last executing test programs: 3.971988264s ago: executing program 3 (id=114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x0, 0x2}}, 0x2e) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000280)={[{@rlog_pages={'rlog_pages', 0x3d, 0x5}}], [{@dont_measure}]}) mknod(&(0x7f0000000040)='./file1\x00', 0x20, 0x7) utimes(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)) 3.826142626s ago: executing program 3 (id=115): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000e, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000420000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 3.131594204s ago: executing program 1 (id=116): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r2, &(0x7f00000006c0)='./cgroup\x00', r2, &(0x7f00000003c0)='./mnt\x00', 0x7) openat(r2, &(0x7f0000000100)='./cgroup\x00', 0x1493c2, 0x40) 3.127624404s ago: executing program 1 (id=117): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) tee(r1, r0, 0x6, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) 2.989941555s ago: executing program 2 (id=120): syslog(0xa, &(0x7f0000000000)=""/139, 0x8b) syslog(0x0, 0x0, 0x0) syslog(0x1, &(0x7f00000000c0)=""/168, 0xa8) syslog(0x9, &(0x7f0000000180)=""/79, 0x4f) syslog(0x2, &(0x7f0000000200)=""/240, 0xf0) syslog(0x1, &(0x7f0000000300)=""/4096, 0x1000) syslog(0x9, &(0x7f0000001300)=""/35, 0x23) syslog(0x2, &(0x7f0000001340)=""/146, 0x92) syslog(0x2, 0x0, 0x0) syslog(0x3, &(0x7f0000001400)=""/4096, 0x1000) syslog(0x0, &(0x7f0000002400)=""/190, 0xbe) syslog(0x0, &(0x7f00000024c0)=""/120, 0x78) syslog(0x4, &(0x7f0000002540)=""/58, 0x3a) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, &(0x7f0000002580)='id_resolver\x00', 0x0) syslog(0x9, &(0x7f00000025c0)=""/110, 0x6e) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f0000002640)=""/123, 0x7b) syslog(0x1, 0x0, 0x0) syslog(0x9, &(0x7f00000026c0)=""/221, 0xdd) syslog(0x9, &(0x7f00000027c0)=""/126, 0x7e) syslog(0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000002840)=""/32, 0x20) syslog(0x3, &(0x7f0000002880)=""/157, 0x9d) syslog(0x9, &(0x7f0000002940)=""/195, 0xc3) syslog(0x1, &(0x7f0000002a40)=""/51, 0x33) syslog(0x0, &(0x7f0000002a80)=""/227, 0xe3) syslog(0x2, 0x0, 0x0) syslog(0x1, &(0x7f0000002b80)=""/157, 0x9d) syslog(0x4, &(0x7f0000002c40)=""/171, 0xab) keyctl$update(0x2, 0x0, &(0x7f0000002d00)="7b810161bf9a70a2462f7ca2d62ee6efcb82105effcdd79188f15043a30563c14b5e262cf0bee72aff7cf0c881a9e575c0d8d215cbfb86f7ffad02e5f84f9470ede6d3df1678df31782afca4fa1daf4a762ce0bc5305cd092ea5e8b31b2fb31ca0b04435d226d2294169548e052c48ec8d56b1dd1d174489b90d3bf5d293fe30a9cf093677f68afa50f05b", 0x8b) 2.829408017s ago: executing program 3 (id=121): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000080)='\x00', 0x101040, &(0x7f00000000c0)={@align=0x3, {0xd, 0xff80, 0x7, 0x4}}, 0x10, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6}, {[0x1ae760fb, 0x3ff2bfe9, 0xfffffff9, 0x82]}, 0x200, 0xbe, &(0x7f0000000240)=""/190}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x60e0, 0x100, 0x3, 0x4, 0x3}) r2 = socket(0x2, 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000000000003400"], 0x18}, 0x0) 2.723505738s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000100)={0xc498, 0x3, 0x2}, 0x18, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0xb0825) (async) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) (async) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x2}) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) listen(r3, 0x10000000) (async) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x10000, 0x40, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="0500000076001f03a29bc48e49555a7008000000000000000800010051bf338353acfdfec4a28d77194bad12d7a1e8a15f9fa38febce7298ecf039769b314aabffa823d617bb7ec28152815655d963caae2f95df03cf213eb30564f77ddffc1152dae6d6f967144e041472c74fd869c8ee6f1b24df410d1a6da4862be516fb6a0f924778ed326c422bb809f5c30e37f1471e49688cedc897c4", @ANYRES32=r9, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c0100001a00070028bd70000000000064010109000000000000000000000000e0000001000000000000000000000000ffff00004e2200000000008002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a00020070000000000000001c00040000004e224e230000ffffffff00"/196], 0x10c}}, 0x0) 2.722860918s ago: executing program 3 (id=123): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) process_madvise(r1, 0x0, 0x0, 0x10, 0x0) (async) process_madvise(r1, 0x0, 0x0, 0x10, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) close(r2) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="0506ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac1(0x0, 0xf3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x0, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2b}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0x2, 0x5, 0x5], 0x9}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x4, "917a2653"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x3, "ac8079cebc42"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x8, 0x4, 0x8, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x4, 0x40, 0x0, "a303bcd0093ab37e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xc, 0x0, 0xc0, {0x7, 0x25, 0x1, 0x0, 0x2d, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x5, "9454", "bd7e0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7, 0xff}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0xff, 0x2, "f5e86d09616788f208"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0x9, 0x6, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x4, 0xc, "45ac"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffc, 0x8, 0x4, 0x62}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x1e, {0x7, 0x25, 0x1, 0x4, 0x4, 0x6}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x20, 0x7f, 0x40, 0x7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x6, 0x5d, 0x3, '\x00', 0x3}) socket$netlink(0x10, 0x3, 0xb) (async) socket$netlink(0x10, 0x3, 0xb) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000180)={0x0, 0x6, 0x62, {0x62, 0x3f, "b4d76ab3c7111a4c5954f53c06d61602e8fcdb5c752a07ba8d687a8d8cd1d79e6c2cb5b62cb32060e8ad436ac0848ad9912a3d473cd13e542302ff9aaed074f0adda87368232b78c358caee7585a6786e3aff6702e9f584b5c32f7532d552618"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000580)={0x0, 0xf, 0x122, {0x5, 0xf, 0x122, 0x5, [@generic={0xe0, 0x10, 0xb, "27214d66e8d3d841b382f8081876db8f15cc6ab0de5e9216b9b864f326ee984faa31daf48bb3c477c81f2eea351c97720e3de32978b2f27af45fb1b8504c4288f7aa55bb3e33c97fd88e615d1b4bcc1027c34407247669d1c9b38f363414fa12c2f0f4df42ed5bd128900ff16847c9328c608fd5aef877857c31fd38648f0a4ab9166084f67acd7874c014f1fd3721b9d667c391c8324f1bf28846a219ece2f5a2f596e3284acf8d8112ffffce81a1edc53bfc241b9a3d725de830cec880b8b9b864c2ce11b8b59420fd044ed37be2c5a859fff2d56949860ea7e890da"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1, 0x2, 0xffff, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0xf00f, 0x101, [0xcf, 0xff0000, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x6, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x6, 0x1e, 0x8, [0x0]}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0xd2, 0x4d, "09dac7af", "08e117a9"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x0, 0x39, 0x3, 0xf8, 0xffff, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000780)={0x40, 0x17, 0x8a, "5023f94632bd09472e7521b590074db17ffb0cac237fe02cd0443288fdc8746c8aa93cd28d36a80d1aa1f631db10c1ea1bd0828c2c2fc5daad4a9d8d480f2cf2894d51aa6fdf4b46affa27644fe424dbd34e959b8481e35982e1b9b6ef6a61908c6cfd983714cff04d1df20bd559b6f3c7a54649138433974a62d63ea16daeeffa5e125369b57aa3c9a0"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6d}, &(0x7f00000008c0)={0x20, 0x0, 0x4}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "a091"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "0415"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000180)={0x0, 0x6, 0x62, {0x62, 0x3f, "b4d76ab3c7111a4c5954f53c06d61602e8fcdb5c752a07ba8d687a8d8cd1d79e6c2cb5b62cb32060e8ad436ac0848ad9912a3d473cd13e542302ff9aaed074f0adda87368232b78c358caee7585a6786e3aff6702e9f584b5c32f7532d552618"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000580)={0x0, 0xf, 0x122, {0x5, 0xf, 0x122, 0x5, [@generic={0xe0, 0x10, 0xb, "27214d66e8d3d841b382f8081876db8f15cc6ab0de5e9216b9b864f326ee984faa31daf48bb3c477c81f2eea351c97720e3de32978b2f27af45fb1b8504c4288f7aa55bb3e33c97fd88e615d1b4bcc1027c34407247669d1c9b38f363414fa12c2f0f4df42ed5bd128900ff16847c9328c608fd5aef877857c31fd38648f0a4ab9166084f67acd7874c014f1fd3721b9d667c391c8324f1bf28846a219ece2f5a2f596e3284acf8d8112ffffce81a1edc53bfc241b9a3d725de830cec880b8b9b864c2ce11b8b59420fd044ed37be2c5a859fff2d56949860ea7e890da"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1, 0x2, 0xffff, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0xf00f, 0x101, [0xcf, 0xff0000, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x6, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x6, 0x1e, 0x8, [0x0]}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0xd2, 0x4d, "09dac7af", "08e117a9"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x0, 0x39, 0x3, 0xf8, 0xffff, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000780)={0x40, 0x17, 0x8a, "5023f94632bd09472e7521b590074db17ffb0cac237fe02cd0443288fdc8746c8aa93cd28d36a80d1aa1f631db10c1ea1bd0828c2c2fc5daad4a9d8d480f2cf2894d51aa6fdf4b46affa27644fe424dbd34e959b8481e35982e1b9b6ef6a61908c6cfd983714cff04d1df20bd559b6f3c7a54649138433974a62d63ea16daeeffa5e125369b57aa3c9a0"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6d}, &(0x7f00000008c0)={0x20, 