -71 [ 92.305924][ T419] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 92.305993][ T312] usb 2-1: device descriptor read/64, error -71 [ 92.327636][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.434684][ T312] usb usb2-port1: attempt power cycle [ 92.478631][ T419] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.489756][ T419] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 92.499035][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 92.499241][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.505655][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.512584][ T419] usb 4-1: Product: syz [ 92.523351][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.527395][ T419] usb 4-1: Manufacturer: syz [ 92.537357][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.548918][ T419] usb 4-1: SerialNumber: syz [ 92.551215][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.559451][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.568650][ T45] usb 6-1: config 0 descriptor?? [ 92.572611][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.582771][ T45] hub 6-1:0.0: USB hub found [ 92.793220][ T45] hub 6-1:0.0: 1 port detected [ 92.799129][ T312] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 92.832300][ T312] usb 2-1: device descriptor read/8, error -71 [ 92.971905][ T312] usb 2-1: device descriptor read/8, error -71 [ 93.228695][ T312] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 93.252581][ T312] usb 2-1: device descriptor read/8, error -71 [ 93.298796][ T1849] fuse: Bad value for 'fd' [ 93.391072][ T312] usb 2-1: device descriptor read/8, error -71 [ 93.506426][ T45] hub 6-1:0.0: activate --> -90 [ 93.519283][ T312] usb usb2-port1: unable to enumerate USB device [ 93.574736][ T1850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.583450][ T1850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.942290][ T1836] kvm: pic: single mode not supported [ 93.942475][ T1836] kvm: pic: level sensitive irq not supported [ 93.948044][ T1836] kvm: pic: level sensitive irq not supported [ 93.954684][ T1836] kvm: pic: single mode not supported [ 93.960839][ T1836] kvm: pic: level sensitive irq not supported [ 93.967734][ T45] usb 6-1-port1: cannot reset (err = -71) [ 93.967726][ T425] usb 6-1: USB disconnect, device number 2 [ 93.985660][ T45] usb 6-1-port1: attempt power cycle [ 94.231070][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 94.231091][ T36] audit: type=1400 audit(1787000680.184:434): avc: denied { create } for pid=1859 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.272928][ T1869] netlink: 'syz.0.506': attribute type 28 has an invalid length. [ 94.526299][ T36] audit: type=1400 audit(1787000680.467:435): avc: denied { accept } for pid=1884 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.526702][ T1885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.554497][ T1885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.769527][ T36] audit: type=1326 audit(1787000680.688:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.5.515" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a5579e0d9 code=0x0 [ 94.794360][ T425] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 94.964604][ T425] usb 2-1: too many endpoints for config 0 interface 0 altsetting 13: 254, using maximum allowed: 30 [ 94.975653][ T425] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 94.988801][ T425] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.995462][ T425] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 95.004685][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.013322][ T425] usb 2-1: config 0 descriptor?? [ 95.130773][ T1905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.139436][ T1905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.194025][ T36] audit: type=1326 audit(1787000681.076:437): auid=4294967295 uid=1937073919 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1829 comm="syz.3.495" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7fc00000 [ 95.223071][ T312] usb 4-1: USB disconnect, device number 44 [ 95.458587][ T425] wacom 0003:056A:0017.000F: ignoring exceeding usage max [ 95.466770][ T425] wacom 0003:056A:0017.000F: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 95.476913][ T425] wacom 0003:056A:0017.000F: hidraw0: USB HID v0.01 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 95.488854][ T425] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.000F/input/input20 [ 95.591809][ T312] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 95.682672][ T419] usb 2-1: USB disconnect, device number 49 [ 95.743561][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 95.753639][ T36] audit: type=1326 audit(1787000681.584:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.0.521" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f067959e0d9 code=0x0 [ 95.755459][ T312] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 95.786384][ T312] usb 4-1: config 0 has no interface number 0 [ 95.792630][ T312] usb 4-1: config 0 interface 41 has no altsetting 0 [ 95.800899][ T312] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 95.811119][ T36] audit: type=1400 audit(1787000681.649:439): avc: denied { ioctl } for pid=1915 comm="syz.0.521" path="socket:[18470]" dev="sockfs" ino=18470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.811582][ T1917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.521'. [ 95.836704][ T36] audit: type=1400 audit(1787000681.649:440): avc: denied { setopt } for pid=1915 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.845646][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.873961][ T312] usb 4-1: Product: syz [ 95.878191][ T312] usb 4-1: Manufacturer: syz [ 95.897295][ T312] usb 4-1: SerialNumber: syz [ 95.902513][ T312] usb 4-1: config 0 descriptor?? [ 95.981780][ T358] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 96.122590][ T358] usb 6-1: device descriptor read/64, error -71 [ 96.382572][ T358] usb 6-1: device descriptor read/64, error -71 [ 96.523363][ T419] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 96.642498][ T358] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 96.660511][ T1924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.669261][ T1924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.678685][ T1925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.687113][ T419] usb 2-1: Using ep0 maxpacket: 16 [ 96.692487][ T1925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.701313][ T419] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 96.709588][ T419] usb 2-1: config 1 has no interface number 0 [ 96.715692][ T419] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 96.725780][ T419] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 96.735849][ T419] usb 2-1: config 1 interface 105 has no altsetting 0 [ 96.744250][ T419] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 96.753354][ T419] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 96.761493][ T419] usb 2-1: Product: syz [ 96.765792][ T419] usb 2-1: Manufacturer: syz [ 96.770400][ T419] usb 2-1: SerialNumber: syz [ 96.776046][ T1922] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 96.783418][ T358] usb 6-1: device descriptor read/64, error -71 [ 96.783436][ T1922] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 96.797020][ T312] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 97.043271][ T358] usb 6-1: device descriptor read/64, error -71 [ 97.162562][ T358] usb usb6-port1: attempt power cycle [ 97.245085][ T1922] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 97.261879][ T1922] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 97.313177][ T1937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.322413][ T1937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.339936][ T1942] size and base must be multiples of 4 kiB [ 97.345848][ T1942] CPU: 0 UID: 0 PID: 1942 Comm: syz.0.529 Not tainted syzkaller #0 3c3170d5147e1ade2ce3347a3db15f56e1abada8 [ 97.345868][ T1942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.345876][ T1942] Call Trace: [ 97.345880][ T1942] [ 97.345885][ T1942] __dump_stack+0x21/0x30 [ 97.345909][ T1942] dump_stack_lvl+0x140/0x1c0 [ 97.345925][ T1942] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.345942][ T1942] ? __cfi_futex_wait+0x10/0x10 [ 97.345955][ T1942] dump_stack+0x19/0x20 [ 97.345970][ T1942] mtrr_del+0xcd/0xf0 [ 97.345985][ T1942] mtrr_ioctl+0xbf8/0x1170 [ 97.346000][ T1942] ? do_futex+0x32a/0x510 [ 97.346016][ T1942] ? __cfi_mtrr_ioctl+0x10/0x10 [ 97.346032][ T1942] ? __cfi_mtrr_ioctl+0x10/0x10 [ 97.346046][ T1942] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 97.346059][ T1942] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 97.346071][ T1942] __se_sys_ioctl+0x135/0x1b0 [ 97.346086][ T1942] __x64_sys_ioctl+0x7f/0xa0 [ 97.346100][ T1942] x64_sys_call+0x1878/0x2ee0 [ 97.346110][ T1942] do_syscall_64+0x57/0xf0 [ 97.346125][ T1942] ? clear_bhb_loop+0x50/0xa0 [ 97.346141][ T1942] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.346156][ T1942] RIP: 0033:0x7f067959e0d9 [ 97.346167][ T1942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.346177][ T1942] RSP: 002b:00007f067a4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.346192][ T1942] RAX: ffffffffffffffda RBX: 00007f0679825fa0 RCX: 00007f067959e0d9 [ 97.346202][ T1942] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 97.346210][ T1942] RBP: 00007f0679635024 R08: 0000000000000000 R09: 0000000000000000 [ 97.346218][ T1942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.346225][ T1942] R13: 00007f0679826038 R14: 00007f0679825fa0 R15: 00007fff03c5e288 [ 97.346235][ T1942] [ 97.574021][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 97.574057][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 97.574117][ T358] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 97.613239][ T36] audit: type=1400 audit(1787000683.301:441): avc: denied { bpf } for pid=1921 comm="syz.1.522" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.651401][ T358] usb 6-1: device descriptor read/8, error -71 [ 97.792620][ T1942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.803077][ T358] usb 6-1: device descriptor read/8, error -71 [ 97.811956][ T1942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.899326][ T312] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 97.918545][ T312] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 97.942186][ T312] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 97.968820][ T312] usb 4-1: USB disconnect, device number 45 [ 98.072437][ T358] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 98.106386][ T358] usb 6-1: device descriptor read/8, error -71 [ 98.257960][ T358] usb 6-1: device descriptor read/8, error -71 [ 98.386765][ T358] usb usb6-port1: unable to enumerate