last executing test programs: 55.11466215s ago: executing program 0 (id=46): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x240000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0) landlock_restrict_self(r6, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f00000002c0)={0x20, r9}, 0x0) landlock_restrict_self(r8, 0x0) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1}}, 0x26) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000340)=ANY=[@ANYBLOB="7472646e6f3d0000000000000000004a3c2e9d94ba5e01071ea5a2dcd253edabe66dff0402d0839f", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',nodevmap,k']) 55.038290205s ago: executing program 0 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x70fe}) capset(&(0x7f0000000080)={0x20080522}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r5, 0xaea3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffffe7) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'ip_vti0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) mkdir(&(0x7f0000001040)='./file0\x00', 0xc0) getxattr(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYRES8=r3], 0xffdd) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x40010, r7, 0x852ac000) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x1) fchdir(r9) r10 = open(&(0x7f0000000140)='.\x00', 0x208680, 0x1a8) getdents(r10, 0x0, 0x0) close_range(r0, r1, 0x0) 54.962440119s ago: executing program 0 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x42, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x40000006, 0x2, 0x0, 0x5, 0x81, 0xfff9}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 53.416359889s ago: executing program 0 (id=66): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005a7000/0x400000)=nil) madvise(&(0x7f00000fd000/0x3000)=nil, 0x3000, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) unshare(0x66060c80) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2f, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed0102030109021d0001000000000904000001437b6a0009050000000000002daf000205"], 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x258, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@remote, 0x4d3, 0x32}, @in6=@mcast1, {}, {}, {}, 0xffffffff, 0x0, 0xa}, [@algo_crypt={0x10a, 0x2, {{'ecb(cipher_null)\x00'}, 0x610, "60d2d73cc8daff8cdf300e30faeb534cd84b5f23da22d5add1f9d106fd105f5cae02145c46b1c9ea7bf4d7c6c52ff5bf7873e3fb7122ca59b72b64dcaa75cfda9dbf1301b0e74633c6eb1f97c4d58117809bbab268b7d9f92579a8c087db3b3e3a5e255199976eb93c9daad68859d465108c842e7b30c22628c7366298fc4eb9f643db180c5404b412e8338bececf68e7111a5b1634d488079bb1d8df3ad0010000000000000d494c0a2c5ccd37d2b070f2f1ae3ee7e946df2d07b8438a7e53b1746"}}, @algo_auth_trunc={0x5c, 0x14, {{'sha1-asm\x00'}, 0x80, 0x0, "0a55b0ca9cce75f5c91c906cf8542b42"}}]}, 0x258}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000680)={@mcast2, 0x9884, 0x0, 0x3, 0x6, 0x4, 0xc7e}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) (async) fcntl$setownex(r3, 0xf, &(0x7f0000000140)) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) madvise(&(0x7f0000152000/0x4000)=nil, 0x4000, 0xd) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x2, 0x5f) 52.88766093s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x148) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000002c0)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4002a, &(0x7f0000000000)={[{@noswap}]}) 52.785772156s ago: executing program 0 (id=74): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x62a, 0x7100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x22, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x81, {0x9, 0x21, 0x7ff, 0xb, 0x1, {0x22, 0xe2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x89, 0xc}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xb4, 0x9, 0x8, 0x8, 0x6f}, 0x52, &(0x7f0000000140)={0x5, 0xf, 0x52, 0x2, [@generic={0x4a, 0x10, 0x3, "b60539ba68d9ef5f369dc45b47daf5bcbe5ca3a38e06b3c7d50f655ff0f3c80943a6fcbd81297381e39bb704026bfaf98c04068ca644621a3ac1aa4b059b0e0680acec5f91326a"}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "307fb032553ed62b6aa1b1845f92db45de649f2d65f1b72f767951af42786ea3a46a1c9823b1d2fd20877294dbca450cc850ea919eb498b886dcb94f9e2b6549072a05b5f54c6b2d27b030781c686cb7e668a7c46dbf9dd27801c5776e4aa8ee2885040aab5f616d8f1c2bbbaa3ab9deabfda39568f53c035b6d8e1c0d4de96c3143e3297a2f76b8703b6e75f70d47fe4395c1e60a42e498708409844f7a92a87080b18067"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x426}}, {0x24, &(0x7f0000000440)=@string={0x24, 0x3, "0ded32d5f8147511f6c18ba84897bbd9e09f3495fef728d6366b6e1e134826cd5c13"}}, {0x13, &(0x7f0000000480)=@string={0x13, 0x3, "f1fdd2fc4b156d730690d1df6ed19fd7be"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}]}) (rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, &(0x7f00000005c0)={0x20, 0xf, 0x8b, {0x8b, 0x31, "aae8623c691674076455a400c8355b5c7effb1e1a570de8defd7d42ccb04ccc48accfc7938fa46ca7d51edca4773d26df85512e1425e7654db5f796ec3fada9f8c3403c6cce05b419fa4af05cb8c59c90e7929faba0693669317f28a25549122d276d8fc35a2871f125cc3cd02a54e74d61b331029d25d207c2620ca0c11098950551c66006be6eacb"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "6415b149"}, @main=@item_4={0x3, 0x0, 0x665ec7ee9a749104, "0fdc4c8c"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0xc, 0x1, {0x22, 0x46a}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)={0x40, 0x18, 0xb0, "615344008b53202b5d3034933824cdd4153fc87c30e3de0ce013574ecd6988f27fe59dcd7f89b4064ac6f19e5d7bad180f6bb1e0d74d7fba010dfd4418c29a62619d66a7bee00da57abb2b2bb36627264e25884258dd62f2070071ba6fe3cf0738be84580080c5a08a2d978bae7593796e7cfed5becea1efa8be90d9e5d21c285e7e603c0d915ea19fc36a1b3606b3bcd97a41cf68d1e6703417177684666b33f5c2ffdbc9b364180070c19f3b3ba649"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000008c0)={0x20, 0x1, 0xf1, "5a74e1f3d1ffb9f2c2a31aba8bb305a61b4dd9682ab60fa24c1067c1cc82682fe86f115b0b7db1a811a2c4fa2c47385a45a88a808a02280b4cbc4c3b6e7f3f55dd877ad3c66caf6e3ccd6deaa8af348293457dbf2f020b9166cba52ba18023106ad725d2be157b4e90e998a6c95f12f8723166040f28eda179c60ceea0a9e856ae9d799e13ac4593301303bfcfc10a321e3b7e06dc54de05cd51f19699d27a704d1b819bf8e76ce3e405d26d068451430dc88f63c7d2209c5eb9147c47c4208772984e129a10f6bf8db73a8d190058c4d347e09ca623056505f4676ae46c61103bd82c2375d9af73600bec4441883230be"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0xfffffffffffffd54, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x6, @string={0x6}}}, 0x0) 52.743491668s ago: executing program 32 (id=74): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x62a, 0x7100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x22, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x81, {0x9, 0x21, 0x7ff, 0xb, 0x1, {0x22, 0xe2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x89, 0xc}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xb4, 0x9, 0x8, 0x8, 0x6f}, 0x52, &(0x7f0000000140)={0x5, 0xf, 0x52, 0x2, [@generic={0x4a, 0x10, 0x3, "b60539ba68d9ef5f369dc45b47daf5bcbe5ca3a38e06b3c7d50f655ff0f3c80943a6fcbd81297381e39bb704026bfaf98c04068ca644621a3ac1aa4b059b0e0680acec5f91326a"}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "307fb032553ed62b6aa1b1845f92db45de649f2d65f1b72f767951af42786ea3a46a1c9823b1d2fd20877294dbca450cc850ea919eb498b886dcb94f9e2b6549072a05b5f54c6b2d27b030781c686cb7e668a7c46dbf9dd27801c5776e4aa8ee2885040aab5f616d8f1c2bbbaa3ab9deabfda39568f53c035b6d8e1c0d4de96c3143e3297a2f76b8703b6e75f70d47fe4395c1e60a42e498708409844f7a92a87080b18067"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x426}}, {0x24, &(0x7f0000000440)=@string={0x24, 0x3, "0ded32d5f8147511f6c18ba84897bbd9e09f3495fef728d6366b6e1e134826cd5c13"}}, {0x13, &(0x7f0000000480)=@string={0x13, 0x3, "f1fdd2fc4b156d730690d1df6ed19fd7be"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}]}) (rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, &(0x7f00000005c0)={0x20, 0xf, 0x8b, {0x8b, 0x31, "aae8623c691674076455a400c8355b5c7effb1e1a570de8defd7d42ccb04ccc48accfc7938fa46ca7d51edca4773d26df85512e1425e7654db5f796ec3fada9f8c3403c6cce05b419fa4af05cb8c59c90e7929faba0693669317f28a25549122d276d8fc35a2871f125cc3cd02a54e74d61b331029d25d207c2620ca0c11098950551c66006be6eacb"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f00000006c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "6415b149"}, @main=@item_4={0x3, 0x0, 0x665ec7ee9a749104, "0fdc4c8c"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0xc, 0x1, {0x22, 0x46a}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)={0x40, 0x18, 0xb0, "615344008b53202b5d3034933824cdd4153fc87c30e3de0ce013574ecd6988f27fe59dcd7f89b4064ac6f19e5d7bad180f6bb1e0d74d7fba010dfd4418c29a62619d66a7bee00da57abb2b2bb36627264e25884258dd62f2070071ba6fe3cf0738be84580080c5a08a2d978bae7593796e7cfed5becea1efa8be90d9e5d21c285e7e603c0d915ea19fc36a1b3606b3bcd97a41cf68d1e6703417177684666b33f5c2ffdbc9b364180070c19f3b3ba649"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000008c0)={0x20, 0x1, 0xf1, "5a74e1f3d1ffb9f2c2a31aba8bb305a61b4dd9682ab60fa24c1067c1cc82682fe86f115b0b7db1a811a2c4fa2c47385a45a88a808a02280b4cbc4c3b6e7f3f55dd877ad3c66caf6e3ccd6deaa8af348293457dbf2f020b9166cba52ba18023106ad725d2be157b4e90e998a6c95f12f8723166040f28eda179c60ceea0a9e856ae9d799e13ac4593301303bfcfc10a321e3b7e06dc54de05cd51f19699d27a704d1b819bf8e76ce3e405d26d068451430dc88f63c7d2209c5eb9147c47c4208772984e129a10f6bf8db73a8d190058c4d347e09ca623056505f4676ae46c61103bd82c2375d9af73600bec4441883230be"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0xfffffffffffffd54, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x6, @string={0x6}}}, 0x0) 5.480671961s ago: executing program 4 (id=440): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) io_getevents(0x0, 0x7, 0x0, 0x0, &(0x7f0000001200)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5.410330775s ago: executing program 4 (id=441): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x382, 0x0) write$nbd(r2, &(0x7f0000000e00)={0x67446698, 0x0, 0x3, 0x1, 0x4, "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"}, 0x1000) mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x0, 0x33df89d874ba633f, r2, 0x7fc7000) fsmount(r1, 0x0, 0x1) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 4.939243543s ago: executing program 4 (id=442): sigaltstack(&(0x7f0000000000)={0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008004}, 0x4010845) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205000000a7"], 0x0}, 0x0) 4.686963137s ago: executing program 3 (id=446): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x33fe, 0x0, 0xfffc}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000080)=0xc5, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x9, {0x3c, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000004840)) eventfd(0x7fff) recvmmsg(r6, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000180)=""/98, 0x62}], 0x5}, 0x10000}], 0x1, 0x40, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000005c0)=""/218) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="79b919d008d200200a00806e0800a580fbb10e83"], 0x1c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020318090212000100000000090400000002060042f7af1478d7dad4ac9daf1f29a5d96de61af359b1912b52068a583fad3e9ee891276bfdf15944d2bd79eb1575c1f8db233afb8b772b5a53a1f43b44f27f56424ae2c4c16f8aaf6e54082c"], 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x33fe, 0x0, 0xfffc}}}) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000080)=0xc5, 0x4) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x9, {0x3c, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000004840)) (async) eventfd(0x7fff) (async) recvmmsg(r6, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000180)=""/98, 0x62}], 0x5}, 0x10000}], 0x1, 0x40, 0x0) (async) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000005c0)=""/218) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="79b919d008d200200a00806e0800a580fbb10e83"], 0x1c}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020318090212000100000000090400000002060042f7af1478d7dad4ac9daf1f29a5d96de61af359b1912b52068a583fad3e9ee891276bfdf15944d2bd79eb1575c1f8db233afb8b772b5a53a1f43b44f27f56424ae2c4c16f8aaf6e54082c"], 0x0) (async) 3.974211019s ago: executing program 3 (id=449): r0 = getpid() syz_pidfd_open(r0, 0x0) tkill(r0, 0x3e) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400000, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x42) r2 = openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x490000, 0x8) process_mrelease(r2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000002240), &(0x7f0000002280)=0x0, &(0x7f00000022c0)) stat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x6, &(0x7f0000002480)=[r3, r6, r8, r10, r12, 0xffffffffffffffff]) io_submit(0x0, 0x1, &(0x7f0000002540)=[&(0x7f0000002500)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f00000024c0)="bc8c029196dd89b863cfc726e0ed46ebe2e8d8dddf12738439d12e97e25154cf3aa3d1eaef7c58b9b16d49273f1410b2ac", 0x31, 0xa73d, 0x0, 0xaa497b34659ae028}]) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000002580)=@md0, r9, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x5}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002600)={0x340, 0x0, r4, [{{0x4, 0x1, 0xff, 0x3, 0x7, 0x5, {0x4, 0x7, 0x4, 0x2, 0x5, 0x5, 0x2, 0x7, 0x9, 0x2000, 0x3, r11, r10, 0x5, 0x93fc}}, {0x0, 0x5, 0x8, 0x9, ':#,,-%-('}}, {{0x2, 0x2, 0x6, 0x2, 0x7, 0x8, {0x2, 0x7, 0x8, 0x5, 0x6, 0x81, 0x2, 0x7618, 0x5c, 0x4000, 0x0, r9, r3, 0x5, 0x4}}, {0x5, 0x8, 0x1, 0xfffffffa, '%'}}, {{0x0, 0x1, 0x1, 0x3, 0xffff, 0x8, {0x1, 0x1, 0x0, 0x6, 0x7f, 0x9, 0xe429, 0xfe6e, 0x3, 0xc000, 0x9, r11, r8, 0x9}}, {0x2, 0x401, 0x9, 0x4, '/dev/md0\x00'}}, {{0x0, 0x1, 0x95, 0x93c5, 0x6, 0x8, {0x0, 0x9, 0x5831, 0x5, 0x7, 0x0, 0x6, 0x10000, 0x576c, 0x2000, 0x415, r9, r10, 0xb, 0x9}}, {0x5, 0xd, 0x9, 0xca9, '/dev/md0\x00'}}, {{0x6, 0x1, 0x1, 0xc, 0x8001, 0x2, {0x6, 0x3, 0x80, 0x3, 0xa2b6, 0x9, 0x40, 0x8001, 0xc, 0x5800, 0x0, r5, r10, 0x5, 0xff}}, {0x6, 0x1, 0x5, 0x7, 'icmp\x00'}}]}, 0x340) r13 = signalfd4(r1, &(0x7f0000002940)={[0x2]}, 0x8, 0x80800) write$P9_RREADLINK(r13, &(0x7f0000002980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r7, 0x2, &(0x7f00000029c0)) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000002a00), r14) mount$incfs(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0xe4004, &(0x7f0000002b00)={[{@readahead={'readahead', 0x3d, 0x7}}, {@readahead={'readahead', 0x3d, 0x16}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@readahead={'readahead', 0x3d, 0x1}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x7}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@uid_lt={'uid<', r11}}, {@smackfsdef={'smackfsdef', 0x3d, 'wireguard\x00'}}, {@permit_directio}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r14, 0x8982, &(0x7f0000002c40)={0x7, 'xfrm0\x00', {0x3}, 0x8}) fchmodat(r1, &(0x7f0000002c80)='./file0\x00', 0x128) stat(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)) truncate(&(0x7f0000002d80)='./file0\x00', 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002dc0)={[0x1, 0x1, 0x2, 0x5a, 0x0, 0x2800000000000000, 0x69, 0x3, 0x6, 0xf, 0x4, 0x4, 0x3, 0x9, 0x81, 0x80000000], 0xeeef0000, 0x80}) ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000002ec0)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @loopback}, 0x83, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002e80)='vxcan1\x00', 0x5, 0x3, 0x4aa}) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) 3.973755049s ago: executing program 3 (id=450): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2000000}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00001ab000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, r0, 0x108000) 3.973507428s ago: executing program 3 (id=451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0xfffffffffffffe62, &(0x7f0000000340)={0x40, 0x0, 0xfffffffffffffe89, "ad41a324a6c3f7d7f4689fbcf18e898b2e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.382287613s ago: executing program 4 (id=455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4a006, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0xa, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x50480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x62) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r3, 0x5452, 0x0) close(r3) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000000200)={0x2, 0x7f}) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r6 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x7c) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000001000)={0x20, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x64040050}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0xa}, 0x8, 0x80, &(0x7f0000000280)="ad812b6e27faabad7ce38140ad74a2ca73d6a8cb4e48af4e4775d0f0e443723910363fe51abd485e4f7f95d681ef00166b45e0963b01a4e5", 0x38, 0xb, 0x83c6, 0x53, 0x433, 0x4, &(0x7f0000001040)="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", [{0x10001, 0x8}, {0x8, 0x6, 0x1}, {0x7ff, 0x40000, 0x80000000}, {0x5, 0x0, 0x1}, {0x8000, 0xf5, 0xdbf}, {0x5, 0x2, 0x4}, {0x40, 0x8, 0x1}, {0x5, 0x81, 0x473}, {0x7ff, 0x0, 0x2}, {0x85, 0x2, 0x7}, {0x4, 0x2, 0x401}, {0x7fffffff, 0xffffffff, 0xfffff055}, {0x6, 0x2, 0x7fff}, {0x9, 0x0, 0x5a7f}, {0xffffffff, 0x329a, 0x1}, {0x4, 0x6, 0xed}, {0x12, 0xab3c}, {0x764, 0x7, 0x7}, {0x0, 0x2, 0xffffffff}, {0xd28, 0x6, 0x800}, {0x4, 0x9, 0x9}, {0x7, 0x6, 0x1}, {0xffff, 0x1, 0xa}, {0x4, 0x100, 0x260}, {0x800, 0x4, 0x6}, {0x5, 0x432b, 0x5}, {0x4, 0xffffffff, 0xfff}, {0xa, 0xf, 0x4}, {0xf, 0xf}, {0x6, 0x65, 0x27}, {0xffffffff, 0x7, 0x1}, {0x3, 0xff, 0x7}, {0xfffffffb, 0x7, 0xd}, {0x1000, 0xffff, 0x8}, {0x2, 0x5, 0x1}, {0xfffffffd, 0x4, 0x7f}, {0x7ff, 0x2c3, 0x2}, {0x121, 0x4, 0x80000000}, {0x5512, 0x7fff, 0x401}, {0x8, 0x7f, 0x81}, {0x98, 0x35, 0x6022}, {0x525, 