0x0, 0x4}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "a091"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "0415"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x1}}) 2.652420509s ago: executing program 2 (id=124): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt(r1, 0x6, 0x7ff, 0x0, &(0x7f0000000100)) (async) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x18, "00000000000700000000fffe00"}) (async) syz_open_pts(r2, 0x0) (async) syz_open_pts(r2, 0x105200) 2.55708065s ago: executing program 2 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27}}]}}, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x1, 0x6, &(0x7f00000000c0)=0x8}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x28011, r2, 0x2000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x200000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0xf8, 0x7, 0x1, 0x1, 0x2, 0x3, 0x1, 0xab, 0x5, 0xd, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xa, 0x9, 0x8, 0x5, 0xfffffffffffffff7, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x7000, 0x1c4292}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.382848702s ago: executing program 2 (id=127): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x7, 0xfffffbf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4a2, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001bc0)={'syz0\x00', {0x10, 0x2, 0x3, 0x6}, 0x17, [0x100, 0x8d75, 0x0, 0xfffffff9, 0x678, 0x2, 0x8, 0x3, 0x6a, 0x9, 0x0, 0x5, 0x9f9, 0x2, 0x3cc, 0x8, 0x4, 0x8, 0x1000, 0x0, 0xc87a, 0x9, 0x5, 0x80000000, 0x1e22, 0x3, 0x8, 0x7, 0xff7, 0xffff, 0x72c5, 0x4, 0xfffffc25, 0x7, 0xfffffffa, 0x3ff, 0xffffffff, 0x6, 0x9, 0x7, 0x1ff, 0xd77, 0x29f5, 0x8001, 0x401, 0x80000000, 0x3, 0x7, 0x4, 0x8, 0x5, 0x0, 0xffff, 0x2, 0x3, 0x1, 0x0, 0x0, 0x8, 0x5ecf, 0x6, 0x10000, 0x6, 0x5], [0x10001, 0x9, 0x3, 0x6, 0x3, 0xffffffff, 0x0, 0x0, 0x9, 0x1d, 0x100, 0x4, 0x80, 0x3a2, 0x0, 0xdb5, 0x0, 0x7, 0x72e, 0x6670, 0x9, 0x9, 0x8, 0x9, 0x6, 0x6, 0xd5a3b486, 0x20000, 0xbea4, 0x7, 0x5, 0x1, 0x7, 0xa6, 0x0, 0x3, 0xfffffffc, 0x6, 0x200, 0x0, 0x2, 0x3, 0x6, 0x58af, 0xf, 0x4, 0x4, 0x2082, 0x1, 0x7, 0x1000, 0x32b8, 0x10001, 0x9a63, 0x5, 0x25, 0x1, 0x8, 0x401, 0x1983854d, 0x3, 0x4, 0x6ff4b1d, 0x5], [0x8, 0x5, 0x5, 0x92f, 0x5, 0x80000000, 0x80000000, 0x2, 0x3ddf, 0x4, 0x4, 0x3, 0x80000001, 0x6, 0x3, 0x0, 0x9, 0x47, 0x40, 0xff, 0x684, 0x60b8, 0x10, 0x8, 0x5, 0x8e, 0x1, 0xd, 0xffff0000, 0xff, 0x1, 0x8f, 0x10001, 0x1, 0xdf41, 0x6, 0x4, 0x8000, 0x3, 0x3c3d, 0x2a, 0xe, 0xe, 0xb0, 0x1462ba36, 0x3, 0x10001, 0x2b15, 0x5, 0x7, 0x4, 0x1, 0x200, 0xe7c4004, 0x4, 0x3, 0x5, 0x0, 0x6e97, 0x3, 0xb, 0x7, 0x7, 0xa534], [0x7, 0x40, 0x9, 0x2, 0x100, 0x37fae8ce, 0x8001, 0x4, 0x0, 0x5, 0x6, 0x1, 0xe6, 0x1000, 0x6, 0xffffffff, 0x4, 0x5, 0x7, 0x8000, 0xffffffff, 0x589, 0xffff7fff, 0xe8c, 0x7, 0x1, 0x1ff, 0x8, 0x825, 0x5, 0x7, 0x7ff, 0x6, 0x80000001, 0x19c, 0xcc3, 0x7, 0xfffff306, 0x800, 0x0, 0xffffff80, 0x8, 0x4, 0x8, 0x3, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x6, 0x4, 0xcf, 0x5, 0xb, 0x0, 0x8, 0x1, 0xe, 0x9, 0x2, 0x3, 0x6772, 0x4d]}, 0x45c) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25ac141423000000000000000000000000ac14142c00000000000000000000000000000080000b00000200004000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000800f7"], 0x5c}}, 0x40040c0) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="59ea49a53dc119c4546227a132e9b586b62b7d556bcbcd32318ba47c43500392331f8f8278f922376e2c232f634cb0156dd0e8ef6ab367a01f4ee1c90dfc4ece1539b84d40f9de99ed730c2526b7ea103fe7d4283e6b96c697d9179108dacaa1362f28ad9e06618d76cbf1c8d4fd6249c9a149d7df68bb766f44419b0d1c056d63d0f437e56faa2660cde39182d5c8136533c675ecf9d5bf558937875859061c8fadbbeead75343e3f7e1458e6ea0b56ae", 0xb1}], 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="5800000000000000080100000c00000086078ef7e1791dffb6cf2260048e5916886b924fad828ddb5aa7928bd238f9cda92861374b219f148903f3075232c789ec8be2305108bde88f64606597d18f5eb769f472c26d0000"], 0x58}}, {{&(0x7f0000001840)=@pppoe={0x18, 0x0, {0x1, @remote, 'veth0_to_batadv\x00'}}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000018c0)="b882417734a59efc1c5148cf684bb2c05e5c0de6159d89057a1970444970c351b1a2bed085d1b9e05ae31a7cca9eea01907023d9c41790d110898ae72bfca78582fbea10b2aca26980c3e82e7085e4b4b278664af63284b9dffeacbeaa576a6bc2e3a3c19b703e7f0db7058460148703cba79bdf42962d82c117a92f01e41878c03e6e1da8c5add30ce517482fc376382cccc8af56d2af3f856e86517f545cb8bf7c711a68258306232985a346b9c04ec2610dcc418907a0f29bc5d4df5917b83342aca8aa1c0e6a47ba0cf9e47aaa64da8d071264", 0xd5}, {&(0x7f00000019c0)="514264631f9a957cae670cb42fcae4449d92a93ca8905a4cfe56650dea220539bc4adf0328a03219ae8fa2aafd648a561f1a76d6dff781e59d6a88cdfae34df946e3033b28a542e5f7be37e7cfef049d83b8c23750d777be9308478e2309c6be04d5a25db24e8b8785f48b4812f6ff412bfbd22f24ec166cdae5238b429c61291fab41", 0x83}, {&(0x7f0000001a80)="5317e63e1ce28e473617ecff8e2f37a47aa2d9ef07d324e72054ecdd9ff4ee137b2823198865ec3ee5fb98fad0f770fac2b166334a94445fafbd13f4", 0x3c}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="34f0a39d0284d67ebe746c5474ed6ed5a9c5e92eb1ffa63ab77d9f9299bbdac0a2d93e9d97dd9977695e330f9854af325a778db019c93eb6a0811ea5ce3d944e8d2922e54e4fb12e1a123e0999934d23d4d07b71e71212592dd52d2127d04b923da9d3b39cb7f4a8d45759291d2f58705af96870c1", 0x75}], 0x5}}], 0x2, 0x20008800) 2.177943815s ago: executing program 2 (id=128): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000", @ANYRES64=r1], 0x10) 1.995445657s ago: executing program 2 (id=129): ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) r9 = syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r9, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) capset(&(0x7f00000001c0)={0x19980330}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_init_net_socket$bt_l2cap(0x1f, 0x879741463c836383, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000019200)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) r13 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r13, 0x80284504, &(0x7f0000000040)=""/185) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000400)=@x86={0x3, 0x0, 0x6, 0x0, 0x9, 0x8, 0x27, 0x1, 0x1, 0xff, 0x9, 0x7, 0x0, 0x3, 0x5, 0x3, 0x8, 0x1, 0x3, '\x00', 0x1, 0xab5}) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0x5000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0xfc, 0x7, 0x10}, {0xeeee8000, 0x8000000, 0x9, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x40, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x30000, 0x3000, 0xe, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) clock_nanosleep(0x3, 0x1, &(0x7f0000004600)={0x77359400}, &(0x7f0000004640)) ioctl$KVM_RUN(r11, 0xae80, 0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffd, 0x20000}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) 1.358975774s ago: executing program 3 (id=131): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000040410e613040000102030109028d000301ffc00c080b0002010130070904000000010130000a2401102900120d00000c240b06000000005743a804132403020006030604f9"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x240100, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB="747269f7eb3d66642c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,k']) memfd_secret(0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0xe42}}, 0x30) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="124f7b65a29d033baf74552e5f7a392b011001000000106e05fe0040000102010129022d000101ff0001092101000501090581"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xd965, 0x800, &(0x7f0000000180)={0xc9, 0x3, r8, 0x1, 0x0, 0x6, @local}, 0x14) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000800)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x6, {0x6, 0x7, "7ea550c6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect$cdc_ncm(0x6, 0x95, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x3, 0xb0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "3ded"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x53, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0xa7, 0x3ff}, @mdlm={0x15, 0x24, 0x12, 0xd}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0xfff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x3, 0x97}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8a}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x6, 0x9, 0x9, 0x30, 0x7}, 0x15, &(0x7f00000003c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xf, 0x7, 0x6, [0xff0f]}]}, 0x8, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x448}}, {0xe0, &(0x7f0000000640)=@string={0xe0, 0x3, "c09e0910c68634c9225b03b00d56f7d7096c2fffe9d3e7d227fe2e4ade024955437dc2962505351e29b8b5efa35bcc40796aa8f72be0ac455d4c6b2047f242321321ef0eafd3d8cc4916f02ce2edd951271502a566034ca86f2ae313db2ba3d524bcb908745963e2534c3ad612a66e81692c5230809e09475d3d656957567f5c4c94b6993eb324851e9454e740ac8ef08b40d3b89f67d10e6dbaeead7f8dde2f3309be6dc33974b21f5295452613379f3a2bc154767300dd42e7de852eb153daf462ab2e09b0704363f5d17697c4e48aebd6532e01cc96b7430aa951170b"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc34}}, {0x40, &(0x7f0000000840)=@string={0x40, 0x3, "d97ff10c8b6519c778332d1681de5bd9d19c543bfdddfbb1168ab4b128c257af35f36dec072dfce8dc3a81bf7849af82ee85cb80786fee25dddab26fdcd8"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x8b, &(0x7f0000000900)=ANY=[@ANYBLOB="8b03f1834a5fdb197adbb1f130c5dacc65b7f4713cd6f4d58241e245bdad5074d58eeec2605935df199631c51dab61a8018d224c6848e4e685cc7d0ee53deece65685a316b374a1c0d1d1172787c67854afafbc534a2da2ee8fdb2cdcb251bf38a441102369901c024f5f13ce7a9237326003eebadacde63e671088ff1c0212b37a0897f5c8de7dba42f88"]}]}) syz_usb_connect$cdc_ncm(0x6, 