last executing test programs: 1m25.191888264s ago: executing program 3 (id=810): sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() 1m25.147135005s ago: executing program 3 (id=812): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000740)="1200000000f0ffa1", 0x8, 0x8141, 0x0, 0xfffffffffffffff6) 1m25.110368047s ago: executing program 3 (id=813): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x9da, 0xff, 0x0, 0x0, 0xfd}, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = socket(0x10, 0x803, 0x0) connect$unix(r8, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1m24.851490846s ago: executing program 3 (id=815): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000003c0)={0x20, 0x14}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x81, 0x1, "b9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x5, 0x3, 0x10, 0x6}, 0x4a, &(0x7f0000000280)={0x5, 0xf, 0x4a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x0, 0x0, 0xfffd}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x2, 0x6, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x9, 0x400}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x40, 0x9f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "ad72238f63063b5d2a8e526965e0bb6f"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x457}}]}) 1m24.007892445s ago: executing program 3 (id=818): r0 = socket(0x10, 0x3, 0x0) r1 = getpgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000002800)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00'], 0x1094}, 0x1, 0x0, 0x0, 0x44010}, 0x10000010) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000300)={0x201, 0x12, 0x2}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f2, 0x300, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x41) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000004c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x1b, 0x0, 0x0) getdents64(r3, &(0x7f0000000240)=""/188, 0xbc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000000c0)={0xf000, 0x114000, 0x1}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x8}) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000040)='s', 0x1, 0x800, 0x0, 0x0) 1m23.991226995s ago: executing program 3 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, r5, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfa, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'team0\x00', {0x8}, 0x5}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x4000) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, r5, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfa, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'team0\x00', {0x8}, 0x5}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqsrc(r6, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) 1m8.924601483s ago: executing program 32 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, r5, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfa, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'team0\x00', {0x8}, 0x5}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x4000) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@empty}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, r5, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfa, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'team0\x00', {0x8}, 0x5}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqsrc(r6, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) 50.399953829s ago: executing program 0 (id=955): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfa, 0x0, 0x5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[{0xc, 0x5, 0xb0, 0x6c}, {0x7f8, 0x6, 0x87, 0x4}]}) close_range(r1, 0xffffffffffffffff, 0x0) 50.334064711s ago: executing program 0 (id=956): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b91b020000b800000000ba000000800f3066baf80cb81c88948aef66bafc0ced0f01cb66b8e6000f00d0670f21632e0f01c266f30f1efac4e11457ee0f08c4c2f3f55deb", 0x44}], 0x1, 0x2f, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$KVM_RUN(r1, 0xae80, 0x0) 50.07125731s ago: executing program 0 (id=957): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) (async) 49.851995568s ago: executing program 0 (id=958): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x8000, 0xffff, 0x7f, 0x800, 0x9a, "785ae57e34e7c4e4"}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) 49.790012799s ago: executing program 0 (id=959): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0xa, 0x0, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000ffffff800000000000000000000000000000000001020000000000000002000100000000000007fffd0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r1, 0x28, 0xa, 0x0, &(0x7f0000000040)) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000ffffff800000000000000000000000000000000001020000000000000002000100000000000007fffd0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) (async) 49.564055107s ago: executing program 0 (id=960): clock_gettime(0xfffffffffffffffb, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 49.434887832s ago: executing program 33 (id=960): clock_gettime(0xfffffffffffffffb, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 3.283669348s ago: executing program 1 (id=1221): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000010c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe4, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x19, 0xe, {0x7, 0x25, 0x1, 0xc, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7f, 0xc1, {0x7, 0x25, 0x1, 0xc, 0x8, 0xe0}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0xd, 0xe6, {0xe6, 0x0, "db8c98d3526a62dea0602f93caf3c45ab3dfdae2b8f59d7f7fd5a0fb1604d776402182d7e713616ebd1f69f16493cca691ce05b4b30dfdce4c087ab71c16048a6dbc826e991b6752a8607be0df5f94be83b5372d02fab5fe3703931666e5e47627a7847e1cb183482e5e081506792af9e5624dedb4ecb4ede45a327d9e64872802d92e204ceddce676c786546a4f60b9e9dd808294ea1512dec0be39683f16805a69f4804629dc4f21a4db5858183840d34ef3e821737f2d76879c7225bd0884d1496004e2d7806f04d727db5e8ec2f55c5a7978ca703ebbf8fdb237942bea5b623d117e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000140)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x3, [@generic={0xbd, 0x10, 0x0, "ba94c5f7cd59c182bb830791578fe43a0fdd40a4cd71d8620ea927b993d41032c1b5106ca8c3a34a095ceedf422c04b33c6933e7081c319fe2681b73ca45580021499864327e68e57e0cfeb92477c6adccf662be03e008396efea186ab89fcca83c692ecfe51dce13e542258e2582863e9088440936968230b1b2026ecb89722c2a999d38995c03051861f26b3adcaea7a073c0255d7fe9f8c135f2331558f2c7f81839908f71ce877cd6d6508eb5ea38b4830aebd22e22ba021"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x9, 0x20, 0x4, 0x5}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0xf3, 0x4, "e9875f0d", "d4d95e22"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x4, 0x3e, 0x30, 0x3, 0x101, 0xda8e}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x14, 0x6f, "39a2bde95f859d0199aa3bd980c9b895484a39330c01e3254692c4fc668578becc73d269d22165f46c5ff7d62a091bc9a6a65637b0537d13445d4f35e6a4324c2de5a6d403aed538bd3ae0588687041633657e27e29161486f907e35231757f2f38725c41d2db1f5b9627ef878d688"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "51e4"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "dfad"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000010c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe4, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x19, 0xe, {0x7, 0x25, 0x1, 0xc, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7f, 0xc1, {0x7, 0x25, 0x1, 0xc, 0x8, 0xe0}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0xd, 0xe6, {0xe6, 0x0, "db8c98d3526a62dea0602f93caf3c45ab3dfdae2b8f59d7f7fd5a0fb1604d776402182d7e713616ebd1f69f16493cca691ce05b4b30dfdce4c087ab71c16048a6dbc826e991b6752a8607be0df5f94be83b5372d02fab5fe3703931666e5e47627a7847e1cb183482e5e081506792af9e5624dedb4ecb4ede45a327d9e64872802d92e204ceddce676c786546a4f60b9e9dd808294ea1512dec0be39683f16805a69f4804629dc4f21a4db5858183840d34ef3e821737f2d76879c7225bd0884d1496004e2d7806f04d727db5e8ec2f55c5a7978ca703ebbf8fdb237942bea5b623d117e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000140)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x3, [@generic={0xbd, 0x10, 0x0, "ba94c5f7cd59c182bb830791578fe43a0fdd40a4cd71d8620ea927b993d41032c1b5106ca8c3a34a095ceedf422c04b33c6933e7081c319fe2681b73ca45580021499864327e68e57e0cfeb92477c6adccf662be03e008396efea186ab89fcca83c692ecfe51dce13e542258e2582863e9088440936968230b1b2026ecb89722c2a999d38995c03051861f26b3adcaea7a073c0255d7fe9f8c135f2331558f2c7f81839908f71ce877cd6d6508eb5ea38b4830aebd22e22ba021"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x9, 0x20, 0x4, 0x5}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0xf3, 0x4, "e9875f0d", "d4d95e22"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x4, 0x3e, 0x30, 0x3, 0x101, 0xda8e}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x14, 0x6f, "39a2bde95f859d0199aa3bd980c9b895484a39330c01e3254692c4fc668578becc73d269d22165f46c5ff7d62a091bc9a6a65637b0537d13445d4f35e6a4324c2de5a6d403aed538bd3ae0588687041633657e27e29161486f907e35231757f2f38725c41d2db1f5b9627ef878d688"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "51e4"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "dfad"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) (async) 3.255641568s ago: executing program 2 (id=1222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) umount2(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0xfffe, 0x5, 0x1}, 0xfee9) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) 3.211897121s ago: executing program 4 (id=1223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r4, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x18, 0x4040095}}], 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r8, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.054123656s ago: executing program 2 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x8002) 3.033269886s ago: executing program 4 (id=1226): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.90380806s ago: executing program 4 (id=1227): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x284b2, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}, {@inode32}]}) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.771898405s ago: executing program 4 (id=1228): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x8929, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 2.733702266s ago: executing program 5 (id=1229): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0}) 2.733003367s ago: executing program 4 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$uac2(0x0, 0x9c, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x180, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x4, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xc, 0x2a, 0x3}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x302, 0xce, 0x1, 0x11, 0x7ff, 0x9}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x4, 0x1, [0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x304, 0x80, 0x4, 0x2, 0x7f, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0xc9, 0x0, {0x8, 0x25, 0x1, 0x3, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xff, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) close(r0) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x6, 0x7, 0x1, 0x701, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x40010) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c855}, 0x8880) (async) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x59d141, 0x0) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x88e7}, @void, @llc={@llc={0x476b586f5eb1b606, 0x1, "af", "8a0d083f9d2b43a6940858c218d09fcfc0e89bc8bbcd5cf133ee1a38496710a53057c501c7d9bdca753873ae085a1815c3ea9063540e7b25681e862401c5"}}}, 0x45) 2.538502453s ago: executing program 2 (id=1231): prctl$PR_CAPBSET_DROP(0x18, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000340)={0x5, 0x1ff, 0x3ff, 0x0, 0x1, 0x40}) capget(&(0x7f0000001580)={0x20071026, r0}, &(0x7f00000015c0)={0x69f1, 0x2f0e5f32, 0x5, 0x7ff, 0x1, 0x2}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020b020302"], 0x10}}, 0x20000800) pipe2$watch_queue(&(0x7f0000000100), 0x80) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000580)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503"], 0x0) ptrace$getregset(0x4204, r3, 0x2, 0xfffffffffffffffd) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001ec0)={0x2, 0x7, 0x9, 0x6, 0x234, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_sec_ctx={0x201, 0x18, 0x88, 0x0, 0x1000, "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"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @multicast1}}, @sadb_lifetime={0x4, 0x4, 0x9, 0x9, 0xfffffffffffffffe, 0x3}, @sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bb8, 0x0, {0x6, 0x6c, 0x80, 0x7, 0x0, 0x2, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101}}, @sadb_x_sec_ctx={0x19, 0x18, 0x8, 0xff, 0xba, "d02223b2734d575b53b1ee1202908bcc830129655d42bd54949ef81a2d1ca14b767064581855ddbd998d168539a4811f271524c6432a42a12c74ccab01b5f84ffd165bae0d432d3f414497ebf613aa7f5808b2403b0ef0bc9f0bf663d85d1873b6fc0a49889652dbb75fcc8f38f6a0be60cb725235d2cd766a893cf231925d3de263765bd4191535f9c29932e14e71aff7ba9493a2e929d576b955f83d4a09cee7c03975cea4043a2e1723471e4d61f4f29cd5ad7d21d7a22ba7"}]}, 0x11a0}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$inet6(r6, 0x0, 0x0, 0x10040, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'bridge_slave_0\x00', @random="010001ff00"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1a0) ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f00000000c0)={0x8, 0x48, [0x9, 0x1, 0x2], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000180)=@other={0xe0, &(0x7f0000000140)=0x1}) 2.423706078s ago: executing program 1 (id=1232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x0, 0x2}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x2, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x3, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x402, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x8000, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x7fffffff, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x815}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020900102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f0100000000000000000009e6ed71c02ca9086e0905820220000000000905030208"], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010102, 0x0, "c0488ce36ccc4fd0a8938fecad37a5e6b7b63cb89192f73a988afab2da1ee796", 0x10001, 0xffff, 0xfffff752, 0x38fa}, 0x3c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x0, 0x2}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x2, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x3, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x402, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x8000, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x7fffffff, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x815}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020900102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f0100000000000000000009e6ed71c02ca9086e0905820220000000000905030208"], 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010102, 0x0, "c0488ce36ccc4fd0a8938fecad37a5e6b7b63cb89192f73a988afab2da1ee796", 0x10001, 0xffff, 0xfffff752, 0x38fa}, 0x3c) (async) 2.292996292s ago: executing program 1 (id=1233): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x7461f000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x2, r2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="8521b278e54dcea8b2713c05706df05c3b14f769916e90fd129306bd5d61b1f55efdc01b8abbae24b34514abfa6c592f47e9f7924c1453c1eea940dddf28ddbbcf52959a1acfa7758b4658f3d4863609ecee8329fb050ebc8b3a00f344e0ace698cd880e97352ae4e42801c78647a99b395965bd8d90076d0527ac0aa60701963603b5c4403a66a2f4b9c31cc57d6785912da3141f30c7e4796c470c3512e1661fa73efa45ea1f086b08a69692e09c00b185f0d2f8bfca32d16e26f6bf53275fdc347e132d615d50dfe1f27b191415e0733e8ac0f034321d3d0b63eb1a89198d10", 0xe1}, {0x0}, {0x0}, {&(0x7f0000000700)}, {&(0x7f0000000800)="ded489904dfd8ef85718f35c57ef65a5098c18ab81a4b751cb0218eae9b9d1af86f3230ac0d873927aaa493da4bd5e976fce2cb806ae906cca69a110f3798ef553cce79d880007a0490da3273fffdb116c33883eed0fd0a39e7dafc6f4538179ad0130969de8828ffb42a7a1200d66b98bbf117568e05578f79cf0e9f1f0", 0x7e}, {0x0}, {&(0x7f0000000a40)="8bf7e84b9438c2b3179e1b9c96833d71907210a1c520922cbddeb8b9c44db56c323586c6b17ff1c87873781c771f8a55b5532998b56350fa725d5ac35bde8767bf6c5ba9a24dd42c7323d69379ce637be2a002de8f82b9b9b228efdd67", 