last executing test programs: 1m17.954241356s ago: executing program 0 (id=55): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000480)={0x0, 0xfffffffe, 0x80}, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40806685, &(0x7f0000000000)={0x7, 0x9}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_ublk_add_dev(r0, r6, r1, r2, &(0x7f0000000180)={0x2e, 0x43, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x3, 0x911, 0x0, 0x0, 0x1000, 0x2, 0xffffffffffffffff, 0x0, 0x18}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m17.888629887s ago: executing program 0 (id=56): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}}) (async, rerun: 64) r1 = gettid() (rerun: 64) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) (async) r3 = inotify_init1(0x80000) close(r3) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xd47}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/279, 0x117}, {&(0x7f0000000040)=""/182, 0xb6}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000000)=""/21, 0x15}], 0xa}, 0x120a}], 0x3, 0x2, 0x0) 1m17.019835956s ago: executing program 0 (id=59): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x15, 0x4, "84bd00a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000600)={0x14, &(0x7f0000000340)={0x20, 0x9, 0xe9, {0xe9, 0xe, "701c68fcc1c9963e3aa8843d8283374a16b81433c59309cd802ef939ce86ccadd62ede6c1472f31087af76db598f4874e0905430908086bd9ad95d305f9231c5e121cb2debeb38e96bac30c7376373cff6d8a3db0c4048936852ecdf403dd71ddf37e02a85f4bb2417685a2048408032c94a0ca6f4077fc6cc14cf60e33e7d9e0a9e5a1bbc50a4837be6d88fbb253ddd0a0e5d2edc03911804e8f500847504cc4fd1e3a0be9238bbfcc9563708b22978a2b4b6898bc9414cdded328073cc75f9463c79f2834beebb01acae7564bf657831181a845a9ee3d94c4ff546d8085beca65d91fd0544ae"}}, &(0x7f0000000580)={0x0, 0x3, 0x60, @string={0x60, 0x3, "9fe8aab08c0851a10416ef93ec2d12b408dd6fd0987ee4af18cbf912fef88de9f82e47f44835f92008688c1d4bfefa746297c91e23afbdb80b7a8d233d54266ed91b0103b8f6ec7e9747b0fe5464b4ddb44eec525ec5a7b0428d12ac39fa"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x0, 0xa1, "a47652f455591fe85611a55266069f58e8c5ed62df2696030ac6a00b6c55ab6670f40e459a97b541e5e04e5414cce2013f19b4b6721fc10b0613d2e436be2c6cbb2fa4e4e21a4e87d7b90ec2ebaa626f3f0cc15ac486fa5d4c20902a4fc4eaae883f458e573d5013d746c26afccca6bc3c8e3b9458bc2b3b29e3c52647e1b623e5e506770f6d17d35c7ac7488efe4940bfaf4bf2076b64d65061e12511612f3751"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x81, 0x1, "b3"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, '/'}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, "a8fc"}, &(0x7f0000000b00)={0x20, 0x84, 0x4, "8f97cb0b"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "c05beb"}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000000080)='1-N:', 0x4, 0x3}]) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5b00, &(0x7f0000000180)={0x0, 0xaaa3, 0x40, 0x3, 0x9f, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_complete(r8, r6) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x5a, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000200), 0x6) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$rfkill(r9, &(0x7f0000004c00)={0x3, 0x8, 0x2, 0x1}, 0x8) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.530037267s ago: executing program 0 (id=73): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x30}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m14.517899627s ago: executing program 0 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000480)={0x4, 0x0, [{0x4, 0x1, 0x6, 0x2, 0x7, 0x0, 0xfffffffe}, {0x80000001, 0x7ff, 0x2, 0xf6, 0x3ff, 0x9, 0x7}, {0xb, 0x8, 0x0, 0x6, 0x4, 0x4, 0x2}, {0x80000019, 0x80000000, 0x6, 0x400, 0x9, 0x8001, 0x80000001}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x105a42, 0x32) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r1, &(0x7f00000004c0)=0x100, 0x89, 0x0) 1m14.379456881s ago: executing program 0 (id=75): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) (async) r1 = dup(r0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x800000003, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x50) (async) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80894}, 0x2404c810) (rerun: 64) 1m14.378696131s ago: executing program 32 (id=75): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) (async) r1 = dup(r0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x800000003, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x50) (async) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80894}, 0x2404c810) (rerun: 64) 4.63280803s ago: executing program 3 (id=470): r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {0x375831946dd402e7, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x2}, 0x40, 0x49, 0x3, 0x7, 0x1, 'syz0\x00', "30c0dcb130a8d5ee9fa5c279a29df3da6f2dd8306ae8d3b4acac8354622a7c8c", "51e70d0a912253b2747de26ab2fef78f9c27273db6248f309bca7485d1a5962d", [{0x4, 0x7, {0x0, 0xf}}, {0x9, 0x7, {0x0, 0x2}}, {0x6, 0xff, {0x2, 0x8}}, {0x2, 0x7, {0x2, 0x6}}, {0x100, 0x6, {0x2, 0x8000}}, {0x4, 0x0, {0x3, 0x8}}, {0x1, 0x401, {0x1, 0x55d02345}}, {0x3, 0xf12, {0x1, 0x9}}, {0x9, 0x9, {0x2, 0x9}}, {0x6, 0x8c, {0x3, 0x8}}, {0x7, 0x0, {0x1, 0x40}}, {0x31, 0x2, {0x0, 0x3}}, {0x8001, 0x2, {0x3, 0x5}}, {0x40, 0x7, {0x0, 0x1}}, {0xb6e6, 0x1, {0x3, 0x1}}, {0xa, 0x400, {0x3, 0x100}}, {0x2, 0xfffb, {0x3, 0x7c2b}}, {0x8, 0x380, {0x0, 0xb}}, {0x8000, 0x9, {0x2, 0x4}}, {0x1, 0x4, {0x0, 0x2}}, {0x6, 0x6, {0x0, 0xfffffff8}}, {0xfffe, 0x2, {0x3, 0x7fffffff}}, {0x9, 0x2, {0x3, 0x8}}, {0x7, 0x1, {0x3, 0x1}}, {0x7, 0x9, {0x1, 0x96c}}, {0x9, 0x7f, {0x0, 0x7}}, {0x6, 0x7, {0x0, 0x7fff}}, {0xcd6, 0x2, {0x1, 0x2}}, {0x3, 0x7, {0x0, 0x88}}, {0x6dc6, 0x2, {0x1, 0xe152}}, {0xe0, 0x8, {0x2, 0x5583}}, {0x7f, 0x2, {0x0, 0x6}}, {0x9, 0x4d33, {0x2, 0x4}}, {0x6, 0xfffd, {0x0, 0x8}}, {0x400, 0x7, {0x2, 0x8000}}, {0x100, 0x4, {0x3, 0x1}}, {0x5, 0x9, {0x1}}, {0x1, 0x2, {0x3, 0x4}}, {0x4, 0x2, {0x2, 0x3}}, {0x0, 0x9, {0x1, 0xf906}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x3b, 0xf, 0xb, 0x3ff, 0x9, 'syz0\x00', "4dece33d6825ed6aa4e6c029f3ef021c6eabbac334692cfb0842677f2d55b4b6", "245a259cdb97c2e7f4bc0c2484e52d4f6a44cfb7805a5e5301279feea3aa1e4c", [{0x1000, 0x9d, {0x2, 0xff}}, {0x8, 0x400, {0x3, 0x584}}, {0x2, 0x101, {0x3, 0x1}}, {0x3, 0x6, {0x1, 0x9}}, {0x8, 0x9, {0x2, 0x3}}, {0xb, 0xfff, {0x0, 0x5}}, {0x0, 0x0, {0x2, 0xff}}, {0x9, 0x6, {0x3, 0x9}}, {0x81, 0x0, {0x1, 0x4}}, {0x79e, 0xff, {0x3, 0x4}}, {0x38, 0xfff, {0x3, 0x6}}, {0x100, 0x995, {0x1, 0xffff3567}}, {0x101, 0xff01, {0x1, 0xda0000}}, {0x6, 0x0, {0x1, 0x3}}, {0x2, 0x4, {0x1, 0x10001}}, {0x661, 0xc, {0x2, 0x3}}, {0x3, 0x7ff, {0x1, 0xfffffff7}}, {0xca6, 0x8, {0x1, 0x5}}, {0xf000, 0x0, {0x1, 0x8}}, {0x10, 0x9c, {0x1, 0x5}}, {0x6, 0x2, {0x1, 0x9}}, {0x6, 0x3}, {0xfff9, 0x6, {0x1, 0x1}}, {0x1, 0x9, {0x3, 0x6}}, {0xfffb, 0x4c70, {0x2, 0x2}}, {0x1, 0x3, {0x0, 0x80000001}}, {0x0, 0x1, {0x0, 0x3}}, {0x2, 0x8, {0x3, 0xfffffffa}}, {0x3, 0x689, {0x0, 0x4}}, {0xc, 0x401, {0x1, 0x7}}, {0xf10, 0x1, {0x0, 0xffffffff}}, {0x100, 0xe332, {0x2, 0x7}}, {0x5, 0x5, {0x0, 0x7}}, {0x4, 0xffff, {0x0, 0x335b}}, {0x2d54, 0x2, {0x0, 0x90b}}, {0x1, 0xff00, {0x2, 0xfffffcf4}}, {0x7, 0x4, {0x3, 0x3}}, {0x7, 0x3, {0x3, 0xd}}, {0xfff9, 0x6, {0x2, 0xe2}}, {0x7, 0x101, {0x1, 0x2}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r3, 0x8004af7a, &(0x7f0000000640)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) mkdir(&(0x7f0000000840)='./file0\x00', 0x20) read(0xffffffffffffffff, &(0x7f0000000880)=""/236, 0xec) r6 = syz_open_procfs(r0, &(0x7f0000000980)='net/hci\x00') sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="badfe3cf9b0a196a1adf06e4b2d323c64291b01cd7a6223fac5e7f6adac49b778ce74149f42b5bf7c823f49c819b865993e831c1b0171f0c986a8f923eeca5efd1737ae1caf7565fc6f2e91e7830b4e9e7296a66675416de9e7d4e628c155be68d751e5894fd61c8df9d91633be111c008d94ec74ae63412e11e3e7e24bb55eeedd8df64ca6484d3b46d307c9564d3c049a3d6db36bb8d8e97e0f5844ed79569750271cb1c41106184dfd98d6b22d853587d2b941173fc626da6316d131b90311526af3a88", 0xc5}], 0x1, &(0x7f0000000b80)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r3]}}], 0x20, 0x400c0c4}, 0x4000090) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000c00)) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000c40), 0x80000, 0x0) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c80), 0x100, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000dc0)={0x2}) syz_open_dev$ttys(0xc, 0x2, 0x1) r9 = inotify_init1(0x800) inotify_add_watch(r9, &(0x7f0000000e00)='./file0\x00', 0x100) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x14) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000e40)={@remote, @private2}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r8) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x19c, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3fd}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe3, 0xac, "764f56ea1d1839128c48cd43e4564ace5dde07d41f1e987c50328e016d89b672bf357c4cab966d87c2ba774154805039dddfb9c3a5ac3728c9801602ee0d5c42093a666c1cd06315b8a99d45db6cc8a496e31cfbb9107824d913ad4834a41d09eda64e554a09b40a9a3d9ddbe421aab9ac172df1d8e1d5f0bd1669502b7f1797f2f5113e083783dd8de990deed25277a4decb69089e23d5fc867cb2f6ade4f0bea822ff25a2906762d614ea644a382405a897b2e5cb5bb6500623045dd7a6993e7d2f509c4aa5d71e5d52d84baec19e62006e528f73146a42bd8901d5f8b9a"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x93, 0xac, "9776330502aedabe8c0f53c388eec6cab03ba369ef1d8af180431fd2313a20c1152223c6e3bed2c84ebbe2d14f071c03c5c3247d894fb46666c6b8b89304c0b05467a9405960c88fed9d2136cbf48d3b1c3759b3d17884c4c41812a4b99e579a201ca37972c345f3cda2f32f4cb86a5550e8d4e43b1269561a42373558e3b680c162a5a381091d4feaaf8dcb5a6f15"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40840) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x58}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) open_tree(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x1000) symlink(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='./file0\x00') 4.61078724s ago: executing program 3 (id=471): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x14, 0x9, 0x3, 0x25dfdbff, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20044010) r3 = memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r3, 0x409, 0x29) futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) chdir(&(0x7f0000000540)='./cgroup\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x98) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001e00090006000000fcdbdd2502"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4010, r3, 0x4e650000) prctl$PR_SCHED_CORE(0x3a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) 4.00934446s ago: executing program 4 (id=479): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x600}}, 0x30) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x31) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="401506000400db07ed3e2dad"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r3, 0x12) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) munlockall() (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xa870) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0xcc840000) (async) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64) ioperm(0x1, 0x3, 0x163f) (async, rerun: 64) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000200)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0x3a, 0x2, 0x6, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4e7, 0x10, 0x9, 0x27c5}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x1d, 0x7, 0x7}}, @in_dx={0x69, 0x20, {0xe2ef, 0x3}}, @uexit={0x0, 0x18, 0x3db4}, @wr_drn={0x68, 0x20, {0x4, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x9}, @wrmsr={0x65, 0x20, {0x401, 0xd}}], 0x160}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$getregset(0x4204, r5, 0x201, &(0x7f00000001c0)={0x0, 0x300}) (async) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 3.282991143s ago: executing program 2 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xadb8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9bdd}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9ec}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x64}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xdcef}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x59}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1c00}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x1805}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x74d}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x400000}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2000000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt(r0, 0x7f, 0x3, &(0x7f0000000240)="61dfbcaf4f8437d49515fa8fcdd0314b36b38138c3834fee6b931969d6b095b76c7b56e19e1f8dc4694cd9ef789c01217da9bc6b9bfb9da001b1caac1bc92c0cc3e7086e9f3364f657ed6fd462b02d567bd429579e2a40d51f397f3df08deeb8f93443b41290c97e3c78e1db937d10aab6cf811ab76d4a00c589c47e", 0x7c) (async) gettid() (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0), 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x401, 0x9, 0x0, 0x800}, {0x4, 0x0, 0x2e}, {0x5, 0xa3, 0x6f, 0xcf6d}, {0x2, 0x5, 0x3, 0x3ff}, {0xff, 0x5, 0x2, 0x10}]}, 0x10) (async) syz_clone(0x0, &(0x7f0000000380)="455136b19c5d1800dc0272decdecf2cd50491a28aa6298b40a1480586a1ca693d5fc05b9b62fa3702a95a972ca920f71996b0cd35e84aa81449ab097842af571c2366aa924ebcdc2fffe2518e758adf0bcf32c1ad374e9ef104d72f40ee7b3c78dc6520ded526049a8ec2ea869d39d79b2b110e1d5af7d4ecaf887a8a307ecc35d509dcf1d33f291d9cf5828a6427fc06b18c322a4e372ac58f35261af0413a164210dfdaa4e6f9ad58aa945c69b31ca131fe8c2661555592389f1dfce505010868b6f88764608", 0xc7, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="c319de994130af2d8f170489e83d9f292611c4a5f5abc510098ef23f97798666bca997f13aff82435203cd5a2b58423e3cfb083bfb72ac50097bdeb749b30559a9969201d85f331767005787148868c8034bdd2ef7813731cf4535661380a03a19d08a041807ac6a2d52b4d4d81be88633bdf83c1337b8fd16224bc4395c8e27c656729884b229e70b04a87c128435f9aefc523dbe8c25785086f521b3939d605fa2001d9e3d5c0a7969a942e8c879f312b6ad8cf24fb3315f7e6be9eac69627aa54d198df267da992053c60310c334e7f94b253231c46199e790dc94a83332881e9835092") (async) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) accept4$unix(r2, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000780), 0x5, 0x200) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000880)={0x4, &(0x7f00000007c0)="f03062477d8bbaacd1803260408282c7ab48efe55f6088c024de7c9cd67fdaff0c8825bba087c2637327140a2d4ac93c075f935fba9c28e4bea35d3cccc4d17aa6486bb4ae36dddc2ebdcea4bc88d0548304525c4089c771fbbc7df99a5ebf2674ab751fda904376a215f831f5bbe2aeca1eb7eabb63c6442304847e846202e6a0caa286d8b4d0dae93b003634ec077d0635d51aa4f712391ddad4d7913b43"}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000008c0)=0x1000028, 0x4) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900), 0xc0c0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c880}, 0xc04) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000a80)={@private2, @empty, @local, 0x1, 0x3ff, 0x4, 0x500, 0xa000000, 0x0, r6}) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000b00)={0x8001, 0x22, 0x4, 0x1}, 0x10) (async) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000c00)={0x0, 0x401}, 0x8) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c80)=0x14) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000cc0)={@private2, r8}, 0x14) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000d00), &(0x7f0000000d40)={'U+', 0x4}, 0x16, 0x3) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf34b52f19d6faf76}, 0x80) syz_usb_connect$cdc_ncm(0x3, 0x8d, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x0, 0x80, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b3d2def40a08"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x1ff, 0x7fff, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x28}, [@country_functional={0x6, 0x24, 0x7, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2558b81bfc0660ac, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0xe6, 0x0, 0x6, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x2, 0xd4, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xb4, 0x47, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3f, 0x6, 0xf1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x56, 0x40}}}}}}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x200, 0x8, 0x65, 0xa8, 0x10, 0xfb}, 0x24, &(0x7f0000000f80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x9, 0x0, 0x7, [0x0, 0xc0, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x4a206d3076ecb7b8, 0x1, 0x0, 0x9}]}, 0x3, [{0x27, &(0x7f0000000fc0)=@string={0x27, 0x3, "093f2827e83a6e9354db4a40a8b4c834a8a6377d2d6eafbb889440d7748511a9c3cf42ac89"}}, {0xcd, &(0x7f0000001000)=@string={0xcd, 0x3, "ae263451b3c02b03b7bfa494a4e768c234036aec1689f58631baadced49fd66d56a8d9b857a9bc6b75caa98cd6bcdba4f17443e6e1f4e961837bb5add103e76f392614c0634449a2771e03f2f70b5b2b90f8fefaf7634cd8d9c2ea43d7d3eb4a37e12ec75271eebcece7b21a4316bd4bdb5a415cb126864aa5ded9eabc7f323f86a07a7c87e2b004ee2eb125364d912eba05aaeed7c693fecf0b229b69ea3809298a5c753ade0d3f9bfed04a8247a9b6dbb9d77d75df201c0515663d9368236b0429ef59a12c7821f2e370"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x424}}]}) (async) ioctl$VHOST_VDPA_GET_STATUS(r5, 