last executing test programs: 2m11.630349609s ago: executing program 3 (id=303): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x412a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x9, 0x41, 0xff, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x51fe, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0xa, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x10, @multicast2}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @empty}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYBLOB=',ro', @ANYBLOB]) r5 = socket(0x2, 0x3, 0x0) shutdown(r5, 0x2) r6 = socket$inet(0x2, 0x3, 0x40) sendto$inet(r6, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2}, 0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m10.646102428s ago: executing program 3 (id=310): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82040, 0x71) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0xc0, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x6, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x3, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfd, 0x5, 0x5, {0x8, 0x25, 0x1, 0x0, 0x30, 0x0, 0xad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8e, 0x2, 0x3, {0x8, 0x25, 0x1, 0x36daf7a1e4f31d8b, 0x3c, 0x2, 0x6}}}}}}}}]}}, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000083512100040000102030109021f00010118100409040001010103200609058e0b0002"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) (async, rerun: 64) sendmsg$can_raw(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@can={{0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "e40342bc1bf28ce9"}, 0x2d}}, 0x40400c1) (async, rerun: 64) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x10, 0x10, 0x1, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8091}, 0x4000010) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x45}, 0x20) (async, rerun: 32) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) listen(r10, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r0, 0x1, 0x70bd28, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m10.583529739s ago: executing program 3 (id=312): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x40, 0xb, 0xe, 0x8, 0x2, 0x0, 0x9, 0xf, 0x38, 0x15c, 0x401, 0x3, 0x20, 0x3, 0x6, 0x9, 0x3}, [{0x7, 0x7, 0x40, 0x80000001, 0x4, 0x0, 0x8, 0x1e6f}, {0x6474e551, 0x623a, 0x4, 0xd, 0x1ff, 0x2, 0x3, 0x2}, {0x7, 0x7, 0x7, 0x7fffffff, 0x7, 0xb4, 0x8, 0x7b6}], "8b4d0f9e4006dface45e7a2739991b25e39eec19db363058d9ef087724d386c596b7ebf41738352af912010a50319d553af24acbb0ba5b42954b40fb8e5e33804004df2001413a2d6dc03f702f0e8f1f60af40836eb96fe3472a18579fcc7f30e2084b9317b318abfa177a6614e47f27ceccd1b0945f80b619137a0b68df269353d25f6babb09b580a9e9c19dc66346055d3a41994bc7c001ece", ['\x00', '\x00', '\x00']}, 0x432) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x40, 0xb, 0xe, 0x8, 0x2, 0x0, 0x9, 0xf, 0x38, 0x15c, 0x401, 0x3, 0x20, 0x3, 0x6, 0x9, 0x3}, [{0x7, 0x7, 0x40, 0x80000001, 0x4, 0x0, 0x8, 0x1e6f}, {0x6474e551, 0x623a, 0x4, 0xd, 0x1ff, 0x2, 0x3, 0x2}, {0x7, 0x7, 0x7, 0x7fffffff, 0x7, 0xb4, 0x8, 0x7b6}], "8b4d0f9e4006dface45e7a2739991b25e39eec19db363058d9ef087724d386c596b7ebf41738352af912010a50319d553af24acbb0ba5b42954b40fb8e5e33804004df2001413a2d6dc03f702f0e8f1f60af40836eb96fe3472a18579fcc7f30e2084b9317b318abfa177a6614e47f27ceccd1b0945f80b619137a0b68df269353d25f6babb09b580a9e9c19dc66346055d3a41994bc7c001ece", ['\x00', '\x00', '\x00']}, 0x432) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) (async) 2m10.5819189s ago: executing program 3 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902790002010000400904000001020d00000b2406000100000000000005240009800d240f0102000000000000000006241a00000007240a7302b3ff08241c020005090008241cfeff09e70009058103fe010b02050904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x13, 0x0, 0xfff7, 0x0, 0x11, 0xbb, 0x10, 0x8010, 0x10, 0x10, 0x1ff}}, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_setup(0xd78, &(0x7f00000002c0)={0x0, 0x916a, 0x1, 0x1, 0x5b}, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, &(0x7f0000003740)) bind$bt_hci(r3, &(0x7f0000000040), 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000180)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r8, 0x0) 2m8.624654017s ago: executing program 3 (id=322): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) (async) 2m8.585975448s ago: executing program 3 (id=323): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0x80, 0xffffff3d}}]}) r4 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x4}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x21c004, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c779f1487d79fec40ee620102e721f1847d26646e6f3b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 1m53.552734019s ago: executing program 32 (id=323): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0x80, 0xffffff3d}}]}) r4 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x4}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x21c004, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c779f1487d79fec40ee620102e721f1847d26646e6f3b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 7.654134526s ago: executing program 0 (id=1371): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x1c1) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x1c1) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000140)='mounts\x00') ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000180)={0x0, "5fb05fd3e9bff2426749a59b3bf9f01c"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001180)={0x10, 0x0, {0x7, @struct={0x3, 0xf262}, 0x0, 0x7e93, 0x8000000000000000, 0x9, 0x2, 0x4, 0x0, @struct={0x4, 0x8d2}, 0x3, 0x10000, [0x5, 0x6, 0x8, 0x5, 0x9]}, {0xe2, @usage=0x1, r3, 0x1, 0x4e, 0x3, 0xc5c, 0x80, 0x483, @struct={0x2, 0xfe}, 0x38c, 0xf4, [0x9, 0x8, 0x4, 0x1, 0x7fffffff, 0x7]}, {0x4, @struct={0x1, 0x6}, 0x0, 0x3ff, 0x0, 0xf04, 0x5, 0x9, 0x442, @usage=0x4, 0x10, 0x0, [0x8, 0x3, 0xe, 0x1, 0x2, 0x6]}, {0x1, 0x1, 0x101}}) pwrite64(r0, &(0x7f0000001580)="130e8f7851cf1fee32148f4e4669638df17c54b858306c98eca8b1545cdc1e72ea990122620236a7418e5dcde32c3b6838ea82399552a4a74c8e1b30c28802ded6db392b6310ceb09591ad21e55ef79e309325128eeacee973ff102f4243efe3a6804398c3efda08b1bc3cde926d2fe52780c6827d0e44df269c9960b2b792a95a6c34c9544e89c07ccdb8f7125a2df6a8cf139dbe98541df722bbcc1a698a24f99c44b6a6dffba4de", 0xa9, 0xe7) lseek(r2, 0x5, 0x3) rename(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='./file0\x00') setxattr$trusted_overlay_origin(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), &(0x7f0000001740), 0x2, 0x1) (async) setxattr$trusted_overlay_origin(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), &(0x7f0000001740), 0x2, 0x1) r4 = open(&(0x7f0000001780)='./file0\x00', 0x200, 0x21) ioprio_get$pid(0x0, r1) pipe2$9p(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r5, &(0x7f0000001800)={0xb, 0x77, 0x1, 0x8}, 0xb) (async) write$P9_RWRITE(r5, &(0x7f0000001800)={0xb, 0x77, 0x1, 0x8}, 0xb) openat$cgroup_ro(r0, &(0x7f0000001840)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(r0, &(0x7f0000001840)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000001880)={0x17}) syz_open_procfs$userns(r1, &(0x7f0000001c00)) (async) r7 = syz_open_procfs$userns(r1, &(0x7f0000001c00)) mount_setattr(r6, &(0x7f0000001bc0)='./file0\x00', 0x800, &(0x7f0000001c40)={0x100084, 0x100008, 0x1c0000, {r7}}, 0x20) (async) mount_setattr(r6, &(0x7f0000001bc0)='./file0\x00', 0x800, &(0x7f0000001c40)={0x100084, 0x100008, 0x1c0000, {r7}}, 0x20) write$cgroup_pid(r0, &(0x7f0000001c80)=r1, 0x12) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) removexattr(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)=@known='trusted.syz\x00') chdir(&(0x7f0000001d40)='./file0\x00') ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000001d80)) ioctl$UBLK_U_CMD_DEL_DEV(r6, 0xc0207505, &(0x7f0000001dc0)={0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000001e40)={r8, 0xffff, 0x0, 0x0, r1}) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000001e40)={r8, 0xffff, 0x0, 0x0, r1}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000001ec0)=0x5) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x3c}, 0x1, 0x0, 0x0, 0x25e92eff29fc975e}, 0x8810) r9 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002000), &(0x7f0000002080)=0x60) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f0000002180)={&(0x7f00000020c0)=""/135, 0x87}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f0000002180)={&(0x7f00000020c0)=""/135, 0x87}) write(r0, &(0x7f00000021c0)="392901b24c81d7a5c1fbe99529b52e8f5c73d1ae233ca414ebc29735dced2a74def9f16387e367ea79113fbd4f9c4d960cae35a2d365faa70c9d9656434e8b65103ee08b9693c6933d68e64bc1eec5d991935d0adc0dde6dab708548aab26ccd43bfefa0baf9bb14066c3e9a11cfc8d297ab3a03eae1374969ab0c5fcc985640144ce6231960789c134a964f8eee582879e3247feaa58581530d8f9824820d1c87ca3188dc241967b4259fe00ef200297f74824bebd827defbe46b46ed2dcedbf4ad5cfc4fe5ccc75d2866adf189ea0fd2727904ae5171e47e45efbf8b331c71e766e34d93a3fdbc", 0xe8) (async) write(r0, &(0x7f00000021c0)="392901b24c81d7a5c1fbe99529b52e8f5c73d1ae233ca414ebc29735dced2a74def9f16387e367ea79113fbd4f9c4d960cae35a2d365faa70c9d9656434e8b65103ee08b9693c6933d68e64bc1eec5d991935d0adc0dde6dab708548aab26ccd43bfefa0baf9bb14066c3e9a11cfc8d297ab3a03eae1374969ab0c5fcc985640144ce6231960789c134a964f8eee582879e3247feaa58581530d8f9824820d1c87ca3188dc241967b4259fe00ef200297f74824bebd827defbe46b46ed2dcedbf4ad5cfc4fe5ccc75d2866adf189ea0fd2727904ae5171e47e45efbf8b331c71e766e34d93a3fdbc", 0xe8) 7.606952557s ago: executing program 0 (id=1373): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xb}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000317576e88f0b436c5d601e341d5942eb05b94ac474d98b20fece767562133b4447347dc1c6ade2e7255976d88a68015cbfa2930d469779e58053795045e853ffc630033cd13b3556a895ec6aa1a2fb7e31880ad96fa279acbcf33fb569d8e17a", @ANYRES8=r0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4080) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r5) sendmsg$inet6(r1, &(0x7f0000000c40)={&(0x7f0000000080)={0xa, 0x4e20, 0x8000, @empty, 0x1}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000001c0)="755eb38aa8c4877452f09fdf72c1fd92c4e2aea8ae386d3cb1828617b96b95e2e8e49caa1499eb1aa4d159c47c87d7f8bd98a8e18c7b8e2f44bf005949779caf77a0200574fac368231ecd35d36e0f78fd5f985299bc", 0x56}, {&(0x7f0000000240)="a3598d0a5dfa9580312e4fced1eed4ad7f1df5f6385d6c2d311fb2c0dc77a94463b48b914d2262157e1c8cbff19407f906c6624d38c9f870343ff4a2906b59a6d6a633768d3cafd85b388a123e7930f793ac4e03cef62965c309def7c549d9cfd5f7b654d3edd58cac1386d461c9974ef18e88a48aa87d24e1605d40f0ed4ae918b34e68eab4", 0x86}, {&(0x7f0000000300)="bb60f25bcdc12d5c38c251889946f4ea06e464e050b2c03b041648af5521d994b2107870f00bd0f0bf4e251fac00cb79902901905492b7bf4d00fea6de56d5afe767f273ad46c7d181548e2fcea81d2c2cd027d55f98fc8bf6b33b54113ffa1a574a7599c126a9294054d299bd850276675109b1cbfe9d7ac663223e0fb1737c9021", 0x82}, {&(0x7f00000004c0)="4876335f4ccdbfc7d376fafa168ffbc885d72dc68dae0fd9f7cd14ffb53d8d44dc7a16cacad7cd10216b8662", 0x2c}, {&(0x7f0000000600)="dc976c223b75538452c78235726379bfcacdd7d3e894eb98bdbac1a59ad8368e0c2f4b830927ded12c4e63ea54ae5ac23aad95e88c62559290a8beebf8a10abc32b0177686f369204d130deb585e55c2f08a86c64671bed73786605b37964fbcf5f9222a5c37a467e78dad88a00dcc3dee7af8abbdfdaf95c0ea75b521d47867910414ca6caa5aae0e744310cb075fcc86b2209c0498983ff801355ae98a44401b42a165ab7440793fdbe8c5a37e22c0457081276ebd86bf31", 0xb9}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1f0}, 0x8014) keyctl$KEYCTL_MOVE(0x1e, r6, r5, 0xfffffffffffffffd, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x4040882) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="0f4710c4e3ddcfb2009800baf80c66b8acd8648766efba20fc0c8c0c8c6dde8301000f01c50f3066b85adf592a0f23d80f23f86635800000e00f23f8baf80c66b831f72d8f66efbafc0cec2e640fc71d", 0x4e}], 0x3c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) unlink(&(0x7f0000000000)='./file0\x00') 5.855033006s ago: executing program 0 (id=1386): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0xfffffffe) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x4, @mcast1, 0x80002}, 0x1c) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000000)={0xfffffffe, 0xc}) r3 = socket(0x28, 0x5, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r4, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r5, 0x0, 0x10000) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(0x0, 0x1) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) 4.99135309s ago: executing program 0 (id=1391): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x6c, 0x4) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) (async) r2 = socket(0x28, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x14dd}, {r2}], 0x2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x82, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc9) 4.476037365s ago: executing program 4 (id=1393): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(r0) (async) dup(r0) r1 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/4096, 0x61f4, 0x10142, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b"], 0xa0}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b"], 0xa0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0xc, 0x9, 0x9, 0x7}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000080)=0x8, 0x4) 4.475558755s ago: executing program 4 (id=1394): r0 = add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x1}, &(0x7f0000003740)="84", 0x1, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x1010) (async) keyctl$invalidate(0x15, r0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) (async) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140), &(0x7f0000001180), 0x2, 0x2) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 4.475119105s ago: executing program 4 (id=1395): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='\xb2\x1c\x9e\\\x00\x9f\xfa\x057\x00\x80\x16\xb9\x9f\x1d\xcb\x1b\x9d\xc9\xc8\xe1\x909\xd1\xda\xd7\f\xccn\xdf\xfb\x81N\xd4(/[\xf4\xc9\x15\x03*\x19\xaf\x98\x82\xbf\xd6\x94s\x82uF\x19\xee\x1f\xe7\xf3z~M_\x163\x84\xb6&\x87\x88:\x88\x9bp\xad\r\xc2c\xcd\xc1\xb3&k\xc9z\x1cP*v\x11z\xeaT\xea\x1b\x06\xb7|\x9b\t_\xcc\xf8V\xa28l\xbc') ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000080)={0x1, 0x1}) 4.470013455s ago: executing program 4 (id=1396): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x67, 0x11, 0xe, 0x0, 0x2, 0x7, 0x1, 0xf, 0xa3, 0x0, 0x6, 0xaa, 0x0, 0x243, 0x6, 0x8, 0x9d, 0x4, 0x9, '\x00', 0x1, 0x1}) write$eventfd(r2, &(0x7f00000001c0)=0x9, 0x5d) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x95}, 0x1c) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x0, 0x4, 0xad, {0xad, 0x23, "eee6082f3137c6497d6a560c360f3229c42520c13e2b26c9bb6a966769dcb051fd8baae1feb1078ba0f0b290846613c3f0019b2045a9cdecb8aa0fa4a86675d0511525558157f90766494a02ffa43eb39de0cefde8f9ed3f44365775f35cfd402716e4fe867e227c4a9bb4eb66d82322ed52b83fac3c6e7480ab14207565d44868af341cf511de2c8122c6bd1afb0f370a040ba6b23bb50282680bbf98f26a8c5bbb794459574edf83205c"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x40, 0xe, 0x76, "f2f22a08b2f2cfa9b94a8084f65dd4e110c68748c00ecd8850c0f196d069c5bd082368a4fddae275ee786136310c62a7b4aeac737554624ed3b1f927ef5148a47506a66f2a88d64ffad6bdcec0ac45571d2d5ad8723f5cc7a7d0cb7020b65df730c720353fa61b5fbc922d39b3441a2104332fe9f2b8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x55, {0x53, "26dec3545efe84ad7ac46ee848943beffe95739766054be472b161b2fcca4753fe37233bd00dd8573b74423946b40a426b5d07561326480112b032cc04407431ccda348aaf7b440e89d68027d78179a970382f"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x62}}) 4.144400914s ago: executing program 0 (id=1399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) clock_adjtime(0xa, &(0x7f0000000f40)={0x9, 0x2, 0x5, 0xffffffffffffffff, 0x100, 0x3, 0x9, 0x7, 0x8, 0x1, 0x83, 0x100000000, 0xdf9, 0x4, 0x4, 0x0, 0x6, 0x0, 0x5, 0x8, 0xb07, 0x4, 0x3ff, 0x80, 0x3, 0x5}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="400a50000000502107df19e98b10902d4a342ceb7a17468cda3792641ba3990ebd0d872d176f677756f0482ba9e57a61663dd670a3389992c4b83991a71c06f27b8bf29ca03ea4f63496025017b66014fc5cdd7e839d"], 0x0, 0x0, 0x0}, 0x0) 3.93553048s ago: executing program 1 (id=1402): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000380)=""/81, 0x51}], 0x2, 0xfffffffb, 0x80, 0x16) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_off}, {@redirect_dir_off, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3.93516053s ago: executing program 1 (id=1403): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12a53601000000ff05012229000905810308000219fc0000000000e4ffdb00553105070000c5759fda0000000020000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x20, 0x97e95724e2894676, 0x29, {0x29, 0x7, "b4ca3a6b1e304026975ef08fdcbe1b892dee2458ccdeda44667db3cf2edf593296c51f99ce6a99"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) splice(r3, 0x0, r4, &(0x7f0000001580)=0x3, 0x9614, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) fcntl$setpipe(r2, 0x407, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x1}], 0xffffffffffffffff}, 0x18, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x1b) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x200840, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b001008d6e3fcd4e869bbc377eb7b2926c6c00", @ANYRES16=r6, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000450}, 0x4080810) 3.363969536s ago: executing program 1 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r2 = socket(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) futex_waitv(&(0x7f0000007500)=[{0x3, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000007ec0), 0x3173a4e940640801) unshare(0x44040200) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x14, 0x48, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfe, 0xe7, 0x81, {0x7, 0x25, 0x1, 0x4, 0x5, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9}, @as_header={0x7, 0x24, 0x1, 0xbe, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe4, 0xea, 0xe, {0x7, 0x25, 0x1, 0x4, 0x7, 0xdae}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 2.891119799s ago: executing program 1 (id=1408): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) (async) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x60142, 0x17) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6006, 0x1ce) r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f0000000380)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='\x94\x00', &(0x7f00000001c0)='\'\x00', &(0x7f0000000200)=']\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\xc2[%\x00', &(0x7f00000002c0)='-\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']}, &(0x7f0000000580)={[&(0x7f0000000400)='@\x00', &(0x7f0000000440)='\'\x06!