last executing test programs: 6.946204336s ago: executing program 1 (id=621): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x2}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) syz_usb_connect$uac1(0x6, 0xe6, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x15b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x6, 0x40, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x3c}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x1, 0x3], 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x400, 0x4, 0x1, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x405, 0x1, 0x5, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x0, 0x2, "63f5e613"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x7, "77acb8f1a6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x7, 0x0, "183ec680"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe3, 0x3, 0xa, 0x4, "acc3cc9fe4e05b59"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xd5, 0x5, 0x0, 0xfd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x78, 0x7, 0xae, 0x1c, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xfb13, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x8, 0x4d, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ef, 0x4, 0x9, 0x4, {0x7, 0x25, 0x1, 0x0, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x8, 0x84, {0x7, 0x25, 0x1, 0x4, 0x8, 0x400}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x7, 0x4, 0x1, 0x20, 0x2}, 0x50, &(0x7f0000000300)={0x5, 0xf, 0x50, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x4, 0x9, 0x10, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x6, 0xf, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x12, 0xf0f, 0xb, [0xf0, 0x3fcf, 0xc00f, 0xff00ff, 0xc0ff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d13c989ed7b38714b7e7779182b5e5b6"}]}, 0x6, [{0xf6, &(0x7f0000000200)=@string={0xf6, 0x3, "e4f3aac603b939de78d99db63113210aa1d770f28aaa7ec2ac49ef66a81add47ab3be922193eebc2897d256a88a5be4579d81f9ece1174d81f6f5b6e9135c2cf3ea4150d07ec38667e538bd6950c00a14efd61442c7c89bfa22d1810140da81dab8dd3f68c60aab6b9f33f6ceb3f0bbb8c971a5d5dd634ecb9771b8c3326fc3d4620254fb5b0718473e6c51f98c418b2a47ae1de0424d1b6d0c15421917df4b2b559b393f0ac736812835f57909774898ca4899bd9956296122f292b5c50f68561b1164e06d764405572e3c93d4a1fad58de5bc2c36445c19b0421ccbbc077bb68e01d12b73d13172e18385413058be5563a72df"}}, {0xe8, &(0x7f00000007c0)=@string={0xe8, 0x3, "12621cd362aac529663079d5d4819474d80414ce070f1ab09fa06d93a29e193ad2cdc6b249f50c380309c88414737104ef9d009a994d9336fcd7e8fcda35968eb8b3efdddb78d3ebdb253231a2625ba9ad9c7784f68cdffe847d09dc36ff101c90ad9ad5a894e30c2d54bac935368813b0f0c0640b0932d9db494cdeaf7d268949ea680b0bfd82fc628c82fac96bf66fbed35ee8cd76fcad5808cd1111ea929b23d5da064f3550c1f69cffd16f0670a87876eebfc55557ddee200602da190105739d8a9f12c4a9ed16793404d18f8ed92c229946c70275e95a77b4ff10ef39bd08183085480d"}}, {0x24, &(0x7f0000000400)=@string={0x24, 0x3, "cd88d6faa6ca81d2f7d67f5a254270b7fd86dda6e63e03186e9460188279dbd4d73e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x427}}, {0xdf, &(0x7f0000000540)=@string={0xdf, 0x3, "2c33b063dc48fbe51eec8ef4e2c7ddf9efa6f64a751dfec6aa120c291ca8fb89b5bec45916cfc30f7a2a10bac832fb3228cc861c166fc84fe48abeb51954b25ff54c8db58f00e7a2c29cc4b3574711d27799f8062070d2a84a80c3161578e9b947dfadf7b235bb7c1fdf6548f8e2d20217846329265bb80fab622853ce957aa867eb3141404243160d8de5d2c0ede5571cea3d8fe0508ea8a92ac1136dce89db988ba8ff72bd04d1eda5f2777f678370ed032eaf2085a7d5fb00fe3556ccb8e95a01b93fc05d27a9368af9ce32807991768e9eb03c570f5e0cbec8a10a"}}, {0xd4, &(0x7f0000000640)=@string={0xd4, 0x3, "494a7f2d50dc85cea6a3aea741ae47d3eeabb03c37597a2fb08bd7a6e377da09724861ca0f7d44a5dee4fe1d2d3fdf8883a6e83ef9123424c4f2343839c1c32cf015f7cdfb5a896d7751eab8ac1c55717e3b157eafe122316724d1f64a34873cd212016daa3a2f4dad7fe89766157cc9ae377ab967181b98714548cc1f16e745a10720d00f7216de2361304f4ab780f929a304eb39c444a4f3d8b9fcd17003b11db0bd5d5790f8a83d5ee95d4e2e9745c6a9142b1e69483f2f472e6a9a81cfa0e0c96edfd40bb18661c124895e36756d343d"}}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.285380558s ago: executing program 0 (id=627): syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="12a8989e6b9a0c0dee2710d901500b02000902710002010520040904000001020d0000052406080105240006000d240f010600000002000600061a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d000000"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f00000000c0)=ANY=[@ANYBLOB="12150000772aed408680070bb96c010203010902e3b0897cc58a910000097f000d240f0104000000080000000006241a03000a052410eda5943ea226b72f2eb98c0c000e6e0101070424020a1524120009a317a88b045e4f01a607c1ffcb80000000000000003a92a2010a240109000102010205240401050c2402"], 0x0) 3.906523801s ago: executing program 3 (id=640): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00", @ANYRES32], 0x1c}], 0x1}, 0x4040000) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0xe, 0x10040, 0x0) (async, rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020309091600000028bd7000ffdbdf250d00180004055f0015a655cd982aeab0c988cab38a87829f75cb66581c9423703a3c9aea1a8cf25c70cafb48d75e3b0bf8f3d8e79ad6ae65ef2ae5d367053794f91937a4a1ad3f03198163f0ea570999bbc63b7493af957f4dd79afd75101fc55433012100070019000000000002004e24ffffffff00000000000000000a004e2200000005fc01000000000000000000000000000004000000000000001b2f89dd6931"], 0xb0}}, 0x20000810) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0x2, 0x2, {0x2, 0x7}}, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0x1b0, {0x5, 0xf, 0x1b0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "788687286856f9446874fefc9caec877"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9bce830e196a216f233a39bfdcd1332c"}, @generic={0xa5, 0x10, 0x1, "2355180992fab9eb63cba7a537cb31477b00086aaa7644904cb29f7d6e1d870bd7e9b3d729903a202a7bdbd8098bd19f00506c63874b36b7435214d7ba4024f720c4c683178792d95e88423d8057cae9bd48c53d4b8da39a950320164890e32b37aa1d70c853506dea7b20935391147ec5dcd1e3d435871fabe5cc1da0c3b82d325c906cf245378d67191bc0fb49cf4525204e0891da34b6c40850f9dd0b1f669a23"}, @generic={0xb6, 0x10, 0x2, "2952e7a8efd892594a87ce9e3f9256c5b5c36d127f3de16f166fc853394611694e715d5d1522728977ab4590cfab12090b7411c9c0452b56e2f3cbe4dd6b8ac9c3d5ce265064f97a9978b97360e5455a5ebf3c276203b282af9b2d3e0c556dc6f2a47599514f06756b6390dde8622802a68437408f070d6f75e37b84823b90bc8ae8ea6cb698340b45dd5181d5b43f47a753273b1ffd8af541f5a9aad1077d7ddf2207ab3974e9aba0883d4e5c28738a7cd413"}, @ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x5, 0xf00, 0xfffe, [0x8130, 0xff01e0]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "ded46b9fec1321162729252cf1907f82"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x1, 0x2, "2cc961c7", "cab1172a"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x2, 0x24, 0x0, 0xe1, 0x8, 0x8}}}, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x20, 0x14, 0x8d, "3783fe87179d9ebe2179f61b8af41b341fc03d67807a83e3d488fe67f8e6f01ca4eb876fe40741251779287ad0a3078d9498dd3975c9eab08fb82696b3e318f09d01f153db417182c355c1be49aa4338c3b41ec7dcd79cf4c6c95d3d185b5cca02b53283f739bff41b2fb49f4470f4a75304613912ee4b086d12d6e9879fa8c1a89aee86d3581526f319f85254"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x2, 0x4, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "6ef0"}, 0x0, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x21}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) 3.735205643s ago: executing program 1 (id=642): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x101102, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa097) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x88168000) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x701, 0x10000, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb8, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4044850) 3.6815668s ago: executing program 1 (id=643): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8020000110001002cbd70000200000017000000e402e380e0022280dc022b80d7021c"], 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140e5ff00220f00090581d7"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x214683, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x21}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4008040) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xe1, 0x0, 0x8}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f20c06635040000000f22c066b8000000000f23c80f21f86635040090000f23f866b9800000c00f326635000800000f30660f6dcd0f701b1066b9800000c00f326635002000000f3066b9800000c00f326635010000000f30670fc72b0f326635004000000f302e0f060f01cb", 0x6d}], 0x1, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) syz_usb_connect$uac2(0x4, 0xf5, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x4, 0x10, 0xb, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0xfb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf800, 0xe359047de28a558f, 0x3f, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x1, 0x201, 0x1, 0x2, 0x8, 0x5, 0xde, 0xb, 0xf}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, [0x0, 0xa, 0x0, 0x9, 0xa, 0x2]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x100, 0x87, 0x3, 0x18, 0x800, 0x4}, @extension_unit={0x9, 0x24, 0x9, 0x5, 0x3, 0xf7, "8b73"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x4, 0x4, 0x40}, @as_header={0x10, 0x24, 0x1, 0xff, 0x4, 0x1, 0x1001, 0x7f, 0x8, 0x8}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x2, 0x0, 0x1, 0xfffffd8d, 0xfe}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x8, 0xe2, 0x9, 0x6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x9, 0x6, "93"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x9, 0x40, 0xfd, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x2, 0x9, {0x8, 0x25, 0x1, 0x83, 0xc, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0xf8, 0x9, {0x8, 0x25, 0x1, 0x3, 0xc, 0x5, 0xb3}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xbf, 0x3, 0x5, 0x10, 0xe}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x21, 0x6d}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "433fee3d0852f6baa276d50b71e04db7"}, @ptm_cap={0x3}]}, 0x2, [{0xff, &(0x7f0000000180)=@string={0xff, 0x3, "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"}}, {0xcf, &(0x7f0000000300)=@string={0xcf, 0x3, "4309fb353aeb5be62aa38df5bc10ed60af02305d5c71150ca648a61f8156e6c6f4bfc6b1331c77273da55661f69a5ac3d8de3bb726d550d42a4b17c091eeb5475d0a510af023f7f0b7ec45124493b5e2343ee938f0bc346abb69a4d09a25bad112c37b7965ecd48ac93534a71f4ff39f9282e6a8a6ef41f6abadd4312bc26237d8dfb7e4d40b463a02d8aba6bfe339b8ce73d4dc0d6b388efd09e882838201c233ddb9fc3d79aad6ac3dcadc811cd2d8dc92c25deffcf052777a1f5446081a85c903c19792ca493a3642a8c24a"}}]}) 3.064402761s ago: executing program 0 (id=644): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac3(0x2, 0xaf, &(0x7f0000000100)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x499, 0x5001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x3, 0x40, 0x2, {0x8, 0xb, 0x1, 0x2, 0x1, 0x20, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x10, 0x6e1}, [@cluster_info_segment={0x6, 0x20, 0xff, 0xa7, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x66, 0x7, 0x7f, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7f, 0x9, 0x0, {0xa, 0x25, 0x25, 0xf5d6, 0x7, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0xb6, 0x8, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xd, 0x23, 0x2, 0x56}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0xac, 0x2, "54c09b5d0d39"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0xf8, 0x1, {0xa, 0x25, 0x25, 0x0, 0x3, 0x7}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x41, 0x6, 0x8, 0x2}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x104f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0xef, &(0x7f0000000280)=@string={0xef, 0x3, "105e10d36f4e36b6e527d8590e7a6a5915ba8f19a955e43086228290fe55e6dc6fc438d2023a79ac122a76ff0c612bb06f89654fa49bf99530566fa54edbb8c0220864f7e85a47550b620cfdc85732e09b582a575005e99dac3c76bfb6edd3c23440462e75e1cb02966994bfcea875408a5cc80a5d3e1b4e7df99c0055ab87c7ecc40c60e3c198906ecfd318bf69bd01d331e6225dfd10ace73c5f8dffb66f8f213d807cdccea7c434d08f6b5bec3af9df903d3ee02e93ffc928110fbd325601f54008fddc51894b8b08c5fd835ac79e887335e28303e627bd9aa0416f4f1ab8a39051d5448826299425cfbd72"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x438}}, {0x2d, &(0x7f00000003c0)=@string={0x2d, 0x3, "900e0e2bc2763059c02cad5e48c92c1fe20222560f49f3aa8c596923da7fa2a3c73d12963a649ed5b397cc"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44b}}]}) (async) readv(r2, &(0x7f00000001c0)=[{0x0, 0x2d}, {&(0x7f0000000080)=""/41, 0xd}], 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.369542304s ago: executing program 3 (id=646): socket$key(0xf, 0x3, 0x2) r0 = fsopen(0x0, 0x0) r1 = syz_usb_connect$midi(0x3, 0x63, &(0x7f0000000380)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xfa, 0xe8, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0xf8, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf8}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x40, 0x0, [], 0x62}], [{{0x9, 0x5, 0xd, 0x5, 0x400, 0x3, 0xb, 0xc, {0xc, 0x25, 0x1, 0x8, "dba036e41295713d"}}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x8, 0x1, 0x2, {0x7, 0x25, 0x1, 0x3, "231837"}}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x1, 0xd, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x1, 0x8, 0xf, 0x8, 0xf0}, 0x115, &(0x7f0000000500)={0x5, 0xf, 0x115, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "b0a73e79d27f6792531659a381bf83ec"}, @generic={0xdb, 0x10, 0x1, "b93609e798669acd51f21fb888f28dff2faea622c484d04319a9bd8b6e25524a94c0b4030881329c4de01afee4f3e3bcf2cb62518ada40efb832bc52939218d686affff18cdfe741c5c5db573b45432aa88635b16e9d6976706d86b1df2ab10e238ab4b9f32e159fb90d403f6ed89ec03db9bfc01b74c2b63ec86b468813bdad09f61a5547f928eec7697a9e6030519ba453eb85873876aa39bd93470cb1f7e3a75179118a19da538150dd02cd2180550c799004b32b87c800cafb312f379da72df16a79bdbe49b4b702b900a29acaba0f09bde2c47e2778"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x27, 0xe, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b68d617de1c08f04832f36cd9b463721"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41d}}, {0x6c, &(0x7f00000006c0)=@string={0x6c, 0x3, "f9f486506d4d9eaf670e5c365d2932f2bbc5a7b2aaf668bbbb7f99fbde0b8a7ddef2e0281e14ed9e849d2efa84aac8363fb371dcc9fb1f4b7955007c016a9de5072e73bfff8437c52ef9333c3282225ff98256c154805f36325fa1bfce4052cbe1b634fd5da223cdd861"}}, {0xe2, &(0x7f0000000740)=@string={0xe2, 0x3, "e4ee8f7e9d6969219f8712144bef20626e791d7277fa87484664fb0c217904df16034ea21938e72eb0b2fa8da1906bcd26bef0c4112ba15083e4c4adbff8508d5f76316401f3de00bff242bb6671ef17f5b9c651bf3dd46d49632cea73db9790cb725dbcbdc541f73140e25dd16b22e73f23584fe9490745f34510234525e067a191a88a990a1d71b42b6e87ad37fad7aedf7dd29cc915d65f99201d694099098d3d82e7bce1f7416b3e32c57b0dfab29138409cca5859e8703a3a2312ec1138ae0c3c61dfea979a666cec8045e8318d91609cda80c3cee9b4a73d0655302aa8"}}, {0x99, &(0x7f0000000880)=@string={0x99, 0x3, "728d68bd10a5ea8144c7fce7862be12b1fa3a26f7e4429151c938b3091dda521a5ed3019f4b660f03751c546f670cd77c0622e4479dacc563ef3765513dc1686e8e8680efa258eac1b4503b99809326341d346286e1f8b994edf4a2a8d4232b37b4ff40c960cf8825bc8ef6be3a76f5a52c85c589f1f2394570bc4db9d7cf23cfcf9fa68b4561524cd1a2d11a1568c380f3e161ff9fe62"}}]}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000a80)={0x14, &(0x7f00000009c0)={0x0, 0x2, 0x68, {0x68, 0x3, "72164ae15f50f23e510cd77257c63942bd40b7b9735ea54aa4d6dd166097ce04f37b5daa12222f3abb9a915ce615b95bf44ef9e98740f67fbbf8a65ffeeaa5daa04e8f196f9b40e40e216535ada30ec557c24cd8d8937d7211f7627a721c5f192b57bb968656"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x144a}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x40, 0x0, 0xc3, "ae70cf864ac4011db779548eeabcfb8e7c36233e538a5d4e90f230cdd3405e133a1a0b8a45e86d9fd3291ec1e94ec72618928b88259654a55ea17e2c581c1f9cf66ef967b0d8f217da6e6ec399a2cdd35973260cc4bceafbe0b2346e83776d3355baee6937844240ccb063369dd2fa4315eff8a671f76dc7d1f48c03f41eab0b72ddb6600bb93997e83cd03ba61a0076c113c351e51d52ccc9b5122cab32d435717fc51de21f112041434a0aa99c8347cf08cedff57bb2cbd13f44e7257edc8d1d42d6"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000c40)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000c80)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000cc0)={0xc0, 0xa2, 0x2f, "bf2e702c56ab304687e756fc9a90869fb334e4f8196d12d21f2146459f3e3053b25482671bdebbe138b10a45655ed7"}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xfffffffffd110f4f, 0xd, 0x285, 0xf7b, 0x2, 0x0, 0x0, 0x1, 0xfffb}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = dup(0xffffffffffffffff) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x80000021, 0x0, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x29) io_setup(0x8, &(0x7f0000004200)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 2.303068309s ago: executing program 1 (id=647): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000140)={0x200000000, r0, 'id0\x00'}) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000340), 0x2800000, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) getdents64(r4, &(0x7f0000000200)=""/131, 0x83) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x18, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) socket$unix(0x1, 0x1, 0x0) 2.281369754s ago: executing program 1 (id=648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x8c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r1, &(0x7f0000000040), r2, 0x0, 0x807, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2, 0x4) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000000c0)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x590f, 0x3, 0x6, "0500d0", 0x4, [0x2, 0xffffffff, 0x402, 0x10000, 0x7fff, 0x0, 0x3]}}) r3 = fsopen(&(0x7f0000000340)='devpts\x00', 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)=')#\x00', &(0x7f0000000240)='#]//^&\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='openpromfs\x00', 0x11020ac, 0x0) 2.224130341s ago: executing program 1 (id=650): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001000010000000000fedbdf25070000001300000004004e8008001a80040002006376ea6673f27e86b4f4147fe0d732586eadf1f34869341112f27ba22c0106"], 0x24}], 0x1, 0x0, 0x0, 0x24040041}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001000010000000000fedbdf25070000001300000004004e8008001a80040002006376ea6673f27e86b4f4147fe0d732586eadf1f34869341112f27ba22c0106"], 0x24}], 0x1, 0x0, 0x0, 0x24040041}, 0x0) syz_usb_connect(0x5, 0x11a8, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x25, 0xc4, 0x66, 0x40, 0xaf0, 0x7251, 0x8f72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1196, 0x4, 0xe0, 0x9, 0x20, 0xa, "", [{{0x9, 0x4, 0xf0, 0x8, 0x0, 0x85, 0x14, 0x93, 0x7}}, {{0x9, 0x4, 0xf9, 0x2b, 0xf, 0xe8, 0x54, 0x1b, 0x10, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "be3957d5c9e7"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xdc1, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x22}, [@acm={0x4, 0x24, 0x2, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x3, 0x21}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @country_functional={0x6, 0x24, 0x7, 0xc, 0x9a7}, @mdlm_detail={0xed, 0x24, 0x13, 0x8, "23555c4852006a67a0194552c8a1b3aebf6a6b9b794315c6f5a75063c59c4e73fb143ac306d1169fe43a715a6e4b073007902aa629797cd739cb23e6c8aa1f1b94708f1646c0fb5d04f4d65b4b24bcd19d17a1e30914a600d88d34e66a32e3483611dba3bf41fd42f162b2f2e860389db6d75dcf1b6a5cb5dc125eadb6bd886a6d3842f34dd03c65860d68ea14b3330f65536cc2fa41ebb5ef75aa088c78919d1ef348441f5ee024af89fc414958393699c9a5773ff1abda7f6c3ef3e8f522b804f97b3efabc8aa519f1ee7a91ec057d29a167427c435b99664d37ec41563e8476fe55974d4e46cdc8"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "91a409179774"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xff, 