last executing test programs: 4.96977197s ago: executing program 2 (id=445): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0xfffe, 0x9, 0x0, 0x5}, 'syz0\x00', 0x15}) ioctl$UI_DEV_CREATE(r0, 0x5501) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0xc000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x10, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe06, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}}}}) r3 = openat$cgroup_ro(r1, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x8a8c238b8af0170b, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4c804) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) 4.449513607s ago: executing program 2 (id=446): syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000201e04df30400001020301090292000301fa8001080b0002010130400904000000010130000a2401062e00080000001324030304040301080104000008000010050011240a010200000000000000000100000009040100000101", @ANYRESHEX], 0x0) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x9da, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x44, {0x9, 0x21, 0x1000, 0x2, 0x1, {0x22, 0x416}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2c, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xa8, 0xe, 0x58}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x10, 0x5, 0x48, 0x6d}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2409}}]}) 3.343057793s ago: executing program 1 (id=455): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x151000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000001c0)=0x1b5) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x20622}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xdf, 0x40, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x24}, {0x60, 0x24, 0xf, 0x1, 0xfffffffc, 0xba, 0xb4, 0x9}, {0x6, 0x24, 0x1a, 0xf8bc, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xff}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xdd, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x18, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x6, 0xb}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000240)={0x0, 'team_slave_1\x00', {0x2}}) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 3.245888876s ago: executing program 2 (id=456): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = fsmount(r0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0xfec5) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf25010000000000000002410000001000136574683a70696d3672656700cca1fc3712748408cc83c0240138d227d23d6e5eca0100000000000000e679770fd32cacf8d964ffad3f949ccc2d6985b6b6060965fddd35ff883aaebb4c4a8bfcd39b598850cb1177e4ba651803887d95149eabab1583c924c4f31c7f7ecbe29704de07eb584ec7804c"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000002035120e00400001022c0001018190be090400e703200409058d0320027ffe9e0425010009058702000409000c042501000000"], 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) 2.087226294s ago: executing program 1 (id=460): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0x6, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0xc, 0x0, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0xc, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x8000, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x201, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x96, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x4, 0x9, 0x8, 0x3fc, 0x4000006, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f6, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x7, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x6, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x101, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x40001, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) write$char_usb(r0, &(0x7f00000003c0)="c20547646b52a7dcb0a83aafccfafea8ea54939e58813b649223ec7b906acaef70a9aee6fe9311571fa1de82d073be715be26e07c2c1da0f3d4d5c46823043d25f8bf9eb46d0dbce18a6b0059b0da9119bd6cc7a2c0e7892b42cfb6a76183ad2d87b9c7e3e3b203cdb9c090bf1965a2cddf9e495cd8bb0aa87fa5340e14cc3083d4c4e5526199822eef04defde0bc1ef869a64c897dbed14cdc330ba5f26dae0c610173ad6910df17e160c71ddda4650745906", 0xb3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwrite64$ublk_ch(0xffffffffffffffff, &(0x7f0000000a40)=@buf_512="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", 0x1000, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)={0x14, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x4, 0xce}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_io_uring_setup(0x457f, &(0x7f0000000080)={0x0, 0x182a, 0x800, 0x1, 0x37e}, 0xfffffffffffffffc, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, &(0x7f0000000040)=ANY=[], 0xffffff6a) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x50007a2) read(r8, &(0x7f0000000200)=""/149, 0x95) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r9 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 1.975693617s ago: executing program 1 (id=461): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x2, 0x60, 0x4f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9b000000, 0x9, 0x427, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x3b}, [@mbim_extended={0x8, 0x24, 0x1c, 0x10, 0x8, 0xd2b}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x59, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x3, 0xc4}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x7, 0x30, 0x40}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x1, [{0xa4, &(0x7f00000001c0)=@string={0xa4, 0x3, "319809f5c0e97a2249876d08c6c2acb3da9f7cf824d4bca4a50a72a04f40ff7d7f91bc37b190a246f19d821dfc7fb4714ddbcb2c83457ee2fccd9c6cb85e94b8dd5afa6a2b92c3dbbbc90eb464681ea492d059d45eabfe61242a3f566fad9a99367711a67b8e4944fa361868a491cb3b89d9436b0abbbf086ba189e9cf6ba38a7613d906422131aa8b513bf3c12e8d5f2e73598848ff811951fa3caabe5d7eac9e6e"}}]}) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9c, &(0x7f0000000480)=@string={0x9c, 0x3, "1246d2e26c814663d8fdbad2c56424e16b70a51e5fcd41725fa78a5585370f6e02923f68c06c0a585c745b5eb98d632fc0586686b6946d9481bf1339cd3d1c07c45d21dd254e7399ca6410556b21fdc0f885bccbcaac78ce37740e48b2e36a5d33393ddee404673d3051f826d798bede55702a768ab9d615a7090836341ac45f5a1f1800150fa4a6720f90a769c32d29534d78efafd601354f01"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) (async) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x2, 0x60, 0x4f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9b000000, 0x9, 0x427, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x3b}, [@mbim_extended={0x8, 0x24, 0x1c, 0x10, 0x8, 0xd2b}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf8}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x59, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x3, 0xc4}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x7, 0x30, 0x40}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x1, [{0xa4, &(0x7f00000001c0)=@string={0xa4, 0x3, "319809f5c0e97a2249876d08c6c2acb3da9f7cf824d4bca4a50a72a04f40ff7d7f91bc37b190a246f19d821dfc7fb4714ddbcb2c83457ee2fccd9c6cb85e94b8dd5afa6a2b92c3dbbbc90eb464681ea492d059d45eabfe61242a3f566fad9a99367711a67b8e4944fa361868a491cb3b89d9436b0abbbf086ba189e9cf6ba38a7613d906422131aa8b513bf3c12e8d5f2e73598848ff811951fa3caabe5d7eac9e6e"}}]}) (async) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9c, &(0x7f0000000480)=@string={0x9c, 0x3, "1246d2e26c814663d8fdbad2c56424e16b70a51e5fcd41725fa78a5585370f6e02923f68c06c0a585c745b5eb98d632fc0586686b6946d9481bf1339cd3d1c07c45d21dd254e7399ca6410556b21fdc0f885bccbcaac78ce37740e48b2e36a5d33393ddee404673d3051f826d798bede55702a768ab9d615a7090836341ac45f5a1f1800150fa4a6720f90a769c32d29534d78efafd601354f01"}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 1.202423432s ago: executing program 3 (id=474): writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)="5768f60a50352a6a0f2fd0804132b9698520106d94239facd30abd340f59c301413f4a55926c99ff589411826778e3543bdbbff026d310b79f84", 0x3a}], 0x1) unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x40000000004, 0x12) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4, 0x3, "502eb3"}}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x7fe, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000002900800034000000000000000000000084d7774b08e2bc2f"], 0x18}, 0x4000) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="6e4d0f6eaf6f6465733d742c35"]) shutdown(r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) 1.149520393s ago: executing program 3 (id=475): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x62, 0x80, 0x2, 0x88, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c53, 0x8, 0x0, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85f6, 0x10000, 0x1, 0xf6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaeef, 0x8000, 0x0, 0x73, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x0, 0x0, 0x165, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0xf61, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 1.044915977s ago: executing program 3 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1000f, 0xdfdf, 0x10017, 0x81, 0x9, 0x2, 0xd2, 0xfffffffffffffffd, 0x0, 0x7ffffffffffffffc, 0x1, 0x9, 0x5, 0x800, 0xfffffffffffffffa], 0x0, 0x1119c4}) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) 930.1081ms ago: executing program 3 (id=477): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000600)={[{@none}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2e) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000012", @ANYRES32], 0x28}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) exit(0x29dbc548) getdents64(r0, &(0x7f00000001c0)=""/122, 0x7a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x10a, 0x0, 0x9}]}) 865.302302ms ago: executing program 1 (id=483): r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) 806.057664ms ago: executing program 1 (id=485): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r5, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000071, 0x0, 0x28cd}]}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030d000000ff0e000000000000030009004800000088bc9122e989532da50000000000000003000600002000000200000000000000000000000000000002000100000004d70000fb00000000e0030005003c00000002"], 0x68}, 0x1, 0x7}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000580)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0xfb, 0x2, 0x5, 0xfc, 0x57, 0x5, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x44}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) pwritev2(r2, &(0x7f0000000540)=[{&(0x7f0000000380)="8eed4d2ec35889ac29fd13bb2ccfa09b1184621b05ff2f52ab9b414fb2efa131bd271daaa3871e4cb622cd0c4aede955f93e5b3f8075c84a7dfa118e29deab6f0d5bc62712f76d22fc7b876257c57b15d7804440db438716b59e4e44a5c9bc378d5fd05425ff07bd31d57fd21f71c39f335b8f9f71c3536df8b886b8957706c1e97475f3c2a424522c067935754a7d651be54e800c0e8f9634b3c00db9182acee50efd802624da99c7018a1f4e4570c2bd42cf7fd909a9eb3089f73e7a6b2158677f6d51f67df2ffe246dd0002c40f2ed7f6cb5d8ee81e6439bdd9fd88cd8c938924fe", 0xe3}, {&(0x7f0000000480)="e46e8092842036e18cf35a4d06dfd11c83b19827f38005c18b859eca059bc6722b8befca15e395a5a4acca18ddac3fda42a05f19854ad38959af480e7aa339c8b041f279da507178dc6246ba89ada724585b2d32b4fb89df6ce454f6cc1582ac4ab4dbbac9d0a570d543824b8eff6ea3b76cae870e7938b5556875c14b93dcf68158df774efd9cca9d2a7ceb3c37e57c5d6664957af7d4dc68b70fa3677fa3a4c394c41a493950b5802daa6f5666", 0xae}], 0x2, 0x0, 0x2, 