\'\x00', &(0x7f0000000480)='+([\\]/%\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)=':\x00', &(0x7f0000000540)='!)[\x00']}, 0x100) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) fcntl$setsig(r6, 0xa, 0x31) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r7, &(0x7f0000004ac0)=[{{&(0x7f00000005c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/16, 0x10}], 0x3, &(0x7f00000007c0)=""/180, 0xb4}, 0x1}, {{&(0x7f0000000880)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/118, 0x76}], 0x3, &(0x7f0000000b80)=""/231, 0xe7}, 0x4}, {{&(0x7f0000000c80)=@qipcrtr, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/30, 0x1e}, {&(0x7f0000001d40)=""/74, 0x4a}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/41, 0x29}], 0x5, &(0x7f0000002e80)=""/176, 0xb0}, 0xc000}, {{&(0x7f0000002f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002fc0)=""/151, 0x97}], 0x1, &(0x7f00000030c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000031c0)=@tipc=@id, 0x80, &(0x7f0000004300)=[{&(0x7f0000003240)=""/171, 0xab}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x2, &(0x7f0000004340)=""/253, 0xfd}, 0x6}, {{&(0x7f0000004440)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004a40)=[{&(0x7f00000044c0)=""/154, 0x9a}, {&(0x7f0000004580)=""/187, 0xbb}, {&(0x7f0000004640)=""/60, 0x3c}, {&(0x7f0000004680)=""/67, 0x43}, {&(0x7f0000004700)=""/86, 0x56}, {&(0x7f0000004780)=""/166, 0xa6}, {&(0x7f0000004840)=""/252, 0xfc}, {&(0x7f0000004940)=""/227, 0xe3}], 0x8}}], 0x6, 0x2, &(0x7f0000004c40)={0x0, 0x989680}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000004d00)=[@text64={0x40, &(0x7f0000004c80)="c7442400f2000000c74424024b000000ff1c2466b8f4000f00d8460f2bb700500000672e430f01c9440f4d45e8f20f2a4589c462298cac2c001000000f060f01c4b8010000000f01c1", 0x49}], 0x1, 0x4, &(0x7f0000004d40)=[@cr0={0x0, 0x4000002f}, @cr4={0x1, 0x164210}], 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000004d80)) rt_sigprocmask(0x2, &(0x7f0000004f80)={[0xc]}, &(0x7f0000004fc0), 0x8) mount$9p_rdma(&(0x7f0000005000), &(0x7f0000005040)='./file0\x00', &(0x7f0000005080), 0x0, &(0x7f00000050c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@posixacl}, {@rq={'rq', 0x3d, 0x200}}], [{@subj_user={'subj_user', 0x3d, ':\x00'}}]}}) dup(r4) (async) r8 = dup(r4) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000005140)='cdg', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000005140)='cdg', 0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000051c0)={0x3, 0x38, '\x00', 0x0, &(0x7f0000005180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000005200)={{r1}, 0xc5c2, 0x0, 0x7fffffff}) (async) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000005200)={{r1}, 0xc5c2, 0x0, 0x7fffffff}) syz_open_pts(r3, 0x400000) (async) syz_open_pts(r3, 0x400000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000005380)={'erspan0\x00', &(0x7f0000005280)={'erspan0\x00', 0x0, 0x20, 0x8088, 0x6, 0x3d7d850b, {{0x31, 0x4, 0x2, 0x39, 0xc4, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0x20, 0x99, 0x0, 0x2, [0x8001, 0xce4, 0x2f96, 0x95, 0x4, 0x8, 0xffff]}, @noop, @ssrr={0x89, 0x1b, 0xba, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @empty, @loopback]}, @ssrr={0x89, 0x1b, 0x52, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x9, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x80000000}, {@private=0xa010100, 0xd}]}, @timestamp_addr={0x44, 0x3c, 0x96, 0x1, 0x9, [{@broadcast, 0x5}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x41c9db6b}, {@multicast2, 0x2}, {@multicast1, 0x40}, {@local, 0x58307a18}, {@private=0xa010100, 0x8}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000005380)={'erspan0\x00', &(0x7f0000005280)={'erspan0\x00', 0x0, 0x20, 0x8088, 0x6, 0x3d7d850b, {{0x31, 0x4, 0x2, 0x39, 0xc4, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp={0x44, 0x20, 0x99, 0x0, 0x2, [0x8001, 0xce4, 0x2f96, 0x95, 0x4, 0x8, 0xffff]}, @noop, @ssrr={0x89, 0x1b, 0xba, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @empty, @loopback]}, @ssrr={0x89, 0x1b, 0x52, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x9, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x80000000}, {@private=0xa010100, 0xd}]}, @timestamp_addr={0x44, 0x3c, 0x96, 0x1, 0x9, [{@broadcast, 0x5}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x41c9db6b}, {@multicast2, 0x2}, {@multicast1, 0x40}, {@local, 0x58307a18}, {@private=0xa010100, 0x8}]}]}}}}}) r10 = getuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000053c0)={0x0, 0x0}, &(0x7f0000005400)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000005b80)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005b40)={&(0x7f0000005440)=@delpolicy={0x6e4, 0x14, 0x20, 0x70bd2d, 0x25dfdbff, {{@in6=@empty, @in=@multicast1, 0x4e24, 0xbbd, 0x4e21, 0xba37, 0x2, 0x20, 0x100, 0x3b, r9, r10}}, [@algo_auth={0xe4, 0x1, {{'blake2s-160\x00'}, 0x4e0, "b8ca58613e0bbdf54b6e43f06969929e2f1591ac56aca1265ffd0fd5b1786f68c7a6f4c250fad76fcca15ec2949311cce2a4c031b72cc3bac0d271653250cd276a176291074eb0e2acf20ada9bcb32568d65aeeeac333e9724291af0daa2006d1b5cf7340d5ef398175fe5ad0bb5d7490a59a77da7812fc470332d18176b98a5d6023091cdbee28d83fbaf2a2c508a7df3c401052380f512a789b6f0"}}, @algo_auth={0xa0, 0x1, {{'sha256-arm64-neon\x00'}, 0x2c0, "4747efb19763b23776de5773b6041e108a4e9313df4232039c67256afc7abea8aacf59caf2bcea83fc3756c42051bf0e061636fd3fc57f8d0755e3d319e24777350b975cb80f6a76e0a01762b171744fda8ead648c40153b"}}, @algo_comp={0x134, 0x3, {{'lzjh\x00'}, 0x760, "1d27c71d7cb80a762a2ea03261d664e962d6e9532864d8914dd3c9683165ca6eac3205bb59949226c56c699db69934b176467f96d0da2deb9f6637b326c2d097cdf06d78ba202ab171648c664f6d6f4f79a3caa31c06ff60f38c1b4ea456de9242381f522244eb5e2f6af721264ac8929abb05c87e10fbbee41094e096375034eae52aac43847f1798c2f82d45892bd68ca6e78cc0b82c51f019963461677b36c5bf94f5680f8ea3e1c4b91073eeeaa60c44482ba30c423dd4f0624797494450466e33fe1f21c5f3cf76d4e99b2b4b322e309cb6e6d9b74b03c8b0fa97e4889c0f115ad8f23eca83ae03e225"}}, @sa={0xe4, 0x6, {{@in6=@local, @in=@multicast1, 0x4e24, 0x8001, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x67, 0x0, r11}, {@in6=@local, 0x4d5, 0x33}, @in6=@mcast1, {0xb5, 0x4, 0x2, 0x101, 0xe, 0xfffffffffffffffc, 0x3, 0x3}, {0xbd, 0x5, 0x5, 0xd8ef}, {0xc, 0xf04, 0xec0}, 0x70bd2a, 0x0, 0x2, 0x2, 0x9, 0x12}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_auth_trunc={0xbd, 0x14, {{'sha224-arm64\x00'}, 0x388, 0x60, "2e7bc3fbef7e436ad466762f183a778ba889a1329150ea99c78074e8deaae53d420c34dadad8c402323c8ec8f3ec0874d10f279c696432069d549b704c279114d1052c66f2f7c0638b049c9df49e3b59ae8be20926a6c2a10f542ca07ba5d900f36728b5b15769229b83ca76febc80c512"}}, @policy_type={0xa}, @migrate={0x180, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in6=@mcast2, @in6=@loopback, 0x33, 0x3, 0x0, 0x3506, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, @in=@multicast1, @in=@multicast2, 0x3c, 0x1, 0x0, 0x3506, 0xa, 0x2}, {@in=@rand_addr=0x64010102, @in6=@empty, @in=@broadcast, @in6=@loopback, 0xff, 0x2, 0x0, 0x0, 0x2, 0x2}, {@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, @in6=@local, 0x2b, 0x3, 0x0, 0x3502, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3505, 0x2, 0xa}]}, @replay_thresh={0x8, 0xb, 0xb}, @algo_auth={0x9a, 0x1, {{'xcbc-aes-neon\x00'}, 0x290, "50e250d76f39841e43c86e6f7e6360248746aa1833308de9ac37d5769ff0223bc6c8e5b86a73f00f92de3ba8ed42e48a481de667b496445ae9dae3d302aaec329df6676e61f57eeec06dd337ff1a04a14c2a"}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) read$FUSE(r3, &(0x7f0000005bc0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000005bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000007c00)={0x10, 0x0, r12}, 0x10) r13 = accept$unix(r8, &(0x7f0000007c40), &(0x7f0000007cc0)=0x6e) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000007d00)) ioctl$KVM_GET_SREGS2(r8, 0x8140aecc, &(0x7f0000007d40)) (async) ioctl$KVM_GET_SREGS2(r8, 0x8140aecc, &(0x7f0000007d40)) 2.739966093s ago: executing program 0 (id=1409): setfsgid(0xee01) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000002000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) fchdir(r0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\b\x00)\x00'], 0x28}], 0x1}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ext4\x00', 0x800000, 0x0) r4 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000280)='fd/3\x00') syz_usb_connect(0x5, 0x3f, &(0x7f0000002040)=ANY=[@ANYBLOB="120110015c358820d21915101a5be7171a30e4c9c55367aee431ec0102030109022d00010800dcbb09044a0100020600090524060000052400020109000000a802008e1bf38a374cfc0b5fa8e036dcaf9731af75d99031340dc9645785649a4fc4657820e2282d1466d5e9ac2172491942905f", @ANYBLOB="fe622aad684440fc2bddcafd2344a75f0bfc1e4421aaee53f9f13fbeec46802c92a277819034322be9c86a77b49124e1c3167d985bcaeb7ef1ef7ef1534ae0f21a384d11ffc8e36194d2ee8e6e18c5da3ff3401213cf506be76440694d723889e8a88ab007a8ace12a052171c6fca4aa591ced9191e1f9115b4bb930dfd09c6f3e1c713ccbc5979026b300053ebd3d987151a3db4a4469be6d1e5a3eaa9623e4f7da4d65b63204f835e2af5e876bf1449f35b700355b7c3b70fd681950d649140ba546fa175a6b78ce", @ANYRESDEC=r4], 0x0) 2.072361972s ago: executing program 2 (id=1414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x56, 0x50061, 0x0, 0x0) (async) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lstat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="192b53ff8905b366cf1e3917b03489757cc12b8c2289c63d8666078f63ee30d4bf34eff1e1c57f9d122f0dda43b7f41795d78cfaeb3d9a292a", @ANYRES16=r4, @ANYBLOB="038b0000000000f4000013fefb763e3a81bd88000000c65cfd3bffd9f9518afae0b85a8a4bd57f409f1e356c0f57df110c1faa4fc233811c8f5e58b60842917c6b4a"], 0x14}}, 0x0) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0xe, 0x80800) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000780)={0x7, 0x81}, 0x2) (async) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r10, 0x1, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/35, 0x31, 0x200000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000000ac1e0001000000000000000000000000000000000cc5070000000080000a000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}, 0x1, 0x0, 0x0, 0xc1c4}, 0x0) (async) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x7c07af32a9db8909) r14 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r14, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x84, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0xcb0c) recvmmsg(r11, &(0x7f00000000c0), 0x4000000000001a7, 0x20, 0x0) getdents64(r10, &(0x7f0000000000)=""/121, 0x79) r15 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x3, 0xda3, 0x0, 0x0, 0x1000, 0xc, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)) r16 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r16, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000000740)=0x40) (async) syz_open_dev$ublk_chdev(&(0x7f0000002000), r15, 0x2) 1.996281844s ago: executing program 1 (id=1415): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000002080), 0x4) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f00000020c0)) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) socketpair(0x10, 0x800, 0x1, &(0x7f0000000000)) 1.994928314s ago: executing program 4 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$uac2(0x3, 0xb2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008630702104000010203010902a000030106c001080b0102c20e20060904000000010120000924010300062800ed07240c0c0306400c240306af9e2006030900040c24030403040706090d000509040100000102200009040101010102200010240100f80202100000ce29b400000808240201010207050905010940000e0701082501010003000009040200000102200009040201"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8040) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.41987699s ago: executing program 1 (id=1417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x3e) exit(0x1ff) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, &(0x7f0000000180)="66b8010000000f23d80f21f86635c00000700f23f80f019ddf00baf80c66b8e4f32c8666efbafc0c66ed0f32baf80c66b88d64698766efbafc0cb00aee0fc76c00fe0166b8010000000f01d90f212e650f01df", 0x53}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = eventfd(0x8) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000002c0)={0x4, 0x4, 0x5b1, 0x2, 0x4, 0x2}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc028ae92, &(0x7f00000000c0)={0x2d0, 0x630a9e9f}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000240)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) 1.215949726s ago: executing program 2 (id=1418): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$tcp_congestion(r2, &(0x7f0000000040)='lp\x00', 0x3) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x800, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x12, "1b000000e678000000101000"}) r3 = syz_open_pts(r1, 0x48000) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x1}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0xa) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x11, 0x4, "65ef1b62"}, 0x0, 0x0}) 834.773206ms ago: executing program 4 (id=1419): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC], 0x31) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$inet6(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x32, 0x11, 0x1, {0xa, @udp_ip4_spec={@multicast1, @multicast1, 0x4e21, 0x4e22, 0x5d}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0xfb44, [0x5, 0x9]}, @esp_ip4_spec={@local, @private=0xa010100, 0x9}, {0x0, @broadcast, 0x46, 0x3ff, [0x2]}, 0x4, 0x2}}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8001, {{0x2, 0x4e20, @broadcast}}}, 0x88) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000165000/0x2000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) pipe(&(0x7f0000000300)) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 523.640075ms ago: executing program 2 (id=1420): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000a40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=ANY=[], 0x88}}, 0x20048850) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000700)={[0x80000000801a1e]}, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r5 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x200, 0x280400) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$int_out(r4, 0x3, &(0x7f0000000340)) sendmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@can={{0x3, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e17494cd5cea4271"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000280)="6766c744240028ff00006766c7442402c13d00006766c744240600000000670f011424660f38804e6ab84c000f00d8c1191166b95d03000066b81f00000066ba000000000f30660f381c040f01c966b9800000c00f326635000400000f3066b9d00900000f32678142030000", 0x6c}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x7, 0x121, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x0, 0xef, 0x40, 0x40, 0x21}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="3fd5a9ea38b28667986fcf5ba8bd067b81a06a5f20f7a7c6ac2d0f48d78339b7bff26db36cecbb220f45a701b26aae638283a37f1b3f07"], 0x7, [{0x102, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000f7ffffffffffffff7af735339904d5fef228e27ba384dc94839fa8f2be5062058bd65f8a3902d69392c1b0e6a6bf92672e4bca9e913b3714b2033fcaf6ebe4b7fb7a1a1ebdb1c328c3d34f7bd983249f22e4a4fbed598893b19a5ea89e0ebeec4a2a2b92ac062e4c55e09721dfae73d308da1ea2522cb712fe8b940ef973c10ab41f45b065f791860f26cca9a277520cb21570dc4915ba324bfe4783b8e22fbbbc7237eb369cd3"], 0x0, 0x0, 0x0}) 132.411366ms ago: executing program 2 (id=1421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000859000/0x1000)=nil, 0x1000}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000100)=[{r0, 0x5082}], 0x1, 0x0, 0x0, 0x0) 114.270347ms ago: executing program 2 (id=1422): fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, 0x0, 0x0, 0x10000000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001000)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000001040)='syz1\x00', 0x200002, 0x0) 0s ago: executing program 2 (id=1423): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xf085, 0x4000, 0x1, 0x103, 0x0, r1}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba61, 0x200, 0x3, 0xf0, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b5f, 0x2000, 0x0, 0xa4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8aa, 0x1000, 0x0, 0xd9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x165, 0x1000, 0x0, 0x59, 0x0, r1}}], 0x4, &(0x7f0000001a80)={0x2e, 0x10, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, r6, '\x00', {0x3, 0xe3, 