0x8001af71, &(0x7f0000001180)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x8) 1.960959426s ago: executing program 2 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.86349337s ago: executing program 4 (id=492): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0xb24160790e64da03, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xc1, 0x1}}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x90) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e", @ANYRES32=0x0], 0xf0}}, 0x804) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.743018773s ago: executing program 2 (id=493): mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000001080)) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) r2 = syz_open_dev$loop(&(0x7f0000001e00), 0x1, 0x4600) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000001e40)) 1.673962595s ago: executing program 2 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x14}, @fd={0x66642a85, 0xf0}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 1.591381338s ago: executing program 2 (id=495): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x49db, 0x0, 0x8, 0xffff, 0xf, "eca144f13d760700"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xfffffff9, 0x5, 0xb2, 0x10, "1b09000940000000ebffffe578000000001000"}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000140)={0x8d6, 0x8}) r2 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) 1.590383879s ago: executing program 3 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40302, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) (async) r5 = dup(r3) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000010ffffffffffffaaaaaaaaaabb86dd6917007e000088000000000000000000000000000000004700000000000000000000000000000001"], 0x3a) 1.53910661s ago: executing program 3 (id=497): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x80002005}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x80002005}) close(0x3) (async) close(0x3) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100151f30940cb040001bb000000000109021200090000000009042a00008004"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100151f30940cb040001bb000000000109021200090000000009042a00008004"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'ipvlan0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.516125061s ago: executing program 2 (id=498): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000040)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0xfffe, 0x1003}, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000680)={0x20, 0xa, 0x21, "f09b4472517f417533fce7e20cd7dd8080ff8d1cd9175c2948ac26d39a4a7329bc"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0x20, 0x81, 0x2, "c916"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "0013"}, 0x0, &(0x7f0000000940)={0x20, 0x84, 0x1, "e1"}, 0x0}) chroot(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) 1.297514718s ago: executing program 4 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c0021fff0000000000000000700000016000000feffff7f0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4000801, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000001500)={0xda, 0x0, 0x832920ca0c1996b5}) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 1.22439013s ago: executing program 1 (id=500): socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) (async, rerun: 64) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x80, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x50, 0x0, &(0x7f0000000100)="68b1ac6a1333b4379425a1feb2cee2ec4c39868ca3558c8a07b44745b877ee4948ec608817388f7b65fc6c94eff78663745348b0d00c96680b4a1000590cdc0fb994101d4800000000000000005d8e00"}) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0x80dc}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x8000, 0x2, 0x318, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7668, 0x10, 0x0, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf271, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x17, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904b4"], 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_eeprom={0x43, 0x3, 0x6}}) (async, rerun: 32) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a}}]}}, 0x0) (rerun: 32) 1.22378335s ago: executing program 1 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.22305368s ago: executing program 1 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) unshare(0x30000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200016d9bffffff000000000a"], 0x18}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0xc, 0xbe, 0x400}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x401}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)={0xfd}) 1.21886593s ago: executing program 1 (id=503): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xa, 0xf9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x6a, {0x6a, 0x7, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251fc9025177f8598707761b5af5cb90478ae05f519d1a0763be430c90b9723fcf589b63fb3d69a978b0a1bff3612ce9ffbfad296e4dc14ad10b0951ef84a5b76fc5d06f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.21876763s ago: executing program 1 (id=504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000005c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/4096, 0x1000, 0x1, 0x14}, @fd={0x66642a85, 0x300}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 1.198696761s ago: executing program 1 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x98, &(0x7f0000000140)=@string={0x98, 0x3, "bb30119a4e47f1ea60d3429bbf28902ea1ee7813cb71a2808f359219c4437b9a365ba7e27b1a53b80d35d41ce708546e6f25e7006ac61e73ce0d02983bc7ea6fe902d48332167f57b8abc70f23f907415974641b296171f08efb57b33efa73cfd8b390245cb8c6ab7c0bc81043eda5c0fdf9c0b45d341dadd2ba79de2c28818238731267dbfea74840c64e1eb2afceff1708796bcb47"}}, {0x33, &(0x7f0000000200)=@string={0x33, 0x3, "a0ba9437e0ba06382b02d974288a129211c15a8fe721e389b93ac0d117734677f46e5ea895cb7e88d35ef50a1bade0b1dd"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41f}}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x21ce10, 0x2) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) syz_usb_connect$uac2(0x1, 0xe5, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x5, 0x40, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0xb, 0x34, 0x4}, [@effect_unit={0xf, 0x24, 0x7, 0x3, 0x2, 0x3, [0x1, 0x0, 0x0, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0x1, 0x0, 0x8, 0x81, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, [0x9, 0x1, 0x8, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0x5, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x92, 0x6, 0xf3, {0x8, 0x25, 0x1, 0x80, 0x33, 0xff, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x80, 0x5, 0x0, 0x0, 0x6, 0x4, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x9, 0x4, 0xf2, 0x8}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x3, 0x7, 0x0, "dce3013dfe1f3d4690"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x70, 0x0, 0x8, "7835cc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7, 0xee, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x81, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0x8, 0x41}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x81, 0x8, 0x22, 0x10, 0x3}, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x4, 0xb, 0x80, 0x9}]}, 0x7, [{0x39, &(0x7f0000000500)=@string={0x39, 0x3, "ae0d98472007b241ad3b014d31de8a49ed6eebb3b25cfeb5adedc97f1a95707f06c3360206d722f7670c16dfa015c3ff8a5001dda13983"}}, {0x72, &(0x7f0000000540)=@string={0x72, 0x3, "3f67c75dde24fb3e142839e4faab4344eae8a5e33d5e8c79116e5c785c5928093bb65becf8b19d24ed6677646865969ca9682be0b5e59296738dd9904d7bb54c89e0534a1eba8cb67c714477fb4852c58ea30a04e2ccddccc33883e88ac4ee6e512ea3111c64158cbb194bd6d0c0254e"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xb0, &(0x7f0000000600)=@string={0xb0, 0x3, "358e3da38a28eb15a5d0e1a5986a59c5d698d1562ada7cfb2cd6a842a0e6f109afc9b08d3e60a6aff8ae3fce47b6a3988b98c00599d48617deae3d0aba5d1bb74fb6197b3abd0ee835a52d5df8f5c8fcec1d86bf63780f39e0bd5fb1d52f0be444e931776eed26ef1421a7527025d8c8b00983330a19689b172e2f0c3cb9f60e5c81e1608ee8d2ca5cb6f825f727f639d4a4a38e31a86adda9f34cd0d96543436324ed4d3bad504c5a95303fd204"}}, {0xa3, &(0x7f00000006c0)=@string={0xa3, 0x3, "cb28ae3c334ac405ad5999041ca621b72ea5a4cbf732dd19aa02386e99780b363fa7443a4c7f3c70da2e4d809da827316b15546a860c41e0ec1b12548aadda1dc305121c87bd338f066de1c7c24df7fe20c88037beeea4218d23eedbdcfa1706726f20659964720c5dbd1d031eb9f7ecf0002ed813f7dbc33bd70f70ad001683c3cb00bc921953da767ccc4c53026c8a63642193483e6fce7987414cf1e7b6daa6"}}, {0x2a, &(0x7f0000000780)=@string={0x2a, 0x3, "66398e265dc4d2f214dd990109d87468e0a7ca1bbc94028be8d5a3589b8c14c052569653a268baad"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x419}}]}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0x180000000) 715.267527ms ago: executing program 4 (id=506): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x48040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x72da02, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xffff1000, 0x3000, 0x6, 0x2, 0xfffffffd}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x58000, 0x0, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1a000, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) mremap(&(0x7f0000863000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x0, 0x15}, @void, @eth={@remote, @broadcast, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x2a, 0x4, 0x0, 0x9, 0xe0, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0x23, 0xaf, [@broadcast, @multicast1, @loopback, @remote, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @cipso={0x86, 0xd, 0x3, [{0x4, 0x7, "11b5b41e94"}]}, @lsrr={0x83, 0x1f, 0x3f, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x3b, 0x0, [{0x0, 0x10, "ade936f477bdf2f2bbe3d4ecbba1"}, {0x0, 0x12, "d11393a9646044123f6608c92f415a1a"}, {0x0, 0x6, "22895507"}, {0x563878c397c197d6, 0x6, "bbc84288"}, {0x0, 0x7, "4988fc2478"}]}]}}, "06de27622930f2be45f277d5fab1756f8800536b205e003f91b454a2b16913e0bb32a462adbb165890353c215de337192c446ca48c2110dc"}}}}}, 0xfa) 714.371177ms ago: executing program 4 (id=507): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf0001000000000000000000000000000000000000009f0000000000000000ffffac1414bb000103940400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0xfffd, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0x3, 0x8251c, 0x2, 0xffffeffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) (async) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x80, 0x20, 0x80, 0x8, {{0x6, 0x4, 0x0, 0x33, 0x18, 0x64, 0x0, 0x0, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@end, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', r8, 0x80, 0x8, 0x81, 0xbf0, {{0x1c, 0x4, 0x0, 0x2, 0x70, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x20, 0xc5, 0x0, 0x2, [0xa, 0xfffffff7, 0x8, 0x100, 0x12, 0x1, 0xd]}, @lsrr={0x83, 0x1f, 0x44, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @remote, @empty, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@rand_addr=0x64010100, 0xfffffffb}, {@local, 0xd}]}]}}}}}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r6, 0x3, 0x11, r5, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x13c, 0x10, 0x633, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x87}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x327, 0x4, 0x0, 0x4, 0xfff, 0x0, 0x2}, {0x7}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0x2, 0x1}, [@algo_crypt={0x4b, 0x2, {{'ecb(cipher_null)\x00'}, 0x18, "0a959c"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r6, 0x2000000, 0x11, r10, 0x0) 683.491868ms ago: executing program 4 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a440)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0xff01) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1804010, &(0x7f0000000100)={[{@huge_advise}, {@quota}], [{@smackfsroot={'smackfsroot', 0x3d, ')@)^'}}, {@dont_measure}, {@subj_role}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x39, 0x38, 0x0, 0x66, 0x65, 0x35], 0x2d, [0x33, 0x35, 0x63, 0x65], 0x2d, [0x61, 0x66, 0x65, 0x30], 0x2d, [0x66, 0x37, 0x0, 0x34], 0x2d, [0x31, 0x32, 0x64, 0x34, 0x33, 0x38, 0x56, 0x30]}}}]}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0xe0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x77, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000240)={0x0}) ioctl$UBLK_U_CMD_SET_PARAMS(r9, 0xc0207508, &(0x7f00000003c0)={r10, 0xffff, 0x70, &(0x7f0000000340)={0x70, 0xd, {0x4, 0x9, 0xa, 0x9, 0x0, 0x8, 0x10, 0x2, 0x2ad8}, {0x6, 0xb997, 0x1000, 0x81, 0x313}, {0x200, 0x1, 0xc, 0x3ff}, {0x76, 0x3, 0x6}}}) syz_usb_control_io(r8, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00074b0000004b31f70ba3a1030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf08251fa4c2"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x8) 240.177362ms ago: executing program 3 (id=509): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffeab, &(0x7f0000000500)=@new_dev={0x2, 0x347, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, r10, r11, 0x8000, '\x00', 0x6, 0x81, 0x1, 0xffffffffffffffff, {0x1, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r12]) write$FUSE_INIT(r12, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2b, 0x0, 0x54480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x102}}, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r13, 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'dvmrp0\x00', 0x1000}) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x1, 0x0, 0x0, 0x323, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffc}}], 0x1, &(0x7f0000000900)={0x2e, 0x4, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) 0s ago: executing program 3 (id=510): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000006) creat(&(0x7f0000000100)='./file0\x00', 0x8) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000540b4550182195f5758483"], 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0xa, 0xfd, {0xfd, 0x8, "0118944c4a32050b52da864de851cdd39b50d9cbcbb9342c58dc06983b8d4d13521a0007a4c402369436ebb492a85b805eb6edb59322213430b3b95bae7d03143ab4759b0f417551aae03fea3c5428577b9501aaedb24d9359730ac459e07ac531095d32970d8af162a3c009a90fa4218c67350f65499dfb80f699b0834f2a61a2828e0f502c6edd360e1de2a8388f70099de210213c7e6e35d007e6b9350808a5e25b2c773bda4cc114972d0f9131169f04bb353ef656c27773c2b25aa23bc3b5c775c03e5a023b864ee6e6d1f307c9171827ec7f35865afa648129ea9f6cfb28077c58a99bf60da052ff1cce5b0041ca1ea594915c7d1f439aa1"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4b, "59ddd06b2958b554ab0834d279e96482227ce0d11ac00008991abedbd5fd5cfaaa9f6ab4f35d1b292429be883af1b9a22c1c5efe5369dd158a4a2f19090a0900732ecd368ef30a0a458436"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xc}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "3aacd1225a4a6a13dc1b0e862f754879cfe1830875fc045e86f6beac54c04da012ef9c5693f2ce5e87992c0f7dc911"}}) kernel console output (not intermixed with test programs): ndpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.534068][ T10] usb 3-1: device descriptor read/64, error -71 [ 58.540450][ T385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.550176][ T385] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.563080][ T385] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 58.572166][ T385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.580822][ T385] usb 5-1: config 0 descriptor?? [ 58.600467][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 58.640515][ T10] usb usb3-port1: attempt power cycle [ 58.750437][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 58.756603][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.766752][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.776330][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 58.785921][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.794001][ T9] usb 4-1: SerialNumber: syz [ 58.802693][ T385] usbhid 5-1:0.0: can't add hid device: -71 [ 58.808660][ T385] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 58.817004][ T9] usb 4-1: 0:2 : does not exist [ 58.824073][ T385] usb 5-1: USB disconnect, device number 19 [ 58.980432][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 59.003186][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.006013][ T972] fuse: Unknown parameter 'user_id00000000000000000000' [ 59.029038][ T974] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 59.029093][ T974] rust_binder: 973:974 transaction to 973 failed: BR_DEAD_REPLY [ 59.096650][ T978] syzkaller1: entered promiscuous mode [ 59.109893][ T978] syzkaller1: entered allmulticast mode [ 59.119444][ T36] audit: type=1400 audit(1798050056.511:317): avc: denied { write } for pid=977 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.130436][ T385] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 59.138672][ T36] audit: type=1400 audit(1798050056.511:318): avc: denied { ioctl } for pid=977 comm="syz.1.202" path="socket:[8597]" dev="sockfs" ino=8597 