0xe) (async) process_vm_writev(r6, &(0x7f0000003a00)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1, &(0x7f0000004dc0)=[{&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/25, 0x19}, {&(0x7f0000004a80)=""/48, 0x30}, {&(0x7f0000004ac0)=""/186, 0xba}, {&(0x7f0000004b80)=""/161, 0xa1}, {&(0x7f0000004c40)=""/63, 0x3f}, {&(0x7f0000004c80)=""/62, 0x3e}, {&(0x7f0000004cc0)=""/230, 0xe6}], 0x8, 0x0) (async) read(r9, &(0x7f0000000080)=""/1, 0x1) read$watch_queue(r9, &(0x7f00000000c0)=""/247, 0xf7) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x48140}, 0x20008000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'veth0_vlan\x00', 0x100}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r10, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000cf9f2ea4c3469de20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002407000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$KVM_CREATE_VCPU(r12, 0xc0046686, 0x0) (async) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2040) 805.087054ms ago: executing program 0 (id=487): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000780)="120000001200e7ef007b462ea95ce8197900", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d00)=""/4084, 0xff4}, {&(0x7f0000000600)=""/189, 0xbd}, {&(0x7f0000000000)=""/78, 0x4e}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f0000001c00)=""/233, 0xe9}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000080)=""/99, 0x63}], 0xb}, 0x5e}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, 0x4}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x0, 0x0) 804.960064ms ago: executing program 0 (id=488): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f00000000c0)={0x6, 0x7fffffff}) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200016d9bffffff000000000a"], 0x18}}, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 789.852545ms ago: executing program 0 (id=489): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x3172, 0x0, 0x1}, 0x18, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000fff000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 782.557385ms ago: executing program 0 (id=490): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20004050, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)=""/4063, 0xfdf}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f0000000d80)=""/238, 0xee}, {&(0x7f00000000c0)=""/112, 0x70}], 0x9}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1f77}, {{0x0, 0x0, 0x0}, 0xfffd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x4000}, 0x90d2}, {{0x0, 0x0, 0x0}, 0xfffffffa}], 0x7, 0x2040, 0x0) 730.223427ms ago: executing program 0 (id=491): sysinfo(&(0x7f0000000140)=""/4096) memfd_create(0x0, 0x3aaea528bbe6e4bc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000100)="0000044100000d", 0x7}], 0x2) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x800000a, 0x34) syz_usb_connect$uac2(0x3, 0x100, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000300000040351201004000010203010902ee00030108a0fe080b00020103200a0904000000010120000924010300033500ff0c2403040603fe060509000013240d020100060300010002000200000001000d240d03030001000003000000090401000001022000090401010101022000102401010102021000000005000000020e2402017f020103a521c4197b28090501094000080301082501010340030009040200000102200009040201010102200006240201043009240202080002000a0b240201f6020006b836460a030002a4b6800010050c2402010204a59e2b33d0680b2402017f040806f87566090582091000f708be0825010100040700"], &(0x7f0000000480)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x6, 0x5c, 0xff, 0x20, 0x8}, 0x3a, &(0x7f00000003c0)={0x5, 0xf, 0x3a, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x2, 0xf00, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b2d7d4da6c9836b56e72318301baeff2"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0x8, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x4, 0xf, 0x1, 0xe}]}, 0x1, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x9cd0}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000200)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000240)=0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2810901}}, 0x50) r8 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x80) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000080)={0x2, 0xef87c6e3ff6e987, 0x10000}) 729.906287ms ago: executing program 1 (id=492): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x9, 0x0, 0x5}, 'syz0\x00', 0x29}) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a31000000005800048054000180090001006d6574610000000009000000000000000000000c080003400000000008000240000000190800014000000009080001400000000b080001400000001208000140000000150800034000000000"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x10004880) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000000)={0x2, 0x1}, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRES16=r7], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x2, 0x8001, &(0x7f0000000240)=0x30}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$TUNSETGROUP(r6, 0x400454ce, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x6) openat$cgroup_ro(r8, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0xb, 0x0, &(0x7f0000000280)) 274.497742ms ago: executing program 2 (id=493): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/113, 0x71}, {&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1c000}, 0x2}], 0x3, 0x120, 0x0) 265.216492ms ago: executing program 0 (id=494): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x181801) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x81, 0x90, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [], [{{0x9, 0x5, 0x8d, 0x3, 0x220, 0x7f, 0xfe, 0xf8, {0x4}}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0x9, 0x0, 0xc, {0x4}}}]}}}}}]}}, 0x0) (async) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x81, 0x90, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4, [], [{{0x9, 0x5, 0x8d, 0x3, 0x220, 0x7f, 0xfe, 0xf8, {0x4}}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0x9, 0x0, 0xc, {0x4}}}]}}}}}]}}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="0c41e687256b52c6b2d4da6eefd01b1bfafcb9159392d0830a2171b7716d4c792c1db0e614d3238789a8", 0x2a}], 0x1, &(0x7f00000003c0)=[{0x88, 0x112, 0x7fffffff, "17b18e40e97a4e9154bdb86ee44b8d834e273a5076ef37b538816f66a74dfda447c39ea6ca7866736fa0d9ec650cb73e58ee65801ef8b73b186f915216a6a0891db5e6002e6bb61fd552b1fdb9708c2339e94ad5b63cfe746be018e63fb1ea5acc884ba55ef2b0f8fe1f5604f81330f84cbb"}, {0xd0, 0x29, 0x674, "819fb990706be2a3f40afbcada61d177fe217eb664ca2e035ce61f95df2efdcece67e7d7a6abc55da4a7726f3c0dbdf591f9ec68b240477b138afc528a9e73a8a9620ccd6457b9f04f97b94bba0d6e1502ceb00c6b3be7499bba5811fc5ed4356b0a74bad0b189190cc1bf7fec8b97035ddd04509e8071086f665700044dd96292620dfe097b2bf8950a8109540f60455eedd55a1d85564340dcaa175aa627b6b91e8764df56bb8806fb8a56ea0345a1d5c2e6fefecab298521de03268"}, {0xf8, 0x119, 0x9bf, "95d31db38a248d133aeee3bf10cd15e44fbdd4d6ffbc22eeee1721945374435376a0e46a669c7563769eecbbfe134c392662a3667bdb518e1a55b3d1d9a5cdc6f6fade58c1306f59a974fdcde50c351acb0da339d0fa39d0b860309ba35dbd1587564e36f3ca7a51416f575d33244ac732ffb480b1cb4aa63909800c6df3fb9d1555a89eaac97c8c8a1177e643dc4a2ab775f2a6f22ba6511bb0eeba1542c33a4f084ca53f1bb2f4446a92fdd26e7ea861bd8755a17be54a7408e331cb772203f7ae62ecf10aa46358898642eaa2c4f2c04f9f4829461d865245fe2ab063852664cf82ac6cd9"}, {0xd0, 0x84, 0x8, "111ee8bb864fc34679586b4b43deb60204f4058c2d8950284ace4eab3e5172e5da19c18304fd3c3ea17ad75e0da121d39dbda21f64830b49293e8d10cc08adc5c2dd4831680ae338021c6865227183ec1212c8b01eba3440f39a74ac8914bd3d58491085f84b4e2540a9a3688404e188ccc8c713c6f333231a8d176d9917c99d2d6d9600204d97039ce7ce490d2c23691e37f8c8b0a91705ff3260d94f45fb8a7620fdcd5b2b68361cfb7d598a38e745f491d7c31df14c25087f7a1cbe7128"}], 0x320}}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @private=0xa010100}, 0x3, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000001c40)=[{&(0x7f00000007c0)="e5734c1edd38602e57e2d7e4ff4e5e28be137f77443efeaa7fbee32dc79617d8dd53b2450d030841deeec0eb5d26544979a3d45cf3ef2f2822c863eb1199be002ea14d7ecceaf764c9d51da292ae08954899d204381bace08dd33dccca3601e71afd748f631f7bb8c757225706254c50b8a7cdfb531175fc9baa865e88132369b3", 0x81}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="38b7c7539d02da80f15cf2aeca176728437e46b01985eb2e158ada746bd1d4335915aa6bb2331265414cb226dc6f653631cda825c908450e8b2f124a1817229d7fb0ff083ad93fbf85d0f740c59bdf36392a2bee2a73c9d730feca840c9523b459aa425d1573a56967f67b135f48f21fea8c7bd9d3d2e41208728548097fe7107d7113e5e03b545a86d9465490c35c945757007763e74f198a6fdea4044745a6a70c86726a0ba703ff2fe66b9ae5a49ad557ac1a33d4b30ae8215ab4bc18f06903be693076941d7d45d702a0002fb9b3506a521ea9608cf4", 0xd8}, {&(0x7f0000001980)="f3c74bd12147252a96fd4427c657a6caecabb237475ab0d6781104612017e21f5a7a5d645e6b03d409669476c3c9f4be45c2aed2de23a1633a73ac8c78d1a1ebb8a6d4d904db6d2f8b494df06b041bfad4c984d6a8c875b9d18cdb7fa312e191c1011b8e8f323f4d5267e7b78df3863ae337c66d27314224d5ff996a558d8fd82250e355c76d5f982a55314325d7813a1e19dd94eb1e8e1158e4c562a5e757a4d7b856e00b80dac54c23aebc959017886591e7e0540504a9d48ad01a29fc637372369aa021e8249cdc681cbd1e9e502dec0630a2fc5b4826b0fc5e35aa69b61f77e4cd0c8c86e24303da393bf3dc6198dac95501ee51", 0xf6}, {&(0x7f0000001a80)="0ef82ba68d73f561c9517b7db287ecd608aed938521a3a71f3b54bac61cb447e1b833a8052e6850e1d34ba95596a76173394059e6eac4734487e77134c6cabffbc64d4365db3239aed8aece078fb5e1bce08bcbb3c23419d", 0x58}, {&(0x7f0000001b00)="0b50b86ae9edf7708248e4cafdbe508eb22e5cdbf6a136272e0a9cb426ce965c99af578cd4d40a5d86915e52cec4a99ea6dff895c2d8da1a5bb17f3da239b80c9846b40fb2b0415f58b0b2f6a6f0ed10ed00c8fac48cf72aa3f1997d80471d8d11d829008f5468bd47c5a262a07cb3855f04040ce3aeca8f9ffaf3a3380d15d1d94b1312c74f32f4ed1d69d53a8129e5fca69da53b24a1c79ca0e4ca7fbfd7edf61801bb16d6bf4b446562a9a25ab1667e6064eb63936353b280d3c7862526e5d3d5b3fe4fbe57c763a831be3eb8385bf3b9e83eae8ac38639af38521ff4c1cf8fec0585a9ece69feec0c960", 0xec}, {&(0x7f0000001c00)="e77ad1b59d2293d9e1190e5f5323caa73e3c4bca1a077b5bfdf1ae331608e8c87e33317a4e682d14bec72913d175aff697e96305d5edfa03", 0x38}], 0x7}}], 0x2, 0x4) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "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"}) (async) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000100)={0x0, "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000000340)={0x105480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x105480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 218.316014ms ago: executing program 2 (id=495): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000100)=0x7) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 218.153974ms ago: executing program 2 (id=496): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0xff75) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x14, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1a) 26.15108ms ago: executing program 3 (id=497): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x62, 0x80, 0x2, 0x88, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c53, 0x8, 0x0, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85f6, 0x10000, 0x1, 0xf6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaeef, 0x8000, 0x0, 0x73, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x0, 0x0, 0x165, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x4, 0xf61, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r7, r6, 0x0, &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 0s ago: executing program 3 (id=498): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x5, @local, 0x9}, 0x1c, &(0x7f0000000340)=[{0x0}, {&(0x7f00000001c0)="b5f8146f98a5e55f22ac09e2819f6c2b7a71f54ca3b301e3d3b008d7f535375fadfd48ed8239288bece74d906b0e0e483cb7", 0x32}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000299e77febe8c57b96e1f0000000000000300000000c910200100000210980c0be6a372c9a27079f2350e76214150dc975d63a0ab755ecee60000000000000004592658a762f3e3a983e91e4a809f563ae9f82e22f851fb8806fb71114122a7bc57a462086ef7132997a054c6d401ebc1f270d8614771db71b3e5f0eedef98b5f393cba64547a9dd4658ab75ae3f9526afd782a00"/167], 0x118}}, {{&(0x7f00000004c0)={0xa, 0x4e1f, 0x17fff, @loopback, 0xb44d}, 0x1c, 0x0}}], 0x2, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 21.347384][ T36] audit: type=1400 audit(1780065820.859:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.348468][ T286] cgroup: Unknown subsys name 'net' [ 21.370033][ T36] audit: type=1400 audit(1780065820.859:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.397251][ T36] audit: type=1400 audit(1780065820.889:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.397409][ T286] cgroup: Unknown subsys name 'devices' [ 21.530747][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.536340][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.648976][ T36] audit: type=1400 audit(1780065821.159:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.672135][ T36] audit: type=1400 audit(1780065821.159:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.691267][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.696977][ T36] audit: type=1400 audit(1780065821.169:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.728456][ T36] audit: type=1400 audit(1780065821.219:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.737748][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.753819][ T36] audit: type=1400 audit(1780065821.219:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.788179][ T36] audit: type=1400 audit(1780065821.239:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.813712][ T36] audit: type=1400 audit(1780065821.239:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.240777][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.247829][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.254945][ T294] bridge_slave_0: entered allmulticast mode [ 23.261125][ T294] bridge_slave_0: entered promiscuous mode [ 23.268231][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.275311][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.282396][ T294] bridge_slave_1: entered allmulticast mode [ 23.288492][ T294] bridge_slave_1: entered promiscuous mode [ 23.351193][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.358231][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.365390][ T296] bridge_slave_0: entered allmulticast mode [ 23.371581][ T296] bridge_slave_0: entered promiscuous mode [ 23.379299][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.386323][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.393385][ T296] bridge_slave_1: entered allmulticast mode [ 23.399572][ T296] bridge_slave_1: entered promiscuous mode [ 23.443989][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.451068][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.458092][ T295] bridge_slave_0: entered allmulticast mode [ 23.464325][ T295] bridge_slave_0: entered promiscuous mode [ 23.476351][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.483419][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.490467][ T295] bridge_slave_1: entered allmulticast mode [ 23.496554][ T295] bridge_slave_1: entered promiscuous mode [ 23.525666][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.532728][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.539987][ T293] bridge_slave_0: entered allmulticast mode [ 23.546096][ T293] bridge_slave_0: entered promiscuous mode [ 23.557380][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.564434][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.571533][ T293] bridge_slave_1: entered allmulticast mode [ 23.577631][ T293] bridge_slave_1: entered promiscuous mode [ 23.593167][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.600205][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.607462][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.614489][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.688471][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.695534][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.702790][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.709805][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.724136][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.731488][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.738812][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.746205][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.757496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.764599][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.776608][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.783646][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.820195][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.827228][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.837673][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.844740][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.885311][ T294] veth0_vlan: entered promiscuous mode [ 23.894124][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.901169][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.916359][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.923390][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.941862][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.948881][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.956360][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.963379][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.973876][ T294] veth1_macvtap: entered promiscuous mode [ 23.997550][ T296] veth0_vlan: entered promiscuous mode [ 24.014417][ T293] veth0_vlan: entered promiscuous mode [ 24.025758][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.053606][ T296] veth1_macvtap: entered promiscuous mode [ 24.063070][ T293] veth1_macvtap: entered promiscuous mode [ 24.070330][ T295] veth0_vlan: entered promiscuous mode [ 24.112177][ T295] veth1_macvtap: entered promiscuous mode [ 24.122226][ T317] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5'. [ 24.163884][ T320] process 'syz.0.1' launched '/dev/fd/3' with NULL argv: empty string added [ 24.180696][ T325] syzkaller1: entered promiscuous mode [ 24.187170][ T325] syzkaller1: entered allmulticast mode [ 24.212465][ T329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.421285][ T338] overlay: ./file1 is not a directory [ 24.519848][ T315] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 24.690357][ T315] usb 1-1: config 9 has an invalid interface number: 129 but max is 0 [ 24.699168][ T65] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.706363][ T315] usb 1-1: config 9 has no interface number 0 [ 24.720210][ T315] usb 1-1: config 9 interface 129 has no altsetting 0 [ 24.736082][ T315] usb 1-1: New USB device found, idVendor=154b, idProduct=f00b, bcdDevice= 9.b0 [ 24.752141][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.760499][ T315] usb 1-1: Product: syz [ 24.764753][ T315] usb 1-1: Manufacturer: syz [ 24.769450][ T315] usb 1-1: SerialNumber: syz [ 24.850223][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.866551][ T65] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 24.878090][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.896259][ T65] usb 3-1: Product: syz [ 24.906349][ T65] usb 3-1: Manufacturer: syz [ 24.916433][ T65] usb 3-1: SerialNumber: syz [ 24.926615][ T65] usb 3-1: config 0 descriptor?? [ 24.937747][ T65] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 25.184726][ T45] usb 3-1: USB disconnect, device number 2 [ 25.453962][ T356] FAULT_INJECTION: forcing a failure. [ 25.453962][ T356] name failslab, interval 1, probability 0, space 0, times 1 [ 25.466748][ T356] CPU: 1 UID: 0 PID: 356 Comm: syz.3.15 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 25.466780][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 25.466798][ T356] Call Trace: [ 25.466804][ T356] [ 25.466810][ T356] __dump_stack+0x21/0x30 [ 25.466844][ T356] dump_stack_lvl+0x140/0x1c0 [ 25.466866][ T356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.466890][ T356] ? __cfi_avc_has_perm+0x10/0x10 [ 25.466909][ T356] ? kasan_save_alloc_info+0x40/0x50 [ 25.466935][ T356] dump_stack+0x19/0x20 [ 25.466957][ T356] should_fail_ex+0x3d7/0x530 [ 25.466974][ T356] should_failslab+0xac/0x100 [ 25.466993][ T356] __kmalloc_cache_noprof+0x41/0x470 [ 25.467011][ T356] ? vhost_task_create+0x12c/0x400 [ 25.467027][ T356] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 25.467039][ T356] vhost_task_create+0x12c/0x400 [ 25.467049][ T356] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 25.467061][ T356] ? __cfi_vhost_task_create+0x10/0x10 [ 25.467072][ T356] ? __cfi_vhost_task_fn+0x10/0x10 [ 25.467082][ T356] ? __kasan_check_write+0x18/0x20 [ 25.467091][ T356] ? mutex_lock+0x97/0x1d0 [ 25.467103][ T356] ? __cfi_mutex_lock+0x10/0x10 [ 25.467114][ T356] ? kernel_text_address+0xa9/0xe0 [ 25.467128][ T356] kvm_mmu_post_init_vm+0x161/0x300 [ 25.467143][ T356] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 25.467158][ T356] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 25.467171][ T356] ? kstrtoull+0x13b/0x1e0 [ 25.467185][ T356] ? kstrtouint+0x78/0xf0 [ 25.467198][ T356] ? ioctl_has_perm+0x1bc/0x500 [ 25.467207][ T356] ? __asan_memcpy+0x5a/0x80 [ 25.467216][ T356] ? ioctl_has_perm+0x408/0x500 [ 25.467225][ T356] ? has_cap_mac_admin+0xd0/0xd0 [ 25.467233][ T356] ? __kasan_check_write+0x18/0x20 [ 25.467242][ T356] ? mutex_lock_killable+0x97/0x1d0 [ 25.467255][ T356] ? __cfi_mutex_lock_killable+0x10/0x10 [ 25.467266][ T356] ? proc_fail_nth_write+0x184/0x220 [ 25.467281][ T356] kvm_vcpu_ioctl+0xa48/0x1000 [ 25.467291][ T356] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.467301][ T356] ? __cfi_vfs_write+0x10/0x10 [ 25.467310][ T356] ? __kasan_check_write+0x18/0x20 [ 25.467319][ T356] ? mutex_unlock+0x90/0x240 [ 25.467331][ T356] ? __cfi_mutex_unlock+0x10/0x10 [ 25.467342][ T356] ? __fget_files+0x2c5/0x340 [ 25.467354][ T356] ? __fget_files+0x2c5/0x340 [ 25.467365][ T356] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.467377][ T356] ? security_file_ioctl+0x3e/0x110 [ 25.467391][ T356] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.467402][ T356] __se_sys_ioctl+0x132/0x1b0 [ 25.467415][ T356] __x64_sys_ioctl+0x7f/0xa0 [ 25.467426][ T356] x64_sys_call+0x1878/0x2ee0 [ 25.467436][ T356] do_syscall_64+0x57/0xf0 [ 25.467446][ T356] ? clear_bhb_loop+0x50/0xa0 [ 25.467459][ T356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.467470][ T356] RIP: 0033:0x7f4dd879ce59 [ 25.467483][ T356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.467491][ T356] RSP: 002b:00007f4dd71e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.467507][ T356] RAX: ffffffffffffffda RBX: 00007f4dd8a15fa0 RCX: 00007f4dd879ce59 [ 25.467515][ T356] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 25.467521][ T356] RBP: 00007f4dd71e3090 R08: 0000000000000000 R09: 0000000000000000 [ 25.467528][ T356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.467534][ T356] R13: 00007f4dd8a16038 R14: 00007f4dd8a15fa0 R15: 00007ffc69718fd8 [ 25.467542][ T356] [ 26.000658][ T366] ======================================================= [ 26.000658][ T366] WARNING: The mand mount option has been deprecated and [ 26.000658][ T366] and is ignored by this kernel. Remove the mand [ 26.000658][ T366] option from the mount to silence this warning. [ 26.000658][ T366] ======================================================= [ 26.039558][ T366] cgroup: noprefix used incorrectly [ 26.246329][ T384] FAULT_INJECTION: forcing a failure. [ 26.246329][ T384] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.261916][ T384] CPU: 0 UID: 0 PID: 384 Comm: syz.1.25 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 26.261948][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.261959][ T384] Call Trace: [ 26.261965][ T384] [ 26.261971][ T384] __dump_stack+0x21/0x30 [ 26.261999][ T384] dump_stack_lvl+0x140/0x1c0 [ 26.262022][ T384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.262045][ T384] ? kasan_save_alloc_info+0x40/0x50 [ 26.262071][ T384] ? __kasan_slab_alloc+0x73/0x90 [ 26.262091][ T384] dump_stack+0x19/0x20 [ 26.262113][ T384] should_fail_ex+0x3d7/0x530 [ 26.262131][ T384] should_fail+0xf/0x20 [ 26.262146][ T384] should_fail_usercopy+0x1e/0x30 [ 26.262165][ T384] _copy_from_user+0x20/0xa0 [ 26.262186][ T384] msr_io+0xa1/0x2b0 [ 26.262203][ T384] ? __cfi_kvm_arch_vcpu_load+0x10/0x10 [ 26.262220][ T384] ? __cfi_do_get_msr+0x10/0x10 [ 26.262238][ T384] ? kvm_arch_dev_ioctl+0x990/0x990 [ 26.262256][ T384] kvm_arch_vcpu_ioctl+0x9ee/0x2d90 [ 26.262275][ T384] ? __cfi_avc_has_perm+0x10/0x10 [ 26.262294][ T384] ? kasan_save_alloc_info+0x40/0x50 [ 26.262317][ T384] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 26.262337][ T384] ? selinux_file_open+0x46c/0x630 [ 26.262355][ T384] ? __cfi_selinux_file_open+0x10/0x10 [ 26.262376][ T384] ? is_bpf_text_address+0x17b/0x1a0 [ 26.262400][ T384] ? kernel_text_address+0xa9/0xe0 [ 26.262424][ T384] ? __kernel_text_address+0x11/0x40 [ 26.262446][ T384] ? __asan_set_shadow_00+0x12/0x20 [ 26.262469][ T384] ? do_vfs_ioctl+0x182d/0x2010 [ 26.262489][ T384] ? arch_stack_walk+0x10a/0x170 [ 26.262508][ T384] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 26.262529][ T384] ? _parse_integer_limit+0x195/0x1e0 [ 26.262553][ T384] ? _parse_integer+0x2e/0x40 [ 26.262576][ T384] ? kstrtoull+0x13b/0x1e0 [ 26.262599][ T384] ? kstrtouint+0x78/0xf0 [ 26.262622][ T384] ? ioctl_has_perm+0x1bc/0x500 [ 26.262639][ T384] ? __asan_memcpy+0x5a/0x80 [ 26.262663][ T384] ? ioctl_has_perm+0x408/0x500 [ 26.262679][ T384] ? has_cap_mac_admin+0xd0/0xd0 [ 26.262696][ T384] ? __kasan_check_write+0x18/0x20 [ 26.262713][ T384] ? mutex_lock_killable+0x97/0x1d0 [ 26.262736][ T384] ? __cfi_mutex_lock_killable+0x10/0x10 [ 26.262758][ T384] ? proc_fail_nth_write+0x184/0x220 [ 26.262781][ T384] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 26.262805][ T384] kvm_vcpu_ioctl+0x7da/0x1000 [ 26.262824][ T384] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 26.262842][ T384] ? __cfi_vfs_write+0x10/0x10 [ 26.262860][ T384] ? __kasan_check_write+0x18/0x20 [ 26.262877][ T384] ? mutex_unlock+0x90/0x240 [ 26.262898][ T384] ? __cfi_mutex_unlock+0x10/0x10 [ 26.262918][ T384] ? __fget_files+0x2c5/0x340 [ 26.262939][ T384] ? __fget_files+0x2c5/0x340 [ 26.262959][ T384] ? bpf_lsm_file_ioctl+0xd/0x20 [ 26.262981][ T384] ? security_file_ioctl+0x3e/0x110 [ 26.263006][ T384] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 26.263023][ T384] __se_sys_ioctl+0x132/0x1b0 [ 26.263043][ T384] __x64_sys_ioctl+0x7f/0xa0 [ 26.263063][ T384] x64_sys_call+0x1878/0x2ee0 [ 26.263081][ T384] do_syscall_64+0x57/0xf0 [ 26.263098][ T384] ? clear_bhb_loop+0x50/0xa0 [ 26.263119][ T384] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.263140][ T384] RIP: 0033:0x7ff73fb9ce59 [ 26.263156][ T384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.263170][ T384] RSP: 002b:00007ff740987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.263190][ T384] RAX: ffffffffffffffda RBX: 00007ff73fe15fa0 RCX: 00007ff73fb9ce59 [ 26.263204][ T384] RDX: 0000200000000140 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 26.263217][ T384] RBP: 00007ff740987090 R08: 0000000000000000 R09: 0000000000000000 [ 26.263229][ T384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.263240][ T384] R13: 00007ff73fe16038 R14: 00007ff73fe15fa0 R15: 00007ffcbaa73fd8 [ 26.263256][ T384] [ 26.652895][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 26.652910][ T36] audit: type=1400 audit(1780065825.799:138): avc: denied { create } for pid=385 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.678299][ T36] audit: type=1400 audit(1780065826.169:139): avc: denied { setopt } for pid=385 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.729478][ T36] audit: type=1400 audit(1780065826.249:140): avc: denied { read write } for pid=387 comm="syz.1.27" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 26.740386][ T388] netlink: 'syz.1.27': attribute type 26 has an invalid length. [ 26.752548][ T36] audit: type=1400 audit(1780065826.259:141): avc: denied { open } for pid=387 comm="syz.1.27" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 26.760350][ T388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 26.783164][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.799311][ T36] audit: type=1400 audit(1780065826.259:142): avc: denied { create } for pid=387 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.819733][ T36] audit: type=1400 audit(1780065826.259:143): avc: denied { write } for pid=387 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.909803][ T36] audit: type=1400 audit(1780065826.429:144): avc: denied { setopt } for pid=396 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.930522][ T36] audit: type=1400 audit(1780065826.449:145): avc: denied { bind } for pid=396 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.930727][ T397] netlink: 68 bytes leftover after parsing attributes in process `syz.3.30'. [ 26.959495][ T397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 26.968284][ T397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 26.980776][ T397] netlink: 68 bytes leftover after parsing attributes in process `syz.3.30'. [ 26.989751][ T397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 26.998534][ T397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 27.007409][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 27.012704][ T36] audit: type=1400 audit(1780065826.529:146): avc: denied { name_bind } for pid=396 comm="syz.3.30" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.037086][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 27.045531][ T9] usb 3-1: config 0 has no interface number 0 [ 27.046330][ T399] kvm: kvm [398]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xb [ 27.051712][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 27.070753][ T9] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.080727][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.090737][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 27.098977][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 27.108101][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.117343][ T9] usb 3-1: Product: syz [ 27.121641][ T9] usb 3-1: Manufacturer: syz [ 27.126298][ T9] usb 3-1: SerialNumber: syz [ 27.135917][ T9] usb 3-1: config 0 descriptor?? [ 27.141629][ T374] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 27.197275][ T405] kvm: kvm [404]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 27.226472][ T315] usb-storage 1-1:9.129: USB Mass Storage device detected [ 27.236732][ T315] usb-storage 1-1:9.129: Quirks match for vid 154b pid f00b: 2000000 [ 27.299598][ T315] usb 1-1: USB disconnect, device number 2 [ 27.350818][ T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 27.358526][ T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 27.368839][ T9] usb 3-1: USB disconnect, device number 3 [ 27.389175][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.443017][ T419] FAULT_INJECTION: forcing a failure. [ 27.443017][ T419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 27.456394][ T419] CPU: 0 UID: 0 PID: 419 Comm: syz.0.39 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 27.456414][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 27.456427][ T419] Call Trace: [ 27.456430][ T419] [ 27.456434][ T419] __dump_stack+0x21/0x30 [ 27.456453][ T419] dump_stack_lvl+0x140/0x1c0 [ 27.456466][ T419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.456480][ T419] ? __kasan_check_write+0x18/0x20 [ 27.456491][ T419] ? kvm_arch_vcpu_load+0x683/0x8f0 [ 27.456502][ T419] dump_stack+0x19/0x20 [ 27.456514][ T419] should_fail_ex+0x3d7/0x530 [ 27.456524][ T419] should_fail+0xf/0x20 [ 27.456532][ T419] should_fail_usercopy+0x1e/0x30 [ 27.456542][ T419] _copy_from_user+0x20/0xa0 [ 27.456554][ T419] kvm_arch_vcpu_ioctl+0x441/0x2d90 [ 27.456564][ T419] ? avc_has_perm+0x155/0x240 [ 27.456575][ T419] ? __cfi_avc_has_perm+0x10/0x10 [ 27.456585][ T419] ? kasan_save_alloc_info+0x40/0x50 [ 27.456600][ T419] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 27.456610][ T419] ? selinux_file_open+0x46c/0x630 [ 27.456620][ T419] ? __cfi_selinux_file_open+0x10/0x10 [ 27.456631][ T419] ? is_bpf_text_address+0x17b/0x1a0 [ 27.456646][ T419] ? kernel_text_address+0xa9/0xe0 [ 27.456659][ T419] ? __kernel_text_address+0x11/0x40 [ 27.456672][ T419] ? __asan_set_shadow_00+0x12/0x20 [ 27.456685][ T419] ? do_vfs_ioctl+0x182d/0x2010 [ 27.456697][ T419] ? arch_stack_walk+0x10a/0x170 [ 27.456707][ T419] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 27.456719][ T419] ? _parse_integer_limit+0x195/0x1e0 [ 27.456733][ T419] ? _parse_integer+0x2e/0x40 [ 27.456746][ T419] ? kstrtoull+0x13b/0x1e0 [ 27.456759][ T419] ? kstrtouint+0x78/0xf0 [ 27.456772][ T419] ? ioctl_has_perm+0x1bc/0x500 [ 27.456782][ T419] ? __asan_memcpy+0x5a/0x80 [ 27.456791][ T419] ? ioctl_has_perm+0x408/0x500 [ 27.456800][ T419] ? has_cap_mac_admin+0xd0/0xd0 [ 27.456808][ T419] ? __kasan_check_write+0x18/0x20 [ 27.456818][ T419] ? mutex_lock_killable+0x97/0x1d0 [ 27.456831][ T419] ? __cfi_mutex_lock_killable+0x10/0x10 [ 27.456843][ T419] ? proc_fail_nth_write+0x184/0x220 [ 27.456857][ T419] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 27.456870][ T419] kvm_vcpu_ioctl+0x7da/0x1000 [ 27.456881][ T419] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 27.456890][ T419] ? __cfi_vfs_write+0x10/0x10 [ 27.456900][ T419] ? __kasan_check_write+0x18/0x20 [ 27.456909][ T419] ? mutex_unlock+0x90/0x240 [ 27.456921][ T419] ? __cfi_mutex_unlock+0x10/0x10 [ 27.456932][ T419] ? __fget_files+0x2c5/0x340 [ 27.456945][ T419] ? __fget_files+0x2c5/0x340 [ 27.456955][ T419] ? bpf_lsm_file_ioctl+0xd/0x20 [ 27.456968][ T419] ? security_file_ioctl+0x3e/0x110 [ 27.456982][ T419] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 27.456991][ T419] __se_sys_ioctl+0x132/0x1b0 [ 27.457002][ T419] __x64_sys_ioctl+0x7f/0xa0 [ 27.457013][ T419] x64_sys_call+0x1878/0x2ee0 [ 27.457023][ T419] do_syscall_64+0x57/0xf0 [ 27.457032][ T419] ? clear_bhb_loop+0x50/0xa0 [ 27.457044][ T419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.457056][ T419] RIP: 0033:0x7fa49999ce59 [ 27.457065][ T419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.457073][ T419] RSP: 002b:00007fa49a77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.457085][ T419] RAX: ffffffffffffffda RBX: 00007fa499c15fa0 RCX: 00007fa49999ce59 [ 27.457092][ T419] RDX: 0000200000000200 RSI: 000000004008ae89 RDI: 0000000000000005 [ 27.457099][ T419] RBP: 00007fa49a77f090 R08: 0000000000000000 R09: 0000000000000000 [ 27.457105][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.457111][ T419] R13: 00007fa499c16038 R14: 00007fa499c15fa0 R15: 00007ffe24049678 [ 27.457119][ T419] [ 27.830229][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.859332][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 27.865664][ T45] usb 2-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 27.875969][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 27.884995][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 27.894080][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.908919][ T45] usb 2-1: config 0 descriptor?? [ 27.989156][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 27.995345][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.008188][ T65] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 28.017300][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.026097][ T65] usb 4-1: config 0 descriptor?? [ 28.045440][ T36] audit: type=1400 audit(1780065827.559:147): avc: denied { read } for pid=426 comm="syz.0.42" path="socket:[6365]" dev="sockfs" ino=6365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.435565][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x3 [ 28.442461][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 28.449319][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 28.456099][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 28.462946][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 28.472482][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 28.479632][ T65] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 28.487348][ T65] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 28.522214][ T459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 28.531273][ T459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=459 comm=syz.2.54 [ 28.629183][ T315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.638662][ T65] kone 0003:1E7D:2CED.0001: couldn't init struct kone_device [ 28.648062][ T65] kone 0003:1E7D:2CED.0001: couldn't install mouse [ 28.656233][ T65] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -5 [ 28.666587][ T65] usb 4-1: USB disconnect, device number 2 [ 28.780228][ T315] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 28.791240][ T315] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 28.801860][ T315] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 28.810903][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.822347][ T315] usb 1-1: invalid MIDI out EP 0 [ 28.830223][ T315] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 28.842743][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.022533][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.031050][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.079766][ T65] usb 1-1: USB disconnect, device number 3 [ 29.389175][ T315] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.540654][ T315] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.548817][ T315] usb 4-1: not running at top speed; connect to a high speed hub [ 29.557565][ T315] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 29.566043][ T315] usb 4-1: config 0 has no interface number 0 [ 29.572343][ T315] usb 4-1: config 0 interface 175 has no altsetting 0 [ 29.580798][ T315] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.f4 [ 29.590125][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.598177][ T315] usb 4-1: Product: syz [ 29.602597][ T315] usb 4-1: Manufacturer: syz [ 29.607258][ T315] usb 4-1: SerialNumber: syz [ 29.614315][ T315] usb 4-1: config 0 descriptor?? [ 29.821889][ T315] usb-storage 4-1:0.175: USB Mass Storage device detected [ 29.863649][ T315] usb 4-1: USB disconnect, device number 3 [ 30.204442][ T315] usb 2-1: USB disconnect, device number 2 [ 30.335095][ T493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=493 comm=syz.2.64 [ 30.368535][ T493] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 30.579772][ T508] 9pnet_fd: Insufficient options for proto=fd [ 30.633781][ T514] kvm: kvm [513]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 30.659178][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.776364][ T529] kvm: kvm [528]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x9 [ 30.809168][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 30.815318][ T9] usb 2-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 30.826690][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 30.835661][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.849929][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 30.859155][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.867149][ T9] usb 2-1: Product: syz [ 30.881111][ T9] usb 2-1: Manufacturer: syz [ 30.889192][ T9] usb 2-1: SerialNumber: syz [ 31.099891][ T9] usb 2-1: 0:2 : does not exist [ 31.111306][ T9] usb 2-1: USB disconnect, device number 3 [ 31.122506][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.140049][ T379] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.199857][ T556] syz_tun: entered allmulticast mode [ 31.300193][ T379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.310431][ T379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.320949][ T379] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 31.330009][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.338020][ T379] usb 3-1: Product: syz [ 31.342206][ T379] usb 3-1: Manufacturer: syz [ 31.346793][ T379] usb 3-1: SerialNumber: syz [ 31.374278][ T564] loop7: detected capacity change from 0 to 7 [ 31.380689][ T564] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.388564][ T564] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.396772][ T564] loop7: unable to read partition table [ 31.403277][ T314] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.411257][ T314] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.419152][ T564] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 31.429247][ T314] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.440625][ T314] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.448777][ T314] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.651254][ T581] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.100' resets device [ 31.760349][ T379] usb 3-1: 0:1 : does not exist [ 31.773351][ T379] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 31.783193][ T379] usb 3-1: unit 0 not found! [ 31.790774][ T379] usb 3-1: USB disconnect, device number 4 [ 31.802906][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.863615][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 31.863630][ T36] audit: type=1400 audit(1780065831.379:177): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.895819][ T36] audit: type=1400 audit(1780065831.389:178): avc: denied { create } for pid=599 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.915534][ T36] audit: type=1400 audit(1780065831.389:179): avc: denied { write } for pid=599 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.921840][ T605] syzkaller1: entered promiscuous mode [ 31.940104][ T605] syzkaller1: entered allmulticast mode [ 31.969393][ T65] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.977016][ T36] audit: type=1400 audit(1780065831.489:180): avc: denied { create } for pid=608 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.997048][ T36] audit: type=1400 audit(1780065831.489:181): avc: denied { bind } for pid=608 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 32.018060][ T36] audit: type=1400 audit(1780065831.489:182): avc: denied { name_bind } for pid=608 comm="syz.3.110" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 32.038871][ T36] audit: type=1400 audit(1780065831.489:183): avc: denied { node_bind } for pid=608 comm="syz.3.110" saddr=::ffff:172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 32.061827][ T36] audit: type=1400 audit(1780065831.489:184): avc: denied { shutdown } for pid=608 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.159184][ T65] usb 2-1: device descriptor read/64, error -71 [ 32.179896][ T623] netlink: 300 bytes leftover after parsing attributes in process `syz.3.116'. [ 32.359191][ T315] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.399209][ T65] usb 2-1: device descriptor read/64, error -71 [ 32.415301][ T632] usb usb9: usbfs: process 632 (syz.3.119) did not claim interface 0 before use [ 32.432804][ T36] audit: type=1400 audit(1780065831.949:185): avc: denied { create } for pid=633 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 32.520203][ T315] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 32.531848][ T315] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64 [ 32.544211][ T315] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 32.553345][ T315] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 32.561630][ T315] usb 1-1: Manufacturer: syz [ 32.562765][ T36] audit: type=1400 audit(1780065832.079:186): avc: denied { map } for pid=633 comm="syz.3.120" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 32.566213][ T315] usb 1-1: SerialNumber: syz [ 32.593626][ T620] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.669160][ T65] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 32.724253][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.802118][ T620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.810547][ T65] usb 2-1: device descriptor read/64, error -71 [ 32.816960][ T620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.831074][ T315] usb 1-1: USB disconnect, device number 4 [ 32.879159][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 32.885960][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.894330][ T31] usb 3-1: config 1 has an invalid interface number: 64 but max is 2 [ 32.902438][ T31] usb 3-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 32.912754][ T31] usb 3-1: config 1 has no interface number 0 [ 32.920386][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 32.929501][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.937470][ T31] usb 3-1: Product: syz [ 32.941657][ T31] usb 3-1: Manufacturer: syz [ 32.946242][ T31] usb 3-1: SerialNumber: syz [ 33.049176][ T65] usb 2-1: device descriptor read/64, error -71 [ 33.159241][ T65] usb usb2-port1: attempt power cycle [ 33.166752][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.175282][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.189655][ T31] usb 3-1: unknown sample rate [ 33.195177][ T31] usb 3-1: unknown sample rate [ 33.200736][ T31] usb 3-1: unknown sample rate [ 33.207544][ T31] usb 3-1: USB disconnect, device number 5 [ 33.216044][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.499164][ T65] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 33.530174][ T65] usb 2-1: device descriptor read/8, error -71 [ 33.660246][ T65] usb 2-1: device descriptor read/8, error -71 [ 33.899171][ T65] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 33.944979][ T65] usb 2-1: device descriptor read/8, error -71 [ 34.090206][ T65] usb 2-1: device descriptor read/8, error -71 [ 34.199292][ T65] usb usb2-port1: unable to enumerate USB device [ 34.269212][ T315] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 