USB device [ 98.424535][ T419] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 98.448221][ T419] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 98.458686][ T419] usb 2-1: USB disconnect, device number 50 [ 98.478802][ T1947] kvm: kvm [1946]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 98.487905][ T1947] kvm: kvm [1946]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 98.610371][ T1954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.619789][ T1954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.633038][ T36] audit: type=1326 audit(1787000684.252:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.0.533" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f067959e0d9 code=0x0 [ 98.695420][ T36] audit: type=1400 audit(1787000684.307:443): avc: denied { map } for pid=1953 comm="syz.0.533" path="/proc/627/task/628/net" dev="proc" ino=18659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.361401][ T419] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 99.372203][ T312] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 99.525170][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.536356][ T312] usb 6-1: Using ep0 maxpacket: 8 [ 99.541558][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.551838][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.563210][ T419] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.573141][ T312] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.583771][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.591980][ T312] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.602976][ T419] usb 2-1: config 0 descriptor?? [ 99.611377][ T312] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 99.620781][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.629013][ T312] usb 6-1: Product: syz [ 99.633519][ T312] usb 6-1: Manufacturer: syz [ 99.638216][ T312] usb 6-1: SerialNumber: syz [ 99.868715][ T312] usb 6-1: unit 6 not found! [ 99.877220][ T312] usb 6-1: USB disconnect, device number 11 [ 99.888689][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.045280][ T419] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 100.055757][ T419] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.336906][ T1967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.356585][ T1967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.371172][ T312] usb 2-1: USB disconnect, device number 51 [ 100.434034][ T419] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 100.439905][ T1989] cgroup: none used incorrectly [ 100.585355][ T419] usb 4-1: device descriptor read/64, error -71 [ 100.834498][ T45] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 100.845313][ T419] usb 4-1: device descriptor read/64, error -71 [ 100.992511][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 100.992534][ T36] audit: type=1400 audit(1787000686.431:445): avc: denied { create } for pid=1998 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.029606][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 101.036718][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.051199][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.061775][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.071235][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.080612][ T45] usb 6-1: config 0 descriptor?? [ 101.094972][ T45] hub 6-1:0.0: USB hub found [ 101.119626][ T419] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 101.278857][ T419] usb 4-1: device descriptor read/64, error -71 [ 101.318027][ T45] hub 6-1:0.0: 1 port detected [ 101.549532][ T419] usb 4-1: device descriptor read/64, error -71 [ 101.681139][ T419] usb usb4-port1: attempt power cycle [ 101.739919][ T36] audit: type=1400 audit(1787000687.114:446): avc: denied { mounton } for pid=2004 comm="syz.1.551" path="/125/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 101.908844][ T2016] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.062125][ T45] hub 6-1:0.0: activate --> -90 [ 102.985748][ T365] usb 6-1: USB disconnect, device number 12 [ 102.991822][ T45] usb 6-1-port1: cannot reset (err = -71) [ 103.006089][ T45] usb 6-1-port1: attempt power cycle [ 104.058396][ T419] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 104.098374][ T419] usb 4-1: device descriptor read/8, error -71 [ 105.139178][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 105.416402][ T358] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 105.438470][ T419] usb 4-1: device descriptor read/8, error -71 [ 105.918014][ T2057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.979938][ T358] usb 6-1: Using ep0 maxpacket: 16 [ 106.113917][ T358] usb 6-1: config 3 has an invalid interface number: 117 but max is 0 [ 106.139647][ T2057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.250403][ T358] usb 6-1: config 3 has no interface number 0 [ 106.391435][ T358] usb 6-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 106.400539][ T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.463429][ T358] usb 6-1: Product: syz [ 106.475110][ T358] usb 6-1: Manufacturer: syz [ 106.485290][ T358] usb 6-1: SerialNumber: syz [ 106.742907][ T358] usb-storage 6-1:3.117: USB Mass Storage device detected [ 106.773604][ T358] usb-storage 6-1:3.117: device ignored [ 106.835365][ T419] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 106.882439][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 106.900297][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 106.921963][ T419] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.946186][ T419] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.976155][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.991048][ T419] usb 4-1: config 0 descriptor?? [ 107.006415][ T2070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.008625][ T36] audit: type=1400 audit(1787000691.979:447): avc: denied { getopt } for pid=2073 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.092783][ T2077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.105280][ T2076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.115177][ T2077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.125460][ T2076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.162613][ T358] usb 6-1: USB disconnect, device number 17 [ 107.409631][ T2082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.572'. [ 107.453063][ T419] plantronics 0003:047F:FFFF.0011: collection stack underflow [ 107.469768][ T419] plantronics 0003:047F:FFFF.0011: item 0 4 0 12 parsing failed [ 107.486379][ T419] plantronics 0003:047F:FFFF.0011: parse failed [ 107.500172][ T419] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 107.651461][ T609] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 107.730061][ T419] usb 4-1: USB disconnect, device number 49 [ 107.788555][ T358] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 107.821457][ T609] usb 2-1: Using ep0 maxpacket: 32 [ 107.836227][ T609] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 107.862654][ T609] usb 2-1: config 0 has no interface number 0 [ 107.878695][ T609] usb 2-1: config 0 interface 165 has no altsetting 0 [ 107.898994][ T609] usb 2-1: New USB device found, idVendor=19d2, idProduct=1142, bcdDevice=c6.7b [ 107.911786][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.922954][ T609] usb 2-1: Product: syz [ 107.927301][ T609] usb 2-1: Manufacturer: syz [ 107.933434][ T609] usb 2-1: SerialNumber: syz [ 107.940246][ T609] usb 2-1: config 0 descriptor?? [ 107.957653][ T358] usb 6-1: device descriptor read/64, error -71 [ 108.166559][ T609] usb 2-1: bad CDC descriptors [ 108.173300][ T609] usb 2-1: USB disconnect, device number 53 [ 108.221899][ T358] usb 6-1: device descriptor read/64, error -71 [ 108.305815][ T36] audit: type=1400 audit(1787000693.179:448): avc: denied { setattr } for pid=2090 comm="syz.3.575" name="CAN_RAW" dev="sockfs" ino=19161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.481869][ T358] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 108.532443][ T2097] Bluetooth: ISO socket layer initialized [ 108.611843][ T419] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 108.622827][ T358] usb 6-1: device descriptor read/64, error -71 [ 108.774259][ T419] usb 4-1: Using ep0 maxpacket: 8 [ 108.780651][ T419] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.791650][ T419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.802291][ T419] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 108.811494][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.819708][ T419] usb 4-1: Product: syz [ 108.823981][ T419] usb 4-1: Manufacturer: syz [ 108.828694][ T419] usb 4-1: SerialNumber: syz [ 108.893493][ T358] usb 6-1: device descriptor read/64, error -71 [ 109.012793][ T358] usb usb6-port1: attempt power cycle [ 109.056113][ T419] usb 4-1: unit 6 not found! [ 109.060752][ T419] usb 4-1: unit 0: unexpected type 0x0d [ 109.069634][ T419] usb 4-1: USB disconnect, device number 50 [ 109.081901][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.380877][ T358] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 109.403891][ T358] usb 6-1: device descriptor read/8, error -71 [ 109.555441][ T358] usb 6-1: device descriptor read/8, error -71 [ 109.651438][ T2113] random: crng reseeded on system resumption [ 109.651465][ T36] audit: type=1400 audit(1787000694.416:449): avc: denied { write } for pid=2110 comm="syz.1.583" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.825014][ T358] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 109.847872][ T358] usb 6-1: device descriptor read/8, error -71 [ 109.954943][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 109.987452][ T419] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 110.010382][ T358] usb 6-1: device descriptor read/8, error -71 [ 110.118743][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 110.130252][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 110.139235][ T358] usb usb6-port1: unable to enumerate USB device [ 110.142161][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.172887][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.181595][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.193439][ T419] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 110.211862][ T419] usb 4-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 110.221468][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.229840][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.240066][ T9] usb 2-1: config 0 descriptor?? [ 110.240380][ T419] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 110.255098][ T36] audit: type=1400 audit(1787000694.985:450): avc: denied { create } for pid=2120 comm="syz.0.586" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.258311][ T2113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.276105][ T36] audit: type=1400 audit(1787000694.985:451): avc: denied { read } for pid=2120 comm="syz.0.586" name="file0" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.285246][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.305430][ T36] audit: type=1400 audit(1787000694.985:452): avc: denied { open } for pid=2120 comm="syz.0.586" path="/229/file0" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.313200][ T609] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 110.336115][ T36] audit: type=1400 audit(1787000695.012:453): avc: denied { ioctl } for pid=2120 comm="syz.0.586" path="/229/file0" dev="tmpfs" ino=1288 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.344111][ T419] usb 4-1: Product: syz [ 110.372017][ T419] usb 4-1: Manufacturer: syz [ 110.376743][ T419] usb 4-1: SerialNumber: syz [ 110.499676][ T609] usb 6-1: device descriptor read/64, error -71 [ 110.579542][ T419] usb 4-1: USB disconnect, device number 51 [ 110.733393][ T9] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 110.742316][ T609] usb 6-1: device descriptor read/64, error -71 [ 110.750925][ T9] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 110.830177][ T36] audit: type=1400 audit(1787000695.579:454): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.089053][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.098018][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.112083][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.131690][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.151236][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.168612][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.186621][ T609] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 111.332602][ T609] usb 6-1: Using ep0 maxpacket: 32 [ 111.340334][ T609] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.350505][ T609] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 111.362878][ T609] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.372388][ T609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.380493][ T609] usb 6-1: Product: љ [ 111.384924][ T609] usb 6-1: Manufacturer: ౌ郒⇏乵靯糳ॸ순垟꿰蟮ˬ䡭㹧敽᪠灒䞃皘娔䑫⋼ሤ箉똂疳屷╖뺊Ě꫺ꐃ䵢ݒ怛烼ᐛႲ᧶댭ĸ儯﷜⮃㼼䀯䚹ꮁ܇篈 [ 111.403846][ T609] usb 6-1: SerialNumber: 俶腎糩鏟졄뒅㚭Û⼻囋씜퓭퍅ἔ洊큙鲱ꞛ㔆ꊽ鬦晞댫뺻酰昇漋䷚蛲신濍璞㲱ܕܿ連㮓漏䨒찟坩恰⭉뿞ꞯ彋庰⼜牍䫩䦍䯼┣ꛨꜹ욁齔ᵻ蚨듽㒠쳉翳䗯铁焘∑場想相䕄矙ﱕ슙陥㣷䔛㜺櫬凍厚질ꘌ㼈迋뭬慾 [ 111.433721][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 111.588245][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 111.594819][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.605324][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.616279][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 111.625773][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.633929][ T9] usb 4-1: Product: syz [ 111.638402][ T9] usb 4-1: Manufacturer: syz [ 111.643962][ T9] usb 4-1: SerialNumber: syz [ 111.851372][ T36] audit: type=1400 audit(1787000696.629:455): avc: denied { write } for pid=2128 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.858106][ T9] usb 4-1: unit 6 not found! [ 111.883945][ T609] cdc_ncm 6-1:1.0: bind() failure [ 111.896428][ T609] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 111.913160][ T609] cdc_ncm 6-1:1.1: bind() failure [ 111.923588][ T9] usb 4-1: USB disconnect, device number 52 [ 111.944595][ T609] usb 6-1: USB disconnect, device number 23 [ 111.992740][ T36] audit: type=1400 audit(1787000696.781:456): avc: denied { validate_trans } for pid=2160 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.021153][ C0] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 112.062706][ T2169] PM: Enabling pm_trace changes system date and time during resume. [ 112.062706][ T2169] PM: Correct system time has to be restored manually after resume. [ 112.309372][ T2179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 112.442137][ T2193] tc_dump_action: action bad kind [ 112.640431][ T365] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 112.680607][ T9] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 112.792553][ T365] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.803584][ T365] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.816439][ T365] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.823104][ T365] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 112.832207][ T365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.834027][ T9] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 112.841143][ T365] usb 6-1: config 0 descriptor?? [ 112.851032][ T9] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 112.864832][ T312] usb 2-1: reset high-speed USB device number 54 using dummy_hcd [ 112.875687][ T9] usb 4-1: string descriptor 0 read error: -22 [ 112.882096][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 112.891366][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.023428][ T312] usb 2-1: device firmware changed [ 113.029143][ T419] usb 2-1: USB disconnect, device number 54 [ 113.072076][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 113.072097][ T36] audit: type=1326 audit(1787000697.850:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2185 comm="syz.5.607" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a5579e0d9 code=0x0 [ 113.103868][ T365] usbhid 6-1:0.0: can't add hid device: -71 [ 113.109369][ T312] usb 4-1: USB disconnect, device number 53 [ 113.109870][ T365] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 113.127293][ T365] usb 6-1: USB disconnect, device number 24 [ 113.161149][ T2206] netlink: 'syz.5.614': attribute type 4 has an invalid length. [ 113.163783][ T419] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 113.168907][ T2206] netlink: 'syz.5.614': attribute type 2 has an invalid length. [ 113.338136][ T419] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.352221][ T419] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.361351][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.369555][ T419] usb 2-1: SerialNumber: syz [ 113.552082][ T365] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 113.579117][ T2221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.589770][ T2221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.599714][ T36] audit: type=1400 audit(1787000698.370:459): avc: denied { remount } for pid=2218 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.685272][ T365] usb 6-1: device descriptor read/64, error -71 [ 113.890182][ T312] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 113.941402][ T365] usb 6-1: device descriptor read/64, error -71 [ 114.027646][ T419] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 114.038899][ T419] usb 2-1: USB disconnect, device number 55 [ 114.046199][ T312] usb 4-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.058695][ T312] usb 4-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 114.072044][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.078730][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 114.087976][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.097116][ T312] usb 4-1: config 0 descriptor?? [ 114.197788][ T365] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 114.221164][ T2226] kvm: pic: non byte write [ 114.227826][ T2226] fuse: Bad value for 'fd' [ 114.233678][ T2226] rust_binder: 2225:2226 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 114.245416][ T419] rust_binder: 2225: undelivered death notification, 0000000001000000 [ 114.298285][ T2229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.307171][ T2229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.316526][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.329192][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.338133][ T2224] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 114.342371][ T365] usb 6-1: device descriptor read/64, error -71 [ 114.346151][ T2224] netlink: 136 bytes leftover after parsing attributes in process `syz.3.619'. [ 114.364128][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.372888][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.381696][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.390480][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.591628][ T365] usb 6-1: device descriptor read/64, error -71 [ 114.607579][ T2224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.625334][ T2224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.639370][ T312] hid (null): invalid report_count 1591645534 [ 114.647057][ T312] logitech-hidpp-device 0003:046D:C082.0013: collection stack underflow [ 114.655590][ T312] logitech-hidpp-device 0003:046D:C082.0013: item 0 0 0 12 parsing failed [ 114.664462][ T312] logitech-hidpp-device 0003:046D:C082.0013: hidpp_probe:parse failed [ 114.672750][ T312] logitech-hidpp-device 0003:046D:C082.0013: probe with driver logitech-hidpp-device failed with error -22 [ 114.706053][ T365] usb usb6-port1: attempt power cycle [ 114.849556][ T312] usb 4-1: USB disconnect, device number 54 [ 114.882635][ T419] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 114.968857][ T36] audit: type=1400 audit(1787000699.697:460): avc: denied { map } for pid=2248 comm="syz.0.630" path="socket:[20038]" dev="sockfs" ino=20038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.969291][ T2249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 114.992769][ T36] audit: type=1400 audit(1787000699.697:461): avc: denied { read accept } for pid=2248 comm="syz.0.630" path="socket:[20038]" dev="sockfs" ino=20038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.027589][ T36] audit: type=1400 audit(1787000699.736:462): avc: denied { getopt } for pid=2248 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.040890][ T419] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 115.067147][ T419] usb 2-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 115.079865][ T365] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 115.084710][ T419] usb 2-1: Product: syz [ 115.100866][ T419] usb 2-1: config 0 descriptor?? [ 115.112177][ T419] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 115.112520][ T365] usb 6-1: device descriptor read/8, error -71 [ 115.121764][ T419] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 115.136604][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.147076][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.257614][ T365] usb 6-1: device descriptor read/8, error -71 [ 115.323918][ T419] usb 2-1: USB disconnect, device number 56 [ 115.330497][ T419] ftdi_sio 2-1:0.0: device disconnected [ 115.521140][ T365] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 115.554841][ T365] usb 6-1: device descriptor read/8, error -71 [ 115.672815][ T609] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 115.695775][ T365] usb 6-1: device descriptor read/8, error -71 [ 115.769273][ T2262] netlink: 'syz.0.636': attribute type 22 has an invalid