0x5d}, {&(0x7f0000001700)="85643b5430aa018600cdd2dd191fb58e1e2c59208e28b9a6175bb9f1fbf4bb3bccd34b1852014f363f17dab1633dc7e15209ac5f6403cdf1dee8a44f648fa43e6adf8a88fd30f92888edc02635493ccb3d45d2e9b4ad55446fab393475928d9b14d2dcc9e852d6e6850107689d59f205a795d5c10b15696d0d10a4d1459cd563482f33e069bf31af8a22ff688fc66b861da57312cc9dfaf4f104b95002d60e161a16349d2734d6a85ce8d14e339e6b4ea9be2d7e60bb60936833f1b4ab8ebd6c5e42c9cd8619b83489dfbca3e20d6a7325574f4d12233d5042bba4f80cee29baef0fdcc6b47c837c3ab85178497805906ea2af49353d2de7c1e2f3a8b7073aa29be02349e331a9a65e1e7f3c50009677da82f36ceebfc6844fc4f7fab29b994bdf0192eff6ae595db6fc29ab82188b95d5f69cae8a154712e0eee77633c7fef436513e688a1ed4a5dbe914de768c0b7c61148e90d13265c4e27b1e270a15e2760152132230c84a05b52301719118ef92ba741f2f88b1c7831f2672caa189582fca6971d9875caa436e3634339b729a8065923f5409eea9a0c0ea64f523e156af2870bc38e58111628684593f77e55f22e16e96a61d95c23bbfdc933ae53c1942170581663ad3c6d9215b890351cb98f721bed57fbaacabb05c3a8272699a1db728f5835a0c0643985348d48d7f370dea50fd565f4b1eb6a0c9669ec442a803fd79b936e80ce854cc035e7876e62898adb33da644dc10ef885e18e3ccf2bc32ccfda134735db6373afd6b3b17850851ec7577b6f640f121b6b77a570833ead7f7f17e99e983b7896be97368b5d9aeaa9ff714e1c02144d0fd94b8519808025a90e19d69bf3bd2b96592b5583746bfa401a35a72a14aea6f62606f15fc654d54bb66068c7131d7e7079af9d8d507686aaa3977c9d6dc544d892b128698c340b10460f01b3d840216318d80119a3f60ac93f5fa5971e63bc5810ec0b9ced2058074f5be377ff9f47c473cc6453093d842c0d8edc68c7ca341d4eac52dcf9f262fe127559e3e3feb5c36d35ca21239d4213a5d9c074ff806fa349c0d98d7638e4d2800849b7e9321c713889ab5d262adf6adbba63896a36c7bbdfff4122404a494f6f07c0a2c5d944478681bbbc5d95d3057244dee46979a067af6a1644805aec340fc513e6b73c36d5b6f09f2a180387a459aa1c8ce27b19e4a4ddc1c1fbc1451457f1a5dc5f2cbea2f1c14f5a2989f793413d509577e025708298aaf0ad3df0b8302354a684fa447265f8a1a9714f0e329b202b4178778e9c7f6816f0b9d065da1fc77df53f4b1fa29733ff1fd25cebd1319ee81ed70e9c7f8acaba81baf22d6ade5081d893a31407aa50f314be7c2973be814eebf30c1779b6daf91e7baec080c2a49c64ee927e7b00b1ef9c84239a7947466a9a82de88c1c213851c6f38f8349aa1ad4edd10a6981b9f64c10bcc2b02f96972bb814555c86f01cd59a0f7cef0db33d0c736a6a469d1889f864f09d9cb6b5c5fcc4d90945a0b3eb8d2460f715594da7a7fa4cda335ac2cb2ee37f1398133e53b08989296336c20ece34498336f4ffd08ad4b77b7da1a9c652024755c10483265e3ad5e1534848ffe0e75eca6c77d54748660eb63d547465a1341325cc80fab92b8a5a715bffa0b7924d81ece8d5a84ceb38ce10e4d23b5e3649ba47a654b5dd370197c5ae8fe1c5d7faff7f5e9eb182adbcbf294e59ad04e3efdb5323790758aa6773aa93a1e9ba0c97983b7dfd4175861f9718c912954584995025964183f320a3a337b112c392b7bc09f43e078590a42daa43191a9d32d291269f227944048cbb28968b774173c41f153d37a5edce1625ad909d994d354d6873513dc8fa79ca8916ac3f30634659988a1f7fc30b53043cb0353f18fc55fdc6f8823272f555f7a001460fd0675ba29272cd3b9898d9d144aa503decd177e131e13f31f19b37672e4133387d96bcea57a6dc4cb1818d52bcce195abc6403c4ba448f2290c4c48de001153033f6d8ada7e2d665c9d138259e4dc7ccca0892581286fc328276701a13e96c5b32af577df35d0b8d256f13a229cd82f4caa3d6676f9979b47174bad92cbe173278e35d0fb7cee6d726af52c1fa0cbbd0f22c035221877c6530fff68d0e9880e0bf93055122a0adc693b8634714549d602452b48fdc8bc60757f6077d1517713bc6c5454e82b3fc4c0882618dc6ec6911318773beabe1ac781fbadb8e47e7252c0a48de1c07557b5e6712c1c7b3b0fe5c4b4f5c0e9bd132b4f329b5fc31243d5160504e1bf0567ccbdd8dca42c8aa6ac8c8c6b46b5e5523fcd22fc492e69a07d72d09a612f0add14de42ea7aad19887d051078e20dbf4429201767e522cc513ba0da7f12825b25ae86f386cbfd9ba356ff3fe25bc2dba7beaa31c82c1afc8b1fe8fd9d6c7a296bcf032530045d28e670d05f8015ac4491f10104cce4d780a21ca3dc983bec63a05f18ab8bd21e8e2fc6ca6dd859223dc9b66d1e0dbdc1b6b67ba71a9be51d40e70510d7ceb2e5b1e7c531b1dca4e0b6946027b71f065dfd9032c41ea29ae8f5ce965b8daa3c33c3f65cbe9cba9342ad6d77554602cc901707f0bfaec930a57e75eaaba9540fb255fb037c150cd786c2cecbde15a32646aea61101fdd0719188f10393983cee2a6743e57ee9323e0418f78f510e119856a5f36e10a3b8ad3809b8cc9eaa046ea3f7637a02462570f8542ea99485ef831c17ed8b833976026abfa73059e557bba0361052cb762a4b821a7e4ccdec42f0dc020c905d74fa0b72efbf613827deec66c00059ed007ba07a9e1c8ad8b69ba2e8605c7e5a3c1e35901a195d0929e9e8b1b9265dd2e408e3e03555c96b64e469d23fd122f627f8b2c75f94264380a057a2ae23832c30402d1d7d040f3c87e97fe18c87aae02739bbeab17f66c718e141a3261cecdcf1851994809105bd973b3cf825471deae47da600310adfe25a62126d6bc417237fe3eb592d34c8eaab0234f93a64070cbc6a1ef181af37f7645a146b9084b8663d36de3a4de97682f4000e3f918b0041c34e1a6943ddc8077726fe072d47067697dfa36b42d14ac83c62f8dd164a242e8027f5e6401a051ab0926ace1bfda240790a6fbf8ddae672f5351acdf40b3657d067e950e9d73c25aa907f8b72ae892cc8cbaff0d52f7c843470fd46173d732a77619abb57a2faddc33148cc70ed518ec32e2be4e4333974710f1ca502f4c72852069b3f05d3eccce220e2057586d062d873bb8e7f0e3e681baccb542dbe1c70b9acba46894c17246c9c3698d7fd680a604cd6007ca2807b840dc8c25542c0c9753d617d34efa9b1496949cb27ec018bb33d9fe3d9e777fde00833c913d77b21bf65012c30325590b96de7e6e0ffa5b8d9614ad595e1c6ef066ab8020bc348d708d82fc408e434f42d3043d225fe39acfc6680b7d6bb330e1a43b7151f1df6a54fd88511d13d8ce42c4c155ed829c6493b67aeb8b50bf82acde6e919742d0fa010ea9be8b0917e8ebfe36f8211d97a2f9a0e6c024879383a4742f7257ee0cf2cd575f3b9b991be1698a314f4b9913fb95fe859fed9f14770bd564d60aa0c609b04d588db8c149d2ecc2caf52c565b04d529d98a5bd52a1d90fe30ce41215e4455ce3f6ab3de0466636f8139b5487ab1cfc6a2748530424ddc00f7496e55657a428a5ece019d9bbaa557cbf71e8a315b4d2692da6d30e4b0e95b33b899c5ae229847604ef77f03af8ae47bad1fca6f3ab61dc727e304f6edd8a295f747e8bdfdcf2954c0c54fca8efd0481dde2ef8904a5c126ca0551ea1cc3f6a38791943e92e1aa276b1c2b6ad9d702ca112e9263176992b21b256aa2827f651354fb2df2672a35a593067ed035c84d252799e2c834ce6ff24e9d22714628ece13010d122b4d6da477bfe01080bf51354a146c7567670c88d1469b0469ea8991702b4eedbfcfe145deaa18ef0c08132814696e5c4ce995749516a672979263e6faa35e0bcd80a53bee828ce9784c697f7e8f929b32ad110ce4cbcaba648ae7344e2ac8c7b2127e87157efb5dd1e81f08dbf58446d51ac2448ac123534e3ca97221c276bfcb67cb6da8237abfcb3d3f87b8b1007cbdcaad3ff483fdb65846a5799bd8901917bd482c12fbca4763db69b0b22771d6964029d895c8bed5783ced991a6320efb21577cd9fa1800ecffb35892550652adfac5baa8640a94ab49da5a3f5c4fa5457f0db9a5761e4bc4ad195ee48164f58980fe3fe2fef122edc19c73ce45e3ce6f38c1506c33dce072b31a2d2a0490f46bf17a3ee6c5e7b232e9af3185a5932632aa73f91aab28417e886369ee058550526fb37900e93b60109c9ff0c3188867e0c6dc4315d45a814f15775c3690c7cd82b579f113e370bb523cf8f5094ed6061c8182314b69e6d88d10d2dfc28f7cc0881020ad885ef6042de9f4e5c797601e4d1e9e05b1016e5b0721a6958c4e72836fd1e05540355861c88db203c6bcac6f4c21aae93eb3264342c9f3eb904f0603b2614176f64760fef1533daee57a77dc97abee606c8afa26a7fdda99d1af3063694847e956462afdb0d65ae7102c1ab47445412609a0e40d44362e55085f26bfdffc9dd5e1887a15389c50ae552b6a22f258a952ffa84ebcb1ebc61d51b0356dd214fae71b7284c7fd35aabeb4bc99ce864c9ca2a903f0518b09ec7943b338f73d9c3d26154015cac4feee77beea3377b87da4580c06680b95d8eac4185dfa519bae36cf91b3f6ccc87701598d4761e9825890c16c11e578c648504d9750162c7c8d490f45b41a2d7635a9eae2777d58bd86247d982aede7c5ae1b752c5d7d24ece775e7571c6897d52d5f153fc22e2e5c7a249f3e6803f0e68f24a9ebc0e660991d317936fb5ecd8bf03c37ce3ddb8125da4ab2cde5fc3d1d7344ca6e3dbfe52e44cf370c7ebf2f097194fcb5f91b2d1ae5ff216c8df127b084ced5732033e6901f18406e497c4a91ae8dc8139260b83ab47e5f059d2df152ef375bd1cc49d386f5f532af8a95a53f7fc557c383bf318e2a91d4e2347271c6b18d3c13bb0e46c94c074507b4979c9b65642bd592587d764a55e29c348bd978dd5cd2f823dfbcf7b6bc8657fe2855cd324cb90afb2c6a8a5cffa2026e93687fe3a52c5d1d3bcddbfd97768654c317627579d5f22a7649d7ef8763bb6ef699b5da9f98ef67c8d0c770002466d48afd84649fdf8eb4c45debc92a8bbcb19eb7ad4c8a96a5078fb1e4d66c3883ae24552cdf852ef7c1c603e11b4e7ce31dd3ecdd5ed0ffc74bfd63924588d211c4ea292711580b62ce5c0d04cc4a81387adac750af07204b287c8bfefa3b4056c5efbab462879591208f7f073b0857f4958cbe14859a1e17199612197c2b74a6659c1e44909d1dd648a8e17f755561bca9b13ca319199607f4e6287ad614e71a0d31234720989d682e6f828b0a7210e5ebc1dcd2c9ba6d8afc523879141f376a1649c376c88bb1fe6345d214a009bc2fa6bada41934f9d693f69fe7f85441b148735909d2aa15ae8f7ecc21a779f417a76a54f204eefbd882b21b3e514159ca3d139ba97a4515d8222de804e6bc90d2bcee020d66e28b73d89065f0c2199bb3eb27d672faea517dd07f012097497d94a6827ea9e7c2c1c7e0eee42902a2b9431fd4a4a218748b27645a3baeab7c221fcfeabafd842868569e0f349f47ab4a19ea012aff5b0c546e37957d905239a7aa85ab5d549d90c73557880299c38b43f52526218ae50bd695bf39bbbed632ff95aa3a3b992895b", 0x1000}], 0x8, &(0x7f0000000680)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}}], 0x1, 0x4008800) r3 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0xfffffffffffffe12}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}]) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={0x14, 0x14, 0x1, 0x4, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000", @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x10, 0x5f, 0x20}, 0x10}], 0x1}, 0x0) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) futex(0x0, 0xb, 0x0, 0x0, &(0x7f00000003c0)=0xfffffffd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0xcc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.860664797s ago: executing program 4 (id=1234): r0 = syz_usb_connect(0x1, 0x1cb, &(0x7f0000001140)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_perm_addr}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010105010230000905010960002503050a2525010400000500000904020000010230000904020101010230000905820900027409c00a2525ffffff7f01e10b"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="20164700000080e847b5fbe859b2ce619ae8a6137b44daf216d6d6e27c5d0bb965e88a74d2a295d7db6d656cc445baba0efd7034786f7053fee9a56f82d55161eac15c00"/77], 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001a00000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x60, 0x30, 0x2c, {0x2c, 0x22, "0fe2832a90d53bda9ca3bbeae3ee15495cec847c5f5627a38f1e7e385e3fbd5cee60c0d485c3927ef479"}}, &(0x7f0000000900)={0x0, 0x3, 0xae, @string={0xae, 0x3, "a1d0a8b8357fbd55438ff3c885e4a38fce281e06b9955d6f5354a6d5aefcff2faa5ff2941d6561b939804d828b433f42fccdd4ebcf3b09bc708ff68b336da308e042e705d77aff0466ceb7432fa5c90c4b31494b6b9c10ec2e09c55c48712fd7e30070b560384bc6018363bae3b61504490f8b2ab6a096d7300a63e0a65dd917316ee740c746ec109b164578e6fcbc4369e21a5c3e8b4cfc0c878fbbdfbba714a1829d255ca7d16ee00ff95a"}}, &(0x7f00000009c0)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x0, 0x40, 0x6, 0xd}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x9, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xff, 0x3, 0x1, 0x80}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x9, 0x8, "13b9df2a", "3571ff4e"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x3, 0x18, 0x5, 0x3, 0x6}}}, &(0x7f0000001040)={0x84, &(0x7f0000000b00)={0x0, 0x30, 0xd9, "76d7c198d3758e107a75f42bd7d085b456d185312c49962519b261e56ae22172d49368a88fc16758bb7121f492756a729ffead0e251a93d176a209f91e5e4b11fb6e88ecde9cee38f0200d59cbbd75f347b9654d16ca9e8f0fc221ab991e73cf57efdd921a25386cb2e98de5ebcee8c36269d04e6a681e2fe2bae89313b8146526919f149ef1a34959498dae1fcc7a1d5526d89c39c47bef0c37c191acad15a2d863627fe5e56007bd16f8a246cd4e07b97c2c7d6d93ba46b790793b9c28e778f560a35d4f1fb962ef0c67c91dd4515e41a396f937485f2fee"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x26}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "7704"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @random="7841840b477f"}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "f322"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRES64=r2, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x40, 0x6, 0x2a, {0x2a, 0x3f4a96587a12babd, "6a644a8a1dc2bdd2a1fda7b32fbc90c35e94ab4a88933c69216c61a9cc70befe635559b59c94405d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}}, &(0x7f0000000700)={0x34, &(0x7f0000000780)={0x0, 0x10, 0x100, "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"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x7a, {0x78, "270e92e544d4deb143b728116867bfc9dbc7cea2aa447435f75e719a11de970424ebd271a665b6f27bacb72a3e6e7feaa74baddebd5aebe3e7fa219f0e73c1ccfee90ecd99c029d0a2c579968244c3c9ddba8d9b7b061cac5e2249cb2164333dfdf4e0eb4fe9aa70a984f11d241b37487a1a00f288089ab0"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 1.74784078s ago: executing program 1 (id=1235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) r2 = dup3(r1, r0, 0x80000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='./file1\x00') read(r2, 0x0, 0x0) read$watch_queue(r2, 0x0, 0x0) unshare(0x5000000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x19) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) timer_create(0x7, &(0x7f0000000180)={0x0, 0x11, 0x0, @tid=r3}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000180)='cache=mmap\xc2\x1e\xd9\x87\xe3\xff\x1fy\xf8Ya\xa4\x86\xc6M\xd7\xdfF-\v\xc1cF\x82\x97\xfa\x81\xb7\xf8\xda\x7f\xc2]\x1bUC\xd3\x9a\xde\xd5T3\xee\xde\xdb\"\x8c\xda#\xca\x00\x1a@\xbc\xc7B\xe1\x06\x15\xae\xd5\xf9d\x93\xc7\x92>\x186\x83\xe2>\x87\x1f\x8a6\x173\x12U\xfd\xec\xe5u \xaa\xfd\x8b \x01\xc0\x81\x19L9je[\xe5k:\xa9\xf9\xceF\xf6uw\xf7sY\xd3\b\xd0;\x8b\xf7\x03E\xe6\x1a\xf1Q\fI\xe6c\xa0\xcf\xc7\x05\rC\xf2\xb8\xb1#o1\x04\x8f\x1dl\x15\v+\xb8o\x1c0\x87d\xeb\xc0a$i&)X\x85\xc9\x80j\xf8\xb3\x7f\xa8\xa3\x1d-\x00G\xf2\xa3s\xcb\x90Cj\xf03\xf86\xb0\x8b\xc5\f\xf3%E\x19\xaa\x94uinS/\x13r\xb3\x91\"k\xd9\xf2P\x9c\x1b)d\xe7\x03DG|\xbb.\xfd\xb1n\x1e\x00\xa0O\x8c\xcf\xf2\xc9$') 1.382481713s ago: executing program 5 (id=1236): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.225253958s ago: executing program 5 (id=1237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002140)={0x14c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.031808375s ago: executing program 2 (id=1238): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'dvmrp0\x00', 0x3}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000100)={0x1800000000000, 0x4, 0xd, 0x7, 0x9, 0x1, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000580)=0x100e77, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x83}], 0x1, 0x10000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000000c0)={r2, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, [0x400, 0x8, 0x5, 0x80000009, 0x9]}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000b"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x5a7940, 0x0) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000200)='batadv_slave_1\x00'}) 878.34555ms ago: executing program 2 (id=1239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x2, 0x0, 0xe, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@metacopy_on}], [], 0x2c}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x2, 0x0, 0xe, 0x4, 0x7}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f00000000c0)) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@metacopy_on}], [], 0x2c}) (async) 854.287621ms ago: executing program 1 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x8004) 723.884216ms ago: executing program 2 (id=1241): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) syz_io_uring_setup(0x24e2, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x3, 0x199}, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), 0x0) open(0x0, 0x143b82, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffffffff871f8b80) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f011cdbe80f6a27440d22c066b9800000c00f326635000400000f345151bfb90f01c52e2e262e660f383935360d090f30bab80c7e0066ef53fcec0f21ccd5d5fbfbff078ed83e363e3e67cb0f195300", 0x50}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 711.925356ms ago: executing program 5 (id=1242): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f00000bd000/0x1000)=nil, 0x1000) 379.027028ms ago: executing program 1 (id=1243): prlimit64(0x0, 0x9, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_clone(0xc0010100, &(0x7f00000002c0)="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", 0x16f, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000240)="0dc0c7aefef3ffd656bbf3b31b18256e25fd8ac70cd712d1fb44b336e56d5c359d671c4aee94003dc0f6a0fb53a40c4d1af5f8df589e58f1d3d0c5404e33073ab37e9ace24eaaee7b13b4e155e88da3d84e03a83226aec2e03b5a7e453b2da1ed9333aed2d627288316a9e7b4ec5659ff57eda41718ae9244eee1f84fbaf8b") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) fcntl$setown(r0, 0x8, r2) ptrace$cont(0x7, r2, 0xdfd, 0x106) ptrace$poke(0x4, r1, &(0x7f0000000040), 0xe) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 282.817481ms ago: executing program 34 (id=1243): prlimit64(0x0, 0x9, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_clone(0xc0010100, &(0x7f00000002c0)="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", 0x16f, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000240)="0dc0c7aefef3ffd656bbf3b31b18256e25fd8ac70cd712d1fb44b336e56d5c359d671c4aee94003dc0f6a0fb53a40c4d1af5f8df589e58f1d3d0c5404e33073ab37e9ace24eaaee7b13b4e155e88da3d84e03a83226aec2e03b5a7e453b2da1ed9333aed2d627288316a9e7b4ec5659ff57eda41718ae9244eee1f84fbaf8b") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) fcntl$setown(r0, 0x8, r2) ptrace$cont(0x7, r2, 0xdfd, 0x106) ptrace$poke(0x4, r1, &(0x7f0000000040), 0xe) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 80.916558ms ago: executing program 5 (id=1245): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 5 (id=1246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r1, &(0x7f0000000300)=""/176, 0xb0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/4096) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a9010070900be0083"], 0x0}, 0x0) kernel console output (not intermixed with test programs): e number 0 [ 175.717822][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 175.727040][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.735095][ T10] usb 3-1: Product: syz [ 175.739463][ T10] usb 3-1: Manufacturer: syz [ 175.744177][ T10] usb 3-1: SerialNumber: syz [ 175.750561][ T10] usb 3-1: config 0 descriptor?? [ 175.766017][ T10] smsc95xx v2.0.0 [ 175.820132][ T313] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 175.980980][ T36] kauditd_printk_skb: 436 callbacks suppressed [ 175.981002][ T36] audit: type=1400 audit(1774721499.702:15472): avc: denied { ioctl } for pid=3603 comm="syz.1.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.016371][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 176.027435][ T313] usb 2-1: config 0 has no interfaces? [ 176.032964][ T313] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.047465][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 176.050783][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.054260][ T36] audit: type=1400 audit(1774721499.702:15473): avc: denied { ioctl } for pid=3603 comm="syz.1.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.061487][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 176.062807][ T10] usb 3-1: USB disconnect, device number 75 [ 176.086614][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.113982][ T45] usb 5-1: USB disconnect, device number 13 [ 176.126434][ T36] audit: type=1400 audit(1774721499.732:15474): avc: denied { ioctl } for pid=3603 comm="syz.1.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.143490][ T313] usb 2-1: config 0 descriptor?? [ 176.184206][ T3608] netlink: 5 bytes leftover after parsing attributes in process `syz.4.951'. [ 176.200247][ T36] audit: type=1400 audit(1774721499.732:15475): avc: denied { ioctl } for pid=3603 comm="syz.1.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.281466][ T36] audit: type=1400 audit(1774721499.732:15476): avc: denied { ioctl } for pid=3603 comm="syz.1.