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.171351][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.226003][ T36] audit: type=1400 audit(1798050056.621:319): avc: denied { map } for pid=979 comm="syz.1.203" path="socket:[8667]" dev="sockfs" ino=8667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.321455][ T385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.333107][ T385] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.343704][ T385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.352879][ T385] usb 5-1: Product: syz [ 59.357103][ T385] usb 5-1: Manufacturer: syz [ 59.362296][ T385] usb 5-1: SerialNumber: syz [ 59.410470][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 59.431441][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.561732][ T10] usb 3-1: device descriptor read/8, error -71 [ 59.569272][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.577824][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.586924][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.595474][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.615725][ T36] audit: type=1400 audit(1798050057.011:320): avc: denied { remount } for pid=1001 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.635735][ T36] audit: type=1400 audit(1798050057.011:321): avc: denied { create } for pid=1001 comm="syz.4.206" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.656843][ T36] audit: type=1400 audit(1798050057.041:322): avc: denied { unlink } for pid=609 comm="syz-executor" name="file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.679529][ T10] usb usb3-port1: unable to enumerate USB device [ 59.691163][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 59.702032][ T9] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 59.710455][ T335] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 59.720655][ T9] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 59.731620][ T9] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 59.740865][ T385] usb 5-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 59.750757][ T9] usb 4-1: USB disconnect, device number 22 [ 59.759560][ T385] usb 5-1: unknown interface protocol 0x9, assuming v1 [ 59.766494][ T385] usb 5-1: cannot find UAC_HEADER [ 59.772526][ T385] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 59.782988][ T385] usb 5-1: USB disconnect, device number 20 [ 59.792027][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 59.860459][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 59.866708][ T335] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 59.875073][ T335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.885306][ T335] usb 2-1: config 0 has no interface number 0 [ 59.892768][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 59.901836][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.909802][ T335] usb 2-1: Product: syz [ 59.913988][ T335] usb 2-1: Manufacturer: syz [ 59.918601][ T335] usb 2-1: SerialNumber: syz [ 59.923986][ T335] usb 2-1: config 0 descriptor?? [ 59.929799][ T335] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 59.936179][ T335] usb 2-1: No valid video chain found. [ 60.090483][ T385] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 60.130902][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.139458][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.153050][ T335] usb 2-1: USB disconnect, device number 27 [ 60.175256][ T1012] capability: warning: `syz.3.210' uses deprecated v2 capabilities in a way that may be insecure [ 60.182364][ T1014] fuse: Unknown parameter 'user_id00000000000000000000' [ 60.186971][ T1011] tipc: Enabling of bearer rejected, media not registered [ 60.203378][ T1011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.212112][ T1011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.241640][ T385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.251802][ T385] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.261522][ T385] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.270878][ T385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.279574][ T385] usb 5-1: SerialNumber: syz [ 60.296469][ T36] audit: type=1400 audit(1798050057.691:323): avc: denied { shutdown } for pid=1020 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.325475][ T1026] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 60.325502][ T1026] rust_binder: Error while translating object. [ 60.336206][ T1026] rust_binder: Failure in copy_transaction_data: EINVAL [ 60.342450][ T1026] rust_binder: 1025:1026 transaction to 1025 failed: EINVAL [ 60.440445][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 60.497852][ T385] usb 5-1: 0:2 : does not exist [ 60.502840][ T385] usb 5-1: unit 5: unexpected type 0x03 [ 60.510130][ T385] usb 5-1: USB disconnect, device number 21 [ 60.550524][ T335] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 60.600440][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 60.606623][ T311] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 60.614914][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.625085][ T601] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 60.632824][ T311] usb 4-1: config 0 has no interface number 0 [ 60.640284][ T311] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 60.649379][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.657381][ T311] usb 4-1: Product: syz [ 60.661550][ T311] usb 4-1: Manufacturer: syz [ 60.666135][ T311] usb 4-1: SerialNumber: syz [ 60.671295][ T311] usb 4-1: config 0 descriptor?? [ 60.676947][ T311] asix 4-1:0.34: probe with driver asix failed with error -22 [ 60.721733][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 60.730893][ T335] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 60.738518][ T335] usb 2-1: can't read configurations, error -61 [ 60.790455][ T601] usb 3-1: Using ep0 maxpacket: 16 [ 60.797059][ T601] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.805893][ T601] usb 3-1: string descriptor 0 read error: -22 [ 60.812132][ T601] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 60.821237][ T601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.830743][ T601] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.870463][ T335] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 60.879035][ T36] audit: type=1400 audit(1798050058.271:324): avc: denied { getopt } for pid=1010 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.879576][ T601] usb 4-1: USB disconnect, device number 23 [ 61.016375][ T36] audit: type=1400 audit(1798050058.411:325): avc: denied { ioctl } for pid=1034 comm="syz.4.217" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 61.050284][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.059103][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.061826][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.073625][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.075863][ T335] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 61.083014][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.090693][ T335] usb 2-1: can't read configurations, error -61 [ 61.105762][ T601] usb 3-1: USB disconnect, device number 28 [ 61.108699][ T335] usb usb2-port1: attempt power cycle [ 61.126182][ T1042] fuse: Bad value for 'fd' [ 61.280499][ T385] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 61.428923][ T475] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.432201][ T1049] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 61.436499][ T385] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.450443][ T601] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 61.456211][ T335] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 61.471949][ T385] usb 5-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.482009][ T385] usb 5-1: config 2 interface 0 has no altsetting 0 [ 61.488690][ T385] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 61.497765][ T385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.509265][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.518553][ T335] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 61.526166][ T335] usb 2-1: can't read configurations, error -61 [ 61.551680][ T1055] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 61.551701][ T1055] rust_binder: Error while translating object. [ 61.563250][ T1055] rust_binder: Failure in copy_transaction_data: EINVAL [ 61.569442][ T1055] rust_binder: 1054:1055 transaction to 1054 failed: EINVAL [ 61.600512][ T601] usb 3-1: device descriptor read/64, error -71 [ 61.660895][ T335] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 61.682420][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.691196][ T335] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 61.698760][ T335] usb 2-1: can't read configurations, error -61 [ 61.705237][ T335] usb usb2-port1: unable to enumerate USB device [ 61.820610][ T386] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 61.850474][ T601] usb 3-1: device descriptor read/64, error -71 [ 61.914314][ T1037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 61.925431][ T385] elo 0003:04E7:0009.000B: item fetching failed at offset 4/5 [ 61.933130][ T385] elo 0003:04E7:0009.000B: parse failed [ 61.938690][ T385] elo 0003:04E7:0009.000B: probe with driver elo failed with error -22 [ 61.950457][ T386] usb 4-1: device descriptor read/64, error -71 [ 62.090468][ T601] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 62.127758][ T385] usb 5-1: USB disconnect, device number 22 [ 62.190505][ T386] usb 4-1: device descriptor read/64, error -71 [ 62.220494][ T601] usb 3-1: device descriptor read/64, error -71 [ 62.430457][ T386] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 62.460525][ T601] usb 3-1: device descriptor read/64, error -71 [ 62.560469][ T386] usb 4-1: device descriptor read/64, error -71 [ 62.570640][ T601] usb usb3-port1: attempt power cycle [ 62.800454][ T386] usb 4-1: device descriptor read/64, error -71 [ 62.910543][ T386] usb usb4-port1: attempt power cycle [ 62.920451][ T601] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 62.942007][ T601] usb 3-1: device descriptor read/8, error -71 [ 62.960514][ T385] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 63.071456][ T601] usb 3-1: device descriptor read/8, error -71 [ 63.111482][ T385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.121620][ T385] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.131219][ T385] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.140255][ T385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.148257][ T385] usb 5-1: SerialNumber: syz [ 63.250459][ T386] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 63.271453][ T386] usb 4-1: device descriptor read/8, error -71 [ 63.310498][ T601] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 63.331455][ T601] usb 3-1: device descriptor read/8, error -71 [ 63.354983][ T385] usb 5-1: 0:2 : does not exist [ 63.359967][ T385] usb 5-1: unit 5: unexpected type 0x03 [ 63.367080][ T385] usb 5-1: USB disconnect, device number 23 [ 63.374004][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.401453][ T386] usb 4-1: device descriptor read/8, error -71 [ 63.471478][ T601] usb 3-1: device descriptor read/8, error -71 [ 63.500472][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.500487][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 63.580803][ T601] usb usb3-port1: unable to enumerate USB device [ 63.640470][ T386] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 63.661531][ T386] usb 4-1: device descriptor read/8, error -71 [ 63.739953][ T1066] fuse: Bad value for 'fd' [ 63.791777][ T386] usb 4-1: device descriptor read/8, error -71 [ 63.900572][ T386] usb usb4-port1: unable to enumerate USB device [ 64.050462][ T385] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 64.120452][ T335] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 64.163061][ T1075] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 64.163083][ T1075] rust_binder: Error while translating object. [ 64.173982][ T1075] rust_binder: Failure in copy_transaction_data: EINVAL [ 64.180154][ T1075] rust_binder: 1074:1075 transaction to 1074 failed: EINVAL [ 64.200437][ T385] usb 2-1: Using ep0 maxpacket: 32 [ 64.217108][ T385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.227811][ T385] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.242526][ T385] usb 2-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 64.252005][ T335] usb 5-1: device descriptor read/64, error -71 [ 64.258266][ T385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.266292][ T385] usb 2-1: Product: syz [ 64.270506][ T385] usb 2-1: Manufacturer: syz [ 64.275122][ T385] usb 2-1: SerialNumber: syz [ 64.483681][ T385] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.490473][ T335] usb 5-1: device descriptor read/64, error -71 [ 64.501694][ T385] usb 2-1: USB disconnect, device number 32 [ 64.730425][ T335] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 64.760967][ T1091] fuse: Bad value for 'fd' [ 64.870712][ T335] usb 5-1: device descriptor read/64, error -71 [ 65.010485][ T601] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 65.110501][ T335] usb 5-1: device descriptor read/64, error -71 [ 65.140493][ T601] usb 4-1: device descriptor read/64, error -71 [ 65.220556][ T335] usb usb5-port1: attempt power cycle [ 65.230581][ T385] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 65.330471][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 65.381650][ T385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.390460][ T601] usb 4-1: device descriptor read/64, error -71 [ 65.391809][ T385] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.407704][ T385] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.418091][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.426170][ T385] usb 2-1: SerialNumber: syz [ 65.480447][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 65.486592][ T10] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 65.494692][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.506281][ T10] usb 3-1: config 0 has no interface number 0 [ 65.512440][ T10] usb 3-1: config 0 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.527475][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 65.536571][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.544656][ T10] usb 3-1: Product: syz [ 65.548835][ T10] usb 3-1: Manufacturer: syz [ 65.553475][ T10] usb 3-1: SerialNumber: syz [ 65.558839][ T10] usb 3-1: config 0 descriptor?? [ 65.564133][ T335] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 65.591466][ T335] usb 5-1: device descriptor read/8, error -71 [ 65.633600][ T385] usb 2-1: 0:2 : does not exist [ 65.638548][ T385] usb 2-1: unit 5: unexpected type 0x03 [ 65.640456][ T601] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 65.647784][ T385] usb 2-1: USB disconnect, device number 33 [ 65.661857][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.721437][ T335] usb 5-1: device descriptor read/8, error -71 [ 65.773218][ T1101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 65.782290][ T601] usb 4-1: device descriptor read/64, error -71 [ 65.782558][ T1101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1101 comm=syz.2.242 [ 65.802992][ T10] ipheth 3-1:0.5: Unable to find alternate settings interface [ 65.811568][ T10] usb 3-1: USB disconnect, device number 33 [ 65.970551][ T335] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 65.991493][ T335] usb 5-1: device descriptor read/8, error -71 [ 66.020473][ T601] usb 4-1: device descriptor read/64, error -71 [ 66.121530][ T335] usb 5-1: device descriptor read/8, error -71 [ 66.140597][ T601] usb usb4-port1: attempt power cycle [ 66.152644][ T1103] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 66.152663][ T1103] rust_binder: Error while translating object. [ 66.163533][ T1103] rust_binder: Failure in copy_transaction_data: EINVAL [ 66.169731][ T1103] rust_binder: 1102:1103 transaction to 1102 failed: EINVAL [ 66.187567][ T36] audit: type=1400 audit(1798050063.581:326): avc: denied { ioctl } for pid=1104 comm="syz.1.244" path="socket:[9024]" dev="sockfs" ino=9024 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.188305][ T1105] fuse: Bad value for 'fd' [ 66.226723][ T36] audit: type=1400 audit(1798050063.631:327): avc: denied { create } for pid=1104 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.246425][ T36] audit: type=1400 audit(1798050063.631:328): avc: granted { setsecparam } for pid=1104 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 66.265513][ T335] usb usb5-port1: unable to enumerate USB device [ 66.289724][ T1111] fuse: Unknown parameter '0x0000000000000004' [ 66.311129][ T36] audit: type=1400 audit(1798050063.711:329): avc: denied { map } for pid=1112 comm="syz.1.248" path="socket:[10085]" dev="sockfs" ino=10085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.334656][ T36] audit: type=1400 audit(1798050063.711:330): avc: denied { read accept } for pid=1112 comm="syz.1.248" path="socket:[10085]" dev="sockfs" ino=10085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.358809][ T36] audit: type=1400 audit(1798050063.711:331): avc: denied { getopt } for pid=1116 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.490575][ T601] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 66.511595][ T601] usb 4-1: device descriptor read/8, error -71 [ 66.560483][ T335] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 66.641568][ T601] usb 4-1: device descriptor read/8, error -71 [ 66.711983][ T335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.720057][ T335] usb 3-1: not running at top speed; connect to a high speed hub [ 66.729927][ T335] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 66.739033][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.747059][ T335] usb 3-1: Product: syz [ 66.751252][ T335] usb 3-1: Manufacturer: syz [ 66.755837][ T335] usb 3-1: SerialNumber: syz [ 66.760477][ T385] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 66.893033][ T601] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 66.911457][ T385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.921647][ T385] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.928884][ T1132] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 66.930660][ T1132] rust_binder: Error while translating object. [ 66.937071][ T385] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.941783][ T1132] rust_binder: Failure in copy_transaction_data: EINVAL [ 66.947678][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.956813][ T1132] rust_binder: 1131:1132 transaction to 1131 failed: EINVAL [ 66.963872][ T385] usb 2-1: SerialNumber: syz [ 66.971943][ T601] usb 4-1: device descriptor read/8, error -71 [ 66.983612][ T335] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 67.006976][ T335] usb 3-1: failed to enable PITCH for EP 0x1 [ 67.014121][ T335] usb 3-1: unit 2 not found! [ 67.018784][ T335] usb 3-1: unit 8 not found! [ 67.031141][ T1138] fuse: Unknown parameter '0x0000000000000004' [ 67.032798][ T335] usb 3-1: USB disconnect, device number 34 [ 67.052888][ T1140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 67.064557][ T329] udevd[329]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 67.075459][ T36] audit: type=1400 audit(1798050064.481:332): avc: denied { mount } for pid=1141 comm="syz.4.258" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.082498][ T329] udevd[329]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 67.111435][ T601] usb 4-1: device descriptor read/8, error -71 [ 67.142797][ T36] audit: type=1400 audit(1798050064.541:333): avc: denied { unmount } for pid=609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.208307][ T385] usb 2-1: 0:2 : does not exist [ 67.213246][ T385] usb 2-1: unit 5: unexpected type 0x03 [ 67.220523][ T601] usb usb4-port1: unable to enumerate USB device [ 67.222312][ T385] usb 2-1: USB disconnect, device number 34 [ 67.234892][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.400468][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 67.551737][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.560088][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.570224][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.580365][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 67.589443][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.597552][ T10] usb 5-1: Product: syz [ 67.601978][ T10] usb 5-1: Manufacturer: syz [ 67.606559][ T10] usb 5-1: SerialNumber: syz [ 67.730313][ T1151] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 67.750560][ T601] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 67.789663][ T36] audit: type=1400 audit(1798050065.181:334): avc: denied { mount } for pid=1153 comm="syz.3.262" name="/" dev="configfs" ino=2620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.812317][ T36] audit: type=1400 audit(1798050065.191:335): avc: denied { search } for pid=1153 comm="syz.3.262" name="/" dev="configfs" ino=2620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.822004][ T10] usb 5-1: USB disconnect, device number 28 [ 67.842277][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.879334][ T1159] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 67.879361][ T1159] rust_binder: Error while translating object. [ 67.890203][ T1159] rust_binder: Failure in copy_transaction_data: EINVAL [ 67.896491][ T1159] rust_binder: 1158:1159 transaction to 1158 failed: EINVAL [ 67.922880][ T601] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 67.928102][ T1163] fuse: Unknown parameter '0x0000000000000004' [ 67.931318][ T601] usb 3-1: config 0 has no interfaces? [ 67.955368][ T601] usb 3-1: config 0 has no interfaces? [ 67.961541][ T601] usb 3-1: config 0 has no interfaces? [ 67.967698][ T601] usb 3-1: config 0 has no interfaces? [ 67.973856][ T601] usb 3-1: config 0 has no interfaces? [ 67.979958][ T601] usb 3-1: config 0 has no interfaces? [ 67.986277][ T601] usb 3-1: config 0 has no interfaces? [ 67.992490][ T601] usb 3-1: config 0 has no interfaces? [ 67.999339][ T601] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 68.008583][ T601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 68.016806][ T601] usb 3-1: Product: syz [ 68.021000][ T601] usb 3-1: Manufacturer: syz [ 68.025664][ T601] usb 3-1: SerialNumber: syz [ 68.031041][ T601] usb 3-1: config 0 descriptor?? [ 68.160477][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 68.190471][ T385] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 68.295684][ T601] usb 3-1: USB disconnect, device number 35 [ 68.306059][ T1168] syzkaller1: left promiscuous mode [ 68.311365][ T1168] syzkaller1: left allmulticast mode [ 68.311374][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 68.312469][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7 [ 68.332807][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 68.360438][ T385] usb 4-1: Using ep0 maxpacket: 8 [ 68.368823][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.379886][ T385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.392970][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 68.402069][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.410070][ T9] usb 2-1: Product: syz [ 68.414396][ T9] usb 2-1: Manufacturer: syz [ 68.419006][ T9] usb 2-1: SerialNumber: syz [ 68.423671][ T385] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 68.436816][ T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.450494][ T385] usb 4-1: config 0 descriptor?? [ 68.509224][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.517844][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.653817][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.661128][ T9] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 68.676201][ T9] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 68.686701][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.708070][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.720465][ T601] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 68.724902][ T9] usb 2-1: USB disconnect, device number 35 [ 68.860463][ T601] usb 3-1: device descriptor read/64, error -71 [ 68.870871][ T385] hid (null): unknown global tag 0xe [ 68.877059][ T385] lenovo 0003:17EF:60A3.000C: unknown global tag 0xe [ 68.883834][ T385] lenovo 0003:17EF:60A3.000C: item 0 1 1 14 parsing failed [ 68.891198][ T385] lenovo 0003:17EF:60A3.000C: hid_parse failed [ 68.897360][ T385] lenovo 0003:17EF:60A3.000C: probe with driver lenovo failed with error -22 [ 69.030467][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 69.070221][ T385] usb 4-1: USB disconnect, device number 32 [ 69.100468][ T601] usb 3-1: device descriptor read/64, error -71 [ 69.191545][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.201728][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.211304][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.220359][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.228419][ T9] usb 2-1: SerialNumber: syz [ 69.350448][ T601] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 69.438067][ T9] usb 2-1: 0:2 : does not exist [ 69.443031][ T9] usb 2-1: unit 5: unexpected type 0x03 [ 69.450991][ T9] usb 2-1: USB disconnect, device number 36 [ 69.458524][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.480470][ T601] usb 3-1: device descriptor read/64, error -71 [ 69.585203][ T1189] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 69.585229][ T1189] rust_binder: Error while translating object. [ 69.595965][ T1189] rust_binder: Failure in copy_transaction_data: EINVAL [ 69.602243][ T1189] rust_binder: 1188:1189 transaction to 1188 failed: EINVAL [ 69.621594][ T1191] loop2: detected capacity change from 0 to 8 [ 69.737848][ T601] usb 3-1: device descriptor read/64, error -71 [ 69.860577][ T601] usb usb3-port1: attempt power cycle [ 69.888692][ T1196] fuse: Unknown parameter '0x0000000000000004' [ 69.975821][ T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 70.131652][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 70.140605][ T385] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 70.148209][ T9] usb 4-1: config 0 has no interface number 0 [ 70.154471][ T9] usb 4-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.165596][ T9] usb 4-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid maxpacket 111, setting to 64 [ 70.176441][ T9] usb 4-1: config 0 interface 1 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 70.189227][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 70.195867][ T335] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 70.203473][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 70.210438][ T601] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 70.212582][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.229059][ T9] usb 4-1: config 0 descriptor?? [ 70.234367][ T1194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.242554][ T9] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 70.243650][ T601] usb 3-1: device descriptor read/8, error -71 [ 70.323305][ T385] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.332034][ T385] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 70.339634][ T385] usb 5-1: can't read configurations, error -71 [ 70.372804][ T335] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.381919][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.389907][ T335] usb 2-1: Product: syz [ 70.391445][ T601] usb 3-1: device descriptor read/8, error -71 [ 70.394122][ T335] usb 2-1: Manufacturer: syz [ 70.405063][ T335] usb 2-1: SerialNumber: syz [ 70.640470][ T601] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 70.649241][ T9] hid-generic 0003:04F3:0755.000D: unknown main item tag 0x0 [ 70.656714][ T9] hid-generic 0003:04F3:0755.000D: unknown main item tag 0x0 [ 70.661491][ T601] usb 3-1: device descriptor read/8, error -71 [ 70.664281][ T9] hid-generic 0003:04F3:0755.000D: unknown main item tag 0x0 [ 70.677761][ T9] hid-generic 0003:04F3:0755.000D: unknown main item tag 0x0 [ 70.685333][ T9] hid-generic 0003:04F3:0755.000D: unknown main item tag 0x0 [ 70.693705][ T9] hid-generic 0003:04F3:0755.000D: hidraw0: USB HID v0.04 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input1 [ 70.801577][ T601] usb 3-1: device descriptor read/8, error -71 [ 70.920442][ T601] usb usb3-port1: unable to enumerate USB device [ 71.029253][ T1213] netlink: 'syz.4.281': attribute type 12 has an invalid length. [ 71.118941][ T1216] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 71.118969][ T1216] rust_binder: Error while translating object. [ 71.129870][ T1216] rust_binder: Failure in copy_transaction_data: EINVAL [ 71.136345][ T1216] rust_binder: 1215:1216 transaction to 1215 failed: EINVAL [ 71.520327][ T1227] fuse: Unknown parameter '0x0000000000000004' [ 71.620164][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 71.620182][ T36] audit: type=1400 audit(1798050069.011:352): avc: denied { mount } for pid=1230 comm="syz.2.287" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.890448][ T601] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 72.051505][ T601] usb 3-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 72.061806][ T601] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.071421][ T601] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.080520][ T601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.088536][ T601] usb 3-1: SerialNumber: syz [ 72.296927][ T601] usb 3-1: invalid UAC_HEADER (v1) [ 72.309581][ T601] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.324814][ T601] usb 3-1: USB disconnect, device number 40 [ 72.341047][ T1236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1236 comm=syz.3.289 [ 72.345571][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.354333][ T36] audit: type=1400 audit(1798050069.761:353): avc: denied { append } for pid=1235 comm="syz.3.289" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.800479][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 72.814868][ T36] audit: type=1400 audit(1798050070.211:354): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 72.840731][ T335] usb 4-1: USB disconnect, device number 33 [ 72.848116][ T1248] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 72.848147][ T1248] rust_binder: Error while translating object. [ 72.859165][ T1248] rust_binder: Failure in copy_transaction_data: EINVAL [ 72.865439][ T1248] rust_binder: 1247:1248 transaction to 1247 failed: EINVAL [ 72.884899][ T1250] fuse: Unknown parameter '0x0000000000000004' [ 72.930477][ T9] usb 5-1: device descriptor read/64, error -71 [ 72.966735][ T10] usb 2-1: USB disconnect, device number 37 [ 72.972764][ T335] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 73.087185][ T36] audit: type=1400 audit(1798050070.481:355): avc: denied { bind } for pid=1257 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.131548][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.142573][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.152576][ T385] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 73.160288][ T335] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 73.169426][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.177642][ T9] usb 5-1: device descriptor read/64, error -71 [ 73.184883][ T335] usb 4-1: config 0 descriptor?? [ 73.321967][ T385] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.330452][ T385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.341812][ T385] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.351994][ T385] usb 3-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 73.361286][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.369282][ T385] usb 3-1: Product: syz [ 73.373477][ T385] usb 3-1: Manufacturer: syz [ 73.378120][ T385] usb 3-1: SerialNumber: syz [ 73.420464][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 73.550450][ T9] usb 5-1: device descriptor read/64, error -71 [ 73.588016][ T385] usb 3-1: unit 3 not found! [ 73.594087][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.601972][ T385] usb 3-1: USB disconnect, device number 41 [ 73.608306][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.616362][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.623697][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.630536][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.637324][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.644211][ T335] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 73.651720][ T335] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 73.790448][ T9] usb 5-1: device descriptor read/64, error -71 [ 73.796800][ T335] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 73.804421][ T335] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 73.811582][ T335] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -32 [ 73.913425][ T9] usb usb5-port1: attempt power cycle [ 74.012389][ T1274] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 74.012410][ T1274] rust_binder: Error while translating object. [ 74.023229][ T1274] rust_binder: Failure in copy_transaction_data: EINVAL [ 74.029403][ T1274] rust_binder: 1273:1274 transaction to 1273 failed: EINVAL [ 74.049438][ T36] audit: type=1400 audit(1798050071.441:356): avc: denied { setopt } for pid=1275 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.077418][ T1278] fuse: Unknown parameter 'fd0x0000000000000004' [ 74.260478][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 74.281687][ T9] usb 5-1: device descriptor read/8, error -71 [ 74.340487][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 74.411638][ T9] usb 5-1: device descriptor read/8, error -71 [ 74.420550][ T335] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 74.491720][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.502738][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.512523][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 74.521777][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.530526][ T10] usb 3-1: config 0 descriptor?? [ 74.570462][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 74.576807][ T335] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 