0x0, &(0x7f0000000a80)=@buf_max_buf="d18704e52e8cbe613fa27bd6e1396707f062146846d4d8a603bd7876687e2887a7762c68b8d6e2de7973d6bbfb7118f6344d85825ddde19f7000bd8a1195010cd908a9bd3e6a793f5e50128ee623436d9f129c01f85e2688cd96563d4f3cec4b924afe935b61abc34bbb84c1c4ef3f2a9d7942517afa946672266b8673316db3285ea5c4bf4a9b055179a15d4bb057e14045b588c7cd618c0b27181f3702f44997c0faeebaa6e2f2c73f49dc868269e168b923fe482a88dae012f738d6b2c243cb45771490487ed7d3c19e1a6c60a9ab83029590a877458c20001116ca3f26ab2bde1e9fc308c3c68281b8646a2441243fd5dad11a92e992d5f059cc3cc3de69544fe196b551f74814f8fc5b3f8f551a90475d4c35b40a8a9ff14f7bc63a9843305d789b4b0c59f9164ec52e548975ae606f3140d9788f4b693e0563329f8225123bcaf911ec2cc1117add0fad14899a223ce471b900988055399c0a82f5f44662e88a36839f41c273f76a5a25f8bafc653ce8bf1899ed95e6c13003e810f1754e79c3b91200873de3c60460f0f958d257992a97e288326660a01e28de7faa35f4b54042481b83b1a5a6b5c9c7903a64307fd4ed599250e435b592f8a816f657d9a944cc0b6527045cc40b6f288b13a57c3ce5ee66f8d049fdee8da5bd215e963abb83371fabfaef71d74d772889822767bcf7687fb6fa32d0cab3063b9c3c22ff2619f34bafb5a903443b8ba76e63be50d4eec1962611b4daac68ecdb5a97a52d1e5dc41ad254a35a800097e4e4230472e128add4bbb87534f96d8ac8232fb64114d04a2f6b7c33f4e8f10ab0e9dd44bd35dd455ea859265ff35cb00f31d65a21272213fe7861d823d00f7d44e9fce5a87750d10a5b464480ec6ed2d94d7f617292a4a196fb776609bc7c2b75000626c3d4fc2196f3a0f73ea05116f5f20531db005669015bc891b7732f054b21ed4a4790b738a16ea45148fce30506b4dbccae2f122f4f04569b9fb97756e7e84193d11bfbbec6a0cc992bc84b7ea1963e3c042101a53801fd21c39f4bd95515029fdbf0444b048038051689f685791dd319e862aab10f62a9c2711aa73989a47ea4db2324621ed48996bbfb7c123d6ab22e03c8e97e0a14fde47579c7d54c85061aa8c3ae063c605f74a46c96cbd70b8f4fe29080ecb697813bf7ec5ed8af0a486e8b1ce6ebdd19fd51244db42ece8f5231949ecb929655f16d1f5b4e9c40654c67a17f7358c7080201c9734bd5b8dd2d2d4320139bdd64555c92461ac35b4ffcdfd1a3d37e192546e1a50e20afcaf72619618ece0d0dc2b5b1721bafff2a7f8c286ec071106999dc1dcb537db2fa40674f32d1c73ad8e2311749b25608fdc1b0410896ef2bc83c9a3c5dcfbc5f67d85e900d94d50dbf4dddaf5f2f283b77fa6895d52eb8e32e6b685dc2e2c72959004af7551c328d678832deabcc53bd15b4810498bc4f03435f46de78041250507ffc574e20ef2fc745d9e65ac66ba49d510f2e6be9b64f77da5efbd3031e84f6ab1b40d62cfbceb1364fd04bf1e3bf545933f70cdaf900a3b0c95205aaf29975eb2c4795a510319a92c2019560d85c9c314da306826061b9a70acb1a87482af7d70b7985ff448e2b1cac5d81c90a30b9dce19f0e6ccee75696d9895600d0e3e68b053ef4a1ee02e995593aca9619d098a73ce34e3fd32cb667e914a5ceccbf3001d9ae4f91d46f88cb71ffeddad1c19bf72610c782a3d2961e27b203b78530557c2322d3ad38852640a2a3f9d9fb32606dfe216409b66b015f451c4fb1451d2e7d2b44962b98ba3ff6fd20d0f1e7134b464a91880c54d4fc0bda7ada8ed15a71f0803033abec9e089afbe698ef5afa389112ce7349dfb5d093df04aea5440c3adc8e134f6d8fef5174fc219a1edc7499f84bf7311a77004fe93c665a41765ddd27731c59b68b08634d733b6cade47b3ef390086ab9072e0523287efd117216c74f60516bef016a76b68c7f44e15c95affdf1b33c340580ee8a9050c91894e23c492cc4308f58847fd8d1d176b4d880ed2efa915bda8ccc1ce7e77d887fc5e75febd8d0821ad26982a7d40870f46b0c247c687b2ec3e99c788bcc3b7239b0899fc9246931da1e8136eb7bbaf81d7ae07f525cf4c6a72b52aa6d2248b21988c529868760af3317c32eb611b837ffb0709cbba69a05073b01531b14c8734ea3e254b2967d634f472db72e23232c3096ce1b213289c722d7b4dba3d758b6554ec1d39621206248569e03ad433f33d7e1bc06a37263420851bd5bbad2bf0461483574e3f0a01363a8df8881c8e732aefe8b115f2b0cd9a8bacf67a92ceb3f7ffd34fb3a4bde285ae9cf74de09834468b61068d67dcc3a223e7945d4b25f8363655240ca3ec7e03702b7b73d5adc42add7e93c6f40389e2990fc35492ad77b694d4d6c1a768f376b0c265edfe97cdd61db6219ad8ede53e27c8b118c72ef90b81e62e330f5ee7b725115b824e84e047d696a66806833d5ffc275171075d1bbc901606c85905196b5aa15e704a8ecdeccea216d656ad59f8260cd2a17cbb68703bee1717669f62cd977c4ccc51b01a345103fda7ac35d000621dd4bdee026dab161ec4b3f440636ffa7fdf57e46d031b187ae2fd2b8862918b457fe49c992f079f40f3932e8088edac291b359daa3b0ec75947bbf7478ad6838a4eb62fba2760308707c928f5fb7c547c269628fc4da9a7936c60d08be27070fb96253e3b8288974f1ecf6eacd3ac91290ee42f54c7e60d7ff4b8bc16fe2583752a1f3a3b41db80ab511af8b9aef2932f349a88497855fe48b41fc23e0483e9a124a875de68e5077a2b17afeface554df2429d0cb7d1ec4dcd5fd4e4322280f33f9f4875b266995fa6b4924598c32d83414de9e1ec86944aee8e6616eb2c2281c6fccf81306ba4b3490c4636ecf071ece274ff203baaf20fe35ddaf297b91675f04f99008d3b54cfaf08fee3f4381e8758c9c799d9445492e03ea8330aad6251526b17c6f9eaba77b035b73267b940dce20e0f010191a0e991cbdfcdee0fcadc16adc7224ef254cfca46123cd7c8f495efd20e8528d30cd12491af1b56818e7a236640bb4619295c4ccde82e6b077ea61367a592168f09457b945e592dd58c876d4ac001faaec6954ce23c2cd4d38a37c0d369dbd5631c441c143dbb6442aaf99a9d7693c3168394e0c68cda4c3b320d0ef1540aa14e4460e0792e46391c0cce92c6f4fc901b373f8e979d9cc46a2538ab7df925b75f3e829b15f4cbe4c2532ab88a78c05d55d3e2b60904f54d573849e0a5e54b5f914706cdf79b258acf6cfdfd6fe7efb0f4c954f31353c86d0a0b2b2e1537e7050ba4bf35307032b9f4fa949f683f9954a345b4fe66cff9c9bf577739561404a5c5d4dbe4169f8dd1ea190d06fad9c6880550815b0834d5f9c7878ea8dcc8c9c5930293a9450a6f3ddee9d2e1cdb33460d934f91d64d5b55155298c6fa1ac11ecf7a0d88c1e856f5784bcd5a45c3138828f84197eae7d67e807981d3ac72464b1e6235a110b57b4da3c0b2f2223ce0b51d96c8dc0aea39c732a8a6d62fd2d3a6e5e90b95bedcf4b02544beb7062d40d332ac3354dd664fb81022e9dbcd5bc407af0f2368b1a590c7f1ca277d99f21ae42706af3934ba18eba0ef54773610f0f45bd3a5e23b22ce53e8cf14b946802ccdaaf09eab747f595f3df1c5f3f9a7c9fc09d4296b4c7f786ebeefd4bca768ae94e9e6a4b73c77609f5e7773ce2884a2b1fe8ed3443657dba25ec411e7308d8447049791ee82b4c8c7d43d6fc82061a15707b1433df36facc8f0f3d77dd42dc56041a62b29ca728fea75c66429ca8678d79b46c1537c597e063b3a77bf88767a6fba66e510d4351ed2998609fe3b45e32ca237916e45e7c6b76b2e3aeca02e9725606b5eea123482f7cced2fa0231a9f6df5eab901f6fc9fa1d02a4add3a3b8735497badc86431b3a5280fa5e5316f4eb9c3c6f3ecaac3091d10d899ce77dd6b7ef41853f19c7472edf0953634a427af7115fb48608d00606d1640790e5eaf4d325c8511a25af8c7820719a003ce872a41a1e10e964e58e2eb100aeaf2634960cbaf7dcd02e5264bbf01026a8c8c49c42498c20066068925acc491130c75a49a880f3caa33d485acb125e3621c3595437d6b74f46158350d65bea40d46c69f5ca093acf074632fe67d69b3a6b8c1529e261a9d997e30dd9e2f2a2f005abdb42bb30be696b7b07be61a0ba2be0d10c8b0d6bcf825367add123d842a66799bd7ae6371aa5d41e18347533fe418c8b93ccaf0559995e33ac93850e66a1b3c8b56609d01358c8f4f5251a50468f144f7fb4a56bf56f46fb0cb273be0f569fbb844e777a2155eeed471318996a2bc4630be2889d139c974b707c216beb397686194eccd07dec7434ac6c7a305cd16a8d13246331b682ac08f4fa8fcc6b5d0a6210f5a5cedd545dc0c8e10f31e09d6a85e27511fcad2d68eb885fe3d89287ff48ea72deb2b380b45102f74d68c2918591d66a8f65ba51ee55692e995703a9ca8ac6252ee6e0a2068d0b1943b67849806ee808b5674bd084cf3db9e955d4e605e217fe7880ccf44d5f5917cfc96adfd28ef50661a41df2add0f8c2e44de1d89ee9a951fb56e4ee6a7eb3394e66af3f286eb4d3eb614c4d850a18e5c48571761ece67e9d1c9680c35065caa3be274a83d5c2f42dfbd3d28908d8cd588cef7c2889bb726b04cd9467c8a4cfadb0b1fae3a5419b7199bf437394d69b28acb7d19f5c74d7e388e53013ebb93a0f8ef3de53ba72f102d2b7b0e0ce4fda68a7dd50aa40d468679faeb9209f0242e4d0fc7cab02157fb92e23e1c1f0af15ab31dbb7d84e85b99645282ec462f32b63fed2bf6d242c2e1843e673988845809c9b27052766f86a98f57b7d4779ee2e24f0af203e6b2fc6a3f4df6ca07ec1b3aca4364286fb505f4c3ac441cffd633f9a9fa7b7dafc97e5a4805a1d255b5f1b4e318da9ba62dd79e86546fc030f62bc4d44383039cf83de127b3a52b03eece8a9439a783ab92637fdc25315494b80980bb5fc0dc0233f84a4b7aa3ffef43e03e9dded27954189eeb739e27a8a4974ced7543f9d8949426c49280ce2dad295b6fd21eb18748f7ce00ef3440c8565282dfe6890d09a48994fc849227b234ea4e19ae5f91f0aef10d39e141834303010a18f6d10ce95924c2ebf16e6a328e16a397ed5d6567863570ce76b3382d09661d0af31d4880e090cae33777ee1937b7ab53222a26a27ceb918fb1022bdc6d34f1d2392583dae08994e9da46da63dc6b9871afbb67fd66f6a8a2391da1548acfcd2b6cabe0cfad522a17f170daac07873517d13c817bc5993c5d0cfb85562357ac3f1da6a9602c7d97660341a65d169924c41cd7ec4e8d631e6bc70855acb80e0712400d8328f2949b19e728f6b623d271f3d68f45c5bf1a3271ca176ff05f495ab00708bda507491e00909091d4799d59313b571c98c13ee5221a766e38ab6163aad6825edaf5fdcaba623c82c6d36f37466557ff2bd80c7265c6ec9e5db9909489fb2208ce4dde34edf61e6a13d190d692e6ed939484104a7237cbb4e7bdda107fa30d0b9fbb9fed896a6aea717a7319a8d570363e482d0f03718a782cd5cb57a4435f0f624aacfbbeba2d1137c06bdb7b500f3028e826100de4c6d8e354009ae6817786181ebdf23a857839c15e7c2a8048282865b708ec8e69735d21dc3a3d7405fd3253be887bc19c74340edb7b6075f18df820cfb32727beba151dfbf97c74cf0e"}}, &(0x7f0000001b00)) close(r10) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) (async) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffd, 0x20002}, &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10}}], 0x1, &(0x7f0000000900)={0x2e, 0x18, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): e: 3 [ 130.598670][ T2456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.613691][ T228] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 130.624839][ T228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.632930][ T228] usb 5-1: Product: syz [ 130.637154][ T228] usb 5-1: Manufacturer: syz [ 130.641778][ T228] usb 5-1: SerialNumber: syz [ 130.706893][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 130.852637][ T2442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.704'. [ 130.861776][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 130.873182][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.882745][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.906896][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.922249][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.933632][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.941718][ T9] usb 1-1: Product: syz [ 130.945965][ T9] usb 1-1: Manufacturer: syz [ 130.950684][ T9] usb 1-1: SerialNumber: syz [ 131.055163][ T228] usb 5-1: unit 0 not found! [ 131.061885][ T228] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 131.072614][ T228] usb 5-1: unit 0 not found! [ 131.080740][ T228] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 131.090959][ T228] usb 5-1: USB disconnect, device number 22 [ 131.102844][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.179262][ T2463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.188188][ T2463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.310987][ T9] usb 1-1: 0:2 : does not exist [ 131.318167][ T9] usb 1-1: USB disconnect, device number 60 [ 131.329052][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.520467][ T2474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.715'. [ 131.530272][ T2474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=2474 comm=syz.1.715 [ 131.707327][ T36] audit: type=1400 audit(1777542898.708:30795): avc: denied { map } for pid=2485 comm="syz.1.719" path="socket:[20795]" dev="sockfs" ino=20795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.757585][ T36] audit: type=1400 audit(1777542898.708:30796): avc: denied { read accept } for pid=2485 comm="syz.1.719" path="socket:[20795]" dev="sockfs" ino=20795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.787250][ T36] audit: type=1400 audit(1777542898.738:30797): avc: denied { create } for pid=2489 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.846896][ T46] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 132.016892][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 132.023755][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.035521][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.045779][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.056146][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.066378][ T46] usb 5-1: config 0 descriptor?? [ 132.073622][ T46] hub 5-1:0.0: USB hub found [ 132.276877][ T46] hub 5-1:0.0: 26 ports detected [ 132.282203][ T46] hub 5-1:0.0: insufficient power available to use all downstream ports [ 132.476878][ T370] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 132.636867][ T370] usb 1-1: Using ep0 maxpacket: 16 [ 132.643475][ T370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.654568][ T370] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 132.664637][ T370] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 132.674382][ T370] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.688537][ T370] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.700417][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.708664][ T370] usb 1-1: SerialNumber: syz [ 132.715001][ T2499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.722399][ T2499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.730841][ T370] hub 1-1:1.0: bad descriptor, ignoring hub [ 132.738455][ T46] usb 5-1: USB disconnect, device number 23 [ 132.746856][ T370] hub 1-1:1.0: probe with driver hub failed with error -5 [ 132.931302][ T2499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.938749][ T2499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.056441][ T2512] bridge0: port 3(gretap0) entered blocking state [ 133.063077][ T2512] bridge0: port 3(gretap0) entered disabled state [ 133.071651][ T2512] gretap0: entered allmulticast mode [ 133.077757][ T2512] gretap0: entered promiscuous mode [ 133.083139][ T2512] bridge0: port 3(gretap0) entered blocking state [ 133.089758][ T2512] bridge0: port 3(gretap0) entered forwarding state [ 133.335067][ T2525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.344616][ T2525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.878189][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.887411][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.406899][ T398] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 134.556851][ T398] usb 5-1: Using ep0 maxpacket: 32 [ 134.563130][ T36] audit: type=1400 audit(1777542901.558:30798): avc: denied { read } for pid=2550 comm="syz.2.741" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.577451][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.595916][ T36] audit: type=1400 audit(1777542901.558:30799): avc: denied { open } for pid=2550 comm="syz.2.741" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.597593][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.632524][ T398] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.648975][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.658153][ T398] usb 5-1: config 0 descriptor?? [ 134.664138][ T398] hub 5-1:0.0: USB hub found [ 134.849455][ T2560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.858161][ T2560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.867022][ T398] hub 5-1:0.0: 26 ports detected [ 134.872890][ T398] hub 5-1:0.0: insufficient power available to use all downstream ports [ 134.878346][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.890536][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.915803][ T2565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.924524][ T2565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.238402][ T370] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 135.269342][ T370] usb 1-1: USB disconnect, device number 61 [ 135.283482][ T398] usb 5-1: USB disconnect, device number 24 [ 135.504582][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.514120][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.524407][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.534736][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.544937][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.556157][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.861263][ T508] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.453512][ T2611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.463575][ T2611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.996785][ T2616] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.004278][ T2616] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.014236][ T508] Bluetooth: hci1: Frame reassembly failed (-84) [ 137.366895][ T398] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 137.459465][ T36] audit: type=1400 audit(1777542904.458:30800): avc: denied { sqpoll } for pid=2620 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 137.517222][ T398] usb 1-1: Using ep0 maxpacket: 32 [ 137.523761][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.534729][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.544533][ T398] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.553655][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.562467][ T398] usb 1-1: config 0 descriptor?? [ 137.571448][ T398] hub 1-1:0.0: USB hub found [ 137.770158][ T398] hub 1-1:0.0: 26 ports detected [ 137.775536][ T398] hub 1-1:0.0: insufficient power available to use all downstream ports [ 137.897062][ T2617] Bluetooth: hci0: command 0x1003 tx timeout [ 137.897383][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.186991][ T398] usb 1-1: USB disconnect, device number 62 [ 138.763447][ T2637] usb usb7: usbfs: process 2637 (syz.0.769) did not claim interface 0 before use [ 139.016850][ T596] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.016872][ T371] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 139.178448][ T371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.188684][ T371] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.201764][ T371] usb 1-1: config 1 interface 0 has no altsetting 0 [ 139.210565][ T371] usb 1-1: string descriptor 0 read error: -22 [ 139.218312][ T371] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 139.227516][ T371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.439015][ T398] usb 1-1: USB disconnect, device number 63 [ 139.767873][ T36] audit: type=1400 audit(1777542906.768:30801): avc: denied { getopt } for pid=2659 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.086870][ T228] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 140.246870][ T398] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 140.268093][ T228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.276640][ T228] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 140.298977][ T228] usb 5-1: string descriptor 0 read error: -22 [ 140.305297][ T228] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 140.316857][ T228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.416863][ T398] usb 1-1: Using ep0 maxpacket: 32 [ 140.437682][ T398] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.444411][ T398] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 140.453633][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.467256][ T398] usb 1-1: config 0 descriptor?? [ 140.597916][ T228] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 140.626979][ T228] usb 5-1: USB disconnect, device number 25 [ 140.818658][ T2699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.827513][ T2699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.877979][ T398] apple 0003:05AC:0241.0013: unknown main item tag 0x6 [ 140.884941][ T398] apple 0003:05AC:0241.0013: item fetching failed at offset 11/43 [ 140.893592][ T398] apple 0003:05AC:0241.0013: parse failed [ 140.899617][ T398] apple 0003:05AC:0241.0013: probe with driver apple failed with error -22 [ 141.078545][ T398] usb 1-1: USB disconnect, device number 64 [ 141.567892][ T2716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.576503][ T2716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.626026][ T2721] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 141.636893][ T2721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 141.665231][ T2723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 141.733819][ T2728] syz.0.800(2728): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 141.737043][ T36] audit: type=1400 audit(1777542908.728:30802): avc: denied { write } for pid=2727 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.845382][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 142.020613][ T2738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.803'. [ 142.095095][ T2743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 142.166297][ T36] audit: type=1400 audit(1777542909.158:30803): avc: denied { mounton } for pid=2750 comm="syz.2.809" path="/178/file0" dev="tmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.276909][ T46] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 