34.420467][ T315] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 34.428948][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 34.440225][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 34.451834][ T315] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 34.461180][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.477074][ T315] usb 3-1: Product: syz [ 34.487844][ T315] usb 3-1: Manufacturer: syz [ 34.492712][ T315] usb 3-1: SerialNumber: syz [ 34.498393][ T315] usb 3-1: config 0 descriptor?? [ 34.629187][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.706591][ T379] usb 3-1: USB disconnect, device number 6 [ 34.789212][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 34.795454][ T65] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.807248][ T65] usb 4-1: config 0 has no interface number 0 [ 34.821459][ T65] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.832580][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.832594][ T697] FAULT_INJECTION: forcing a failure. [ 34.832594][ T697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.840703][ T65] usb 4-1: Product: syz [ 34.858129][ T65] usb 4-1: Manufacturer: syz [ 34.858165][ T697] CPU: 1 UID: 0 PID: 697 Comm: syz.0.139 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 34.858188][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 34.858199][ T697] Call Trace: [ 34.858205][ T697] [ 34.858212][ T697] __dump_stack+0x21/0x30 [ 34.858240][ T697] dump_stack_lvl+0x140/0x1c0 [ 34.858262][ T697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.858283][ T697] ? check_stack_object+0x81/0x150 [ 34.858299][ T697] ? __virt_addr_valid+0x2a6/0x380 [ 34.858319][ T697] dump_stack+0x19/0x20 [ 34.858340][ T697] should_fail_ex+0x3d7/0x530 [ 34.858357][ T697] should_fail+0xf/0x20 [ 34.858371][ T697] should_fail_usercopy+0x1e/0x30 [ 34.858388][ T697] _copy_from_user+0x20/0xa0 [ 34.858407][ T697] memdup_user+0x81/0x170 [ 34.858422][ T697] ? kvm_arch_vcpu_ioctl+0x1367/0x2d90 [ 34.858440][ T697] kvm_arch_vcpu_ioctl+0x19a2/0x2d90 [ 34.858457][ T697] ? avc_has_perm+0x155/0x240 [ 34.858475][ T697] ? __cfi_avc_has_perm+0x10/0x10 [ 34.858491][ T697] ? kasan_save_alloc_info+0x40/0x50 [ 34.858514][ T697] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 34.858532][ T697] ? selinux_file_open+0x46c/0x630 [ 34.858549][ T697] ? __cfi_selinux_file_open+0x10/0x10 [ 34.858568][ T697] ? is_bpf_text_address+0x17b/0x1a0 [ 34.858591][ T697] ? kernel_text_address+0xa9/0xe0 [ 34.858613][ T697] ? __kernel_text_address+0x11/0x40 [ 34.858634][ T697] ? __asan_set_shadow_00+0x12/0x20 [ 34.858655][ T697] ? do_vfs_ioctl+0x182d/0x2010 [ 34.858674][ T697] ? arch_stack_walk+0x10a/0x170 [ 34.858691][ T697] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 34.858710][ T697] ? _parse_integer_limit+0x195/0x1e0 [ 34.858733][ T697] ? _parse_integer+0x2e/0x40 [ 34.858762][ T697] ? kstrtoull+0x13b/0x1e0 [ 34.858782][ T697] ? kstrtouint+0x78/0xf0 [ 34.858804][ T697] ? ioctl_has_perm+0x1bc/0x500 [ 34.858819][ T697] ? __asan_memcpy+0x5a/0x80 [ 34.858835][ T697] ? ioctl_has_perm+0x408/0x500 [ 34.858850][ T697] ? has_cap_mac_admin+0xd0/0xd0 [ 34.858866][ T697] ? __kasan_check_write+0x18/0x20 [ 34.858881][ T697] ? mutex_lock_killable+0x97/0x1d0 [ 34.858902][ T697] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.858922][ T697] ? proc_fail_nth_write+0x184/0x220 [ 34.858945][ T697] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 34.858968][ T697] kvm_vcpu_ioctl+0x7da/0x1000 [ 34.858985][ T697] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.859002][ T697] ? __cfi_vfs_write+0x10/0x10 [ 34.859019][ T697] ? __kasan_check_write+0x18/0x20 [ 34.859035][ T697] ? mutex_unlock+0x90/0x240 [ 34.859054][ T697] ? __cfi_mutex_unlock+0x10/0x10 [ 34.859073][ T697] ? __fget_files+0x2c5/0x340 [ 34.859092][ T697] ? __fget_files+0x2c5/0x340 [ 34.859114][ T697] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.859134][ T697] ? security_file_ioctl+0x3e/0x110 [ 34.859157][ T697] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.859172][ T697] __se_sys_ioctl+0x132/0x1b0 [ 34.859191][ T697] __x64_sys_ioctl+0x7f/0xa0 [ 34.859210][ T697] x64_sys_call+0x1878/0x2ee0 [ 34.859226][ T697] do_syscall_64+0x57/0xf0 [ 34.859242][ T697] ? clear_bhb_loop+0x50/0xa0 [ 34.859262][ T697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.859280][ T697] RIP: 0033:0x7fa49999ce59 [ 34.859295][ T697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.859308][ T697] RSP: 002b:00007fa49a77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.859326][ T697] RAX: ffffffffffffffda RBX: 00007fa499c15fa0 RCX: 00007fa49999ce59 [ 34.859339][ T697] RDX: 0000200000000200 RSI: 000000004008ae89 RDI: 0000000000000005 [ 34.859351][ T697] RBP: 00007fa49a77f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.859362][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.859372][ T697] R13: 00007fa499c16038 R14: 00007fa499c15fa0 R15: 00007ffe24049678 [ 34.859387][ T697] [ 35.245434][ T65] usb 4-1: SerialNumber: syz [ 35.254043][ T65] usb 4-1: config 0 descriptor?? [ 35.266264][ T65] smsc95xx v2.0.0 [ 35.410163][ T713] syzkaller1: entered promiscuous mode [ 35.415719][ T713] syzkaller1: entered allmulticast mode [ 35.625014][ T724] usb usb9: usbfs: process 724 (syz.0.149) did not claim interface 0 before use [ 35.663350][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 35.689140][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 36.300932][ T65] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 36.321435][ T65] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 36.345932][ T65] usb 4-1: USB disconnect, device number 4 [ 36.671001][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 36.682259][ T759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=759 comm=syz.2.160 [ 36.895654][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 36.895670][ T36] audit: type=1400 audit(1780065836.409:196): avc: denied { map } for pid=764 comm="syz.3.162" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.008129][ T36] audit: type=1400 audit(1780065836.519:197): avc: denied { read } for pid=766 comm="syz.3.163" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.037057][ T36] audit: type=1400 audit(1780065836.519:198): avc: denied { ioctl } for pid=766 comm="syz.3.163" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.062046][ T36] audit: type=1400 audit(1780065836.549:199): avc: denied { read } for pid=766 comm="syz.3.163" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.269189][ T379] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.419158][ T379] usb 4-1: Using ep0 maxpacket: 32 [ 37.430509][ T379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.450883][ T379] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 37.460065][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.468058][ T379] usb 4-1: Product: syz [ 37.482397][ T379] usb 4-1: Manufacturer: syz [ 37.487019][ T379] usb 4-1: SerialNumber: syz [ 37.603139][ T779] kvm: kvm [778]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x9 [ 37.706199][ T36] audit: type=1400 audit(1780065837.219:200): avc: denied { ioctl } for pid=766 comm="syz.3.163" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.732086][ T379] usb 4-1: Invalid firmware size=18. [ 37.738341][ T379] usb 4-1: USB disconnect, device number 5 [ 37.802970][ T785] netlink: 'syz.2.170': attribute type 21 has an invalid length. [ 37.827345][ T787] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.171' resets device [ 38.215971][ T793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 38.229520][ T793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=793 comm=syz.1.173 [ 38.839247][ T812] usb usb9: usbfs: process 812 (syz.3.179) did not claim interface 0 before use [ 38.927845][ T829] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.970640][ T36] audit: type=1400 audit(1780065838.479:201): avc: denied { getopt } for pid=828 comm="syz.3.185" laddr=fe80::a8aa:aaff:feaa:aa15 lport=56053 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.019148][ T36] audit: type=1400 audit(1780065838.489:202): avc: denied { append } for pid=828 comm="syz.3.185" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.050178][ T36] audit: type=1400 audit(1780065838.569:203): avc: denied { map } for pid=832 comm="syz.1.187" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.089172][ T36] audit: type=1400 audit(1780065838.569:204): avc: denied { execute } for pid=832 comm="syz.1.187" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.113149][ T835] capability: warning: `syz.1.187' uses deprecated v2 capabilities in a way that may be insecure [ 39.521335][ T36] audit: type=1400 audit(1780065839.039:205): avc: denied { mount } for pid=849 comm="syz.0.194" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.549173][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 39.710443][ T9] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 39.719606][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.727585][ T9] usb 2-1: Product: syz [ 39.731802][ T9] usb 2-1: Manufacturer: syz [ 39.736383][ T9] usb 2-1: SerialNumber: syz [ 39.741937][ T9] usb 2-1: config 0 descriptor?? [ 39.747533][ T9] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 39.950079][ T65] usb 2-1: USB disconnect, device number 8 [ 40.640437][ T883] syz_tun: entered allmulticast mode [ 40.854838][ T917] kvm: kvm [915]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x9 [ 41.744348][ T947] netlink: 'syz.0.235': attribute type 25 has an invalid length. [ 41.752777][ T947] sock: sock_timestamping_bind_phc: sock not bind to device [ 41.963929][ T970] syz_tun (unregistering): left allmulticast mode [ 42.081661][ T983] usb usb9: usbfs: process 983 (syz.3.251) did not claim interface 0 before use [ 42.113193][ T987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 42.122729][ T987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=987 comm=syz.0.254 [ 42.325578][ T992] netlink: 'syz.1.256': attribute type 4 has an invalid length. [ 42.333290][ T992] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.256'. [ 42.354111][ T999] netlink: 300 bytes leftover after parsing attributes in process `syz.1.258'. [ 42.402764][ T1004] kvm: emulating exchange as write [ 42.413612][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 42.413626][ T36] audit: type=1400 audit(1780065841.929:217): avc: denied { bind } for pid=1003 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.449195][ T36] audit: type=1400 audit(1780065841.959:218): avc: denied { write } for pid=1003 comm="syz.2.261" path="socket:[15050]" dev="sockfs" ino=15050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.581447][ T36] audit: type=1400 audit(1780065842.099:219): avc: denied { create } for pid=1012 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.601748][ T36] audit: type=1400 audit(1780065842.119:220): avc: denied { setopt } for pid=1012 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.709083][ T1019] usb usb8: check_ctrlrecip: process 1019 (syz.1.265) requesting ep 01 but needs 81 [ 42.718725][ T1019] usb usb8: usbfs: process 1019 (syz.1.265) did not claim interface 0 before use [ 42.867844][ T36] audit: type=1400 audit(1780065842.379:221): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 42.905925][ T36] audit: type=1400 audit(1780065842.409:222): avc: denied { map } for pid=1037 