74.587103][ T335] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 74.596379][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.604429][ T335] usb 2-1: Product: syz [ 74.608607][ T335] usb 2-1: Manufacturer: syz [ 74.613319][ T335] usb 2-1: SerialNumber: syz [ 74.618519][ T335] usb 2-1: config 0 descriptor?? [ 74.624526][ T335] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 74.632366][ T335] usb 2-1: Detected FT232R [ 74.650446][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 74.671412][ T9] usb 5-1: device descriptor read/8, error -71 [ 74.801436][ T9] usb 5-1: device descriptor read/8, error -71 [ 74.824606][ T335] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 74.910563][ T9] usb usb5-port1: unable to enumerate USB device [ 74.939878][ T10] cp2112 0003:10C4:EA90.000F: item fetching failed at offset 3/7 [ 74.947895][ T10] cp2112 0003:10C4:EA90.000F: parse failed [ 74.953845][ T10] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -22 [ 75.032359][ T36] audit: type=1400 audit(1798050072.431:357): avc: denied { name_bind } for pid=1279 comm="syz.1.305" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 75.054615][ T335] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 75.141068][ T335] usb 3-1: USB disconnect, device number 42 [ 75.255465][ T10] usb 2-1: USB disconnect, device number 38 [ 75.262840][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 75.272865][ T10] ftdi_sio 2-1:0.0: device disconnected [ 75.464631][ T10] usb 4-1: USB disconnect, device number 34 [ 75.528896][ T36] audit: type=1326 audit(1798050072.921:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b49f9ce59 code=0x7ffc0000 [ 75.554361][ T36] audit: type=1326 audit(1798050072.921:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b49f9ce59 code=0x7ffc0000 [ 75.580339][ T36] audit: type=1326 audit(1798050072.921:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0b49f9ce59 code=0x7ffc0000 [ 75.601169][ T1299] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 75.606039][ T1299] rust_binder: Error while translating object. [ 75.606078][ T36] audit: type=1326 audit(1798050072.921:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b49f9ce59 code=0x7ffc0000 [ 75.616902][ T1299] rust_binder: Failure in copy_transaction_data: EINVAL [ 75.649551][ T1299] rust_binder: 1298:1299 transaction to 1298 failed: EINVAL [ 75.681930][ T1303] fuse: Unknown parameter 'fd0x0000000000000004' [ 75.851012][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 75.930682][ T335] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 75.950471][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 75.990491][ T10] usb 4-1: device descriptor read/64, error -71 [ 76.080501][ T335] usb 3-1: Using ep0 maxpacket: 8 [ 76.086792][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 76.097983][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 76.110879][ T335] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 76.120105][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.129258][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.140240][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.149673][ T335] usb 3-1: config 0 descriptor?? [ 76.156290][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.165430][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.173450][ T9] usb 5-1: SerialNumber: syz [ 76.180528][ T601] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 76.250529][ T10] usb 4-1: device descriptor read/64, error -71 [ 76.331522][ T601] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 76.342408][ T601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.352177][ T601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 76.363085][ T601] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 76.376863][ T601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.386223][ T601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.387534][ T9] usb 5-1: 0:2 : does not exist [ 76.394546][ T601] usb 2-1: SerialNumber: syz [ 76.401679][ T1312] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 76.404315][ T9] usb 5-1: unit 5 not found! [ 76.413015][ T601] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 76.424599][ T9] usb 5-1: USB disconnect, device number 36 [ 76.490496][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 76.565544][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.572639][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.579588][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.586625][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.593621][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.600686][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.607758][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.615053][ T335] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 76.616286][ T386] usb 2-1: USB disconnect, device number 39 [ 76.622223][ T10] usb 4-1: device descriptor read/64, error -71 [ 76.635388][ T335] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 76.740765][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 76.740783][ T36] audit: type=1326 audit(1798050074.141:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.772297][ T36] audit: type=1326 audit(1798050074.141:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.797513][ T36] audit: type=1326 audit(1798050074.171:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.822627][ T36] audit: type=1326 audit(1798050074.191:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.847841][ T36] audit: type=1326 audit(1798050074.221:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.873111][ T36] audit: type=1326 audit(1798050074.241:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.898205][ T36] audit: type=1326 audit(1798050074.241:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.923564][ T36] audit: type=1326 audit(1798050074.331:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 76.980444][ T10] usb 4-1: device descriptor read/64, error -71 [ 77.090661][ T36] audit: type=1326 audit(1798050074.491:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 77.090671][ T10] usb usb4-port1: attempt power cycle [ 77.121209][ T36] audit: type=1326 audit(1798050074.491:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1292 comm="syz.3.309" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b49f9caeb code=0x7ffc0000 [ 77.146309][ T386] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 77.174026][ T1305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.182635][ T1305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.191101][ T335] lenovo 0003:17EF:6047.0010: Fn-lock setting failed: -71 [ 77.198525][ T335] lenovo 0003:17EF:6047.0010: Sensitivity setting failed: -71 [ 77.208529][ T335] usb 3-1: USB disconnect, device number 43 [ 77.280506][ T386] usb 5-1: device descriptor read/64, error -71 [ 77.440505][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 77.461460][ T10] usb 4-1: device descriptor read/8, error -71 [ 77.480504][ T64] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 77.520483][ T386] usb 5-1: device descriptor read/64, error -71 [ 77.591934][ T10] usb 4-1: device descriptor read/8, error -71 [ 77.630495][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 77.636777][ T64] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.644853][ T64] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.654965][ T64] usb 2-1: config 0 has no interface number 0 [ 77.661352][ T64] usb 2-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.672476][ T64] usb 2-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.682350][ T64] usb 2-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 77.695269][ T64] usb 2-1: config 0 interface 1 has no altsetting 0 [ 77.702095][ T64] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 77.713712][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.726190][ T64] usb 2-1: config 0 descriptor?? [ 77.770439][ T386] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 77.792383][ T1326] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 77.792412][ T1326] rust_binder: Error while translating object. [ 77.803325][ T1326] rust_binder: Failure in copy_transaction_data: EINVAL [ 77.809497][ T1326] rust_binder: 1325:1326 transaction to 1325 failed: EINVAL [ 77.840489][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 77.872717][ T10] usb 4-1: device descriptor read/8, error -71 [ 77.900439][ T386] usb 5-1: device descriptor read/64, error -71 [ 77.903851][ T1330] fuse: Unknown parameter 'fd0x0000000000000004' [ 78.002737][ T10] usb 4-1: device descriptor read/8, error -71 [ 78.110542][ T10] usb usb4-port1: unable to enumerate USB device [ 78.133551][ T64] hid (null): unknown global tag 0xa3 [ 78.140551][ T386] usb 5-1: device descriptor read/64, error -71 [ 78.250616][ T386] usb usb5-port1: attempt power cycle [ 78.333772][ T64] uclogic 0003:28BD:0078.0011: pen parameters not found [ 78.340808][ T64] uclogic 0003:28BD:0078.0011: interface is invalid, ignoring [ 78.536908][ T1319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.547381][ T1319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.572168][ T603] usb 2-1: USB disconnect, device number 40 [ 78.590446][ T386] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 78.611564][ T386] usb 5-1: device descriptor read/8, error -71 [ 78.741509][ T386] usb 5-1: device descriptor read/8, error -71 [ 78.750474][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 78.900543][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 78.907866][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.915993][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.926140][ T9] usb 3-1: config 0 has no interface number 0 [ 78.932267][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 78.939862][ T9] usb 3-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.951027][ T9] usb 3-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.961042][ T9] usb 3-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 78.973929][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 78.980619][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 78.989663][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.990461][ T386] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 78.998372][ T9] usb 3-1: config 0 descriptor?? [ 79.021535][ T386] usb 5-1: device descriptor read/8, error -71 [ 79.111578][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.121884][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.131484][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.140661][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.148669][ T10] usb 4-1: SerialNumber: syz [ 79.161495][ T386] usb 5-1: device descriptor read/8, error -71 [ 79.270558][ T386] usb usb5-port1: unable to enumerate USB device [ 79.355701][ T10] usb 4-1: 0:2 : does not exist [ 79.360706][ T10] usb 4-1: unit 5 not found! [ 79.367916][ T10] usb 4-1: USB disconnect, device number 39 [ 79.390496][ T603] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 79.541544][ T603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.551694][ T603] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.561552][ T603] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.570640][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.578642][ T603] usb 2-1: SerialNumber: syz [ 79.613066][ T9] usbhid 3-1:0.1: can't add hid device: -71 [ 79.619103][ T9] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 79.628347][ T9] usb 3-1: USB disconnect, device number 44 [ 79.785010][ T1340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.793599][ T1340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.809990][ T603] usb 2-1: invalid UAC_HEADER (v1) [ 79.819114][ T603] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 79.829157][ T603] usb 2-1: USB disconnect, device number 41 [ 79.836353][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.110543][ T601] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 80.120596][ T603] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 80.260861][ T601] usb 4-1: Using ep0 maxpacket: 16 [ 80.267091][ T601] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.280128][ T601] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 80.289263][ T601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.298129][ T601] usb 4-1: config 0 descriptor?? [ 80.303217][ T603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.314283][ T603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.323998][ T386] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 80.333327][ T603] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 80.342479][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.350613][ T603] usb 2-1: SerialNumber: syz [ 80.357419][ T603] usb 2-1: bad CDC descriptors [ 80.362431][ T603] usb-storage 2-1:1.0: USB Mass Storage device detected [ 80.370101][ T603] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 80.378163][ T603] scsi host1: usb-storage 2-1:1.0 [ 80.491484][ T386] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.504566][ T386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.511261][ T386] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 80.520303][ T386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.529374][ T386] usb 5-1: config 0 descriptor?? [ 80.562545][ T9] usb 2-1: USB disconnect, device number 42 [ 80.735797][ T601] zeroplus 0003:0C12:0030.0012: unknown main item tag 0x3 [ 80.743221][ T601] zeroplus 0003:0C12:0030.0012: unknown main item tag 0x6 [ 80.750363][ T601] zeroplus 0003:0C12:0030.0012: unknown global tag 0xc [ 80.757419][ T601] zeroplus 0003:0C12:0030.0012: item 0 0 1 12 parsing failed [ 80.764998][ T601] zeroplus 0003:0C12:0030.0012: parse failed [ 80.771127][ T601] zeroplus 0003:0C12:0030.0012: probe with driver zeroplus failed with error -22 [ 80.937935][ T603] usb 4-1: USB disconnect, device number 40 [ 80.945389][ T386] waltop 0003:172F:0037.0013: unknown main item tag 0x2 [ 80.954148][ T386] waltop 0003:172F:0037.0013: unexpected long global item [ 80.961641][ T386] waltop 0003:172F:0037.0013: probe with driver waltop failed with error -22 [ 80.980564][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 81.110528][ T9] usb 2-1: device descriptor read/64, error -71 [ 81.145571][ T603] usb 5-1: USB disconnect, device number 41 [ 81.220541][ T386] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 81.350488][ T9] usb 2-1: device descriptor read/64, error -71 [ 81.370452][ T386] usb 3-1: Using ep0 maxpacket: 8 [ 81.376656][ T386] usb 3-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 81.387146][ T386] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.401587][ T386] usb 3-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40 [ 81.410667][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.418667][ T386] usb 3-1: Product: syz [ 81.422914][ T386] usb 3-1: Manufacturer: syz [ 81.427512][ T386] usb 3-1: SerialNumber: syz [ 81.590438][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 81.695162][ T386] usb 3-1: 1:1 : no cluster descriptor [ 81.707263][ T386] usb 3-1: USB disconnect, device number 45 [ 81.718626][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.720465][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 81.741998][ T9] usb 2-1: device descriptor read/64, error -71 [ 81.891611][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 81.902757][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.909365][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 81.918671][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.927708][ T10] usb 4-1: config 0 descriptor?? [ 81.933287][ T1371] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.980601][ T9] usb 2-1: device descriptor read/64, error -71 [ 82.040524][ T64] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 82.090535][ T9] usb usb2-port1: attempt power cycle [ 82.191491][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.201640][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.213086][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 82.228051][ T64] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 82.237166][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.246215][ T1382] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.254391][ T64] hub 5-1:1.0: bad descriptor, ignoring hub [ 82.260334][ T64] hub 5-1:1.0: probe with driver hub failed with error -5 [ 82.267762][ T64] cdc_wdm 5-1:1.0: skipping garbage [ 82.273087][ T64] cdc_wdm 5-1:1.0: skipping garbage [ 82.278818][ T64] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 82.284794][ T64] cdc_wdm 5-1:1.0: Unknown control protocol [ 82.342191][ T10] prodikeys 0003:041E:2801.0014: unknown main item tag 0x2 [ 82.349492][ T10] prodikeys 0003:041E:2801.0014: unknown main item tag 0x6 [ 82.356749][ T10] prodikeys 0003:041E:2801.0014: unknown main item tag 0xd [ 82.364001][ T10] prodikeys 0003:041E:2801.0014: unknown main item tag 0x1 [ 82.371506][ T10] prodikeys 0003:041E:2801.0014: unknown main item tag 0x5 [ 82.378726][ T10] prodikeys 