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.320170][ T36] audit: type=1400 audit(1774721499.762:15477): avc: denied { ioctl } for pid=3603 comm="syz.1.949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.345501][ T36] audit: type=1400 audit(1774721499.842:15478): avc: denied { read write } for pid=3605 comm="syz.0.950" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.368198][ T10] usb 2-1: USB disconnect, device number 84 [ 176.369629][ T36] audit: type=1400 audit(1774721499.842:15479): avc: denied { read write open } for pid=3605 comm="syz.0.950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.375852][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 176.409176][ T36] audit: type=1400 audit(1774721499.842:15480): avc: denied { ioctl } for pid=3605 comm="syz.0.950" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.450660][ T36] audit: type=1400 audit(1774721499.852:15481): avc: denied { read write } for pid=3605 comm="syz.0.950" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.530188][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.583199][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.598069][ T3610] exFAT-fs (rnullb0): invalid boot record signature [ 176.601721][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 176.606098][ T3610] exFAT-fs (rnullb0): failed to read boot sector [ 176.621933][ T3610] exFAT-fs (rnullb0): failed to recognize exfat type [ 176.636595][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 176.664380][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 176.674034][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.687327][ T9] usb 1-1: Product: syz [ 176.690166][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 176.692944][ T9] usb 1-1: Manufacturer: syz [ 176.702053][ T9] usb 1-1: SerialNumber: syz [ 176.714376][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.730694][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.751654][ T45] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 176.761065][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.769162][ T45] usb 5-1: Product: syz [ 176.773390][ T45] usb 5-1: Manufacturer: syz [ 176.778198][ T45] usb 5-1: SerialNumber: syz [ 176.820147][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 176.920236][ T898] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 176.931517][ T9] usb 1-1: USB disconnect, device number 78 [ 176.973111][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.985412][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 176.997532][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 177.014653][ T10] usb 2-1: string descriptor 0 read error: -22 [ 177.021500][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 177.032259][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.100098][ T898] usb 3-1: Using ep0 maxpacket: 32 [ 177.119282][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.134616][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.144470][ T898] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 177.154080][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.165291][ T898] usb 3-1: config 0 descriptor?? [ 177.248223][ T10] usb 2-1: Can't get UAC3 power state for id 10 [ 177.607241][ T898] savu 0003:1E7D:2D5A.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 177.860451][ T10] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 177.871168][ T9] usb 3-1: USB disconnect, device number 76 [ 178.553857][ T439] bridge_slave_1: left allmulticast mode [ 178.559581][ T439] bridge_slave_1: left promiscuous mode [ 178.565927][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.575423][ T439] bridge_slave_0: left allmulticast mode [ 178.588353][ T439] bridge_slave_0: left promiscuous mode [ 178.595516][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.854865][ T439] veth1_macvtap: left promiscuous mode [ 178.866592][ T439] veth0_vlan: left promiscuous mode [ 178.886861][ T898] usb 2-1: USB disconnect, device number 85 [ 179.199259][ T45] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 179.221364][ T45] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 179.250192][ T45] usb 5-1: USB disconnect, device number 14 [ 179.331622][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.370179][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.387918][ T3631] bridge_slave_0: entered allmulticast mode [ 179.395261][ T3631] bridge_slave_0: entered promiscuous mode [ 179.403978][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.411559][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.418671][ T3631] bridge_slave_1: entered allmulticast mode [ 179.426715][ T3631] bridge_slave_1: entered promiscuous mode [ 179.487062][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.510159][ T309] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 179.684829][ T309] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.704134][ T309] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 179.724744][ T309] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 179.749841][ T309] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 179.753989][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.766309][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.770149][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.790120][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 179.790196][ T309] usb 3-1: Product: syz [ 179.798622][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.809034][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.821299][ T309] usb 3-1: Manufacturer: syz [ 179.825989][ T309] usb 3-1: SerialNumber: syz [ 179.848256][ T3645] overlayfs: failed to resolve './file0': -2 [ 179.858515][ T3645] netlink: 'syz.4.967': attribute type 5 has an invalid length. [ 179.945978][ T3631] veth0_vlan: entered promiscuous mode [ 179.985529][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.992778][ T3631] veth1_macvtap: entered promiscuous mode [ 180.013584][ T10] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 180.030097][ T10] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 180.039001][ T10] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 180.051131][ T10] usb 2-1: config 129 has no interface number 0 [ 180.057469][ T10] usb 2-1: config 129 has no interface number 1 [ 180.069704][ T10] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.077923][ T309] usb 3-1: USB disconnect, device number 77 [ 180.103737][ T10] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 180.117284][ T10] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 180.150120][ T10] usb 2-1: config 129 interface 135 has no altsetting 0 [ 180.158335][ T10] usb 2-1: config 129 interface 5 has no altsetting 0 [ 180.175245][ T10] usb 2-1: string descriptor 0 read error: -22 [ 180.193350][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 180.204636][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.229022][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 180.338873][ T313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 180.431737][ T10] usb 2-1: USB disconnect, device number 86 [ 180.500200][ T313] usb 5-1: Using ep0 maxpacket: 8 [ 180.507701][ T313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.519844][ T313] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 180.520115][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.529459][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.545223][ T313] usb 5-1: Product: syz [ 180.549578][ T313] usb 5-1: Manufacturer: syz [ 180.554317][ T313] usb 5-1: SerialNumber: syz [ 180.690133][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 180.698926][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.709082][ T45] usb 6-1: config 1 has an invalid interface association descriptor of length 6, skipping [ 180.719130][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.730661][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 180.739670][ T45] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.756960][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.766601][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.782741][ T45] usb 6-1: Product: syz [ 180.786938][ T45] usb 6-1: Manufacturer: syz [ 180.801455][ T313] usb 5-1: USB disconnect, device number 15 [ 180.802084][ T45] usb 6-1: SerialNumber: syz [ 180.850120][ T309] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 180.868028][ T1019] udevd[1019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.985619][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 180.990133][ T309] usb 3-1: device descriptor read/64, error -71 [ 181.012481][ T36] kauditd_printk_skb: 613 callbacks suppressed [ 181.012501][ T36] audit: type=1400 audit(1774721504.732:16095): avc: denied { read } for pid=3653 comm="syz.1.970" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.028167][ T45] cdc_ncm 6-1:1.0: skipping garbage [ 181.055096][ T36] audit: type=1400 audit(1774721504.732:16096): avc: denied { read open } for pid=3653 comm="syz.1.970" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.078985][ T45] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 181.086797][ T45] cdc_ncm 6-1:1.0: bind() failure [ 181.088505][ T36] audit: type=1400 audit(1774721504.732:16097): avc: denied { write } for pid=3653 comm="syz.1.970" name="igmp6" dev="proc" ino=4026532357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.119689][ T45] usb 6-1: USB disconnect, device number 2 [ 181.139411][ T333] udevd[333]: setting mode of /dev/bus/usb/006/002 to 020664 failed: No such file or directory [ 181.162504][ T36] audit: type=1400 audit(1774721504.732:16098): avc: denied { write } for pid=3653 comm="syz.1.970" path="/proc/590/net/igmp6" dev="proc" ino=4026532357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.169641][ T333] udevd[333]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory [ 181.186723][ T36] audit: type=1400 audit(1774721504.732:16099): avc: denied { write } for pid=3653 comm="syz.1.970" name="igmp6" dev="proc" ino=4026532357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.221212][ T36] audit: type=1400 audit(1774721504.732:16100): avc: denied { write } for pid=3653 comm="syz.1.970" path="/proc/590/net/igmp6" dev="proc" ino=4026532357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 181.245570][ T36] audit: type=1400 audit(1774721504.772:16101): avc: denied { ioctl } for pid=3653 comm="syz.1.970" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.270198][ T309] usb 3-1: device descriptor read/64, error -71 [ 181.270346][ T36] audit: type=1400 audit(1774721504.852:16102): avc: denied { ioctl } for pid=3651 comm="syz.2.969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.302424][ T36] audit: type=1400 audit(1774721504.852:16103): avc: denied { ioctl } for pid=3651 comm="syz.2.969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.329511][ T36] audit: type=1400 audit(1774721504.852:16104): avc: denied { ioctl } for pid=3651 comm="syz.2.969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.410876][ T3660] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.972'. [ 181.510154][ T309] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 181.650180][ T309] usb 3-1: device descriptor read/64, error -71 [ 181.670317][ T313] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 181.720131][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.774198][ T3668] netlink: 316 bytes leftover after parsing attributes in process `syz.5.975'. [ 181.784485][ T3668] netlink: 316 bytes leftover after parsing attributes in process `syz.5.975'. [ 181.810131][ T313] usb 2-1: device descriptor read/64, error -71 [ 181.885985][ T45] usb 5-1: config 0 has no interfaces? [ 181.893951][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.906047][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.917242][ T45] usb 5-1: config 0 descriptor?? [ 181.922291][ T309] usb 3-1: device descriptor read/64, error -71 [ 182.041621][ T309] usb usb3-port1: attempt power cycle [ 182.060117][ T313] usb 2-1: device descriptor read/64, error -71 [ 182.147713][ T9] usb 5-1: USB disconnect, device number 16 [ 182.310127][ T313] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 182.380119][ T309] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 182.414130][ T309] usb 3-1: device descriptor read/8, error -71 [ 182.450111][ T313] usb 2-1: device descriptor read/64, error -71 [ 182.553040][ T309] usb 3-1: device descriptor read/8, error -71 [ 182.601128][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 182.690141][ T313] usb 2-1: device descriptor read/64, error -71 [ 182.769555][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.789377][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 182.790121][ T309] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 182.800961][ T313] usb usb2-port1: attempt power cycle [ 182.821992][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 182.832373][ T309] usb 3-1: device descriptor read/8, error -71 [ 182.840487][ T9] usb 5-1: string descriptor 0 read error: -22 [ 182.847148][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 182.857215][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.970736][ T309] usb 3-1: device descriptor read/8, error -71 [ 183.072701][ T9] usb 5-1: Can't get UAC3 power state for id 10 [ 183.080194][ T309] usb usb3-port1: unable to enumerate USB device [ 183.180113][ T313] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 183.208794][ T313] usb 2-1: device descriptor read/8, error -71 [ 183.342304][ T313] usb 2-1: device descriptor read/8, error -71 [ 183.430171][ T309] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.581331][ T313] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 183.584147][ T309] usb 6-1: unable to get BOS descriptor or descriptor too short [ 183.598211][ T309] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 183.602947][ T313] usb 2-1: device descriptor read/8, error -71 [ 183.609472][ T309] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 183.635880][ T309] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 183.653987][ T309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.662199][ T309] usb 6-1: Product: syz [ 183.666397][ T309] usb 6-1: Manufacturer: syz [ 183.671745][ T309] usb 6-1: SerialNumber: syz [ 183.744586][ T313] usb 2-1: device descriptor read/8, error -71 [ 183.860775][ T313] usb usb2-port1: unable to enumerate USB device [ 183.891703][ T309] usb 6-1: USB disconnect, device number 3 [ 183.905367][ T9] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 184.710698][ T3716] .N: renamed from veth0_to_bond (while UP) [ 184.814565][ T3722] netlink: 'syz.2.991': attribute type 16 has an invalid length. [ 185.572924][ T313] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 185.627877][ T66] usb 5-1: USB disconnect, device number 17 [ 185.747047][ T313] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.813786][ T313] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 185.860801][ T313] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 185.893708][ T313] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 185.908701][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.916819][ T313] usb 6-1: Product: syz [ 185.923768][ T313] usb 6-1: Manufacturer: syz [ 185.928442][ T313] usb 6-1: SerialNumber: syz [ 186.060766][ T36] kauditd_printk_skb: 553 callbacks suppressed [ 186.060788][ T36] audit: type=1400 audit(1774721509.782:16658): avc: denied { ioctl } for pid=3757 comm="syz.1.1004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.108721][ T36] audit: type=1400 audit(1774721509.822:16659): avc: denied { ioctl } for pid=3748 comm="syz.2.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.140137][ T66] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 186.149633][ T36] audit: type=1400 audit(1774721509.862:16660): avc: denied { ioctl } for pid=3757 comm="syz.1.1004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.184221][ T313] usb 6-1: USB disconnect, device number 4 [ 186.194768][ T36] audit: type=1400 audit(1774721509.862:16661): avc: denied { ioctl } for pid=3757 comm="syz.1.1004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.225200][ T36] audit: type=1400 audit(1774721509.862:16662): avc: denied { ioctl } for pid=3757 comm="syz.1.1004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.250342][ T418] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 186.264154][ T36] audit: type=1400 audit(1774721509.912:16663): avc: denied { ioctl } for pid=3748 comm="syz.2.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.293141][ T36] audit: type=1400 audit(1774721509.942:16664): avc: denied { ioctl } for pid=3757 comm="syz.1.1004" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.319764][ T36] audit: type=1400 audit(1774721509.982:16665): avc: denied { ioctl } for pid=3748 comm="syz.2.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.320176][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 186.347133][ T36] audit: type=1400 audit(1774721509.982:16666): avc: denied { ioctl } for pid=3748 comm="syz.2.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.378993][ T36] audit: type=1400 audit(1774721509.982:16667): avc: denied { ioctl } for pid=3748 comm="syz.2.