comm="syz.3.274" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 42.949496][ T1042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 42.958645][ T1042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1042 comm=syz.3.275 [ 43.007910][ T36] audit: type=1400 audit(1780065842.519:223): avc: denied { write } for pid=1044 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.124361][ T36] audit: type=1400 audit(1780065842.639:224): avc: denied { cmd } for pid=1053 comm="syz.1.280" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 43.409166][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 43.567103][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.569566][ T1061] syz_tun: entered allmulticast mode [ 43.579043][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 43.589218][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.597257][ T45] usb 2-1: Product: syz [ 43.597504][ T1061] syz_tun (unregistering): left allmulticast mode [ 43.601471][ T45] usb 2-1: Manufacturer: syz [ 43.612646][ T45] usb 2-1: SerialNumber: syz [ 43.630019][ T1065] netlink: 'syz.0.285': attribute type 26 has an invalid length. [ 43.694651][ T36] audit: type=1400 audit(1780065843.209:225): avc: denied { listen } for pid=1074 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.731635][ T36] audit: type=1400 audit(1780065843.229:226): avc: denied { accept } for pid=1074 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.794098][ T1087] overlayfs: failed to clone upperpath [ 43.821560][ T1057] netlink: 'syz.1.281': attribute type 16 has an invalid length. [ 43.829741][ T1057] netlink: 'syz.1.281': attribute type 3 has an invalid length. [ 43.838814][ T1057] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 43.850926][ T1057] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 43.864565][ T1057] netlink: 64022 bytes leftover after parsing attributes in process `syz.1.281'. [ 43.879483][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 43.895664][ T45] usb 2-1: USB disconnect, device number 9 [ 43.920980][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.613050][ T1125] veth1_to_bond: entered allmulticast mode [ 44.619458][ T1125] veth1_to_bond: entered promiscuous mode [ 44.626135][ T1125] veth1_to_bond: left promiscuous mode [ 44.638776][ T1125] veth1_to_bond: left allmulticast mode [ 44.726506][ T1133] kvm: kvm [1132]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x9 [ 44.944776][ T1141] netlink: 300 bytes leftover after parsing attributes in process `syz.1.315'. [ 45.189156][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.315821][ T45] hid (null): unknown global tag 0xe9 [ 45.326019][ T45] hid-generic 7FFF:0004:0002.0002: unexpected long global item [ 45.335380][ T45] hid-generic 7FFF:0004:0002.0002: probe with driver hid-generic failed with error -22 [ 45.359154][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 45.370172][ T65] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.389170][ T65] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 45.409156][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 45.415841][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 45.425062][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.436514][ T65] usb 3-1: config 0 descriptor?? [ 45.715900][ T1173] netlink: 148 bytes leftover after parsing attributes in process `syz.0.326'. [ 45.753601][ T1177] /dev/sg0: Can't lookup blockdev [ 45.848296][ T65] logitech 0003:046D:C101.0003: unknown main item tag 0x0 [ 45.863687][ T65] logitech 0003:046D:C101.0003: unknown main item tag 0x0 [ 45.879177][ T65] logitech 0003:046D:C101.0003: unknown main item tag 0x0 [ 45.890261][ T65] logitech 0003:046D:C101.0003: unknown main item tag 0x0 [ 45.903761][ T65] logitech 0003:046D:C101.0003: unknown main item tag 0x0 [ 45.910982][ T65] logitech 0003:046D:C101.0003: unknown main item tag 0x0 [ 45.919242][ T65] logitech 0003:046D:C101.0003: unbalanced collection at end of report description [ 45.928731][ T65] logitech 0003:046D:C101.0003: parse failed [ 45.937959][ T65] logitech 0003:046D:C101.0003: probe with driver logitech failed with error -22 [ 46.004454][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 46.013713][ T1193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1193 comm=syz.0.333 [ 46.049916][ T31] usb 3-1: USB disconnect, device number 7 [ 46.229215][ T45] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 46.301458][ T1200] kvm: kvm [1199]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 46.365810][ T1202] kvm: kvm [1201]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 46.379186][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 46.519192][ T45] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 46.599584][ T1223] netlink: 1355 bytes leftover after parsing attributes in process `syz.3.343'. [ 46.669154][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 46.674646][ T45] usb usb2-port1: attempt power cycle [ 46.714895][ T1223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1223 comm=syz.3.343 [ 46.939181][ T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.019160][ T45] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 47.039489][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 47.089160][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 47.095314][ T65] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 47.106468][ T65] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.119262][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.125854][ T65] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 47.134905][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.143596][ T65] usb 3-1: config 0 descriptor?? [ 47.179175][ T45] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 47.199483][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 47.204868][ T45] usb usb2-port1: unable to enumerate USB device [ 47.221577][ T1246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 47.230655][ T1246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1246 comm=syz.0.353 [ 47.877487][ T1249] capability: warning: `syz.0.354' uses 32-bit capabilities (legacy support in use) [ 48.092575][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 48.098537][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 48.112369][ T65] usb 3-1: USB disconnect, device number 8 [ 48.440280][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 48.440297][ T36] audit: type=1400 audit(1780065847.959:243): avc: denied { lock } for pid=1255 comm="syz.0.357" path="socket:[17579]" dev="sockfs" ino=17579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 48.738887][ T1262] netlink: 300 bytes leftover after parsing attributes in process `syz.2.359'. [ 48.760341][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.956769][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 48.965894][ T1270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1270 comm=syz.0.362 [ 49.008886][ T65] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 49.094654][ T36] audit: type=1400 audit(1780065848.609:244): avc: denied { ioctl } for pid=1276 comm="syz.1.365" path="socket:[18475]" dev="sockfs" ino=18475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.100924][ T1277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.119349][ T36] audit: type=1400 audit(1780065848.609:245): avc: denied { write } for pid=1276 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.132127][ T1277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.148268][ T36] audit: type=1400 audit(1780065848.609:246): avc: denied { connect } for pid=1276 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.161983][ T1277] Zero length message leads to an empty skb [ 49.173060][ T36] audit: type=1400 audit(1780065848.609:247): avc: denied { mount } for pid=1276 comm="syz.1.365" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.200408][ T36] audit: type=1400 audit(1780065848.609:248): avc: denied { mounton } for pid=1276 comm="syz.1.365" path="/54/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 49.222981][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.238445][ T65] usb 3-1: config 0 has no interfaces? [ 49.244002][ T36] audit: type=1400 audit(1780065848.749:249): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.270839][ T65] usb 3-1: string descriptor 0 read error: -71 [ 49.277381][ T65] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 49.286512][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.304224][ T65] usb 3-1: config 0 descriptor?? [ 49.309673][ T65] usb 3-1: can't set config #0, error -71 [ 49.316012][ T65] usb 3-1: USB disconnect, device number 9 [ 49.601454][ T36] audit: type=1400 audit(1780065849.119:250): avc: denied { map } for pid=1296 comm="syz.0.372" path="socket:[18491]" dev="sockfs" ino=18491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 49.635312][ T36] audit: type=1400 audit(1780065849.119:251): avc: denied { accept } for pid=1296 comm="syz.0.372" path="socket:[18491]" dev="sockfs" ino=18491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 49.661054][ T1299] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 49.887483][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 49.909501][ T1312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1312 comm=syz.3.378 [ 50.122395][ T1320] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.380' resets device [ 50.310439][ T36] audit: type=1400 audit(1780065849.829:252): avc: denied { create } for pid=1335 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 50.311868][ T1336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.387'. [ 50.340275][ T1336] tipc: Invalid UDP bearer configuration [ 50.340297][ T1336] tipc: Enabling of bearer rejected, failed to enable media [ 50.819161][ T1265] Bluetooth: hci0: command 0x1003 tx timeout [ 50.825204][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.967537][ T1363] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 51.102700][ T1367] kvm: kvm [1366]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 51.192155][ T1369] syz_tun: entered allmulticast mode [ 51.293524][ T1379] netlink: 300 bytes leftover after parsing attributes in process `syz.3.406'. [ 51.609160][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.649155][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 51.770251][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.799152][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.818905][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.828055][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 51.833235][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 51.842721][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.852162][ T31] usb 3-1: SerialNumber: syz [ 51.857322][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.867990][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65312, setting to 1024 [ 51.882567][ T45] usb 2-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 51.894105][ T45] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 51.903242][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.911290][ T45] usb 2-1: Product: syz [ 51.915684][ T45] usb 2-1: Manufacturer: 荚䠁ꗵ㳤좬ꀚ퇓猂聾㧗れᆢ냚ﯔꖜ돫ಫ䡪튏⿣龈䘈駒贈퇪㶣䘠㶁ᴮ㹒퓢叭ሾ餝࣠鋞产䄕淂䚬缾爩뗔쁶蕺秶긪ﻄ턹 [ 51.934027][ T45] usb 2-1: SerialNumber: syz [ 52.038680][ T1407] fuse: Bad value for 'fd' [ 52.083958][ T31] usb 3-1: 0:2 : does not exist [ 52.088904][ T31] usb 3-1: unit 5: unexpected type 0x09 [ 52.104000][ T31] usb 3-1: USB disconnect, device number 10 [ 52.626561][ T1431] usb usb9: usbfs: process 1431 (syz.2.425) did not claim interface 0 before use [ 52.679169][ T65] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 52.840448][ T65] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 52.856322][ T65] usb 4-1: config 0 has no interface number 0 [ 52.862521][ T65] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 52.874932][ T65] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 52.884017][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.892040][ T65] usb 4-1: Product: syz [ 52.896235][ T65] usb 4-1: Manufacturer: syz [ 52.900848][ T65] usb 4-1: SerialNumber: syz [ 52.906097][ T65] usb 4-1: config 0 descriptor?? [ 52.912250][ T1425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.926529][ T65] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, d2:3a:81:69:f5:53 [ 52.979205][ T1465] fuse: Invalid rootmode [ 53.059871][ T1479] syzkaller1: entered promiscuous mode [ 53.065522][ T1479] syzkaller1: entered allmulticast mode [ 53.126580][ T1425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.135315][ T1425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.248005][ T1493] syzkaller1: entered promiscuous mode [ 53.253632][ T1493] syzkaller1: entered allmulticast mode [ 53.784668][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.794900][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.797678][ T1493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.811240][ T1493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.019165][ T65] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.169147][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 54.175449][ T65] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 54.185860][ T65] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 54.196328][ T65] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 54.205483][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.213513][ T65] usb 3-1: Product: syz [ 54.217670][ T65] usb 3-1: Manufacturer: syz [ 54.222269][ T65] usb 3-1: SerialNumber: syz [ 54.374439][ T45] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 54.386319][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.408853][ T45] usb 2-1: USB disconnect, device number 14 [ 54.433915][ T65] usb 3-1: unit 8 not found! [ 54.442522][ T65] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 54.457263][ T65] usb 3-1: USB disconnect, device number 11 [ 54.551710][ T1509] netlink: 'syz.1.449': attribute type 9 has an invalid length. [ 54.559451][ T1509] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 54.567704][ T1509] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 54.891000][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 54.891017][ T36] audit: type=1400 audit(1780065854.409:279): avc: denied { audit_read } for pid=1526 comm="syz.1.455" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.949594][ T36] audit: type=1400 audit(1780065854.469:280): avc: denied { mount } for pid=1528 comm="syz.2.456" name="/" dev="ramfs" ino=19720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.159171][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 55.189146][ T315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 55.309164][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 55.315431][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.323866][ T45] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 55.331117][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 55.339992][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 55.345151][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.358222][ T315] usb 3-1: no configurations [ 55.362850][ T315] usb 3-1: can't read configurations, error -22 [ 55.370211][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.379305][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.387294][ T45] usb 2-1: Product: syz [ 55.391463][ T45] usb 2-1: Manufacturer: syz [ 55.396060][ T45] usb 2-1: SerialNumber: syz [ 55.480106][ T65] usb 4-1: USB disconnect, device number 6 [ 55.486293][ T65] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 55.500837][ T315] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 55.606286][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 55.618826][ T45] cdc_ncm 2-1:1.0: skipping garbage [ 55.624647][ T45] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 55.631608][ T45] cdc_ncm 2-1:1.0: bind() failure [ 55.639339][ T45] usb 2-1: USB disconnect, device number 15 [ 55.659184][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 55.665557][ T315] usb 3-1: no configurations [ 55.670266][ T315] usb 3-1: can't read configurations, error -22 [ 55.676701][ T315] usb usb3-port1: attempt power cycle [ 55.839178][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.989157][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 55.995295][ T65] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 254, using maximum allowed: 30 [ 56.006231][ T65] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 56.019393][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 56.026001][ T65] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 56.029172][ T315] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 56.035258][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.051102][ T65] usb 4-1: config 0 descriptor?? [ 56.059600][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 56.065168][ T315] usb 3-1: no configurations [ 56.069786][ T315] usb 3-1: can't read configurations, error -22 [ 56.199166][ T315] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.219502][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 56.224982][ T315] usb 3-1: no configurations [ 56.229686][ T315] usb 3-1: can't read configurations, error -22 [ 56.236026][ T315] usb usb3-port1: unable to enumerate USB device [ 56.272736][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 56.278713][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 56.295605][ T65] usb 4-1: USB disconnect, device number 7 [ 56.362473][ T1604] syz_tun (unregistering): left allmulticast mode [ 56.499395][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 56.649148][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 56.655296][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.666268][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.676094][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 56.689033][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.695639][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 56.704673][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.713121][ T9] usb 2-1: config 0 descriptor?? [ 56.919781][ T1581] netlink: 104 bytes leftover after parsing attributes in process `syz.1.461'. [ 56.955123][ T1615] syzkaller1: entered promiscuous mode [ 56.960884][ T1615] syzkaller1: entered allmulticast mode [ 57.038383][ T1620] tmpfs: Unknown parameter 'nMnodes' [ 57.044912][ T36] audit: type=1400 audit(1780065856.559:281): avc: denied { read } for pid=1619 comm="syz.3.474" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.084287][ T36] audit: type=1400 audit(1780065856.559:282): avc: denied { open } for pid=1619 comm="syz.3.474" path="/111/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.109158][ T36] audit: type=1400 audit(1780065856.589:283): avc: denied { ioctl } for pid=1619 comm="syz.3.474" path="/111/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.141191][ T9] hid (null): unknown global tag 0xc [ 57.146557][ T9] hid (null): unknown global tag 0xd [ 57.157497][ T9] hid (null): unknown global tag 0xc [ 57.168911][ T9] hid (null): global environment stack overflow [ 57.175207][ T9] hid (null): global environment stack overflow [ 57.267341][ T1628] cgroup: Need name or subsystem set [ 57.347589][ T9] usb 2-1: USB disconnect, device number 16 [ 57.385804][ T36] audit: type=1400 audit(1780065856.899:284): avc: denied { ioctl } for pid=1648 comm="syz.1.485" path="net:[4026532548]" dev="nsfs" ino=4026532548 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.779315][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.909157][ T31] usb 2-1: device descriptor read/64, error -71 [ 58.159148][ T31] usb 2-1: device descriptor read/64, error -71 [ 58.213656][ T13] ------------[ cut here ]------------ [ 58.219221][ T13] WARNING: CPU: 1 PID: 13 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 58.229856][ T13] Modules linked in: [ 58.233994][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 e5a42ceb7f5d5789190789a9dbc4fccea476db91 [ 58.245575][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 58.255664][ T13] Workqueue: iou_exit io_ring_exit_work [ 58.261276][ T13] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 58.267868][ T13] Code: 5d e9 c5 1a 55 02 cc e8 6f 4d 32 fe 0f 0b eb e3 e8 66 4d 32 fe 0f 0b eb da e8 5d 4d 32 fe 0f 0b e9 4d fe ff ff e8 51 4d 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 58.287540][ T13] RSP: 0018:ffffc900000d7990 EFLAGS: 00010293 [ 58.293736][ T13] RAX: ffffffff8355797f RBX: 1ffff11022f69e55 RCX: ffff888103654c00 [ 58.301744][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 58.309829][ T13] RBP: ffffc900000d79e0 R08: 0000000000000003 R09: 0000000000000004 [ 58.317810][ T13] R10: 0000000000000000 R11: ffffffff83556960 R12: ffff88811936df00 [ 58.325812][ T13] R13: ffff888117b4f280 R14: ffff8881042c1600 R15: ffff8881042c1610 [ 58.333806][ T13] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.342799][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.349401][ T13] CR2: 00007f11f164aff8 CR3: 000000010f74c000 CR4: 00000000003526b0 [ 58.357360][ T13] Call Trace: [ 58.360645][ T13] [ 58.363573][ T13] ? _raw_spin_unlock+0x45/0x60 [ 58.368406][ T13] ublk_ch_uring_cmd+0x6f/0xa0 [ 58.373185][ T13] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 58.379198][ T13] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 58.385087][ T13] ? io_uring_cancel_generic+0x6eb/0x6eb [ 58.390732][ T13] ? __cfi___switch_to+0x10/0x10 [ 58.395680][ T13] ? kthread_data+0x54/0xc0 [ 58.400202][ T13] io_ring_exit_work+0x23c/0x83b [ 58.405140][ T13] ? _raw_spin_unlock+0x45/0x60 [ 58.410019][ T13] ? __cfi_io_ring_exit_work+0x10/0x10 [ 58.415478][ T13] process_scheduled_works+0x7d4/0x1020 [ 58.421117][ T13] worker_thread+0xc51/0x1370 [ 58.425799][ T13] ? __kasan_check_read+0x15/0x20 [ 58.430835][ T13] kthread+0x2c9/0x370 [ 58.434906][ T13] ? __cfi_worker_thread+0x10/0x10 [ 58.440031][ T13] ? __cfi_kthread+0x10/0x10 [ 58.444621][ T13] ret_from_fork+0x67/0xa0 [ 58.449016][ T13] ? __cfi_kthread+0x10/0x10 [ 58.453618][ T13] ret_from_fork_asm+0x1a/0x30 [ 58.458376][ T13] [ 58.461401][ T13] ---[ end trace 0000000000000000 ]--- [ 58.589152][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.719150][ T31] usb 2-1: device descriptor read/64, error -71 [ 58.959160][ T31] usb 2-1: device descriptor read/64, error -71 [ 59.069259][ T31] usb usb2-port1: attempt power cycle [ 59.409148][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.430211][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.560500][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.799163][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 59.820178][ T31] usb 2-1: device descriptor read/8, error -71 [ 59.950231][ T31] usb 2-1: device descriptor read/8, error -71 [ 60.059290][ T31] usb usb2-port1: unable to enumerate USB device