0003:041E:2801.0014: unknown main item tag 0x6 [ 82.385969][ T10] prodikeys 0003:041E:2801.0014: item fetching failed at offset 38/40 [ 82.394284][ T10] prodikeys 0003:041E:2801.0014: hid parse failed [ 82.400755][ T10] prodikeys 0003:041E:2801.0014: probe with driver prodikeys failed with error -22 [ 82.430485][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 82.451601][ T9] usb 2-1: device descriptor read/8, error -71 [ 82.560541][ T603] usb 5-1: USB disconnect, device number 42 [ 82.581572][ T9] usb 2-1: device descriptor read/8, error -71 [ 82.820490][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 82.841501][ T9] usb 2-1: device descriptor read/8, error -71 [ 82.893129][ T1385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.901788][ T1385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.911160][ T1385] can0: slcan on ttynull. [ 82.915909][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 82.915925][ T36] audit: type=1400 audit(1798050080.311:463): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.943264][ T36] audit: type=1400 audit(1798050080.311:464): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.988667][ T9] usb 2-1: device descriptor read/8, error -71 [ 82.997163][ T36] audit: type=1400 audit(1798050080.311:465): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.029830][ T1385] can0 (unregistered): slcan off ttynull. [ 83.037121][ T64] usb 4-1: USB disconnect, device number 41 [ 83.050684][ T36] audit: type=1400 audit(1798050080.311:466): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.074602][ T36] audit: type=1400 audit(1798050080.311:467): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2667 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.097836][ T36] audit: type=1400 audit(1798050080.341:468): avc: denied { read } for pid=1388 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.125762][ T9] usb usb2-port1: unable to enumerate USB device [ 83.138899][ T36] audit: type=1400 audit(1798050080.341:469): avc: denied { open } for pid=1388 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.196334][ T36] audit: type=1400 audit(1798050080.341:470): avc: denied { getattr } for pid=1388 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.222741][ T36] audit: type=1400 audit(1798050080.401:471): avc: denied { write } for pid=1387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.246934][ T36] audit: type=1400 audit(1798050080.401:472): avc: denied { add_name } for pid=1387 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.390447][ T64] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 83.410440][ T603] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 83.541537][ T64] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 83.552425][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 83.563625][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 83.570429][ T603] usb 3-1: Using ep0 maxpacket: 8 [ 83.576883][ T64] usb 4-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 83.590879][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.596117][ T603] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 83.600663][ T64] usb 4-1: config 0 descriptor?? [ 83.615767][ T1409] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.616816][ T603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.631061][ T603] usb 3-1: Product: syz [ 83.635247][ T603] usb 3-1: Manufacturer: syz [ 83.639854][ T603] usb 3-1: SerialNumber: syz [ 83.670946][ T1441] syzkaller1: entered promiscuous mode [ 83.676501][ T1441] syzkaller1: entered allmulticast mode [ 83.683936][ T1441] overlay: Unknown parameter '/' [ 83.689622][ T1441] overlayfs: overlapping lowerdir path [ 83.884921][ T1452] .N: renamed from veth0_to_bond (while UP) [ 84.040946][ T64] wacom 0003:056A:4004.0015: ignoring exceeding usage max [ 84.049820][ T64] wacom 0003:056A:4004.0015: unknown main item tag 0x4 [ 84.059045][ T64] wacom 0003:056A:4004.0015: hidraw0: USB HID v0.01 Device [HID 056a:4004] on usb-dummy_hcd.3-1/input0 [ 84.170470][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 84.240269][ T386] usb 4-1: USB disconnect, device number 42 [ 84.263233][ T603] usb 3-1: clock source 0 is not valid, cannot use [ 84.330443][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 84.336658][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.345023][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.355367][ T9] usb 2-1: config 0 has no interface number 0 [ 84.361710][ T9] usb 2-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.372881][ T9] usb 2-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.382906][ T9] usb 2-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 84.395988][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 84.402906][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 84.412152][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.421375][ T9] usb 2-1: config 0 descriptor?? [ 84.470583][ T603] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 84.478038][ T603] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 84.487570][ T603] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 84.496544][ T603] usb 3-1: clock source 0 is not valid, cannot use [ 84.503498][ T603] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 84.510240][ T603] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 84.540309][ T603] usb 3-1: USB disconnect, device number 46 [ 84.770226][ T1461] netlink: 37 bytes leftover after parsing attributes in process `syz.3.361'. [ 84.828335][ T9] hid (null): unknown global tag 0xa3 [ 85.030203][ T9] uclogic 0003:28BD:0078.0016: failed retrieving string descriptor #100: -71 [ 85.039294][ T9] uclogic 0003:28BD:0078.0016: failed retrieving pen parameters: -71 [ 85.047525][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 85.055418][ T9] uclogic 0003:28BD:0078.0016: pen probing failed: -71 [ 85.062509][ T9] uclogic 0003:28BD:0078.0016: failed probing parameters: -71 [ 85.070583][ T9] uclogic 0003:28BD:0078.0016: probe with driver uclogic failed with error -71 [ 85.081842][ T9] usb 2-1: USB disconnect, device number 47 [ 85.221929][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.230674][ T10] usb 4-1: config 1 has an invalid interface number: 139 but max is 0 [ 85.238903][ T10] usb 4-1: config 1 has no interface number 0 [ 85.245305][ T10] usb 4-1: config 1 interface 139 has no altsetting 0 [ 85.253764][ T10] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=82.ec [ 85.263410][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.271579][ T10] usb 4-1: Product: syz [ 85.275882][ T10] usb 4-1: Manufacturer: syz [ 85.280707][ T10] usb 4-1: SerialNumber: syz [ 85.490041][ T10] usb 4-1: unsupported MDLM descriptors [ 85.498942][ T10] usb 4-1: USB disconnect, device number 43 [ 85.800267][ T601] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 85.900284][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 85.950265][ T601] usb 3-1: Using ep0 maxpacket: 32 [ 85.956542][ T601] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.965025][ T601] usb 3-1: config 0 has no interface number 0 [ 85.971296][ T601] usb 3-1: config 0 interface 184 has no altsetting 0 [ 85.979576][ T601] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.995666][ T601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.004911][ T601] usb 3-1: Product: syz [ 86.012048][ T601] usb 3-1: Manufacturer: syz [ 86.016803][ T601] usb 3-1: SerialNumber: syz [ 86.030527][ T601] usb 3-1: config 0 descriptor?? [ 86.036361][ T601] smsc75xx v1.0.0 [ 86.051288][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 86.059667][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 86.072334][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 86.092351][ T9] usb 2-1: config 220 has no interface number 2 [ 86.109563][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 86.132973][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 86.139788][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 86.160250][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 86.178717][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 86.190222][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.198384][ T9] usb 2-1: Product: syz [ 86.202595][ T9] usb 2-1: Manufacturer: syz [ 86.207198][ T9] usb 2-1: SerialNumber: syz [ 86.340215][ T64] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 86.418902][ T1477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.438069][ T1477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.451764][ T9] usb 2-1: selecting invalid altsetting 0 [ 86.467096][ T9] usb 2-1: selecting invalid altsetting 0 [ 86.472959][ T64] usb 4-1: device descriptor read/64, error -71 [ 86.479375][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 86.485979][ T9] usb 2-1: No valid video chain found. [ 86.496540][ T9] usb 2-1: USB disconnect, device number 48 [ 86.575144][ T1488] can0: slcan on ttyS3. [ 86.621349][ T1488] can0 (unregistered): slcan off ttyS3. [ 86.639366][ T601] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 86.659122][ T601] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.730186][ T64] usb 4-1: device descriptor read/64, error -71 [ 86.900163][ T603] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 86.970147][ T64] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 87.030136][ T603] usb 5-1: device descriptor read/64, error -71 [ 87.100151][ T64] usb 4-1: device descriptor read/64, error -71 [ 87.200124][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 87.270006][ T1468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.278540][ T603] usb 5-1: device descriptor read/64, error -71 [ 87.278644][ T1468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.306291][ T601] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 87.318327][ T601] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 87.328419][ T601] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 87.338192][ T601] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 87.350143][ T601] usb 3-1: USB disconnect, device number 47 [ 87.360097][ T64] usb 4-1: device descriptor read/64, error -71 [ 87.366559][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.490317][ T64] usb usb4-port1: attempt power cycle [ 87.520145][ T603] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 87.620069][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.650085][ T603] usb 5-1: device descriptor read/64, error -71 [ 87.840068][ T64] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 87.860145][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 87.868758][ T64] usb 4-1: device descriptor read/8, error -71 [ 87.890050][ T603] usb 5-1: device descriptor read/64, error -71 [ 88.000097][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.000169][ T603] usb usb5-port1: attempt power cycle [ 88.007453][ T64] usb 4-1: device descriptor read/8, error -71 [ 88.240016][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.250056][ T64] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 88.271071][ T64] usb 4-1: device descriptor read/8, error -71 [ 88.350123][ T603] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 88.350165][ T9] usb usb2-port1: attempt power cycle [ 88.371092][ T603] usb 5-1: device descriptor read/8, error -71 [ 88.401014][ T64] usb 4-1: device descriptor read/8, error -71 [ 88.501016][ T603] usb 5-1: device descriptor read/8, error -71 [ 88.510114][ T64] usb usb4-port1: unable to enumerate USB device [ 88.540225][ T311] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 88.691430][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.699833][ T311] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 88.700109][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 88.708750][ T311] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.725124][ T311] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 88.735217][ T311] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 88.740972][ T9] usb 2-1: device descriptor read/8, error -71 [ 88.744255][ T311] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 88.759407][ T603] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 88.768417][ T311] usb 3-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 88.777565][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.785639][ T311] usb 3-1: Product: syz [ 88.789824][ T311] usb 3-1: Manufacturer: syz [ 88.794553][ T311] usb 3-1: SerialNumber: syz [ 88.799650][ T603] usb 5-1: device descriptor read/8, error -71 [ 88.880983][ T9] usb 2-1: device descriptor read/8, error -71 [ 88.930859][ T603] usb 5-1: device descriptor read/8, error -71 [ 89.012405][ T311] usb 3-1: USB disconnect, device number 48 [ 89.043171][ T603] usb usb5-port1: unable to enumerate USB device [ 89.119969][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 89.141017][ T9] usb 2-1: device descriptor read/8, error -71 [ 89.271090][ T9] usb 2-1: device descriptor read/8, error -71 [ 89.379953][ T9] usb usb2-port1: unable to enumerate USB device [ 89.389974][ T603] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 89.541178][ T603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.551355][ T603] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.561695][ T603] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 89.570800][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.584467][ T603] usb 4-1: Product: syz [ 89.593827][ T603] usb 4-1: Manufacturer: syz [ 89.598713][ T603] usb 4-1: SerialNumber: syz [ 89.599008][ T467] tipc: Subscription rejected, illegal request [ 89.625404][ T1550] syzkaller1: entered promiscuous mode [ 89.631135][ T1550] syzkaller1: entered allmulticast mode [ 89.637829][ T1550] syzkaller1: left promiscuous mode [ 89.643123][ T1550] syzkaller1: left allmulticast mode [ 89.899897][ T311] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 90.014195][ T603] usb 4-1: cannot find UAC_HEADER [ 90.020752][ T603] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 90.030710][ T603] usb 4-1: USB disconnect, device number 48 [ 90.036253][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.050812][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.062553][ T311] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.071774][ T311] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 90.082792][ T311] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 90.093699][ T311] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.108109][ T311] usb 3-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 90.117276][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.125330][ T311] usb 3-1: Product: syz [ 90.129490][ T311] usb 3-1: Manufacturer: syz [ 90.134102][ T311] usb 3-1: SerialNumber: syz [ 90.309739][ T64] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 90.342874][ T311] usb 3-1: 1:1 : invalid UAC_AS_GENERAL desc [ 90.349085][ T311] usb 3-1: 0:2 : does not exist [ 90.355952][ T311] usb 3-1: USB disconnect, device number 49 [ 90.460033][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 90.466209][ T64] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.474325][ T64] usb 2-1: config 0 has no interface number 0 [ 90.481752][ T64] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.490851][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.498889][ T64] usb 2-1: Product: syz [ 90.503083][ T64] usb 2-1: Manufacturer: syz [ 90.507705][ T64] usb 2-1: SerialNumber: syz [ 90.517880][ T64] usb 2-1: config 0 descriptor?? [ 90.525206][ T64] smsc95xx v2.0.0 [ 90.849713][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 90.926671][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 90.937458][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.979672][ T9] usb 4-1: device descriptor read/64, error -71 [ 91.109631][ T311] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 91.147229][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 91.147260][ T36] audit: type=1400 audit(1798050344.548:482): avc: denied { listen } for pid=1569 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.147687][ T1570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.181472][ T1570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.191003][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 91.201848][ T64] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 91.229665][ T9] usb 4-1: device descriptor read/64, error -71 [ 91.269702][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 91.276291][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.284689][ T311] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 91.293616][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.303731][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.314545][ T311] usb 3-1: string descriptor 0 read error: -22 [ 91.320806][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.329861][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.340226][ T311] usb 3-1: 0:2 : does not exist [ 91.392668][ T64] usb 2-1: USB disconnect, device number 53 [ 91.469612][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 91.541238][ T311] usb 3-1: USB