142.317093][ T36] audit: type=1400 audit(1777542909.318:30804): avc: denied { map } for pid=2753 comm="syz.4.810" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 142.406895][ T46] usb 1-1: device descriptor read/64, error -71 [ 142.435205][ T2762] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 142.435205][ T36] audit: type=1400 audit(1777542909.428:30805): avc: denied { load_policy } for pid=2761 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.463236][ T2762] SELinux: failed to load policy [ 142.656859][ T46] usb 1-1: device descriptor read/64, error -71 [ 142.726869][ T371] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 142.878321][ T371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.886868][ T371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.897133][ T371] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.906188][ T371] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 142.917162][ T46] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 142.925080][ T371] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 142.939034][ T371] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 142.949971][ T371] usb 5-1: config 1 interface 1 has no altsetting 0 [ 142.960178][ T371] usb 5-1: string descriptor 0 read error: -22 [ 142.966489][ T371] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 142.975706][ T371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.018540][ T2769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.027206][ T2769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.063909][ T2778] futex_wake_op: syz.2.817 tries to shift op by 144; fix this program [ 143.086705][ T2778] random: crng reseeded on system resumption [ 143.096929][ T46] usb 1-1: device descriptor read/64, error -71 [ 143.190858][ T2764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.199451][ T2764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.336853][ T46] usb 1-1: device descriptor read/64, error -71 [ 143.410130][ T2764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.418923][ T2764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.447015][ T46] usb usb1-port1: attempt power cycle [ 143.662668][ T2783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.671315][ T2783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.685234][ T2783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.696241][ T2783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.786828][ T46] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 143.808232][ T46] usb 1-1: device descriptor read/8, error -71 [ 143.830209][ T371] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 143.843444][ T371] usb 5-1: USB disconnect, device number 26 [ 143.851679][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.938032][ T46] usb 1-1: device descriptor read/8, error -71 [ 144.176849][ T46] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 144.198030][ T46] usb 1-1: device descriptor read/8, error -71 [ 144.230587][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.239328][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.247870][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.256391][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.321782][ T36] audit: type=1400 audit(1777542911.318:30806): avc: denied { create } for pid=2799 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.356080][ T36] audit: type=1400 audit(1777542911.318:30807): avc: denied { create } for pid=2799 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.376080][ T46] usb 1-1: device descriptor read/8, error -71 [ 144.382855][ T36] audit: type=1400 audit(1777542911.338:30808): avc: denied { sys_admin } for pid=2799 comm="syz.2.824" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.428056][ T36] audit: type=1400 audit(1777542911.428:30809): avc: denied { execute } for pid=2809 comm="syz.4.827" name="file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.452466][ T36] audit: type=1400 audit(1777542911.428:30810): avc: denied { execute_no_trans } for pid=2809 comm="syz.4.827" path="/84/file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.487691][ T46] usb usb1-port1: unable to enumerate USB device [ 144.495984][ T2812] binder: Unknown parameter 'fscontext?}e0' [ 144.521677][ T2814] fuse: Bad value for 'user_id' [ 144.526608][ T2814] fuse: Bad value for 'user_id' [ 144.532555][ T2814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2814 comm=syz.4.829 [ 144.560025][ T2816] input: syz1 as /devices/virtual/input/input21 [ 144.567015][ T2816] input: failed to attach handler leds to device input21, error: -6 [ 144.651410][ T2818] bpf: Bad value for 'uid' [ 144.777781][ T228] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 144.948651][ T228] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.962568][ T228] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.971751][ T228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.979863][ T228] usb 5-1: SerialNumber: 釟氶拻鋮b垟顨堚鐦餂喉摳愠嗕厔閮娽毃娆靛粍霛︻敂旒半礉鋾欌棲刖贬楹滉煴飴佃倿洄鹅犯棣诧⒊嗒堘鍎傗「銥掛浀岢濊唲岱柡霔靛窏釀夒攨铽嚙雮戭钀ゎ嚍罟囷幎藶霐傝Л雬鸿鍝☆皝炜囜嬪槚啖曣槕顧俱嫿琛惰倹鍞旊拲顬撳槵饣苦娉╃懁瀛墭睥э銗冩剫斓箯肟氼箯鋹粬銏勯梺獠╈洖釚栯唫锇釢斿硧銐斺摴陫曪鈰疥紟璜扮渼 [ 145.052990][ T2837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.066380][ T2837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.624707][ T228] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 145.949877][ T2871] /dev/loop1: Can't lookup blockdev [ 145.949891][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 145.949907][ T36] audit: type=1400 audit(1777542912.948:30815): avc: denied { mounton } for pid=2870 comm="syz.1.842" path="/297/file0" dev="tmpfs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 145.965969][ T2871] 9pnet_fd: Insufficient options for proto=fd [ 146.026687][ T46] usb 5-1: USB disconnect, device number 27 [ 146.036343][ T46] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 146.552190][ T2902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 146.552188][ T2901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 147.416869][ T228] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 147.477120][ T2921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.485676][ T2921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.566860][ T228] usb 5-1: Using ep0 maxpacket: 32 [ 147.573325][ T228] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 222, changing to 7 [ 147.586068][ T228] usb 5-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 147.595226][ T228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.603326][ T228] usb 5-1: Product: syz [ 147.607570][ T228] usb 5-1: Manufacturer: syz [ 147.612191][ T228] usb 5-1: SerialNumber: syz [ 147.697484][ T2921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.706100][ T2921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.717223][ T2921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.725936][ T2921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.833590][ T228] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 147.842743][ T228] usb 5-1: unit 4 not found! [ 147.856025][ T228] usb 5-1: unit 144 not found! [ 147.864988][ T228] usb 5-1: USB disconnect, device number 28 [ 147.878465][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.058573][ T2935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.068663][ T2935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.270879][ T2938] rust_binder: Error while translating object. [ 148.270987][ T2938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.277606][ T2938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 148.296855][ T228] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 148.401947][ T2942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.426959][ T2942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.456911][ T228] usb 1-1: device descriptor read/64, error -71 [ 148.696900][ T228] usb 1-1: device descriptor read/64, error -71 [ 148.716824][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 148.846863][ T46] usb 5-1: device descriptor read/64, error -71 [ 148.937790][ T228] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 149.066948][ T228] usb 1-1: device descriptor read/64, error -71 [ 149.086901][ T46] usb 5-1: device descriptor read/64, error -71 [ 149.306885][ T228] usb 1-1: device descriptor read/64, error -71 [ 149.326845][ T46] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 149.417166][ T228] usb usb1-port1: attempt power cycle [ 149.456826][ T46] usb 5-1: device descriptor read/64, error -71 [ 149.696876][ T46] usb 5-1: device descriptor read/64, error -71 [ 149.756881][ T228] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 149.778208][ T228] usb 1-1: device descriptor read/8, error -71 [ 149.807058][ T46] usb usb5-port1: attempt power cycle [ 149.908043][ T228] usb 1-1: device descriptor read/8, error -71 [ 150.146869][ T46] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 150.146878][ T228] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 150.168008][ T46] usb 5-1: device descriptor read/8, error -71 [ 150.177940][ T228] usb 1-1: device descriptor read/8, error -71 [ 150.298069][ T46] usb 5-1: device descriptor read/8, error -71 [ 150.307976][ T228] usb 1-1: device descriptor read/8, error -71 [ 150.416935][ T228] usb usb1-port1: unable to enumerate USB device [ 150.537079][ T46] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 150.558019][ T46] usb 5-1: device descriptor read/8, error -71 [ 150.687979][ T46] usb 5-1: device descriptor read/8, error -71 [ 150.797042][ T46] usb usb5-port1: unable to enumerate USB device [ 151.426275][ T2976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.435048][ T2976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.516890][ T398] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 151.666864][ T398] usb 1-1: Using ep0 maxpacket: 32 [ 151.673292][ T398] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.681622][ T398] usb 1-1: config 0 has no interface number 0 [ 151.687906][ T398] usb 1-1: config 0 interface 184 has no altsetting 0 [ 151.696260][ T398] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 151.705550][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.713615][ T398] usb 1-1: Product: syz [ 151.717843][ T398] usb 1-1: Manufacturer: syz [ 151.722467][ T398] usb 1-1: SerialNumber: syz [ 151.728205][ T398] usb 1-1: config 0 descriptor?? [ 151.735806][ T398] smsc75xx v1.0.0 [ 151.856860][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 151.971263][ T36] audit: type=1400 audit(1777542918.968:30816): avc: denied { append } for pid=2982 comm="syz.2.872" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 152.008733][ T10] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.023183][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 152.031447][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.041014][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.049121][ T10] usb 5-1: Product: syz [ 152.053348][ T10] usb 5-1: Manufacturer: syz [ 152.058006][ T10] usb 5-1: SerialNumber: syz [ 152.165974][ T2966] netlink: 188 bytes leftover after parsing attributes in process `syz.0.865'. [ 152.175981][ T398] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 152.193780][ T398] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 152.203800][ T398] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 152.214401][ T398] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 152.356754][ T3005] rust_binder: Write failure EINVAL in pid:606 [ 152.373416][ T3008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.388897][ T371] usb 1-1: USB disconnect, device number 73 [ 152.395488][ T3008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.407127][ T3008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.417156][ T3008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.861896][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 152.873117][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 152.882550][ T10] usb 5-1: USB disconnect, device number 33 [ 152.924225][ T3021] macsec0: entered promiscuous mode [ 152.929680][ T3021] macsec0: entered allmulticast mode [ 152.935015][ T3021] veth1_macvtap: entered allmulticast mode [ 153.094297][ T3026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.103255][ T3026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.177811][ T228] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 153.336909][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 153.343623][ T228] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.352334][ T228] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 153.363947][ T228] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 153.373289][ T228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.381351][ T228] usb 1-1: Product: syz [ 153.385591][ T228] usb 1-1: Manufacturer: syz [ 153.390257][ T228] usb 1-1: SerialNumber: syz [ 153.396203][ T3021] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 153.608592][ T228] usb 1-1: MIDIStreaming interface descriptor not found [ 153.616824][ T228] usb 1-1: too many endpoints [ 153.639579][ T228] usb 1-1: USB disconnect, device number 74 [ 153.649518][ T3034] overlayfs: failed to resolve './file0/file1': -2 [ 153.690723][ T3040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.699839][ T3040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.717915][ T3040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.726745][ T3040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.006900][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 154.156883][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 154.163417][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.171586][ T10] usb 5-1: config 0 has no interface number 0 [ 154.185841][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.199316][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.208003][ T10] usb 5-1: Product: syz [ 154.212263][ T10] usb 5-1: Manufacturer: syz [ 154.217885][ T10] usb 5-1: SerialNumber: syz [ 154.226904][ T10] usb 5-1: config 0 descriptor?? [ 154.233139][ T10] smsc95xx v2.0.0 [ 154.479173][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 154.493104][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 154.503070][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 154.518920][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 154.534276][ T10] usb 5-1: USB disconnect, device number 34 [ 154.543017][ T3065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.543047][ T3065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.571593][ T3070] netlink: 'syz.2.900': attribute type 4 has an invalid length. [ 154.585874][ T3070] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.900'. [ 154.753865][ T3076] netlink: 'syz.1.902': attribute type 13 has an invalid length. [ 154.876856][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 155.038405][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.046913][ T10] usb 5-1: config 2 has an invalid interface number: 136 but max is 0 [ 155.055455][ T10] usb 5-1: config 2 has no interface number 0 [ 155.061638][ T10] usb 5-1: config 2 interface 136 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 155.072576][ T10] usb 5-1: config 2 interface 136 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 155.083493][ T10] usb 5-1: config 2 interface 136 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 155.094419][ T10] usb 5-1: config 2 interface 136 has no altsetting 0 [ 155.103080][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 155.112446][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.120507][ T10] usb 5-1: Product: 獍 [ 155.124698][ T10] usb 5-1: Manufacturer: 釔 [ 155.129378][ T10] usb 5-1: SerialNumber: 牖涬灲啜ル熰0绗炾啚灏愨抖铵界粷绗婁繆榄掆Α顦㈢淳璩囲炒飯嶁箼鞉嶏た惴解饯殳簡頀藉瓍椴愭捣喽煏洹栭悳宕戜幋戤庡簱璩⑨鍥昙狀ク榈炪厂澹╅剸钄嗢煐鞄存瑎釆囶憸洄箲岷滉牃醽铮撿壉鍚㈠敧榇ム矏喱愱彥鏅栱嚚鑳熲ū鍒掋寠婀茧攢顓绘嵅鞕便瀱閾囜冻猝ら?