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.385753][ T66] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.416119][ T66] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.420935][ T418] usb 3-1: Using ep0 maxpacket: 32 [ 186.426838][ T66] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 186.436770][ T418] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.444472][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.460104][ T418] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.460655][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 186.480120][ T418] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.480969][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.499140][ T418] usb 3-1: config 1 interface 0 has no altsetting 0 [ 186.507157][ T66] usb 2-1: config 0 descriptor?? [ 186.548786][ T418] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.562975][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.571077][ T418] usb 3-1: Product: syz [ 186.575284][ T418] usb 3-1: Manufacturer: syz [ 186.579904][ T418] usb 3-1: SerialNumber: syz [ 186.594167][ T3759] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 186.830879][ T418] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 186.862029][ T418] usb 3-1: USB disconnect, device number 82 [ 186.873645][ T418] usblp0: removed [ 186.944974][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 186.951002][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 186.970235][ T66] usb 2-1: USB disconnect, device number 91 [ 187.080144][ T309] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.120120][ T330] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.230116][ T309] usb 6-1: Using ep0 maxpacket: 16 [ 187.236418][ T309] usb 6-1: no configurations [ 187.241164][ T309] usb 6-1: can't read configurations, error -22 [ 187.272194][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 187.282026][ T330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 187.291795][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 187.301682][ T330] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 187.314164][ T330] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 187.323649][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.331911][ T330] usb 5-1: Product: syz [ 187.336106][ T330] usb 5-1: Manufacturer: syz [ 187.340753][ T330] usb 5-1: SerialNumber: syz [ 187.346944][ T330] usb 5-1: config 0 descriptor?? [ 187.369672][ T330] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 187.380134][ T309] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.550118][ T309] usb 6-1: Using ep0 maxpacket: 16 [ 187.556134][ T309] usb 6-1: no configurations [ 187.561560][ T309] usb 6-1: can't read configurations, error -22 [ 187.568651][ T309] usb usb6-port1: attempt power cycle [ 187.650110][ T313] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 187.790104][ T313] usb 3-1: device descriptor read/64, error -71 [ 187.840123][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 187.910169][ T309] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.931242][ T309] usb 6-1: Using ep0 maxpacket: 16 [ 187.937611][ T309] usb 6-1: no configurations [ 187.943404][ T309] usb 6-1: can't read configurations, error -22 [ 187.992559][ T9] usb 2-1: config 0 has no interfaces? [ 187.998094][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.007205][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.018442][ T9] usb 2-1: config 0 descriptor?? [ 188.030119][ T313] usb 3-1: device descriptor read/64, error -71 [ 188.090150][ T309] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 188.111043][ T309] usb 6-1: Using ep0 maxpacket: 16 [ 188.117296][ T309] usb 6-1: no configurations [ 188.122567][ T309] usb 6-1: can't read configurations, error -22 [ 188.129117][ T309] usb usb6-port1: unable to enumerate USB device [ 188.228692][ T9] usb 2-1: USB disconnect, device number 92 [ 188.270153][ T313] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 188.410144][ T313] usb 3-1: device descriptor read/64, error -71 [ 188.650124][ T313] usb 3-1: device descriptor read/64, error -71 [ 188.670106][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 188.760202][ T313] usb usb3-port1: attempt power cycle [ 188.823401][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.832805][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 188.844007][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 188.859899][ T9] usb 2-1: string descriptor 0 read error: -22 [ 188.866191][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 188.875326][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.091625][ T9] usb 2-1: Can't get UAC3 power state for id 10 [ 189.110111][ T313] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 189.132421][ T313] usb 3-1: device descriptor read/8, error -71 [ 189.262771][ T313] usb 3-1: device descriptor read/8, error -71 [ 189.510126][ T313] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 189.532329][ T313] usb 3-1: device descriptor read/8, error -71 [ 189.662426][ T313] usb 3-1: device descriptor read/8, error -71 [ 189.770266][ T313] usb usb3-port1: unable to enumerate USB device [ 189.789465][ T330] scsi host1: usb-storage 5-1:0.0 [ 189.798814][ T330] usb 5-1: USB disconnect, device number 18 [ 189.815576][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 189.923749][ T3794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1543 sclass=netlink_tcpdiag_socket pid=3794 comm=syz.5.1013 [ 190.025996][ T9] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 190.810181][ T309] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 190.955622][ T309] usb 3-1: device descriptor read/64, error -71 [ 191.054098][ T45] usb 2-1: USB disconnect, device number 93 [ 191.072786][ T36] kauditd_printk_skb: 549 callbacks suppressed [ 191.072807][ T36] audit: type=1400 audit(1774721514.792:17217): avc: denied { read write } for pid=3815 comm="syz.4.1020" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.161438][ T36] audit: type=1400 audit(1774721514.792:17218): avc: denied { read write open } for pid=3815 comm="syz.4.1020" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.188767][ T36] audit: type=1400 audit(1774721514.792:17219): avc: denied { ioctl } for pid=3815 comm="syz.4.1020" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.210140][ T309] usb 3-1: device descriptor read/64, error -71 [ 191.214537][ T36] audit: type=1400 audit(1774721514.802:17220): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.261634][ T36] audit: type=1400 audit(1774721514.802:17221): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.300271][ T36] audit: type=1400 audit(1774721514.802:17222): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.325427][ T36] audit: type=1400 audit(1774721514.802:17223): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.351787][ T36] audit: type=1400 audit(1774721514.802:17224): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.376831][ T36] audit: type=1400 audit(1774721514.802:17225): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.402592][ T36] audit: type=1400 audit(1774721514.802:17226): avc: denied { ioctl } for pid=3804 comm="syz.2.1017" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.480155][ T309] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 191.500167][ T66] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 191.620529][ T309] usb 3-1: device descriptor read/64, error -71 [ 191.672830][ T66] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 191.699166][ T66] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 191.710290][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.719713][ T66] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.730328][ T66] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.739700][ T66] usb 2-1: Product: syz [ 191.745215][ T66] usb 2-1: Manufacturer: syz [ 191.749919][ T66] usb 2-1: SerialNumber: syz [ 191.756620][ T66] usb 2-1: config 0 descriptor?? [ 191.770546][ T66] hub 2-1:0.0: bad descriptor, ignoring hub [ 191.776577][ T66] hub 2-1:0.0: probe with driver hub failed with error -5 [ 191.784346][ T66] usb 2-1: selecting invalid altsetting 0 [ 191.883006][ T309] usb 3-1: device descriptor read/64, error -71 [ 191.950139][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 191.990640][ T309] usb usb3-port1: attempt power cycle [ 192.080217][ T66] usb 2-1: USB disconnect, device number 94 [ 192.115927][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.141445][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.164436][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 192.184689][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.201226][ T9] usb 6-1: config 0 descriptor?? [ 192.330120][ T309] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 192.353550][ T309] usb 3-1: device descriptor read/8, error -71 [ 192.491510][ T309] usb 3-1: device descriptor read/8, error -71 [ 192.631641][ T9] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 192.639264][ T9] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 192.654978][ T9] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 192.663341][ T9] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 192.690149][ T9] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 192.733065][ T9] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 192.733200][ T309] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 192.806736][ T309] usb 3-1: device descriptor read/8, error -71 [ 192.952600][ T309] usb 3-1: device descriptor read/8, error -71 [ 193.060280][ T309] usb usb3-port1: unable to enumerate USB device [ 193.220172][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 193.372474][ T45] usb 5-1: config 0 has no interfaces? [ 193.378019][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.388124][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.397974][ T45] usb 5-1: config 0 descriptor?? [ 193.612578][ T309] usb 5-1: USB disconnect, device number 19 [ 193.840120][ T45] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 194.020167][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 194.032058][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.060103][ T309] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.075506][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.110117][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 194.111690][ T3871] input: syz1 as /devices/virtual/input/input24 [ 194.119196][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.132613][ T45] usb 3-1: config 0 descriptor?? [ 194.150899][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.161077][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.270227][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.291314][ T309] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 194.310105][ T330] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 194.315868][ T309] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 194.336010][ T309] usb 5-1: string descriptor 0 read error: -22 [ 194.342491][ T309] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 194.352776][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.460112][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 194.474917][ T330] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice= 0.40 [ 194.484624][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.492706][ T330] usb 2-1: Product: syz [ 194.497246][ T330] usb 2-1: Manufacturer: syz [ 194.502083][ T330] usb 2-1: SerialNumber: syz [ 194.569632][ T45] koneplus 0003:1E7D:2D51.0018: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 194.586739][ T309] usb 5-1: Can't get UAC3 power state for id 10 [ 194.764487][ T45] koneplus 0003:1E7D:2D51.0018: couldn't init struct koneplus_device [ 194.777283][ T45] koneplus 0003:1E7D:2D51.0018: couldn't install mouse [ 194.785821][ T45] koneplus 0003:1E7D:2D51.0018: probe with driver koneplus failed with error -71 [ 194.797014][ T45] usb 3-1: USB disconnect, device number 91 [ 195.208053][ T309] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 195.359680][ T3892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3892 comm=syz.2.1045 [ 195.543001][ T3899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1046'. [ 195.700142][ T898] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 195.856068][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.864768][ T898] usb 3-1: Using ep0 maxpacket: 16 [ 195.870412][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.882745][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.894040][ T898] usb 3-1: config 184 has an invalid interface number: 21 but max is 0 [ 195.902395][ T898] usb 3-1: config 184 has no interface number 0 [ 195.908866][ T898] usb 3-1: config 184 interface 21 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 195.920272][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.928333][ T898] usb 3-1: config 184 interface 21 altsetting 11 bulk endpoint 0xE has invalid maxpacket 8 [ 195.938712][ T898] usb 3-1: config 184 interface 21 has no altsetting 0 [ 195.949287][ T898] usb 3-1: New USB device found, idVendor=0789, idProduct=016d, bcdDevice=e4.25 [ 195.959278][ T898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.967400][ T898] usb 3-1: Product: syz [ 195.971707][ T898] usb 3-1: Manufacturer: syz [ 195.976430][ T898] usb 3-1: SerialNumber: syz [ 195.985660][ T3894] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.052508][ T330] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.084396][ T330] usb 2-1: unit 2 not found! [ 196.095952][ T330] usb 2-1: unit 83 not found! [ 196.105491][ T330] usb 2-1: USB disconnect, device number 95 [ 196.197368][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 196.220108][ T36] kauditd_printk_skb: 572 callbacks suppressed [ 196.220129][ T36] audit: type=1400 audit(1774721519.922:17799): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.288292][ T313] usb 5-1: USB disconnect, device number 20 [ 196.339155][ T36] audit: type=1400 audit(1774721519.932:17800): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.404836][ T36] audit: type=1400 audit(1774721519.932:17801): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.434538][ T36] audit: type=1400 audit(1774721520.002:17802): avc: denied { wake_alarm } for pid=3847 comm="syz.4.1031" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.493230][ T36] audit: type=1400 audit(1774721520.042:17803): avc: denied { read write } for pid=3908 comm="syz.1.1050" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.519064][ T36] audit: type=1400 audit(1774721520.042:17804): avc: denied { read write open } for pid=3908 comm="syz.1.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.573767][ T36] audit: type=1400 audit(1774721520.042:17805): avc: denied { ioctl } for pid=3908 comm="syz.1.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.599021][ T36] audit: type=1400 audit(1774721520.052:17806): avc: denied { ioctl } for pid=3908 comm="syz.1.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.609189][ T330] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 196.640188][ T36] audit: type=1400 audit(1774721520.052:17807): avc: denied { ioctl } for pid=3908 comm="syz.1.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.666564][ T36] audit: type=1400 audit(1774721520.052:17808): avc: denied { ioctl } for pid=3908 comm="syz.1.1050" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.793161][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.813536][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.838386][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.861901][ T330] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 196.886134][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.908692][ T330] usb 2-1: config 0 descriptor?? [ 197.135678][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.171134][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.192529][ T330] usb 2-1: string descriptor 0 read error: -71 [ 197.223498][ T330] usb 2-1: USB disconnect, device number 96 [ 197.573188][ T9] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 5: -71 [ 197.585816][ T305] bridge_slave_1: left allmulticast mode [ 197.600908][ T305] bridge_slave_1: left promiscuous mode [ 197.610188][ T9] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense calibration info: -71 [ 197.620005][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.627591][ T9] playstation 0003:054C:0DF2.0017: Failed to get calibration data from DualSense [ 197.637171][ T305] bridge_slave_0: left allmulticast mode [ 197.642917][ T305] bridge_slave_0: left promiscuous mode [ 197.648558][ T9] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 197.656324][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.665062][ T9] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71 [ 197.719374][ T9] usb 6-1: USB disconnect, device number 9 [ 197.817953][ T305] veth1_macvtap: left promiscuous mode [ 197.839374][ T305] veth0_vlan: left promiscuous mode [ 198.366860][ T898] usb 3-1: USB disconnect, device number 92 [ 198.542480][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.549575][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.557386][ T3941] bridge_slave_0: entered allmulticast mode [ 198.563836][ T3941] bridge_slave_0: entered promiscuous mode [ 198.571843][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.579062][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.586187][ T3941] bridge_slave_1: entered allmulticast mode [ 198.592592][ T3941] bridge_slave_1: entered promiscuous mode [ 198.687390][ T9] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 198.718661][ T9] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.730124][ T898] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 198.829967][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.837109][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.861885][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.868990][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.909303][ T898] usb 3-1: config 0 has no interfaces? [ 198.916713][ T898] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.940870][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.970501][ T898] usb 3-1: config 0 descriptor?? [ 199.022698][ T3941] veth0_vlan: entered promiscuous mode [ 199.133569][ T3941] veth1_macvtap: entered promiscuous mode [ 199.162135][ T3963] SELinux: policydb string does not match my string SE Linux [ 199.208868][ T898] usb 3-1: USB disconnect, device number 93 [ 199.220163][ T3963] SELinux: failed to load policy [ 199.248039][ T3961] SELinux: policydb string does not match my string SE Linux [ 199.268909][ T3961] SELinux: failed to load policy [ 199.650318][ T898] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 199.802478][ T898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.812030][ T898] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 199.823471][ T898] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 199.839615][ T898] usb 3-1: string descriptor 0 read error: -22 [ 199.846276][ T898] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 199.855588][ T898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.930137][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 200.070598][ T898] usb 3-1: Can't get UAC3 power state for id 10 [ 200.080142][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 200.088661][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.098462][ T9] usb 5-1: config 2 has an invalid interface number: 15 but max is 0 [ 200.106757][ T9] usb 5-1: config 2 has no interface number 0 [ 200.112980][ T9] usb 5-1: config 2 interface 15 has no altsetting 0 [ 200.123573][ T9] usb 5-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=43.1d [ 200.132693][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.141619][ T9] usb 5-1: Product: syz [ 200.145789][ T9] usb 5-1: Manufacturer: syz [ 200.150413][ T9] usb 5-1: SerialNumber: syz [ 200.370476][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.379155][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.489819][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.507428][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.603444][ T9] usb 5-1: USB disconnect, device number 21 [ 200.731284][ T898] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 201.220892][ T4015] loop6: detected capacity change from 8 to 7 [ 201.231776][ T36] kauditd_printk_skb: 528 callbacks suppressed [ 201.231797][ T36] audit: type=1400 audit(1774721524.952:18337): avc: denied { write } for pid=4014 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.257913][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.268139][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.274102][ T36] audit: type=1400 audit(1774721524.992:18338): avc: denied { read write } for pid=3407 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.277331][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.323016][ T36] audit: type=1400 audit(1774721525.032:18339): avc: denied { read write open } for pid=3407 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.330077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.349431][ T36] audit: type=1400 audit(1774721525.032:18340): avc: denied { ioctl } for pid=3407 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.357248][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.391877][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.394520][ T36] audit: type=1400 audit(1774721525.042:18341): avc: denied { read write } for pid=4008 comm="syz.1.1081" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.401068][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.411598][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.441808][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.459806][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.469029][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.472925][ T36] audit: type=1400 audit(1774721525.042:18342): avc: denied { read write open } for pid=4008 comm="syz.1.1081" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.504450][ T36] audit: type=1400 audit(1774721525.042:18343): avc: denied { ioctl } for pid=4008 comm="syz.1.1081" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.535792][ T36] audit: type=1400 audit(1774721525.112:18344): avc: denied { ioctl } for pid=3945 comm="syz.2.1062" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.561125][ T36] audit: type=1400 audit(1774721525.112:18345): avc: denied { ioctl } for pid=3945 comm="syz.2.1062" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.586545][ T36] audit: type=1400 audit(1774721525.152:18346): avc: denied { name_bind } for pid=4016 comm="syz.4.1084" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 201.609706][ T3946] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1062'. [ 201.710133][ T45] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 201.827963][ T9] usb 3-1: USB disconnect, device number 94 [ 201.873066][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 201.891459][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.919731][ T45] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 201.950779][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.958837][ T45] usb 5-1: Product: syz [ 201.976543][ T45] usb 5-1: Manufacturer: syz [ 201.990121][ T45] usb 5-1: SerialNumber: syz [ 202.098769][ T4028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.108358][ T4028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.210228][ T45] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 202.237385][ T45] usb 5-1: USB disconnect, device number 22 [ 202.317496][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.630118][ T418] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 202.731148][ T66] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 202.788414][ T418] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.814568][ T418] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.830363][ T418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.848800][ T418] usb 2-1: Product: syz [ 202.858915][ T418] usb 2-1: Manufacturer: syz [ 202.869728][ T418] usb 2-1: SerialNumber: syz [ 202.880146][ T66] usb 3-1: device descriptor read/64, error -71 [ 203.130153][ T66] usb 3-1: device descriptor read/64, error -71 [ 203.180175][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 203.309118][ T418] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 203.315902][ T418] cdc_ncm 2-1:1.0: bind() failure [ 203.326571][ T418] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 203.336346][ T418] cdc_ncm 2-1:1.1: bind() failure [ 203.351206][ T418] usb 2-1: USB disconnect, device number 97 [ 203.358903][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.371522][ T66] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 203.388237][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.398884][ T9] usb 6-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 203.420080][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.440398][ T9] usb 6-1: config 0 descriptor?? [ 203.550122][ T66] usb 3-1: device descriptor read/64, error -71 [ 203.656741][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.665607][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.700287][ T418] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 203.773928][ T4062] kvm: kvm [4061]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 203.783281][ T4062] kvm: kvm [4061]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 203.805953][ T4062] kvm: kvm [4061]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xff00 [ 203.814860][ T4062] kvm: kvm [4061]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xff00 [ 203.820134][ T66] usb 3-1: device descriptor read/64, error -71 [ 203.863713][ T418] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.880827][ T418] usb 2-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 203.899343][ T418] usb 2-1: config 136 has 3 interfaces, different from the descriptor's value: 14 [ 203.900800][ T9] hid (null): unknown global tag 0xe [ 203.915345][ T9] hid (null): invalid report_count 365626498 [ 203.919161][ T418] usb 2-1: config 136 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 203.944930][ T66] usb usb3-port1: attempt power cycle [ 203.951382][ T418] usb 2-1: too many endpoints for config 136 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 203.980125][ T418] usb 2-1: config 136 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 203.997971][ T418] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 204.007776][ T418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.016485][ T418] usb 2-1: Product: syz [ 204.021044][ T418] usb 2-1: Manufacturer: syz [ 204.025778][ T418] usb 2-1: SerialNumber: syz [ 204.102500][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.111440][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.122196][ T9] usb 6-1: string descriptor 0 read error: -71 [ 204.136537][ T9] uclogic 0003:5543:0045.001A: failed retrieving string descriptor #200: -71 [ 204.140106][ T45] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 204.146087][ T9] uclogic 0003:5543:0045.001A: failed retrieving pen parameters: -71 [ 204.161342][ T9] uclogic 0003:5543:0045.001A: failed probing pen v2 parameters: -71 [ 204.170112][ T9] uclogic 0003:5543:0045.001A: failed probing parameters: -71 [ 204.177679][ T9] uclogic 0003:5543:0045.001A: probe with driver uclogic failed with error -71 [ 204.190104][ T9] usb 6-1: USB disconnect, device number 10 [ 204.243552][ T418] snd-usb-audio 2-1:136.0: probe with driver snd-usb-audio failed with error -22 [ 204.260575][ T418] snd-usb-audio 2-1:136.1: probe with driver snd-usb-audio failed with error -22 [ 204.279277][ T418] snd-usb-audio 2-1:136.2: probe with driver snd-usb-audio failed with error -22 [ 204.298901][ T418] usb 2-1: USB disconnect, device number 98 [ 204.312953][ T45] usb 5-1: config 0 has no interfaces? [ 204.324148][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.325668][ T66] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 204.334482][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.360430][ T45] usb 5-1: config 0 descriptor?? [ 204.389554][ T1019] udevd[1019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:136.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.417236][ T66] usb 3-1: device descriptor read/8, error -71 [ 204.552365][ T66] usb 3-1: device descriptor read/8, error -71 [ 204.577157][ T418] usb 5-1: USB disconnect, device number 23 [ 204.791437][ T66] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 204.835033][ T66] usb 3-1: device descriptor read/8, error -71 [ 204.873727][ T4071] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 204.920137][ T45] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 204.972539][ T66] usb 3-1: device descriptor read/8, error -71 [ 205.030106][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 205.080115][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 205.080717][ T66] usb usb3-port1: unable to enumerate USB device [ 205.089089][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.101465][ T45] usb 6-1: config 8 has an invalid descriptor of length 73, skipping remainder of the config [ 205.112038][ T45] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 205.123969][ T45] usb 6-1: New USB device found, idVendor=237d, idProduct=2688, bcdDevice=84.89 [ 205.133431][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.141950][ T45] usb 6-1: Product: syz [ 205.146132][ T45] usb 6-1: Manufacturer: syz [ 205.150752][ T45] usb 6-1: SerialNumber: syz [ 205.193191][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.202844][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 205.213843][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 205.230578][ T9] usb 5-1: string descriptor 0 read error: -22 [ 205.236837][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 205.246053][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.424188][ T4078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.424227][ T4078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 205.461105][ T9] usb 5-1: Can't get UAC3 power state for id 10 [ 206.096468][ T9] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 206.246125][ T36] kauditd_printk_skb: 580 callbacks suppressed [ 206.246147][ T36] audit: type=1400 audit(1774721530.964:18927): avc: denied { read write } for pid=4095 comm="syz.1.1109" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.293903][ T36] audit: type=1400 audit(1774721530.964:18928): avc: denied { read write open } for pid=4095 comm="syz.1.1109" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.350102][ T36] audit: type=1400 audit(1774721530.964:18929): avc: denied { ioctl } for pid=4095 comm="syz.1.1109" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.424809][ T36] audit: type=1400 audit(1774721530.974:18930): avc: denied { read write } for pid=4095 comm="syz.1.1109" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.480372][ T36] audit: type=1400 audit(1774721530.974:18931): avc: denied { read write open } for pid=4095 comm="syz.1.1109" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.548691][ T36] audit: type=1400 audit(1774721530.974:18932): avc: denied { ioctl } for pid=4095 comm="syz.1.1109" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.620177][ T36] audit: type=1400 audit(1774721530.974:18933): avc: denied { setopt } for pid=4095 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.650252][ T36] audit: type=1400 audit(1774721531.014:18934): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.675339][ T36] audit: type=1400 audit(1774721531.014:18935): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.701706][ T36] audit: type=1400 audit(1774721531.014:18936): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.821142][ T4110] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 207.166026][ T9] usb 5-1: USB disconnect, device number 24 [ 207.705163][ T45] usb 6-1: USB disconnect, device number 11 [ 207.835068][ T4133] tipc: Started in network mode [ 207.859498][ T4133] tipc: Node identity e27782ff5505, cluster identity 4711 [ 207.866854][ T4133] tipc: Enabled bearer , priority 0 [ 207.875820][ T4135] rust_binder: 24: no such ref 2 [ 207.893607][ T4135] rust_binder: Write failure EFAULT in pid:24 [ 207.941293][ T4133] syzkaller0: entered promiscuous mode [ 207.960108][ T4133] syzkaller0: entered allmulticast mode [ 207.967143][ T4133] tipc: Resetting bearer [ 207.988787][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.997770][ T4133] netlink: 'syz.2.1122': attribute type 22 has an invalid length. [ 208.008955][ T4130] tipc: Resetting bearer [ 208.036886][ T4130] tipc: Disabling bearer [ 208.100144][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 208.265082][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.286778][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.308154][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 208.324890][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.341570][ T9] usb 5-1: config 0 descriptor?? [ 208.550171][ T898] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 208.702629][ T898] usb 3-1: config 0 has no interfaces? [ 208.708158][ T898] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.710118][ T330] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 208.717794][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.734790][ T898] usb 3-1: config 0 descriptor?? [ 208.758487][ T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 208.770135][ T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 208.777750][ T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 208.786095][ T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 208.794137][ T9] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 208.802884][ T9] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 208.873447][ T330] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.890030][ T330] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.40 [ 208.899386][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.907867][ T330] usb 2-1: Product: á°Š [ 208.912327][ T330] usb 2-1: Manufacturer: 髧墺皼欦岉뜬꿖ê™âŒ®ï­§å¸›éƒ§ïª¢æ…ªé€å½±â²ç¬¢è„㷦ϩꥨ濕ã¡ë±¬âº³ã¾‘貇ᴲꇟࡅ㱈櫉뒻â¦ï¤“咦㥎ﴚȥë›ëží‹Žã² è»‡è¬çŽªë››ì²®æ²’鎷ᗹ邼é¾à¦£ã£—﹃㋶㬯삿࣯䞭ãžî뾮愷á°è›°ã®®á«•å…Ÿë£–ី帄易鯀ç­ç‡ˆîº’ï†ç¼‰ìŸŒâ’°æŸ¯å”ˆâˆ±â¹¬è²‚꼒氉¡䇒熆ꬭ [ 208.941687][ T330] usb 2-1: SerialNumber: í’‡Îᤫ⥼跷梹ḳ豹í®ì´³ê™â˜¶ã»¥ä¹¦ìŸ½ë”¾ã­¼í’»å•…é¾”ó¸¯ã¡ìº—ﰿ挪᫑譽䧎ൻîœéƒ¢ã‰“ã»á³»ç‡»ç‹—洯赹յȡ䅱Ԃ삳䂳à¸æ¡¦â ªèž¬Ü⎕Ƅ㗴å¦ç™½ã–‹å¶¯ë¼¢î™¤äŠ”ᕦⰠ撪꽉驣⡯찒⾈趾畧奠떚㣼â­ã³Žê‰³è¢…茞宀緺çªê»¢äª¦î±™é‚´â¬ƒ [ 208.976966][ T898] usb 3-1: USB disconnect, device number 99 [ 209.178222][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.188998][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.202499][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.211275][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.221424][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.230016][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.242352][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.250909][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.277395][ T330] usbhid 2-1:1.0: can't add hid device: -71 [ 209.283498][ T330] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 209.300282][ T330] usb 2-1: USB disconnect, device number 99 [ 209.370979][ T9] playstation 0003:054C:0DF2.001B: Invalid gyro calibration data for axis (3), disabling calibration. [ 209.382902][ T9] playstation 0003:054C:0DF2.001B: Invalid gyro calibration data for axis (4), disabling calibration. [ 209.394146][ T9] playstation 0003:054C:0DF2.001B: Invalid gyro calibration data for axis (5), disabling calibration. [ 209.405392][ T9] playstation 0003:054C:0DF2.001B: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 209.417204][ T9] playstation 0003:054C:0DF2.001B: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 209.429128][ T9] playstation 0003:054C:0DF2.001B: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 209.441878][ T9] input: HID 054c:0df2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.001B/input/input27 [ 209.460090][ T898] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 209.460703][ T9] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.001B/input/input28 [ 209.486907][ T9] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.001B/input/input29 [ 209.550113][ T9] playstation 0003:054C:0DF2.001B: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c [ 209.585257][ T4132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.610426][ T4132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.634014][ T898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.649932][ T898] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 209.673587][ T309] usb 5-1: USB disconnect, device number 25 [ 209.699165][ T898] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 209.752095][ T898] usb 3-1: string descriptor 0 read error: -22 [ 209.758538][ T898] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 209.768307][ T898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.995757][ T898] usb 3-1: Can't get UAC3 power state for id 10 [ 210.000330][ T4166] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 210.017983][ T4166] tmpfs: Unknown parameter 'nr_iîodes/žˆý¦!