0xde, 0x4}, {0x1, 0xe1}, {0x2, 0x327, 0x5}, {0xffff, 0x3, 0x7ffb}, {0x7, 0x80000001, 0xffff}, {0x1b, 0x2, 0x5}, {0x1, 0x200, 0x8}, {0x5, 0x10, 0x6}, {0x6, 0xffffff80, 0x4}, {0xec7d, 0x8}, {0xbcb, 0x2, 0x9}, {0x1, 0x593}, {0xc, 0x7, 0x8}, {0x8c, 0x3, 0xffffffff}, {0x4, 0x9, 0x7}, {0x1, 0x7}, {0x9, 0x9, 0x4}, {0x43, 0x6, 0x4}, {0x7, 0x1f68b046, 0x8}, {0x4, 0x6, 0x8}, {0x4, 0x1, 0xfffff93e}, {0x400, 0xfdd, 0x8}, {0x5, 0x4, 0xf7c8}, {0xfff, 0xfff, 0x9}, {0x5, 0x5, 0x2}, {0x9, 0xb, 0x10}, {0xfc84, 0xf, 0x8}, {0x407, 0x7, 0x80}, {0x10000, 0xae3, 0x5}, {0x0, 0x80000000, 0x100}, {0x8, 0x200, 0x5}, {0x3, 0x0, 0x3}, {0x60, 0x24d6, 0x7f8}, {0x9, 0xf2, 0x3}, {0x0, 0x0, 0x9}, {0x5, 0xbb, 0x3}, {0xfffffe01, 0x2, 0x7fff}, {0x400, 0xfffffffe, 0xff}, {0x92, 0x3, 0x5a}, {0x4, 0x5, 0x6a9}, {0xfff, 0x9, 0x4}, {0xff, 0x2, 0x8}]}) ioctl$USBDEVFS_REAPURB(r9, 0x4008550c, &(0x7f0000000040)) 3.144372157s ago: executing program 3 (id=457): syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[@ANYBLOB="120101023ad9ba20b404120001070640000904c700008a855607"], &(0x7f0000001b00)={0x0, 0x0, 0x5, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x1, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x44d}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) select(0x40, &(0x7f0000000180)={0x5, 0x42, 0x3, 0xe, 0xfffffffffffff9f3, 0x5, 0x8, 0x4}, &(0x7f0000000240)={0x7fffffffffffffff, 0x1, 0x8, 0xd7f, 0xfffffffffffffff6, 0x8000, 0x2, 0x4}, &(0x7f0000000280)={0x401, 0x10, 0x7, 0x3, 0x8000, 0x9, 0x80000000, 0x5}, &(0x7f00000003c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031682d3fc142e48604788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) socket$unix(0x1, 0x2, 0x0) 3.049641633s ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6dabd5e5"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x80002}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240035b9000000000000000000000000060003000054f082"], 0x24}}, 0x0) 2.481721706s ago: executing program 4 (id=462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfffc, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.471071026s ago: executing program 4 (id=463): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x102, 0x20) epoll_pwait(r0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x7, &(0x7f00000004c0)={[0x5]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x3, 0xa, {{0x5, 0x4, 0x1, 0x3a, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @local, @private=0xa010101}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x29, 0x7, 0x1, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x10, 0x7, 0x87, 0x12af}}) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20042081) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@buf) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_TYPES(r5, 0x4068aea3, &(0x7f00000000c0)={0xeb, 0x0, 0x3}) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6) lseek(r7, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000200)) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYRESOCT=r6], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 1.328195882s ago: executing program 1 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28682, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x9}, @void, @eth={@remote, @empty, @void, {@mpls_uc={0x8847, {[{0xffffb, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv6=@gre_packet={0x6, 0x6, "e943ff", 0x44, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0xe, 0x1, 0x0, 0x1, 0x1, 0x4}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x7, 0x2, 0x0, 0x2, 0x3, 0x63}, 0x2, {0x715, 0x1, 0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x1}}}}}}}}}}}, 0x8a) (async) read$FUSE(r2, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r4, 0x0, 0x20000000, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x624, 0x4, 0xbdb], 0x1, 0x1c4213}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bf1000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@rdmsr={0x66, 0x18, {0x400000b3}}], 0x18}) r11 = eventfd(0x7) lseek(r11, 0x6, 0x1) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r10, 0x4068aea3, &(0x7f0000000240)={0xc7, 0x0, 0x1}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x800, 0x125, 0x40}, 0x18) open_tree(r12, &(0x7f0000000100)='./file0\x00', 0x800) 1.129469164s ago: executing program 1 (id=469): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x20, 0x8, 0x34, {0x34, 0xe, "740a12c5202fac8e60cd430092c6a1913419b7e09b0e9aa8dcc57a233e239a3fe259e8993903b7012af4338308c651103803"}}, &(0x7f0000000140)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "3361d589fd1407eea5de6cadaa982a2a1873768c47a16faa079c7d23b306c1c1d842b7b4fdcd39159f0e3d96386052e05f38704005e65c8ab2812620347c1651d145f4f36681aee12cd4820e72a49be3cb161ad430fbc3cdc7fd27204c2ad6c596843e7d324b0585f666692855b5d93cdf3c8724ffcc4c3ce72387b8b139dc1754b137124698497c8b11f7d3d5d53ac9db3142e1b70961766d5f1adfad33b817c638286f6cb1cd0ab9b616430ec7a01d5d646302ca424134048aaf2cc6d9153df8d0aa2a44"}}, &(0x7f0000000240)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x4, "f9db281e"}, @main=@item_4={0x3, 0x0, 0x9, "17929ef1"}, @global=@item_012={0x1, 0x1, 0x5, 'Y'}, @local=@item_4={0x3, 0x2, 0x4, "aa3e70fc"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x8, 0x1, {0x22, 0x53a}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0xf, 0xfa, "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"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000004c0)={0x20, 0x1, 0x79, "eba367b54660b15e198f70e2e3b8d114a5ccca015c0b874843ebd95e9361aebef3799fd4fc393d552f105a68beaea6c50d6f59a284e74b78b31a420d4a9fce6b6e8a9bd70be976c01bb035aa9fca37f77ab9100ef788c0c30fe0f99155674b37b71d223c8cec5efa1ccd3e37212c808c90a225ba167335f6b9"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x2}}) getgroups(0x3, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee01]) setgroups(0x3, &(0x7f0000005540)=[r0, 0x0, r1]) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00001ba000/0x2000)=nil, 0x3, 0x0, 0x0, 0x401, 0x1a, 0x0, 0x0, 0x59}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x7) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x2, r10) sendto$packet(r7, &(0x7f0000000080)="18", 0x1, 0x20000084, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r11, &(0x7f00000015c0)=ANY=[@ANYBLOB='decodes i'], 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x80010, 0xffffffffffffffff, 0xfffff000) close_range(r4, 0xffffffffffffffff, 0x0) 712.096268ms ago: executing program 2 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) listen(r0, 0x50) 681.84853ms ago: executing program 2 (id=472): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x42, &(0x7f0000000040)=0x969b899c5d426f09, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004d3"], 0x40}}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900f3fe2abd700001000000ff010000000000000000000000000001ac1e000100000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000003000000b86b6e0000000003000000004400080042"], 0xfc}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 666.902892ms ago: executing program 2 (id=473): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x0, 0x7}) syz_usb_control_io$uac1(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x1ff, 0xd8, 0xa7, 0x40, 0x40, 0x1c04, 0x15, 0xe244, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x50, 0x70, [{{0x9, 0x4, 0xd5, 0x9, 0x0, 0xff, 0x10, 0x2f, 0xf7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x47, 0x0, 0x1, [{0x0, 0x0}]}) 546.226008ms ago: executing program 1 (id=474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x44}) unshare(0x6060400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.events\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000002440)={0x2020}, 0x2020) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x2000000) 543.192739ms ago: executing program 1 (id=475): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x8df3b6bc411e075b) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0xffffffffe7010f5f, 0x8, 0x8, 0x3, 0xffff8ac4, 0x0, 0x0, 0x20, 0xfc}}, 0x50) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, &(0x7f0000002140)) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000000c0)=0x0) sendmsg$AUDIT_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x3e9, 0x400, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x0, r6, 0x2, 0x3, 0x8001, 0xfffffffd, 0x0, 0x5}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_usb_connect(0x6, 0x10b, &(0x7f0000002180)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32=r0, @ANYBLOB="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"], 0x0) (async) inotify_init1(0x80000) 504.167571ms ago: executing program 1 (id=476): r0 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x1, 0x0, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8020, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0}}], 0x1, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f00000000c0)=0x18) syz_usb_disconnect(r4) 192.319099ms ago: executing program 3 (id=477): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000400d240f01100000000000ce0a0206241a0000000905810300020024000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRESHEX], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r2, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x4}], {0x10, 0x6}, {0x20, 0x4}}, 0x2c, 0x3) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffbf1, @empty, 0x400}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4c21, 0x25, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) futex(&(0x7f0000000040)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0xfff, 0x200, 0x10, 0x5, 0x400, 0x16, 0x10, 0x44f1ccfa, 0x1, 0x18, 0x7ff, 0x1010}}, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x1b, &(0x7f0000000280)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) readahead(r5, 0x72be, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 86.353815ms ago: executing program 2 (id=478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x40050}, 0x20040880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{@uid={'uid', 0x3d, r5}}]}) sendmsg$nl_xfrm(r4, &(0x7f000001a280)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1fffa}, 0xc, &(0x7f000001a240)={&(0x7f0000000380)=@delpolicy={0x54, 0x14, 0x100, 0x70bd26, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@multicast2, 0x4e21, 0x4800, 0x4e1c, 0x4, 0x2, 0x80, 0x80, 0xc, r3, r5}, 0x6e6bb3, 0x2}, [@tmpl={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000855}, 0x8000) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=@delsa={0x1194, 0x11, 0x20, 0x70bd27, 0x25dfdbff, {@in=@multicast2, 0x4d6, 0x2, 0x6c}, [@policy_type={0xa, 0x10, {0x1}}, @algo_auth_trunc={0xbf, 0x14, {{'sha256-mb\x00'}, 0x398, 0x100, "c2fa0941b1bb0c54bd9d10f49041a1fc1aeee7746286a7cfdfc7acf2d146337a85d11405f8efcabaafc63e1193e4f8122ae388ef4bb12e03b10509256974fdb6211edb68a23c86156df8927640d9ca32320c02c17ebef4686c586bbfc7633e871d30d5fa4c13c4936f4b6de109b897ebc6c846"}}, @algo_auth={0x1048, 0x1, {{'tgr128-generic\x00'}, 0x8000, "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"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @extra_flags={0x8, 0x18, 0x9b}, @XFRMA_SET_MARK={0x8, 0x1d, 0xf27}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2c, 0x70bd2d, 0x70bd25, 0x7, [0xf9a5, 0x9, 0x824, 0x6]}}, @mark={0xc, 0x15, {0x35075d, 0x7fff}}]}, 0x1194}, 0x1, 0x0, 0x0, 0x4}, 0x80) 86.026615ms ago: executing program 2 (id=479): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x220002, 0x0) close_range(r1, r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$cgroup_devices(r6, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0) r7 = dup(r3) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) stat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x6804, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r8}}, {@uid_lt={'uid<', r9}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@context={'context', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '\x02\x02\x00'}}, {@subj_user={'subj_user', 0x3d, '\x02\x02\x00'}}]}}) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x1b, &(0x7f0000000680)={@mcast2, 0x9884, 0x0, 0x3, 0x6, 0x4, 0xc7e}, 0x20) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x18, 0x15, 0x70bd24, 0xfefffc00, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x8, 0x18, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40800}, 0x88084) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 2 (id=480): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) setresuid(0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)='\t', 0x1) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfe000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f00000000c0)) ioctl$KVM_RUN(r12, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 40.812438][ T9] usb 3-1: config 179 has no interface number 0 [ 40.818736][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 40.830355][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 40.841991][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.853768][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 40.867256][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 40.881179][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 40.891455][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.900710][ T804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.973294][ T828] overlay: Unknown parameter 'fowner>00000000000000000000' [ 40.993284][ T831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 41.049493][ T833] kvm: kvm [832]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 41.064080][ T833] kvm: kvm [832]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 41.114939][ T435] usb 3-1: USB disconnect, device number 15 [ 41.114998][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 41.129565][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 41.233630][ T855] netlink: 'syz.4.172': attribute type 4 has an invalid length. [ 41.247117][ T855] netlink: 'syz.4.172': attribute type 4 has an invalid length. [ 41.410779][ T891] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 41.418859][ T890] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 41.433129][ T890] overlay: filesystem on ./file0 not supported as upperdir [ 41.447247][ T36] kauditd_printk_skb: 1037 callbacks suppressed [ 41.447265][ T36] audit: type=1400 audit(1769779351.850:1329): avc: denied { getopt } for pid=893 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.494813][ T36] audit: type=1400 audit(1769779351.900:1330): avc: denied { read write } for pid=900 comm="syz.1.186" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.520801][ T36] audit: type=1400 audit(1769779351.900:1331): avc: denied { open } for pid=900 comm="syz.1.186" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.789272][ T62] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 41.819335][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 41.939389][ T62] usb 2-1: Using ep0 maxpacket: 16 [ 41.945633][ T62] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 41.953863][ T62] usb 2-1: config 0 has no interface number 0 [ 41.961507][ T62] usb 2-1: New USB device found, idVendor=05d1, idProduct=d901, bcdDevice= 9.3f [ 41.970795][ T62] usb 2-1: New USB device strings: Mfr=29, Product=2, SerialNumber=3 [ 41.978879][ T62] usb 2-1: Product: syz [ 41.983066][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 41.988130][ T62] usb 2-1: Manufacturer: syz [ 41.992762][ T62] usb 2-1: SerialNumber: syz [ 41.998080][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.009155][ T62] usb 2-1: config 0 descriptor?? [ 42.014135][ T377] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 42.021845][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.031661][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 42.042023][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.050656][ T9] usb 5-1: config 0 descriptor?? [ 42.190298][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 42.201308][ T377] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 42.210559][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.219098][ T377] usb 3-1: config 0 descriptor?? [ 42.224651][ T915] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.242725][ T62] usb 2-1: USB disconnect, device number 13 [ 42.433794][ T915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.442560][ T915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.451938][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 42.457269][ T899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.185'. [ 42.457974][ T377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 42.477379][ T377] usb 3-1: USB disconnect, device number 16 [ 42.485307][ T9] wacom 0003:056A:0325.0005: hidraw0: USB HID v0.08 Device [HID 056a:0325] on usb-dummy_hcd.4-1/input0 [ 42.676312][ T377] usb 5-1: USB disconnect, device number 14 [ 42.956267][ T36] audit: type=1400 audit(1769779353.360:1332): avc: denied { getopt } for pid=922 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.970577][ T925] can: request_module (can-proto-7) failed. [ 42.986384][ T36] audit: type=1400 audit(1769779353.360:1333): avc: denied { bind } for pid=922 comm="syz.1.193" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.006834][ T36] audit: type=1400 audit(1769779353.360:1334): avc: denied { name_bind } for pid=922 comm="syz.1.193" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 43.029831][ T36] audit: type=1400 audit(1769779353.360:1335): avc: denied { node_bind } for pid=922 comm="syz.1.193" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.212961][ T932] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.197' sets config #2227 [ 43.231061][ T932] netlink: 180 bytes leftover after parsing attributes in