0x7}, {0x6, 0x24, 0x1a, 0xd5a2}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xfff9}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x6000, 0x9, 0xf8, 0x8, 0x1, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x4, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x81, 0x7, 0x9}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x7, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x200}]}}, {{0x9, 0x5, 0x3, 0xb, 0x8, 0xe, 0x1, 0x8, [@generic={0xf2, 0x5, "10b06622b8c5f84d00b59b31624e0f7d7f5b03470cebbde7d79a66d7b412fb568020abe1c94e57304406006fc78edfb4fa8f4a14ca52e2890900c18b43e17aed23db29285be8beb59ab5ab2191da0675d0fb12bfcfc2a92f102458aa7b86662c9b07816cfe246df57743024084020ebd04caf4b87310ccb96d2f458b84d6d0f5eb1aa46ce65b1baf84cd7df32006cda7de82ec62adf12da565daa83ca5bfe943c47c46630995ec934fe5612d398eab48abe3b86fcbd3b3de26d88b225a06ab2b09de8c93102a6502af81a923aef62192c14b4466977a33598f639053a32610b93e5dc3bbf748c1cb4ab43ade0f9ce31e"}, @generic={0x31, 0x1, "87c78fa6816378eef3ad8985122b96dc95bd59ed7c86b389b444c0cb762487f28fec6a8ba70d569cf510f8213a552f"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0xa4, 0x5, 0x3, [@generic={0xe0, 0xc, "315c0cd9285853c9c32a3af8f64e116ec8c747cb0f8088bd2559f77e56f1208e1b9759bd40119803736ecdb2704ccb1f697dbb90b64afdc922e762406eb671fac16ee762c9ac0f29e4fc1d38c6b695ae792ca92eb68a446143a4822b2541c9952f5c340273981051c09bf9cd722f92800738ac876bfe2a98123bbfa0d790bec174fed650536f8b666daec91801886a9e8c33f0d0648fcaf8c49cf73bd66200d9214e3f8da6521ee383c6908d92b4562fe9fcbea52a4c492bc3ae2f807056726ce4c3365ff14c24d5ce1a1c28b57679b4c32342fb7dc3991ac69f45820a02"}, @generic={0x4e, 0xe, "643f465de7d63364a80796122e4715f1fa475c8c3070eb5fe64b133ba6e6c1f630f19d0b11d0ad03c4a3f2326dbd3f4a1119c1102bf09328b1607e4646a3cf568c737b0c3091e42da5328971"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x9, 0xea, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x40, 0x33, 0x4}}, {{0x9, 0x5, 0x87, 0x10, 0x3ff, 0x7, 0x6b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x6}]}}, {{0x9, 0x5, 0xd, 0x3, 0x608, 0x6, 0xa9, 0x3, [@generic={0x67, 0x21, "2fa9135da683c5b0582fda35edac0112a89c11127445eab4d440e73300fc1a2913f7ff91e04ac3012e537047085c887aa1cf2a9a804b577be6b17d0ac135a1b4a0175a1ecfbfb71a3c579bf191e1a35953e850fb8f5686ce20d2d1aecd49acf1c5a4b434bb"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x0, 0x9, 0x2, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xe, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x7, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xdf, 0x5}, @generic={0x8f, 0x22, "5b060b1337c7d1043dff81f8197173929f3a5068425d42a85afe8d305fc3aa49a9834e72fec40dfa6120a0951dd777a4a25645a44f436f9a776474162588d5e636aa1ab7d3c6d88832b64e0031d73f8b2f874df9022568b51536c4cbf629d5dc62b0039a7fce5581ad898bc31c7666f2599e87ce7f685d1c3fc7042df97ddb4c1325b6d255d3567e9f8a63b13c"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3df, 0x6, 0x7, 0x2f, [@generic={0xe3, 0x4, "59a3a4fbd2d37a7138df959b59129abaa33d570635f3154f18f7d0fba5931534ec64eb1919d36207b43b5916cebb59ff343812c397f6018e2810ad60e59060de55e0db5e6de7309b80c1d0aee3e6b539e2105bc70189b1173f1914d4fa2de3c01108ddace98889088efa3e4d1d8eea4ab898a54e3e657f51b61500eb16d3da104da6fde458a84142752f6a14259a5329b748d02a73a8058f4908c03a997731b70cec3cac32e9e727409ac13eecda3cf5fc6ac4c81052e8d46242e3e442d083d51dd19420a4f007c18439071ad7e444cdbdd2c5639a317b646d4486910cee92d53b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x61, 0x5, 0xea}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xa3, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x83, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x1, 0x77, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x7}, @generic={0xc, 0x4, "63fafcb46d12ae103a33"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xac, 0xe9, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0xfff9}]}}]}}, {{0x9, 0x4, 0xd6, 0x9, 0xf, 0xff, 0x2, 0x3a, 0x80, [], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0xd, 0xc1, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xf, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x5, 0x1, 0x52}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0xd6, 0x5, [@generic={0xab, 0x5, "1f549ce8bb7d74087e48be06e6b3ecba8eea6ed03efa37d0fbe768e0062681ce000f7cce5fbc214e072709eec4a47c36fe0362c6a86ccf3c96e04fb7c3e389db7022ffaf12f913ce38618a026c25a3ada389267a8cd04325af313ab5ef5fc63916b1f037a9cc181cb6f6faae6adfedd4287b08edf2abb28124c0567ccc4d7f4a74974714d88a098e723dade5dd9b13f113fe6bf63e10b02e3f5fb1c39b4c2d3660e8dfb5ba93780188"}, @generic={0x31, 0x0, "0a5b3638a43062f366e39113bd9128615c3f0b1cfe9f5d0109271e41d46c4451a618e9cc0dc6cd76ce45f48ff78e27"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x6, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x9, 0x80, 0x80, [@generic={0x36, 0x31, "3be2bf332cac844be95b86e77fb1d19965fb2fe7fb232c4a5974bc9c11ada4a4bc7b2957e960a0f669cb2e9ff822e6951f9533eb"}]}}, {{0x9, 0x5, 0x5, 0x3, 0xa2b8da7a3a02ab25, 0x40, 0x98, 0xb, [@generic={0x52, 0x5, "323d0e08a43fdc0b22dea89c54fd748bf6d4e3a992a09c85c8a78b8351ef359e144aaba36592fd652a9173a8b3301587259e66224d74ed4c9be6925e2418d84b6c82caf7f55faa388e5e10b703bffd48"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x7, 0x8, 0x9, [@generic={0x101, 0x2, "d9da9ad783732547206c0a2d9823024bc848726fb90a866397aa2fbffd53989c99e225668e7eb6392e04ce431bfda11c8ee24cdbeb727aec233c49ca8d7e37416e1f8a5f436108f232933838a4ea705550f0cbd036f6164fdb2953cc2774cb19e00d60c60a825160d82444739fc93102bfcb52645c2b143a02e63f3aa35365dceb8c9dbbb32c1dc09161bd4928875e3c7d66f53e6e5a40a87d5baf3e059ce32d45b27158f9c118d9560734ea49b471dcd19c3e521ea988fe07509e6e7f12ac91c07cf09b8bd7673e59864f43069a240a5d605d251c8cfb9755fa71450eab556280b188d8abc0aa1dd9f10c8707a311c2c693ae3ba0f555901287901899bdcb"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x7, 0x6, 0x5}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x0, 0xf4, 0x5, [@generic={0xa7, 0x22, "c5c1ffa8730bd79c0fff823a833cb9a20ca8d2bce49902828523070721cb91cf50c1fc054fafc35b9be0b3697efc573d6a993aec52ae386600a181d835aa9efb6e1bc4898cf2b4064558e816bd9e1d48d9c9e8d6c7807ae758ca44dd4b19d00f07100d16ccf06e565563d5c8b523faa1ad91d2ea6fec8251aa78794d70ff18e8ac94c266bbd38609f4ab59b81881b25b4e26366861e358c1665dd7ff0032181c9efd2f59a9"}, @generic={0x38, 0x4, "f6774bb95e06bf8e93fa8a694772d765987edb86ba55672f34044780d8e102bc2f2ce4696f9a40fd7d8b854b8b59a545c8a23019843a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xc5, 0x9, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}, @generic={0x3c, 0xd, "3c3dd3fbae251cb6da94e5836c93670d27c9a6901134baee941a19096f7508b94abf328be2287c4ff0da037b6052e12dee9f2ea6501b50a73f18"}]}}, {{0x9, 0x5, 0x6, 0xe, 0x10, 0x2, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x2, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x80}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x7, 0x0, 0x4, [@generic={0x8d, 0x23, "99a981a724b0c14b9d958afde6e1f00aab61b25c78c66e869ef847896eb76551d68bfa551f5de4c47db8132e2f1a2594bf87fcb2e2b3033c2ab7cf18c894852b7d3a3075dd0855244c365136218d25c39270e47fc11627e77f4a4bbe472cb3709c64d894ba4d0f7ef3fe0d6d0017a5701c3c14742e76a3186d99ed29fe5c03cd0c388d67a6e2927f47a7bf"}, @generic={0x90, 0x5, "3765b0f4ec07801e44f22b0d4f371003aee120117a559efd6840c6d40aaf1938c08665323015066eb8d7089978bb086d40ed4ce980639ad9ff8bdd0dc0a5da97f9847bbe12674056d2389f414001229890ffac924d6e3449bb509ca412db006900c46ad08ea0cd34d60f0c7f874214e1445beca17e9da6ec1ba4ea9dd41e1cd4ce43c31f9485dbd37b2d005fa0f4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0x99, 0xeb, [@generic={0x62, 0x4, "dbb444cad1fc3c2d188cf7f63c90eac79d759cf323f1efb22ed456f97a937c763994ec7852472924c8352374820f81c997341960570e37f3c739363cd96e0bd0d15841f51db5f13cc38774dcf306db56ccd20fd7809d1b837623109e243463c0"}, @generic={0x4a, 0x24, "ed9953658df5ca9347863721d7f39e43e9fab45a9d17863e1933fc8b15ea64312e5454ce28ce8c7f9af9d26d8b81289bcdd06d258364e4908a2a66da9ac9cb3833fcd63ad0cbb280"}]}}]}}, {{0x9, 0x4, 0xd, 0x7, 0xd, 0xff, 0x8f, 0xe4, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a7d2a4"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x401, 0x0, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x3, 0x34, 0x4d, 0xb}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfd, 0x3, 0x8, 0x2, '<'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x8, "5b40fd8a6c5d6793ce"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x6, 0x6, "f231aba492"}]}], [{{0x9, 0x5, 0xd, 0x10, 0x8, 0xfb, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x3, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x101}, @generic={0x5c, 0xf, "861ae1077355fd274e59a46e15bc1970414b5f94c0155ea72decc754e0f1442ce8b435391b649108e5adbe193836a0b8459782f375c782be39d6c46bf5228f6d8f61bf420068588d2f103b6ff079e1f7bb85451254d24e8e37e4"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x7, 0x5f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xf2d}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x6, 0x4, 0x66, [@generic={0x6d, 0xc, "098be4b291cdb8e16aadffad4d57c1cd937767cf462f07bab035e2ab48f7caf7615c09741550725b5adefe42521e15ca01d9eef4b33605b95a585423c4b5c3a98c7ae78324b20c7638db89d470149561116d8466688da0f92aa67da26f9fb363e8e3ea27c8e69ac26b736d"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x9, 0x6a, 0x3, [@generic={0x2e, 0x31, "bac284811b97b73fb15820b49b48d81a82b016baf3f1eb3e6b795e39bd93c24df673c95f80ec6b25e114f176"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xf3, 0x9, 0x6d}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x9, 0x0, 0x3c, [@generic={0xa2, 0x2, "c92de8d4f7686ad2756dfb99d92b381f2091f96332461fca115bee4be22e2bfb0a3632886cc771e412bb6856cafd1b8216556746fb16ee278c98b9c74f93693db3c1d14ab0e796e2aaf5ee4b3c3f0c76747f23a4c6ab3ef161a75f01ce9ebd0fe15a2c2c1f20ea992bedf88a0e0a91062c688a4bc0dba42a5068cce26148ead22247317a20d0c099d68760bd93dc4a366f611543992901525bb9818410a9b7ea"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xff, 0x4, 0xff}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x74, 0xd0, [@generic={0x33, 0x10, "54ea247be84e3ecf08c076ea0a2bfc86d66d8d7dd9679918eddcf99216410d007a1fa04b2fe0dd8846b9768b2fa5516aa2"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0x6}]}}, {{0x9, 0x5, 0xa, 0x2, 0x30, 0x8, 0xa, 0x5, [@generic={0xf8, 0x1d, "7c109d8fc3cadd4645cbf129054cdb8631593e9faffe21cf621524de288a34e6cf55cc4573e4c3816f679b7b41b9fca71abaa26ca286e2ad6321d8c6d67d37337b2915bc9a3c2466205632ba931422b9d1048b26cbce16e521163c503b6861fff7a1486bd19faf418113cb800b8c550737a31d6efd71962c7c7bfd141ee364f8775aeebeb1a16ed20d37139433bd50a73c82efadd0298f9defbf8a33132356e1ad0bd81731275951b8d730ddfb163af14fccc63b6d2ae70e60a5591203ad32e28f1017dfe033bce4dcc423d4552bdc2b41926f7dd137acc88b126054fe2cd1ad8050db0e4705a94c60f357dd9725a522e51fac1d750e"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x6, 0x69, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x3ff, 0xf7, 0x9, 0x10, [@generic={0x42, 0x22, "977d678781e991cd35635badbad3873f340a574d30ac61f3863be0d3de164f9e4446980334b91031761f6e354b1d44a774a976577aa98fdea92e543a3855da92"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0xb, 0x0, [@generic={0xf6, 0x31, "655d4725f584fc61c33108a7e2e7a78a7c4fe5fbb8b564e7d1a38dcc6c2d81bcd1fc392a4d160d69c24afe83d91dfc13b063f914b78efb364b56f3ba84f2666917ef49f783dd70164f576a1303433df147c67f90e3a25f6a0df7a2b4e38d65a234ba86bb54b100015f27219915eb467080bdfb70a8ca248881c85cea08d8f47fbe06e8ae41ad9fd0199b909cc4337aaa2f67ed97d5882cbd2f64c0d0feb9be0c2636631531a79cffcac7102121b14e57d7b6d6401a27dc1d216e0281ed06ff67eb4fce960c1d8d3600ef1574c27ecc7f5dcecdcbb243d555a14ffe3a88cb30297f34b6aa77453a5b4f912acecd5518e8f3f4e23f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xff}]}}]}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x15, 0xd, 0xf3, 0x40, 0x7}, 0x10, &(0x7f0000001300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x7a, 0x0, 0x10}]}, 0x8, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x443}}, {0x8e, &(0x7f0000001380)=@string={0x8e, 0x3, "524f9899d5ab3dd89e866b0b874d6937e5363ef8b47178f47990ab221be7e3397edb640891d0f11012f7975dea2321d117ada60b403e830ac9e8790f9f60e509a31895a8318af501e292a4d6d689ad95ef9d96dd30d878b12ba749ec6c01dc73639928ede5673c7814fadc8d4828a83654d60279c02a469a257c23c8dd339a7eb11ef67c02459ef0f9a37cd4"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x804}}, {0x5d, &(0x7f00000014c0)=@string={0x5d, 0x3, "4b70b2bdae3874ec152b0a5f80a82d39c0cbbae115bca53582267a11309bd55bcac03b7c7fb140f22bcca0473833372f0ab9ffb9443a53c154c4ad27a0867fe3190fa7e66beccf69b2fc062b773d8e0a3ab8ce61710ce22c3a15e4"}}, {0x3b, &(0x7f0000001540)=@string={0x3b, 0x3, "3aded6bbcebe8f894192fe7a3a673e59b4c3413cbb6787e2cd2f1b49b4d5c3769a51ad75d67e057744551a54e49ea3c4cfca709f20101e8f4d"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x2401}}, {0xe4, &(0x7f00000015c0)=@string={0xe4, 0x3, "872d6406b0e74d2f516a416c8968bdfd23d79b91dfcca2a0b3ab4067724de01099ccfdcac7ae00dee9d7adac3c00953170c05f50fb98e41513c4a49d69495985abaeb94f01446d77429e92cb5e21a07d1809454b9952bb7e2fa46bea279ab5d7cc4788a7e57d7f3d5150c34d7bd33ce3e62d6d2a968c7144bbcf3a58088d20d3c908b08774f9e9ca53cd9a66822ead84978d70a402509106cd4dc728a1536f00832d8e6fba1b2804313a5c451f7f4336cb7958cc1fd7435a7f1e9965ab2b7bdd9039b5f5988cbc4d93a8b3d2edd4f1e506ae352ef080309bd7160da7501b7a173335"}}]}) 1.498172658s ago: executing program 2 (id=653): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x7, 0x3437, 0x3, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x503c, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getdents(r0, &(0x7f0000000000)=""/117, 0x75) getdents64(r0, 0x0, 0x0) 1.364726748s ago: executing program 2 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead9591", 0x19, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.185776037s ago: executing program 0 (id=655): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f0000000200)={&(0x7f0000000140)="4b8d30fc7244917b0fb4d0569c835d139c627eaff65b863e5b047247e68a25e9d72cfa330bde80434702db", 0x2b, &(0x7f00000001c0)=""/45, 0x2d}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5da8", 0x2}], 0x1, 0xfffffffc, 0x4) close(0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x5, 0xb29b, 0x2000, 0xffffffffffffffff, 0x1000064c5, 0x8000000000000001}, {0xed4, 0xfffffffd, 0xfffffffffffffffd, 0x1ff, 0x7, 0x4}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_open_dev$hiddev(&(0x7f0000000240), 0x746, 0x20c000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fc5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="f30f09f3a50fae4170660f6a1a3e3674ae0f01c30f01d8ba6100b0e8ee0f89ee3c0f07", 0x23}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 942.131332ms ago: executing program 0 (id=656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000010}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x430, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "3ce1e07f82a8a9700d8da40486bbd2a5e2bc2e9de85289f0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x144, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5dd1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf67}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f9f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x4008804}, 0x40050) getsockopt$MRT6(r3, 0x29, 0x1e, 0x0, &(0x7f0000000200)) (async) getsockopt$MRT6(r3, 0x29, 0x1e, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0x0) (async) sendmsg$netlink(r7, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES16=r6, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 936.084521ms ago: executing program 0 (id=657): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x8601, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xa) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x20240000, 0x1, 0x2, 0x7, 0xa15, 0x0, 0x0, 0x80}}, 0x50) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x1) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async, rerun: 32) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000080)={0x2000, 0x1a000}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 32) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (rerun: 32) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) readv(r6, &(0x7f0000000d80)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1) (async, rerun: 64) r7 = socket(0x2, 0x3, 0xff) (rerun: 64) setsockopt$inet_int(r7, 0x0, 0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) (async) sendmmsg$inet(r7, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 32) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x1080, &(0x7f0000000200)=ANY=[@ANYBLOB="6e725f696e6f6465733d652c00205c429b7827e36fad4c7ed8dd8cf8c76a7024c5df8750258b113a85e8784f"]) (async, rerun: 64) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) (async, rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) splice(r1, 0x0, r7, &(0x7f0000000240)=0x2, 0x500, 0xc) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)) 935.590641ms ago: executing program 0 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x0, 0x134) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080)=ANY=[], 0xa) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e000000"], 0xffdd) read$char_usb(r3, &(0x7f0000000100)=""/177, 0x39) write$cgroup_int(r3, &(0x7f00000001c0)=0x9, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') lseek(r7, 0xffffffffffff0000, 0x0) read$FUSE(r7, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x50, 0x0, 0xfff, {0x7, 0x2d, 0xbf61, 0x0, 0x4, 0x7, 0x3, 0x81, 0x0, 0x0, 0x100, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x4, 0xc, 0x6, 0x0, 0x1, 0x8, 0x23, 0x8, 0x2, 0x7, 0x4, 0xc7, 0x0, 0x10001, 0x109, 0x3d, 0x4, 0x5, 0x7e, '\x00', 0x2, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x94) write$P9_RREAD(r3, &(0x7f0000000280)=ANY=[@ANYRES8=r6], 0x22) r8 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0) r10 = syz_open_dev$loop(&(0x7f00000002c0), 0x9, 0x2) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x4) 821.902445ms ago: executing program 3 (id=659): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x4, 0x5, 0x0, 0x5, 0x17, "012552335697fb19"}) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)={0x2c, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1c, 0xce, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @str='cmdline\x00'}, @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xe}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) 804.332511ms ago: executing program 3 (id=660): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x258083, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x109, 0x7, 0xb8f8, 0x3, 0xd2, "34b96ff9ea14e64a6eddb3690e829d941dcb3b", 0x6, 0x7}) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x6, 0x200002) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000140)) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4020) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x4000, 0xc1) mkdirat(r4, &(0x7f0000000300)='./file0\x00', 0x10) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000740)={0xf1, 0x19, &(0x7f0000000340)}) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000780)={0x1f, @none, 0x7}, 