–Ù-r|Z£Ñ·' [ 210.020983][ T895] Bluetooth: hci0: command 0x1003 tx timeout [ 210.027925][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.088871][ T898] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 210.112458][ T898] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 210.136134][ T898] usb 3-1: USB disconnect, device number 100 [ 210.224596][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 210.380130][ T66] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 210.530171][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 210.538194][ T66] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.554850][ T66] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 210.570100][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.578235][ T66] usb 5-1: Product: syz [ 210.583865][ T66] usb 5-1: Manufacturer: syz [ 210.588501][ T66] usb 5-1: SerialNumber: syz [ 210.640190][ T4175] 9pnet_fd: Insufficient options for proto=fd [ 210.815907][ T66] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 210.844953][ T66] usb 5-1: found format II with max.bitrate = 5, frame size=11 [ 210.864576][ T66] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 210.885606][ T66] usb 5-1: USB disconnect, device number 26 [ 210.896974][ T4187] FAULT_INJECTION: forcing a failure. [ 210.896974][ T4187] name failslab, interval 1, probability 0, space 0, times 0 [ 210.942177][ T4187] CPU: 0 UID: 0 PID: 4187 Comm: syz.5.1138 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 210.942215][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.942229][ T4187] Call Trace: [ 210.942236][ T4187] [ 210.942245][ T4187] __dump_stack+0x21/0x30 [ 210.942278][ T4187] dump_stack_lvl+0x140/0x1c0 [ 210.942306][ T4187] ? __cfi_dump_stack_lvl+0x10/0x10 [ 210.942333][ T4187] ? __cfi_avc_has_perm+0x10/0x10 [ 210.942362][ T4187] ? avc_perm_nonode+0x118/0x1d0 [ 210.942389][ T4187] dump_stack+0x19/0x20 [ 210.942413][ T4187] should_fail_ex+0x3d7/0x530 [ 210.942440][ T4187] should_failslab+0xac/0x100 [ 210.942462][ T4187] __kmalloc_cache_noprof+0x41/0x470 [ 210.942492][ T4187] ? vhost_task_create+0x12c/0x400 [ 210.942513][ T4187] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 210.942538][ T4187] vhost_task_create+0x12c/0x400 [ 210.942557][ T4187] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 210.942582][ T4187] ? __cfi_vhost_task_create+0x10/0x10 [ 210.942602][ T4187] ? __cfi_vhost_task_fn+0x10/0x10 [ 210.942621][ T4187] ? __kasan_check_write+0x18/0x20 [ 210.942648][ T4187] ? mutex_lock+0x97/0x1d0 [ 210.942667][ T4187] ? __cfi_mutex_lock+0x10/0x10 [ 210.942686][ T4187] ? kernel_text_address+0xa9/0xe0 [ 210.942711][ T4187] kvm_mmu_post_init_vm+0x161/0x300 [ 210.942740][ T4187] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 210.942768][ T4187] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 210.942796][ T4187] ? kstrtoull+0x13b/0x1e0 [ 210.942820][ T4187] ? kstrtouint+0x78/0xf0 [ 210.942844][ T4187] ? ioctl_has_perm+0x1bc/0x500 [ 210.942880][ T4187] ? __asan_memcpy+0x5a/0x80 [ 210.942908][ T4187] ? ioctl_has_perm+0x408/0x500 [ 210.942934][ T4187] ? has_cap_mac_admin+0xd0/0xd0 [ 210.942960][ T4187] ? __kasan_check_write+0x18/0x20 [ 210.942987][ T4187] ? mutex_lock_killable+0x97/0x1d0 [ 210.943010][ T4187] ? __cfi_mutex_lock_killable+0x10/0x10 [ 210.943032][ T4187] ? proc_fail_nth_write+0x184/0x220 [ 210.943059][ T4187] kvm_vcpu_ioctl+0xa48/0x1000 [ 210.943090][ T4187] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 210.943121][ T4187] ? __cfi_vfs_write+0x10/0x10 [ 210.943148][ T4187] ? __kasan_check_write+0x18/0x20 [ 210.943174][ T4187] ? mutex_unlock+0x90/0x240 [ 210.943200][ T4187] ? __cfi_mutex_unlock+0x10/0x10 [ 210.943220][ T4187] ? __fget_files+0x2c5/0x340 [ 210.943241][ T4187] ? __fget_files+0x2c5/0x340 [ 210.943261][ T4187] ? bpf_lsm_file_ioctl+0xd/0x20 [ 210.943282][ T4187] ? security_file_ioctl+0x3e/0x110 [ 210.943304][ T4187] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 210.943331][ T4187] __se_sys_ioctl+0x132/0x1b0 [ 210.943350][ T4187] __x64_sys_ioctl+0x7f/0xa0 [ 210.943368][ T4187] x64_sys_call+0x1878/0x2ee0 [ 210.943396][ T4187] do_syscall_64+0x57/0xf0 [ 210.943423][ T4187] ? clear_bhb_loop+0x50/0xa0 [ 210.943453][ T4187] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.943481][ T4187] RIP: 0033:0x7fcfad39c819 [ 210.943501][ T4187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.943519][ T4187] RSP: 002b:00007fcfae2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.943545][ T4187] RAX: ffffffffffffffda RBX: 00007fcfad616090 RCX: 00007fcfad39c819 [ 210.943562][ T4187] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 210.943576][ T4187] RBP: 00007fcfae2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 210.943591][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.943604][ T4187] R13: 00007fcfad616128 R14: 00007fcfad616090 R15: 00007ffd60ed8918 [ 210.943622][ T4187] [ 211.368905][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 211.432718][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 211.432738][ T36] audit: type=1400 audit(1774721536.154:19431): avc: denied { read write } for pid=3941 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.516775][ T36] audit: type=1400 audit(1774721536.184:19432): avc: denied { read write open } for pid=3941 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.596002][ T36] audit: type=1400 audit(1774721536.184:19433): avc: denied { ioctl } for pid=3941 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.693044][ T36] audit: type=1400 audit(1774721536.204:19434): avc: denied { read write } for pid=4185 comm="syz.1.1139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.718292][ T36] audit: type=1400 audit(1774721536.204:19435): avc: denied { read write open } for pid=4185 comm="syz.1.1139" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.743634][ T36] audit: type=1400 audit(1774721536.204:19436): avc: denied { ioctl } for pid=4185 comm="syz.1.1139" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.777271][ T36] audit: type=1400 audit(1774721536.264:19437): avc: denied { create } for pid=4191 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.798016][ T36] audit: type=1400 audit(1774721536.264:19438): avc: denied { create } for pid=4191 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.822426][ T36] audit: type=1400 audit(1774721536.264:19439): avc: denied { write } for pid=4191 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.861608][ T36] audit: type=1400 audit(1774721536.264:19440): avc: denied { write } for pid=4191 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.950165][ T309] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 211.980104][ T898] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.060120][ T573] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 212.103882][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.116293][ T309] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 212.125693][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.134145][ T309] usb 5-1: Product: syz [ 212.138490][ T309] usb 5-1: Manufacturer: syz [ 212.143179][ T309] usb 5-1: SerialNumber: syz [ 212.210097][ T573] usb 2-1: Using ep0 maxpacket: 32 [ 212.218309][ T573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 212.229839][ T573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25429, setting to 1024 [ 212.241307][ T573] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 212.250486][ T573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.260611][ T573] usb 2-1: config 0 descriptor?? [ 212.363277][ T309] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 212.390816][ T309] usb 5-1: USB disconnect, device number 27 [ 212.449761][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.681454][ T573] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x7 [ 212.698686][ T573] koneplus 0003:1E7D:2D51.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 212.902796][ T573] koneplus 0003:1E7D:2D51.001C: couldn't init struct koneplus_device [ 212.913832][ T4213] input: syz1 as /devices/virtual/input/input30 [ 212.920344][ T573] koneplus 0003:1E7D:2D51.001C: couldn't install mouse [ 212.946847][ T573] koneplus 0003:1E7D:2D51.001C: probe with driver koneplus failed with error -32 [ 213.140120][ T898] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 213.293293][ T898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 213.316060][ T898] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 213.328961][ T898] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 213.365055][ T898] usb 6-1: string descriptor 0 read error: -22 [ 213.371366][ T898] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 213.381871][ T898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.561542][ T4222] FAULT_INJECTION: forcing a failure. [ 213.561542][ T4222] name failslab, interval 1, probability 0, space 0, times 0 [ 213.574580][ T4222] CPU: 0 UID: 0 PID: 4222 Comm: syz.1.1148 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 213.574617][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.574631][ T4222] Call Trace: [ 213.574638][ T4222] [ 213.574647][ T4222] __dump_stack+0x21/0x30 [ 213.574679][ T4222] dump_stack_lvl+0x140/0x1c0 [ 213.574706][ T4222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 213.574736][ T4222] dump_stack+0x19/0x20 [ 213.574761][ T4222] should_fail_ex+0x3d7/0x530 [ 213.574787][ T4222] should_failslab+0xac/0x100 [ 213.574809][ T4222] kmem_cache_alloc_node_noprof+0x45/0x420 [ 213.574840][ T4222] ? dup_task_struct+0xc1/0xd80 [ 213.574864][ T4222] ? kasan_save_alloc_info+0x40/0x50 [ 213.574900][ T4222] ? __kasan_kmalloc+0x96/0xb0 [ 213.574918][ T4222] ? __kmalloc_cache_noprof+0x23c/0x470 [ 213.574948][ T4222] dup_task_struct+0xc1/0xd80 [ 213.574972][ T4222] ? __kasan_check_write+0x18/0x20 [ 213.575000][ T4222] ? _raw_spin_lock_irq+0x93/0x120 [ 213.575029][ T4222] ? copy_process+0x32a0/0x32a0 [ 213.575052][ T4222] ? __kasan_check_write+0x18/0x20 [ 213.575080][ T4222] copy_process+0x55a/0x32a0 [ 213.575106][ T4222] ? __cfi_copy_process+0x10/0x10 [ 213.575130][ T4222] ? __kmalloc_cache_noprof+0x23c/0x470 [ 213.575161][ T4222] ? __kasan_check_write+0x18/0x20 [ 213.575186][ T4222] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 213.575211][ T4222] vhost_task_create+0x1f7/0x400 [ 213.575231][ T4222] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 213.575255][ T4222] ? __cfi_vhost_task_create+0x10/0x10 [ 213.575277][ T4222] ? __cfi_vhost_task_fn+0x10/0x10 [ 213.575297][ T4222] ? __kasan_check_write+0x18/0x20 [ 213.575322][ T4222] ? mutex_lock+0x97/0x1d0 [ 213.575343][ T4222] ? __cfi_mutex_lock+0x10/0x10 [ 213.575364][ T4222] ? kernel_text_address+0xa9/0xe0 [ 213.575392][ T4222] kvm_mmu_post_init_vm+0x161/0x300 [ 213.575420][ T4222] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 213.575447][ T4222] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 213.575474][ T4222] ? kstrtoull+0x13b/0x1e0 [ 213.575499][ T4222] ? kstrtouint+0x78/0xf0 [ 213.575528][ T4222] ? ioctl_has_perm+0x1bc/0x500 [ 213.575554][ T4222] ? __asan_memcpy+0x5a/0x80 [ 213.575581][ T4222] ? ioctl_has_perm+0x408/0x500 [ 213.575606][ T4222] ? has_cap_mac_admin+0xd0/0xd0 [ 213.575631][ T4222] ? __kasan_check_write+0x18/0x20 [ 213.575658][ T4222] ? mutex_lock_killable+0x97/0x1d0 [ 213.575680][ T4222] ? __cfi_mutex_lock_killable+0x10/0x10 [ 213.575703][ T4222] ? proc_fail_nth_write+0x184/0x220 [ 213.575728][ T4222] kvm_vcpu_ioctl+0xa48/0x1000 [ 213.575759][ T4222] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 213.575789][ T4222] ? __cfi_vfs_write+0x10/0x10 [ 213.575817][ T4222] ? __kasan_check_write+0x18/0x20 [ 213.575843][ T4222] ? mutex_unlock+0x90/0x240 [ 213.575863][ T4222] ? __cfi_mutex_unlock+0x10/0x10 [ 213.575892][ T4222] ? __fget_files+0x2c5/0x340 [ 213.575914][ T4222] ? __fget_files+0x2c5/0x340 [ 213.575935][ T4222] ? bpf_lsm_file_ioctl+0xd/0x20 [ 213.575959][ T4222] ? security_file_ioctl+0x3e/0x110 [ 213.575983][ T4222] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 213.576011][ T4222] __se_sys_ioctl+0x132/0x1b0 [ 213.576031][ T4222] __x64_sys_ioctl+0x7f/0xa0 [ 213.576051][ T4222] x64_sys_call+0x1878/0x2ee0 [ 213.576081][ T4222] do_syscall_64+0x57/0xf0 [ 213.576126][ T4222] ? clear_bhb_loop+0x50/0xa0 [ 213.576156][ T4222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.576185][ T4222] RIP: 0033:0x7fd91959c819 [ 213.576204][ T4222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.576222][ T4222] RSP: 002b:00007fd91a4d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.576247][ T4222] RAX: ffffffffffffffda RBX: 00007fd919816090 RCX: 00007fd91959c819 [ 213.576264][ T4222] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 213.576277][ T4222] RBP: 00007fd91a4d4090 R08: 0000000000000000 R09: 0000000000000000 [ 213.576292][ T4222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.576305][ T4222] R13: 00007fd919816128 R14: 00007fd919816090 R15: 00007ffee84bc778 [ 213.576324][ T4222] [ 213.615077][ T898] usb 6-1: Can't get UAC3 power state for id 10 [ 213.993678][ T898] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 214.003496][ T898] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 214.017299][ T898] usb 6-1: USB disconnect, device number 13 [ 214.092879][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.090139][ T898] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 215.170114][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 215.250849][ T898] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.279048][ T898] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.288742][ T898] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 215.296811][ T898] usb 6-1: Product: syz [ 215.301210][ T898] usb 6-1: SerialNumber: syz [ 215.330180][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 215.338359][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.349598][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.358815][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.369196][ T9] usb 3-1: config 0 descriptor?? [ 215.470155][ T66] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 215.584282][ T418] usb 3-1: USB disconnect, device number 101 [ 215.623290][ T66] usb 5-1: config 0 has no interfaces? [ 215.628829][ T66] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.638002][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.647749][ T66] usb 5-1: config 0 descriptor?? [ 215.827018][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.835675][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.859258][ T418] usb 5-1: USB disconnect, device number 28 [ 216.130604][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.139223][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.300117][ T66] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 216.372116][ T898] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 216.378608][ T898] cdc_ncm 6-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 216.392330][ T898] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 216.451375][ T36] kauditd_printk_skb: 459 callbacks suppressed [ 216.451391][ T36] audit: type=1400 audit(1774721541.174:19900): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.454201][ T66] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.458163][ T36] audit: type=1400 audit(1774721541.174:19901): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.485217][ T66] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 216.493008][ T36] audit: type=1400 audit(1774721541.174:19902): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.517280][ T66] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 216.531282][ T36] audit: type=1400 audit(1774721541.174:19903): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.559301][ T66] usb 5-1: string descriptor 0 read error: -22 [ 216.604502][ T898] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 216.613776][ T66] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 216.626291][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.630097][ T36] audit: type=1400 audit(1774721541.174:19904): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.662944][ T898] usb 6-1: USB disconnect, device number 14 [ 216.669426][ T898] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 216.678909][ T36] audit: type=1400 audit(1774721541.174:19905): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.713195][ T36] audit: type=1400 audit(1774721541.174:19906): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.756110][ T4288] 9pnet_fd: Insufficient options for proto=fd [ 216.825849][ T36] audit: type=1400 audit(1774721541.204:19907): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.894584][ T36] audit: type=1400 audit(1774721541.204:19908): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.902174][ T66] usb 5-1: Can't get UAC3 power state for id 10 [ 216.937663][ T36] audit: type=1400 audit(1774721541.204:19909): avc: denied { ioctl } for pid=4265 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.214837][ T4302] FAULT_INJECTION: forcing a failure. [ 217.214837][ T4302] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 217.228626][ T4302] CPU: 1 UID: 0 PID: 4302 Comm: syz.5.1172 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 217.228664][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.228679][ T4302] Call Trace: [ 217.228686][ T4302] [ 217.228695][ T4302] __dump_stack+0x21/0x30 [ 217.228727][ T4302] dump_stack_lvl+0x140/0x1c0 [ 217.228752][ T4302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.228781][ T4302] dump_stack+0x19/0x20 [ 217.228806][ T4302] should_fail_ex+0x3d7/0x530 [ 217.228833][ T4302] should_fail_alloc_page+0xec/0x110 [ 217.228857][ T4302] __alloc_pages_noprof+0x1c0/0x7e0 [ 217.228881][ T4302] ? kernel_text_address+0xa9/0xe0 [ 217.228918][ T4302] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 217.228944][ T4302] ? unwind_get_return_address+0x51/0x90 [ 217.228969][ T4302] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 217.228996][ T4302] get_free_pages_noprof+0x14/0x40 [ 217.229021][ T4302] kasan_populate_vmalloc_pte+0x4c/0x170 [ 217.229051][ T4302] __apply_to_page_range+0x7c5/0xd00 [ 217.229084][ T4302] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 217.229114][ T4302] ? do_syscall_64+0x57/0xf0 [ 217.229143][ T4302] ? apply_to_page_range+0x60/0x60 [ 217.229172][ T4302] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 217.229202][ T4302] apply_to_page_range+0x3f/0x60 [ 217.229231][ T4302] kasan_populate_vmalloc+0x64/0x80 [ 217.229259][ T4302] alloc_vmap_area+0x1e6a/0x26c0 [ 217.229286][ T4302] ? kasan_save_alloc_info+0x40/0x50 [ 217.229311][ T4302] ? __kasan_kmalloc+0x96/0xb0 [ 217.229331][ T4302] ? vm_map_ram+0xdc0/0xdc0 [ 217.229356][ T4302] __get_vm_area_node+0x201/0x3d0 [ 217.229381][ T4302] __vmalloc_node_range_noprof+0x30e/0x1480 [ 217.229408][ T4302] ? copy_process+0x55a/0x32a0 [ 217.229436][ T4302] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 217.229462][ T4302] ? kasan_save_alloc_info+0x40/0x50 [ 217.229487][ T4302] ? __kasan_slab_alloc+0x73/0x90 [ 217.229508][ T4302] ? arch_dup_task_struct+0x5b/0xe0 [ 217.229536][ T4302] ? __asan_memcpy+0x5a/0x80 [ 217.229564][ T4302] dup_task_struct+0x5d6/0xd80 [ 217.229587][ T4302] ? copy_process+0x55a/0x32a0 [ 217.229617][ T4302] ? _raw_spin_lock_irq+0x93/0x120 [ 217.229645][ T4302] ? copy_process+0x32a0/0x32a0 [ 217.229668][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.229696][ T4302] copy_process+0x55a/0x32a0 [ 217.229721][ T4302] ? __cfi_copy_process+0x10/0x10 [ 217.229744][ T4302] ? __kmalloc_cache_noprof+0x23c/0x470 [ 217.229775][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.229803][ T4302] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 217.229827][ T4302] vhost_task_create+0x1f7/0x400 [ 217.229847][ T4302] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 217.229870][ T4302] ? __cfi_vhost_task_create+0x10/0x10 [ 217.229892][ T4302] ? __cfi_vhost_task_fn+0x10/0x10 [ 217.229919][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.229946][ T4302] ? mutex_lock+0x97/0x1d0 [ 217.229967][ T4302] ? __cfi_mutex_lock+0x10/0x10 [ 217.229987][ T4302] ? kernel_text_address+0xa9/0xe0 [ 217.230012][ T4302] kvm_mmu_post_init_vm+0x161/0x300 [ 217.230039][ T4302] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 217.230067][ T4302] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 217.230094][ T4302] ? kstrtoull+0x13b/0x1e0 [ 217.230118][ T4302] ? kstrtouint+0x78/0xf0 [ 217.230140][ T4302] ? ioctl_has_perm+0x1bc/0x500 [ 217.230165][ T4302] ? __asan_memcpy+0x5a/0x80 [ 217.230193][ T4302] ? ioctl_has_perm+0x408/0x500 [ 217.230218][ T4302] ? has_cap_mac_admin+0xd0/0xd0 [ 217.230243][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.230270][ T4302] ? mutex_lock_killable+0x97/0x1d0 [ 217.230292][ T4302] ? __cfi_mutex_lock_killable+0x10/0x10 [ 217.230314][ T4302] ? proc_fail_nth_write+0x184/0x220 [ 217.230340][ T4302] kvm_vcpu_ioctl+0xa48/0x1000 [ 217.230371][ T4302] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 217.230400][ T4302] ? __cfi_vfs_write+0x10/0x10 [ 217.230427][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.230455][ T4302] ? mutex_unlock+0x90/0x240 [ 217.230476][ T4302] ? __cfi_mutex_unlock+0x10/0x10 [ 217.230496][ T4302] ? __fget_files+0x2c5/0x340 [ 217.230518][ T4302] ? __fget_files+0x2c5/0x340 [ 217.230537][ T4302] ? bpf_lsm_file_ioctl+0xd/0x20 [ 217.230558][ T4302] ? security_file_ioctl+0x3e/0x110 [ 217.230583][ T4302] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 217.230612][ T4302] __se_sys_ioctl+0x132/0x1b0 [ 217.230655][ T4302] __x64_sys_ioctl+0x7f/0xa0 [ 217.230675][ T4302] x64_sys_call+0x1878/0x2ee0 [ 217.230703][ T4302] do_syscall_64+0x57/0xf0 [ 217.230731][ T4302] ? clear_bhb_loop+0x50/0xa0 [ 217.230761][ T4302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 217.230789][ T4302] RIP: 0033:0x7fcfad39c819 [ 217.230809][ T4302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.230827][ T4302] RSP: 002b:00007fcfae2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.230852][ T4302] RAX: ffffffffffffffda RBX: 00007fcfad616090 RCX: 00007fcfad39c819 [ 217.230870][ T4302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 217.230885][ T4302] RBP: 00007fcfae2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 217.230908][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.230923][ T4302] R13: 00007fcfad616128 R14: 00007fcfad616090 R15: 00007ffd60ed8918 [ 217.230942][ T4302] [ 217.552735][ T66] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 217.556470][ T4302] syz.5.1172: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 217.737076][ T4304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.777168][ T4302] ,cpuset=syz5,mems_allowed=0 [ 217.783096][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.5.1172 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 217.783130][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.783142][ T4302] Call Trace: [ 217.783150][ T4302] [ 217.783157][ T4302] __dump_stack+0x21/0x30 [ 217.783193][ T4302] dump_stack_lvl+0x140/0x1c0 [ 217.783216][ T4302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.783242][ T4302] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 217.783270][ T4302] dump_stack+0x19/0x20 [ 217.783292][ T4302] warn_alloc+0x1e7/0x2c0 [ 217.783314][ T4302] ? kasan_save_track+0x3e/0x80 [ 217.783341][ T4302] ? __cfi_warn_alloc+0x10/0x10 [ 217.783361][ T4302] ? kfree+0x158/0x440 [ 217.783386][ T4302] ? __get_vm_area_node+0x21a/0x3d0 [ 217.783409][ T4302] __vmalloc_node_range_noprof+0x333/0x1480 [ 217.783436][ T4302] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 217.783460][ T4302] ? kasan_save_alloc_info+0x40/0x50 [ 217.783483][ T4302] ? __kasan_slab_alloc+0x73/0x90 [ 217.783501][ T4302] ? arch_dup_task_struct+0x5b/0xe0 [ 217.783527][ T4302] ? __asan_memcpy+0x5a/0x80 [ 217.783552][ T4302] dup_task_struct+0x5d6/0xd80 [ 217.783574][ T4302] ? copy_process+0x55a/0x32a0 [ 217.783595][ T4302] ? _raw_spin_lock_irq+0x93/0x120 [ 217.783619][ T4302] ? copy_process+0x32a0/0x32a0 [ 217.783640][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.783666][ T4302] copy_process+0x55a/0x32a0 [ 217.783689][ T4302] ? __cfi_copy_process+0x10/0x10 [ 217.783709][ T4302] ? __kmalloc_cache_noprof+0x23c/0x470 [ 217.783735][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.783760][ T4302] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 217.783781][ T4302] vhost_task_create+0x1f7/0x400 [ 217.783799][ T4302] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 217.783821][ T4302] ? __cfi_vhost_task_create+0x10/0x10 [ 217.783840][ T4302] ? __cfi_vhost_task_fn+0x10/0x10 [ 217.783866][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.783916][ T4302] ? mutex_lock+0x97/0x1d0 [ 217.783935][ T4302] ? __cfi_mutex_lock+0x10/0x10 [ 217.783953][ T4302] ? kernel_text_address+0xa9/0xe0 [ 217.783978][ T4302] kvm_mmu_post_init_vm+0x161/0x300 [ 217.784003][ T4302] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 217.784027][ T4302] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 217.784051][ T4302] ? kstrtoull+0x13b/0x1e0 [ 217.784073][ T4302] ? kstrtouint+0x78/0xf0 [ 217.784094][ T4302] ? ioctl_has_perm+0x1bc/0x500 [ 217.784117][ T4302] ? __asan_memcpy+0x5a/0x80 [ 217.784142][ T4302] ? ioctl_has_perm+0x408/0x500 [ 217.784165][ T4302] ? has_cap_mac_admin+0xd0/0xd0 [ 217.784187][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.784211][ T4302] ? mutex_lock_killable+0x97/0x1d0 [ 217.784231][ T4302] ? __cfi_mutex_lock_killable+0x10/0x10 [ 217.784251][ T4302] ? proc_fail_nth_write+0x184/0x220 [ 217.784274][ T4302] kvm_vcpu_ioctl+0xa48/0x1000 [ 217.784302][ T4302] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 217.784329][ T4302] ? __cfi_vfs_write+0x10/0x10 [ 217.784354][ T4302] ? __kasan_check_write+0x18/0x20 [ 217.784379][ T4302] ? mutex_unlock+0x90/0x240 [ 217.784396][ T4302] ? __cfi_mutex_unlock+0x10/0x10 [ 217.784415][ T4302] ? __fget_files+0x2c5/0x340 [ 217.784434][ T4302] ? __fget_files+0x2c5/0x340 [ 217.784452][ T4302] ? bpf_lsm_file_ioctl+0xd/0x20 [ 217.784472][ T4302] ? security_file_ioctl+0x3e/0x110 [ 217.784495][ T4302] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 217.784521][ T4302] __se_sys_ioctl+0x132/0x1b0 [ 217.784540][ T4302] __x64_sys_ioctl+0x7f/0xa0 [ 217.784557][ T4302] x64_sys_call+0x1878/0x2ee0 [ 217.784584][ T4302] do_syscall_64+0x57/0xf0 [ 217.784609][ T4302] ? clear_bhb_loop+0x50/0xa0 [ 217.784636][ T4302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 217.784661][ T4302] RIP: 0033:0x7fcfad39c819 [ 217.784679][ T4302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.784697][ T4302] RSP: 002b:00007fcfae2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.784720][ T4302] RAX: ffffffffffffffda RBX: 00007fcfad616090 RCX: 00007fcfad39c819 [ 217.784735][ T4302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 217.784749][ T4302] RBP: 00007fcfae2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 217.784762][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.784775][ T4302] R13: 00007fcfad616128 R14: 00007fcfad616090 R15: 00007ffd60ed8918 [ 217.784792][ T4302] [ 217.785047][ T4302] Mem-Info: [ 217.790145][ T4304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.814320][ T4302] active_anon:30304 inactive_anon:27 isolated_anon:0 [ 217.814320][ T4302] active_file:22774 inactive_file:2367 isolated_file:0 [ 217.814320][ T4302] unevictable:0 dirty:755 writeback:0 [ 217.814320][ T4302] slab_reclaimable:5185 slab_unreclaimable:74843 [ 217.814320][ T4302] mapped:31310 shmem:20718 pagetables:1231 [ 217.814320][ T4302] sec_pagetables:3 bounce:0 [ 217.814320][ T4302] kernel_misc_reclaimable:0 [ 217.814320][ T4302] free:1478775 free_pcp:2302 free_cma:0 [ 218.272625][ T4302] Node 0 active_anon:121216kB inactive_anon:88kB active_file:91096kB inactive_file:9468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125240kB dirty:3020kB writeback:0kB shmem:82872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5216kB pagetables:4924kB sec_pagetables:12kB all_unreclaimable? no [ 218.306463][ T4302] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5212kB free_cma:0kB [ 218.347527][ T4302] lowmem_reserve[]: 0 3921 3921 [ 218.354179][ T4302] Normal free:2956456kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:121208kB inactive_anon:84kB active_file:91096kB inactive_file:9468kB unevictable:0kB writepending:3020kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4492kB local_pcp:2480kB free_cma:0kB [ 218.386049][ T4302] lowmem_reserve[]: 0 0 0 [ 218.392549][ T4302] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 218.418727][ T4302] Normal: 86*4kB [ 218.426165][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.429451][ T4302] (UE) 114*8kB (UME) 94*16kB (UME) 16*32kB (UME) 106*64kB (UME) 172*128kB (UME) 110*256kB (ME) 50*512kB (UM) 31*1024kB (ME) 5*2048kB (ME) 691*4096kB (M) = 2958152kB [ 218.457021][ T4302] 45906 total pagecache pages [ 218.459631][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.461847][ T4302] 51 pages in swap cache [ 218.479152][ T4302] Free swap = 124136kB [ 218.496687][ T4302] Total swap = 124996kB [ 218.530097][ T4302] 2097051 pages RAM [ 218.546015][ T4302] 0 pages HighMem/MovableOnly [ 218.568625][ T4314] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1176'. [ 218.590086][ T4302] 352241 pages reserved [ 218.594295][ T4302] 0 pages cma reserved [ 218.651469][ T4302] Memory allocations: [ 218.655504][ T4302] 0 B 0 init/main.c:1477 func:do_initcalls [ 218.708304][ T4302] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 218.745413][ T4302] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 218.753648][ T4302] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 218.785032][ T4302] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 218.820800][ T4302] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 218.843261][ T4302] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 218.867599][ T4302] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 218.888949][ T4302] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 218.919496][ T4302] 0 B 0 init/initramfs.c:101 func:find_link [ 219.320131][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 219.478571][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 219.500852][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 219.512467][ T9] usb 6-1: config 14 has an invalid interface number: 95 but max is 0 [ 219.520776][ T9] usb 6-1: config 14 has no interface number 0 [ 219.527081][ T9] usb 6-1: config 14 interface 95 has no altsetting 0 [ 219.539759][ T9] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=da.f0 [ 219.557727][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.566449][ T9] usb 6-1: Product: syz [ 219.572596][ T9] usb 6-1: Manufacturer: syz [ 219.577713][ T9] usb 6-1: SerialNumber: syz [ 219.789465][ T9] usbserial_generic 6-1:14.95: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 219.801112][ T9] usbserial_generic 6-1:14.95: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 219.813068][ T9] usbserial_generic 6-1:14.95: device has no bulk endpoints [ 219.822081][ T9] usb 6-1: USB disconnect, device number 15 [ 220.039667][ T4344] netlink: 'syz.1.1185': attribute type 4 has an invalid length. [ 220.047689][ T4344] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1185'. [ 220.105843][ T10] usb 5-1: USB disconnect, device number 29 [ 220.282075][ T898] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 220.440084][ T898] usb 3-1: Using ep0 maxpacket: 16 [ 220.478940][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.530095][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.570092][ T898] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 220.599614][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.642001][ T898] usb 3-1: config 0 descriptor?? [ 220.651252][ T898] usbhid 3-1:0.0: can't add hid device: -22 [ 220.667596][ T898] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 220.855611][ T10] usb 3-1: USB disconnect, device number 102 [ 221.210106][ T898] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 221.360447][ T898] usb 5-1: Using ep0 maxpacket: 16 [ 221.372634][ T898] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.386001][ T898] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 221.395983][ T898] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.409598][ T418] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 221.417353][ T898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.431156][ T898] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 221.444202][ T898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.452403][ T898] usb 5-1: Product: syz [ 221.456984][ T898] usb 5-1: Manufacturer: syz [ 221.461658][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 221.461676][ T36] audit: type=1400 audit(1774721546.184:20390): avc: denied { create } for pid=4378 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.489894][ T898] usb 5-1: SerialNumber: syz [ 221.501668][ T36] audit: type=1400 audit(1774721546.204:20391): avc: denied { create } for pid=4378 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.538060][ T36] audit: type=1400 audit(1774721546.204:20392): avc: denied { write } for pid=4378 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.541433][ T4381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.572440][ T36] audit: type=1400 audit(1774721546.204:20393): avc: denied { read } for pid=4378 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.583234][ T4381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.596196][ T36] audit: type=1400 audit(1774721546.204:20394): avc: denied { read } for pid=4378 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.621517][ T36] audit: type=1400 audit(1774721546.214:20395): avc: denied { read write } for pid=4378 comm="syz.2.1198" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.622137][ T418] usb 6-1: config 0 has no interfaces? [ 221.645795][ T36] audit: type=1400 audit(1774721546.214:20396): avc: denied { read write open } for pid=4378 comm="syz.2.1198" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.652126][ T418] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.676968][ T36] audit: type=1400 audit(1774721546.214:20397): avc: denied { read } for pid=4378 comm="syz.2.1198" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.685770][ T418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.711895][ T36] audit: type=1400 audit(1774721546.214:20398): avc: denied { read open } for pid=4378 comm="syz.2.1198" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.719068][ T418] usb 6-1: config 0 descriptor?? [ 221.746235][ T36] audit: type=1400 audit(1774721546.214:20399): avc: denied { ioctl } for pid=4375 comm="syz.5.1197" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.774870][ T898] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 221.830157][ T309] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 221.970133][ T309] usb 3-1: device descriptor read/64, error -71 [ 221.992769][ T9] usb 5-1: USB disconnect, device number 30 [ 222.000945][ T9] usblp0: removed [ 222.007723][ T418] usb 6-1: USB disconnect, device number 16 [ 222.210151][ T309] usb 3-1: device descriptor read/64, error -71 [ 222.450122][ T418] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 222.457759][ T309] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 222.590180][ T309] usb 3-1: device descriptor read/64, error -71 [ 222.614455][ T418] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.624801][ T418] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 222.637845][ T418] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 222.663297][ T418] usb 6-1: string descriptor 0 read error: -22 [ 222.669752][ T418] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 222.684345][ T418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.783928][ T4392] netlink: 'syz.4.1202': attribute type 13 has an invalid length. [ 222.840097][ T309] usb 3-1: device descriptor read/64, error -71 [ 222.902517][ T418] usb 6-1: Can't get UAC3 power state for id 10 [ 222.960310][ T309] usb usb3-port1: attempt power cycle [ 223.196310][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'. [ 223.208123][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.217832][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.320202][ T309] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 223.342405][ T309] usb 3-1: device descriptor read/8, error -71 [ 223.430109][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 223.472296][ T309] usb 3-1: device descriptor read/8, error -71 [ 223.529374][ T418] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 223.582671][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.596091][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.605323][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 223.613375][ T9] usb 5-1: Product: syz [ 223.617571][ T9] usb 5-1: SerialNumber: syz [ 223.710101][ T309] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 223.732879][ T309] usb 3-1: device descriptor read/8, error -71 [ 223.847140][ T9] cdc_ncm 5-1:1.0: bind() failure [ 223.859951][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 223.879410][ T9] cdc_ncm 5-1:1.1: bind() failure [ 223.880079][ T309] usb 3-1: device descriptor read/8, error -71 [ 223.886721][ T9] usb 5-1: USB disconnect, device number 31 [ 224.030672][ T309] usb usb3-port1: unable to enumerate USB device [ 224.550299][ T309] usb 6-1: USB disconnect, device number 17 [ 224.693128][ T4434] netlink: 'syz.2.1217': attribute type 32 has an invalid length. [ 224.737289][ T4438] netlink: 'syz.1.1216': attribute type 41 has an invalid length. [ 224.760143][ T4438] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1216'. [ 224.786646][ T4438] gretap0: entered promiscuous mode [ 224.892200][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.958259][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.015465][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.038076][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.171965][ T4460] sit0: entered promiscuous mode [ 225.182671][ T4460] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 225.190482][ T4460] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1225'. [ 225.686841][ T309] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 225.700905][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 225.738146][ T4478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.749786][ T4478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.849546][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 225.858565][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.871036][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 225.876127][ T309] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 225.889461][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 225.891528][ T418] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 225.910080][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.926327][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 225.928550][ T309] usb 5-1: Product: syz [ 225.935939][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.945003][ T309] usb 5-1: Manufacturer: syz [ 225.953080][ T309] usb 5-1: SerialNumber: syz [ 225.958179][ T10] usb 6-1: Product: syz [ 225.962727][ T10] usb 6-1: Manufacturer: syz [ 225.965534][ T309] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 225.970078][ T10] usb 6-1: SerialNumber: syz [ 226.100157][ T418] usb 3-1: Using ep0 maxpacket: 16 [ 226.113962][ T418] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.130102][ T418] usb 3-1: config 0 has no interface number 0 [ 226.136247][ T418] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.150107][ T418] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 226.159183][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.193140][ T418] usb 3-1: Product: syz [ 226.197892][ T418] usb 3-1: Manufacturer: syz [ 226.201220][ T10] usb 6-1: selecting invalid altsetting 1 [ 226.212489][ T418] usb 3-1: SerialNumber: syz [ 226.219124][ T418] usb 3-1: config 0 descriptor?? [ 226.231014][ T418] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 226.235223][ T9] usb 5-1: USB disconnect, device number 32 [ 226.290242][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 226.313343][ T10] usb 6-1: USB disconnect, device number 18 [ 226.445776][ T4493] serio: Serial port pts0 [ 226.451952][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.472404][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.475007][ T36] kauditd_printk_skb: 802 callbacks suppressed [ 226.475027][ T36] audit: type=1400 audit(1774721551.194:21193): avc: denied { read write } for pid=4474 comm="syz.2.1231" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.481065][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.488812][ T36] audit: type=1400 audit(1774721551.194:21194): avc: denied { read write open } for pid=4474 comm="syz.2.1231" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.579980][ T36] audit: type=1400 audit(1774721551.194:21195): avc: denied { ioctl } for pid=4474 comm="syz.2.1231" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.601930][ T1149] udevd[1149]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.607422][ T36] audit: type=1400 audit(1774721551.194:21196): avc: denied { ioctl } for pid=4474 comm="syz.2.1231" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.690096][ T36] audit: type=1326 audit(1774721551.284:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.1.1235" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd91959c819 code=0x0 [ 226.717357][ T36] audit: type=1400 audit(1774721551.384:21198): avc: denied { ioctl } for pid=4489 comm="syz.4.1234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.750093][ T9] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 226.766702][ T36] audit: type=1400 audit(1774721551.414:21199): avc: denied { ioctl } for pid=4489 comm="syz.4.1234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.862403][ T36] audit: type=1400 audit(1774721551.434:21200): avc: denied { read write } for pid=3941 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.890099][ T9] usb 5-1: device descriptor read/64, error -71 [ 226.929876][ T36] audit: type=1400 audit(1774721551.434:21201): avc: denied { read write open } for pid=3941 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.963035][ T36] audit: type=1400 audit(1774721551.434:21202): avc: denied { ioctl } for pid=3941 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.033418][ T10] usb 3-1: USB disconnect, device number 107 [ 227.140134][ T9] usb 5-1: device descriptor read/64, error -71 [ 227.305881][ T4507] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 227.345010][ T4507] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 227.380157][ T9] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 227.520108][ T9] usb 5-1: device descriptor read/64, error -71 [ 227.731894][ T573] usb 2-1: USB disconnect, device number 100 [ 227.752454][ T305] bridge_slave_1: left allmulticast mode [ 227.760131][ T9] usb 5-1: device descriptor read/64, error -71 [ 227.771747][ T305] bridge_slave_1: left promiscuous mode [ 227.777509][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.789927][ T305] bridge_slave_0: left allmulticast mode [ 227.803682][ T305] bridge_slave_0: left promiscuous mode [ 227.817137][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.881883][ T9] usb usb5-port1: attempt power cycle [ 227.958980][ T305] veth1_macvtap: left promiscuous mode [ 227.969994][ T305] veth0_vlan: left promiscuous mode [ 228.146562][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.153765][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.162655][ T4520] bridge_slave_0: entered allmulticast mode [ 228.169239][ T4520] bridge_slave_0: entered promiscuous mode [ 228.178286][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.186213][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.194044][ T4520] bridge_slave_1: entered allmulticast mode [ 228.200776][ T4520] bridge_slave_1: entered promiscuous mode [ 228.220776][ T9] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 228.253303][ T305] ------------[ cut here ]------------ [ 228.258824][ T305] WARNING: CPU: 0 PID: 305 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 228.269008][ T305] Modules linked in: [ 228.273107][ T305] CPU: 0 UID: 0 PID: 305 Comm: kworker/u8:3 Not tainted syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 228.284899][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.286377][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.295002][ T305] Workqueue: netns cleanup_net [ 228.295033][ T305] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 228.302160][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.306917][ T305] Code: e8 21 74 d9 fc 4b 83 3c 3e 00 75 19 e8 45 47 81 fc 49 81 ff f8 07 00 00 74 1b e8 37 47 81 fc 49 83 c7 08 eb c9 e8 2c 47 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 228.306940][ T305] RSP: 0018:ffffc9000b77fb90 EFLAGS: 00010293 [ 228.313018][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.320150][ T305] [ 228.320160][ T305] RAX: ffffffff85066384 RBX: ffff88812d673540 RCX: ffff888130212600 [ 228.339786][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.345857][ T305] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103b80000 [ 228.378687][ T305] RBP: ffffc9000b77fbb0 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 228.386919][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: dffffc0000000000 [ 228.394977][ T305] R13: dffffc0000000000 R14: ffff888103b80000 R15: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.403029][ T305] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 228.412013][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.418812][ T305] CR2: 0000001b33022ff8 CR3: 000000012e516000 CR4: 00000000003526b0 [ 228.427050][ T573] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 228.427079][ T305] Call Trace: [ 228.427091][ T305] [ 228.440947][ T305] cleanup_net+0x6bd/0xc90 [ 228.445399][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 228.450389][ T305] ? kick_pool+0xb9/0x550 [ 228.454752][ T305] process_scheduled_works+0x7d1/0x1020 [ 228.460444][ T305] worker_thread+0xc70/0x10b0 [ 228.465248][ T305] ? __cfi_try_to_wake_up+0x10/0x10 [ 228.470493][ T305] kthread+0x2c9/0x370 [ 228.474605][ T305] ? __cfi_worker_thread+0x10/0x10 [ 228.479756][ T305] ? __cfi_kthread+0x10/0x10 [ 228.484403][ T305] ret_from_fork+0x67/0xa0 [ 228.488905][ T305] ? __cfi_kthread+0x10/0x10 [ 228.493570][ T305] ret_from_fork_asm+0x1a/0x30 [ 228.498365][ T305] [ 228.501427][ T305] ---[ end trace 0000000000000000 ]--- [ 228.521464][ T9] usb 5-1: device descriptor read/8, error -71 [ 228.527912][ T305] ------------[ cut here ]------------ [ 228.533529][ T305] WARNING: CPU: 0 PID: 305 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 228.543661][ T305] Modules linked in: [ 228.547586][ T305] CPU: 0 UID: 0 PID: 305 Comm: kworker/u8:3 Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 228.560794][ T305] Tainted: [W]=WARN [ 228.564682][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.574801][ T305] Workqueue: netns cleanup_net [ 228.579709][ T305] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 228.585988][ T305] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 46 81 fc 49 81 ff f8 07 00 00 74 1b e8 e2 46 81 fc 49 83 c7 08 eb c5 e8 d7 46 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 46 81 fc 5b 41 5c 41 5e 41 [ 228.606014][ T305] RSP: 0018:ffffc9000b77fb90 EFLAGS: 00010293 [ 228.612136][ T305] RAX: ffffffff850663d9 RBX: ffff888103b80800 RCX: ffff888130212600 [ 228.620177][ T305] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103b80810 [ 228.628174][ T305] RBP: ffffc9000b77fbb0 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 228.630119][ T573] usb 6-1: Using ep0 maxpacket: 16 [ 228.636199][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: dffffc0000000000 [ 228.649275][ T305] R13: dffffc0000000000 R14: ffff888103b80000 R15: 0000000000000010 [ 228.657326][ T305] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 228.666419][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.673077][ T305] CR2: 0000001b33022ff8 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 228.681118][ T305] Call Trace: [ 228.684428][ T305] [ 228.687563][ T305] cleanup_net+0x6bd/0xc90 [ 228.692041][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 228.697000][ T305] ? kick_pool+0xb9/0x550 [ 228.701387][ T305] process_scheduled_works+0x7d1/0x1020 [ 228.706975][ T305] worker_thread+0xc70/0x10b0 [ 228.711704][ T305] ? __cfi_try_to_wake_up+0x10/0x10 [ 228.716993][ T305] kthread+0x2c9/0x370 [ 228.721123][ T305] ? __cfi_worker_thread+0x10/0x10 [ 228.726269][ T305] ? __cfi_kthread+0x10/0x10 [ 228.730941][ T305] ret_from_fork+0x67/0xa0 [ 228.735401][ T305] ? __cfi_kthread+0x10/0x10 [ 228.740013][ T305] ret_from_fork_asm+0x1a/0x30 [ 228.744962][ T305] [ 228.747999][ T305] ---[ end trace 0000000000000000 ]--- [ 228.770706][ T9] usb 5-1: device descriptor read/8, error -71 [ 228.777103][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.813038][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.870449][ T305] ------------[ cut here ]------------ [ 228.875965][ T305] WARNING: CPU: 0 PID: 305 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 228.885528][ T305] Modules linked in: [ 228.889465][ T305] CPU: 0 UID: 0 PID: 305 Comm: kworker/u8:3 Tainted: G W syzkaller #0 9f86d9c18f1652eb5f7cacfb207b3899f57a91b2 [ 228.902901][ T305] Tainted: [W]=WARN [ 228.906715][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.916817][ T305] Workqueue: netns cleanup_net [ 228.921641][ T305] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 228.927219][ T305] Code: 3c 20 00 74 08 48 89 df e8 cf 3d f4 fc 48 8b 3b e8 37 66 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c8 b7 00 cc e8 e2 10 9c fc <0f> 0b e9 b0 fd ff ff e8 d6 10 9c fc 0f 0b e9 18 fe ff ff e8 ca 10 [ 228.946983][ T305] RSP: 0018:ffffc9000b77fb70 EFLAGS: 00010293 [ 228.953129][ T305] RAX: ffffffff84eb99ce RBX: ffff88812d673540 RCX: ffff888130212600 [ 228.961169][ T305] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888130212600 [ 228.969179][ T305] RBP: ffffc9000b77fb98 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 228.977213][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: 1ffffffff0fa6d68 [ 228.985258][ T305] R13: dffffc0000000000 R14: ffff88812d674140 R15: dffffc0000000000 [ 228.993279][ T305] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 229.002350][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.008963][ T305] CR2: 0000001b33022ff8 CR3: 000000010df64000 CR4: 00000000003526b0 [ 229.017189][ T305] Call Trace: [ 229.020512][ T305] [ 229.023566][ T305] xfrm_net_exit+0x31/0x80 [ 229.028154][ T305] cleanup_net+0x6bd/0xc90 [ 229.032788][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 229.037767][ T305] ? kick_pool+0xb9/0x550 [ 229.042347][ T305] process_scheduled_works+0x7d1/0x1020 [ 229.048022][ T305] worker_thread+0xc70/0x10b0 [ 229.052792][ T305] ? __cfi_try_to_wake_up+0x10/0x10 [ 229.058119][ T305] kthread+0x2c9/0x370 [ 229.062349][ T305] ? __cfi_worker_thread+0x10/0x10 [ 229.067647][ T305] ? __cfi_kthread+0x10/0x10 [ 229.072318][ T305] ret_from_fork+0x67/0xa0 [ 229.076780][ T305] ? __cfi_kthread+0x10/0x10 [ 229.081529][ T305] ret_from_fork_asm+0x1a/0x30 [ 229.086352][ T305] [ 229.089406][ T305] ---[ end trace 0000000000000000 ]--- [ 229.196341][ T573] usb 6-1: device descriptor read/all, error -71 [ 229.222068][ T305] bridge_slave_1: left allmulticast mode [ 229.227778][ T305] bridge_slave_1: left promiscuous mode [ 229.233546][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.242013][ T305] bridge_slave_0: left allmulticast mode [ 229.247675][ T305] bridge_slave_0: left promiscuous mode [ 229.253379][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.261348][ T305] bridge_slave_1: left allmulticast mode [ 229.267016][ T305] bridge_slave_1: left promiscuous mode [ 229.272801][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.280297][ T305] bridge_slave_0: left allmulticast mode [ 229.286031][ T305] bridge_slave_0: left promiscuous mode [ 229.291676][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.299195][ T305] bridge_slave_1: left allmulticast mode [ 229.304955][ T305] bridge_slave_1: left promiscuous mode [ 229.310628][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.317970][ T305] bridge_slave_0: left allmulticast mode [ 229.323744][ T305] bridge_slave_0: left promiscuous mode [ 229.329347][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.583535][ T305] tipc: Left network mode [ 229.589998][ T305] veth1_macvtap: left promiscuous mode [ 229.595554][ T305] veth0_vlan: left promiscuous mode [ 229.601594][ T305] veth0_vlan: left promiscuous mode [ 229.607226][ T305] veth1_macvtap: left promiscuous mode [ 229.612779][ T305] veth0_vlan: left promiscuous mode [ 230.281466][ T305] bridge_slave_1: left allmulticast mode [ 230.287147][ T305] bridge_slave_1: left promiscuous mode [ 230.292930][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.300495][ T305] bridge_slave_0: left allmulticast mode [ 230.306130][ T305] bridge_slave_0: left promiscuous mode [ 230.311776][ T305] bridge0: port 1(bridge_slave_0) entered disabled state