length. [ 115.777728][ T2262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.786551][ T2262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.824562][ T365] usb usb6-port1: unable to enumerate USB device [ 115.836483][ T609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 115.847873][ T609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 115.859239][ T609] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.872422][ T609] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.889186][ T609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.899965][ T36] audit: type=1400 audit(1787000700.579:463): avc: denied { setattr } for pid=2263 comm="syz.1.637" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 115.901144][ T609] usb 4-1: config 0 descriptor?? [ 115.945490][ T2260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.389462][ T609] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 116.420552][ T609] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 116.586342][ T2288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.595340][ T2288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.680479][ T36] audit: type=1400 audit(1787000701.299:464): avc: denied { lock } for pid=2259 comm="syz.3.635" path="socket:[20155]" dev="sockfs" ino=20155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 116.843407][ T2294] netlink: 108 bytes leftover after parsing attributes in process `syz.1.646'. [ 116.885967][ T312] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 117.037605][ T312] usb 6-1: device descriptor read/64, error -71 [ 117.297599][ T312] usb 6-1: device descriptor read/64, error -71 [ 117.469552][ T2301] fuse: Bad value for 'fd' [ 117.557767][ T312] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 117.617379][ T2313] netlink: 'syz.0.655': attribute type 4 has an invalid length. [ 117.625262][ T2313] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.655'. [ 117.708572][ T2318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.717149][ T312] usb 6-1: device descriptor read/64, error -71 [ 117.723831][ T2318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.752514][ T609] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 117.817708][ C0] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -1 [ 117.914975][ T609] usb 2-1: Using ep0 maxpacket: 8 [ 117.921303][ T609] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 117.932037][ T609] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 117.941133][ T609] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 117.950401][ T609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.990828][ T312] usb 6-1: device descriptor read/64, error -71 [ 118.110166][ T312] usb usb6-port1: attempt power cycle [ 118.180885][ T2303] fuse: blksize only supported for fuseblk [ 118.193713][ T609] usb 2-1: string descriptor 0 read error: -71 [ 118.206123][ T609] usb 2-1: USB disconnect, device number 57 [ 118.215055][ T2323] fuse: Bad value for 'fd' [ 118.338769][ T36] audit: type=1400 audit(1787000702.831:465): avc: denied { unmount } for pid=2332 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.391324][ T36] audit: type=1400 audit(1787000702.868:466): avc: denied { read } for pid=2335 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.465168][ T2344] fuse: Bad value for 'fd' [ 118.478679][ T312] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 118.524758][ T312] usb 6-1: device descriptor read/8, error -71 [ 118.619165][ T609] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 118.652653][ T419] usb 4-1: USB disconnect, device number 55 [ 118.670044][ T36] audit: type=1400 audit(1787000703.127:467): avc: denied { bind } for pid=2348 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.675482][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 118.711060][ T312] usb 6-1: device descriptor read/8, error -71 [ 118.803396][ T609] usb 2-1: Using ep0 maxpacket: 32 [ 118.818209][ T609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.847216][ T609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.871278][ T609] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.900436][ T609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.928194][ T609] usb 2-1: config 0 descriptor?? [ 118.949207][ T609] hub 2-1:0.0: USB hub found [ 118.987370][ T312] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 119.010803][ T312] usb 6-1: device descriptor read/8, error -71 [ 119.165696][ T609] hub 2-1:0.0: 1 port detected [ 119.175562][ T312] usb 6-1: device descriptor read/8, error -71 [ 119.314021][ T312] usb usb6-port1: unable to enumerate USB device [ 119.335338][ T36] audit: type=1400 audit(1787000703.745:468): avc: denied { map } for pid=2362 comm="syz.3.675" path="net:[4026532546]" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.358745][ T36] audit: type=1400 audit(1787000703.745:469): avc: denied { execute } for pid=2362 comm="syz.3.675" path="net:[4026532546]" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.799765][ T312] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 119.800697][ T2376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2376 comm=syz.5.679 [ 119.824583][ T2376] netlink: 32 bytes leftover after parsing attributes in process `syz.5.679'. [ 119.835440][ T2376] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 119.845523][ T2376] SELinux: failed to load policy [ 119.879203][ T609] hub 2-1:0.0: activate --> -90 [ 119.983862][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 119.996243][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.016345][ T312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.038149][ T312] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 120.052109][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.070540][ T312] usb 4-1: Product: syz [ 120.081504][ T312] usb 4-1: Manufacturer: syz [ 120.091037][ T312] usb 4-1: SerialNumber: syz [ 120.157146][ T2382] fuse: Bad value for 'fd' [ 120.189674][ T365] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 120.201999][ T36] audit: type=1401 audit(1787000704.548:470): op=setxattr invalid_context="" [ 120.348854][ T312] usb 4-1: unit 6 not found! [ 120.361847][ T2325] kvm: pic: single mode not supported [ 120.362651][ T2325] kvm: pic: level sensitive irq not supported [ 120.364237][ T365] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.371898][ T2325] kvm: pic: level sensitive irq not supported [ 120.375069][ T365] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 120.386414][ T312] usb 4-1: USB disconnect, device number 56 [ 120.405670][ T365] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.408525][ T2325] kvm: pic: level sensitive irq not supported [ 120.434006][ T2325] kvm: pic: level sensitive irq not supported [ 120.439167][ T365] usb 6-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 120.440875][ T2325] kvm: pic: single mode not supported [ 120.446461][ T365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.455553][ T2325] kvm: pic: level sensitive irq not supported [ 120.466659][ T365] usb 6-1: Product: syz [ 120.479213][ T365] usb 6-1: Manufacturer: syz [ 120.484096][ T365] usb 6-1: SerialNumber: syz [ 120.486700][ T419] usb 2-1: USB disconnect, device number 58 [ 120.494897][ T609] usb 2-1-port1: cannot reset (err = -71) [ 120.495060][ T2376] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 120.500856][ T609] usb 2-1-port1: attempt power cycle [ 120.732744][ T365] usb 6-1: MIDIStreaming interface descriptor not found [ 120.753016][ T365] usb 6-1: USB disconnect, device number 33 [ 120.782480][ T2389] fuse: Bad value for 'fd' [ 121.229606][ T609] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 121.403284][ T609] usb 4-1: Using ep0 maxpacket: 32 [ 121.410058][ T609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.422096][ T609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.432393][ T609] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.441780][ T609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.450867][ T609] usb 4-1: config 0 descriptor?? [ 121.457919][ T609] hub 4-1:0.0: USB hub found [ 121.554534][ T419] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 121.674042][ T609] hub 4-1:0.0: 1 port detected [ 121.718348][ T419] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.728478][ T419] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 121.740465][ T419] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.749654][ T419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.757889][ T419] usb 6-1: Product: syz [ 121.762228][ T419] usb 6-1: Manufacturer: syz [ 121.767035][ T419] usb 6-1: SerialNumber: syz [ 121.773095][ T419] usb 6-1: config 0 descriptor?? [ 121.778732][ T2404] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 121.786345][ T2404] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 122.012786][ T2404] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 122.020129][ T2404] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 122.391754][ T609] hub 4-1:0.0: activate --> -90 [ 122.462469][ T419] Error reading MAC address [ 122.469238][ T419] usb 6-1: USB disconnect, device number 34 [ 122.836570][ T609] usb 4-1-port1: cannot reset (err = -71) [ 122.842548][ T419] usb 4-1: USB disconnect, device number 57 [ 122.848787][ T609] usb 4-1-port1: attempt power cycle [ 123.087409][ T2418] overlayfs: failed to clone upperpath [ 123.124349][ T2427] netlink: 57 bytes leftover after parsing attributes in process `syz.0.700'. [ 123.157052][ T2431] fuse: Bad value for 'fd' [ 123.309503][ T365] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 123.331043][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 123.445877][ T2443] bridge: RTM_NEWNEIGH with invalid ether address [ 123.462133][ T365] usb 6-1: device descriptor read/64, error -71 [ 123.494645][ T9] usb 2-1: config index 0 descriptor too short (expected 88, got 18) [ 123.502867][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.513022][ T9] usb 2-1: config 0 has no interfaces? [ 123.518710][ T9] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 123.527811][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.536722][ T9] usb 2-1: config 0 descriptor?? [ 123.720893][ T365] usb 6-1: device descriptor read/64, error -71 [ 123.991732][ T365] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 124.143322][ T365] usb 6-1: device descriptor read/64, error -71 [ 124.424977][ T365] usb 6-1: device descriptor read/64, error -71 [ 124.544308][ T365] usb usb6-port1: attempt power cycle [ 124.717411][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 124.896204][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 124.923202][ T365] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 124.924527][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.946300][ T365] usb 6-1: device descriptor