0xa) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000900)={0x90000003}) (async) linkat(r4, &(0x7f0000000940)='./file0\x00', r4, &(0x7f0000000980)='./file0\x00', 0x1000) (async) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000009c0), 0xfffffffffffffffd, 0x0, 0x1) (async) mkdirat(r4, &(0x7f0000000a00)='./file0\x00', 0x108) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) mount$bind(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x8002, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x24500, 0x30) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000c00)={0x7, r5, 'id0\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000c80), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xff, 0x0, 0xf, {@mac=@random="1010a33a22b7", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0xfd, 0x0, 0x1000, 0x78, 0xd, 'batadv0\x00', 'wg0\x00', {0xff}, {}, 0x0, 0xa4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3}}}, {{@arp={@remote, @rand_addr=0x64010101, 0xff, 0xff000000, 0x9, 0x3, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x1f85, 0x8, 0x76aa, 0x8001, 0x7, 0x8c19, 'bridge_slave_0\x00', 'vlan0\x00', {}, {}, 0x0, 0x201}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x9, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r9 = syz_open_dev$rtc(&(0x7f0000001100), 0x1, 0x10000) ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r6) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1810028}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r10, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x57}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) (async) epoll_create1(0x0) 749.747229ms ago: executing program 3 (id=661): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000000)=',,\x00') (async) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0) read(r0, 0x0, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, r1) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB='decodes io'], 0xf) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') (async) mprotect(&(0x7f0000c96000/0x3000)=nil, 0x3000, 0x2000002) 748.802348ms ago: executing program 3 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) syz_usb_connect$uac3(0x1, 0x13a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x3, 0x1, 0x1, 0xc0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0xd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x62, 0x62}, [@source_unit={0xc, 0x24, 0xb, 0x52, 0x1, 0x8, 0x2, 0x4}, @feature_unit={0x19, 0x24, 0x7, 0x5, 0x2, [0x6, 0x0, 0xf, 0xd, 0xc]}, @cluster_info_segment={0x6, 0x20, 0x0, 0xa8, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x1ff, 0x1, 0x7, 0x20, 0x5, 0x5, 0x7, 0x63}, @mixer_unit={0x5, 0x24, 0x5, 0x1, 0x5}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x202, 0x5, 0xaa, 0x100, 0x6, 0x1, 0x81, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x400, 0x8, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xf46e, 0x8, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x8, 0x8, 0x80, 0xd4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x59, 0x91, 0xff, 0x41, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x4, 0x0, {0xa, 0x25, 0x25, 0x0, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf, 0x5, "7646d9ce5c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x3, 0x7, "7682"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x8, 0x6, "80c83e", "c7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x8, 0xd, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf, 0x2, 0x0, {0xa, 0x25, 0x25, 0x7f, 0xff}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x3, 0x40, 0x9, 0xff, 0x7}, 0x89, &(0x7f0000000200)={0x5, 0xf, 0x89, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x5, 0x6}, @generic={0x58, 0x10, 0x4, "43d75cbbed1fb65dcf3cd08eba7257fe54fecf24dd98031d6c4866e44e335893829ab0100d6d75814f3fdb3c08ea0657e9e5e6e233d73b72adf6d9b12f4135765709ae6b549e58a5981c404481ffffad9a6754e369"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x85, 0xf3, 0x7a, 0x6, 0xfc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xce, "2727f15ffb66cd0666d7274873f28984"}]}, 0x1, [{0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "ec331a2c03366962d65fcda2e32d12dbe9129f324499af34b175ceda25d1d704b322ae39515b32d5717acca86c99e34df389a5d55b6f6772a41000b349e6851f39ebce8fba05934e0b1d8930098509032214db987f132d85aea771ad587034c608d41d975aed9fdb87bf4e2e9c60b6200e2b1db89bdbad"}}]}) 416.847944ms ago: executing program 2 (id=663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0xa5) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x38, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x2, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 398.14712ms ago: executing program 2 (id=664): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01a396"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004080) 269.670761ms ago: executing program 2 (id=665): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)=ANY=[@ANYBLOB="66643df6bd15effac841eb5ee77d50b80fc8214f0272b80ec1429cb08cc050065c9b45e55b43aa35328d4144ff1f28919d945ebb390d832e9b680a2932952782e2d4317c4625cce5d746f22a693d6654457a6006b9cade88a4ab7deadd47d1fb36d5355d106276b9af0a5ea0032015575b081164b853bb92a90bc4a21c91d85756d15236f1434b1bed2b86232b10cbb076de36553d204c7026ffb8f73f84d463e1bc210be2f8f2596e305f17ad50403363", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x2}}, 0x18) 59.361893ms ago: executing program 2 (id=666): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb87, 0x3ff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x80, 0x8, 0x2, 0xc16f}}, @uexit={0x0, 0x18, 0x40}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4808, 0xa, 0x1, 0x6f9}}], 0xc0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x100000, 0x0, {[0x7, 0xe009, 0xfffffffffffffff9, 0x70, 0xc, 0x91, 0x1, 0x200]}}) pwritev2(r1, &(0x7f0000002a40)=[{&(0x7f0000002880)='3>', 0x2}], 0x1, 0x1, 0x3, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x78) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='/selinux/create\x00', 0x0, r4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) timer_delete(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) (async) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb87, 0x3ff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x80, 0x8, 0x2, 0xc16f}}, @uexit={0x0, 0x18, 0x40}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4808, 0xa, 0x1, 0x6f9}}], 0xc0}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x100000, 0x0, {[0x7, 0xe009, 0xfffffffffffffff9, 0x70, 0xc, 0x91, 0x1, 0x200]}}) (async) pwritev2(r1, &(0x7f0000002a40)=[{&(0x7f0000002880)='3>', 0x2}], 0x1, 0x1, 0x3, 0x4) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x78) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='/selinux/create\x00', 0x0, r4) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) (async) timer_delete(r0) (async) 0s ago: executing program 32 (id=666): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb87, 0x3ff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x80, 0x8, 0x2, 0xc16f}}, @uexit={0x0, 0x18, 0x40}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4808, 0xa, 0x1, 0x6f9}}], 0xc0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x100000, 0x0, {[0x7, 0xe009, 0xfffffffffffffff9, 0x70, 0xc, 0x91, 0x1, 0x200]}}) pwritev2(r1, &(0x7f0000002a40)=[{&(0x7f0000002880)='3>', 0x2}], 0x1, 0x1, 0x3, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x78) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='/selinux/create\x00', 0x0, r4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) timer_delete(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) (async) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb87, 0x3ff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x80, 0x8, 0x2, 0xc16f}}, @uexit={0x0, 0x18, 0x40}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4808, 0xa, 0x1, 0x6f9}}], 0xc0}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x100000, 0x0, {[0x7, 0xe009, 0xfffffffffffffff9, 0x70, 0xc, 0x91, 0x1, 0x200]}}) (async) pwritev2(r1, &(0x7f0000002a40)=[{&(0x7f0000002880)='3>', 0x2}], 0x1, 0x1, 0x3, 0x4) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x78) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='/selinux/create\x00', 0x0, r4) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) (async) timer_delete(r0) (async) kernel console output (not intermixed with test programs): 00002.985:363): avc: denied { remount } for pid=1117 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.696719][ T792] usb 1-1: USB disconnect, device number 25 [ 56.895638][ T1125] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 56.957870][ T348] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 57.006347][ T1136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.014968][ T1136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.119085][ T348] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.128960][ T348] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.138647][ T348] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.153389][ T348] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 57.162475][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.170519][ T348] usb 2-1: Product: syz [ 57.174726][ T348] usb 2-1: Manufacturer: syz [ 57.179423][ T348] usb 2-1: SerialNumber: syz [ 57.185765][ T348] usblp0: Disabling reads from problematic bidirectional printer [ 57.399767][ T348] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 57.632036][ T1164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.636249][ T513] usb 2-1: USB disconnect, device number 25 [ 57.642325][ T1164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.649313][ T513] usblp0: removed [ 58.055604][ T359] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 58.196300][ T1170] netlink: 'syz.1.236': attribute type 3 has an invalid length. [ 58.196912][ T359] usb 4-1: device descriptor read/64, error -71 [ 58.204469][ T1170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 58.232317][ T1172] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1172 comm=syz.2.237 [ 58.249685][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.260388][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.471266][ T359] usb 4-1: device descriptor read/64, error -71 [ 58.481912][ T513] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 58.641703][ T513] usb 1-1: Using ep0 maxpacket: 16 [ 58.647939][ T513] usb 1-1: config index 0 descriptor too short (expected 59172, got 36) [ 58.656345][ T513] usb 1-1: config 123 has too many interfaces: 113, using maximum allowed: 32 [ 58.663023][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 58.665421][ T513] usb 1-1: config 123 has an invalid descriptor of length 190, skipping remainder of the config [ 58.683509][ T513] usb 1-1: config 123 has 0 interfaces, different from the descriptor's value: 113 [ 58.693190][ T513] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.702439][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.748342][ T359] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 58.822896][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 58.829668][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.841063][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.851103][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.865408][ T10] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 58.874829][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.883603][ T10] usb 2-1: config 0 descriptor?? [ 58.897617][ T359] usb 4-1: device descriptor read/64, error -71 [ 59.133261][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.140710][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.153317][ T359] usb 4-1: device descriptor read/64, error -71 [ 59.163962][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.171178][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.195940][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.203674][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.210736][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.217895][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.224977][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.232256][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.239267][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.246329][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.253423][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.260432][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.267478][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.274512][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.281994][ T359] usb usb4-port1: attempt power cycle [ 59.282155][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.294582][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.301665][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.308823][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.315927][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.323077][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.330191][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.337316][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.344490][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.351713][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.358984][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.366068][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.373198][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.380217][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.387209][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.394646][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.401791][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.408982][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.416216][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.423343][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.430503][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.437518][ T10] a4tech 0003:09DA:000A.0005: unknown main item tag 0x0 [ 59.445768][ T10] a4tech 0003:09DA:000A.0005: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0 [ 59.654228][ T359] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.687395][ T359] usb 4-1: device descriptor read/8, error -71 [ 59.825881][ T359] usb 4-1: device descriptor read/8, error -71 [ 59.885840][ T593] usb 2-1: USB disconnect, device number 26 [ 60.080464][ T359] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 60.114466][ T359] usb 4-1: device descriptor read/8, error -71 [ 60.225860][ T1210] netlink: 100 bytes leftover after parsing attributes in process `syz.1.247'. [ 60.262948][ T359] usb 4-1: device descriptor read/8, error -71 [ 60.379103][ T359] usb usb4-port1: unable to enumerate USB device [ 60.485439][ T792] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 60.655945][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 60.667417][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.698604][ T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.719926][ T792] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.729466][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.739790][ T792] usb 2-1: config 0 descriptor?? [ 61.177728][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.199516][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.206905][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.214641][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.222054][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.229475][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.236992][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.244711][ T792] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 61.252860][ T792] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 61.261395][ T792] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 61.284791][ T792] microsoft 0003:045E:07DA.0006: no inputs found [ 61.291348][ T792] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 61.393888][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.405266][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.414358][ T359] usb 2-1: USB disconnect, device number 27 [ 61.456753][ T1214] overlay: Unknown parameter 'uid<00000000000000000000' [ 61.477449][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 61.477488][ T36] audit: type=1400 audit(1772400007.677:399): avc: denied { mount } for pid=1215 comm="syz.2.249" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.515309][ T513] usb 1-1: string descriptor 0 read error: -71 [ 61.529159][ T36] audit: type=1400 audit(1772400007.715:400): avc: denied { write } for pid=1220 comm="syz.0.251" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.530926][ T513] usb 1-1: USB disconnect, device number 26 [ 61.556589][ T36] audit: type=1400 audit(1772400007.715:401): avc: denied { ioctl } for pid=1220 comm="syz.0.251" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.618482][ T36] audit: type=1400 audit(1772400007.799:402): avc: denied { ioctl } for pid=1227 comm="syz.3.252" path="socket:[13924]" dev="sockfs" ino=13924 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.652533][ T36] audit: type=1400 audit(1772400007.837:403): avc: denied { mounton } for pid=1231 comm="syz.2.253" path="/69/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 61.902869][ T513] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 61.994087][ T36] audit: type=1400 audit(1772400008.156:404): avc: denied { read } for pid=1257 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.048325][ T36] audit: type=1400 audit(1772400008.203:405): avc: denied { write } for pid=1257 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.073394][ T513] usb 1-1: Using ep0 maxpacket: 32 [ 62.080355][ T513] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 62.089095][ T513] usb 1-1: config 0 has no interface number 0 [ 62.095443][ T513] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 62.111882][ T513] usb 1-1: config 0 interface 196 has no altsetting 0 [ 62.121385][ T513] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 62.130976][ T513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.139552][ T513] usb 1-1: Product: syz [ 62.143924][ T513] usb 1-1: Manufacturer: syz [ 62.149017][ T513] usb 1-1: SerialNumber: syz [ 62.157785][ T513] usb 1-1: config 0 descriptor?? [ 62.157986][ T1266] tipc: Started in network mode [ 62.168460][ T1222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 62.176267][ T1266] tipc: Node identity 4, cluster identity 4711 [ 62.183070][ T1266] tipc: Node number set to 4 [ 62.513208][ T1280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.542441][ T1280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.594506][ T36] audit: type=1326 audit(1772400008.709:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.1.266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb541d9c799 code=0x0 [ 62.779615][ T1280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.790146][ T1280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.932563][ T1286] netlink: 84 bytes leftover after parsing attributes in process `syz.3.269'. [ 62.991455][ T513] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 63.002825][ T513] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 63.020221][ T513] usb 1-1: USB disconnect, device number 27 [ 63.026360][ T36] audit: type=1400 audit(1772400009.122:407): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 63.051546][ T36] audit: type=1400 audit(1772400009.122:408): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.087192][ T1298] syz.3.272 uses obsolete (PF_INET,SOCK_PACKET) [ 63.115933][ T513] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 63.133149][ T1303] netlink: 37 bytes leftover after parsing attributes in process `syz.3.273'. [ 63.263159][ T1323] sit0: entered promiscuous mode [ 63.274126][ T1323] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 63.283291][ T1323] netlink: 1 bytes leftover after parsing attributes in process `syz.3.275'. [ 63.355467][ T1335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.373985][ T1335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.448237][ T513] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 63.576061][ T348] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 63.609399][ T513] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.621007][ T513] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.631402][ T513] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.638340][ T513] usb 1-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 63.647441][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.656386][ T513] usb 1-1: config 0 descriptor?? [ 63.725310][ T348] usb 4-1: device descriptor read/64, error -71 [ 63.981039][ T348] usb 4-1: device descriptor read/64, error -71 [ 64.099579][ T513] wacom 0003:056A:0144.0007: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 64.215333][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 64.224590][ T1368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.289'. [ 64.236825][ T348] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 64.260404][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.268941][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.315921][ T513] usb 1-1: USB disconnect, device number 28 [ 64.375403][ T348] usb 4-1: device descriptor read/64, error -71 [ 64.631152][ T348] usb 4-1: device descriptor read/64, error -71 [ 64.663119][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 64.748517][ T348] usb usb4-port1: attempt power cycle [ 64.833649][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 64.843909][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 64.852601][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.881682][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.900759][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.907851][ T10] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 64.917295][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.926198][ T10] usb 2-1: config 0 descriptor?? [ 65.011529][ T1401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.020682][ T1401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.110709][ T348] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 65.133224][ T348] usb 4-1: device descriptor read/8, error -71 [ 65.142705][ T513] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 65.271746][ T348] usb 4-1: device descriptor read/8, error -71 [ 65.302589][ T513] usb 1-1: Using ep0 maxpacket: 16 [ 65.309134][ T513] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 65.319533][ T513] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 65.330170][ T513] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.340134][ T513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.348186][ T513] usb 1-1: Product: syz [ 65.352387][ T513] usb 1-1: Manufacturer: syz [ 65.357213][ T513] usb 1-1: SerialNumber: syz [ 65.361768][ T10] hid-led 0003:1D34:0004.0008: item fetching failed at offset 6/7 [ 65.373097][ T10] hid-led 0003:1D34:0004.0008: probe with driver hid-led failed with error -22 [ 65.526413][ T348] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 65.548823][ T348] usb 4-1: device descriptor read/8, error -71 [ 65.589674][ T10] usb 2-1: USB disconnect, device number 28 [ 65.687417][ T348] usb 4-1: device descriptor read/8, error -71 [ 65.803584][ T348] usb usb4-port1: unable to enumerate USB device [ 66.063303][ T348] usb 1-1: USB disconnect, device number 29 [ 66.773276][ T348] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 66.823773][ T1452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 66.943786][ T348] usb 2-1: Using ep0 maxpacket: 32 [ 66.950171][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.961560][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 66.969186][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.979118][ T348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.992125][ T348] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 67.001418][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.010102][ T348] usb 2-1: config 0 descriptor?? [ 67.156925][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 67.163521][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.174614][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.184603][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.198158][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.207282][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.216961][ T10] usb 4-1: config 0 descriptor?? [ 67.370085][ T513] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 67.444050][ T1429] netlink: 37 bytes leftover after parsing attributes in process `syz.1.310'. [ 67.454549][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 67.454568][ T36] audit: type=1400 audit(1772400013.269:443): avc: denied { name_bind } for pid=1428 comm="syz.1.310" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.529927][ T513] usb 1-1: Using ep0 maxpacket: 8 [ 67.536532][ T513] usb 1-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 67.545568][ T513] usb 1-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 67.555240][ T513] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 67.564531][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.651720][ T10] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 67.660141][ T10] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 67.672392][ T10] microsoft 0003:045E:07DA.0009: no inputs found [ 67.678850][ T10] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 67.790005][ T513] usb 1-1: string descriptor 0 read error: -71 [ 67.798873][ T513] usb 1-1: Found UVC 0.00 device (2833:0201) [ 67.806104][ T513] usb 1-1: No valid video chain found. [ 67.815145][ T513] usb 1-1: USB disconnect, device number 30 [ 67.873308][ T36] audit: type=1400 audit(1772400013.673:444): avc: denied { create } for pid=1437 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.893312][ T36] audit: type=1400 audit(1772400013.692:445): avc: denied { sys_admin } for pid=1437 comm="syz.3.313" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.897327][ T1438] incfs_lookup_dentry err:-2 [ 67.919514][ T1466] incfs_lookup_dentry err:-2 [ 67.925328][ T1466] incfs_lookup_dentry err:-2 [ 67.931425][ T36] audit: type=1400 audit(1772400013.720:446): avc: denied { append } for pid=1437 comm="syz.3.313" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.195371][ T1469] sock: sock_set_timeout: `syz.2.320' (pid 1469) tries to set negative timeout [ 68.200583][ T513] usb 4-1: USB disconnect, device number 26 [ 68.261266][ T1471] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.342131][ T36] audit: type=1400 audit(1772400014.114:447): avc: denied { bind } for pid=1474 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.356840][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.370069][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.394123][ T36] audit: type=1400 audit(1772400014.161:448): avc: denied { ioctl } for pid=1481 comm="syz.2.324" path="socket:[15530]" dev="sockfs" ino=15530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.418883][ T36] audit: type=1400 audit(1772400014.161:449): avc: denied { ioctl } for pid=1481 comm="syz.2.324" path="socket:[16667]" dev="sockfs" ino=16667 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.507834][ T36] audit: type=1400 audit(1772400014.264:450): avc: denied { bind } for pid=1485 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.638312][ T513] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 68.755664][ T593] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 68.799434][ T513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.810610][ T513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.820426][ T513] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 68.829590][ T513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.839192][ T513] usb 1-1: config 0 descriptor?? [ 68.916593][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.927940][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.938053][ T593] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 68.947437][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.956554][ T593] usb 4-1: config 0 descriptor?? [ 69.175964][ T1488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.185288][ T1488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.273662][ T36] audit: type=1400 audit(1772400014.987:451): avc: denied { getopt } for pid=1479 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.294354][ T513] usbhid 1-1:0.0: can't add hid device: -71 [ 69.301230][ T513] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 69.311019][ T513] usb 1-1: USB disconnect, device number 31 [ 69.732612][ T348] usbhid 2-1:0.0: can't add hid device: -71 [ 69.746319][ T348] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 69.763183][ T348] usb 2-1: USB disconnect, device number 29 [ 69.826372][ T1502] tipc: Started in network mode [ 69.831470][ T1502] tipc: Node identity ac1e0001, cluster identity 4711 [ 69.838712][ T1502] tipc: Enabling of bearer rejected, failed to enable media [ 69.928051][ T36] audit: type=1400 audit(1772400015.606:452): avc: denied { append } for pid=1509 comm="syz.0.334" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.936088][ T1510] loop6: detected capacity change from 0 to 8 [ 69.965834][ T593] usbhid 4-1:0.0: can't add hid device: -71 [ 69.974092][ T1513] netlink: 88 bytes leftover after parsing attributes in process `syz.3.335'. [ 69.983635][ T1513] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 69.991339][ T1513] netlink: 17 bytes leftover after parsing attributes in process `syz.3.335'. [ 70.000703][ T593] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 70.022662][ T593] usb 4-1: USB disconnect, device number 27 [ 70.031460][ T1510] loop6: detected capacity change from 8 to 7 [ 70.040626][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.050246][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.058570][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.068039][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.076354][ T1510] loop6: unable to read partition table [ 70.082751][ T1510] loop_reread_partitions: partition scan of loop6 (V"Ѯ49rQeB&og; K-{$9H +dSQWP) failed (rc=-5) [ 70.087559][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.106020][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.114195][ T348] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 70.119957][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.130933][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.141586][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.150905][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.159183][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.168573][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.176893][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.186335][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.268847][ T348] usb 2-1: device descriptor read/64, error -71 [ 70.405345][ T1533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.414679][ T1533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.428874][ T593] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 70.524828][ T348] usb 2-1: device descriptor read/64, error -71 [ 70.588590][ T792] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 70.600410][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 70.610222][ T593] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 70.620283][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 70.630778][ T593] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 70.643325][ T593] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 70.653084][ T593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.661537][ T593] usb 4-1: Product: syz [ 70.665880][ T593] usb 4-1: Manufacturer: syz [ 70.670605][ T593] usb 4-1: SerialNumber: syz [ 70.681648][ T593] usb 4-1: config 0 descriptor?? [ 70.695666][ T593] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 70.749696][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.761525][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.771961][ T792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.785514][ T348] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 70.793247][ T792] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.803622][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.814656][ T792] usb 1-1: config 0 descriptor?? [ 70.950974][ T348] usb 2-1: device descriptor read/64, error -71 [ 71.028145][ T1537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.037497][ T1537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.049422][ T1538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.058531][ T1538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.114922][ T1516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.123705][ T1516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.143254][ T593] scsi host1: usb-storage 4-1:0.0 [ 71.166662][ T593] usb 4-1: USB disconnect, device number 28 [ 71.207477][ T1554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.217152][ T1554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.228042][ T348] usb 2-1: device descriptor read/64, error -71 [ 71.228467][ T1555] netlink: 232 bytes leftover after parsing attributes in process `syz.3.344'. [ 71.309180][ T1558] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 71.357692][ T348] usb usb2-port1: attempt power cycle [ 71.739589][ T348] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 71.762138][ T348] usb 2-1: device descriptor read/8, error -71 [ 71.900661][ T348] usb 2-1: device descriptor read/8, error -71 [ 72.155208][ T348] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 72.188510][ T348] usb 2-1: device descriptor read/8, error -71 [ 72.273165][ T1565] netlink: 'syz.3.348': attribute type 30 has an invalid length. [ 72.326923][ T348] usb 2-1: device descriptor read/8, error -71 [ 72.464452][ T348] usb usb2-port1: unable to enumerate USB device [ 72.666789][ T593] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 72.805315][ T593] usb 4-1: device descriptor read/64, error -71 [ 73.008501][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 73.008521][ T36] audit: type=1400 audit(1772400018.496:503): avc: denied { name_bind } for pid=1579 comm="syz.1.353" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.036198][ T36] audit: type=1400 audit(1772400018.496:504): avc: denied { name_bind } for pid=1579 comm="syz.1.353" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.058497][ T36] audit: type=1400 audit(1772400018.496:505): avc: denied { node_bind } for pid=1579 comm="syz.1.353" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.081103][ T593] usb 4-1: device descriptor read/64, error -71 [ 73.098925][ T1584] erspan0: default FDB implementation only supports local addresses [ 73.338175][ T593] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 73.403092][ T348] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 73.462412][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 73.474405][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.483229][ T792] usb 1-1: USB disconnect, device number 32 [ 73.498120][ T593] usb 4-1: device descriptor read/64, error -71 [ 73.562078][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 73.568489][ T348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.579072][ T348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.590137][ T348] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.599871][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.609056][ T348] usb 2-1: Product: syz [ 73.613676][ T348] usb 2-1: Manufacturer: syz [ 73.618599][ T348] usb 2-1: SerialNumber: syz [ 73.764489][ T593] usb 4-1: device descriptor read/64, error -71 [ 73.838453][ T1589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.847950][ T1589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.858469][ T348] usb 2-1: 0:2 : does not exist [ 73.865581][ T348] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 73.878036][ T348] usb 2-1: USB disconnect, device number 34 [ 73.881811][ T593] usb usb4-port1: attempt power cycle [ 73.891650][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.244088][ T593] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 74.266754][ T593] usb 4-1: device descriptor read/8, error -71 [ 74.300026][ T36] audit: type=1400 audit(1772400019.706:506): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 74.338464][ T1597] netlink: 'syz.2.358': attribute type 46 has an invalid length. [ 74.349503][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.358326][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.415948][ T593] usb 4-1: device descriptor read/8, error -71 [ 74.486801][ T36] audit: type=1400 audit(1772400019.875:507): avc: denied { create } for pid=1602 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.506859][ T36] audit: type=1400 audit(1772400019.875:508): avc: denied { write } for pid=1602 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.527084][ T36] audit: type=1404 audit(1772400019.913:509): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 74.530895][ T1605] overlayfs: failed to resolve './file0/file1/file0': -20 [ 74.543268][ T36] audit: type=1404 audit(1772400019.913:510): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 74.565279][ T36] audit: type=1400 audit(1772400019.913:511): avc: denied { mounton } for pid=1604 comm="syz.0.362" path="/69/file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.589183][ T36] audit: type=1400 audit(1772400019.913:512): avc: denied { mount } for pid=1604 comm="syz.0.362" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.681025][ T593] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 74.691650][ T348] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 74.703576][ T593] usb 4-1: device descriptor read/8, error -71 [ 74.852700][ T593] usb 4-1: device descriptor read/8, error -71 [ 74.852791][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.870732][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.880756][ T348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.893925][ T348] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.903337][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.913016][ T348] usb 2-1: config 0 descriptor?? [ 74.946226][ T1624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.955002][ T1624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.969263][ T593] usb usb4-port1: unable to enumerate USB device [ 75.096637][ T10] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 75.258188][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.266573][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 