铩悷妾堚喅 [ 155.226852][ T228] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 155.367752][ T10] usb-storage 5-1:2.136: USB Mass Storage device detected [ 155.376293][ T10] usb-storage 5-1:2.136: Quirks match for vid 04e6 pid 000b: 4 [ 155.383964][ T228] usb 1-1: Using ep0 maxpacket: 8 [ 155.390691][ T228] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.399084][ T228] usb 1-1: config 179 has no interface number 0 [ 155.405480][ T228] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.419302][ T228] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.431255][ T228] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.442821][ T228] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.454444][ T228] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.471987][ T228] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.487580][ T3088] netlink: 'syz.2.906': attribute type 10 has an invalid length. [ 155.490205][ T10] usb 5-1: USB disconnect, device number 35 [ 155.501425][ T228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.502121][ T36] audit: type=1400 audit(1777542922.478:30817): avc: denied { bind } for pid=3087 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.518729][ T3084] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 155.566276][ T3090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.577126][ T3090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.588347][ T3091] input: syz0 as /devices/virtual/input/input22 [ 155.597629][ T3091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.607397][ T3091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.900773][ T3100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.909538][ T3100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.950909][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 156.144898][ T3102] fuse: Bad value for 'fd' [ 156.151651][ T36] audit: type=1400 audit(1777542923.148:30818): avc: denied { create } for pid=3101 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 156.172315][ T3084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.175609][ T36] audit: type=1400 audit(1777542923.168:30819): avc: denied { create } for pid=3101 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 156.182968][ T3084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.236896][ T370] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 156.412129][ T46] usb 1-1: USB disconnect, device number 75 [ 156.412135][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 156.412173][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 156.435655][ T46] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 156.461156][ T36] audit: type=1400 audit(1777542923.458:30820): avc: denied { append } for pid=3104 comm="syz.2.912" dev="proc" ino=4026532529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 156.485051][ T3105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.499987][ T3105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.730219][ T3112] fuse: Unknown parameter 'fsname' [ 156.932658][ T3116] Unsupported ieee802154 address type: 0 [ 156.947308][ T3116] Dead loop on virtual device ip6_vti0, fix it urgently! [ 156.958371][ T3116] syzkaller0: entered promiscuous mode [ 156.964045][ T3116] syzkaller0: entered allmulticast mode [ 157.032056][ T3119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.040911][ T3119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.066838][ T370] usb 5-1: device descriptor read/64, error -71 [ 157.346865][ T370] usb 5-1: Using ep0 maxpacket: 32 [ 157.354137][ T370] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 157.363416][ T370] usb 5-1: config 2 has no interface number 0 [ 157.369879][ T370] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 157.380310][ T370] usb 5-1: config 2 interface 88 has no altsetting 0 [ 157.388909][ T370] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 157.398493][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.406637][ T370] usb 5-1: Product: syz [ 157.411326][ T370] usb 5-1: Manufacturer: syz [ 157.416101][ T370] usb 5-1: SerialNumber: syz [ 157.424510][ T3114] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.606986][ T3130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 157.637250][ T3114] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.818665][ T3143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.829959][ T3143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.838323][ T3144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.848796][ T3144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.988416][ T3153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.996997][ T3153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.006408][ T3153] 8021q: VLANs not supported on lo [ 158.012453][ T3153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.021394][ T3153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.551762][ T3159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 158.648558][ T370] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.662348][ T370] asix 5-1:2.88: probe with driver asix failed with error -71 [ 158.673165][ T370] usb 5-1: USB disconnect, device number 36 [ 158.746908][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 158.896841][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 158.903218][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.914401][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.924352][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.933504][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.942332][ T10] usb 1-1: config 0 descriptor?? [ 158.954760][ T10] hub 1-1:0.0: USB hub found [ 159.090025][ T36] audit: type=1400 audit(1777542926.088:30821): avc: denied { mounton } for pid=3174 comm="syz.2.934" path="/proc/676/cgroup" dev="proc" ino=24250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 159.113609][ T36] audit: type=1400 audit(1777542926.088:30822): avc: denied { mounton } for pid=3174 comm="syz.2.934" path="/proc/676/cgroup" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.152720][ T3157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.162344][ T3157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.171173][ T10] hub 1-1:0.0: 26 ports detected [ 159.171194][ T3180] syzkaller1: entered promiscuous mode [ 159.176747][ T10] hub 1-1:0.0: insufficient power available to use all downstream ports [ 159.182311][ T3180] syzkaller1: entered allmulticast mode [ 159.215660][ T3182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 159.224734][ T3182] erspan0: entered promiscuous mode [ 159.388617][ T3191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.397516][ T3191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.586669][ T10] usb 1-1: USB disconnect, device number 76 [ 160.122733][ T3212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.131836][ T3212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.153033][ T36] audit: type=1400 audit(1777542927.148:30823): avc: denied { ioctl } for pid=3215 comm="syz.1.946" path="socket:[26035]" dev="sockfs" ino=26035 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.783836][ T36] audit: type=1400 audit(1777542927.778:30824): avc: denied { create } for pid=3226 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.496903][ T228] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 161.648597][ T228] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.657847][ T228] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.665476][ T228] usb 1-1: can't read configurations, error -71 [ 162.467380][ T36] audit: type=1400 audit(1777542929.458:30825): avc: denied { ioctl } for pid=3273 comm="syz.0.965" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.726854][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 162.858044][ T10] usb 5-1: device descriptor read/64, error -71 [ 163.096874][ T10] usb 5-1: device descriptor read/64, error -71 [ 163.348473][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 163.486865][ T10] usb 5-1: device descriptor read/64, error -71 [ 163.586934][ T228] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 163.716867][ T228] usb 1-1: device descriptor read/64, error -71 [ 163.731527][ T10] usb 5-1: device descriptor read/64, error -71 [ 163.849945][ T10] usb usb5-port1: attempt power cycle [ 163.956884][ T228] usb 1-1: device descriptor read/64, error -71 [ 164.186861][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 164.196893][ T228] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 164.208345][ T10] usb 5-1: device descriptor read/8, error -71 [ 164.336913][ T228] usb 1-1: device descriptor read/64, error -71 [ 164.344137][ T10] usb 5-1: device descriptor read/8, error -71 [ 164.576872][ T228] usb 1-1: device descriptor read/64, error -71 [ 164.586884][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 164.607954][ T10] usb 5-1: device descriptor read/8, error -71 [ 164.687455][ T228] usb usb1-port1: attempt power cycle [ 164.737973][ T10] usb 5-1: device descriptor read/8, error -71 [ 164.775521][ T3330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.984'. [ 164.785132][ T3330] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 164.846967][ T10] usb usb5-port1: unable to enumerate USB device [ 165.026867][ T228] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 165.048029][ T228] usb 1-1: device descriptor read/8, error -71 [ 165.178872][ T228] usb 1-1: device descriptor read/8, error -71 [ 165.187282][ T3337] netlink: 52 bytes leftover after parsing attributes in process `syz.2.986'. [ 165.196273][ T3337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.986'. [ 165.417124][ T228] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 165.437935][ T228] usb 1-1: device descriptor read/8, error -71 [ 165.566638][ T36] audit: type=1400 audit(1777542932.558:30826): avc: denied { read } for pid=3342 comm="syz.4.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.594280][ T228] usb 1-1: device descriptor read/8, error -71 [ 165.706954][ T228] usb usb1-port1: unable to enumerate USB device [ 165.856849][ T370] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 166.006826][ T370] usb 5-1: Using ep0 maxpacket: 32 [ 166.013601][ T370] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.022199][ T370] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7 [ 166.034942][ T370] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.044108][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.052196][ T370] usb 5-1: Product: syz [ 166.056394][ T370] usb 5-1: Manufacturer: syz [ 166.061260][ T370] usb 5-1: SerialNumber: syz [ 166.273786][ T370] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 166.281068][ T370] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 166.296932][ T370] usb 5-1: USB disconnect, device number 41 [ 166.312845][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.359281][ T36] audit: type=1400 audit(1777542933.358:30827): avc: denied { remount } for pid=3375 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 166.542094][ T3394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.557001][ T3394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.741571][ T3400] bridge0: port 4(veth1_macvtap) entered blocking state [ 166.748814][ T3400] bridge0: port 4(veth1_macvtap) entered disabled state [ 166.755850][ T3400] veth1_macvtap: entered allmulticast mode [ 166.762577][ T3400] veth1_macvtap: left allmulticast mode [ 166.768244][ T228] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 166.811061][ T3404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1009'. [ 166.820308][ T3404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 166.830621][ T3404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 166.932231][ T228] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 166.941459][ T228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.950471][ T228] usb 1-1: Product: syz [ 166.954696][ T228] usb 1-1: Manufacturer: syz [ 166.959358][ T228] usb 1-1: SerialNumber: syz [ 167.056874][ T307] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 167.169518][ T228] usb 1-1: Can't get UAC3 power state for id 10 [ 167.176714][ T228] usb 1-1: BAAD HEADSET c_chmask mismatch [ 167.185738][ T228] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 167.198607][ T228] usb 1-1: USB disconnect, device number 83 [ 167.213558][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.229658][ T307] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 167.243597][ T307] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 167.252887][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.256973][ T596] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.267071][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 167.276108][ T307] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 167.283813][ T307] usb 5-1: No valid video chain found. [ 167.491986][ T307] usb 5-1: USB disconnect, device number 42 [ 167.936867][ T228] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 168.098038][ T228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.109050][ T228] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x67, changing to 0x7 [ 168.127642][ T228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.146872][ T228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.154956][ T228] usb 1-1: Product: syz [ 168.159497][ T228] usb 1-1: Manufacturer: syz [ 168.164152][ T228] usb 1-1: SerialNumber: syz [ 168.314418][ T3444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.323646][ T3444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.482592][ T3450] overlayfs: failed to clone lowerpath [ 168.492564][ T3450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 168.518030][ T3452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 168.671647][ T3471] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1029'. [ 168.904367][ T3475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.913917][ T3475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.174859][ T228] cdc_ncm 1-1:1.0: bind() failure [ 169.188027][ T228] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 169.194863][ T228] cdc_ncm 1-1:1.1: bind() failure [ 169.278191][ T3481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 169.289991][ T36] audit: type=1400 audit(1777542936.288:30828): avc: denied { mount } for pid=3480 comm="syz.1.1033" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 169.379081][ T370] usb 1-1: USB disconnect, device number 84 [ 169.497185][ T3492] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 169.506939][ T3492] SELinux: failed to load policy [ 169.549480][ T3499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3499 comm=syz.4.1041 [ 169.567222][ T36] audit: type=1400 audit(1777542936.558:30829): avc: denied { read write } for pid=3496 comm="syz.2.1040" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.587693][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.601818][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.612329][ T3497] fuse: Unknown parameter 'mask' [ 169.618680][ T36] audit: type=1400 audit(1777542936.558:30830): avc: denied { open } for pid=3496 comm="syz.2.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.644660][ T36] audit: type=1400 audit(1777542936.558:30831): avc: denied { ioctl } for pid=3496 comm="syz.2.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.778558][ T3510] netlink: 'syz.4.1044': attribute type 2 has an invalid length. [ 169.786388][ T3510] __nla_validate_parse: 1 callbacks suppressed [ 169.786409][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 169.923993][ T36] audit: type=1400 audit(1777542936.918:30832): avc: denied { remount } for pid=3527 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 170.156872][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 170.316838][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 170.327891][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.347243][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.366815][ T10] usb 1-1: config 0 has no interfaces? [ 170.374404][ T10] usb 1-1: language id specifier not provided by device, defaulting to English [ 170.397924][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 170.407075][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.415096][ T10] usb 1-1: Product: syz [ 170.436833][ T10] usb 1-1: Manufacturer: syz [ 170.441511][ T10] usb 1-1: SerialNumber: syz [ 170.450788][ T10] usb 1-1: config 0 descriptor?? [ 170.530828][ T36] audit: type=1326 audit(1777542937.528:30833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3535 comm="syz.1.1052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0a879cdd9 code=0x0 [ 170.662840][ T3528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.677820][ T3528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.696033][ T10] usb 1-1: USB disconnect, device number 85 [ 171.108740][ T3546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.117381][ T3546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.186965][ T9] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 171.415282][ T3564] incfs: Error accessing: ./file1. [ 171.420728][ T3564] incfs: mount failed -2 [ 171.676900][ T307] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 171.711615][ T3569] tmpfs: Unknown parameter 'no' [ 171.713368][ T3570] tmpfs: Unknown parameter 'no' [ 171.727136][ T3569] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1063'. [ 171.736257][ T3570] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1063'. [ 171.760269][ T3569] futex_wake_op: syz.4.1063 tries to shift op by -1; fix this program [ 171.849305][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.860533][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.870655][ T307] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 171.879848][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.890600][ T307] usb 1-1: config 0 descriptor?? [ 172.113342][ T307] usbhid 1-1:0.0: can't add hid device: -71 [ 172.122339][ T307] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 172.136378][ T307] usb 1-1: USB disconnect, device number 86 [ 172.614861][ T3580] : renamed from veth0_vlan (while UP) [ 172.690740][ T3583] batadv_slave_1: entered promiscuous mode [ 172.708602][ T3583] batadv_slave_1: left promiscuous mode [ 172.814329][ T3597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.824824][ T3597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.516867][ T307] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 173.668278][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.676822][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.687170][ T307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.698479][ T307] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 173.707745][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.715789][ T307] usb 1-1: Product: 針嬬潅詨锆鳖灱鑻恒梺釖★瘷锍旈瀽虢嬰翻鈨嗠榾鍜╊潱靺侀挕霃り瓛鞐兼妗㈧綖鍟嗢拏榧燂嫮鞈呮2锓兼珵钖瘁銞归厾峥囧氡毪轰季鈮濅⒎霅冡枎戢夃〃鍠岇問辏氫綅嗑°—鞐a鍚冸焊璋快¥锒熷導韴ロ垷藦隊詸饪傗肮鎬椸尘浏惰姛娲憋當妯庢爺靹冧挷岷冯對隄册帓鐎曖垷姒'餅涏珡慵寠鎾辨嚭閶嶄殶喁欗嫶雺忟異惚濓櫩隇查垥陜喆啜堛緹 [ 173.747640][ T307] usb 1-1: Manufacturer: 岚 [ 173.752511][ T307] usb 1-1: SerialNumber: 閫便笁喹酷毢岚戩厖鞎嬫槣頀革詈旈寵辍╄彻靻樼幙峤叮雼囷儼鑼绰嬵幉鞚插儻鍜壆瀵曘溁閴封暴飿碴剛婵横供璞涥亙於搁コ攴ㄣ畝鉀欙嚤鎲宏喔堫媯錈╄偋岐冡獊雺炨叅椹尓椋滅惆茶啣鈩镐箑锂岊楊刀愫э厵銍㈣ò醾湌猡斥眿旌傝劒饣忛枩篓浠炽枼瑗娲庤暪鐭ワ槕鑴徽掚⊕楹掜悂椴濄嚨榄欖辜娲寘璋搬氩惦井锏涘撼婢酬睢宠赋嗫曗翱隉ご洧熲檺頃疯莎牍┕飺戯尒氲 [ 173.802155][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.811337][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.820157][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.828896][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.846861][ T9] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 173.997787][ T307] usb 1-1: cannot find UAC_HEADER [ 173.998089][ T9] usb 5-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 174.013476][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 87, using maximum allowed: 30 [ 174.024552][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 87 [ 174.033020][ T307] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 174.038326][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 174.056423][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.063347][ T307] usb 1-1: USB disconnect, device number 87 [ 174.073774][ T9] usb 5-1: config 0 descriptor?? [ 174.085599][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.377483][ T36] audit: type=1400 audit(1777542941.378:30834): avc: denied { create } for pid=3671 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 174.486146][ T9] usb 5-1: string descriptor 0 read error: -71 [ 174.493540][ T9] usb 5-1: USB disconnect, device number 44 [ 174.678706][ T3698] syz.1.1104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.821693][ T3728] syzkaller0: entered promiscuous mode [ 174.828885][ T3728] syzkaller0: entered allmulticast mode [ 174.835150][ T3747] syzkaller0: tun_net_xmit 48 [ 174.840313][ T36] audit: type=1400 