read/8, error -71 [ 124.955689][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.999092][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 125.008174][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.031366][ T9] usb 4-1: Product: syz [ 125.047623][ T9] usb 4-1: Manufacturer: syz [ 125.066892][ T9] usb 4-1: SerialNumber: syz [ 125.087140][ T365] usb 6-1: device descriptor read/8, error -71 [ 125.310507][ T9] usb 4-1: unit 6 not found! [ 125.318568][ T9] usb 4-1: USB disconnect, device number 62 [ 125.356507][ T365] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 125.390335][ T365] usb 6-1: device descriptor read/8, error -71 [ 125.531154][ T365] usb 6-1: device descriptor read/8, error -71 [ 125.649240][ T365] usb usb6-port1: unable to enumerate USB device [ 126.342522][ T9] usb 2-1: USB disconnect, device number 63 [ 126.352038][ T36] audit: type=1400 audit(1787000710.217:471): avc: denied { append } for pid=2482 comm="syz.1.721" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.375022][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 126.375367][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 126.414051][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 126.425876][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 126.437272][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 126.447479][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 126.456928][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 126.466653][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 126.476118][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 126.486933][ T2479] kvm: kvm [2478]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010000) = 0x8000 [ 126.743040][ T365] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 126.906966][ T365] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 126.916738][ T365] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.927163][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 126.931107][ T365] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.946506][ T365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.954560][ T365] usb 6-1: SerialNumber: syz [ 126.960575][ T2481] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 127.102029][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.113323][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.123220][ T9] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 127.132534][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.142434][ T9] usb 4-1: config 0 descriptor?? [ 127.187502][ T365] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 127.199671][ T365] usb 6-1: USB disconnect, device number 39 [ 127.614293][ T419] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 127.806459][ T419] usb 2-1: Using ep0 maxpacket: 32 [ 127.816153][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.837181][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.880314][ T419] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.904958][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.936140][ T419] usb 2-1: config 0 descriptor?? [ 127.961058][ T419] hub 2-1:0.0: USB hub found [ 128.146455][ T2505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.177480][ T419] hub 2-1:0.0: 1 port detected [ 128.182666][ T2505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.421954][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 128.428030][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 128.440988][ T9] usb 4-1: USB disconnect, device number 63 [ 128.920500][ T419] hub 2-1:0.0: activate --> -90 [ 128.993916][ T2528] overlayfs: conflicting options: userxattr,verity=on [ 129.006970][ T358] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 129.170682][ T358] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 129.180547][ T358] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 129.192249][ T358] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 129.201333][ T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.209408][ T358] usb 6-1: Product: syz [ 129.213632][ T358] usb 6-1: Manufacturer: syz [ 129.218237][ T358] usb 6-1: SerialNumber: syz [ 129.224427][ T358] usb 6-1: config 0 descriptor?? [ 129.229830][ T2518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 129.237421][ T2518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 129.378322][ T419] usb 2-1-port1: cannot reset (err = -71) [ 129.387367][ T9] usb 2-1: USB disconnect, device number 64 [ 129.393525][ T419] usb 2-1-port1: cannot reset (err = -71) [ 129.399861][ T419] usb 2-1-port1: attempt power cycle [ 129.464199][ T2518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 129.471618][ T2518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 129.913557][ T358] Error reading MAC address [ 129.919719][ T358] usb 6-1: USB disconnect, device number 40 [ 130.011382][ T36] audit: type=1400 audit(1787000713.599:472): avc: denied { mounton } for pid=2538 comm="syz.1.741" path="/proc/433/cgroup" dev="proc" ino=21691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 130.031046][ T2542] netlink: 'syz.1.742': attribute type 16 has an invalid length. [ 130.042169][ T2542] netlink: 51802 bytes leftover after parsing attributes in process `syz.1.742'. [ 130.053730][ T2542] fuse: Bad value for 'user_id' [ 130.058642][ T2542] fuse: Bad value for 'user_id' [ 130.132489][ T2549] rust_binder: 2548:2549 error while translating object: EINVAL [ 130.132503][ T36] audit: type=1400 audit(1787000713.710:473): avc: denied { transfer } for pid=2548 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.160639][ T2549] rust_binder: Failure in copy_transaction_data: EINVAL [ 130.160666][ T2549] rust_binder: 2548:2549 transaction call to 2548:0 failed EINVAL, code 0 size 80-24 [ 130.203052][ T419] rust_binder: 2548: undelivered TRANSACTION_ERROR: 29201 [ 130.501710][ T419] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 130.642455][ T419] usb 4-1: device descriptor read/64, error -71 [ 130.739977][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 130.902423][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 130.907634][ T419] usb 4-1: device descriptor read/64, error -71 [ 130.915725][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.926995][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.936866][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.950788][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 130.960559][ T9] usb 6-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 130.968885][ T9] usb 6-1: Product: syz [ 130.973922][ T9] usb 6-1: config 0 descriptor?? [ 131.009129][ T2577] netlink: 'syz.1.756': attribute type 28 has an invalid length. [ 131.173216][ T419] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 131.259887][ T609] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 131.314030][ T419] usb 4-1: device descriptor read/64, error -71 [ 131.417935][ T9] hid-generic 0003:045E:10DA.0015: ignoring exceeding usage max [ 131.425824][ T609] usb 2-1: Using ep0 maxpacket: 16 [ 131.431802][ T9] hid-generic 0003:045E:10DA.0015: ignoring exceeding usage max [ 131.440514][ T609] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 131.450633][ T9] hid-generic 0003:045E:10DA.0015: unknown main item tag 0x0 [ 131.458468][ T9] hid-generic 0003:045E:10DA.0015: unknown main item tag 0x0 [ 131.466304][ T9] hid-generic 0003:045E:10DA.0015: unbalanced collection at end of report description [ 131.476911][ T9] hid-generic 0003:045E:10DA.0015: probe with driver hid-generic failed with error -22 [ 131.493355][ T2576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.502387][ T2576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.510754][ T2576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.519657][ T2576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.528509][ T2576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.537910][ T2576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.546271][ T2576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.555111][ T2576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.563755][ T2576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.572599][ T2576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.584817][ T609] usb 2-1: string descriptor 0 read error: -71 [ 131.591047][ T609] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 131.600536][ T419] usb 4-1: device descriptor read/64, error -71 [ 131.607910][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.617719][ T609] r8152-cfgselector 2-1: Unknown version 0x0000 [ 131.626299][ T609] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 131.636863][ T609] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 131.646365][ T358] usb 6-1: USB disconnect, device number 41 [ 131.649288][ T609] r8152-cfgselector 2-1: USB disconnect, device number 69 [ 131.725798][ T419] usb usb4-port1: attempt power cycle [ 132.093970][ T419] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 132.116800][ T419] usb 4-1: device descriptor read/8, error -71 [ 132.257907][ T419] usb 4-1: device descriptor read/8, error -71 [ 132.291704][ T36] audit: type=1400 audit(1787000715.708:474): avc: denied { connect } for pid=2605 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.516567][ T419] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 132.539563][ T419] usb 4-1: device descriptor read/8, error -71 [ 132.646392][ T609] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 132.680073][ T419] usb 4-1: device descriptor read/8, error -71 [ 132.798127][ T419] usb usb4-port1: unable to enumerate USB device [ 132.810373][ T609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 132.821793][ T609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 132.833237][ T609] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.846445][ T609] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.855679][ T609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.864883][ T609] usb 6-1: config 0 descriptor?? [ 132.871050][ T2610] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 133.143346][ T2620] netlink: 'syz.0.771': attribute type 27 has an invalid length. [ 133.314964][ T609] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 133.324917][ T609] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 133.372153][ T419] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 133.534542][ T419] usb 2-1: Using ep0 maxpacket: 8 [ 133.547522][ T419] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.567061][ T419] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.587600][ T419] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 133.602614][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.616379][ T419] usb 2-1: Product: syz [ 133.620598][ T419] usb 2-1: Manufacturer: syz [ 133.639994][ T419] usb 