75.275486][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 75.290413][ T10] usb 1-1: New USB device found, idVendor=03b8, idProduct=0200, bcdDevice= 0.40 [ 75.300089][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.308588][ T10] usb 1-1: Product: syz [ 75.312951][ T10] usb 1-1: Manufacturer: syz [ 75.318120][ T10] usb 1-1: SerialNumber: syz [ 75.347373][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.355139][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.362669][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.370313][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.377942][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.385521][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.393049][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.400780][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.408615][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.416112][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.423805][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.431275][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.438736][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.446149][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.453794][ T348] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 75.461465][ T348] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 75.471508][ T348] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 75.543344][ T10] usb 1-1: USB disconnect, device number 33 [ 75.701190][ T1637] netlink: 1128 bytes leftover after parsing attributes in process `syz.3.370'. [ 76.214112][ T1659] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 76.221949][ T1659] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.266857][ T1665] can0: slcan on ptm1. [ 76.329069][ T1664] can0 (unregistered): slcan off ptm1. [ 76.509946][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.518744][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.590081][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.598733][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.610046][ T348] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 76.620717][ T10] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 76.759969][ T10] usb 1-1: device descriptor read/64, error -71 [ 76.770939][ T348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.781227][ T348] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.791565][ T348] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.801150][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.809438][ T348] usb 4-1: SerialNumber: syz [ 76.876416][ T360] usb 2-1: reset high-speed USB device number 35 using dummy_hcd [ 77.014969][ T10] usb 1-1: device descriptor read/64, error -71 [ 77.033753][ T348] usb 4-1: 0:2 : does not exist [ 77.038963][ T348] usb 4-1: unit 5: unexpected type 0x0a [ 77.046377][ T348] usb 4-1: USB disconnect, device number 33 [ 77.054765][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.270767][ T10] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 77.409281][ T10] usb 1-1: device descriptor read/64, error -71 [ 77.665058][ T10] usb 1-1: device descriptor read/64, error -71 [ 77.769892][ T1713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 77.793015][ T10] usb usb1-port1: attempt power cycle [ 77.974109][ T351] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 78.144636][ T351] usb 4-1: Using ep0 maxpacket: 8 [ 78.151503][ T351] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.162631][ T351] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.172513][ T351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.176629][ T10] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 78.182647][ T351] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 78.200346][ T351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.210257][ T351] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 78.222573][ T351] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.231023][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.232119][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.247041][ T351] usb 4-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 78.272213][ T351] usb 4-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈→Ⓩ蟸맏᯻쌲钧욢 [ 78.288780][ T351] usb 4-1: SerialNumber: syz [ 78.361351][ T1717] netlink: 'syz.1.387': attribute type 27 has an invalid length. [ 78.370575][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.387195][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.394629][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.433779][ T792] usb 2-1: USB disconnect, device number 35 [ 78.467800][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 78.467822][ T36] audit: type=1400 audit(1772400023.610:581): avc: denied { setopt } for pid=1718 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.493978][ T36] audit: type=1400 audit(1772400023.610:582): avc: denied { ioctl } for pid=1718 comm="syz.1.388" path="socket:[17980]" dev="sockfs" ino=17980 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.523025][ T351] cdc_ncm 4-1:1.0: bind() failure [ 78.529413][ T351] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 78.536455][ T351] cdc_ncm 4-1:1.1: bind() failure [ 78.543367][ T351] usb 4-1: USB disconnect, device number 34 [ 78.624219][ T10] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 78.646645][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.785419][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.901412][ T10] usb usb1-port1: unable to enumerate USB device [ 79.074040][ T36] audit: type=1400 audit(1772400024.182:583): avc: denied { name_bind } for pid=1721 comm="syz.3.389" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 79.096468][ T36] audit: type=1400 audit(1772400024.182:584): avc: denied { node_bind } for pid=1721 comm="syz.3.389" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.371101][ T36] audit: type=1400 audit(1772400024.464:585): avc: denied { getopt } for pid=1730 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.590408][ T1733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 79.593446][ T36] audit: type=1400 audit(1772400024.661:586): avc: denied { create } for pid=1732 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 79.626070][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 79.671645][ T36] audit: type=1400 audit(1772400024.745:587): avc: denied { create } for pid=1740 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.796617][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 79.803442][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 79.814290][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 79.827626][ T10] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 79.838676][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.848365][ T10] usb 2-1: config 0 descriptor?? [ 79.854332][ T10] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 79.863092][ T10] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 79.880858][ T36] audit: type=1400 audit(1772400024.933:588): avc: denied { map } for pid=1747 comm="syz.2.396" path="socket:[16106]" dev="sockfs" ino=16106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.904990][ T36] audit: type=1400 audit(1772400024.933:589): avc: denied { read } for pid=1747 comm="syz.2.396" path="socket:[16106]" dev="sockfs" ino=16106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.933996][ T36] audit: type=1400 audit(1772400024.961:590): avc: denied { create } for pid=1750 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.988372][ T351] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 80.025945][ T1762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 80.069227][ T10] usb 2-1: USB disconnect, device number 36 [ 80.074704][ T1766] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 80.093317][ T1766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292 [ 80.158169][ T351] usb 1-1: Using ep0 maxpacket: 16 [ 80.174153][ T351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.186766][ T351] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 80.198693][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.207232][ T351] usb 1-1: SerialNumber: syz [ 80.214740][ T351] usb 1-1: config 0 descriptor?? [ 80.220880][ T351] hub 1-1:0.0: bad descriptor, ignoring hub [ 80.227255][ T351] hub 1-1:0.0: probe with driver hub failed with error -5 [ 80.235530][ T351] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 80.244001][ T351] usb 1-1: Detected SIO [ 80.249452][ T351] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.264483][ T1771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.273560][ T1771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.287923][ T1771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.297123][ T1771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.401139][ T1777] overlayfs: failed to resolve 'pcr=01152921504606846999': -2 [ 80.438044][ T1744] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 80.446525][ T1744] overlayfs: missing 'lowerdir' [ 80.563937][ T10] usb 1-1: USB disconnect, device number 38 [ 80.571081][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.581480][ T10] ftdi_sio 1-1:0.0: device disconnected [ 81.111096][ T1807] x_tables: unsorted entry at hook 1 [ 81.116877][ T1807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.125568][ T1807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.235254][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 81.264215][ T1811] fuse: root generation should be zero [ 81.395119][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 81.402080][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.410633][ T10] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 81.419486][ T10] usb 2-1: config 128 has an invalid descriptor of length 196, skipping remainder of the config [ 81.430423][ T10] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 81.439665][ T10] usb 2-1: config 128 has no interface number 0 [ 81.446089][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 91, changing to 10 [ 81.457921][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 81.469693][ T10] usb 2-1: config 128 interface 127 has no altsetting 0 [ 81.478268][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 81.487388][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.495486][ T10] usb 2-1: Product: syz [ 81.499959][ T10] usb 2-1: Manufacturer: syz [ 81.504895][ T10] usb 2-1: SerialNumber: syz [ 81.510609][ T1795] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.565637][ T792] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 81.597730][ T360] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 81.683228][ T1825] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 81.725598][ T792] usb 1-1: Using ep0 maxpacket: 32 [ 81.734987][ T792] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 81.746352][ T792] usb 1-1: config 0 has no interface number 0 [ 81.752915][ T792] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 81.768569][ T792] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 81.780322][ T10] usb 2-1: USB disconnect, device number 37 [ 81.787354][ T360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.799501][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.800452][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.808168][ T360] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.833388][ T792] usb 1-1: Product: syz [ 81.837661][ T792] usb 1-1: Manufacturer: syz [ 81.842280][ T792] usb 1-1: SerialNumber: syz [ 81.847887][ T360] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 81.858782][ T792] usb 1-1: config 0 descriptor?? [ 81.864126][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.872848][ T1816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 81.873705][ T360] usb 4-1: config 0 descriptor?? [ 81.996725][ T1833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 82.034888][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.043972][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.053139][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.062006][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.100032][ T1816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.110535][ T10] usb 4-1: USB disconnect, device number 35 [ 82.337508][ T1843] fuse: Unknown parameter 'user_id}00000000000000000000' [ 82.345075][ T1843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 82.615736][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.615890][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.625130][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.634456][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 82.642804][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.650430][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 82.659428][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 82.675270][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.684891][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 82.692834][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.702494][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 82.710481][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.719926][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 82.727936][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.737117][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 82.745936][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.755333][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.757210][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.772474][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 82.772581][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.790159][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 82.798578][ T1851] loop6: unable to read partition table [ 82.807701][ T110] loop6: unable to read partition table [ 82.844509][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 82.851231][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.862999][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.873151][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.886914][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.896240][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.906360][ T10] usb 2-1: config 0 descriptor?? [ 82.996402][ T792] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 83.006840][ T360] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 83.014607][ T792] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 83.025559][ T792] asix 1-1:0.188: probe with driver asix failed with error -61 [ 83.189061][ T360] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.197492][ T360] usb 4-1: config 0 has no interface number 0 [ 83.203685][ T360] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.214934][ T360] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.224867][ T360] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.238179][ T360] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 83.247275][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.257402][ T360] usb 4-1: config 0 descriptor?? [ 83.563262][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 83.572318][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 83.572915][ T1870] netlink: 'syz.2.434': attribute type 27 has an invalid length. [ 83.585089][ T10] usb 2-1: USB disconnect, device number 38 [ 83.674652][ T1875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.686157][ T1875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.695680][ T360] usbhid 4-1:0.1: can't add hid device: -71 [ 83.701730][ T360] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 83.710576][ T360] usb 4-1: USB disconnect, device number 36 [ 84.270730][ T1881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.279395][ T1881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.288515][ T1881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.297381][ T1881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.379204][ T360] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 84.509146][ T792] usb 1-1: USB disconnect, device number 39 [ 84.532808][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 84.538530][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 84.538548][ T36] audit: type=1400 audit(1772400029.305:637): avc: denied { write } for pid=1884 comm="syz.0.441" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.540745][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 84.553497][ T36] audit: type=1400 audit(1772400029.315:638): avc: denied { ioctl } for pid=1884 comm="syz.0.441" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.576941][ T360] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 84.609976][ T360] usb 2-1: config 2 has no interface number 0 [ 84.617158][ T36] audit: type=1400 audit(1772400029.390:639): avc: denied { setattr } for pid=1886 comm="syz.0.442" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.621498][ T360] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 84.647647][ T36] audit: type=1400 audit(1772400029.409:640): avc: denied { read } for pid=1886 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.653795][ T360] usb 2-1: config 2 interface 88 has no altsetting 0 [ 84.680590][ T360] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 84.689850][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.698023][ T360] usb 2-1: Product: syz [ 84.701725][ T36] audit: type=1400 audit(1772400029.465:641): avc: denied { write } for pid=1886 comm="syz.0.442" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.702516][ T360] usb 2-1: Manufacturer: syz [ 84.726507][ T36] audit: type=1400 audit(1772400029.484:642): avc: denied { open } for pid=1886 comm="syz.0.442" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.731066][ T360] usb 2-1: SerialNumber: syz [ 84.759858][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 84.769036][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.776796][ T1877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.786550][ T10] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 84.794854][ T10] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 84.803863][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.814245][ T10] usb 4-1: config 1 has no interface number 1 [ 84.820388][ T10] usb 4-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 84.833318][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 84.844199][ T10] usb 4-1: config 1 interface 4 has no altsetting 0 [ 84.852613][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.861778][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.874375][ T10] usb 4-1: Product: syz [ 84.878635][ T10] usb 4-1: Manufacturer: syz [ 84.883368][ T10] usb 4-1: SerialNumber: syz [ 84.899305][ T36] audit: type=1400 audit(1772400029.643:643): avc: denied { getopt } for pid=1891 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.899349][ T1892] veth1: entered allmulticast mode [ 84.928848][ T1893] veth1: left allmulticast mode [ 84.976586][ T36] audit: type=1400 audit(1772400029.728:644): avc: denied { read write } for pid=1896 comm="syz.2.445" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 84.978511][ T66] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 85.001013][ T36] audit: type=1400 audit(1772400029.728:645): avc: denied { open } for pid=1896 