0x70, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x5, 0x30, 0x6d, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b64f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x8, 0x10}, {0x6, 0x24, 0x1a, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x408, 0x9, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7f, 0x6, 0x9}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0x1a, 0xbd, 0x8, 0x8, 0x5}, 0xfd, &(0x7f0000000f00)={0x5, 0xf, 0xfd, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xd0}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x1, 0x0, 0x12, [0x30, 0x3fcf, 0xffff3f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "79b78dd976c0fd0279634a83b8c85389"}, @generic={0xad, 0x10, 0xa, "66278e8213e2ee4d623e6fc5af7eb0fda0a74d1f2dd7e99b6f4495252916f8c98bc5f0d10b70a16618ad7bad943038adfccce4e2190dc62f3fdbdf1b73d77e013cc69b77875362ee9712cf557624fc5c8cbf3993a7eb23db222c8979ef413fb38f8c9257bdb7b1508ffea6f87251c42bdd339818199a2b6ed0ec4ea820fed9fd3208548f9028ce321e2283b8369a6134f534c971e0c2ed23be5cde1bb372f61db8064d07f7d6b3328e30"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x9, 0x0, 0xab, [0x0]}]}, 0x2, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xfce1}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x40, 0xc, 0xed, {0xed, 0x22, "ee3fd87aa769db50547bb7460507099f7be1cb64dc17cecf404ee70c11d553bafb82e2950d43310286e18bf1d41269d34e244a79ba4e34912feaa77117b18e046648d5ddfcdcccae2dc914ffc8a9d8638ef09d4119007b954ed9ee7438890abeb9745127cc3d4bc8eeb51a3665502f4edc22742519541014f093af9f8c9b50fb418b61012ed94f75ece44bcd5a4a4e74bc97245ca8b6edf0ab3737fd06d9ae87b4d066de20b6db0158ec40b2c646e7b6dc68cf7aaac6a79d8c7f3d5f3f313362862b3b5d164312b66085c7073924c7d071881e3f33b33ce549742d63f91aaef5ef1e7cd608548b2684be85"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x20, 0x12, 0xf3, "e43d5a017c1ce1ef129e96986e64fbcc82d8326d677008e08da6aa891524cafed30896753811c80d3f1a3f16fb69641466621eab4b01150f72f5e373502b0f87b493dfcbc975140158d5babc1e440507c7ae8bfb0387e23367146c943fe6750045d4ba731549f43b4416637050421900221b973ad654f9820c90bf0aadee73a26ea627c2cb6af7c7104f8ba6f8b0eae58ce7eb9d69970112cc401229f131feaae05237d487473751f719e4d4f16670df3003b87575c8d4658f83d6baf8ed2776cf22ceefbc9607ae423fd46b2d110678a5f919113061f83c5390f2518880e8aa360709e97ee17521e65ead2ef514961bfd25c4"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x95}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0x6, 0x101, 0x9, 0x4, 0x1, 0x3, 0xdd4c, 0x6, 0xeab2, 0x4, 0x1, 0x7427}}, &(0x7f0000000d80)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfffc}, &(0x7f0000000e40)={0x20, 0x89, 0x2}}) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100)=0x1, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 1.307708545s ago: executing program 1 (id=132): r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202", @ANYRESOCT], 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.054311657s ago: executing program 0 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf256700000008000300", @ANYRES32, @ANYBLOB="0800c3"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c0, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x50}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa7a000}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ec412a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x11}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf256700000008000300", @ANYRES32, @ANYBLOB="0800c3"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c0, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x50}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa7a000}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7bc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ec412a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x11}, 0x10) (async) 992.093598ms ago: executing program 0 (id=134): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 895.614419ms ago: executing program 0 (id=135): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 887.721409ms ago: executing program 0 (id=136): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)='K'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x404c880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x800) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x1a9b42, 0x0) lseek(r7, 0xfffffffeffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x201, 0x391, 0x4e23, 0x1, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x1edb0000000, 0x9, 0x35, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x3, 0x0, 0x22, 0xe70f}, {0x2, 0x8}, 0x70bd27, 0x3504, 0x2, 0x2, 0xfd, 0x62}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 731.928431ms ago: executing program 1 (id=137): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0x100ffff) fcntl$addseals(r2, 0x409, 0x7) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x800100, 0x0, 0x2000}) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000000c0)={0x8, 0x4699, 0x2, 0x0, 0x6, 0x2, 0x0, &(0x7f0000000080)=[{0x4, 0xfe, 0xfffffffa}, {0xffffffff, 0x1ff, 0x6}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 659.630822ms ago: executing program 0 (id=138): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000d0c100000000000224e0000", 0x58}], 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x45, 0x4e, 0x96, 0x8, 0x9fb, 0x602e, 0xdb43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x24, 0x80, 0x5, "", [{{0x9, 0x4, 0x1, 0x1, 0x0, 0x3d, 0xf3, 0x9b, 0xf}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 381.788115ms ago: executing program 1 (id=139): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) listen(r2, 0x0) (async) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x100) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e001f0700001a00000000000c00d60001"], 0x24}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f00000000c0)="66a75a9e", 0x4) 233.355967ms ago: executing program 0 (id=140): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x9, 'vlan1\x00', {0x6}, 0x88}) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="5c29abb44e014280e632c1cd7046116ae426", @ANYRESDEC=0x0], 0x7c}}, 0x0) 53.870769ms ago: executing program 32 (id=140): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x9, 'vlan1\x00', {0x6}, 0x88}) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="5c29abb44e014280e632c1cd7046116ae426", @ANYRESDEC=0x0], 0x7c}}, 0x0) 0s ago: executing program 1 (id=142): r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f00001f8000/0x4000)=nil, 0x4000}, 0x1}) recvfrom$inet6(r0, &(0x7f0000000480)=""/33, 0x21, 0x40010101, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040b40464de0000000000010902240001000000080904000001030005000921ffff060122030009058103"], 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8], 0x0) r3 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4838be482f75893b2bd9e478dd302d9e94d9a49bc083ec551515", @ANYRES32=r2, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000340)) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 16.248178][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 16.248198][ T36] audit: type=1400 audit(1778374244.140:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.253316][ T36] audit: type=1400 audit(1778374244.140:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.257520][ T36] audit: type=1400 audit(1778374244.140:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[1518]" dev="pipefs" ino=1518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 16.261044][ T36] audit: type=1400 audit(1778374244.140:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.263883][ T36] audit: type=1400 audit(1778374244.140:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 23.831783][ T36] audit: type=1400 audit(1778374251.720:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.832883][ T287] cgroup: Unknown subsys name 'net' [ 23.855410][ T36] audit: type=1400 audit(1778374251.720:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.884498][ T36] audit: type=1400 audit(1778374251.750:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.884706][ T287] cgroup: Unknown subsys name 'devices' [ 24.046139][ T287] cgroup: Unknown subsys name 'hugetlb' [ 24.051871][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.204843][ T36] audit: type=1400 audit(1778374252.100:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.229688][ T36] audit: type=1400 audit(1778374252.100:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.239038][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.255472][ T36] audit: type=1400 audit(1778374252.100:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.288211][ T36] audit: type=1400 audit(1778374252.160:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.315506][ T36] audit: type=1400 audit(1778374252.160:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.351359][ T36] audit: type=1400 audit(1778374252.240:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.379002][ T36] audit: type=1400 audit(1778374252.240:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.379262][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.137391][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.147610][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.155137][ T294] bridge_slave_0: entered allmulticast mode [ 25.161740][ T294] bridge_slave_0: entered promiscuous mode [ 25.168394][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.175918][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.183263][ T294] bridge_slave_1: entered allmulticast mode [ 25.189827][ T294] bridge_slave_1: entered promiscuous mode [ 25.349111][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.356850][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.364447][ T299] bridge_slave_0: entered allmulticast mode [ 25.371452][ T299] bridge_slave_0: entered promiscuous mode [ 25.381960][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.389555][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.396901][ T299] bridge_slave_1: entered allmulticast mode [ 25.403888][ T299] bridge_slave_1: entered promiscuous mode [ 25.412730][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.419984][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.427687][ T298] bridge_slave_0: entered allmulticast mode [ 25.434413][ T298] bridge_slave_0: entered promiscuous mode [ 25.445952][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.453538][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.460819][ T298] bridge_slave_1: entered allmulticast mode [ 25.468043][ T298] bridge_slave_1: entered promiscuous mode [ 25.494570][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.501832][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.509354][ T300] bridge_slave_0: entered allmulticast mode [ 25.516204][ T300] bridge_slave_0: entered promiscuous mode [ 25.526231][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.533656][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.541172][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.548419][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.556701][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.564256][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.571500][ T300] bridge_slave_1: entered allmulticast mode [ 25.578831][ T300] bridge_slave_1: entered promiscuous mode [ 25.697717][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.705172][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.712883][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.720476][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.748267][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.756129][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.763632][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.771892][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.786564][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.794118][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.810123][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.817309][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.879386][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.886670][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.901358][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.909328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.923089][ T294] veth0_vlan: entered promiscuous mode [ 25.938004][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.945527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.954270][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.962212][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.982485][ T299] veth0_vlan: entered promiscuous mode [ 25.992419][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.000052][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.016290][ T299] veth1_macvtap: entered promiscuous mode [ 26.027252][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.034335][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.054499][ T294] veth1_macvtap: entered promiscuous mode [ 26.095267][ T299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.135806][ T313] fuse: Unknown parameter 'fd0x0000000000000001' [ 26.142793][ T298] veth0_vlan: entered promiscuous mode [ 26.150132][ T300] veth0_vlan: entered promiscuous mode [ 26.202429][ T298] veth1_macvtap: entered promiscuous mode [ 26.232029][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.250910][ T300] veth1_macvtap: entered promiscuous mode [ 26.260631][ T325] netlink: 'syz.0.5': attribute type 4 has an invalid length. [ 26.302748][ T327] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 26.328356][ T329] netlink: 'syz.0.8': attribute type 4 has an invalid length. [ 26.338923][ T329] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.8'. [ 26.352370][ T329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.426963][ T329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.436820][ T341] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 26.470420][ T346] fuse: Unknown parameter 'fd0x0000000000000001' [ 26.479589][ T348] capability: warning: `syz.3.13' uses 32-bit capabilities (legacy support in use) [ 26.535080][ T353] syzkaller1: entered promiscuous mode [ 26.540722][ T353] syzkaller1: entered allmulticast mode [ 26.655012][ T64] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.743782][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.795200][ T64] usb 2-1: device descriptor read/64, error -71 [ 26.816747][ T364] input: syz0 as /devices/virtual/input/input4 [ 26.877853][ T364] netlink: 'syz.0.18': attribute type 21 has an invalid length. [ 26.893821][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 26.901766][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.920678][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.931469][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.948693][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.959439][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.968821][ T9] usb 3-1: config 0 descriptor?? [ 27.043779][ T64] usb 2-1: device descriptor read/64, error -71 [ 27.193748][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.226692][ T373] tipc: Can't bind to reserved service type 2 [ 27.233605][ T373] netlink: 'syz.3.21': attribute type 12 has an invalid length. [ 27.242976][ T373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=373 comm=syz.3.21 [ 27.290972][ T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.302963][ T377] overlayfs: conflicting options: userxattr,redirect_dir=on [ 27.323775][ T45] usb 1-1: device descriptor read/64, error -71 [ 27.379937][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 27.388104][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 27.395871][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 27.404095][ T9] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 27.412676][ T9] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 27.426808][ T9] microsoft 0003:045E:07DA.0001: no inputs found [ 27.433550][ T9] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 27.443220][ T64] usb 2-1: device descriptor read/64, error -71 [ 27.563800][ T45] usb 1-1: device descriptor read/64, error -71 [ 27.580084][ T9] usb 3-1: USB disconnect, device number 2 [ 27.683794][ T64] usb 2-1: device descriptor read/64, error -71 [ 27.793929][ T64] usb usb2-port1: attempt power cycle [ 27.823930][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.963802][ T45] usb 1-1: device descriptor read/64, error -71 [ 28.135101][ T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.165142][ T64] usb 2-1: device descriptor read/8, error -71 [ 28.203771][ T45] usb 1-1: device descriptor read/64, error -71 [ 28.233765][ T369] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.305474][ T64] usb 2-1: device descriptor read/8, error -71 [ 28.314156][ T45] usb usb1-port1: attempt power cycle [ 28.393791][ T369] usb 4-1: Using ep0 maxpacket: 8 [ 28.400337][ T369] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.411906][ T369] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.424915][ T383] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.432626][ T369] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.439946][ T369] usb 4-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 28.449330][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.459388][ T369] usb 4-1: config 0 descriptor?? [ 28.553775][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.575070][ T64] usb 2-1: device descriptor read/8, error -71 [ 28.583779][ T383] usb 3-1: device descriptor read/64, error -71 [ 28.653791][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.674885][ T45] usb 1-1: device descriptor read/8, error -71 [ 28.705058][ T64] usb 2-1: device descriptor read/8, error -71 [ 28.804965][ T45] usb 1-1: device descriptor read/8, error -71 [ 28.814060][ T64] usb usb2-port1: unable to enumerate USB device [ 28.823797][ T383] usb 3-1: device descriptor read/64, error -71 [ 28.935622][ T369] usb 4-1: string descriptor 0 read error: -71 [ 28.943577][ T369] usbhid 4-1:0.0: can't add hid device: -71 [ 28.949666][ T369] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 28.958538][ T369] usb 4-1: USB disconnect, device number 2 [ 29.043851][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.063778][ T383] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.072807][ T45] usb 1-1: device descriptor read/8, error -71 [ 29.203779][ T383] usb 3-1: device descriptor read/64, error -71 [ 29.211216][ T45] usb 1-1: device descriptor read/8, error -71 [ 29.323841][ T45] usb usb1-port1: unable to enumerate USB device [ 29.404617][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 29.404637][ T36] audit: type=1400 audit(1778374257.300:149): avc: denied { name_bind } for pid=393 comm="syz.1.29" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.412430][ T394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=394 comm=syz.1.29 [ 29.445761][ T383] usb 3-1: device descriptor read/64, error -71 [ 29.456446][ T36] audit: type=1400 