audit(1777542941.838:30835): avc: denied { relabelfrom } for pid=3723 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 174.843935][ T3728] syzkaller0: create flow: hash 1161369019 index 1 [ 174.862528][ T36] audit: type=1400 audit(1777542941.838:30836): avc: denied { relabelto } for pid=3723 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 174.962578][ T3723] syzkaller0: delete flow: hash 1161369019 index 1 [ 175.016229][ T3750] FAT-fs (rnullb0): bogus number of reserved sectors [ 175.023267][ T3750] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 175.305392][ T3757] netlink: 'syz.4.1109': attribute type 8 has an invalid length. [ 175.313439][ T3757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 175.322907][ T307] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 175.351104][ T3762] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 175.362868][ T3762] overlayfs: missing 'lowerdir' [ 175.476992][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 175.485472][ T307] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.494808][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.503306][ T307] usb 1-1: Product: syz [ 175.509627][ T307] usb 1-1: Manufacturer: syz [ 175.514364][ T307] usb 1-1: SerialNumber: syz [ 175.526191][ T307] r8152-cfgselector 1-1: Unknown version 0x0000 [ 175.532990][ T307] r8152-cfgselector 1-1: config 0 descriptor?? [ 175.540810][ T3779] overlayfs: failed to clone upperpath [ 175.559940][ T36] audit: type=1400 audit(1777542942.558:30837): avc: denied { relabelfrom } for pid=3776 comm="syz.2.1115" name="" dev="pipefs" ino=29929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 175.582753][ T36] audit: type=1400 audit(1777542942.558:30838): avc: denied { ioctl } for pid=3776 comm="syz.2.1115" path="socket:[29931]" dev="sockfs" ino=29931 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.666892][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 175.746262][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.755362][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.781036][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.788738][ T3799] overlayfs: failed to clone upperpath [ 175.791705][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.804782][ T3798] overlayfs: failed to clone upperpath [ 175.828015][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.839768][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 175.850934][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 175.864994][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=0010, bcdDevice= 0.40 [ 175.874551][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.882627][ T9] usb 5-1: SerialNumber: syz [ 175.903088][ T9] r8152-cfgselector 1-1: USB disconnect, device number 88 [ 176.089679][ T9] usb 5-1: USB disconnect, device number 45 [ 176.405400][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.413835][ T3807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.414144][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.431207][ T3807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.633992][ T3818] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 176.643509][ T3818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 176.706876][ T228] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 176.866820][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 176.877937][ T228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.886585][ T36] audit: type=1400 audit(1777542943.878:30839): avc: denied { mount } for pid=3828 comm="syz.4.1131" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 176.890239][ T3830] overlayfs: overlapping lowerdir path [ 176.915292][ T36] audit: type=1400 audit(1777542943.908:30840): avc: denied { read } for pid=3828 comm="syz.4.1131" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 176.916957][ T228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.942743][ T36] audit: type=1400 audit(1777542943.908:30841): avc: denied { open } for pid=3828 comm="syz.4.1131" path="/137/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 176.979381][ T228] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.991628][ T228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.001679][ T3833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.014351][ T36] audit: type=1400 audit(1777542944.008:30842): avc: denied { unmount } for pid=1508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 177.027411][ T228] usb 1-1: config 0 descriptor?? [ 177.042877][ T3833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.058616][ T228] hub 1-1:0.0: USB hub found [ 177.065421][ T36] audit: type=1400 audit(1777542944.058:30843): avc: denied { view } for pid=3836 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.103014][ T3839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1135'. [ 177.256813][ T228] hub 1-1:0.0: 26 ports detected [ 177.266827][ T228] hub 1-1:0.0: insufficient power available to use all downstream ports [ 177.503783][ T3854] 9pnet: Could not find request transport: ugix [ 177.646393][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.658502][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.675201][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.684662][ T228] usb 1-1: USB disconnect, device number 89 [ 177.685956][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.724229][ T3874] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1143'. [ 177.736094][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.746682][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.755773][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.778390][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.787410][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.797739][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.382286][ T3893] binder: Bad value for 'max' [ 178.445898][ T3905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.455090][ T3905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.866859][ T307] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 179.026849][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 179.033818][ T307] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.045225][ T307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.052975][ T307] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 179.062912][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.077066][ T307] usb 1-1: config 0 descriptor?? [ 179.489877][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.496864][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.504390][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.511306][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.518223][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.525308][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.532554][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.539512][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.546362][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.553227][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.560117][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.567010][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.573842][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.580723][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.587580][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.594409][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.601286][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.608181][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.615076][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.621957][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.628841][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.635701][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.642624][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.649510][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.656324][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.663417][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.670333][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.677238][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.684067][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.690926][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.690948][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.704405][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.706621][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.720382][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 179.720426][ T36] audit: type=1400 audit(1777542946.708:30846): avc: denied { shutdown } for pid=3911 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.721208][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.729426][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 179.747214][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.768009][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.774896][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.781821][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.788745][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.795646][ T307] ryos 0003:1E7D:3232.0014: unknown main item tag 0x0 [ 179.804027][ T307] ryos 0003:1E7D:3232.0014: hidraw0: USB HID v0.08 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 179.818463][ T307] usb 1-1: USB disconnect, device number 90 [ 179.842737][ T3931] fido_id[3931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 179.907983][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 179.916488][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 179.925258][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 179.936322][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.958879][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 179.969968][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.983057][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 179.993637][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.006610][ T9] usb 5-1: config 0 descriptor?? [ 180.012088][ T3930] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 180.121193][ T36] audit: type=1326 audit(1777542947.118:30847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a879cdd9 code=0x7fc00000 [ 180.222402][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 180.425593][ C1] usblp0: nonzero read bulk status received: -71 [ 180.433928][ T307] usb 5-1: USB disconnect, device number 46 [ 180.596851][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 180.642267][ T36] audit: type=1326 audit(1777542947.638:30848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.1160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefcd39cdd9 code=0x0 [ 180.766838][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 180.777621][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.806802][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.813551][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 180.830096][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.847701][ T9] usb 1-1: config 0 descriptor?? [ 180.977503][ T3947] overlayfs: failed to resolve './file1/file4': -2 [ 181.030348][ T3949] syzkaller1: entered promiscuous mode [ 181.036083][ T3949] syzkaller1: entered allmulticast mode [ 181.045475][ T3949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.054321][ T3949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.064771][ T3949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.081924][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 181.093574][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.103421][ T9] usb 1-1: USB disconnect, device number 91 [ 181.285296][ T3965] overlayfs: failed to clone upperpath [ 181.414383][ T3973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1175'. [ 181.658453][ T36] audit: type=1326 audit(1777542948.658:30849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.2.1176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe170b9cdd9 code=0x0 [ 181.774698][ T3981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.783395][ T3981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.361461][ T4007] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1186'. [ 182.370533][ T4007] z00猉功: renamed from gretap0 (while UP) [ 182.393698][ T4012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.403183][ T4012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.500369][ T3929] usblp0: removed [ 182.557387][ T36] audit: type=1400 audit(1777542949.558:30850): avc: denied { mounton } for pid=4017 comm="syz.4.1190" path="/proc/478/task" dev="proc" ino=31151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 182.588760][ T228] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 182.748126][ T228] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.759259][ T228] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.769083][ T228] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.775774][ T228] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 182.784909][ T228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.796008][ T228] usb 1-1: config 0 descriptor?? [ 182.937891][ T36] audit: type=1400 audit(1777542949.938:30851): avc: denied { module_load } for pid=4028 comm="syz.2.1194" path="/281/file0" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 182.938006][ T4029] Invalid ELF header len 6 [ 182.989579][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.998341][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.058702][ T4032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.067402][ T4032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.213034][ T228] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x3 [ 183.220386][ T228] hid-steam 0003:28DE:1102.0015: unbalanced collection at end of report description [ 183.230181][ T228] hid-steam 0003:28DE:1102.0015: steam_probe:parse of hid interface failed [ 183.238979][ T228] hid-steam 0003:28DE:1102.0015: probe with driver hid-steam failed with error -22 [ 183.388380][ T4034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.397576][ T4034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.423115][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.433091][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.442223][ T9] usb 1-1: USB disconnect, device number 92 [ 183.451955][ T4037] overlay: ./file0 is not a directory [ 183.458147][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 183.537896][ T4046] incfs: Error accessing: ./bus. [ 183.543049][ T4046] incfs: mount failed -2 [ 184.101089][ T4061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4061 comm=syz.1.1207 [ 184.227067][ T371] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 184.376856][ T371] usb 1-1: Using ep0 maxpacket: 32 [ 184.383390][ T371] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.391890][ T371] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.400609][ T371] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.409669][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.419404][ T371] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.429247][ T371] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.442323][ T371] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.451539][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.460399][ T371] usb 1-1: config 0 descriptor?? [ 184.561658][ T4074] netlink: 'syz.4.1211': attribute type 33 has an invalid length. [ 184.570827][ T4074] 2N: renamed from vcan0 (while UP) [ 184.594169][ T4079] futex_wake_op: syz.4.1212 tries to shift op by -1; fix this program [ 184.677721][ T371] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.958111][ T371] usb 1-1: USB disconnect, device number 93 [ 184.965845][ T371] usblp0: removed [ 185.283359][ T4087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.292054][ T4087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.206849][ T371] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 186.366865][ T371] usb 1-1: Using ep0 maxpacket: 8 [ 186.381817][ T371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.396485][ T371] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 186.404502][ T371] usb 1-1: can't read configurations, error -71 [ 186.416639][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.426246][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.439426][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.448261][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.459585][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.469896][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.478675][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.487420][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.706844][ T370] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 186.781212][ T36] audit: type=1400 audit(1777542953.778:30852): avc: denied { execstack } for pid=4122 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 186.856849][ T370] usb 5-1: Using ep0 maxpacket: 16 [ 186.867834][ T370] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 186.876056][ T370] usb 5-1: config 0 has no interface number 0 [ 186.896843][ T370] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 186.916857][ T370] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 186.928388][ T370] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 186.937793][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.945866][ T370] usb 5-1: Product: syz [ 186.956811][ T370] usb 5-1: Manufacturer: syz [ 186.961650][ T370] usb 5-1: SerialNumber: syz [ 186.971137][ T370] usb 5-1: config 0 descriptor?? [ 186.976574][ T4121] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 186.988751][ T4121] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 187.199893][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.217030][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.234184][ T4121] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 187.249740][ T4121] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 187.264001][ T4138] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 187.466864][ T370] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 187.660794][ T370] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 187.686827][ T370] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 187.697578][ T370] asix 