2-1: SerialNumber: syz [ 133.872217][ T419] usb 2-1: unit 6 not found! [ 133.880597][ T419] usb 2-1: USB disconnect, device number 70 [ 133.896578][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.195057][ T2645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 134.286541][ T36] audit: type=1326 audit(1787000717.546:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.312406][ T36] audit: type=1326 audit(1787000717.546:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.339368][ T36] audit: type=1326 audit(1787000717.546:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.364788][ T36] audit: type=1326 audit(1787000717.546:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.390267][ T36] audit: type=1326 audit(1787000717.546:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.415469][ T36] audit: type=1326 audit(1787000717.546:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.442197][ T36] audit: type=1326 audit(1787000717.546:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.468016][ T36] audit: type=1326 audit(1787000717.546:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.493409][ T36] audit: type=1326 audit(1787000717.546:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2646 comm="syz.3.779" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbcd9e0d9 code=0x7ff00000 [ 134.608921][ T2658] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.618211][ C1] plantronics 0003:047F:FFFF.0016: usb_submit_urb(ctrl) failed: -1 [ 134.840793][ T2672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 134.866875][ T425] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 135.040193][ T425] usb 4-1: Using ep0 maxpacket: 32 [ 135.046686][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.057986][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.067820][ T425] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.077263][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.086041][ T425] usb 4-1: config 0 descriptor?? [ 135.092312][ T425] hub 4-1:0.0: USB hub found [ 135.236865][ T2688] fuse: Bad value for 'fd' [ 135.309325][ T425] hub 4-1:0.0: 1 port detected [ 135.474988][ T310] usb 6-1: USB disconnect, device number 42 [ 135.560827][ T2718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2718 comm=syz.5.810 [ 136.045472][ T425] hub 4-1:0.0: activate --> -90 [ 136.441952][ T425] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 136.467945][ T425] usb 4-1: USB disconnect, device number 68 [ 136.474139][ T419] usb 4-1: Failed to suspend device, error -19 [ 137.468968][ T2783] 9pnet_fd: Insufficient options for proto=fd [ 138.029780][ T425] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 138.213910][ T425] usb 4-1: Using ep0 maxpacket: 32 [ 138.234724][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.271430][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.302753][ T425] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.335478][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.376671][ T425] usb 4-1: config 0 descriptor?? [ 138.389532][ T425] hub 4-1:0.0: USB hub found [ 138.606405][ T425] hub 4-1:0.0: 1 port detected [ 138.874515][ T2806] fuse: Bad value for 'fd' [ 139.156310][ T365] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 139.318770][ T365] usb 6-1: Using ep0 maxpacket: 32 [ 139.325290][ T365] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.333937][ T365] usb 6-1: config 0 has no interface number 0 [ 139.341737][ T365] usb 6-1: config 0 interface 184 has no altsetting 0 [ 139.349713][ T425] hub 4-1:0.0: activate --> -90 [ 139.353312][ T365] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.366835][ T365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.375403][ T365] usb 6-1: Product: syz [ 139.380022][ T365] usb 6-1: Manufacturer: syz [ 139.385070][ T365] usb 6-1: SerialNumber: syz [ 139.390777][ T365] usb 6-1: config 0 descriptor?? [ 139.400460][ T365] smsc75xx v1.0.0 [ 139.503008][ T419] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 139.582090][ T2798] kvm: pic: single mode not supported [ 139.583330][ T2798] kvm: pic: level sensitive irq not supported [ 139.589886][ T2798] kvm: pic: level sensitive irq not supported [ 139.596717][ T2798] kvm: pic: level sensitive irq not supported [ 139.606223][ T2798] kvm: pic: level sensitive irq not supported [ 139.612853][ T2798] kvm: pic: single mode not supported [ 139.618992][ T2798] kvm: pic: level sensitive irq not supported [ 139.629635][ T425] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 139.642784][ T9] usb 4-1: USB disconnect, device number 69 [ 139.667028][ T419] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 139.675609][ T419] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 139.686183][ T419] usb 2-1: config 127 has no interface number 0 [ 139.694265][ T419] usb 2-1: config 127 interface 57 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.710913][ T419] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 139.720355][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.728488][ T419] usb 2-1: Product: syz [ 139.733133][ T419] usb 2-1: Manufacturer: syz [ 139.737827][ T419] usb 2-1: SerialNumber: syz [ 139.965457][ T419] asix 2-1:127.57: probe with driver asix failed with error -22 [ 139.978525][ T419] usb 2-1: USB disconnect, device number 71 [ 140.012262][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 140.012282][ T36] audit: type=1400 audit(1787000722.836:563): avc: denied { associate } for pid=2827 comm="syz.0.857" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 140.052125][ T365] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 140.064573][ T365] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 140.074849][ T365] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 140.086043][ T365] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 140.099420][ T365] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 140.110451][ T365] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 140.119958][ T365] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 140.542773][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 140.717446][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 140.728784][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 140.747951][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.766114][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.775447][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.785250][ T9] usb 4-1: config 0 descriptor?? [ 140.790891][ T2838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.824484][ T419] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 140.986924][ T419] usb 2-1: Using ep0 maxpacket: 32 [ 140.993581][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.004842][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.014763][ T419] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.027484][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.037066][ T419] usb 2-1: config 0 descriptor?? [ 141.043869][ T419] hub 2-1:0.0: USB hub found [ 141.260216][ T419] hub 2-1:0.0: 1 port detected [ 141.576168][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 141.591195][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.613674][ T9] usb 4-1: USB disconnect, device number 70 [ 141.988678][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 141.998921][ T419] usb 2-1: USB disconnect, device number 72 [ 142.147216][ T425] usb 6-1: USB disconnect, device number 43 [ 142.459003][ T2873] loop2: detected capacity change from 0 to 7 [ 142.466126][ C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 142.683593][ T2889] FAULT_INJECTION: forcing a failure. [ 142.683593][ T2889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.696901][ T2889] CPU: 0 UID: 0 PID: 2889 Comm: syz.1.880 Not tainted syzkaller #0 3c3170d5147e1ade2ce3347a3db15f56e1abada8 [ 142.696924][ T2889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.696933][ T2889] Call Trace: [ 142.696938][ T2889] [ 142.696944][ T2889] __dump_stack+0x21/0x30 [ 142.696967][ T2889] dump_stack_lvl+0x140/0x1c0 [ 142.696983][ T2889] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.696998][ T2889] ? is_bpf_text_address+0x17b/0x1a0 [ 142.697016][ T2889] ? kernel_text_address+0xa9/0xe0 [ 142.697032][ T2889] dump_stack+0x19/0x20 [ 142.697047][ T2889] should_fail_ex+0x3c2/0x510 [ 142.697062][ T2889] should_fail+0xf/0x20 [ 142.697075][ T2889] should_fail_usercopy+0x1e/0x30 [ 142.697089][ T2889] _copy_from_user+0x20/0xa0 [ 142.697104][ T2889] ___sys_sendmsg+0x1c7/0x370 [ 142.697119][ T2889] ? __sys_sendmsg+0x2a0/0x2a0 [ 142.697133][ T2889] ? kstrtouint+0x78/0xf0 [ 142.697145][ T2889] ? __cfi_trace_clock_local+0x10/0x10 [ 142.697158][ T2889] ? __kasan_check_read+0x15/0x20 [ 142.697171][ T2889] ? __fget_files+0x2bc/0x330 [ 142.697187][ T2889] __sys_sendmmsg+0x2b4/0x4e0 [ 142.697200][ T2889] ? rb_commit+0x753/0x7b0 [ 142.697213][ T2889] ? __cfi___sys_sendmmsg+0x10/0x10 [ 142.697227][ T2889] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 142.697243][ T2889] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 142.697261][ T2889] __x64_sys_sendmmsg+0xa4/0xc0 [ 142.697275][ T2889] x64_sys_call+0xfec/0x2ee0 [ 142.697287][ T2889] do_syscall_64+0x57/0xf0 [ 142.697326][ T2889] ? clear_bhb_loop+0x50/0xa0 [ 142.697343][ T2889] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.697359][ T2889] RIP: 0033:0x7fac2459e0d9 [ 142.697372][ T2889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.697383][ T2889] RSP: 002b:00007fac253ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.697400][ T2889] RAX: ffffffffffffffda RBX: 00007fac24826090 RCX: 00007fac2459e0d9 [ 142.697411][ T2889] RDX: 0000000000000003 RSI: 0000200000002680 RDI: 0000000000000003 [ 142.697420][ T2889] RBP: 00007fac253ae090 R08: 0000000000000000 R09: 0000000000000000 [ 142.697429][ T2889] R10: 119e75c40273ad6f R11: 0000000000000246 R12: 0000000000000001 [ 142.697438][ T2889] R13: 00007fac24826128 R14: 00007fac24826090 R15: 00007ffc7d055188 [ 142.697449][ T2889] [ 142.990857][ T419] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 143.033955][ T36] audit: type=1400 audit(1787000725.618:564): avc: denied { add_name } for pid=2896 comm="syz.5.884" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 143.054637][ T36] audit: type=1400 audit(1787000725.627:565): avc: denied { create } for pid=2896 comm="syz.5.884" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 143.075810][ T2897] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.113689][ T2899] bridge0: port 3(vlan0) entered blocking state [ 143.120000][ T2899] bridge0: port 3(vlan0) entered disabled state [ 143.126453][ T2899] vlan0: entered allmulticast mode [ 143.131638][ T2899] veth0_vlan: entered allmulticast mode [ 143.137689][ T2899] vlan0: entered promiscuous mode [ 143.143194][ T2899] bridge0: port 3(vlan0) entered blocking state [ 143.149466][ T2899] bridge0: port 3(vlan0) entered forwarding state [ 143.165204][ T419] usb 4-1: Using ep0 maxpacket: 8 [ 143.171935][ T419] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.183223][ T419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.195020][ T419] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 143.209521][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.217905][ T419] usb 4-1: Product: syz [ 143.222344][ T419] usb 4-1: Manufacturer: syz [ 143.227075][ T419] usb 4-1: SerialNumber: syz [ 143.453891][ T419] usb 4-1: unit 6 not found! [ 143.467735][ T419] usb 4-1: USB disconnect, device number 71 [ 143.510718][ T365] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 143.673194][ T365] usb 6-1: Using ep0 maxpacket: 32 [ 143.679580][ T365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.690515][ T365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.700318][ T365] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.709429][ T365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.718491][ T365] usb 6-1: config 0 descriptor?? [ 143.724592][ T365] hub 6-1:0.0: USB hub found [ 143.803165][ T609] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 143.944010][ T609] usb 2-1: device descriptor read/64, error -71 [ 143.951173][ T365] hub 6-1:0.0: 1 port detected [ 144.206330][ T609] usb 2-1: device descriptor read/64, error -71 [ 144.485595][ T609] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 144.507254][ T425] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 144.626421][ T609] usb 2-1: device descriptor read/64, error -71 [ 144.671904][ T365] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 144.674037][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.679914][ T310] usb 6-1: USB disconnect, device number 44 [ 144.696068][ T365] usb 6-1: Failed to suspend device, error -19 [ 144.697315][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 144.713845][ T425] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.727040][ T425] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.736116][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.745010][ T425] usb 4-1: config 0 descriptor?? [ 144.750724][ T2937] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 144.897231][ T609] usb 2-1: device descriptor read/64, error -71 [ 145.016569][ T609] usb usb2-port1: attempt power cycle [ 145.194284][ T425] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 145.203798][ T425] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 145.384681][ T609] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 145.418596][ T609] usb 2-1: device descriptor read/8, error -71 [ 145.570049][ T609] usb 2-1: device descriptor read/8, error -71 [ 145.644614][ T310] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 145.807070][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 145.813590][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.824540][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.828791][ T609] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 145.834352][ T310] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.851021][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.859981][ T310] usb 6-1: config 0 descriptor?? [ 145.866379][ T609] usb 2-1: device descriptor read/8, error -71 [ 145.866967][ T310] hub 6-1:0.0: USB hub found [ 146.014359][ T609] usb 2-1: device descriptor read/8, error -71 [ 146.083871][ T310] hub 6-1:0.0: 1 port detected [ 146.143244][ T609] usb usb2-port1: unable to enumerate USB device [ 146.630152][ T2983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.911'. [ 146.639546][ C0] plantronics 0003:047F:FFFF.0017: usb_submit_urb(ctrl) failed: -1 [ 146.841915][ T312] lg-g15 0003:046D:0A07.0018: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 146.861375][ T312] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0018/input/input24 [ 146.884864][ T2958] kvm: pic: single mode not supported [ 146.886155][ T2958] kvm: pic: level sensitive irq not supported [ 146.896482][ T2990] fido_id[2990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.923453][ T2958] kvm: pic: level sensitive irq not supported [ 146.923896][ T2958] kvm: pic: level sensitive irq not supported [ 146.932226][ T2958] kvm: pic: level sensitive irq not supported [ 146.938888][ T2958] kvm: pic: single mode not supported [ 146.945044][ T2958] kvm: pic: level sensitive irq not supported [ 146.956957][ T310] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 146.972829][ T358] usb 6-1: USB disconnect, device number 45 [ 146.978307][ T2992] devpts: called with bogus options [ 147.261642][ T36] audit: type=1400 audit(1787000729.530:566): avc: denied { mounton } for pid=3005 comm="syz.3.918" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.488867][ T3012] fuse: Bad value for 'fd' [ 147.767677][ T609] usb 4-1: reset high-speed USB device number 72 using dummy_hcd [ 147.776010][ T609] usb 4-1: device reset changed ep0 maxpacket size! [ 147.783187][ T419] usb 4-1: USB disconnect, device number 72 [ 147.875988][ T358] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 147.930113][ T419] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 148.027667][ T358] usb 6-1: device descriptor read/64, error -71 [ 148.087982][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.100379][ T419] usb 4-1: Using ep0 maxpacket: 8 [ 148.105744][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.119493][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.132260][ T419] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 148.141822][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.154252][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.163389][ T419] usb 4-1: config 0 descriptor?? [ 148.170649][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.186268][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.199100][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.211862][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.227522][ T3024] fuse: Bad value for 'fd' [ 148.232971][ T3022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3022 comm=syz.1.924 [ 148.287581][ T358] usb 6-1: device descriptor read/64, error -71 [ 148.401801][ T419] usb 4-1: string descriptor 0 read error: -71 [ 148.418926][ T419] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 148.435366][ T419] usb 4-1: Found UVC 0.00 device (2833:0201) [ 148.444098][ T419] usb 4-1: No valid video chain found. [ 148.468520][ T419] usb 4-1: USB disconnect, device number 73 [ 148.569207][ T358] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 148.710013][ T358] usb 6-1: device descriptor read/64, error -71 [ 148.969995][ T358] usb 6-1: device descriptor read/64, error -71 [ 149.028932][ T3030] rust_binder: 3029:3030 error while translating object: EINVAL [ 149.036878][ T3030] rust_binder: Failure in copy_transaction_data: EINVAL [ 149.036902][ T3030] rust_binder: 3029:3030 transaction call to 3029:0 failed EINVAL, code 0 size 4200-24 [ 149.091530][ T358] usb usb6-port1: attempt power cycle [ 149.305783][ T419] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 149.457468][ T358] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 149.480194][ T358] usb 6-1: device descriptor read/8, error -71 [ 149.489922][ T419] usb 4-1: Using ep0 maxpacket: 32 [ 149.496841][ T419] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.505474][ T419] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 149.518367][ T419] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 149.527477][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.535857][ T419] usb 4-1: Product: syz [ 149.540010][ T419] usb 4-1: Manufacturer: syz [ 149.544640][ T419] usb 4-1: SerialNumber: syz [ 149.621199][ T358] usb 6-1: device descriptor read/8, error -71 [ 149.769316][ T3030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.927'. [ 149.779914][ T3030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.788818][ T3030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.800942][ T419] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 149.807868][ T609] rust_binder: 3029: undelivered TRANSACTION_ERROR: 29201 [ 149.815954][ T419] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 149.826788][ T419] usb 4-1: USB disconnect, device number 74 [ 149.841218][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.890751][ T358] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 149.924596][ T358] usb 6-1: device descriptor read/8, error -71 [ 150.065270][ T358] usb 6-1: device descriptor read/8, error -71 [ 150.183334][ T358] usb usb6-port1: unable to enumerate USB device [ 150.203304][ T3041] fuse: Bad value for 'fd' [ 150.475806][ T419] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 150.638099][ T419] usb 2-1: Using ep0 maxpacket: 8 [ 150.644632][ T419] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.657910][ T425] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 150.666933][ T419] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.678189][ T419] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 150.687629][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.695927][ T419] usb 2-1: Product: syz [ 150.700346][ T419] usb 2-1: Manufacturer: syz [ 150.705230][ T419] usb 2-1: SerialNumber: syz [ 150.828464][ T36] audit: type=1326 audit(1787000732.816:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.0.935" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067959e0d9 code=0x0 [ 150.835017][ T425] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.861677][ T425] usb 4-1: not running at top speed; connect to a high speed hub [ 150.873917][ T425] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 150.889700][ T425] usb 4-1: language id specifier not provided by device, defaulting to English [ 150.914090][ T425] usb 4-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 150.939676][ T419] usb 2-1: unit 6 not found! [ 150.946316][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.955482][ T425] usb 4-1: Product: syz [ 150.961376][ T419] usb 2-1: USB disconnect, device number 77 [ 150.967910][ T425] usb 4-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 150.995654][ T425] usb 4-1: SerialNumber: syz [ 151.222481][ T3045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.231415][ T3045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.244153][ T425] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.251183][ T425] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 151.258787][ T609] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 151.271867][ T425] usb 4-1: USB disconnect, device number 75 [ 151.285784][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.428822][ T609] usb 6-1: Using ep0 maxpacket: 32 [ 151.435491][ T609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.446681][ T609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.456566][ T609] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.466357][ T609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.475222][ T609] usb 6-1: config 0 descriptor?? [ 151.484264][ T609] hub 6-1:0.0: USB hub found [ 151.657157][ T3068] kvm: pic: non byte write [ 151.701865][ T609] hub 6-1:0.0: 1 port detected [ 151.847159][ T673] bridge_slave_1: left allmulticast mode [ 151.853064][ T673] bridge_slave_1: left promiscuous mode [ 151.858739][ T673] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.869059][ T673] bridge_slave_0: left allmulticast mode [ 151.874951][ T673] bridge_slave_0: left promiscuous mode [ 151.880674][ T673] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.999675][ T673] veth1_macvtap: left promiscuous mode [ 152.005317][ T673] veth0_vlan: left promiscuous mode [ 152.133086][ T419] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 152.306481][ T419] usb 4-1: Using ep0 maxpacket: 32 [ 152.313213][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.324910][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.334943][ T419] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.344349][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.353579][ T419] usb 4-1: config 0 descriptor?? [ 152.362258][ T419] hub 4-1:0.0: USB hub found [ 152.424563][ T609] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 152.425441][ T358] usb 6-1: USB disconnect, device number 50 [ 152.578459][ T419] hub 4-1:0.0: 1 port detected [ 153.086336][ T3087] kvm: pic: single mode not supported [ 153.088456][ T3087] kvm: pic: level sensitive irq not supported [ 153.101628][ T3087] kvm: pic: level sensitive irq not supported [ 153.118054][ T3087] kvm: pic: level sensitive irq not supported [ 153.136659][ T3087] kvm: pic: level sensitive irq not supported [ 153.152853][ T3087] kvm: pic: single mode not supported [ 153.159006][ T3087] kvm: pic: level sensitive irq not supported [ 153.261150][ T419] usb 4-1: USB disconnect, device number 76 [ 153.324445][ T358] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 153.465265][ T358] usb 6-1: device descriptor read/64, error -71 [ 153.497758][ T609] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 153.660204][ T609] usb 2-1: Using ep0 maxpacket: 32 [ 153.667040][ T609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.675918][ T609] usb 2-1: config 0 has an invalid interface number: 206 but max is 0 [ 153.684222][ T609] usb 2-1: config 0 has no interface number 0 [ 153.690496][ T609] usb 2-1: config 0 interface 206 has no altsetting 0 [ 153.699020][ T609] usb 2-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d9.93 [ 153.708263][ T609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.716371][ T609] usb 2-1: Product: syz [ 153.720709][ T609] usb 2-1: Manufacturer: syz [ 153.725410][ T609] usb 2-1: SerialNumber: syz [ 153.730779][ T609] usb 2-1: config 0 descriptor?? [ 153.736200][ T358] usb 6-1: device descriptor read/64, error -71 [ 153.954927][ T3090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.976256][ T3090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.996085][ T358] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 154.005947][ T609] rndis_host 2-1:0.206: skipping garbage [ 154.017678][ T609] usb 2-1: bad CDC descriptors [ 154.027465][ T609] cdc_acm 2-1:0.206: skipping garbage [ 154.042662][ T609] usb 2-1: USB disconnect, device number 78 [ 154.122409][ T3098] fuse: Bad value for 'fd' [ 154.137018][ T358] usb 6-1: device descriptor read/64, error -71 [ 154.407593][ T358] usb 6-1: device descriptor read/64, error -71 [ 154.537798][ T358] usb usb6-port1: attempt power cycle [ 154.642074][ T36] audit: type=1400 audit(1787000736.333:568): avc: denied { create } for pid=3105 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.697229][ T36] audit: type=1400 audit(1787000736.389:569): avc: denied { execmem } for pid=3107 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 154.784555][ T36] audit: type=1400 audit(1787000736.472:570): avc: denied { read } for pid=3113 comm="syz.1.955" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 154.808062][ T36] audit: type=1400 audit(1787000736.472:571): avc: denied { open } for pid=3113 comm="syz.1.955" path="/200/proc/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 154.832665][ T36] audit: type=1400 audit(1787000736.518:572): avc: denied { create } for pid=3115 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.856296][ T36] audit: type=1400 audit(1787000736.518:573): avc: denied { write } for pid=3115 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.877269][ T36] audit: type=1400 audit(1787000736.518:574): avc: denied { nlmsg_write } for pid=3115 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.927526][ T358] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 154.961498][ T358] usb 6-1: device descriptor read/8, error -71 [ 155.102255][ T358] usb 6-1: device descriptor read/8, error -71 [ 155.307047][ T609] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 155.349968][ T312] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 155.360955][ T358] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 155.383710][ T358] usb 6-1: device descriptor read/8, error -71 [ 155.470380][ T609] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 155.481832][ T609] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.495081][ T312] usb 4-1: device descriptor read/64, error -71 [ 155.501408][ T609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.508291][ T609] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 155.517495][ T609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.526418][ T609] usb 2-1: config 0 descriptor?? [ 155.531733][ T3129] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.535426][ T358] usb 6-1: device descriptor read/8, error -71 [ 155.664344][ T358] usb usb6-port1: unable to enumerate USB device [ 155.750802][ T312] usb 4-1: device descriptor read/64, error -71 [ 155.978038][ T3133] overlay: filesystem on ./bus not supported as upperdir [ 155.993060][ T609] usbhid 2-1:0.0: can't add hid device: -71 [ 156.005704][ T609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.018621][ T312] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 156.033774][ T609] usb 2-1: USB disconnect, device number 79 [ 156.184058][ T312] usb 4-1: device descriptor read/64, error -71 [ 156.204179][ T3148] ------------[ cut here ]------------ [ 156.209784][ T3148] WARNING: CPU: 0 PID: 3148 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 156.219425][ T3148] Modules linked in: [ 156.223350][ T3148] CPU: 0 UID: 0 PID: 3148 Comm: syz.1.965 Not tainted syzkaller #0 3c3170d5147e1ade2ce3347a3db15f56e1abada8 [ 156.234877][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.244995][ T3148] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 156.251085][ T3148] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 54 db 0b 06 00 0f 85 c2 00 00 00 c6 05 47 db 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 156.270924][ T3148] RSP: 0018:ffffc90010177980 EFLAGS: 00010246 [ 156.276996][ T3148] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 156.285089][ T3148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010177a38 [ 156.293131][ T3148] RBP: ffffc90010177aa8 R08: ffffc90010177a37 R09: 0000000000000000 [ 156.301100][ T3148] R10: ffffc90010177a20 R11: fffff5200202ef47 R12: ffffc900101779c0 [ 156.309178][ T3148] R13: dffffc0000000000 R14: 1ffff9200202ef34 R15: 0000000000000000 [ 156.317237][ T3148] FS: 00007fac253cf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.326299][ T3148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.332907][ T3148] CR2: 000000110c34b2b2 CR3: 000000011dda0000 CR4: 00000000003526b0 [ 156.340945][ T3148] Call Trace: [ 156.344241][ T3148] [ 156.347230][ T3148] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 156.353004][ T3148] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 156.359259][ T3148] ___kmalloc_large_node+0x81/0x220 [ 156.364478][ T3148] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 156.370706][ T3148] __kmalloc_large_node_noprof+0x1e/0xd0 [ 156.376363][ T3148] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 156.382561][ T3148] __kmalloc_noprof+0x326/0x510 [ 156.387431][ T3148] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 156.393458][ T3148] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 156.399902][ T3148] ? selinux_file_ioctl+0x732/0x1480 [ 156.405328][ T3148] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 156.410905][ T3148] ? __kasan_check_read+0x15/0x20 [ 156.416083][ T3148] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 156.421922][ T3148] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 156.428367][ T3148] ? bpf_lsm_file_ioctl+0xd/0x20 [ 156.433529][ T3148] ? security_file_ioctl+0x3e/0x110 [ 156.438735][ T3148] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 156.445339][ T3148] __se_sys_ioctl+0x135/0x1b0 [ 156.450041][ T3148] __x64_sys_ioctl+0x7f/0xa0 [ 156.454641][ T3148] x64_sys_call+0x1878/0x2ee0 [ 156.459368][ T3148] do_syscall_64+0x57/0xf0 [ 156.463816][ T3148] ? clear_bhb_loop+0x50/0xa0 [ 156.468571][ T3148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.474491][ T3148] RIP: 0033:0x7fac2459e0d9 [ 156.478954][ T3148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.498652][ T3148] RSP: 002b:00007fac253cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.507072][ T3148] RAX: ffffffffffffffda RBX: 00007fac24825fa0 RCX: 00007fac2459e0d9 [ 156.515108][ T3148] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000006 [ 156.523141][ T3148] RBP: 00007fac24635024 R08: 0000000000000000 R09: 0000000000000000 [ 156.531165][ T3148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.539171][ T3148] R13: 00007fac24826038 R14: 00007fac24825fa0 R15: 00007ffc7d055188 [ 156.547190][ T3148] [ 156.550239][ T3148] ---[ end trace 0000000000000000 ]--- [ 156.561230][ T36] audit: type=1400 audit(1787000738.106:575): avc: denied { write } for pid=3147 comm="syz.1.965" name="/" dev="incremental-fs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.704060][ T312] usb 4-1: device descriptor read/64, error -71 [ 156.823312][ T312] usb usb4-port1: attempt power cycle [ 157.191403][ T312] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 157.214318][ T312] usb 4-1: device descriptor read/8, error -71 [ 157.355125][ T312] usb 4-1: device descriptor read/8, error -71 [ 157.624691][ T312] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 157.647617][ T312] usb 4-1: device descriptor read/8, error -71 [ 157.788387][ T312] usb 4-1: device descriptor read/8, error -71 [ 157.906582][ T312] usb usb4-port1: unable to enumerate USB device