comm="syz.2.445" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.019356][ T66] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 85.031728][ T36] audit: type=1400 audit(1772400029.756:646): avc: denied { connect } for pid=1876 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.046419][ T1877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.076642][ T1899] fido_id[1899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.110303][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 85.133108][ T10] usb 4-1: USB disconnect, device number 37 [ 85.145758][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.653371][ T1912] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 85.661281][ T1911] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 85.954707][ T360] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 85.965262][ T360] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 85.976601][ T360] asix 2-1:2.88: probe with driver asix failed with error -71 [ 85.986555][ T360] usb 2-1: USB disconnect, device number 39 [ 86.009763][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 86.041718][ T513] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 86.169589][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 86.176063][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 86.184683][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 86.193617][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 86.202649][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.212900][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.222706][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 86.222870][ T1919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.237160][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 86.244841][ T1919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.254375][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.262028][ T513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.273267][ T10] usb 1-1: config 0 descriptor?? [ 86.285491][ T513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.295479][ T513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 86.308816][ T513] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 86.318173][ T513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.327170][ T513] usb 4-1: config 0 descriptor?? [ 86.501907][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 86.521051][ T10] usb 1-1: USB disconnect, device number 40 [ 86.537234][ T10] usblp0: removed [ 86.548479][ T513] steelseries 0003:1038:1410.000C: unknown main item tag 0x0 [ 86.560228][ T513] steelseries 0003:1038:1410.000C: collection stack underflow [ 86.567832][ T513] steelseries 0003:1038:1410.000C: item 0 0 0 12 parsing failed [ 86.575769][ T513] steelseries 0003:1038:1410.000C: parse failed [ 86.582327][ T513] steelseries 0003:1038:1410.000C: probe with driver steelseries failed with error -22 [ 86.761358][ T513] usb 4-1: USB disconnect, device number 38 [ 86.979554][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 87.043866][ T1933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.052736][ T1933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.062600][ T1933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.071321][ T1933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.139538][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 87.146506][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.155272][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.157063][ T1940] fuse: Bad value for 'fd' [ 87.164266][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.177654][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.187719][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.197741][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.211203][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.220759][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.231617][ T10] usb 1-1: config 0 descriptor?? [ 87.255701][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.264893][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.283258][ T1944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.292198][ T1944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.389241][ T1952] netlink: 'syz.3.463': attribute type 27 has an invalid length. [ 87.399181][ T1952] sit0: left promiscuous mode [ 87.455021][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 87.669902][ T513] usb 1-1: USB disconnect, device number 41 [ 87.778905][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 87.885504][ T593] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 87.887499][ T1914] usblp0: removed [ 87.918391][ T1970] netlink: 'syz.2.469': attribute type 19 has an invalid length. [ 87.926374][ T1970] netlink: 5 bytes leftover after parsing attributes in process `syz.2.469'. [ 87.944020][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 87.952787][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 87.963458][ T10] usb 2-1: config 220 has no interface number 2 [ 87.969885][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 87.983528][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 87.990333][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 87.997758][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 88.006081][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 88.015836][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.024140][ T10] usb 2-1: Product: syz [ 88.028388][ T10] usb 2-1: Manufacturer: syz [ 88.032989][ T10] usb 2-1: SerialNumber: syz [ 88.057215][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.068288][ T593] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.077804][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.084737][ T1986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.087160][ T593] usb 4-1: config 0 descriptor?? [ 88.095910][ T1986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.258928][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 88.265453][ T10] usb 2-1: No valid video chain found. [ 88.271752][ T10] usb 2-1: selecting invalid altsetting 0 [ 88.280340][ T10] usb 2-1: USB disconnect, device number 40 [ 88.381097][ T593] usbhid 4-1:0.0: can't add hid device: -71 [ 88.388883][ T593] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 88.398334][ T593] usb 4-1: USB disconnect, device number 39 [ 88.696204][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.705128][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.716697][ T593] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 88.855309][ T593] usb 4-1: device descriptor read/64, error -71 [ 88.941525][ T2009] kvm: pic: non byte read [ 89.111039][ T593] usb 4-1: device descriptor read/64, error -71 [ 89.366814][ T593] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 89.446176][ T2035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.455420][ T2035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.515996][ T593] usb 4-1: device descriptor read/64, error -71 [ 89.615605][ T2046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.624396][ T2046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.633844][ T2046] netlink: 'syz.2.493': attribute type 4 has an invalid length. [ 89.641752][ T2046] netlink: 'syz.2.493': attribute type 21 has an invalid length. [ 89.651095][ T2046] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.493'. [ 89.660998][ T513] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 89.793107][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 89.814646][ T593] usb 4-1: device descriptor read/64, error -71 [ 89.835726][ T513] usb 1-1: Using ep0 maxpacket: 32 [ 89.842092][ T513] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 89.850615][ T513] usb 1-1: config 2 has no interface number 0 [ 89.856935][ T513] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 89.867123][ T513] usb 1-1: config 2 interface 88 has no altsetting 0 [ 89.875242][ T513] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 89.884453][ T513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.892605][ T513] usb 1-1: Product: syz [ 89.896784][ T513] usb 1-1: Manufacturer: syz [ 89.901433][ T513] usb 1-1: SerialNumber: syz [ 89.907328][ T2025] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.931853][ T593] usb usb4-port1: attempt power cycle [ 89.964954][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.975188][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.989796][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 89.999199][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.007500][ T10] usb 2-1: Product: syz [ 90.011731][ T10] usb 2-1: Manufacturer: syz [ 90.016339][ T10] usb 2-1: SerialNumber: syz [ 90.021795][ T10] usb 2-1: config 0 descriptor?? [ 90.130565][ T2025] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 90.242529][ T10] usb 2-1: USB disconnect, device number 41 [ 90.293999][ T593] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 90.316377][ T593] usb 4-1: device descriptor read/8, error -71 [ 90.465656][ T593] usb 4-1: device descriptor read/8, error -71 [ 90.720298][ T593] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 90.742779][ T593] usb 4-1: device descriptor read/8, error -71 [ 90.795278][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 90.795297][ T36] audit: type=1400 audit(1772400035.179:680): avc: denied { map } for pid=2051 comm="syz.1.495" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.809232][ T2055] netlink: 'syz.1.496': attribute type 3 has an invalid length. [ 90.833980][ T2055] netlink: 944 bytes leftover after parsing attributes in process `syz.1.496'. [ 90.881396][ T593] usb 4-1: device descriptor read/8, error -71 [ 90.992867][ T513] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 91.003376][ T593] usb usb4-port1: unable to enumerate USB device [ 91.009763][ T513] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 91.021261][ T513] asix 1-1:2.88: probe with driver asix failed with error -71 [ 91.029914][ T513] usb 1-1: USB disconnect, device number 42 [ 91.114623][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 91.136295][ T2063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 91.241389][ T36] audit: type=1400 audit(1772400035.592:681): avc: denied { ioctl } for pid=2065 comm="syz.2.501" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.267774][ T36] audit: type=1400 audit(1772400035.611:682): avc: denied { ioctl } for pid=2065 comm="syz.2.501" path="socket:[20524]" dev="sockfs" ino=20524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.275223][ T2070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.295474][ T36] audit: type=1400 audit(1772400035.611:683): avc: denied { append } for pid=2065 comm="syz.2.501" name="pfkey" dev="proc" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.303148][ T2070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.327299][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.345986][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 91.355081][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.363688][ T10] usb 2-1: Product: Н [ 91.367772][ T10] usb 2-1: Manufacturer: ࠔ [ 91.372430][ T10] usb 2-1: SerialNumber: 傆䵭꾞๧㙜⥝얻늧뭨羻ﮙ௞綊⣠ᐞ黭鶄郞ꪄ㛈댿﯉䬟啹簀樁⸇뽳蓿씷冷㰳舲弢苹셖联㙟弲뾡䃎쭒뛡ﴴꉝ촣懘 [ 91.575930][ T36] audit: type=1400 audit(1772400035.911:684): avc: denied { append } for pid=2077 comm="syz.0.504" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.618984][ T36] audit: type=1400 audit(1772400035.949:685): avc: denied { read } for pid=2080 comm="syz.3.505" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.642903][ T36] audit: type=1400 audit(1772400035.949:686): avc: denied { open } for pid=2080 comm="syz.3.505" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.667065][ T36] audit: type=1400 audit(1772400035.967:687): avc: denied { ioctl } for pid=2080 comm="syz.3.505" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.692440][ T36] audit: type=1400 audit(1772400036.005:688): avc: denied { write } for pid=2082 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.767695][ T36] audit: type=1400 audit(1772400036.089:689): avc: denied { read } for pid=2085 comm="syz.3.507" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.850210][ T513] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 91.861086][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 91.872897][ T10] usb 2-1: USB disconnect, device number 42 [ 91.883296][ T462] udevd[462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.009827][ T513] usb 1-1: device descriptor read/64, error -71 [ 92.041321][ T2094] syzkaller0: entered promiscuous mode [ 92.046870][ T2094] syzkaller0: entered allmulticast mode [ 92.053644][ T2093] tipc: Enabled bearer , priority 0 [ 92.061578][ T2092] overlay: Unknown parameter './file2' [ 92.067716][ T2091] tipc: Resetting bearer [ 92.079620][ T2091] tipc: Disabling bearer [ 92.097923][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.106623][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.115689][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.124885][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.276510][ T513] usb 1-1: device descriptor read/64, error -71 [ 92.393675][ T593] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 92.449615][ T2102] netlink: 'syz.1.513': attribute type 5 has an invalid length. [ 92.458044][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 92.532264][ T513] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 92.554675][ T593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.554924][ T2107] netlink: 'syz.1.515': attribute type 4 has an invalid length. [ 92.565373][ T593] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.582032][ T593] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 92.592283][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.608625][ T593] usb 4-1: config 0 descriptor?? [ 92.672015][ T513] usb 1-1: device descriptor read/64, error -71 [ 92.694208][ T2122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.713405][ T2122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.830270][ T2100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.839321][ T2100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.853075][ T360] usb 4-1: USB disconnect, device number 44 [ 92.859019][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.874386][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.926360][ T513] usb 1-1: device descriptor read/64, error -71 [ 92.937009][ T10] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 93.043725][ T513] usb usb1-port1: attempt power cycle [ 93.098050][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 93.106164][ T10] usb 2-1: config 0 has no interface number 0 [ 93.112449][ T10] usb 2-1: config 0 interface 41 has no altsetting 0 [ 93.120882][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 93.130307][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.138570][ T10] usb 2-1: Product: syz [ 93.142840][ T10] usb 2-1: Manufacturer: syz [ 93.147626][ T10] usb 2-1: SerialNumber: syz [ 93.153288][ T10] usb 2-1: config 0 descriptor?? [ 93.400454][ T2159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.405957][ T513] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 93.409610][ T2159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.438953][ T513] usb 1-1: device descriptor read/8, error -71 [ 93.577624][ T513] usb 1-1: device descriptor read/8, error -71 [ 93.651073][ T360] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 93.789614][ T360] usb 4-1: device descriptor read/64, error -71 [ 93.832251][ T513] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 93.854958][ T513] usb 1-1: device descriptor read/8, error -71 [ 93.993521][ T513] usb 1-1: device descriptor read/8, error -71 [ 94.014763][ T2120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.023309][ T2120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.032552][ T10] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 94.045189][ T10] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 94.053705][ T360] usb 4-1: device descriptor read/64, error -71 [ 94.060924][ T10] usb 2-1: USB disconnect, device number 43 [ 94.109531][ T513] usb usb1-port1: unable to enumerate USB device [ 94.322542][ T360] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 94.461011][ T360] usb 4-1: device descriptor read/64, error -71 [ 94.716796][ T360] usb 4-1: device descriptor read/64, error -71 [ 94.799578][ T2169] netlink: 'syz.0.526': attribute type 4 has an invalid length. [ 94.834141][ T360] usb usb4-port1: attempt power cycle [ 94.940643][ T66] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 95.102901][ T66] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 95.112393][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.120676][ T66] usb 2-1: Product: syz [ 95.124951][ T66] usb 2-1: Manufacturer: syz [ 95.129561][ T66] usb 2-1: SerialNumber: syz [ 95.196373][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 95.204024][ T360] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 95.229523][ T360] usb 4-1: device descriptor read/8, error -71 [ 95.366961][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 95.373156][ T360] usb 4-1: device descriptor read/8, error -71 [ 95.379580][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.390570][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.400470][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.413626][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.422718][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.431519][ T10] usb 1-1: config 0 descriptor?? [ 95.643967][ T360] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 95.666656][ T360] usb 4-1: device descriptor read/8, error -71 [ 95.804941][ T360] usb 4-1: device descriptor read/8, error -71 [ 95.867282][ T10] microsoft 0003:045E:07DA.000D: item fetching failed at offset 29/34 [ 95.876581][ T10] microsoft 0003:045E:07DA.000D: parse failed [ 95.882800][ T10] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 95.921134][ T360] usb usb4-port1: unable to enumerate USB device [ 95.991639][ T2167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.000352][ T2167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.009213][ T66] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:90:86:28:ab:78 [ 96.029816][ T66] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 96.043928][ T66] usb 2-1: USB disconnect, device number 44 [ 96.083875][ T351] usb 1-1: USB disconnect, device number 47 [ 96.653627][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 96.653649][ T36] audit: type=1400 audit(1772400040.668:707): avc: denied { getattr } for pid=2193 comm="syz.0.534" path="socket:[20794]" dev="sockfs" ino=20794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.684233][ T36] audit: type=1400 audit(1772400040.668:708): avc: denied { accept } for pid=2193 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.733269][ T36] audit: type=1400 audit(1772400040.753:709): avc: denied { load_policy } for pid=2200 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.837784][ T66] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 96.942165][ T2216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.539'. [ 96.992880][ T36] audit: type=1400 audit(1772400040.997:710): avc: denied { write } for pid=2218 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.012112][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 