disconnect, device number 50 [ 91.599630][ T9] usb 4-1: device descriptor read/64, error -71 [ 91.839571][ T9] usb 4-1: device descriptor read/64, error -71 [ 91.906163][ T1593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 91.959628][ T9] usb usb4-port1: attempt power cycle [ 91.972308][ T1598] netlink: 68 bytes leftover after parsing attributes in process `syz.1.402'. [ 91.981694][ T1599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 91.990638][ T1598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 92.087009][ T1605] input: syz1 as /devices/virtual/input/input12 [ 92.093315][ T1605] input: failed to attach handler leds to device input12, error: -6 [ 92.159536][ T64] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 92.299540][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 92.309507][ T386] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 92.310699][ T64] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.328093][ T64] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 92.339043][ T64] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.345750][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 92.353347][ T64] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 92.362473][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.370979][ T9] usb 4-1: device descriptor read/8, error -71 [ 92.377546][ T64] usb 5-1: config 0 descriptor?? [ 92.383186][ T1595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.469484][ T386] usb 3-1: Using ep0 maxpacket: 32 [ 92.476124][ T386] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.485894][ T386] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 92.495012][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.500538][ T9] usb 4-1: device descriptor read/8, error -71 [ 92.503049][ T386] usb 3-1: Product: syz [ 92.513409][ T386] usb 3-1: Manufacturer: syz [ 92.517999][ T386] usb 3-1: SerialNumber: syz [ 92.521041][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.531063][ T10] usb 2-1: config 1 has an invalid interface number: 98 but max is 1 [ 92.539163][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.548229][ T10] usb 2-1: config 1 has no interface number 0 [ 92.554522][ T10] usb 2-1: config 1 interface 98 has no altsetting 0 [ 92.562706][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff59, bcdDevice=b6.44 [ 92.571816][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.579854][ T10] usb 2-1: Product: syz [ 92.584038][ T10] usb 2-1: Manufacturer: syz [ 92.588642][ T10] usb 2-1: SerialNumber: syz [ 92.595117][ T10] cdc_ether 2-1:1.98: skipping garbage [ 92.600708][ T10] usb 2-1: bad CDC descriptors [ 92.727769][ T386] usb 3-1: Fast Track Pro switching to config #2 [ 92.759434][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 92.780347][ T9] usb 4-1: device descriptor read/8, error -71 [ 92.796372][ T10] usb 2-1: USB disconnect, device number 54 [ 92.910389][ T9] usb 4-1: device descriptor read/8, error -71 [ 92.931068][ T386] usb 3-1: USB disconnect, device number 51 [ 93.019771][ T9] usb usb4-port1: unable to enumerate USB device [ 93.340415][ T36] audit: type=1400 audit(1798050346.738:483): avc: denied { accept } for pid=1610 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.549344][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 93.633533][ T36] audit: type=1400 audit(1798050347.028:484): avc: denied { bind } for pid=1622 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.634033][ T1623] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.661426][ T1623] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.699386][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 93.705713][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.716821][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.726976][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 93.736138][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.747174][ T9] usb 2-1: config 0 descriptor?? [ 93.749299][ T386] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 93.770016][ T1631] netlink: 55 bytes leftover after parsing attributes in process `syz.3.415'. [ 93.779826][ T1631] netlink: 55 bytes leftover after parsing attributes in process `syz.3.415'. [ 93.910474][ T386] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 93.918698][ T386] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 93.928879][ T386] usb 3-1: config 8 has no interface number 0 [ 93.935013][ T386] usb 3-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.949545][ T386] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 93.958612][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.966661][ T386] usb 3-1: Product: syz [ 93.970843][ T386] usb 3-1: Manufacturer: syz [ 93.975441][ T386] usb 3-1: SerialNumber: syz [ 94.059291][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 94.183293][ T335] usb 3-1: USB disconnect, device number 52 [ 94.228002][ T10] usb 4-1: no configurations [ 94.232972][ T10] usb 4-1: can't read configurations, error -22 [ 94.247563][ T1645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.256151][ T1645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.358808][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 94.364879][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 94.372686][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 94.381241][ T9] usb 2-1: USB disconnect, device number 55 [ 94.529625][ T10] usb 4-1: no configurations [ 94.534246][ T10] usb 4-1: can't read configurations, error -22 [ 94.540893][ T10] usb usb4-port1: attempt power cycle [ 94.880149][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 94.890023][ T1655] netlink: 'syz.1.423': attribute type 27 has an invalid length. [ 94.900036][ T10] usb 4-1: no configurations [ 94.904687][ T10] usb 4-1: can't read configurations, error -22 [ 94.915395][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.922632][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.948724][ T1656] netlink: 'syz.1.423': attribute type 27 has an invalid length. [ 94.960611][ T386] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 94.977853][ T1656] veth0_vlan: left promiscuous mode [ 94.984005][ T1656] veth0_vlan: entered promiscuous mode [ 94.990908][ T1656] veth1_macvtap: left promiscuous mode [ 94.999980][ T1656] veth1_macvtap: entered promiscuous mode [ 95.007916][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.015012][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.023264][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.030335][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.039226][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 95.059856][ T10] usb 4-1: no configurations [ 95.064523][ T10] usb 4-1: can't read configurations, error -22 [ 95.070995][ T10] usb usb4-port1: unable to enumerate USB device [ 95.130193][ T386] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.138840][ T386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.149226][ T386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.158192][ T386] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.172132][ T386] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.181550][ T386] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.189822][ T386] usb 3-1: Product: syz [ 95.193990][ T386] usb 3-1: Manufacturer: syz [ 95.200942][ T386] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 95.249130][ T601] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 95.400191][ T601] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 95.412124][ T601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 95.423124][ T601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 95.436209][ T601] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 95.445291][ T601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.454030][ T601] usb 2-1: config 0 descriptor?? [ 95.459251][ T1655] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 95.472508][ T386] usb 3-1: USB disconnect, device number 53 [ 95.506250][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 95.547599][ T1671] kvm: kvm [1670]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 95.556728][ T1671] kvm: kvm [1670]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 95.640984][ T36] audit: type=1400 audit(1798050349.038:485): avc: denied { map } for pid=1673 comm="syz.2.428" path="socket:[13702]" dev="sockfs" ino=13702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 95.876665][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.884407][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.892127][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.900478][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.908144][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.916107][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.923860][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.931535][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.939235][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.946905][ T601] hid-multitouch 0003:1FD2:6007.0017: unknown main item tag 0x0 [ 95.954622][ T601] hid-multitouch 0003:1FD2:6007.0017: item fetching failed at offset 23/40 [ 95.963437][ T601] hid-multitouch 0003:1FD2:6007.0017: probe with driver hid-multitouch failed with error -22 [ 95.974354][ T386] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 96.132319][ T386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.142580][ T386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.152836][ T386] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.161917][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.169938][ T386] usb 3-1: SerialNumber: syz [ 96.379705][ T386] usb 3-1: 0:2 : does not exist [ 96.385240][ T386] usb 3-1: unit 5 not found! [ 96.394522][ T386] usb 3-1: USB disconnect, device number 54 [ 96.500411][ T36] audit: type=1400 audit(1798050349.898:486): avc: denied { read } for pid=1691 comm="syz.4.433" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.822756][ T1697] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 97.128906][ T335] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 97.208895][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 97.288987][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 97.295220][ T335] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 97.303569][ T335] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 97.313923][ T335] usb 3-1: config 0 has no interface number 0 [ 97.320072][ T335] usb 3-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.330870][ T335] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.348921][ T335] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 97.350167][ T1704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.358032][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.358060][ T335] usb 3-1: Product: syz [ 97.366937][ T1704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.375255][ T335] usb 3-1: Manufacturer: syz [ 97.391037][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 97.396178][ T335] usb 3-1: SerialNumber: syz [ 97.401654][ T10] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 97.409762][ T10] usb 4-1: config 0 has no interface number 0 [ 97.415855][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 97.426347][ T335] usb 3-1: config 0 descriptor?? [ 97.431407][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 97.442155][ T335] smsc95xx v2.0.0 [ 97.445811][ T335] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 97.455966][ T335] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 97.466314][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 97.475435][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.483473][ T10] usb 4-1: Product: syz [ 97.487635][ T10] usb 4-1: Manufacturer: syz [ 97.492242][ T10] usb 4-1: SerialNumber: syz [ 97.497417][ T10] usb 4-1: config 0 descriptor?? [ 97.502914][ T1700] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.510178][ T1700] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.585512][ T1704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.594074][ T1704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.647621][ T335] usb 3-1: USB disconnect, device number 55 [ 97.659365][ T64] usbhid 5-1:0.0: can't add hid device: -32 [ 97.665412][ T64] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 97.718873][ T1700] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.726131][ T1700] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.892276][ T603] usb 2-1: USB disconnect, device number 56 [ 97.933909][ T10] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 98.117969][ T1710] page size migration: [1710 (syz.4.439)] madvise_vma_pad_pages:333: Invalid attempt to madvise padding on MAP_SHARED vma [ 98.228775][ T603] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 98.334508][ T10] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 98.344669][ T10] asix 4-1:0.34: probe with driver asix failed with error -61 [ 98.398759][ T603] usb 2-1: Using ep0 maxpacket: 32 [ 98.404117][ T386] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 98.412957][ T603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.421317][ T603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.431426][ T603] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.445573][ T603] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 98.454658][ T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.462666][ T603] usb 2-1: Product: syz [ 98.466808][ T603] usb 2-1: Manufacturer: syz [ 98.471408][ T603] usb 2-1: SerialNumber: syz [ 98.558710][ T386] usb 3-1: Invalid ep0 maxpacket: 32 [ 98.679582][ T603] usb 2-1: MIDIStreaming interface descriptor not found [ 98.688960][ T386] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 98.696697][ T603] usb 2-1: USB disconnect, device number 57 [ 98.848713][ T386] usb 3-1: Invalid ep0 maxpacket: 32 [ 98.854143][ T386] usb usb3-port1: attempt power cycle [ 99.067052][ T1719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.075655][ T1719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.083767][ T1719] binder: Bad value for 'stats' [ 99.198700][ T386] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 99.219030][ T386] usb 3-1: Invalid ep0 maxpacket: 32 [ 99.348657][ T386] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 99.369071][ T386] usb 3-1: Invalid ep0 maxpacket: 32 [ 99.374509][ T386] usb usb3-port1: unable to enumerate USB device [ 99.428704][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 99.579819][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.590023][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.605391][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.610872][ T1726] fuseblk: Unknown parameter '!-5 H_2hJ}w.