audit(1778374257.350:150): avc: denied { bind } for pid=395 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.460102][ T394] netlink: 'syz.1.29': attribute type 11 has an invalid length. [ 29.482657][ T36] audit: type=1400 audit(1778374257.350:151): avc: denied { ioctl } for pid=393 comm="syz.1.29" path="socket:[3792]" dev="sockfs" ino=3792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.512043][ T36] audit: type=1400 audit(1778374257.370:152): avc: denied { read write } for pid=395 comm="syz.3.30" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.535978][ T36] audit: type=1400 audit(1778374257.370:153): avc: denied { open } for pid=395 comm="syz.3.30" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.559876][ T36] audit: type=1400 audit(1778374257.370:154): avc: denied { ioctl } for pid=395 comm="syz.3.30" path="socket:[4299]" dev="sockfs" ino=4299 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.585575][ T383] usb usb3-port1: attempt power cycle [ 29.587101][ T36] audit: type=1400 audit(1778374257.370:155): avc: denied { ioctl } for pid=395 comm="syz.3.30" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.627783][ T36] audit: type=1400 audit(1778374257.520:156): avc: denied { create } for pid=407 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.648738][ T36] audit: type=1400 audit(1778374257.520:157): avc: denied { write } for pid=407 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.670929][ T36] audit: type=1400 audit(1778374257.520:158): avc: denied { nlmsg_write } for pid=407 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.913787][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.933840][ T383] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.961980][ T383] usb 3-1: device descriptor read/8, error -71 [ 29.979089][ T425] netlink: 116 bytes leftover after parsing attributes in process `syz.0.40'. [ 30.096268][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.110033][ T383] usb 3-1: device descriptor read/8, error -71 [ 30.112462][ T10] usb 2-1: config 114 has an invalid interface number: 20 but max is 0 [ 30.128542][ T10] usb 2-1: config 114 has no interface number 0 [ 30.136337][ T10] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 30.148074][ T10] usb 2-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 30.161478][ T10] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 30.179387][ T10] usb 2-1: config 114 interface 20 has no altsetting 0 [ 30.201304][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 30.210909][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.219642][ T10] usb 2-1: Product: syz [ 30.224387][ T10] usb 2-1: Manufacturer: syz [ 30.229286][ T10] usb 2-1: SerialNumber: syz [ 30.242511][ T410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.249993][ T410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.290660][ T453] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 30.343585][ T456] @0Ù: renamed from bond_slave_1 [ 30.444079][ T383] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.465514][ T383] usb 3-1: device descriptor read/8, error -71 [ 30.505825][ T410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.515778][ T410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.536897][ T467] bridge0: port 3(veth1_macvtap) entered blocking state [ 30.544013][ T467] bridge0: port 3(veth1_macvtap) entered disabled state [ 30.551183][ T467] veth1_macvtap: entered allmulticast mode [ 30.558191][ T467] veth1_macvtap: left allmulticast mode [ 30.610277][ T383] usb 3-1: device descriptor read/8, error -71 [ 30.733879][ T383] usb usb3-port1: unable to enumerate USB device [ 31.029299][ T10] pl2303 2-1:114.20: required interrupt-in endpoint missing [ 31.053847][ T10] usb 2-1: USB disconnect, device number 6 [ 31.121802][ T492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.450663][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.504256][ T499] Zero length message leads to an empty skb [ 31.603781][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 31.610733][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.619876][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 31.623760][ T383] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.631737][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.650240][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 31.662392][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 31.672774][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 31.682613][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 31.694672][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12288, setting to 1024 [ 31.707318][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 31.719384][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 31.723743][ T390] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.728698][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.745306][ T10] usb 2-1: Product: syz [ 31.749703][ T10] usb 2-1: Manufacturer: syz [ 31.754635][ T10] usb 2-1: SerialNumber: syz [ 31.760453][ T10] usb 2-1: config 0 descriptor?? [ 31.766789][ T491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 31.795107][ T383] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 31.808970][ T383] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 31.819172][ T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.827929][ T383] usb 3-1: Product: syz [ 31.832313][ T383] usb 3-1: Manufacturer: syz [ 31.837157][ T383] usb 3-1: SerialNumber: syz [ 31.883775][ T390] usb 1-1: Using ep0 maxpacket: 16 [ 31.890718][ T390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.900654][ T390] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 31.909386][ T390] usb 1-1: can't read configurations, error -22 [ 31.975614][ T10] usb 2-1: USB disconnect, device number 7 [ 32.043783][ T390] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.054419][ T383] usb 3-1: unit 1 not found! [ 32.062852][ T383] usb 3-1: USB disconnect, device number 7 [ 32.071752][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.193770][ T390] usb 1-1: Using ep0 maxpacket: 16 [ 32.200977][ T390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.210367][ T390] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.219437][ T390] usb 1-1: can't read configurations, error -22 [ 32.227713][ T390] usb usb1-port1: attempt power cycle [ 32.332309][ T503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.61'. [ 32.361975][ T505] bridge0: entered allmulticast mode [ 32.573766][ T390] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 32.604262][ T390] usb 1-1: Using ep0 maxpacket: 16 [ 32.612035][ T390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.622454][ T390] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.631447][ T390] usb 1-1: can't read configurations, error -22 [ 32.763803][ T390] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.784258][ T390] usb 1-1: Using ep0 maxpacket: 16 [ 32.791302][ T390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.799695][ T383] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.809021][ T390] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 32.817046][ T390] usb 1-1: can't read configurations, error -22 [ 32.823917][ T390] usb usb1-port1: unable to enumerate USB device [ 32.913795][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 32.955073][ T383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.965598][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.977594][ T383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.988023][ T383] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 32.997472][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.006479][ T383] usb 3-1: config 0 descriptor?? [ 33.063785][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 33.070339][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.081521][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.092214][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.101957][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.111682][ T10] usb 2-1: config 0 descriptor?? [ 33.423216][ T383] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x7 [ 33.430728][ T383] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0 [ 33.439789][ T383] hid-rmi 0003:0461:4E72.0002: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 33.529696][ T521] VFS: Mount too revealing [ 33.543758][ T390] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.626980][ T512] GUP no longer grows the stack in syz.2.65 (512): 200000004000-20000000a000 (200000002000) [ 33.637594][ T512] CPU: 1 UID: 0 PID: 512 Comm: syz.2.65 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 33.637632][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 33.637645][ T512] Call Trace: [ 33.637653][ T512] [ 33.637662][ T512] __dump_stack+0x21/0x30 [ 33.637701][ T512] dump_stack_lvl+0x140/0x1c0 [ 33.637733][ T512] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.637764][ T512] ? find_vma+0xd3/0x120 [ 33.637788][ T512] ? vma_is_secretmem+0x11/0x50 [ 33.637818][ T512] dump_stack+0x19/0x20 [ 33.637847][ T512] __get_user_pages+0x1e18/0x22b0 [ 33.637880][ T512] ? populate_vma_page_range+0x220/0x220 [ 33.637909][ T512] get_user_pages_remote+0x3af/0xc00 [ 33.637940][ T512] ? __cfi_get_user_pages_remote+0x10/0x10 [ 33.637968][ T512] __access_remote_vm+0x1df/0x630 [ 33.637994][ T512] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.638026][ T512] ? access_remote_vm+0x60/0x60 [ 33.638052][ T512] ? _raw_spin_lock+0x92/0x120 [ 33.638084][ T512] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.638114][ T512] access_remote_vm+0x39/0x60 [ 33.638140][ T512] proc_pid_cmdline_read+0x4c8/0xb80 [ 33.638184][ T512] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 33.638215][ T512] ? bpf_lsm_file_permission+0xd/0x20 [ 33.638243][ T512] vfs_readv+0x5ed/0xa10 [ 33.638272][ T512] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 33.638302][ T512] ? do_readv+0x2e0/0x2e0 [ 33.638335][ T512] __x64_sys_preadv+0x1a6/0x2c0 [ 33.638360][ T512] ? __cfi___x64_sys_preadv+0x10/0x10 [ 33.638383][ T512] ? switch_fpu_return+0x12/0x20 [ 33.638412][ T512] x64_sys_call+0x1ee9/0x2ee0 [ 33.638433][ T512] do_syscall_64+0x57/0xf0 [ 33.638451][ T512] ? clear_bhb_loop+0x50/0xa0 [ 33.638475][ T512] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.638497][ T512] RIP: 0033:0x7f6948f9cdd9 [ 33.638515][ T512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.638534][ T512] RSP: 002b:00007f6949e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 33.638560][ T512] RAX: ffffffffffffffda RBX: 00007f6949215fa0 RCX: 00007f6948f9cdd9 [ 33.638577][ T512] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000a [ 33.638593][ T512] RBP: 00007f6949032d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 33.638608][ T512] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 33.638622][ T512] R13: 00007f6949216038 R14: 00007f6949215fa0 R15: 00007ffe053bd848 [ 33.638640][ T512] [ 33.918066][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 33.934143][ T390] usb 4-1: Using ep0 maxpacket: 32 [ 33.939792][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.943605][ T390] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.959926][ T390] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.972781][ T10] usb 2-1: USB disconnect, device number 8 [ 33.972864][ T390] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.988736][ T390] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 33.997479][ T390] usb 4-1: Product: syz [ 34.002581][ T390] usb 4-1: Manufacturer: syz [ 34.012733][ T369] usb 3-1: USB disconnect, device number 8 [ 34.022232][ T390] hub 4-1:4.0: USB hub found [ 34.224242][ T390] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 34.264615][ T390] usb 4-1: USB disconnect, device number 3 [ 34.443754][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.453470][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 34.453488][ T36] audit: type=1400 audit(1778374262.340:253): avc: denied { ioctl } for pid=535 comm="syz.1.72" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.490224][ T36] audit: type=1400 audit(1778374262.360:254): avc: denied { read write } for pid=299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.533807][ T36] audit: type=1400 audit(1778374262.360:255): avc: denied { read write open } for pid=299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.581180][ T36] audit: type=1400 audit(1778374262.360:256): avc: denied { ioctl } for pid=299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.609671][ T551] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.76'. [ 34.617285][ T36] audit: type=1400 audit(1778374262.390:257): avc: denied { ioctl } for pid=535 comm="syz.1.72" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.619903][ T551] netlink: 280 bytes leftover after parsing attributes in process `syz.2.76'. [ 34.645615][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 34.660827][ T36] audit: type=1400 audit(1778374262.390:258): avc: denied { ioctl } for pid=535 comm="syz.1.72" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.700865][ T36] audit: type=1400 audit(1778374262.420:259): avc: denied { read write } for pid=298 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.735206][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.744972][ T36] audit: type=1400 audit(1778374262.420:260): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.771912][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 34.773737][ T390] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.784481][ T36] audit: type=1400 audit(1778374262.420:261): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.820200][ T36] audit: type=1400 audit(1778374262.450:262): avc: denied { ioctl } for pid=535 comm="syz.1.72" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.823735][ T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 34.859200][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.867811][ T10] usb 2-1: Product: syz [ 34.872179][ T10] usb 2-1: Manufacturer: syz [ 34.876898][ T10] usb 2-1: SerialNumber: syz [ 34.908249][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 34.948304][ T390] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.959795][ T390] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.971049][ T390] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.997509][ T390] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.007533][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.017254][ T390] usb 4-1: Product: syz [ 35.021698][ T390] usb 4-1: Manufacturer: syz [ 35.027850][ T390] usb 4-1: SerialNumber: syz [ 35.044626][ T390] cdc_mbim 4-1:1.0: skipping garbage [ 35.057691][ T390] usb 4-1: selecting invalid altsetting 1 [ 35.092215][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 35.101663][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.575821][ T568] fuse: Bad value for 'fd' [ 35.628118][ T568] kvm: pic: non byte read [ 35.634491][ T568] kvm: pic: non byte read [ 35.639454][ T568] kvm: pic: single mode not supported [ 35.639520][ T568] kvm: pic: non byte read [ 35.653262][ T568] kvm: pic: non byte read [ 35.659901][ T568] kvm: pic: single mode not supported [ 35.659987][ T568] kvm: pic: non byte read [ 35.671959][ T10] usb 2-1: 2:1 : can't get Cluster Descriptor [ 35.674187][ T568] kvm: pic: level sensitive irq not supported [ 35.678732][ T568] kvm: pic: non byte read [ 35.695846][ T546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.711735][ T568] kvm: pic: level sensitive irq not supported [ 35.711850][ T568] kvm: pic: non byte read [ 35.723940][ T546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.829849][ T390] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed [ 35.856774][ T390] usb 4-1: selecting invalid altsetting 1 [ 35.863107][ T390] cdc_mbim 4-1:1.0: bind() failure [ 35.911501][ T390] usb 4-1: USB disconnect, device number 4 [ 35.936094][ T536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.954902][ T590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=590 comm=syz.3.84 [ 35.967736][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 35.983948][ T536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.995316][ T45] usb 2-1: USB disconnect, device number 9 [ 36.164814][ T10] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 36.184874][ T10] usb 1-1: config 1 has an invalid descriptor of length 210, skipping remainder of the config [ 36.203186][ T10] usb 1-1: config 1 has no interface number 0 [ 36.217075][ T10] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.261242][ T10] usb 1-1: config 1 interface 188 has no altsetting 0 [ 36.284899][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 36.311575][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.353859][ T598] kvm: kvm [597]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 36.362913][ T598] kvm: kvm [597]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 36.373711][ T10] usb 1-1: Product: syz [ 36.378293][ T10] usb 1-1: Manufacturer: syz [ 36.383111][ T10] usb 1-1: SerialNumber: syz [ 36.436196][ T10] usb 1-1: unknown interface protocol 0xae, assuming v1 [ 36.459211][ T604] ======================================================= [ 36.459211][ T604] WARNING: The mand mount option has been deprecated and [ 36.459211][ T604] and is ignored by this kernel. Remove the mand [ 36.459211][ T604] option from the mount to silence this warning. [ 36.459211][ T604] ======================================================= [ 36.462881][ T10] usb 1-1: cannot find UAC_HEADER [ 36.565417][ T10] snd-usb-audio 1-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 36.696983][ T10] usb 1-1: USB disconnect, device number 10 [ 36.720881][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.016258][ T621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 37.289602][ T45] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 37.467524][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.498274][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 37.522776][ T45] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 37.534868][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.543311][ T45] usb 3-1: Product: syz [ 37.548951][ T45] usb 3-1: Manufacturer: syz [ 37.555025][ T45] usb 3-1: SerialNumber: syz [ 37.569106][ T45] usb 3-1: config 0 descriptor?? [ 37.577305][ T645] SELinux: failed to load policy [ 37.603380][ T621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 37.638575][ T45] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 37.650089][ T45] usb 3-1: No valid video chain found. [ 37.856323][ T621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.870423][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.879836][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.889828][ T369] usb 3-1: USB disconnect, device number 9 [ 37.963829][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.993911][ T390] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.113741][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 38.126323][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.137727][ T45] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.149219][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.162923][ T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.172470][ T390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.184508][ T45] usb 1-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 38.196255][ T390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.206339][ T390] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 38.216000][ T45] usb 1-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 38.227543][ T390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.236006][ T45] usb 1-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 38.254040][ T390] usb 4-1: config 0 descriptor?? [ 38.259254][ T45] usb 1-1: config 1 interface 1 has no altsetting 1 [ 38.275335][ T45] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 38.289143][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.298166][ T45] usb 1-1: Product: syz [ 38.302960][ T45] usb 1-1: Manufacturer: syz [ 38.314281][ T45] usb 1-1: SerialNumber: syz [ 38.492978][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.506750][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.536279][ T45] usb 1-1: 1:151 : invalid UAC_AS_GENERAL desc [ 38.553769][ T45] usb 1-1: 0:2 : does not exist [ 38.569334][ T45] usb 1-1: USB disconnect, device number 11 [ 38.624683][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 38.669153][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.823744][ T368] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 38.950108][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 38.958277][ T10] usb 2-1: can't read configurations, error -71 [ 38.993768][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 39.002807][ T368] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.012657][ T368] usb 3-1: config 1 has no interface number 1 [ 39.019561][ T368] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 39.031135][ T368] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 39.045283][ T368] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.061471][ T368] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.071450][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.082390][ T368] usb 3-1: Product: syz [ 39.091941][ T368] usb 3-1: Manufacturer: syz [ 39.103548][ T368] usb 3-1: SerialNumber: syz [ 39.336076][ T663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.345794][ T663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.361044][ T368] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 39.443754][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 39.455898][ T36] kauditd_printk_skb: 1464 callbacks suppressed [ 39.455919][ T36] audit: type=1400 audit(1778374267.350:1727): avc: denied { ioctl } for pid=674 comm="syz.0.111" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.488307][ T36] audit: type=1400 audit(1778374267.350:1728): avc: denied { ioctl } for pid=674 comm="syz.0.111" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.514500][ T36] audit: type=1400 audit(1778374267.350:1729): avc: denied { ioctl } for pid=674 comm="syz.0.111" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.541001][ T36] audit: type=1400 audit(1778374267.410:1730): avc: denied { ioctl } for pid=674 comm="syz.0.111" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.568256][ T36] audit: type=1400 audit(1778374267.430:1731): avc: denied { ioctl } for pid=674 comm="syz.0.111" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.594310][ T36] audit: type=1400 audit(1778374267.430:1732): avc: denied { ioctl } for pid=674 comm="syz.0.111" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.621498][ T36] audit: type=1400 audit(1778374267.460:1733): avc: denied { ioctl } for pid=662 comm="syz.2.108" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.649879][ T36] audit: type=1400 audit(1778374267.460:1734): avc: denied { ioctl } for pid=662 comm="syz.2.108" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.676821][ T45] usb 1-1: device descriptor read/64, error -71 [ 39.677698][ T36] audit: type=1400 audit(1778374267.460:1735): avc: denied { ioctl } for pid=662 comm="syz.2.108" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.715043][ T36] audit: type=1400 audit(1778374267.460:1736): avc: denied { ioctl } for pid=662 comm="syz.2.108" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.923746][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.153976][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 40.163769][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 40.175477][ T368] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 40.303759][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.318816][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 136: 252, using maximum allowed: 30 [ 40.332406][ T10] usb 2-1: config 0 interface 0 altsetting 136 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 40.347274][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 40.355159][ T10] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 40.365541][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.376972][ T10] usb 2-1: config 0 descriptor?? [ 40.543749][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.653961][ T45] usb usb1-port1: attempt power cycle [ 40.662545][ T390] usbhid 4-1:0.0: can't add hid device: -71 [ 40.685335][ T390] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 40.700279][ T390] usb 4-1: USB disconnect, device number 5 [ 40.796539][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.820757][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.831088][ T683] incfs: Options parsing error. -22 [ 40.832439][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.838654][ T683] incfs: mount failed -22 [ 40.844766][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.857468][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.873740][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.892232][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.902336][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.910859][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.918243][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.926572][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.935067][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.942673][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.951507][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.961348][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.969792][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.977683][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.987504][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 40.996062][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.004390][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 41.004964][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.027164][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.028653][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.036131][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.048495][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.056834][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.064494][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.073750][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.081428][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.089274][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.096556][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.104250][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.111710][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.119865][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.127508][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.135413][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.142952][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.150622][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.158084][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.165541][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.173287][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.176685][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.180821][ T10] saitek 0003:06A3:0CCD.0003: unknown main item tag 0x0 [ 41.197169][ T10] saitek 0003:06A3:0CCD.0003: hidraw0: USB HID v0.06 Device [HID 06a3:0ccd] on usb-dummy_hcd.1-1/input0 [ 41.215526][ T10] usb 2-1: USB disconnect, device number 12 [ 41.256892][ T688] fido_id[688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 41.423783][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 41.446304][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.589306][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.599254][ T312] usb 3-1: USB disconnect, device number 10 [ 41.713820][ T45] usb usb1-port1: unable to enumerate USB device [ 41.843973][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 42.004737][ T710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.013782][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 42.017868][ T710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.026461][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.068881][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.093722][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.100938][ T10] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 42.116794][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.153922][ T10] usb 2-1: config 0 descriptor?? [ 42.155718][ T713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.192238][ T713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.243727][ T390] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.413726][ T390] usb 4-1: Using ep0 maxpacket: 32 [ 42.423743][ T727] input: syz1 as /devices/virtual/input/input6 [ 42.435147][ T390] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 42.454019][ T390] usb 4-1: config 0 has no interface number 0 [ 42.463535][ T390] usb 4-1: config 0 interface 184 has no altsetting 0 [ 42.486694][ T390] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 42.514840][ T390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.537238][ T390] usb 4-1: Product: syz [ 42.541476][ T390] usb 4-1: Manufacturer: syz [ 42.555050][ T390] usb 4-1: SerialNumber: syz [ 42.570103][ T390] usb 4-1: config 0 descriptor?? [ 42.577772][ T10] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 42.588162][ T390] smsc75xx v1.0.0 [ 42.605481][ T10] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 42.634651][ T10] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 42.658825][ T10] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 42.681383][ T10] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x0 [ 42.702430][ T10] smartjoyplus 0003:6666:8804.0004: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0 [ 42.729090][ T10] smartjoyplus 0003:6666:8804.0004: no output reports found [ 42.790026][ T390] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 42.791510][ T10] usb 2-1: USB disconnect, device number 13 [ 42.833761][ T390] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 42.883801][ T390] usb 4-1: USB disconnect, device number 6 [ 42.901764][ T733] fido_id[733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 43.163731][ T664] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.333790][ T664] usb 3-1: Using ep0 maxpacket: 16 [ 43.413897][ T664] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 43.436496][ T664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.458615][ T664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.481720][ T664] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 43.512540][ T664] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 43.535363][ T664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.546853][ T664] usb 3-1: config 0 descriptor?? [ 43.662335][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 43.673759][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.678730][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 43.857069][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.873712][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.890769][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 43.901972][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.922205][ T10] usb 4-1: Product: syz [ 43.926668][ T10] usb 4-1: Manufacturer: syz [ 43.931486][ T10] usb 4-1: SerialNumber: syz [ 44.016563][ T731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.108716][ T664] usbhid 3-1:0.0: can't add hid device: -71 [ 44.133787][ T664] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.170239][ T588] bridge_slave_1: left allmulticast mode [ 44.171301][ T664] usb 3-1: USB disconnect, device number 11 [ 44.184802][ T742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.201669][ T588] bridge_slave_1: left promiscuous mode [ 44.223829][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.233955][ T742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.254926][ T588] bridge_slave_0: left allmulticast mode [ 44.260633][ T588] bridge_slave_0: left promiscuous mode [ 44.290440][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.414668][ T10] usb 4-1: 0:1 : does not exist [ 44.423771][ T10] usb 4-1: unit 4 not found! [ 44.442907][ T10] usb 4-1: USB disconnect, device number 7 [ 44.490238][ T588] veth1_macvtap: left promiscuous mode [ 44.495939][ T36] kauditd_printk_skb: 570 callbacks suppressed [ 44.495956][ T36] audit: type=1400 audit(1778374272.380:2307): avc: denied { read write } for pid=294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.533521][ T588] veth0_vlan: left promiscuous mode [ 44.558038][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.603724][ T36] audit: type=1400 audit(1778374272.380:2308): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.663761][ T36] audit: type=1400 audit(1778374272.380:2309): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.701297][ T36] audit: type=1400 audit(1778374272.570:2310): avc: denied { execmem } for pid=769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.723296][ T36] audit: type=1400 audit(1778374272.590:2311): avc: denied { create } for pid=770 comm="syz.1.142" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.757784][ T12] ------------[ cut here ]------------ [ 44.763488][ T12] WARNING: CPU: 1 PID: 12 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 44.774487][ T12] Modules linked in: [ 44.778902][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 88ceac27f2f759e3bbd2a088bdce4bdb7d92b188 [ 44.791215][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 44.802094][ T12] Workqueue: iou_exit io_ring_exit_work [ 44.808159][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 44.815984][ T12] Code: 5d e9 d5 bd 54 02 cc e8 cf 37 32 fe 0f 0b eb e3 e8 c6 37 32 fe 0f 0b eb da e8 bd 37 32 fe 0f 0b e9 4d fe ff ff e8 b1 37 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 44.837648][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 44.845566][ T12] RAX: ffffffff835584ef RBX: 1ffff1102196b0a5 RCX: ffff888102650000 [ 44.854959][ T12] RDX: 0000000000000000 RSI: 0000000000000051 RDI: 00000000000003c9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 44.862976][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 44.863779][ T36] audit: type=1400 audit(1778374272.590:2312): avc: denied { ioctl } for pid=770 comm="syz.1.142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7788 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.870999][ T12] R10: 0000000000000000 R11: ffffffff835574d0 R12: ffff88813dff0000 [ 44.907303][ T12] R13: ffff88810cb58500 R14: ffff88810d3e0000 R15: ffff88810d3e0010 [ 44.916120][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.920478][ T36] audit: type=1400 audit(1778374272.590:2313): avc: denied { ioctl } for pid=770 comm="syz.1.142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7788 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.925993][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.961278][ T12] CR2: 000055556c7a2918 CR3: 000000012faf0000 CR4: 00000000003526b0 [ 44.969601][ T12] Call Trace: [ 44.972989][ T12] [ 44.976071][ T12] ? _raw_spin_unlock+0x45/0x60 [ 44.981831][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 44.987294][ T12] io_uring_try_cancel_uring_cmd+0x1a1/0x280 [ 44.994401][ T12] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 45.000516][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 45.006392][ T12] io_ring_exit_work+0x23c/0x83b [ 45.011810][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 45.018334][ T12] ? wake_up_process+0x14/0x20 [ 45.023501][ T12] process_scheduled_works+0x7d4/0x1020 [ 45.023797][ T36] audit: type=1400 audit(1778374272.590:2314): avc: denied { ioctl } for pid=770 comm="syz.1.142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7788 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.029450][ T12] worker_thread+0xc51/0x1370 [ 45.060663][ T12] kthread+0x2c9/0x370 [ 45.065242][ T12] ? __cfi_worker_thread+0x10/0x10 [ 45.070808][ T12] ? __cfi_kthread+0x10/0x10 [ 45.075504][ T12] ret_from_fork+0x67/0xa0 [ 45.080142][ T12] ? __cfi_kthread+0x10/0x10 [ 45.085152][ T12] ret_from_fork_asm+0x1a/0x30 [ 45.090310][ T12] [ 45.093437][ T12] ---[ end trace 0000000000000000 ]--- [ 45.093756][ T36] audit: type=1400 audit(1778374272.590:2315): avc: denied { read write } for pid=770 comm="syz.1.142" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.183769][ T36] audit: type=1400 audit(1778374272.590:2316): avc: denied { read write open } for pid=770 comm="syz.1.142" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.243782][ T312] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 45.649825][ T588] bridge_slave_1: left promiscuous mode [ 45.655632][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.674074][ T588] bridge_slave_0: left allmulticast mode [ 45.679966][ T588] bridge_slave_0: left promiscuous mode [ 45.693790][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.714675][ T588] bridge_slave_1: left allmulticast mode [ 45.720988][ T588] bridge_slave_1: left promiscuous mode [ 45.727551][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.736147][ T588] bridge_slave_0: left allmulticast mode [ 45.742693][ T588] bridge_slave_0: left promiscuous mode [ 45.748898][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.757637][ T588] bridge_slave_1: left allmulticast mode [ 45.763580][ T588] bridge_slave_1: left promiscuous mode [ 45.769761][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.778369][ T588] bridge_slave_0: left allmulticast mode [ 45.784706][ T588] bridge_slave_0: left promiscuous mode [ 45.790789][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.935369][ T588] bridge0 (unregistering): left allmulticast mode [ 46.014368][ T588] veth1_macvtap: left promiscuous mode [ 46.020307][ T588] veth0_vlan: left promiscuous mode [ 46.027447][ T588] veth1_macvtap: left promiscuous mode [ 46.033380][ T588] veth0_vlan: left promiscuous mode [ 46.041480][ T588] veth1_macvtap: left promiscuous mode [ 46.047146][ T588] veth0_vlan: left promiscuous mode