97.018483][ T66] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 97.026820][ T66] usb 2-1: config 0 has no interface number 0 [ 97.033197][ T66] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 97.043636][ T66] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.054085][ T66] usb 2-1: config 0 interface 41 has no altsetting 0 [ 97.062990][ T66] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 97.072334][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.080524][ T66] usb 2-1: Product: syz [ 97.084916][ T66] usb 2-1: Manufacturer: syz [ 97.089977][ T66] usb 2-1: SerialNumber: syz [ 97.100073][ T66] usb 2-1: config 0 descriptor?? [ 97.108195][ T2190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.115653][ T2190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.337281][ T2190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.344817][ T36] audit: type=1400 audit(1772400041.325:711): avc: denied { read } for pid=2238 comm="syz.2.546" path="socket:[22069]" dev="sockfs" ino=22069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.344913][ T2190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.670503][ T2241] netlink: 312 bytes leftover after parsing attributes in process `syz.3.547'. [ 97.844990][ T2243] netlink: 324 bytes leftover after parsing attributes in process `syz.0.548'. [ 97.935337][ T351] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 98.058717][ T66] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 12:ae:bd:65:7e:95 [ 98.071746][ T66] usb 2-1: USB disconnect, device number 45 [ 98.078473][ T66] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 98.096407][ T351] usb 4-1: Using ep0 maxpacket: 16 [ 98.103871][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.114502][ T351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.133940][ T351] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.146671][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.157025][ T593] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 98.163102][ T2258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.167174][ T36] audit: type=1400 audit(1772400042.085:712): avc: denied { write } for pid=2256 comm="syz.2.551" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.178719][ T2258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.198385][ T351] usb 4-1: Product: syz [ 98.207283][ T2257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.213483][ T351] usb 4-1: Manufacturer: syz [ 98.223530][ T351] usb 4-1: SerialNumber: syz [ 98.231750][ T2257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.384038][ T593] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.394472][ T593] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.403589][ T593] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.418282][ T593] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.427425][ T593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.435468][ T593] usb 1-1: Product: syz [ 98.439705][ T593] usb 1-1: Manufacturer: syz [ 98.444331][ T593] usb 1-1: SerialNumber: syz [ 98.459728][ T351] usb 4-1: 0:2 : does not exist [ 98.467043][ T351] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 98.478713][ T351] usb 4-1: USB disconnect, device number 49 [ 98.492039][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.585563][ T36] audit: type=1400 audit(1772400042.489:713): avc: denied { mount } for pid=2280 comm="syz.1.552" name="/" dev="configfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.611422][ T36] audit: type=1400 audit(1772400042.489:714): avc: denied { search } for pid=2280 comm="syz.1.552" name="/" dev="configfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.633822][ T36] audit: type=1400 audit(1772400042.489:715): avc: denied { read } for pid=2280 comm="syz.1.552" name="/" dev="configfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.655902][ T36] audit: type=1400 audit(1772400042.489:716): avc: denied { open } for pid=2280 comm="syz.1.552" path="/" dev="configfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.666635][ T2287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.683153][ T593] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 98.686822][ T2287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.706793][ T593] cdc_ncm 1-1:1.0: bind() failure [ 98.714387][ T593] usb 1-1: USB disconnect, device number 48 [ 98.905150][ T66] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 99.066350][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.076746][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.086413][ T66] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.095537][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.103569][ T66] usb 2-1: SerialNumber: syz [ 99.160899][ T2298] fuse: Unknown parameter '0x00000000000000000x0000000000000004' [ 99.215630][ T2302] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 99.235347][ T2302] kvm: kvm [2301]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 99.244557][ T2302] kvm: kvm [2301]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 99.289694][ T2305] bridge0: entered allmulticast mode [ 99.324621][ T66] usb 2-1: invalid UAC_HEADER (v1) [ 99.331490][ T66] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 99.341406][ T66] usb 2-1: USB disconnect, device number 46 [ 99.351013][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.399141][ T2309] kvm: emulating exchange as write [ 99.757721][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 99.914741][ T2320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.923590][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 99.924498][ T2320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.931047][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 99.957784][ T10] usb 1-1: config 0 has no interface number 0 [ 99.964144][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 99.974476][ T10] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 21072, setting to 1024 [ 99.985854][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 99.998810][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 100.008220][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.016278][ T10] usb 1-1: Product: syz [ 100.020546][ T10] usb 1-1: Manufacturer: syz [ 100.025475][ T10] usb 1-1: SerialNumber: syz [ 100.031377][ T10] usb 1-1: config 0 descriptor?? [ 100.036951][ T2313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.044202][ T2313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.205417][ T66] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 100.267885][ T2313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.275357][ T2313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.290575][ T351] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 100.376028][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 100.382564][ T66] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.393694][ T66] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.404603][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.413863][ T66] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.422554][ T66] usb 2-1: Product: syz [ 100.426829][ T66] usb 2-1: Manufacturer: syz [ 100.435010][ T66] hub 2-1:4.0: USB hub found [ 100.462251][ T351] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.472117][ T351] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.485371][ T351] usb 4-1: config 1 interface 0 has no altsetting 0 [ 100.493901][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.40 [ 100.500678][ T2330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.504084][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.512889][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 100.520556][ T351] usb 4-1: Product: syz [ 100.530930][ T2330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.538478][ T351] usb 4-1: Manufacturer: syz [ 100.543090][ T10] asix 1-1:0.34: probe with driver asix failed with error -71 [ 100.547102][ T351] usb 4-1: SerialNumber: syz [ 100.556183][ T10] usb 1-1: USB disconnect, device number 49 [ 100.655057][ T66] hub 2-1:4.0: 5 ports detected [ 100.660161][ T66] hub 2-1:4.0: insufficient power available to use all downstream ports [ 100.839660][ T351] usbhid 4-1:1.0: can't add hid device: -71 [ 100.845952][ T351] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 100.858130][ T351] usb 4-1: USB disconnect, device number 50 [ 101.082819][ T2324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.098807][ T2324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.123127][ T66] hub 2-1:4.0: set hub depth failed [ 101.128112][ T2346] SELinux: failed to load policy [ 101.151597][ T66] usb 2-1: USB disconnect, device number 47 [ 101.157868][ T2348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=782 sclass=netlink_route_socket pid=2348 comm=syz.1.574 [ 101.164457][ T351] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 101.182024][ T2348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.182647][ T2350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 101.201379][ T2350] gre0: entered promiscuous mode [ 101.212127][ T2350] gre0: entered allmulticast mode [ 101.221859][ T2348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 101.335375][ T351] usb 4-1: Using ep0 maxpacket: 32 [ 101.341897][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.353819][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.364463][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.373770][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.384058][ T351] usb 4-1: config 0 descriptor?? [ 101.393167][ T351] hub 4-1:0.0: USB hub found [ 101.473541][ T593] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 101.565318][ T2373] kvm: user requested TSC rate below hardware speed [ 101.591783][ T66] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 101.610125][ T2337] netlink: 'syz.3.570': attribute type 17 has an invalid length. [ 101.618936][ T351] hub 4-1:0.0: 1 port detected [ 101.656326][ T2376] netlink: 'syz.0.584': attribute type 27 has an invalid length. [ 101.750607][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 101.759946][ T66] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 134, changing to 7 [ 102.270306][ T2385] fuse: Bad value for 'fd' [ 102.325913][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 102.325934][ T36] audit: type=1400 audit(1772400045.989:730): avc: denied { shutdown } for pid=2336 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.352228][ T513] hub 4-1:0.0: activate --> -90 [ 102.488652][ T2394] fuse: Bad value for 'fd' [ 102.495494][ T36] audit: type=1400 audit(1772400046.158:731): avc: denied { map } for pid=2393 comm="syz.2.589" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.530629][ T2396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.539591][ T2396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.548968][ T2396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.558933][ T2396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.305344][ T2416] fuse: Bad value for 'fd' [ 103.929632][ T2419] syzkaller1: entered promiscuous mode [ 103.935446][ T2419] syzkaller1: entered allmulticast mode [ 104.067844][ T2427] input: syz0 as /devices/virtual/input/input15 [ 104.089734][ T36] audit: type=1400 audit(1772400047.650:732): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=712 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.115144][ T36] audit: type=1400 audit(1772400047.650:733): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=712 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.138882][ T36] audit: type=1400 audit(1772400047.650:734): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=712 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.169939][ T593] usb 4-1: USB disconnect, device number 51 [ 104.171890][ T36] audit: type=1400 audit(1772400047.734:735): avc: denied { accept } for pid=2426 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.219485][ T36] audit: type=1400 audit(1772400047.772:736): avc: denied { read } for pid=2434 comm="syz.2.603" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.242344][ T36] audit: type=1400 audit(1772400047.772:737): avc: denied { open } for pid=2434 comm="syz.2.603" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.330880][ T36] audit: type=1400 audit(1772400047.884:738): avc: denied { mount } for pid=2439 comm="syz.0.604" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.461627][ T66] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 104.483879][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.501477][ T66] usb 2-1: Product: 뫝譙蝡㇌쓤멁բ햒⺐ᕗ꾯췺힊計靼宾俲ﺀ禹挶牲鑳ዔ泘빌㇣䩌誤䭈腇頛⤍菖埫湹ꎸ蔚块䅍餍꥖ᷥ솘넁✎鞫␓ྎ鰎࠵줗㈿㗤ᆿ螫移ꇈ [ 104.521376][ T2446] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 104.548940][ T66] usb 2-1: Manufacturer: 왯놉힦钸ꬎ왫ꔎ깢᷻Ἀ臥护적ࣨϮ鲜ﳱ嵠櫇篭여窡鄔篸晲㳹溫呮整ﺗ뫼₢挼ᴒᕟ曡⍭뙙⮖潚ᅭ࿟鐎뵌瓇帩ꗐ㋚浩⩒帜勮쎛ﳍ澣潱協颁숙௅䖯硬唡尟椲㕾荊ඒ࣯ [ 104.602077][ T66] usb 2-1: can't set config #1, error -71 [ 104.608951][ T66] usb 2-1: USB disconnect, device number 48 [ 104.649418][ T792] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 104.756046][ T36] audit: type=1400 audit(1772400048.269:739): avc: denied { ioctl } for pid=2455 comm="syz.1.609" path="mnt:[4026532300]" dev="nsfs" ino=4026532300 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.823571][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 104.839187][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.866676][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.878895][ T2465] rust_binder: Write failure EFAULT in pid:471 [ 104.894707][ T792] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 104.917572][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.927042][ T792] usb 1-1: config 0 descriptor?? [ 105.171648][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 105.192991][ T593] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 105.332551][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 105.342419][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 105.352171][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 105.362208][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 105.362914][ T2443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.376047][ T10] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 105.380490][ T593] usb 4-1: Using ep0 maxpacket: 16 [ 105.390346][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.396184][ T2443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.402900][ T2471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.411620][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.419924][ T10] usb 2-1: Product: syz [ 105.430321][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.435301][ T10] usb 2-1: Manufacturer: syz [ 105.444407][ T593] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.449099][ T2471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.462101][ T593] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.469587][ T10] usb 2-1: SerialNumber: syz [ 105.478981][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.484369][ T10] usb 2-1: config 0 descriptor?? [ 105.500625][ T593] usb 4-1: config 0 descriptor?? [ 105.500759][ T10] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 105.712180][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 105.721245][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 105.738624][ T792] usb 1-1: USB disconnect, device number 51 [ 105.772110][ T2477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.781146][ T2477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.803325][ T10] scsi host1: usb-storage 2-1:0.0 [ 105.818056][ T10] usb 2-1: USB disconnect, device number 49 [ 105.937411][ T593] microsoft 0003:045E:07DA.000E: invalid report_count 241557071 [ 105.945291][ T593] microsoft 0003:045E:07DA.000E: item 0 4 1 9 parsing failed [ 105.952951][ T593] microsoft 0003:045E:07DA.000E: parse failed [ 105.959190][ T593] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 106.157225][ T10] usb 4-1: USB disconnect, device number 52 [ 106.546414][ T792] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 106.616536][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.621031][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 106.625430][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.718145][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.731344][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 106.744111][ T792] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 106.753296][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.761533][ T792] usb 1-1: Product: syz [ 106.765706][ T792] usb 1-1: Manufacturer: syz [ 106.770983][ T792] usb 1-1: SerialNumber: syz [ 106.775712][ T10] usb 2-1: device descriptor read/64, error -71 [ 106.784345][ T792] usb 1-1: config 0 descriptor?? [ 106.789754][ T2482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.798292][ T792] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 106.804744][ T792] usb 1-1: No valid video chain found. [ 107.015937][ T792] usb 1-1: USB disconnect, device number 52 [ 107.036969][ T10] usb 2-1: device descriptor read/64, error -71 [ 107.292492][ T10] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 107.377736][ T792] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 107.431026][ T10] usb 2-1: device descriptor read/64, error -71 [ 107.516241][ T792] usb 1-1: device descriptor read/64, error -71 [ 107.686802][ T10] usb 2-1: device descriptor read/64, error -71 [ 107.772020][ T792] usb 1-1: device descriptor read/64, error -71 [ 107.804108][ T10] usb usb2-port1: attempt power cycle [ 107.953199][ T593] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 108.027807][ T792] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 108.116116][ T593] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 108.125406][ T593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.133483][ T593] usb 4-1: Product: Н [ 108.137648][ T593] usb 4-1: Manufacturer: ࠔ [ 108.142346][ T593] usb 4-1: SerialNumber: 傆䵭꾞๧㙜⥝얻늧뭨羻ﮙ௞綊⣠ᐞ黭鶄郞ꪄ㛈댿﯉䬟啹簀樁⸇뽳蓿씷冷㰳舲弢苹셖联㙟弲뾡䃎쭒뛡ﴴꉝ촣懘 [ 108.166369][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 108.174489][ T792] usb 1-1: device descriptor read/64, error -71 [ 108.200376][ T10] usb 2-1: device descriptor read/8, error -71 [ 108.338210][ T10] usb 2-1: device descriptor read/8, error -71 [ 108.432840][ T792] usb 1-1: device descriptor read/64, error -71 [ 108.550123][ T792] usb usb1-port1: attempt power cycle [ 108.592644][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 108.615158][ T10] usb 2-1: device descriptor read/8, error -71 [ 108.660572][ T593] usb 4-1: MIDIStreaming interface descriptor not found [ 108.670212][ T593] usb 4-1: USB disconnect, device number 53 [ 108.753636][ T10] usb 2-1: device descriptor read/8, error -71 [ 108.773056][ T2532] tipc: Enabling of bearer rejected, media not registered [ 108.797135][ T2534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.805873][ T2534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.869878][ T10] usb usb2-port1: unable to enumerate USB device [ 108.912434][ T792] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 108.934894][ T792] usb 1-1: device descriptor read/8, error -71 [ 109.073565][ T792] usb 1-1: device descriptor read/8, error -71 [ 109.263472][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 109.263492][ T36] audit: type=1400 audit(1772400052.501:742): avc: denied { bind } for pid=2536 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.289045][ T36] audit: type=1400 audit(1772400052.501:743): avc: denied { bind } for pid=2536 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.308625][ T36] audit: type=1400 audit(1772400052.501:744): avc: denied { name_bind } for pid=2536 comm="syz.3.637" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 109.329638][ T36] audit: type=1400 audit(1772400052.501:745): avc: denied { node_bind } for pid=2536 comm="syz.3.637" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 109.338639][ T792] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 109.351932][ T36] audit: type=1400 audit(1772400052.510:746): avc: denied { listen } for pid=2536 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.379243][ T36] audit: type=1400 audit(1772400052.510:747): avc: denied { accept } for pid=2536 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.382335][ T792] usb 1-1: device descriptor read/8, error -71 [ 109.405518][ T36] audit: type=1400 audit(1772400052.566:748): avc: denied { write } for pid=2536 comm="syz.3.637" path="socket:[25683]" dev="sockfs" ino=25683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.563943][ T792] usb 1-1: device descriptor read/8, error -71 [ 109.594020][ T2554] netlink: 'syz.1.643': attribute type 28 has an invalid length. [ 109.679787][ T792] usb usb1-port1: unable to enumerate USB device [ 109.690603][ T359] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 109.850187][ T359] usb 4-1: Using ep0 maxpacket: 32 [ 109.856509][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.867685][ T359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.877588][ T359] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.886856][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.895563][ T359] usb 4-1: config 0 descriptor?? [ 109.901692][ T359] hub 4-1:0.0: USB hub found [ 109.999410][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 110.114771][ T359] hub 4-1:0.0: 2 ports detected [ 110.171499][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.182782][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.192703][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.206283][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.215508][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.224292][ T10] usb 2-1: config 0 descriptor?? [ 110.230469][ T10] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 110.329049][ T359] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 110.336743][ T359] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 110.345780][ T359] usbhid 4-1:0.0: can't add hid device: -71 [ 110.351823][ T359] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 110.374375][ T359] usb 4-1: USB disconnect, device number 54 [ 110.378349][ T2558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.390055][ T2558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.443720][ T2554] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 110.452142][ T2554] erspan0: default FDB implementation only supports local addresses [ 110.464382][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 110.465444][ T2558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.471781][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.479312][ T2558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.491359][ T10] usb 2-1: USB disconnect, device number 54 [ 110.660178][ T792] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 110.820056][ T792] usb 1-1: Using ep0 maxpacket: 32 [ 110.826468][ T792] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.834955][ T792] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.843734][ T792] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.853223][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.863048][ T792] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.872832][ T792] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.885980][ T792] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 110.895178][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.904612][ T792] usb 1-1: config 0 descriptor?? [ 111.018681][ T2564] incfs: mount failed -22 [ 111.064236][ T2571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.074675][ T2571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.125968][ T792] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.138552][ T792] usb 1-1: USB disconnect, device number 57 [ 111.145455][ T792] usblp0: removed [ 111.150384][ T351] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 111.312653][ T351] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 111.320978][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 111.321795][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.338895][ T351] usb 4-1: Product: Н [ 111.343193][ T351] usb 4-1: Manufacturer: ࠔ [ 111.348528][ T351] usb 4-1: SerialNumber: 傆䵭꾞๧㙜⥝얻늧뭨羻ﮙ௞綊⣠ᐞ黭鶄郞ꪄ㛈댿﯉䬟啹簀樁⸇뽳蓿씷冷㰳舲弢苹셖联㙟弲뾡䃎쭒뛡ﴴꉝ촣懘 [ 111.493672][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 111.501726][ T10] usb 2-1: can't read configurations, error -22 [ 111.587448][ T359] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 111.640658][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 111.712460][ T36] audit: type=1400 audit(1772400054.800:749): avc: denied { getopt } for pid=2576 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.732469][ T36] audit: type=1400 audit(1772400054.809:750): avc: denied { bind } for pid=2576 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.757890][ T359] usb 1-1: Using ep0 maxpacket: 32 [ 111.764444][ T359] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.773101][ T359] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.782155][ T359] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.791453][ T359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.801562][ T359] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.812194][ T359] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.813750][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 111.825849][ T359] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.842594][ T359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.842740][ T10] usb 2-1: can't read configurations, error -22 [ 111.857245][ T10] usb usb2-port1: attempt power cycle [ 111.857725][ T359] usb 1-1: config 0 descriptor?? [ 111.899981][ T351] usb 4-1: MIDIStreaming interface descriptor not found [ 111.910705][ T351] usb 4-1: USB disconnect, device number 55 [ 112.085414][ T359] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.085544][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.105210][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.116973][ T66] usb 1-1: USB disconnect, device number 58 [ 112.129063][ T66] usblp0: removed [ 112.196334][ T2593] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 112.216163][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 112.240084][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 112.248255][ T10] usb 2-1: can't read configurations, error -22 [ 112.327512][ T2596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 112.347369][ T36] audit: type=1400 audit(1772400055.400:751): avc: denied { shutdown } for pid=2598 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.386658][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 112.403323][ T2604] kvm: MWAIT instruction emulated as NOP! [ 112.421101][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 112.429356][ T10] usb 2-1: can't read configurations, error -22 [ 112.435868][ T10] usb usb2-port1: unable to enumerate USB device [ 112.493027][ T2608] netlink: 'syz.3.659': attribute type 14 has an invalid length. [ 112.522470][ T2614] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 112.706396][ T359] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 112.791625][ T351] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 112.866334][ T359] usb 1-1: Using ep0 maxpacket: 16 [ 112.872725][ T359] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.883560][ T359] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.894492][ T359] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.903743][ T359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.912048][ T359] usb 1-1: Product: syz [ 112.916444][ T359] usb 1-1: Manufacturer: syz [ 112.921305][ T359] usb 1-1: SerialNumber: syz [ 112.930184][ T351] usb 4-1: device descriptor read/64, error -71 [ 113.071312][ T593] usb 3-1: USB disconnect, device number 7 [ 113.155337][ T359] usb 1-1: 0:2 : does not exist [ 113.163765][ T359] usb 1-1: unit 9 not found! [ 113.171984][ T359] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 113.182391][ T359] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 113.190311][ T351] usb 4-1: device descriptor read/64, error -71 [ 113.199469][ T359] usb 1-1: USB disconnect, device number 59 [ 113.206535][ T2153] bridge_slave_1: left allmulticast mode [ 113.215189][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.231743][ T2153] bridge_slave_1: left promiscuous mode [ 113.237417][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.250919][ T2153] bridge_slave_0: left allmulticast mode [ 113.264578][ T2153] bridge_slave_0: left promiscuous mode [ 113.270255][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.389273][ T2625] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.396420][ T2625] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.403711][ T2625] bridge_slave_0: entered allmulticast mode [ 113.410215][ T2625] bridge_slave_0: entered promiscuous mode [ 113.418047][ T2153] veth0_vlan: left promiscuous mode [ 113.451102][ T2625] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.458302][ T2625] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.465637][ T2625] bridge_slave_1: entered allmulticast mode [ 113.465752][ T351] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 113.472195][ T2625] bridge_slave_1: entered promiscuous mode [ 113.529435][ T2625] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.536703][ T2625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.544159][ T2625] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.551714][ T2625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.572223][ T2127] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.579741][ T2127] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.589489][ T2152] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.597249][ T2152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.607368][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.614548][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.623151][ T351] usb 4-1: device descriptor read/64, error -71 [ 113.642686][ T2625] veth0_vlan: entered promiscuous mode [ 113.650394][ T2153] ------------[ cut here ]------------ [ 113.656047][ T2153] WARNING: CPU: 1 PID: 2153 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 113.656724][ T2625] veth1_macvtap: entered promiscuous mode [ 113.666437][ T2153] Modules linked in: [ 113.676082][ T2153] CPU: 1 UID: 0 PID: 2153 Comm: kworker/u8:28 Not tainted syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.688305][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.698454][ T2153] Workqueue: netns cleanup_net [ 113.703333][ T2153] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 113.709717][ T2153] Code: e8 e1 99 db fc 4b 83 3c 3e 00 75 19 e8 b5 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 a7 b7 83 fc 49 83 c7 08 eb c9 e8 9c b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 113.729742][ T2153] RSP: 0018:ffffc9001062fb90 EFLAGS: 00010293 [ 113.735931][ T2153] RAX: ffffffff8503e7c4 RBX: ffff888130f991c0 RCX: ffff888113c51300 [ 113.744916][ T2153] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103bbc0b8 [ 113.753228][ T2153] RBP: ffffc9001062fbb0 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 113.761332][ T2153] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: dffffc0000000000 [ 113.769498][ T2153] R13: dffffc0000000000 R14: ffff888103bbc000 R15: 00000000000000b8 [ 113.777717][ T2153] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 113.786842][ T2153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.793858][ T2153] CR2: 00007f0665148060 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 113.802020][ T2153] Call Trace: [ 113.805372][ T2153] [ 113.808505][ T2153] cleanup_net+0x6bd/0xc90 [ 113.813067][ T2153] ? __cfi_cleanup_net+0x10/0x10 [ 113.818193][ T2153] ? _raw_spin_lock_irq+0x93/0x120 [ 113.823331][ T2153] ? kick_pool+0xb9/0x550 [ 113.828017][ T2153] process_scheduled_works+0x7d4/0x1020 [ 113.833598][ T2153] worker_thread+0xc70/0x10b0 [ 113.838457][ T2153] ? __cfi_try_to_wake_up+0x10/0x10 [ 113.844160][ T2153] kthread+0x2c9/0x370 [ 113.848645][ T2153] ? __cfi_worker_thread+0x10/0x10 [ 113.854081][ T2153] ? __cfi_kthread+0x10/0x10 [ 113.858942][ T2153] ret_from_fork+0x64/0xa0 [ 113.863563][ T2153] ? __cfi_kthread+0x10/0x10 [ 113.868296][ T2153] ret_from_fork_asm+0x1a/0x30 [ 113.873143][ T2153] [ 113.876165][ T2153] ---[ end trace 0000000000000000 ]--- [ 113.884434][ T2153] ------------[ cut here ]------------ [ 113.890053][ T2153] WARNING: CPU: 1 PID: 2153 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 113.900397][ T2153] Modules linked in: [ 113.904344][ T2153] CPU: 1 UID: 0 PID: 2153 Comm: kworker/u8:28 Tainted: G W syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 113.917943][ T2153] Tainted: [W]=WARN [ 113.921823][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.932159][ T2153] Workqueue: netns cleanup_net [ 113.936975][ T2153] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 113.943255][ T2153] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 52 b7 83 fc 49 83 c7 08 eb c5 e8 47 b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 b7 83 fc 5b 41 5c 41 5e 41 [ 113.963510][ T2153] RSP: 0018:ffffc9001062fb90 EFLAGS: 00010293 [ 113.969746][ T2153] RAX: ffffffff8503e819 RBX: ffff888103bbc800 RCX: ffff888113c51300 [ 113.978641][ T2153] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103bbc808 [ 113.986703][ T2153] RBP: ffffc9001062fbb0 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 113.994696][ T2153] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: dffffc0000000000 [ 114.003116][ T2153] R13: dffffc0000000000 R14: ffff888103bbc000 R15: 0000000000000008 [ 114.011336][ T2153] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 114.020614][ T2153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.027310][ T2153] CR2: 00007f0665148060 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 114.035367][ T2153] Call Trace: [ 114.038782][ T2153] [ 114.041737][ T2153] cleanup_net+0x6bd/0xc90 [ 114.046179][ T2153] ? __cfi_cleanup_net+0x10/0x10 [ 114.051247][ T2153] ? _raw_spin_lock_irq+0x93/0x120 [ 114.056725][ T2153] ? kick_pool+0xb9/0x550 [ 114.061233][ T2153] process_scheduled_works+0x7d4/0x1020 [ 114.066822][ T2153] worker_thread+0xc70/0x10b0 [ 114.071637][ T2153] ? __cfi_try_to_wake_up+0x10/0x10 [ 114.077118][ T2153] kthread+0x2c9/0x370 [ 114.081357][ T2153] ? __cfi_worker_thread+0x10/0x10 [ 114.086500][ T2153] ? __cfi_kthread+0x10/0x10 [ 114.091127][ T2153] ret_from_fork+0x64/0xa0 [ 114.095709][ T2153] ? __cfi_kthread+0x10/0x10 [ 114.100332][ T2153] ret_from_fork_asm+0x1a/0x30 [ 114.105185][ T2153] [ 114.108318][ T2153] ---[ end trace 0000000000000000 ]--- [ 114.148592][ T2153] ------------[ cut here ]------------ [ 114.154116][ T2153] WARNING: CPU: 1 PID: 2153 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 114.164059][ T2153] Modules linked in: [ 114.168108][ T2153] CPU: 1 UID: 0 PID: 2153 Comm: kworker/u8:28 Tainted: G W syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 114.182201][ T2153] Tainted: [W]=WARN [ 114.186196][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.196421][ T2153] Workqueue: netns cleanup_net [ 114.201285][ T2153] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 114.206869][ T2153] Code: 3c 20 00 74 08 48 89 df e8 8f 63 f6 fc 48 8b 3b e8 27 9e e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 c3 b7 00 cc e8 52 81 9e fc <0f> 0b e9 b0 fd ff ff e8 46 81 9e fc 0f 0b e9 18 fe ff ff e8 3a 81 [ 114.226724][ T2153] RSP: 0018:ffffc9001062fb70 EFLAGS: 00010293 [ 114.232986][ T2153] RAX: ffffffff84e91e0e RBX: ffff888130f991c0 RCX: ffff888113c51300 [ 114.241293][ T2153] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888113c51300 [ 114.249384][ T2153] RBP: ffffc9001062fb98 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 114.257626][ T2153] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: 1ffffffff0fa6870 [ 114.265843][ T2153] R13: dffffc0000000000 R14: ffff888130f99dc0 R15: dffffc0000000000 [ 114.274027][ T2153] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 114.283092][ T2153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.290486][ T2153] CR2: 00007f0665148060 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 114.299144][ T2153] Call Trace: [ 114.302536][ T2153] [ 114.305511][ T2153] xfrm_net_exit+0x31/0x80 [ 114.309954][ T2153] cleanup_net+0x6bd/0xc90 [ 114.314600][ T2153] ? __cfi_cleanup_net+0x10/0x10 [ 114.320091][ T2153] ? _raw_spin_lock_irq+0x93/0x120 [ 114.325361][ T2153] ? kick_pool+0xb9/0x550 [ 114.329886][ T2153] process_scheduled_works+0x7d4/0x1020 [ 114.335576][ T2153] worker_thread+0xc70/0x10b0 [ 114.340445][ T2153] ? __cfi_try_to_wake_up+0x10/0x10 [ 114.345680][ T2153] kthread+0x2c9/0x370 [ 114.350090][ T2153] ? __cfi_worker_thread+0x10/0x10 [ 114.355851][ T2153] ? __cfi_kthread+0x10/0x10 [ 114.360720][ T2153] ret_from_fork+0x64/0xa0 [ 114.365412][ T2153] ? __cfi_kthread+0x10/0x10 [ 114.370535][ T2153] ret_from_fork_asm+0x1a/0x30 [ 114.375836][ T2153] [ 114.378872][ T2153] ---[ end trace 0000000000000000 ]--- [ 114.539337][ T2153] bridge_slave_1: left allmulticast mode [ 114.546628][ T2153] bridge_slave_1: left promiscuous mode [ 114.552646][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.560413][ T2153] bridge_slave_0: left allmulticast mode [ 114.568036][ T2153] bridge_slave_0: left promiscuous mode [ 114.574147][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.612057][ T2153] bridge0 (unregistering): left allmulticast mode [ 114.732609][ T2153] tipc: Left network mode [ 114.738233][ T2153] veth1_macvtap: left promiscuous mode [ 114.744024][ T2153] veth0_vlan: left promiscuous mode [ 115.106598][ T2153] bridge_slave_1: left allmulticast mode [ 115.112319][ T2153] bridge_slave_1: left promiscuous mode [ 115.118015][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.126164][ T2153] bridge_slave_0: left allmulticast mode [ 115.131951][ T2153] bridge_slave_0: left promiscuous mode [ 115.138374][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.146147][ T2153] bridge_slave_1: left allmulticast mode [ 115.152004][ T2153] bridge_slave_1: left promiscuous mode [ 115.157707][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.165684][ T2153] bridge_slave_0: left allmulticast mode [ 115.171577][ T2153] bridge_slave_0: left promiscuous mode [ 115.177224][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.330708][ T2153] tipc: Disabling bearer [ 115.336036][ T2153] tipc: Left network mode [ 115.342511][ T2153] veth1_macvtap: left promiscuous mode [ 115.348092][ T2153] veth0_vlan: left promiscuous mode [ 115.353768][ T2153] veth1_macvtap: left promiscuous mode [ 115.359696][ T2153] veth0_vlan: left promiscuous mode