Δ ' [ 99.617445][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.632522][ T10] usb 2-1: SerialNumber: syz [ 99.639991][ T36] audit: type=1400 audit(1798050353.039:487): avc: denied { map } for pid=1725 comm="syz.4.445" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.663390][ T36] audit: type=1400 audit(1798050353.039:488): avc: denied { getopt } for pid=1725 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.731951][ T1728] overlayfs: overlapping lowerdir path [ 99.748976][ T1730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.757548][ T1730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.842496][ T10] usb 2-1: 0:2 : does not exist [ 99.847436][ T10] usb 2-1: unit 5 not found! [ 99.855259][ T386] usb 4-1: USB disconnect, device number 57 [ 99.858717][ T10] usb 2-1: USB disconnect, device number 58 [ 100.198564][ T386] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 100.348508][ T386] usb 4-1: Using ep0 maxpacket: 8 [ 100.359315][ T386] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 100.369661][ T386] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.380023][ T386] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 100.389174][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.397177][ T386] usb 4-1: Product: syz [ 100.401362][ T386] usb 4-1: Manufacturer: syz [ 100.405953][ T386] usb 4-1: SerialNumber: syz [ 100.588506][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 100.614332][ T386] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 100.624412][ T386] usb 4-1: USB disconnect, device number 58 [ 100.738485][ T10] usb 2-1: device descriptor read/64, error -71 [ 100.978474][ T10] usb 2-1: device descriptor read/64, error -71 [ 101.175104][ T1751] overlayfs: overlapping lowerdir path [ 101.199196][ T1749] netlink: 188 bytes leftover after parsing attributes in process `syz.4.454'. [ 101.218391][ T10] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 101.314188][ T1759] kvm: pic: non byte write [ 101.368487][ T10] usb 2-1: device descriptor read/64, error -71 [ 101.388432][ T64] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 101.540632][ T64] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.549888][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.557928][ T64] usb 4-1: Product: syz [ 101.562865][ T64] usb 4-1: Manufacturer: syz [ 101.567565][ T64] usb 4-1: SerialNumber: syz [ 101.578372][ T335] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 101.618381][ T10] usb 2-1: device descriptor read/64, error -71 [ 101.728463][ T10] usb usb2-port1: attempt power cycle [ 101.733946][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 101.740182][ T335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.750297][ T335] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.759306][ T335] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 101.770294][ T335] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.783559][ T335] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.793226][ T335] usb 3-1: config 1 interface 1 has no altsetting 0 [ 101.801358][ T335] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 101.810574][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.818761][ T335] usb 3-1: Product: syz [ 101.822925][ T335] usb 3-1: Manufacturer: syz [ 101.827499][ T335] usb 3-1: SerialNumber: syz [ 102.035035][ T1753] overlayfs: workdir and upperdir must be separate subtrees [ 102.044815][ T335] usb 3-1: selecting invalid altsetting 0 [ 102.088295][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 102.110227][ T10] usb 2-1: device descriptor read/8, error -71 [ 102.140338][ T1765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.148947][ T1765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.239243][ T10] usb 2-1: device descriptor read/8, error -71 [ 102.245520][ T335] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 102.456656][ T335] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 102.465961][ T335] usb 3-1: USB disconnect, device number 60 [ 102.476171][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.498281][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 102.519383][ T10] usb 2-1: device descriptor read/8, error -71 [ 102.649365][ T10] usb 2-1: device descriptor read/8, error -71 [ 102.758322][ T10] usb usb2-port1: unable to enumerate USB device [ 103.373975][ T1779] overlayfs: overlapping lowerdir path [ 103.503539][ T1784] netlink: 68 bytes leftover after parsing attributes in process `syz.2.466'. [ 103.517957][ T36] audit: type=1400 audit(1798050356.909:489): avc: denied { load_policy } for pid=1783 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.518002][ T1784] SELinux: ebitmap: truncated map [ 103.543188][ T1784] SELinux: failed to load policy [ 103.559131][ T1786] random: crng reseeded on system resumption [ 103.565204][ T36] audit: type=1400 audit(1798050356.959:490): avc: denied { write } for pid=1785 comm="syz.4.467" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.608107][ T36] audit: type=1400 audit(1798050356.959:491): avc: denied { open } for pid=1785 comm="syz.4.467" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.632839][ T36] audit: type=1400 audit(1798050357.029:492): avc: denied { ioctl } for pid=1785 comm="syz.4.467" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.778091][ T601] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 103.928078][ T601] usb 2-1: Using ep0 maxpacket: 32 [ 103.935900][ T601] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 103.945364][ T601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.953683][ T601] usb 2-1: Product: syz [ 103.958155][ T601] usb 2-1: Manufacturer: syz [ 103.962839][ T601] usb 2-1: SerialNumber: syz [ 104.155639][ T335] usb 4-1: USB disconnect, device number 59 [ 104.182726][ T601] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 104.197915][ T601] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 104.211747][ T601] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 104.220160][ T601] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 104.230457][ T601] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 104.246984][ T601] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 104.264311][ T1789] 9pnet: p9_errstr2errno: server reported unknown error [ 104.276215][ T601] usb 2-1: USB disconnect, device number 63 [ 104.277078][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.298161][ T1795] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 104.504066][ T1812] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 104.524275][ T1812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 104.777956][ T386] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 104.917941][ T386] usb 4-1: device descriptor read/64, error -71 [ 104.953346][ T470] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.953653][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.975051][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.982915][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 105.147896][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 105.154110][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.165216][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.167912][ T386] usb 4-1: device descriptor read/64, error -71 [ 105.175590][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.194445][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.203624][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.218109][ T10] usb 2-1: config 0 descriptor?? [ 105.427901][ T386] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 105.496298][ T1831] rust_binder: Error in use_page_slow: ESRCH [ 105.496324][ T1831] rust_binder: use_range failure ESRCH [ 105.502425][ T1831] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 105.508328][ T1831] rust_binder: Failure in copy_transaction_data: ESRCH [ 105.516277][ T1831] rust_binder: 1828:1831 transaction to 1828 failed: ESRCH [ 105.523397][ T36] audit: type=1400 audit(1798050358.920:493): avc: denied { read } for pid=1828 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.567887][ T386] usb 4-1: device descriptor read/64, error -71 [ 105.630381][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 105.643437][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.654697][ T10] usb 2-1: USB disconnect, device number 64 [ 105.667156][ T36] audit: type=1400 audit(1798050359.070:494): avc: denied { setopt } for pid=1840 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.827848][ T386] usb 4-1: device descriptor read/64, error -71 [ 105.937825][ T601] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 105.955794][ T386] usb usb4-port1: attempt power cycle [ 106.107788][ T601] usb 3-1: Using ep0 maxpacket: 8 [ 106.119203][ T601] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 106.130451][ T601] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.140764][ T601] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 106.158318][ T601] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.172023][ T1848] cgroup2: Unknown parameter 'memor&y_rE-^' [ 106.173889][ T601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.201276][ T601] usb 3-1: Product: Ф [ 106.214881][ T601] usb 3-1: Manufacturer: ⚮儴삳̫뾷钤쉨̴褖蛵먱캭鿔淖ꡖ룙꥗殼쩵販볖ꓛ瓱懩箃궵ϑ濧☹쀔䑣ꉉṷ௷⭛﫾揷싙䏪폗䫫윮煒볮᪲ᙃ䮽嫛屁⚱䪆羼㼲ꂆ籺Ұ⻮▱䴶⺑ֺ웗ﺓ௏鬢स訩畜㼍ﺛ䫐䞂뚩맛緗ᰠᔅ㵦梓欣⤄姯ⲡⅸ [ 106.219939][ T1854] syzkaller1: entered promiscuous mode [ 106.258068][ T601] usb 3-1: SerialNumber: syz [ 106.266608][ T1854] syzkaller1: entered allmulticast mode [ 106.317851][ T386] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 106.338808][ T386] usb 4-1: device descriptor read/8, error -71 [ 106.468779][ T386] usb 4-1: device descriptor read/8, error -71 [ 106.478081][ T601] cdc_ncm 3-1:1.0: bind() failure [ 106.484756][ T601] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 106.491755][ T601] cdc_ncm 3-1:1.1: bind() failure [ 106.512193][ T601] usb 3-1: USB disconnect, device number 61 [ 106.637723][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 106.707716][ T386] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 106.738681][ T386] usb 4-1: device descriptor read/8, error -71 [ 106.788699][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 6: 253, using maximum allowed: 30 [ 106.807695][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.827702][ T10] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.850848][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.857527][ T10] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 106.866819][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.871696][ T386] usb 4-1: device descriptor read/8, error -71 [ 106.884127][ T10] usb 2-1: config 0 descriptor?? [ 106.997737][ T386] usb usb4-port1: unable to enumerate USB device [ 107.027673][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 107.027673][ T1050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.058251][ T1858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.087619][ T1858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.107864][ T1856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.116513][ T1856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.127031][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 107.136800][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.157931][ T10] usb 2-1: USB disconnect, device number 65 [ 107.284170][ T1865] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 107.284199][ T1865] rust_binder: Error while translating object. [ 107.295201][ T1865] rust_binder: Failure in copy_transaction_data: EINVAL [ 107.301640][ T1865] rust_binder: 1864:1865 transaction to 1864 failed: EINVAL [ 107.417228][ T1876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.433607][ T1876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.441801][ T1876] veth1_macvtap: entered promiscuous mode [ 107.447547][ T1876] veth1_macvtap: entered allmulticast mode [ 107.453461][ T1876] macsec0: left allmulticast mode [ 107.458595][ T1876] veth1_macvtap: left allmulticast mode [ 107.619699][ T1880] bridge: RTM_NEWNEIGH with invalid ether address [ 107.667663][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 107.719454][ T1897] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 4096) [ 107.719482][ T1897] rust_binder: Error while translating object. [ 107.730446][ T1897] rust_binder: Failure in copy_transaction_data: EINVAL [ 107.736660][ T1897] rust_binder: 1896:1897 transaction to 1896 failed: EINVAL [ 107.757600][ T386] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 107.828973][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.837318][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.847459][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.858243][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 107.869149][ T10] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 107.882305][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.893129][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 107.901825][ T10] usb 3-1: string descriptor 0 read error: -22 [ 107.908566][ T10] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 107.917624][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.928753][ T386] usb 4-1: config 0 has an invalid interface number: 42 but max is 8 [ 107.936918][ T386] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.945936][ T386] usb 4-1: config 0 has no interface number 0 [ 107.952043][ T386] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 107.961170][ T386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.969807][ T386] usb 4-1: config 0 descriptor?? [ 107.975546][ T386] usb-storage 4-1:0.42: USB Mass Storage device detected [ 107.983610][ T386] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 107.991399][ T386] usb-storage 4-1:0.42: This device (04cb,0100,00bb S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 107.991399][ T386] Please send a copy of this message to and [ 108.117556][ T64] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 108.176087][ T9] usb 4-1: USB disconnect, device number 64 [ 108.215192][ T1906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 108.224258][ T1907] netlink: 64 bytes leftover after parsing attributes in process `syz.4.507'. [ 108.288956][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.297067][ T64] usb 2-1: not running at top speed; connect to a high speed hub [ 108.307336][ T64] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 108.316626][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.325739][ T64] usb 2-1: Product: П [ 108.334419][ T64] usb 2-1: Manufacturer: 몠㞔뫠㠆ȫ瓙訨鈒섑轚⇧解㪹퇀猗睆滴ꡞ쮕衾廓૵괛뇠 [ 108.345015][ T64] usb 2-1: SerialNumber: syz [ 108.440579][ T1912] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.449935][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.459053][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.614920][ T1899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.624412][ T1899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.634884][ T36] audit: type=1400 audit(1798050362.030:495): avc: denied { write } for pid=1898 comm="syz.1.505" path="socket:[14889]" dev="sockfs" ino=14889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.743780][ T64] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.756176][ T64] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 108.770581][ T36] audit: type=1400 audit(1798050362.180:496): avc: denied { cmd } for pid=1915 comm="syz.3.509" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 108.796133][ T64] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 108.802835][ T36] audit: type=1400 audit(1798050362.190:497): avc: denied { mounton } for pid=1915 comm="syz.3.509" path="/104/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 108.840474][ T36] audit: type=1400 audit(1798050362.230:498): avc: denied { map } for pid=1915 comm="syz.3.509" path="/dev/ublkc0" dev="devtmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.858219][ T64] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.884502][ T64] usb 2-1: USB disconnect, device number 66 [ 108.901513][ T474] ------------[ cut here ]------------ [ 108.907042][ T474] WARNING: CPU: 1 PID: 474 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 108.908819][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 108.917617][ T474] Modules linked in: [ 108.937212][ T474] CPU: 1 UID: 0 PID: 474 Comm: kworker/u8:38 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 108.949140][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.959298][ T474] Workqueue: iou_exit io_ring_exit_work [ 108.965178][ T474] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 108.965391][ T36] audit: type=1400 audit(1798050362.360:499): avc: denied { watch } for pid=1918 comm="syz.3.510" path="/105/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.971577][ T474] Code: 5d e9 c5 46 55 02 cc e8 0f 14 32 fe 0f 0b eb e3 e8 06 14 32 fe 0f 0b eb da e8 fd 13 32 fe 0f 0b e9 4d fe ff ff e8 f1 13 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 108.971597][ T474] RSP: 0018:ffffc9000ddcf990 EFLAGS: 00010293 [ 109.019987][ T474] RAX: ffffffff8355adbf RBX: 1ffff110246a091d RCX: ffff888117740000 [ 109.028180][ T474] RDX: 0000000000000000 RSI: 00000000000000c9 RDI: 0000000000000347 [ 109.036166][ T474] RBP: ffffc9000ddcf9e0 R08: 0000000000000003 R09: 0000000000000004 [ 109.044174][ T474] R10: 0000000000000000 R11: ffffffff83559da0 R12: ffff8881046ba600 [ 109.052264][ T474] R13: ffff8881235048c0 R14: ffff888115dd0000 R15: ffff888115dd0010 [ 109.060267][ T474] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 109.069245][ T474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.075842][ T474] CR2: 0000555579d3b918 CR3: 000000011ec94000 CR4: 00000000003526b0 [ 109.083848][ T474] Call Trace: [ 109.087131][ T474] [ 109.090079][ T474] ? _raw_spin_unlock+0x45/0x60 [ 109.094944][ T474] ublk_ch_uring_cmd+0x6f/0xa0 [ 109.099779][ T474] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 109.105768][ T474] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 109.111689][ T474] ? io_uring_cancel_generic+0x6eb/0x6eb [ 109.117327][ T474] io_ring_exit_work+0x23c/0x83b [ 109.122274][ T474] ? __cfi_io_ring_exit_work+0x10/0x10 [ 109.127782][ T474] ? _raw_spin_unlock_irq+0x4e/0x70 [ 109.133074][ T474] process_scheduled_works+0x7d4/0x1020 [ 109.138717][ T474] worker_thread+0xc51/0x1370 [ 109.143423][ T474] kthread+0x2c9/0x370 [ 109.147517][ T474] ? __cfi_worker_thread+0x10/0x10 [ 109.152635][ T474] ? __cfi_kthread+0x10/0x10 [ 109.157213][ T474] ret_from_fork+0x67/0xa0 [ 109.161640][ T474] ? __cfi_kthread+0x10/0x10 [ 109.166245][ T474] ret_from_fork_asm+0x1a/0x30 [ 109.171052][ T474] [ 109.174083][ T474] ---[ end trace 0000000000000000 ]--- [ 109.180404][ T10] usb 3-1: USB disconnect, device number 62 [ 109.437540][ T64] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 109.598667][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.609870][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.619778][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.633090][ T64] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.642372][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.651767][ T64] usb 4-1: config 0 descriptor?? [ 110.064662][ T64] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 110.082757][ T64] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 110.276750][ T601] usb 4-1: USB disconnect, device number 65