5-1:0.34: probe with driver asix failed with error -71 [ 187.717581][ T370] usb 5-1: USB disconnect, device number 47 [ 188.000271][ T4154] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1239'. [ 188.009535][ T4154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 188.018846][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'. [ 188.386925][ T370] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 188.538113][ T370] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.548737][ T370] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 188.560221][ T370] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.570030][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.578420][ T370] usb 1-1: Product: syz [ 188.582951][ T370] usb 1-1: Manufacturer: syz [ 188.588748][ T370] usb 1-1: SerialNumber: syz [ 188.606811][ T228] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 188.778145][ T228] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 188.796843][ T228] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.822762][ T228] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.837337][ T228] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 188.846451][ T228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.858409][ T228] usb 5-1: config 0 descriptor?? [ 188.863792][ T4190] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 188.929232][ T4197] netlink: 'syz.2.1252': attribute type 5 has an invalid length. [ 188.937104][ T4197] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1252'. [ 189.274831][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.284509][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.296247][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.303401][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.310511][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.317626][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.324700][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.331800][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.338910][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.345986][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.353145][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.360272][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.367397][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.374570][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.381777][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.389911][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.397222][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.404318][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.411473][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.418592][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.425674][ T228] uclogic 0003:5543:0522.0016: unknown main item tag 0x0 [ 189.433073][ T228] uclogic 0003:5543:0522.0016: item fetching failed at offset 31/32 [ 189.441345][ T228] uclogic 0003:5543:0522.0016: parse failed [ 189.447371][ T228] uclogic 0003:5543:0522.0016: probe with driver uclogic failed with error -22 [ 189.495575][ T228] usb 5-1: USB disconnect, device number 48 [ 189.861713][ T228] usb 1-1: USB disconnect, device number 96 [ 189.911979][ T4216] rust_binder: 891: no such ref 0 [ 190.097433][ T4229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.106014][ T4229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.113884][ T36] audit: type=1400 audit(1777542957.088:30853): avc: denied { ioctl } for pid=4228 comm="syz.2.1262" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.346874][ T228] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 190.476851][ T228] usb 1-1: device descriptor read/64, error -71 [ 190.677792][ T36] audit: type=1400 audit(1777542957.678:30854): avc: denied { transition } for pid=4242 comm="syz.2.1267" path="/298/file1" dev="tmpfs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 190.702417][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.710895][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 190.718553][ T36] audit: type=1400 audit(1777542957.678:30855): avc: denied { entrypoint } for pid=4242 comm="syz.2.1267" path="/298/file1" dev="tmpfs" ino=1615 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.720901][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.742646][ T228] usb 1-1: device descriptor read/64, error -71 [ 190.757070][ T36] audit: type=1400 audit(1777542957.678:30856): avc: denied { share } for pid=4242 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 190.777099][ T36] audit: type=1400 audit(1777542957.678:30857): avc: denied { noatsecure } for pid=4242 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 190.906831][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 190.913203][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.921491][ T10] usb 5-1: config 0 has no interface number 0 [ 190.927655][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 190.937622][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 190.947740][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 190.955956][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 190.965054][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.973122][ T10] usb 5-1: Product: syz [ 190.977391][ T10] usb 5-1: Manufacturer: syz [ 190.982012][ T10] usb 5-1: SerialNumber: syz [ 190.987509][ T10] usb 5-1: config 0 descriptor?? [ 190.992922][ T4239] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.000276][ T4239] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.007517][ T228] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 191.136841][ T228] usb 1-1: device descriptor read/64, error -71 [ 191.217372][ T4239] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.224658][ T4239] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.298300][ T4248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.307018][ T4248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.376884][ T228] usb 1-1: device descriptor read/64, error -71 [ 191.488449][ T228] usb usb1-port1: attempt power cycle [ 191.826880][ T228] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 191.851661][ T36] audit: type=1400 audit(2000000000.000:30858): avc: denied { append } for pid=4249 comm="syz.2.1270" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.878475][ T228] usb 1-1: device descriptor read/8, error -71 [ 191.898258][ T10] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, c2:64:f5:48:66:19 [ 191.911526][ T10] usb 5-1: USB disconnect, device number 49 [ 191.918266][ T10] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 192.007904][ T228] usb 1-1: device descriptor read/8, error -71 [ 192.102496][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.112010][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.150068][ T36] audit: type=1400 audit(2000000000.300:30859): avc: denied { lock } for pid=4272 comm="syz.1.1277" path="socket:[33943]" dev="sockfs" ino=33943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 192.256819][ T228] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 192.277853][ T228] usb 1-1: device descriptor read/8, error -71 [ 192.370607][ T4280] syzkaller1: entered promiscuous mode [ 192.376193][ T4280] syzkaller1: entered allmulticast mode [ 192.408008][ T228] usb 1-1: device descriptor read/8, error -71 [ 192.517626][ T228] usb usb1-port1: unable to enumerate USB device [ 192.746821][ T371] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 192.896856][ T371] usb 5-1: Using ep0 maxpacket: 8 [ 192.904198][ T371] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 192.916735][ T371] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.930179][ T371] usb 5-1: config 1 interface 0 has no altsetting 0 [ 192.938884][ T371] usb 5-1: New USB device found, idVendor=1784, idProduct=0004, bcdDevice= 0.40 [ 192.948430][ T371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.956539][ T371] usb 5-1: Product: syz [ 192.961330][ T371] usb 5-1: Manufacturer: 銟囶瘜闃查洏羁冨姭聸绾滎晶旰酷柤璋傡吵旎愥挿攵摠鎴℃厞 [ 192.970878][ T371] usb 5-1: SerialNumber: syz [ 193.052583][ T4299] lo: entered promiscuous mode [ 193.059533][ T4299] lo: left promiscuous mode [ 193.068344][ T4299] tmpfs: Bad value for 'nr_blocks' [ 193.187195][ T371] usbhid 5-1:1.0: can't add hid device: -71 [ 193.193326][ T371] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 193.208101][ T371] usb 5-1: USB disconnect, device number 50 [ 193.436841][ T370] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 193.588247][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.609126][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.638379][ T370] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 193.649612][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.663653][ T370] usb 1-1: config 0 descriptor?? [ 193.712965][ T36] audit: type=1400 audit(2000000001.860:30860): avc: denied { map } for pid=4306 comm="syz.4.1290" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.741395][ T36] audit: type=1400 audit(2000000001.890:30861): avc: denied { execute } for pid=4306 comm="syz.4.1290" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.883152][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.909542][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.916459][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.925897][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.932947][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.940687][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.947867][ T370] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 193.971366][ T370] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 194.005428][ T370] arvo 0003:1E7D:30D4.0017: couldn't init struct arvo_device [ 194.027509][ T370] arvo 0003:1E7D:30D4.0017: couldn't install keyboard [ 194.033750][ T4338] netlink: 'syz.0.1297': attribute type 16 has an invalid length. [ 194.047182][ T370] arvo 0003:1E7D:30D4.0017: probe with driver arvo failed with error -71 [ 194.052600][ T4338] netlink: 'syz.0.1297': attribute type 2 has an invalid length. [ 194.077548][ T370] usb 1-1: USB disconnect, device number 101 [ 194.083940][ T4338] netlink: 'syz.0.1297': attribute type 4 has an invalid length. [ 194.100680][ T4338] netlink: 63342 bytes leftover after parsing attributes in process `syz.0.1297'. [ 194.156844][ T307] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 194.208186][ T4345] overlay: ./file0 is not a directory [ 194.321385][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.346804][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.357138][ T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.370523][ T307] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.384492][ T4350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4350 comm=syz.1.1301 [ 194.397224][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.406591][ T307] usb 5-1: config 0 descriptor?? [ 194.469250][ T36] audit: type=1400 audit(2000000002.620:30862): avc: denied { read } for pid=4351 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.520015][ T228] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 194.567271][ T4357] veth1: entered allmulticast mode [ 194.586693][ T4356] veth1: left allmulticast mode [ 194.677915][ T228] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 194.686073][ T228] usb 1-1: config 0 has no interface number 0 [ 194.704780][ T228] usb 1-1: config 0 interface 41 has no altsetting 0 [ 194.718273][ T228] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 194.727459][ T228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.746959][ T228] usb 1-1: Product: syz [ 194.751191][ T228] usb 1-1: Manufacturer: syz [ 194.755820][ T228] usb 1-1: SerialNumber: syz [ 194.771163][ T228] usb 1-1: config 0 descriptor?? [ 194.815846][ T307] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 194.823632][ T307] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 194.831323][ T307] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 194.842415][ T307] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 194.850178][ T307] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 194.858113][ T307] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 194.868011][ T307] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 194.886269][ T307] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 194.970550][ T4363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.979261][ T4363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.989150][ T36] audit: type=1400 audit(2000000003.140:30863): avc: denied { accept } for pid=4362 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 195.078139][ T307] usb 5-1: USB disconnect, device number 51 [ 195.132204][ T36] audit: type=1400 audit(2000000003.280:30864): avc: denied { mount } for pid=4364 comm="syz.1.1306" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 195.376879][ T307] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 195.528031][ T307] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 195.540252][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 195.553818][ T307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 195.567013][ T307] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 195.576154][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.585960][ T307] usb 5-1: config 0 descriptor?? [ 195.591394][ T4332] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 195.601092][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.609772][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.639557][ T228] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 195.652539][ T228] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 195.661354][ T4380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.663897][ T228] usb 1-1: USB disconnect, device number 102 [ 195.676713][ T4380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.828127][ T4388] x_tables: duplicate underflow at hook 1 [ 196.396874][ T228] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 196.548044][ T228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.558311][ T228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.569484][ T228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 196.582024][ T228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.591170][ T228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.599316][ T228] usb 1-1: Product: syz [ 196.603530][ T228] usb 1-1: Manufacturer: syz [ 196.608219][ T228] usb 1-1: SerialNumber: syz [ 196.613994][ T4390] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 196.622081][ T228] cdc_mbim 1-1:1.0: skipping garbage [ 196.627463][ T228] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 196.634666][ T228] cdc_mbim 1-1:1.0: bind() failure [ 196.717279][ T307] usbhid 5-1:0.0: can't add hid device: -71 [ 196.732212][ T307] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.744883][ T307] usb 5-1: USB disconnect, device number 52 [ 196.822286][ T228] usb 1-1: USB disconnect, device number 103 [ 196.857047][ T36] audit: type=1400 audit(2000000005.010:30865): avc: denied { remount } for pid=4402 comm="syz.2.1321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 196.883639][ T36] audit: type=1400 audit(2000000005.030:30866): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 197.046885][ T307] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 197.176900][ T307] usb 5-1: device descriptor read/64, error -71 [ 197.416865][ T307] usb 5-1: device descriptor read/64, error -71 [ 197.576879][ T228] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 197.660300][ T307] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 197.686580][ T4424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.695204][ T4424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.728470][ T228] usb 1-1: not running at top speed; connect to a high speed hub [ 197.737185][ T228] usb 1-1: config 2 has an invalid interface number: 176 but max is 0 [ 197.745427][ T228] usb 1-1: config 2 has no interface number 0 [ 197.751608][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0x9 has an invalid bInterval 203, changing to 4 [ 197.762992][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0x6 has invalid maxpacket 1024, setting to 1023 [ 197.774374][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 197.785478][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 197.796577][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 197.807782][ T228] usb 1-1: config 2 interface 176 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 197.816958][ T307] usb 5-1: device descriptor read/64, error -71 [ 197.818883][ T228] usb 1-1: config 2 interface 176 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 197.836069][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 197.847194][ T228] usb 1-1: config 2 interface 176 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 197.858120][ T228] usb 1-1: config 2 interface 176 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 197.869322][ T228] usb 1-1: config 2 interface 176 has no altsetting 0 [ 197.877709][ T228] usb 1-1: New USB device found, idVendor=1199, idProduct=9079, bcdDevice= c.a5 [ 197.886898][ T228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.894944][ T228] usb 1-1: Product: syz [ 197.899183][ T228] usb 1-1: Manufacturer: syz [ 197.903822][ T228] usb 1-1: SerialNumber: syz [ 198.066831][ T307] usb 5-1: device descriptor read/64, error -71 [ 198.111966][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.120630][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.129484][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.138418][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.147992][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.156751][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.165440][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.174211][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.177613][ T307] usb usb5-port1: attempt power cycle [ 198.185600][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.196252][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.210122][ T228] usb 1-1: USB disconnect, device number 104 [ 198.233863][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 198.264163][ T4435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.273364][ T4435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.526849][ T307] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 198.547755][ T307] usb 5-1: device descriptor read/8, error -71 [ 198.677876][ T307] usb 5-1: device descriptor read/8, error -71 [ 198.823828][ T4445] tap0: tun_chr_ioctl cmd 1074025678 [ 198.830124][ T4445] tap0: group set to 0 [ 198.847027][ T4447] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 198.895327][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.904487][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.936856][ T307] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 198.957958][ T307] usb 5-1: device descriptor read/8, error -71 [ 199.028692][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 199.036981][ T36] audit: type=1400 audit(2000000007.180:30867): avc: denied { bind } for pid=4454 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.037879][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 199.084059][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 199.097814][ T307] usb 5-1: device descriptor read/8, error -71 [ 199.131278][ T4459] overlayfs: failed to resolve './file0/file1': -2 [ 199.139209][ T4459] overlayfs: missing 'lowerdir' [ 199.150956][ T36] audit: type=1326 audit(2000000007.300:30868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.1.1344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0a879cdd9 code=0x0 [ 199.156965][ T228] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 199.216974][ T307] usb usb5-port1: unable to enumerate USB device [ 199.316953][ T228] usb 1-1: device descriptor read/64, error -71 [ 199.556841][ T228] usb 1-1: device descriptor read/64, error -71 [ 199.576102][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.584716][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.769467][ T4479] netlink: 'syz.4.1349': attribute type 17 has an invalid length. [ 199.796806][ T228] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 199.936829][ T228] usb 1-1: device descriptor read/64, error -71 [ 200.023927][ T36] audit: type=1107 audit(2000000008.170:30869): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 200.024320][ T4490] overlayfs: failed to clone upperpath [ 200.176816][ T398] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 200.247654][ T4509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1359'. [ 200.256828][ T228] usb 1-1: device descriptor read/64, error -71 [ 200.261524][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.272110][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.281480][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.290332][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.299573][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.308237][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.326807][ T398] usb 5-1: Using ep0 maxpacket: 32 [ 200.333120][ T398] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 200.341457][ T398] usb 5-1: config 2 has no interface number 0 [ 200.347647][ T398] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 200.357605][ T398] usb 5-1: config 2 interface 88 has no altsetting 0 [ 200.365908][ T398] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 200.375115][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.383250][ T228] usb usb1-port1: attempt power cycle [ 200.388997][ T398] usb 5-1: Product: syz [ 200.393185][ T398] usb 5-1: Manufacturer: syz [ 200.397827][ T398] usb 5-1: SerialNumber: syz [ 200.403855][ T4481] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 200.611881][ T4481] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 200.726852][ T228] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 200.747992][ T228] usb 1-1: device descriptor read/8, error -71 [ 200.836560][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 200.878583][ T228] usb 1-1: device descriptor read/8, error -71 [ 200.956289][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.965146][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.975363][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.984153][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.019385][ T4521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.028186][ T4521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.126882][ T228] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 201.145125][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.153927][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.162503][ T228] usb 1-1: device descriptor read/8, error -71 [ 201.297922][ T228] usb 1-1: device descriptor read/8, error -71 [ 201.406922][ T228] usb usb1-port1: unable to enumerate USB device [ 201.838608][ T398] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 201.866824][ T398] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 201.877461][ T398] asix 5-1:2.88: probe with driver asix failed with error -71 [ 201.892347][ T398] usb 5-1: USB disconnect, device number 57 [ 201.977060][ T36] audit: type=1400 audit(2000000010.130:30870): avc: denied { getopt } for pid=4539 comm="syz.0.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.043284][ T4550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1372'. [ 202.057644][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 202.076923][ T4550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4550 comm=syz.1.1372 [ 202.094833][ T4552] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1373'. [ 202.356846][ T398] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 202.447787][ T36] audit: type=1400 audit(2000000010.600:30871): avc: denied { watch } for pid=4559 comm="syz.4.1376" path="/175/file0" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.471385][ T4560] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1376'. [ 202.481324][ T4560] gretap0: entered promiscuous mode [ 202.490278][ T4560] netlink: 'syz.4.1376': attribute type 16 has an invalid length. [ 202.498690][ T4560] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1376'. [ 202.508274][ T4560] 0{X功: renamed from gretap0 [ 202.517512][ T4560] 0{X功: left promiscuous mode [ 202.522601][ T4560] 0{X功: entered allmulticast mode [ 202.529979][ T398] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 202.540090][ T398] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 202.540342][ T4560] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 202.570599][ T398] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 202.580068][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.595390][ T398] usb 1-1: Product: syz [ 202.605053][ T398] usb 1-1: Manufacturer: syz [ 202.617165][ T398] usb 1-1: SerialNumber: syz [ 202.622627][ T398] usb 1-1: config 0 descriptor?? [ 202.634275][ T4552] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.646875][ T4552] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.856729][ T4552] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.869200][ T4552] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.282707][ T398] Error reading MAC address [ 203.289080][ T398] usb 1-1: USB disconnect, device number 109 [ 203.366806][ T228] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 203.516829][ T228] usb 5-1: Using ep0 maxpacket: 32 [ 203.524840][ T228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.541616][ T228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 203.559846][ T228] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 203.573143][ T228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.583069][ T228] usb 5-1: Product: syz [ 203.587496][ T228] usb 5-1: Manufacturer: syz [ 203.592254][ T228] usb 5-1: SerialNumber: syz [ 203.598614][ T36] audit: type=1326 audit(2000000011.750:30872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.623973][ T36] audit: type=1326 audit(2000000011.750:30873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.648345][ T36] audit: type=1326 audit(2000000011.750:30874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.672126][ T36] audit: type=1326 audit(2000000011.750:30875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.695806][ T36] audit: type=1326 audit(2000000011.750:30876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.720040][ T36] audit: type=1326 audit(2000000011.750:30877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.744054][ T36] audit: type=1326 audit(2000000011.750:30878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.767913][ T36] audit: type=1326 audit(2000000011.750:30879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe170b9cdd9 code=0x7ffc0000 [ 203.803657][ T4589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.816675][ T228] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 203.827804][ T228] usb 5-1: USB disconnect, device number 58 [ 203.833992][ T4589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.854729][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.449930][ T4598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4598 comm=syz.2.1388 [ 204.553821][ T4605] binder: Bad value for 'max' [ 204.574934][ T4605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.583949][ T4605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.601076][ T4605] kvm: MONITOR instruction emulated as NOP! [ 205.243406][ T4627] overlayfs: empty lowerdir [ 205.263001][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.272134][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.456838][ T398] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 205.606819][ T398] usb 5-1: Using ep0 maxpacket: 32 [ 205.613268][ T398] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 205.621503][ T398] usb 5-1: config 2 has no interface number 0 [ 205.627654][ T398] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 205.637649][ T398] usb 5-1: config 2 interface 88 has no altsetting 0 [ 205.645868][ T398] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 205.655297][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.663374][ T398] usb 5-1: Product: syz [ 205.667606][ T398] usb 5-1: Manufacturer: syz [ 205.672256][ T398] usb 5-1: SerialNumber: syz [ 205.678057][ T4625] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.730294][ T4639] overlay: Bad value for 'redirect_dir' [ 205.776829][ T228] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 205.849377][ T4646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1060 [ 205.849847][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.867766][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.876274][ T4646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.885085][ T4646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.888512][ T4625] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.926866][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 205.933153][ T228] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.944209][ T228] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.955162][ T228] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 205.964338][ T228] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 205.972745][ T228] usb 1-1: Product: syz [ 205.976984][ T228] usb 1-1: Manufacturer: syz [ 205.985065][ T228] hub 1-1:4.0: USB hub found [ 206.184596][ T228] hub 1-1:4.0: 7 ports detected [ 206.189810][ T228] hub 1-1:4.0: insufficient power available to use all downstream ports [ 206.386062][ T228] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 206.393151][ T228] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 206.417262][ T228] usb 1-1: USB disconnect, device number 110 [ 206.849506][ T4656] 9pnet: Could not find request transport: rdma [ 206.906873][ T4659] No source specified [ 207.103138][ T398] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 207.116268][ T398] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 207.126837][ T398] asix 5-1:2.88: probe with driver asix failed with error -71 [ 207.135401][ T398] usb 5-1: USB disconnect, device number 59 [ 207.156850][ T228] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 207.306787][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 207.310983][ T4667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.316312][ T228] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 207.325901][ T4667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.331897][ T228] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 207.343957][ T228] usb 1-1: can't read configurations, error -61 [ 207.361562][ T4671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.370133][ T4671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.476897][ T228] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 207.580063][ T4671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.588760][ T4671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.626802][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 207.633363][ T228] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 207.643335][ T4677] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44032 sclass=netlink_xfrm_socket pid=4677 comm=syz.2.1414 [ 207.656444][ T228] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 207.664172][ T228] usb 1-1: can't read configurations, error -61 [ 207.674293][ T228] usb usb1-port1: attempt power cycle [ 207.926838][ T398] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 208.016844][ T228] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 208.037188][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 208.042781][ T228] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 208.051850][ T228] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 208.059550][ T228] usb 1-1: can't read configurations, error -61 [ 208.076821][ T398] usb 5-1: Using ep0 maxpacket: 8 [ 208.083108][ T398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.094713][ T398] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice= 0.40 [ 208.103823][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.111887][ T398] usb 5-1: Product: syz [ 208.116089][ T398] usb 5-1: Manufacturer: syz [ 208.120756][ T398] usb 5-1: SerialNumber: syz [ 208.186814][ T228] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 208.207166][ T228] usb 1-1: Using ep0 maxpacket: 32 [ 208.217917][ T228] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 208.230664][ T228] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 208.238322][ T228] usb 1-1: can't read configurations, error -61 [ 208.244825][ T228] usb usb1-port1: unable to enumerate USB device [ 208.333857][ T398] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 208.344737][ T398] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.359189][ T398] usb 5-1: USB disconnect, device number 60 [ 208.379580][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.472972][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.484857][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.206805][ T398] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 209.358126][ T398] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.366884][ T398] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 209.378088][ T398] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 209.392458][ T398] usb 5-1: string descriptor 0 read error: -22 [ 209.398887][ T398] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 209.409343][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.575312][ T4700] overlayfs: failed to resolve 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0': -36 [ 209.706432][ T3718] ------------[ cut here ]------------ [ 209.712131][ T3718] WARNING: CPU: 0 PID: 3718 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 209.722853][ T3718] Modules linked in: [ 209.726852][ T3718] CPU: 0 UID: 0 PID: 3718 Comm: kworker/u8:9 Not tainted syzkaller #0 4609c3d09534f6cc029e796bf5efdb893db8a517 [ 209.738654][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.748785][ T3718] Workqueue: iou_exit io_ring_exit_work [ 209.754420][ T3718] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 209.760854][ T3718] Code: 5d e9 95 21 4f 02 cc e8 8f 4b 32 fe 0f 0b eb e3 e8 86 4b 32 fe 0f 0b eb da e8 7d 4b 32 fe 0f 0b e9 4d fe ff ff e8 71 4b 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 209.780541][ T3718] RSP: 0018:ffffc90006967990 EFLAGS: 00010293 [ 209.786672][ T3718] RAX: ffffffff8355712f RBX: 1ffff11023c061bd RCX: ffff88811a151300 [ 209.794729][ T3718] RDX: 0000000000000000 RSI: 000000000000039c RDI: 00000000000003c9 [ 209.802792][ T3718] RBP: ffffc900069679e0 R08: 0000000000000003 R09: 0000000000000004 [ 209.810843][ T3718] R10: 0000000000000000 R11: ffffffff83556110 R12: ffff888120cb4c00 [ 209.818894][ T3718] R13: ffff88811e030dc0 R14: ffff888137c40000 R15: ffff888137c40010 [ 209.827036][ T3718] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 209.836039][ T3718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.842697][ T3718] CR2: 00007fe100000001 CR3: 0000000133b02000 CR4: 00000000003526b0 [ 209.850956][ T3718] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 209.859038][ T3718] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 209.867115][ T3718] Call Trace: [ 209.870444][ T3718] [ 209.873424][ T3718] ? _raw_spin_unlock+0x45/0x60 [ 209.878350][ T3718] ublk_ch_uring_cmd+0x6f/0xa0 [ 209.883166][ T3718] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 209.889273][ T3718] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 209.895238][ T3718] ? io_uring_cancel_generic+0x6eb/0x6eb [ 209.900957][ T3718] ? __cfi___switch_to+0x10/0x10 [ 209.905958][ T3718] ? kthread_data+0x54/0xc0 [ 209.910560][ T3718] io_ring_exit_work+0x23c/0x83b [ 209.915570][ T3718] ? _raw_spin_unlock+0x45/0x60 [ 209.920514][ T3718] ? __cfi_io_ring_exit_work+0x10/0x10 [ 209.926084][ T3718] process_scheduled_works+0x7d4/0x1020 [ 209.931729][ T3718] worker_thread+0xc51/0x1370 [ 209.936460][ T3718] kthread+0x2c9/0x370 [ 209.940600][ T3718] ? __cfi_worker_thread+0x10/0x10 [ 209.945762][ T3718] ? __cfi_kthread+0x10/0x10 [ 209.950447][ T3718] ret_from_fork+0x67/0xa0 [ 209.954945][ T3718] ? __cfi_kthread+0x10/0x10 [ 209.959638][ T3718] ret_from_fork_asm+0x1a/0x30 [ 209.964470][ T3718] [ 209.967562][ T3718] ---[ end trace 0000000000000000 ]--- [ 211.873808][ T398] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 211.884297][ T398] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 211.907950][ T398] usb 5-1: USB disconnect, device number 61