process `syz.4.197'. [ 43.349358][ T377] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 43.500317][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.511273][ T377] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 43.520349][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.528921][ T377] usb 2-1: config 0 descriptor?? [ 43.877379][ T36] audit: type=1400 audit(1769779354.280:1336): avc: denied { link } for pid=938 comm="syz.4.200" name="#c" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.899463][ T36] audit: type=1400 audit(1769779354.280:1337): avc: denied { rename } for pid=938 comm="syz.4.200" name="#d" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.949096][ T377] steelseries 0003:1038:12B6.0006: item fetching failed at offset 5/7 [ 43.958055][ T377] steelseries 0003:1038:12B6.0006: probe with driver steelseries failed with error -22 [ 44.017471][ T36] audit: type=1400 audit(1769779354.420:1338): avc: denied { setattr } for pid=945 comm="syz.2.203" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 44.048023][ T942] devpts: called with bogus options [ 44.054242][ T942] netlink: 'syz.4.201': attribute type 5 has an invalid length. [ 44.062466][ T942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 44.150568][ T927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.159082][ T927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.173910][ T62] usb 2-1: USB disconnect, device number 14 [ 44.207801][ T452] usb 4-1: 0:2 : does not exist [ 44.214464][ T452] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 44.234441][ T452] usb 4-1: USB disconnect, device number 7 [ 44.243226][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.248529][ T1003] capability: warning: `syz.2.207' uses 32-bit capabilities (legacy support in use) [ 44.275458][ T1005] capability: warning: `syz.3.210' uses deprecated v2 capabilities in a way that may be insecure [ 44.379114][ T1021] netlink: 272 bytes leftover after parsing attributes in process `syz.3.214'. [ 44.459258][ T377] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 44.609280][ T377] usb 5-1: Using ep0 maxpacket: 8 [ 44.615739][ T377] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.626882][ T377] usb 5-1: config 0 interface 0 has no altsetting 0 [ 44.633519][ T377] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 44.642624][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.651299][ T377] usb 5-1: config 0 descriptor?? [ 44.880234][ T1047] syzkaller0: entered allmulticast mode [ 44.886141][ T1047] syzkaller0: entered promiscuous mode [ 44.895487][ T1046] syzkaller0: left promiscuous mode [ 44.909326][ T1046] syzkaller0: left allmulticast mode [ 45.050371][ T1057] netlink: 232 bytes leftover after parsing attributes in process `syz.2.226'. [ 45.065705][ T377] smartjoyplus 0003:6666:8804.0007: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0 [ 45.081641][ T377] smartjoyplus 0003:6666:8804.0007: no output reports found [ 45.267390][ T452] usb 5-1: USB disconnect, device number 15 [ 45.419269][ T377] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.570358][ T377] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.583138][ T377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.592406][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.600453][ T377] usb 2-1: Product: syz [ 45.604803][ T377] usb 2-1: Manufacturer: syz [ 45.609426][ T377] usb 2-1: SerialNumber: syz [ 45.759311][ T452] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.840548][ T1082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 45.899347][ T452] usb 4-1: device descriptor read/64, error -71 [ 46.139318][ T452] usb 4-1: device descriptor read/64, error -71 [ 46.258893][ T1091] tipc: Enabling of bearer rejected, failed to enable media [ 46.359822][ T435] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 46.389324][ T452] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.422258][ T1097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.472077][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 46.472093][ T36] audit: type=1400 audit(1769779356.880:1403): avc: denied { ioctl } for pid=1100 comm="syz.4.243" path="socket:[9572]" dev="sockfs" ino=9572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.503976][ T36] audit: type=1400 audit(1769779356.880:1404): avc: denied { sys_module } for pid=1100 comm="syz.4.243" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.529843][ T452] usb 4-1: device descriptor read/64, error -71 [ 46.530737][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.540368][ T36] audit: type=1400 audit(1769779356.880:1405): avc: denied { create } for pid=1100 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.548039][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.568268][ T36] audit: type=1400 audit(1769779356.880:1406): avc: denied { bind } for pid=1100 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.577479][ T435] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 46.605738][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.614474][ T435] usb 3-1: config 0 descriptor?? [ 46.769281][ T452] usb 4-1: device descriptor read/64, error -71 [ 46.769281][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 46.831995][ T377] cdc_ncm 2-1:1.0: failed to get mac address [ 46.840761][ T377] cdc_ncm 2-1:1.0: bind() failure [ 46.847131][ T377] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 46.855491][ T377] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 46.864828][ T377] usb 2-1: USB disconnect, device number 15 [ 46.879375][ T452] usb usb4-port1: attempt power cycle [ 46.939282][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 46.945520][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 46.956423][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.968583][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.977684][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.985695][ T31] usb 5-1: Product: syz [ 46.989878][ T31] usb 5-1: Manufacturer: syz [ 46.994475][ T31] usb 5-1: SerialNumber: syz [ 47.023078][ T1086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.031670][ T1086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.040662][ T36] audit: type=1400 audit(1769779357.450:1407): avc: denied { execute } for pid=1085 comm="syz.2.238" path="/61/blkio.bfq.group_wait_time" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.065658][ T36] audit: type=1400 audit(1769779357.470:1408): avc: denied { create } for pid=1085 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.085686][ T36] audit: type=1400 audit(1769779357.490:1409): avc: denied { setopt } for pid=1085 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.106556][ T435] usbhid 3-1:0.0: can't add hid device: -71 [ 47.112575][ T435] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 47.123125][ T435] usb 3-1: USB disconnect, device number 17 [ 47.202898][ T36] audit: type=1400 audit(1769779357.610:1410): avc: denied { getopt } for pid=1104 comm="syz.4.244" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.219367][ T452] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 47.226566][ T31] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.241080][ T31] usb 5-1: USB disconnect, device number 16 [ 47.249810][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.250315][ T452] usb 4-1: device descriptor read/8, error -71 [ 47.376215][ T36] audit: type=1400 audit(1769779357.780:1411): avc: denied { create } for pid=1106 comm="syz.1.245" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.410362][ T452] usb 4-1: device descriptor read/8, error -71 [ 47.444617][ T36] audit: type=1400 audit(1769779357.850:1412): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.480714][ T1112] process 'syz.1.247' launched '/dev/fd/5' with NULL argv: empty string added [ 47.552038][ T1119] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 47.560906][ T1119] overlayfs: missing 'lowerdir' [ 47.649299][ T452] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.670304][ T452] usb 4-1: device descriptor read/8, error -71 [ 47.739308][ T1127] FAULT_INJECTION: forcing a failure. [ 47.739308][ T1127] name failslab, interval 1, probability 0, space 0, times 0 [ 47.751957][ T1127] CPU: 0 UID: 0 PID: 1127 Comm: syz.4.253 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 47.751986][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.751993][ T1127] Call Trace: [ 47.751998][ T1127] [ 47.752003][ T1127] __dump_stack+0x21/0x30 [ 47.752022][ T1127] dump_stack_lvl+0x140/0x1c0 [ 47.752034][ T1127] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.752046][ T1127] ? cred_has_capability+0x296/0x3a0 [ 47.752058][ T1127] ? selinux_perf_event_alloc+0x110/0x110 [ 47.752068][ T1127] dump_stack+0x19/0x20 [ 47.752079][ T1127] should_fail_ex+0x3d7/0x530 [ 47.752090][ T1127] should_failslab+0xac/0x100 [ 47.752105][ T1127] __kmalloc_cache_noprof+0x41/0x470 [ 47.752118][ T1127] ? __cfi_mutex_lock+0x10/0x10 [ 47.752129][ T1127] ? inet_alloc_ifa+0x5e/0x1c0 [ 47.752142][ T1127] ? bpf_lsm_capable+0xd/0x20 [ 47.752154][ T1127] inet_alloc_ifa+0x5e/0x1c0 [ 47.752166][ T1127] ? devinet_ioctl+0xa18/0x1960 [ 47.752186][ T1127] devinet_ioctl+0x5fb/0x1960 [ 47.752199][ T1127] ? __cfi_devinet_ioctl+0x10/0x10 [ 47.752211][ T1127] ? _copy_from_user+0x87/0xa0 [ 47.752224][ T1127] ? get_user_ifreq+0x130/0x180 [ 47.752239][ T1127] inet_ioctl+0x431/0x570 [ 47.752248][ T1127] ? __cfi_inet_ioctl+0x10/0x10 [ 47.752258][ T1127] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 47.752270][ T1127] sock_do_ioctl+0x115/0x330 [ 47.752279][ T1127] ? sock_show_fdinfo+0xd0/0xd0 [ 47.752289][ T1127] ? __cfi_vfs_write+0x10/0x10 [ 47.752301][ T1127] ? __kasan_slab_free+0x6a/0x80 [ 47.752315][ T1127] ? kmem_cache_free+0x1bd/0x4f0 [ 47.752327][ T1127] ? putname+0x113/0x150 [ 47.752339][ T1127] sock_ioctl+0x637/0x810 [ 47.752348][ T1127] ? putname+0x113/0x150 [ 47.752360][ T1127] ? __cfi_sock_ioctl+0x10/0x10 [ 47.752368][ T1127] ? __kasan_check_read+0x15/0x20 [ 47.752380][ T1127] ? ksys_write+0x1e2/0x260 [ 47.752391][ T1127] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.752400][ T1127] ? security_file_ioctl+0x3e/0x110 [ 47.752410][ T1127] ? __cfi_sock_ioctl+0x10/0x10 [ 47.752419][ T1127] __se_sys_ioctl+0x132/0x1b0 [ 47.752433][ T1127] __x64_sys_ioctl+0x7f/0xa0 [ 47.752446][ T1127] x64_sys_call+0x1878/0x2ee0 [ 47.752459][ T1127] do_syscall_64+0x57/0xf0 [ 47.752473][ T1127] ? clear_bhb_loop+0x50/0xa0 [ 47.752486][ T1127] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.752499][ T1127] RIP: 0033:0x7f23ac99aeb9 [ 47.752509][ T1127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.752517][ T1127] RSP: 002b:00007f23ad7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.752530][ T1127] RAX: ffffffffffffffda RBX: 00007f23acc15fa0 RCX: 00007f23ac99aeb9 [ 47.752537][ T1127] RDX: 0000200000000080 RSI: 0000000000008916 RDI: 0000000000000003 [ 47.752544][ T1127] RBP: 00007f23ad7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 47.752551][ T1127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.752557][ T1127] R13: 00007f23acc16038 R14: 00007f23acc15fa0 R15: 00007fff37d249a8 [ 47.752565][ T1127] [ 47.979283][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 48.000283][ T452] usb 4-1: device descriptor read/8, error -71 [ 48.157217][ T1138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 48.166150][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 48.172829][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.181454][ T31] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 48.189333][ T452] usb usb4-port1: unable to enumerate USB device [ 48.190123][ T31] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 48.208566][ T31] usb 3-1: config 4 has no interface number 0 [ 48.217540][ T31] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 48.226728][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.234742][ T31] usb 3-1: Product: syz [ 48.238903][ T31] usb 3-1: Manufacturer: syz [ 48.243539][ T31] usb 3-1: SerialNumber: syz [ 48.282743][ T1146] tipc: Started in network mode [ 48.287641][ T1146] tipc: Node identity 4, cluster identity 4711 [ 48.293962][ T1146] tipc: Node number set to 4 [ 48.319382][ T435] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.449255][ T435] usb 2-1: device descriptor read/64, error -71 [ 48.457901][ T31] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 48.465034][ T31] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 48.471753][ T31] uvcvideo 3-1:4.147: Entity type for entity Output 251 was not initialized! [ 48.480551][ T31] usb 3-1: Failed to create links for entity 251 [ 48.486932][ T31] usb 3-1: Failed to register entities (-22). [ 48.494873][ T31] usb 3-1: USB disconnect, device number 18 [ 48.568833][ T1150] FAULT_INJECTION: forcing a failure. [ 48.568833][ T1150] name failslab, interval 1, probability 0, space 0, times 0 [ 48.583678][ T1150] CPU: 0 UID: 0 PID: 1150 Comm: syz.3.261 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 48.583706][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.583718][ T1150] Call Trace: [ 48.583724][ T1150] [ 48.583731][ T1150] __dump_stack+0x21/0x30 [ 48.583759][ T1150] dump_stack_lvl+0x140/0x1c0 [ 48.583777][ T1150] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.583799][ T1150] dump_stack+0x19/0x20 [ 48.583816][ T1150] should_fail_ex+0x3d7/0x530 [ 48.583839][ T1150] should_failslab+0xac/0x100 [ 48.583859][ T1150] kmem_cache_alloc_noprof+0x42/0x410 [ 48.583877][ T1150] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 48.583898][ T1150] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 48.583917][ T1150] ? mutex_unlock+0x90/0x240 [ 48.583935][ T1150] kvm_mmu_topup_memory_cache+0x24/0x30 [ 48.583955][ T1150] kvm_mmu_load+0xa2/0x2890 [ 48.583973][ T1150] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 48.583994][ T1150] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 48.584015][ T1150] vcpu_run+0x4dad/0x7840 [ 48.584043][ T1150] ? signal_pending+0xc0/0xc0 [ 48.584061][ T1150] ? __kasan_check_write+0x18/0x20 [ 48.584080][ T1150] ? xfd_validate_state+0x68/0x140 [ 48.584099][ T1150] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 48.584115][ T1150] ? __kasan_check_write+0x18/0x20 [ 48.584134][ T1150] ? fpregs_mark_activate+0x68/0x160 [ 48.584150][ T1150] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 48.584166][ T1150] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 48.584183][ T1150] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 48.584203][ T1150] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 48.584221][ T1150] ? kstrtoull+0x13b/0x1e0 [ 48.584237][ T1150] ? kstrtouint+0x78/0xf0 [ 48.584252][ T1150] ? ioctl_has_perm+0x1bc/0x500 [ 48.584269][ T1150] ? __asan_memcpy+0x5a/0x80 [ 48.584288][ T1150] ? ioctl_has_perm+0x408/0x500 [ 48.584305][ T1150] ? has_cap_mac_admin+0xd0/0xd0 [ 48.584321][ T1150] ? __kasan_check_write+0x18/0x20 [ 48.584338][ T1150] ? mutex_lock_killable+0x97/0x1d0 [ 48.584355][ T1150] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.584374][ T1150] ? proc_fail_nth_write+0x184/0x220 [ 48.584393][ T1150] kvm_vcpu_ioctl+0xa48/0x1000 [ 48.584417][ T1150] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.584440][ T1150] ? __cfi_vfs_write+0x10/0x10 [ 48.584460][ T1150] ? __kasan_check_write+0x18/0x20 [ 48.584480][ T1150] ? mutex_unlock+0x90/0x240 [ 48.584498][ T1150] ? __cfi_mutex_unlock+0x10/0x10 [ 48.584516][ T1150] ? __fget_files+0x2c5/0x340 [ 48.584539][ T1150] ? __fget_files+0x2c5/0x340 [ 48.584562][ T1150] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.584580][ T1150] ? security_file_ioctl+0x3e/0x110 [ 48.584598][ T1150] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.584620][ T1150] __se_sys_ioctl+0x132/0x1b0 [ 48.584644][ T1150] __x64_sys_ioctl+0x7f/0xa0 [ 48.584666][ T1150] x64_sys_call+0x1878/0x2ee0 [ 48.584690][ T1150] do_syscall_64+0x57/0xf0 [ 48.584712][ T1150] ? clear_bhb_loop+0x50/0xa0 [ 48.584736][ T1150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.584755][ T1150] RIP: 0033:0x7fa06499aeb9 [ 48.584771][ T1150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.584785][ T1150] RSP: 002b:00007fa06587d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.584803][ T1150] RAX: ffffffffffffffda RBX: 00007fa064c15fa0 RCX: 00007fa06499aeb9 [ 48.584815][ T1150] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 48.584833][ T1150] RBP: 00007fa06587d090 R08: 0000000000000000 R09: 0000000000000000 [ 48.584845][ T1150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.584855][ T1150] R13: 00007fa064c16038 R14: 00007fa064c15fa0 R15: 00007ffc824bd338 [ 48.584871][ T1150] [ 48.951452][ T435] usb 2-1: device descriptor read/64, error -71 [ 48.978030][ T1153] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 49.189312][ T435] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 49.229311][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.319413][ T435] usb 2-1: device descriptor read/64, error -71 [ 49.399414][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 49.405806][ T31] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 49.414099][ T31] usb 4-1: config 2 has no interface number 0 [ 49.420298][ T31] usb 4-1: config 2 interface 88 has no altsetting 0 [ 49.428533][ T31] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 49.437662][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.445705][ T31] usb 4-1: Product: syz [ 49.449923][ T31] usb 4-1: Manufacturer: syz [ 49.454512][ T31] usb 4-1: SerialNumber: syz [ 49.589264][ T681] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 49.589264][ T435] usb 2-1: device descriptor read/64, error -71 [ 49.664457][ T1164] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 49.709361][ T435] usb usb2-port1: attempt power cycle [ 49.739251][ T681] usb 3-1: Using ep0 maxpacket: 32 [ 49.745472][ T681] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 49.753845][ T681] usb 3-1: config 0 has no interface number 0 [ 49.760062][ T681] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 49.771703][ T681] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 49.780871][ T681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.788856][ T681] usb 3-1: Product: syz [ 49.793078][ T681] usb 3-1: Manufacturer: syz [ 49.797674][ T681] usb 3-1: SerialNumber: syz [ 49.803019][ T681] usb 3-1: config 0 descriptor?? [ 49.808282][ T1162] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 50.020229][ T1162] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 50.049313][ T435] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 50.070277][ T435] usb 2-1: device descriptor read/8, error -71 [ 50.079450][ T374] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 50.200446][ T435] usb 2-1: device descriptor read/8, error -71 [ 50.209468][ T374] usb 5-1: device descriptor read/64, error -71 [ 50.263398][ T31] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 50.273677][ T31] asix 4-1:2.88: probe with driver asix failed with error -71 [ 50.282949][ T31] usb 4-1: USB disconnect, device number 12 [ 50.439397][ T435] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 50.449318][ T374] usb 5-1: device descriptor read/64, error -71 [ 50.460409][ T435] usb 2-1: device descriptor read/8, error -71 [ 50.590355][ T435] usb 2-1: device descriptor read/8, error -71 [ 50.689315][ T374] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 50.699344][ T435] usb usb2-port1: unable to enumerate USB device [ 50.732735][ T681] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 50.743663][ T681] asix 3-1:0.188: probe with driver asix failed with error -71 [ 50.746859][ T1172] random: crng reseeded on system resumption [ 50.753817][ T681] usb 3-1: USB disconnect, device number 19 [ 50.785365][ T1174] FAULT_INJECTION: forcing a failure. [ 50.785365][ T1174] name failslab, interval 1, probability 0, space 0, times 0 [ 50.798119][ T1174] CPU: 0 UID: 0 PID: 1174 Comm: syz.3.270 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 50.798141][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.798149][ T1174] Call Trace: [ 50.798154][ T1174] [ 50.798159][ T1174] __dump_stack+0x21/0x30 [ 50.798178][ T1174] dump_stack_lvl+0x140/0x1c0 [ 50.798190][ T1174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.798204][ T1174] dump_stack+0x19/0x20 [ 50.798215][ T1174] should_fail_ex+0x3d7/0x530 [ 50.798227][ T1174] should_failslab+0xac/0x100 [ 50.798242][ T1174] kmem_cache_alloc_noprof+0x42/0x410 [ 50.798255][ T1174] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 50.798270][ T1174] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 50.798283][ T1174] ? mutex_unlock+0x90/0x240 [ 50.798295][ T1174] kvm_mmu_topup_memory_cache+0x24/0x30 [ 50.798308][ T1174] kvm_mmu_load+0xa2/0x2890 [ 50.798320][ T1174] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 50.798333][ T1174] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 50.798347][ T1174] vcpu_run+0x4dad/0x7840 [ 50.798364][ T1174] ? signal_pending+0xc0/0xc0 [ 50.798376][ T1174] ? __kasan_check_write+0x18/0x20 [ 50.798387][ T1174] ? xfd_validate_state+0x68/0x140 [ 50.798400][ T1174] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 50.798410][ T1174] ? __kasan_check_write+0x18/0x20 [ 50.798421][ T1174] ? fpregs_mark_activate+0x68/0x160 [ 50.798430][ T1174] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 50.798440][ T1174] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 50.798450][ T1174] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 50.798462][ T1174] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 50.798474][ T1174] ? kstrtoull+0x13b/0x1e0 [ 50.798483][ T1174] ? kstrtouint+0x78/0xf0 [ 50.798492][ T1174] ? ioctl_has_perm+0x1bc/0x500 [ 50.798503][ T1174] ? __asan_memcpy+0x5a/0x80 [ 50.798514][ T1174] ? ioctl_has_perm+0x408/0x500 [ 50.798524][ T1174] ? has_cap_mac_admin+0xd0/0xd0 [ 50.798534][ T1174] ? __kasan_check_write+0x18/0x20 [ 50.798545][ T1174] ? mutex_lock_killable+0x97/0x1d0 [ 50.798555][ T1174] ? __cfi_mutex_lock_killable+0x10/0x10 [ 50.798565][ T1174] ? proc_fail_nth_write+0x184/0x220 [ 50.798576][ T1174] kvm_vcpu_ioctl+0xa48/0x1000 [ 50.798590][ T1174] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 50.798604][ T1174] ? __cfi_vfs_write+0x10/0x10 [ 50.798615][ T1174] ? __kasan_check_write+0x18/0x20 [ 50.798626][ T1174] ? mutex_unlock+0x90/0x240 [ 50.798636][ T1174] ? __cfi_mutex_unlock+0x10/0x10 [ 50.798646][ T1174] ? __fget_files+0x2c5/0x340 [ 50.798660][ T1174] ? __fget_files+0x2c5/0x340 [ 50.798673][ T1174] ? bpf_lsm_file_ioctl+0xd/0x20 [ 50.798682][ T1174] ? security_file_ioctl+0x3e/0x110 [ 50.798692][ T1174] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 50.798706][ T1174] __se_sys_ioctl+0x132/0x1b0 [ 50.798722][ T1174] __x64_sys_ioctl+0x7f/0xa0 [ 50.798734][ T1174] x64_sys_call+0x1878/0x2ee0 [ 50.798748][ T1174] do_syscall_64+0x57/0xf0 [ 50.798761][ T1174] ? clear_bhb_loop+0x50/0xa0 [ 50.798776][ T1174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.798790][ T1174] RIP: 0033:0x7fa06499aeb9 [ 50.798800][ T1174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.798809][ T1174] RSP: 002b:00007fa06587d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.798821][ T1174] RAX: ffffffffffffffda RBX: 00007fa064c15fa0 RCX: 00007fa06499aeb9 [ 50.798829][ T1174] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 50.798836][ T1174] RBP: 00007fa06587d090 R08: 0000000000000000 R09: 0000000000000000 [ 50.798843][ T1174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.798850][ T1174] R13: 00007fa064c16038 R14: 00007fa064c15fa0 R15: 00007ffc824bd338 [ 50.798858][ T1174] [ 50.829273][ T374] usb 5-1: device descriptor read/64, error -71 [ 51.129279][ T681] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 51.329291][ T681] usb 3-1: Using ep0 maxpacket: 16 [ 51.336497][ T681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.346685][ T681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.357459][ T681] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.366970][ T681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.375278][ T681] usb 3-1: Product: syz [ 51.377767][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 51.379693][ T681] usb 3-1: Manufacturer: syz [ 51.388349][ T374] usb 5-1: device descriptor read/64, error -71 [ 51.393328][ T681] usb 3-1: SerialNumber: syz [ 51.449269][ T435] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 51.499669][ T374] usb usb5-port1: attempt power cycle [ 51.520370][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 51.520387][ T36] audit: type=1400 audit(1769779361.930:1444): avc: denied { read write } for pid=1198 comm="syz.1.278" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.549775][ T36] audit: type=1400 audit(1769779361.930:1445): avc: denied { open } for pid=1198 comm="syz.1.278" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.573222][ T36] audit: type=1400 audit(1769779361.930:1446): avc: denied { execmem } for pid=1198 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.592611][ T435] usb 4-1: device descriptor read/64, error -71 [ 51.699694][ T1204] tc_dump_action: action bad kind [ 51.705382][ T36] audit: type=1400 audit(1769779362.110:1447): avc: denied { read } for pid=1203 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.768274][ T681] usb 3-1: 0:2 : does not exist [ 51.775046][ T681] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 51.787910][ T681] usb 3-1: USB disconnect, device number 20 [ 51.839264][ T435] usb 4-1: device descriptor read/64, error -71 [ 51.845571][ T374] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 51.870352][ T374] usb 5-1: device descriptor read/8, error -71 [ 52.000399][ T374] usb 5-1: device descriptor read/8, error -71 [ 52.089308][ T435] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 52.138015][ T36] audit: type=1400 audit(1769779362.540:1448): avc: denied { name_bind } for pid=1206 comm="syz.2.280" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 52.159223][ T36] audit: type=1400 audit(1769779362.540:1449): avc: denied { node_bind } for pid=1206 comm="syz.2.280" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.239294][ T435] usb 4-1: device descriptor read/64, error -71 [ 52.245677][ T374] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 52.270526][ T374] usb 5-1: device descriptor read/8, error -71 [ 52.400335][ T374] usb 5-1: device descriptor read/8, error -71 [ 52.479269][ T435] usb 4-1: device descriptor read/64, error -71 [ 52.509333][ T374] usb usb5-port1: unable to enumerate USB device [ 52.564057][ T1211] 9pnet_fd: Insufficient options for proto=fd [ 52.589400][ T435] usb usb4-port1: attempt power cycle [ 52.589754][ T1213] FAULT_INJECTION: forcing a failure. [ 52.589754][ T1213] name failslab, interval 1, probability 0, space 0, times 0 [ 52.607493][ T1213] CPU: 0 UID: 0 PID: 1213 Comm: syz.1.282 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 52.607522][ T1213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.607533][ T1213] Call Trace: [ 52.607539][ T1213] [ 52.607544][ T1213] __dump_stack+0x21/0x30 [ 52.607561][ T1213] dump_stack_lvl+0x140/0x1c0 [ 52.607573][ T1213] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.607586][ T1213] dump_stack+0x19/0x20 [ 52.607598][ T1213] should_fail_ex+0x3d7/0x530 [ 52.607610][ T1213] should_failslab+0xac/0x100 [ 52.607624][ T1213] kmem_cache_alloc_noprof+0x42/0x410 [ 52.607644][ T1213] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 52.607658][ T1213] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 52.607672][ T1213] ? mutex_unlock+0x90/0x240 [ 52.607683][ T1213] kvm_mmu_topup_memory_cache+0x24/0x30 [ 52.607698][ T1213] kvm_mmu_load+0xa2/0x2890 [ 52.607716][ T1213] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 52.607736][ T1213] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 52.607759][ T1213] vcpu_run+0x4dad/0x7840 [ 52.607780][ T1213] ? signal_pending+0xc0/0xc0 [ 52.607792][ T1213] ? __kasan_check_write+0x18/0x20 [ 52.607803][ T1213] ? xfd_validate_state+0x68/0x140 [ 52.607815][ T1213] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 52.607825][ T1213] ? __kasan_check_write+0x18/0x20 [ 52.607836][ T1213] ? fpregs_mark_activate+0x68/0x160 [ 52.607846][ T1213] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 52.607855][ T1213] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 52.607866][ T1213] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 52.607879][ T1213] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 52.607892][ T1213] ? kstrtoull+0x13b/0x1e0 [ 52.607902][ T1213] ? kstrtouint+0x78/0xf0 [ 52.607911][ T1213] ? ioctl_has_perm+0x1bc/0x500 [ 52.607922][ T1213] ? __asan_memcpy+0x5a/0x80 [ 52.607933][ T1213] ? ioctl_has_perm+0x408/0x500 [ 52.607943][ T1213] ? has_cap_mac_admin+0xd0/0xd0 [ 52.607953][ T1213] ? __kasan_check_write+0x18/0x20 [ 52.607964][ T1213] ? mutex_lock_killable+0x97/0x1d0 [ 52.607975][ T1213] ? __cfi_mutex_lock_killable+0x10/0x10 [ 52.607986][ T1213] ? proc_fail_nth_write+0x184/0x220 [ 52.607997][ T1213] kvm_vcpu_ioctl+0xa48/0x1000 [ 52.608012][ T1213] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 52.608025][ T1213] ? __cfi_vfs_write+0x10/0x10 [ 52.608038][ T1213] ? __kasan_check_write+0x18/0x20 [ 52.608049][ T1213] ? mutex_unlock+0x90/0x240 [ 52.608059][ T1213] ? __cfi_mutex_unlock+0x10/0x10 [ 52.608069][ T1213] ? __fget_files+0x2c5/0x340 [ 52.608083][ T1213] ? __fget_files+0x2c5/0x340 [ 52.608096][ T1213] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.608106][ T1213] ? security_file_ioctl+0x3e/0x110 [ 52.608115][ T1213] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 52.608129][ T1213] __se_sys_ioctl+0x132/0x1b0 [ 52.608143][ T1213] __x64_sys_ioctl+0x7f/0xa0 [ 52.608156][ T1213] x64_sys_call+0x1878/0x2ee0 [ 52.608170][ T1213] do_syscall_64+0x57/0xf0 [ 52.608184][ T1213] ? clear_bhb_loop+0x50/0xa0 [ 52.608199][ T1213] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.608212][ T1213] RIP: 0033:0x7f6f4799aeb9 [ 52.608222][ T1213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.608232][ T1213] RSP: 002b:00007f6f4883a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.608244][ T1213] RAX: ffffffffffffffda RBX: 00007f6f47c15fa0 RCX: 00007f6f4799aeb9 [ 52.608252][ T1213] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 52.608259][ T1213] RBP: 00007f6f4883a090 R08: 0000000000000000 R09: 0000000000000000 [ 52.608267][ T1213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.608277][ T1213] R13: 00007f6f47c16038 R14: 00007f6f47c15fa0 R15: 00007ffe9ea571b8 [ 52.608292][ T1213] [ 52.999282][ T435] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 53.004235][ T1218] FAULT_INJECTION: forcing a failure. [ 53.004235][ T1218] name failslab, interval 1, probability 0, space 0, times 0 [ 53.019642][ T1218] CPU: 0 UID: 0 PID: 1218 Comm: syz.4.284 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 53.019672][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.019683][ T1218] Call Trace: [ 53.019690][ T1218] [ 53.019697][ T1218] __dump_stack+0x21/0x30 [ 53.019723][ T1218] dump_stack_lvl+0x140/0x1c0 [ 53.019742][ T1218] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.019762][ T1218] ? kasan_save_track+0x4f/0x80 [ 53.019783][ T1218] ? kasan_save_alloc_info+0x40/0x50 [ 53.019801][ T1218] ? __kasan_kmalloc+0x96/0xb0 [ 53.019823][ T1218] ? __kmalloc_noprof+0x261/0x500 [ 53.019844][ T1218] ? fib_new_table+0x13c/0x2c0 [ 53.019864][ T1218] ? fib_add_ifaddr+0x32a/0xf10 [ 53.019885][ T1218] ? fib_inetaddr_event+0x161/0x320 [ 53.019908][ T1218] dump_stack+0x19/0x20 [ 53.019927][ T1218] should_fail_ex+0x3d7/0x530 [ 53.019946][ T1218] ? fib_create_info+0x901/0x2170 [ 53.019969][ T1218] should_failslab+0xac/0x100 [ 53.019993][ T1218] __kmalloc_noprof+0x69/0x500 [ 53.020013][ T1218] ? fib_create_info+0x901/0x2170 [ 53.020037][ T1218] fib_create_info+0x901/0x2170 [ 53.020062][ T1218] fib_table_insert+0xb3/0x1f20 [ 53.020079][ T1218] ? __kmalloc_noprof+0x261/0x500 [ 53.020098][ T1218] ? fib_trie_table+0x50/0x200 [ 53.020115][ T1218] ? fib_trie_table+0xcc/0x200 [ 53.020132][ T1218] ? fib_new_table+0x287/0x2c0 [ 53.020152][ T1218] fib_add_ifaddr+0x388/0xf10 [ 53.020173][ T1218] ? __cfi_fib_add_ifaddr+0x10/0x10 [ 53.020195][ T1218] ? __kasan_check_write+0x18/0x20 [ 53.020212][ T1218] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 53.020236][ T1218] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 53.020260][ T1218] ? __kasan_slab_free+0x6a/0x80 [ 53.020282][ T1218] ? kmem_cache_free+0x1bd/0x4f0 [ 53.020303][ T1218] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 53.020327][ T1218] ? __wake_up+0x169/0x190 [ 53.020350][ T1218] ? consume_skb+0x91/0x1a0 [ 53.020370][ T1218] ? netlink_broadcast_filtered+0x116d/0x11f0 [ 53.020392][ T1218] ? downgrade_write+0x460/0x460 [ 53.020414][ T1218] fib_inetaddr_event+0x161/0x320 [ 53.020437][ T1218] ? __cfi_fib_inetaddr_event+0x10/0x10 [ 53.020459][ T1218] notifier_call_chain+0x10e/0x2b0 [ 53.020484][ T1218] blocking_notifier_call_chain+0x6a/0x90 [ 53.020507][ T1218] __inet_insert_ifa+0x85a/0xa80 [ 53.020531][ T1218] ? __kasan_kmalloc+0x96/0xb0 [ 53.020553][ T1218] ? inet_rcu_free_ifa+0xe0/0xe0 [ 53.020574][ T1218] ? inet_alloc_ifa+0x5e/0x1c0 [ 53.020595][ T1218] ? __kasan_check_read+0x15/0x20 [ 53.020621][ T1218] devinet_ioctl+0xf78/0x1960 [ 53.020644][ T1218] ? __cfi_devinet_ioctl+0x10/0x10 [ 53.020664][ T1218] ? _copy_from_user+0x87/0xa0 [ 53.020685][ T1218] ? get_user_ifreq+0x130/0x180 [ 53.020711][ T1218] inet_ioctl+0x431/0x570 [ 53.020726][ T1218] ? __cfi_inet_ioctl+0x10/0x10 [ 53.020745][ T1218] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 53.020765][ T1218] sock_do_ioctl+0x115/0x330 [ 53.020782][ T1218] ? sock_show_fdinfo+0xd0/0xd0 [ 53.020799][ T1218] ? __cfi_vfs_write+0x10/0x10 [ 53.020819][ T1218] ? __kasan_slab_free+0x6a/0x80 [ 53.020841][ T1218] ? kmem_cache_free+0x1bd/0x4f0 [ 53.020861][ T1218] ? putname+0x113/0x150 [ 53.020883][ T1218] sock_ioctl+0x637/0x810 [ 53.020898][ T1218] ? putname+0x113/0x150 [ 53.020919][ T1218] ? __cfi_sock_ioctl+0x10/0x10 [ 53.020934][ T1218] ? __kasan_check_read+0x15/0x20 [ 53.020954][ T1218] ? ksys_write+0x1e2/0x260 [ 53.020974][ T1218] ? bpf_lsm_file_ioctl+0xd/0x20 [ 53.020991][ T1218] ? security_file_ioctl+0x3e/0x110 [ 53.021009][ T1218] ? __cfi_sock_ioctl+0x10/0x10 [ 53.021025][ T1218] __se_sys_ioctl+0x132/0x1b0 [ 53.021048][ T1218] __x64_sys_ioctl+0x7f/0xa0 [ 53.021070][ T1218] x64_sys_call+0x1878/0x2ee0 [ 53.021092][ T1218] do_syscall_64+0x57/0xf0 [ 53.021115][ T1218] ? clear_bhb_loop+0x50/0xa0 [ 53.021136][ T1218] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.021157][ T1218] RIP: 0033:0x7f23ac99aeb9 [ 53.021173][ T1218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.021188][ T1218] RSP: 002b:00007f23ad7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.021209][ T1218] RAX: ffffffffffffffda RBX: 00007f23acc15fa0 RCX: 00007f23ac99aeb9 [ 53.021223][ T1218] RDX: 0000200000000080 RSI: 0000000000008916 RDI: 0000000000000003 [ 53.021235][ T1218] RBP: 00007f23ad7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 53.021247][ T1218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.021264][ T1218] R13: 00007f23acc16038 R14: 00007f23acc15fa0 R15: 00007fff37d249a8 [ 53.021278][ T1218] [ 53.029125][ T435] usb 4-1: device descriptor read/8, error -71 [ 53.319311][ T681] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 53.479241][ T681] usb 2-1: Using ep0 maxpacket: 16 [ 53.497742][ T681] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 53.517594][ T681] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.539310][ T681] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 53.554105][ T681] usb 2-1: config 0 interface 0 has no altsetting 0 [ 53.561468][ T36] audit: type=1400 audit(1769779363.970:1450): avc: denied { ioctl } for pid=1223 comm="syz.4.287" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.561729][ T681] usb 2-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 53.595092][ T681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.605923][ T1224] syzkaller1: entered allmulticast mode [ 53.607922][ T681] usb 2-1: config 0 descriptor?? [ 53.618004][ T435] usb 4-1: device descriptor read/8, error -71 [ 53.632178][ T36] audit: type=1400 audit(1769779364.040:1451): avc: denied { watch } for pid=1226 comm="syz.2.288" path="/66/control" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.678033][ T1229] netlink: 292 bytes leftover after parsing attributes in process `syz.4.289'. [ 53.698484][ T36] audit: type=1400 audit(1769779364.100:1452): avc: denied { mount } for pid=1230 comm="syz.4.290" name="/" dev="ramfs" ino=10794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.774746][ T1234] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„, is not valid (left unmapped). [ 53.774765][ T36] audit: type=1400 audit(1769779364.180:1453): avc: denied { mac_admin } for pid=1233 comm="syz.4.291" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.827843][ T1238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.835112][ T1238] IPv6: NLM_F_CREATE should be set when creating new route [ 53.842377][ T1238] IPv6: NLM_F_CREATE should be set when creating new route [ 53.849740][ T1239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.862376][ T1239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 53.862419][ T1239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:188 [ 53.879281][ T435] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.920299][ T435] usb 4-1: device descriptor read/8, error -71 [ 54.034438][ T681] logitech 0003:046D:C211.0008: unknown main item tag 0x0 [ 54.041668][ T681] logitech 0003:046D:C211.0008: unknown main item tag 0x0 [ 54.048794][ T681] logitech 0003:046D:C211.0008: unknown main item tag 0x0 [ 54.050350][ T435] usb 4-1: device descriptor read/8, error -71 [ 54.056045][ T681] logitech 0003:046D:C211.0008: unknown main item tag 0x0 [ 54.069380][ T681] logitech 0003:046D:C211.0008: unknown main item tag 0x0 [ 54.077074][ T681] logitech 0003:046D:C211.0008: hidraw0: USB HID v0.0b Device [HID 046d:c211] on usb-dummy_hcd.1-1/input0 [ 54.089228][ T681] logitech 0003:046D:C211.0008: no inputs found [ 54.139309][ T62] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 54.169347][ T435] usb usb4-port1: unable to enumerate USB device [ 54.249499][ T435] usb 2-1: USB disconnect, device number 20 [ 54.289284][ T62] usb 3-1: Using ep0 maxpacket: 32 [ 54.295747][ T62] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.304120][ T62] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 54.312543][ T62] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 54.323085][ T62] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 54.350896][ T62] usb 3-1: config 128 has no interface number 0 [ 54.357225][ T62] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 54.370118][ T62] usb 3-1: config 128 interface 127 has no altsetting 0 [ 54.378441][ T62] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 54.389238][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.398314][ T62] usb 3-1: Product: syz [ 54.402658][ T62] usb 3-1: Manufacturer: syz [ 54.407267][ T62] usb 3-1: SerialNumber: syz [ 54.609291][ T681] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.627095][ T62] usb 3-1: USB disconnect, device number 21 [ 54.635416][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.762690][ T681] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.781297][ T681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.794372][ T681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.802496][ T681] usb 4-1: Product: syz [ 54.806682][ T681] usb 4-1: Manufacturer: syz [ 54.811309][ T681] usb 4-1: SerialNumber: syz [ 55.029289][ T331] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 55.180349][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.191333][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.201123][ T331] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 55.210189][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.218926][ T331] usb 2-1: config 0 descriptor?? [ 55.225042][ T331] usbhid 2-1:0.0: can't add hid device: -22 [ 55.231053][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 55.405789][ T1269] Invalid ELF header len 1 [ 55.425317][ T331] usb 2-1: USB disconnect, device number 21 [ 55.709262][ T62] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 55.860239][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.871216][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.881347][ T62] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 55.890454][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.899073][ T62] usb 5-1: config 0 descriptor?? [ 56.024360][ T681] cdc_ncm 4-1:1.0: failed to get mac address [ 56.030602][ T681] cdc_ncm 4-1:1.0: bind() failure [ 56.036660][ T681] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 56.044927][ T681] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 56.056085][ T681] usb 4-1: USB disconnect, device number 17 [ 56.219361][ T452] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 56.249300][ T331] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 56.369383][ T452] usb 3-1: Using ep0 maxpacket: 32 [ 56.375639][ T452] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 56.384059][ T452] usb 3-1: config 0 has no interface number 0 [ 56.390187][ T452] usb 3-1: config 0 interface 166 has no altsetting 0 [ 56.398380][ T452] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 56.407603][ T452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.415634][ T452] usb 3-1: Product: syz [ 56.419823][ T452] usb 3-1: Manufacturer: syz [ 56.420439][ T331] usb 2-1: config 0 has no interfaces? [ 56.424474][ T452] usb 3-1: SerialNumber: syz [ 56.425739][ T452] usb 3-1: config 0 descriptor?? [ 56.439395][ T331] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 56.449096][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.458108][ T331] usb 2-1: config 0 descriptor?? [ 56.569968][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 56.569984][ T36] audit: type=1400 audit(1769779366.980:1484): avc: denied { create } for pid=1284 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 56.646745][ T452] ums-usbat 3-1:0.166: USB Mass Storage device detected [ 56.655695][ T452] ums-usbat 3-1:0.166: Quirks match for vid 0781 pid 0005: 1 [ 56.678381][ T1279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.687020][ T1279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.726137][ T452] ums-usbat 3-1:0.166: probe with driver ums-usbat failed with error -5 [ 56.742680][ T452] usb 3-1: USB disconnect, device number 22 [ 56.756839][ T36] audit: type=1400 audit(1769779367.160:1485): avc: denied { read write } for pid=1295 comm="syz.3.315" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.783781][ T36] audit: type=1400 audit(1769779367.160:1486): avc: denied { open } for pid=1295 comm="syz.3.315" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.808024][ T36] audit: type=1400 audit(1769779367.160:1487): avc: denied { ioctl } for pid=1295 comm="syz.3.315" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.833512][ T36] audit: type=1400 audit(1769779367.160:1488): avc: denied { compute_member } for pid=1295 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 56.871318][ T435] usb 2-1: USB disconnect, device number 22 [ 57.249226][ T36] audit: type=1400 audit(1769779367.650:1489): avc: denied { append } for pid=1298 comm="syz.2.316" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.569284][ T435] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 57.601411][ T1306] FAULT_INJECTION: forcing a failure. [ 57.601411][ T1306] name failslab, interval 1, probability 0, space 0, times 0 [ 57.614134][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: syz.3.319 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 57.614155][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.614162][ T1306] Call Trace: [ 57.614167][ T1306] [ 57.614172][ T1306] __dump_stack+0x21/0x30 [ 57.614190][ T1306] dump_stack_lvl+0x140/0x1c0 [ 57.614207][ T1306] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.614220][ T1306] dump_stack+0x19/0x20 [ 57.614231][ T1306] should_fail_ex+0x3d7/0x530 [ 57.614245][ T1306] should_failslab+0xac/0x100 [ 57.614260][ T1306] kmem_cache_alloc_noprof+0x42/0x410 [ 57.614273][ T1306] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 57.614288][ T1306] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 57.614301][ T1306] ? mutex_unlock+0x90/0x240 [ 57.614313][ T1306] kvm_mmu_topup_memory_cache+0x24/0x30 [ 57.614326][ T1306] kvm_mmu_load+0xa2/0x2890 [ 57.614338][ T1306] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 57.614352][ T1306] vcpu_run+0x4dad/0x7840 [ 57.614369][ T1306] ? signal_pending+0xc0/0xc0 [ 57.614381][ T1306] ? __kasan_check_write+0x18/0x20 [ 57.614392][ T1306] ? xfd_validate_state+0x68/0x140 [ 57.614404][ T1306] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 57.614414][ T1306] ? __kasan_check_write+0x18/0x20 [ 57.614426][ T1306] ? fpregs_mark_activate+0x68/0x160 [ 57.614436][ T1306] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 57.614446][ T1306] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 57.614456][ T1306] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 57.614469][ T1306] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 57.614480][ T1306] ? kstrtoull+0x13b/0x1e0 [ 57.614497][ T1306] ? kstrtouint+0x78/0xf0 [ 57.614508][ T1306] ? ioctl_has_perm+0x1bc/0x500 [ 57.614526][ T1306] ? __asan_memcpy+0x5a/0x80 [ 57.614545][ T1306] ? ioctl_has_perm+0x408/0x500 [ 57.614561][ T1306] ? has_cap_mac_admin+0xd0/0xd0 [ 57.614572][ T1306] ? __kasan_check_write+0x18/0x20 [ 57.614583][ T1306] ? mutex_lock_killable+0x97/0x1d0 [ 57.614593][ T1306] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.614604][ T1306] ? proc_fail_nth_write+0x184/0x220 [ 57.614616][ T1306] kvm_vcpu_ioctl+0xa48/0x1000 [ 57.614630][ T1306] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 57.614644][ T1306] ? __cfi_vfs_write+0x10/0x10 [ 57.614657][ T1306] ? __kasan_check_write+0x18/0x20 [ 57.614668][ T1306] ? mutex_unlock+0x90/0x240 [ 57.614678][ T1306] ? __cfi_mutex_unlock+0x10/0x10 [ 57.614688][ T1306] ? __fget_files+0x2c5/0x340 [ 57.614702][ T1306] ? __fget_files+0x2c5/0x340 [ 57.614715][ T1306] ? bpf_lsm_file_ioctl+0xd/0x20 [ 57.614725][ T1306] ? security_file_ioctl+0x3e/0x110 [ 57.614735][ T1306] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 57.614748][ T1306] __se_sys_ioctl+0x132/0x1b0 [ 57.614763][ T1306] __x64_sys_ioctl+0x7f/0xa0 [ 57.614776][ T1306] x64_sys_call+0x1878/0x2ee0 [ 57.614789][ T1306] do_syscall_64+0x57/0xf0 [ 57.614803][ T1306] ? clear_bhb_loop+0x50/0xa0 [ 57.614818][ T1306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.614832][ T1306] RIP: 0033:0x7fa06499aeb9 [ 57.614842][ T1306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.614852][ T1306] RSP: 002b:00007fa06587d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.614865][ T1306] RAX: ffffffffffffffda RBX: 00007fa064c15fa0 RCX: 00007fa06499aeb9 [ 57.614873][ T1306] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 57.614880][ T1306] RBP: 00007fa06587d090 R08: 0000000000000000 R09: 0000000000000000 [ 57.614887][ T1306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.614894][ T1306] R13: 00007fa064c16038 R14: 00007fa064c15fa0 R15: 00007ffc824bd338 [ 57.614902][ T1306] [ 57.820867][ T435] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.986709][ T435] usb 3-1: config 3 has an invalid interface number: 86 but max is 0 [ 57.995185][ T435] usb 3-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 58.005801][ T435] usb 3-1: config 3 has no interface number 0 [ 58.011999][ T435] usb 3-1: config 3 interface 86 altsetting 11 endpoint 0xC has invalid maxpacket 56804, setting to 1024 [ 58.023260][ T435] usb 3-1: config 3 interface 86 altsetting 11 bulk endpoint 0xC has invalid maxpacket 1024 [ 58.033822][ T435] usb 3-1: config 3 interface 86 has no altsetting 0 [ 58.049795][ T435] usb 3-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 58.061186][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.069496][ T435] usb 3-1: SerialNumber: syz [ 58.078425][ T1302] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 58.291741][ T435] usb 3-1: bad CDC descriptors [ 58.300213][ T435] usb 3-1: USB disconnect, device number 23 [ 58.319364][ T452] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 58.349263][ T374] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 58.422824][ T62] usb 5-1: string descriptor 0 read error: -71 [ 58.432682][ T62] usbhid 5-1:0.0: can't add hid device: -71 [ 58.438628][ T62] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 58.454735][ T62] usb 5-1: USB disconnect, device number 21 [ 58.472093][ T452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.483073][ T452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.493290][ T452] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 58.502422][ T452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.511090][ T452] usb 2-1: config 0 descriptor?? [ 58.520611][ T374] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 58.532427][ T374] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.543665][ T374] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 58.559786][ T374] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.574359][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.582470][ T36] audit: type=1400 audit(1769779368.980:1490): avc: denied { map } for pid=1319 comm="syz.4.324" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.606519][ T374] usb 4-1: SerialNumber: syz [ 58.618927][ T36] audit: type=1400 audit(1769779368.990:1491): avc: denied { bind } for pid=1319 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.638797][ T36] audit: type=1400 audit(1769779369.040:1492): avc: denied { create } for pid=1326 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.658697][ T36] audit: type=1400 audit(1769779369.040:1493): avc: denied { ioctl } for pid=1326 comm="syz.4.327" path="socket:[12478]" dev="sockfs" ino=12478 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.709852][ T1332] FAULT_INJECTION: forcing a failure. [ 58.709852][ T1332] name failslab, interval 1, probability 0, space 0, times 0 [ 58.722562][ T1332] CPU: 0 UID: 0 PID: 1332 Comm: syz.4.328 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 58.722592][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.722604][ T1332] Call Trace: [ 58.722610][ T1332] [ 58.722618][ T1332] __dump_stack+0x21/0x30 [ 58.722649][ T1332] dump_stack_lvl+0x140/0x1c0 [ 58.722670][ T1332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.722689][ T1332] dump_stack+0x19/0x20 [ 58.722700][ T1332] should_fail_ex+0x3d7/0x530 [ 58.722711][ T1332] should_failslab+0xac/0x100 [ 58.722727][ T1332] kmem_cache_alloc_noprof+0x42/0x410 [ 58.722748][ T1332] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 58.722773][ T1332] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 58.722796][ T1332] ? mutex_unlock+0x90/0x240 [ 58.722813][ T1332] kvm_mmu_topup_memory_cache+0x24/0x30 [ 58.722827][ T1332] kvm_mmu_load+0xa2/0x2890 [ 58.722839][ T1332] ? kvm_apic_has_interrupt+0x27/0x7a0 [ 58.722852][ T1332] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 58.722864][ T1332] vcpu_run+0x4dad/0x7840 [ 58.722890][ T1332] ? signal_pending+0xc0/0xc0 [ 58.722910][ T1332] ? __kasan_check_write+0x18/0x20 [ 58.722930][ T1332] ? xfd_validate_state+0x68/0x140 [ 58.722950][ T1332] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 58.722961][ T1332] ? __kasan_check_write+0x18/0x20 [ 58.722972][ T1332] ? fpregs_mark_activate+0x68/0x160 [ 58.722982][ T1332] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 58.722992][ T1332] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 58.723002][ T1332] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 58.723014][ T1332] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 58.723035][ T1332] ? kstrtoull+0x13b/0x1e0 [ 58.723052][ T1332] ? kstrtouint+0x78/0xf0 [ 58.723068][ T1332] ? ioctl_has_perm+0x1bc/0x500 [ 58.723087][ T1332] ? __asan_memcpy+0x5a/0x80 [ 58.723101][ T1332] ? ioctl_has_perm+0x408/0x500 [ 58.723111][ T1332] ? has_cap_mac_admin+0xd0/0xd0 [ 58.723121][ T1332] ? __kasan_check_write+0x18/0x20 [ 58.723134][ T1332] ? mutex_lock_killable+0x97/0x1d0 [ 58.723145][ T1332] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.723155][ T1332] ? proc_fail_nth_write+0x184/0x220 [ 58.723173][ T1332] kvm_vcpu_ioctl+0xa48/0x1000 [ 58.723197][ T1332] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 58.723221][ T1332] ? __cfi_vfs_write+0x10/0x10 [ 58.723240][ T1332] ? __kasan_check_write+0x18/0x20 [ 58.723251][ T1332] ? mutex_unlock+0x90/0x240 [ 58.723261][ T1332] ? __cfi_mutex_unlock+0x10/0x10 [ 58.723271][ T1332] ? __fget_files+0x2c5/0x340 [ 58.723285][ T1332] ? __fget_files+0x2c5/0x340 [ 58.723298][ T1332] ? bpf_lsm_file_ioctl+0xd/0x20 [ 58.723314][ T1332] ? security_file_ioctl+0x3e/0x110 [ 58.723331][ T1332] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 58.723354][ T1332] __se_sys_ioctl+0x132/0x1b0 [ 58.723384][ T1332] __x64_sys_ioctl+0x7f/0xa0 [ 58.723398][ T1332] x64_sys_call+0x1878/0x2ee0 [ 58.723411][ T1332] do_syscall_64+0x57/0xf0 [ 58.723424][ T1332] ? clear_bhb_loop+0x50/0xa0 [ 58.723439][ T1332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.723459][ T1332] RIP: 0033:0x7f23ac99aeb9 [ 58.723475][ T1332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.723491][ T1332] RSP: 002b:00007f23ad7bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.723512][ T1332] RAX: ffffffffffffffda RBX: 00007f23acc15fa0 RCX: 00007f23ac99aeb9 [ 58.723526][ T1332] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 58.723533][ T1332] RBP: 00007f23ad7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 58.723539][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.723546][ T1332] R13: 00007f23acc16038 R14: 00007f23acc15fa0 R15: 00007fff37d249a8 [ 58.723555][ T1332] [ 59.093118][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.104976][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.105070][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.113539][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.131856][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.142025][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.151164][ T374] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 59.151744][ T452] usbhid 2-1:0.0: can't add hid device: -71 [ 59.163005][ T374] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 59.163360][ T452] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 59.193827][ T452] usb 2-1: USB disconnect, device number 23 [ 59.306388][ T374] usb 4-1: USB disconnect, device number 18 [ 59.682131][ T1374] FAULT_INJECTION: forcing a failure. [ 59.682131][ T1374] name failslab, interval 1, probability 0, space 0, times 0 [ 59.694983][ T1374] CPU: 1 UID: 0 PID: 1374 Comm: syz.3.340 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 59.695020][ T1374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.695032][ T1374] Call Trace: [ 59.695038][ T1374] [ 59.695044][ T1374] __dump_stack+0x21/0x30 [ 59.695074][ T1374] dump_stack_lvl+0x140/0x1c0 [ 59.695095][ T1374] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.695119][ T1374] dump_stack+0x19/0x20 [ 59.695139][ T1374] should_fail_ex+0x3d7/0x530 [ 59.695159][ T1374] should_failslab+0xac/0x100 [ 59.695184][ T1374] kmem_cache_alloc_noprof+0x42/0x410 [ 59.695206][ T1374] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 59.695237][ T1374] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 59.695260][ T1374] ? mutex_unlock+0x90/0x240 [ 59.695281][ T1374] kvm_mmu_topup_memory_cache+0x24/0x30 [ 59.695303][ T1374] kvm_mmu_load+0xa2/0x2890 [ 59.695323][ T1374] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 59.695346][ T1374] ? kvm_apic_has_interrupt+0x793/0x7a0 [ 59.695368][ T1374] vcpu_run+0x4dad/0x7840 [ 59.695402][ T1374] ? signal_pending+0xc0/0xc0 [ 59.695421][ T1374] ? __kasan_check_write+0x18/0x20 [ 59.695442][ T1374] ? xfd_validate_state+0x68/0x140 [ 59.695463][ T1374] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 59.695481][ T1374] ? __kasan_check_write+0x18/0x20 [ 59.695501][ T1374] ? fpregs_mark_activate+0x68/0x160 [ 59.695519][ T1374] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 59.695537][ T1374] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 59.695554][ T1374] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 59.695577][ T1374] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 59.695598][ T1374] ? kstrtoull+0x13b/0x1e0 [ 59.695614][ T1374] ? kstrtouint+0x78/0xf0 [ 59.695631][ T1374] ? ioctl_has_perm+0x1bc/0x500 [ 59.695649][ T1374] ? __asan_memcpy+0x5a/0x80 [ 59.695670][ T1374] ? ioctl_has_perm+0x408/0x500 [ 59.695688][ T1374] ? has_cap_mac_admin+0xd0/0xd0 [ 59.695706][ T1374] ? __kasan_check_write+0x18/0x20 [ 59.695726][ T1374] ? mutex_lock_killable+0x97/0x1d0 [ 59.695745][ T1374] ? __cfi_mutex_lock_killable+0x10/0x10 [ 59.695763][ T1374] ? proc_fail_nth_write+0x184/0x220 [ 59.695783][ T1374] kvm_vcpu_ioctl+0xa48/0x1000 [ 59.695808][ T1374] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 59.695831][ T1374] ? __cfi_vfs_write+0x10/0x10 [ 59.695852][ T1374] ? __kasan_check_write+0x18/0x20 [ 59.695871][ T1374] ? mutex_unlock+0x90/0x240 [ 59.695889][ T1374] ? __cfi_mutex_unlock+0x10/0x10 [ 59.695904][ T1374] ? __fget_files+0x2c5/0x340 [ 59.695927][ T1374] ? __fget_files+0x2c5/0x340 [ 59.695949][ T1374] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.695965][ T1374] ? security_file_ioctl+0x3e/0x110 [ 59.696005][ T1374] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 59.696028][ T1374] __se_sys_ioctl+0x132/0x1b0 [ 59.696052][ T1374] __x64_sys_ioctl+0x7f/0xa0 [ 59.696075][ T1374] x64_sys_call+0x1878/0x2ee0 [ 59.696097][ T1374] do_syscall_64+0x57/0xf0 [ 59.696121][ T1374] ? clear_bhb_loop+0x50/0xa0 [ 59.696145][ T1374] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.696167][ T1374] RIP: 0033:0x7fa06499aeb9 [ 59.696184][ T1374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.696199][ T1374] RSP: 002b:00007fa06587d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.696221][ T1374] RAX: ffffffffffffffda RBX: 00007fa064c15fa0 RCX: 00007fa06499aeb9 [ 59.696241][ T1374] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 59.696253][ T1374] RBP: 00007fa06587d090 R08: 0000000000000000 R09: 0000000000000000 [ 59.696266][ T1374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.696278][ T1374] R13: 00007fa064c16038 R14: 00007fa064c15fa0 R15: 00007ffc824bd338 [ 59.696295][ T1374] [ 60.009256][ T452] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 60.079285][ T331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 60.086946][ T374] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 60.219301][ T452] usb 3-1: Using ep0 maxpacket: 8 [ 60.225668][ T452] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.234010][ T452] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 60.239266][ T374] usb 5-1: Using ep0 maxpacket: 16 [ 60.242264][ T452] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 60.247343][ T331] usb 2-1: Using ep0 maxpacket: 8 [ 60.256394][ T452] usb 3-1: config 4 has no interface number 0 [ 60.262092][ T374] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 60.268891][ T452] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 60.276283][ T331] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 60.286180][ T452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.293540][ T331] usb 2-1: config 0 has no interface number 0 [ 60.301841][ T452] usb 3-1: Product: syz [ 60.307635][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.312133][ T452] usb 3-1: Manufacturer: syz [ 60.320622][ T374] usb 5-1: config 0 descriptor?? [ 60.327577][ T452] usb 3-1: SerialNumber: syz [ 60.336460][ T331] usb 2-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=b7.96 [ 60.345559][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.353578][ T331] usb 2-1: Product: syz [ 60.357754][ T331] usb 2-1: Manufacturer: syz [ 60.362703][ T331] usb 2-1: SerialNumber: syz [ 60.368034][ T331] usb 2-1: config 0 descriptor?? [ 60.384537][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.547051][ T452] usb 3-1: Found UVC 0.00 device syz (04f2:b746) [ 60.553511][ T452] usb 3-1: No valid video chain found. [ 60.561599][ T452] usb 3-1: USB disconnect, device number 24 [ 60.580734][ T331] usb 2-1: USB disconnect, device number 24 [ 60.951501][ T374] usbhid 5-1:0.0: can't add hid device: -71 [ 60.957496][ T374] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 60.967600][ T374] usb 5-1: USB disconnect, device number 22 [ 61.229546][ T331] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.359308][ T452] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 61.359308][ T435] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 61.379313][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 61.385540][ T331] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 61.393693][ T331] usb 4-1: config 0 has no interface number 0 [ 61.399819][ T331] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.409663][ T331] usb 4-1: config 0 interface 41 has no altsetting 0 [ 61.417692][ T331] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 61.426769][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.434903][ T331] usb 4-1: Product: syz [ 61.439066][ T331] usb 4-1: Manufacturer: syz [ 61.443796][ T331] usb 4-1: SerialNumber: syz [ 61.448880][ T331] usb 4-1: config 0 descriptor?? [ 61.454176][ T1386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.464952][ T331] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 61.522319][ T452] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.529279][ T435] usb 3-1: Using ep0 maxpacket: 32 [ 61.539269][ T435] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.541301][ T452] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.550721][ T435] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 61.556405][ T452] usb 2-1: config 1 has no interface number 0 [ 61.564433][ T435] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 61.570615][ T452] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.581225][ T435] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 61.596514][ T452] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.602735][ T435] usb 3-1: config 128 has no interface number 0 [ 61.611973][ T452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.617838][ T435] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.626169][ T452] usb 2-1: Product: syz [ 61.635984][ T435] usb 3-1: config 128 interface 127 has no altsetting 0 [ 61.641126][ T452] usb 2-1: Manufacturer: syz [ 61.649285][ T435] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 61.652587][ T452] usb 2-1: SerialNumber: syz [ 61.661303][ T435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.669502][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.674363][ T435] usb 3-1: Product: syz [ 61.682906][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.686904][ T435] usb 3-1: Manufacturer: syz [ 61.695185][ T452] usb 2-1: selecting invalid altsetting 1 [ 61.704204][ T435] usb 3-1: SerialNumber: syz [ 61.708352][ T377] usb 4-1: USB disconnect, device number 19 [ 61.767665][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 61.767681][ T36] audit: type=1400 audit(1769779372.170:1505): avc: denied { accept } for pid=1402 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.906208][ T452] cdc_ncm 2-1:1.1: bind() failure [ 61.915148][ T452] usb 2-1: USB disconnect, device number 25 [ 61.918737][ T1396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.930382][ T1407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.939589][ T1407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.940278][ T1396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.963243][ T435] usb 3-1: USB disconnect, device number 25 [ 61.967568][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.401035][ T1417] mmap: syz.4.355 (1417): VmData 29335552 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 62.494571][ T452] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 62.513985][ T1431] random: crng reseeded on system resumption [ 62.517764][ T1430] IPv6: Can't replace route, no match found [ 62.650292][ T452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 62.661296][ T452] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 62.670361][ T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.678995][ T452] usb 4-1: config 0 descriptor?? [ 62.684415][ T1414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.691609][ T377] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 62.779282][ T435] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 62.786922][ T331] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 62.850166][ T377] usb 5-1: config 0 interface 0 has no altsetting 0 [ 62.856799][ T377] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 62.865935][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.874584][ T377] usb 5-1: config 0 descriptor?? [ 62.939285][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 62.944518][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 62.950782][ T435] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.960981][ T435] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.970210][ T331] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 62.980993][ T331] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.991938][ T331] usb 2-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 63 [ 63.004956][ T331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 63.011677][ T331] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 63.020780][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.029173][ T435] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.038259][ T435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.046427][ T435] usb 3-1: Product: syz [ 63.050858][ T331] usb 2-1: config 0 descriptor?? [ 63.055872][ T435] usb 3-1: Manufacturer: syz [ 63.060535][ T435] usb 3-1: SerialNumber: syz [ 63.101113][ T452] thrustmaster 0003:044F:B304.0009: unknown main item tag 0x0 [ 63.109388][ T452] thrustmaster 0003:044F:B304.0009: item fetching failed at offset 3/5 [ 63.120450][ T452] thrustmaster 0003:044F:B304.0009: parse failed [ 63.126843][ T452] thrustmaster 0003:044F:B304.0009: probe with driver thrustmaster failed with error -22 [ 63.148923][ T452] usb 4-1: USB disconnect, device number 20 [ 63.157836][ T1455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 63.187990][ T36] audit: type=1400 audit(1769779373.590:1506): avc: denied { mounton } for pid=1456 comm="syz.3.364" path="/proc/266" dev="proc" ino=12000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 63.189169][ T1457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.364'. [ 63.210222][ T36] audit: type=1400 audit(1769779373.590:1507): avc: denied { mount } for pid=1456 comm="syz.3.364" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.290821][ T377] wacom 0003:056A:00C6.000A: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0 [ 63.427669][ T435] usb 3-1: 0:2 : does not exist [ 63.434607][ T435] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 63.445860][ T435] usb 3-1: USB disconnect, device number 26 [ 63.467089][ T331] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 63.474016][ T331] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 63.481999][ T331] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 63.488869][ T331] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 63.495782][ T331] ryos 0003:1E7D:31CE.000B: unknown main item tag 0x0 [ 63.504446][ T331] ryos 0003:1E7D:31CE.000B: hidraw1: USB HID v0.0b Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 63.684072][ T1433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.693214][ T1433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.769271][ T331] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 63.810928][ T1467] netlink: 76 bytes leftover after parsing attributes in process `syz.2.366'. [ 63.820948][ T1468] netlink: 76 bytes leftover after parsing attributes in process `syz.2.366'. [ 63.920656][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.928750][ T331] usb 4-1: not running at top speed; connect to a high speed hub [ 63.937181][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.947326][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.958102][ T331] usb 4-1: string descriptor 0 read error: -22 [ 63.964329][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.973376][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.983498][ T331] usb 4-1: 0:2 : does not exist [ 64.129260][ T452] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 64.206527][ T435] usb 2-1: USB disconnect, device number 26 [ 64.279345][ T452] usb 3-1: Using ep0 maxpacket: 8 [ 64.285569][ T452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.296750][ T452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.306523][ T452] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 64.319367][ T452] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 64.328400][ T452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.337107][ T452] usb 3-1: config 0 descriptor?? [ 64.509267][ T435] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 64.639262][ T435] usb 2-1: device descriptor read/64, error -71 [ 64.748520][ T452] usbhid 3-1:0.0: can't add hid device: -71 [ 64.755134][ T452] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 64.763978][ T452] usb 3-1: USB disconnect, device number 27 [ 64.879235][ T435] usb 2-1: device descriptor read/64, error -71 [ 65.119245][ T435] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 65.249246][ T435] usb 2-1: device descriptor read/64, error -71 [ 65.272377][ T36] audit: type=1400 audit(1769779375.670:1508): avc: denied { nlmsg_read } for pid=1480 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 65.419569][ T331] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 65.428576][ T331] usb 4-1: Warning! Unlikely big volume range (=52533), cval->res is probably wrong. [ 65.438244][ T331] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/28725/1 [ 65.448242][ T331] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 65.457366][ T36] audit: type=1326 audit(1769779375.860:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1424 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99aeb9 code=0x7fc00000 [ 65.458013][ T331] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 65.493941][ T374] usb 5-1: USB disconnect, device number 23 [ 65.500099][ T435] usb 2-1: device descriptor read/64, error -71 [ 65.513440][ T1489] syzkaller0: entered promiscuous mode [ 65.518954][ T1489] syzkaller0: entered allmulticast mode [ 65.527025][ T331] usb 4-1: USB disconnect, device number 21 [ 65.537760][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.609435][ T435] usb usb2-port1: attempt power cycle [ 65.899302][ T374] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 65.949277][ T435] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 65.970345][ T435] usb 2-1: device descriptor read/8, error -71 [ 66.049276][ T374] usb 5-1: Using ep0 maxpacket: 32 [ 66.055955][ T374] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 66.064122][ T374] usb 5-1: config 2 has no interface number 0 [ 66.070272][ T374] usb 5-1: config 2 interface 88 has no altsetting 0 [ 66.080309][ T374] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 66.090157][ T374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.098338][ T374] usb 5-1: Product: syz [ 66.102647][ T374] usb 5-1: Manufacturer: syz [ 66.107279][ T374] usb 5-1: SerialNumber: syz [ 66.112608][ T435] usb 2-1: device descriptor read/8, error -71 [ 66.319258][ T452] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 66.349249][ T435] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 66.370312][ T435] usb 2-1: device descriptor read/8, error -71 [ 66.470290][ T452] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 66.478487][ T452] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 66.488368][ T452] usb 4-1: config 0 interface 0 has no altsetting 0 [ 66.496484][ T452] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 66.505581][ T452] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 66.510246][ T435] usb 2-1: device descriptor read/8, error -71 [ 66.513766][ T452] usb 4-1: Product: syz [ 66.524124][ T452] usb 4-1: Manufacturer: syz [ 66.528693][ T452] usb 4-1: SerialNumber: syz [ 66.533867][ T452] usb 4-1: config 0 descriptor?? [ 66.540892][ T452] hub 4-1:0.0: bad descriptor, ignoring hub [ 66.546815][ T452] hub 4-1:0.0: probe with driver hub failed with error -5 [ 66.554411][ T452] usb 4-1: selecting invalid altsetting 0 [ 66.629396][ T435] usb usb2-port1: unable to enumerate USB device [ 66.743185][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.751761][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.760460][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.769016][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.879346][ T452] usb 4-1: USB disconnect, device number 22 [ 66.922530][ T374] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 66.932860][ T374] asix 5-1:2.88: probe with driver asix failed with error -71 [ 66.941331][ T374] usb 5-1: USB disconnect, device number 24 [ 67.434743][ T36] audit: type=1400 audit(1769779377.840:1510): avc: denied { map } for pid=1505 comm="syz.4.382" path="socket:[13290]" dev="sockfs" ino=13290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.609284][ T452] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 67.760367][ T452] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.780613][ T452] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.790411][ T452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.798591][ T452] usb 4-1: Product: syz [ 67.802832][ T452] usb 4-1: Manufacturer: syz [ 67.807428][ T452] usb 4-1: SerialNumber: syz [ 67.812042][ T36] audit: type=1400 audit(1769779378.200:1511): avc: denied { mount } for pid=1507 comm="syz.1.383" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.905129][ T36] audit: type=1400 audit(1769779378.310:1512): avc: denied { create } for pid=1507 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.436605][ T452] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 68.442865][ T452] cdc_ncm 4-1:1.0: bind() failure [ 68.448605][ T452] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 68.455497][ T452] cdc_ncm 4-1:1.1: bind() failure [ 68.588763][ T36] audit: type=1400 audit(1769779378.990:1513): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.835014][ T36] audit: type=1400 audit(1769779379.240:1514): avc: denied { write } for pid=1532 comm="syz.2.392" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.856809][ T36] audit: type=1400 audit(1769779379.240:1515): avc: denied { remove_name } for pid=1532 comm="syz.2.392" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.880082][ T36] audit: type=1400 audit(1769779379.240:1516): avc: denied { unlink } for pid=1532 comm="syz.2.392" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.903072][ T36] audit: type=1400 audit(1769779379.260:1517): avc: denied { wake_alarm } for pid=1524 comm="syz.1.389" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.914781][ T1538] input: syz0 as /devices/virtual/input/input12 [ 68.924654][ T36] audit: type=1400 audit(1769779379.310:1518): avc: denied { write } for pid=1537 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.950923][ T36] audit: type=1400 audit(1769779379.310:1519): avc: denied { write } for pid=1537 comm="syz.1.394" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.039245][ T452] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 69.079467][ T1544] __vm_enough_memory: pid: 1544, comm: syz.2.396, bytes: 18014402804453376 not enough memory for the allocation [ 69.169905][ T1554] rust_binder: 266: no such ref 0 [ 69.175048][ T1554] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 69.182147][ T1554] rust_binder: 266: no such ref 2 [ 69.187219][ T1554] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 69.187939][ T1555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 69.189417][ T452] usb 5-1: Using ep0 maxpacket: 32 [ 69.216816][ T452] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 69.237644][ T452] usb 5-1: config 0 has no interface number 0 [ 69.243955][ T452] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 69.257875][ T452] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 69.266987][ T452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.275026][ T696] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 69.282616][ T452] usb 5-1: Product: syz [ 69.286793][ T452] usb 5-1: Manufacturer: syz [ 69.291747][ T452] usb 5-1: SerialNumber: syz [ 69.296828][ T452] usb 5-1: config 0 descriptor?? [ 69.303377][ T1527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.440283][ T696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.450549][ T696] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.459743][ T696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.470794][ T696] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 69.480093][ T696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.490305][ T696] hub 2-1:1.0: bad descriptor, ignoring hub [ 69.497592][ T696] hub 2-1:1.0: probe with driver hub failed with error -5 [ 69.507250][ T696] cdc_wdm 2-1:1.0: skipping garbage [ 69.512533][ T696] cdc_wdm 2-1:1.0: skipping garbage [ 69.518523][ T696] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 69.519560][ T1527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.526835][ T696] cdc_wdm 2-1:1.0: Unknown control protocol [ 69.589266][ T377] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 69.740388][ T377] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 69.751177][ T377] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 69.764061][ T377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.770718][ T377] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 69.779793][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.788635][ T377] usb 3-1: config 0 descriptor?? [ 70.089436][ T435] usb 2-1: reset low-speed USB device number 31 using dummy_hcd [ 70.197250][ T377] hid-rmi 0003:17EF:6085.000C: hidraw0: USB HID v0.04 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 70.370813][ T374] usb 4-1: USB disconnect, device number 23 [ 70.381588][ T435] usb 2-1: device firmware changed [ 70.387454][ T435] usb 2-1: USB disconnect, device number 31 [ 70.399276][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.412110][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.425076][ T331] usb 3-1: USB disconnect, device number 28 [ 70.425204][ T1566] netlink: 224 bytes leftover after parsing attributes in process `syz.3.403'. [ 70.699281][ T435] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 70.789262][ T374] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 70.850380][ T435] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.860500][ T435] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.867123][ T435] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 70.876337][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.884980][ T435] usb 2-1: config 0 descriptor?? [ 70.950250][ T374] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 70.960090][ T374] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 70.971378][ T374] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 70.980467][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.988473][ T374] usb 4-1: Product: syz [ 70.992654][ T374] usb 4-1: Manufacturer: syz [ 70.997268][ T374] usb 4-1: SerialNumber: syz [ 71.002592][ T374] usb 4-1: config 0 descriptor?? [ 71.007849][ T1573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.015268][ T1573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.223878][ T1573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.231246][ T1573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.293094][ T435] usb 2-1: string descriptor 0 read error: -71 [ 71.300903][ T435] usbhid 2-1:0.0: can't add hid device: -71 [ 71.306885][ T435] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 71.315846][ T435] usb 2-1: USB disconnect, device number 32 [ 71.589238][ T331] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 71.640759][ T374] Error reading MAC address [ 71.740338][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.751326][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.761091][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.773994][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.783047][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.791541][ T331] usb 3-1: config 0 descriptor?? [ 71.949492][ T452] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 71.959819][ T452] asix 5-1:0.188: probe with driver asix failed with error -71 [ 71.968958][ T452] usb 5-1: USB disconnect, device number 25 [ 72.159309][ T696] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 72.194532][ T1590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.202107][ T331] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 72.203620][ T1590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.219938][ T331] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.320441][ T696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.332679][ T696] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.341809][ T696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.349832][ T696] usb 2-1: Product: syz [ 72.354006][ T696] usb 2-1: Manufacturer: syz [ 72.358595][ T696] usb 2-1: SerialNumber: syz [ 72.699236][ T452] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 72.820342][ T1595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.828888][ T1595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.847984][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 72.848001][ T36] audit: type=1400 audit(1769779383.250:1529): avc: denied { connect } for pid=1578 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.879251][ T452] usb 5-1: Using ep0 maxpacket: 16 [ 72.885728][ T452] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.894282][ T452] usb 5-1: config 5 has an invalid interface number: 174 but max is 0 [ 72.902496][ T452] usb 5-1: config 5 has no interface number 0 [ 72.908663][ T452] usb 5-1: config 5 interface 174 has no altsetting 0 [ 72.916830][ T452] usb 5-1: New USB device found, idVendor=13d3, idProduct=3365, bcdDevice=15.f1 [ 72.925983][ T452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.934003][ T452] usb 5-1: Product: syz [ 72.938237][ T452] usb 5-1: Manufacturer: syz [ 72.942854][ T452] usb 5-1: SerialNumber: syz [ 72.965510][ T696] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 72.971661][ T696] cdc_ncm 2-1:1.0: bind() failure [ 72.977534][ T696] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 72.984405][ T696] cdc_ncm 2-1:1.1: bind() failure [ 73.351023][ T452] usb 5-1: bad CDC descriptors [ 73.357596][ T452] usb 5-1: USB disconnect, device number 26 [ 73.513525][ T696] usb 4-1: USB disconnect, device number 24 [ 73.514440][ T36] audit: type=1400 audit(1769779383.920:1530): avc: denied { getopt } for pid=1598 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.543424][ T1601] Zero length message leads to an empty skb [ 73.860640][ T696] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 73.989290][ T374] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 74.029248][ T696] usb 4-1: Using ep0 maxpacket: 8 [ 74.036079][ T696] usb 4-1: config 16 has an invalid interface number: 60 but max is 0 [ 74.044353][ T696] usb 4-1: config 16 has no interface number 0 [ 74.050561][ T696] usb 4-1: config 16 interface 60 has no altsetting 0 [ 74.058765][ T696] usb 4-1: New USB device found, idVendor=045e, idProduct=0475, bcdDevice=77.d1 [ 74.067858][ T696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.075885][ T696] usb 4-1: Product: syz [ 74.080077][ T696] usb 4-1: Manufacturer: syz [ 74.084675][ T696] usb 4-1: SerialNumber: syz [ 74.099283][ T331] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 74.249230][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 74.255383][ T331] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 74.263524][ T331] usb 5-1: config 2 has no interface number 0 [ 74.269655][ T331] usb 5-1: config 2 interface 88 has no altsetting 0 [ 74.277754][ T331] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 74.286859][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.294966][ T331] usb 5-1: Product: syz [ 74.297591][ T696] usb 4-1: USB disconnect, device number 25 [ 74.299144][ T331] usb 5-1: Manufacturer: syz [ 74.299162][ T331] usb 5-1: SerialNumber: syz [ 74.765560][ T36] audit: type=1326 audit(1769779385.170:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.2.423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d1e59aeb9 code=0x0 [ 74.820964][ T1635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.829579][ T1635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.830558][ T36] audit: type=1400 audit(1769779385.240:1532): avc: denied { setopt } for pid=1637 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.865918][ T1644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 74.932551][ T696] usb 2-1: USB disconnect, device number 33 [ 75.000228][ T36] audit: type=1400 audit(1769779385.400:1533): avc: denied { mounton } for pid=1660 comm="syz.3.432" path="/103/file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.359257][ T696] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 75.511094][ T696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.525154][ T696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.535156][ T696] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.550718][ T696] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.560279][ T696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.568974][ T36] audit: type=1400 audit(1769779385.970:1534): avc: denied { bind } for pid=1667 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.588653][ T696] usb 4-1: config 0 descriptor?? [ 75.597304][ T36] audit: type=1400 audit(1769779385.970:1535): avc: denied { name_bind } for pid=1667 comm="syz.1.435" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 75.618667][ T36] audit: type=1400 audit(1769779385.970:1536): avc: denied { node_bind } for pid=1667 comm="syz.1.435" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 75.639713][ T36] audit: type=1400 audit(1769779385.990:1537): avc: denied { accept } for pid=1667 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.659350][ T36] audit: type=1400 audit(1769779386.020:1538): avc: denied { mounton } for pid=1669 comm="syz.1.436" path="/122/file0" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 76.208616][ T1661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.217211][ T1661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.226996][ T696] usbhid 4-1:0.0: can't add hid device: -71 [ 76.233309][ T696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 76.242164][ T696] usb 4-1: USB disconnect, device number 26 [ 76.389255][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 76.540343][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.552832][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.561957][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.569994][ T45] usb 2-1: Product: syz [ 76.574190][ T45] usb 2-1: Manufacturer: syz [ 76.578811][ T45] usb 2-1: SerialNumber: syz [ 76.848428][ T1677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 76.876226][ T331] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 76.886654][ T331] asix 5-1:2.88: probe with driver asix failed with error -71 [ 76.898280][ T331] usb 5-1: USB disconnect, device number 27 [ 76.907053][ T1681] netlink: 'syz.4.440': attribute type 4 has an invalid length. [ 77.189865][ T45] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 77.195929][ T45] cdc_ncm 2-1:1.0: bind() failure [ 77.201970][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 77.208758][ T45] cdc_ncm 2-1:1.1: bind() failure [ 77.588268][ T1689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.596899][ T1689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.679241][ T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 77.830208][ T45] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.841138][ T45] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.854037][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.860790][ T45] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 77.869857][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.878510][ T45] usb 5-1: config 0 descriptor?? [ 77.919237][ T331] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 78.069228][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 78.074813][ T331] usb 4-1: too many configurations: 24, using maximum allowed: 8 [ 78.089271][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.098356][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.106387][ T331] usb 4-1: Product: syz [ 78.110694][ T331] usb 4-1: Manufacturer: syz [ 78.115527][ T331] usb 4-1: SerialNumber: syz [ 78.124150][ T1700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.124305][ T331] r8152-cfgselector 4-1: Unknown version 0x0000 [ 78.134447][ T1700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.139819][ T331] r8152-cfgselector 4-1: config 0 descriptor?? [ 78.159742][ T1703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.168385][ T1703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.286453][ T45] betop 0003:8380:1850.000E: item fetching failed at offset 0/2 [ 78.294330][ T45] betop 0003:8380:1850.000E: parse failed [ 78.300159][ T45] betop 0003:8380:1850.000E: probe with driver betop failed with error -22 [ 78.359930][ T331] r8152-cfgselector 4-1: Unknown version 0x0000 [ 78.366445][ T331] r8152-cfgselector 4-1: bad CDC descriptors [ 78.379420][ T331] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 78.486555][ T45] usb 5-1: USB disconnect, device number 28 [ 78.700795][ T1717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.709398][ T1717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.717550][ T1716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.725963][ T331] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 78.726348][ T1716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.755347][ T1721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.764108][ T1721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.786263][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 78.786292][ T36] audit: type=1400 audit(1769779389.190:1546): avc: denied { ioctl } for pid=1720 comm="syz.2.454" path="socket:[14116]" dev="sockfs" ino=14116 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.836640][ T1722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 78.846438][ T36] audit: type=1400 audit(1769779389.250:1547): avc: denied { write } for pid=1720 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.889232][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 78.895321][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.906232][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.916002][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.925388][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.934188][ T331] usb 4-1: config 0 descriptor?? [ 78.940149][ T331] hub 4-1:0.0: USB hub found [ 79.129265][ T374] usb 3-1: device descriptor read/64, error -110 [ 79.140227][ T377] usb 2-1: USB disconnect, device number 34 [ 79.143600][ T331] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 79.166273][ T36] audit: type=1400 audit(1769779389.570:1548): avc: denied { getopt } for pid=1729 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.185756][ T36] audit: type=1400 audit(1769779389.570:1549): avc: denied { listen } for pid=1729 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.187111][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 79.205409][ T36] audit: type=1400 audit(1769779389.570:1550): avc: denied { accept } for pid=1729 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.211339][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 79.369322][ T374] usb 3-1: device descriptor read/64, error -32 [ 79.398790][ T1737] overlayfs: failed to resolve './file1': -2 [ 79.409699][ T331] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 79.485116][ T1741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.493695][ T1741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.560003][ T331] usb 4-1: device firmware changed [ 79.565314][ T331] usb 4-1: USB disconnect, device number 28 [ 79.571891][ T1484] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 79.609257][ T374] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 79.730260][ T1484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.741273][ T1484] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.750488][ T374] usb 3-1: device descriptor read/64, error -32 [ 79.756788][ T1484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.765456][ T1484] usb 2-1: config 0 descriptor?? [ 79.880444][ T331] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 79.910249][ T36] audit: type=1400 audit(1769779390.320:1551): avc: denied { read write } for pid=1744 comm="syz.4.463" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.933653][ T36] audit: type=1400 audit(1769779390.320:1552): avc: denied { open } for pid=1744 comm="syz.4.463" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.973051][ T1484] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 79.982589][ T1484] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input14 [ 79.994080][ T374] usb 3-1: device descriptor read/64, error -32 [ 80.016071][ T1748] fuse: Unknown parameter '‚' [ 80.021692][ T1748] 9pnet_fd: Insufficient options for proto=fd [ 80.028855][ T36] audit: type=1400 audit(1769779390.430:1553): avc: denied { execute } for pid=1747 comm="syz.2.464" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.060739][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 80.069347][ T1484] keytouch 0003:0926:3333.000F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 80.085308][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.095723][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 80.104711][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 80.112507][ T331] usb 4-1: can't read configurations, error -61 [ 80.149253][ T377] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 80.163037][ T1756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.171764][ T1756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.179946][ T36] audit: type=1400 audit(1769779390.590:1554): avc: denied { ioctl } for pid=1734 comm="syz.1.458" path="socket:[14248]" dev="sockfs" ino=14248 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.259284][ T374] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 80.267112][ T331] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 80.289255][ T377] usb 5-1: device descriptor read/64, error -71 [ 80.289854][ T374] usb 3-1: device descriptor read/8, error -32 [ 80.327398][ T36] audit: type=1400 audit(1769779390.730:1555): avc: denied { read } for pid=1757 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.429237][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 80.435234][ T374] usb 3-1: device descriptor read/8, error -32 [ 80.442387][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.450279][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 80.459064][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 80.466879][ T331] usb 4-1: can't read configurations, error -61 [ 80.473519][ T331] usb usb4-port1: attempt power cycle [ 80.514111][ T696] usb 2-1: USB disconnect, device number 35 [ 80.539273][ T377] usb 5-1: device descriptor read/64, error -71 [ 80.549329][ T374] raw-gadget.2 gadget.2: failed to queue suspend event [ 80.556451][ T374] raw-gadget.2 gadget.2: failed to queue reset event Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK [ 80.631501][ T374] raw-gadget.2 gadget.2: failed to queue resume event Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 80.689254][ T374] usb 3-1: reset high-speed USB device number 29 using dummy_hcd Stopping network[ 80.719759][ C1] raw-gadget.2 gadget.2: ignoring, device is not running : [ 80.727462][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 80.734762][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 80.741994][ T374] usb 3-1: device descriptor read/8, error -32 [ 80.799252][ T377] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 80.809273][ T331] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 80.830964][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 80.837569][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.845710][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 OK [ 80.854595][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 Stopping iptable[ 80.867836][ T331] usb 4-1: can't read configurations, error -61 s: [ 80.875295][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 80.882586][ C1] raw-gadget.2 gadget.2: ignoring, device is not running OK [ 80.889931][ C1] raw-gadget.2 gadget.2: ignoring, device is not running Stopping system [ 80.897403][ T374] usb 3-1: device descriptor read/8, error -32 message bus: [ 80.939238][ T377] usb 5-1: device descriptor read/64, error -71 done [ 81.009262][ T374] raw-gadget.2 gadget.2: failed to queue suspend event [ 81.016869][ T1789] 9pnet: p9_errstr2errno: server reported unknown error [ 81.029539][ T435] usb 3-1: USB disconnect, device number 29 [ 81.035542][ T331] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 81.073180][ T435] raw-gadget.2 gadget.2: failed to queue reset event [ 81.089894][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 81.096679][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short Stopping klogd: [ 81.119242][ T331] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 81.128036][ T331] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 81.135695][ T331] usb 4-1: can't read configurations, error -61 [ 81.142203][ T331] usb usb4-port1: unable to enumerate USB device OK [ 81.159318][ T435] raw-gadget.2 gadget.2: failed to queue resume event Stopping acpid: [ 81.209322][ T377] usb 5-1: device descriptor read/64, error -71 [ 81.229272][ T435] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 81.237673][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.247857][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.255219][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.262425][ T435] raw-gadget.2 gadget.2: failed to queue reset event [ 81.319417][ T377] usb usb5-port1: attempt power cycle [ 81.339306][ T435] raw-gadget.2 gadget.2: failed to queue resume event [ 81.399421][ T435] usb 3-1: device descriptor read/64, error -32 [ 81.509394][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.516649][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.523910][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.530972][ T435] raw-gadget.2 gadget.2: failed to queue reset event [ 81.609305][ T435] raw-gadget.2 gadget.2: failed to queue resume event [ 81.659243][ T377] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 81.669266][ T435] usb 3-1: device descriptor read/64, error -32 [ 81.700208][ T377] usb 5-1: device descriptor read/8, error -71 [ 81.711367][ T1819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.719836][ T1819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.728917][ T1819] usb usb7: selecting invalid altsetting 7 [ 81.779283][ T435] raw-gadget.2 gadget.2: failed to queue suspend event [ 81.786299][ T435] raw-gadget.2 gadget.2: failed to queue reset event [ 81.830851][ T377] usb 5-1: device descriptor read/8, error -71 [ 81.859266][ T435] raw-gadget.2 gadget.2: failed to queue resume event [ 81.919324][ T435] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 81.927194][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.934595][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.941909][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 81.948968][ T435] raw-gadget.2 gadget.2: failed to queue reset event [ 82.019290][ T435] raw-gadget.2 gadget.2: failed to queue resume event [ 82.069263][ T377] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 82.079232][ T435] usb 3-1: device descriptor read/64, error -32 [ 82.090247][ T377] usb 5-1: device descriptor read/8, error -71 [ 82.189429][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 82.196702][ C1] raw-gadget.2 gadget.2: ignoring, device is not running OK [ 82.205384][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 82.212974][ T435] raw-gadget.2 gadget.2: failed to queue reset event [ 82.220703][ T377] usb 5-1: device descriptor read/8, error -71 Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 82.251069][ T1836] tmpfs: Invalid uid '0x00000000ffffffff' [ 82.278849][ T1840] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.299885][ T435] raw-gadget.2 gadget.2: failed to queue resume event [ 82.329446][ T377] usb usb5-port1: unable to enumerate USB device [ 82.359275][ T435] usb 3-1: device descriptor read/64, error -32 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: can't remount devtmpfs read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.71 closed by remote host. [ 82.493857][ T435] raw-gadget.2 gadget.2: failed to queue suspend event Sent SIGTERM to all processes [ 82.520974][ T435] usb usb3-port1: attempt power cycle [ 82.526853][ T435] raw-gadget.2 gadget.2: failed to queue disconnect event [ 82.534631][ T1596] raw-gadget.2 gadget.2: failed to queue disconnect event [ 82.659376][ T979] bridge_slave_1: left allmulticast mode [ 82.665050][ T979] bridge_slave_1: left promiscuous mode [ 82.670796][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.678158][ T979] bridge_slave_0: left allmulticast mode [ 82.683877][ T979] bridge_slave_0: left promiscuous mode [ 82.689546][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.921855][ T979] veth1_macvtap: left promiscuous mode [ 82.927350][ T979] veth0_vlan: left promiscuous mode [ 83.340226][ T979] bridge_slave_1: left allmulticast mode [ 83.345899][ T979] bridge_slave_1: left promiscuous mode [ 83.351547][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.358905][ T979] bridge_slave_0: left allmulticast mode [ 83.364661][ T979] bridge_slave_0: left promiscuous mode [ 83.370307][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.377901][ T979] bridge_slave_1: left allmulticast mode [ 83.383584][ T979] bridge_slave_1: left promiscuous mode [ 83.389159][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.396805][ T979] bridge_slave_0: left allmulticast mode [ 83.402609][ T979] bridge_slave_0: left promiscuous mode [ 83.408207][ T979] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 83.602021][ T979] veth1_macvtap: left promiscuous mode [ 83.607701][ T979] veth1_macvtap: left promiscuous mode [ 83.613275][ T979] veth0_vlan: left promiscuous mode [ 83.940719][ T979] ------------[ cut here ]------------ [ 83.946207][ T979] WARNING: CPU: 0 PID: 979 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 83.956261][ T979] Modules linked in: [ 83.960191][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/u8:31 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 83.971976][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.982059][ T979] Workqueue: netns cleanup_net [ 83.986826][ T979] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 83.992825][ T979] Code: e8 11 3e db fc 4b 83 3c 3e 00 75 19 e8 45 77 83 fc 49 81 ff f8 07 00 00 74 1b e8 37 77 83 fc 49 83 c7 08 eb c9 e8 2c 77 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 84.012466][ T979] RSP: 0018:ffffc900011afb90 EFLAGS: 00010293 [ 84.018529][ T979] RAX: ffffffff850425e4 RBX: ffff88811ff36a80 RCX: ffff888115ad1300 [ 84.026524][ T979] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104ba40b8 [ 84.034513][ T979] RBP: ffffc900011afbb0 R08: 0000000000000003 R09: 0000000000000004 [ 84.042502][ T979] R10: dffffc0000000000 R11: fffff52000235f04 R12: dffffc0000000000 [ 84.050528][ T979] R13: dffffc0000000000 R14: ffff888104ba4000 R15: 00000000000000b8 [ 84.058493][ T979] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 84.067440][ T979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.074078][ T979] CR2: 00007f60f6482e9c CR3: 00000000074a8000 CR4: 00000000003526b0 [ 84.082078][ T979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.090062][ T979] DR3: 000000000000d046 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 84.098025][ T979] Call Trace: [ 84.101317][ T979] [ 84.104245][ T979] cleanup_net+0x6bd/0xc90 [ 84.108644][ T979] ? __cfi_cleanup_net+0x10/0x10 [ 84.113583][ T979] ? kick_pool+0xb9/0x550 [ 84.117902][ T979] process_scheduled_works+0x7d4/0x1020 [ 84.123472][ T979] worker_thread+0xc70/0x10b0 [ 84.128140][ T979] kthread+0x2c9/0x370 [ 84.132223][ T979] ? __cfi_worker_thread+0x10/0x10 [ 84.137332][ T979] ? __cfi_kthread+0x10/0x10 [ 84.141929][ T979] ret_from_fork+0x67/0xa0 [ 84.146333][ T979] ? __cfi_kthread+0x10/0x10 [ 84.150925][ T979] ret_from_fork_asm+0x1a/0x30 [ 84.155684][ T979] [ 84.158682][ T979] ---[ end trace 0000000000000000 ]--- [ 84.164398][ T979] ------------[ cut here ]------------ [ 84.169870][ T979] WARNING: CPU: 1 PID: 979 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 84.179945][ T979] Modules linked in: [ 84.183822][ T979] CPU: 1 UID: 0 PID: 979 Comm: kworker/u8:31 Tainted: G W syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 84.197011][ T979] Tainted: [W]=WARN [ 84.200823][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.210888][ T979] Workqueue: netns cleanup_net [ 84.215666][ T979] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 84.221805][ T979] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 76 83 fc 49 81 ff f8 07 00 00 74 1b e8 e2 76 83 fc 49 83 c7 08 eb c5 e8 d7 76 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 76 83 fc 5b 41 5c 41 5e 41 [ 84.241478][ T979] RSP: 0018:ffffc900011afb90 EFLAGS: 00010293 [ 84.247561][ T979] RAX: ffffffff85042639 RBX: ffff888104ba4800 RCX: ffff888115ad1300 [ 84.255580][ T979] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104ba4820 [ 84.263589][ T979] RBP: ffffc900011afbb0 R08: 0000000000000003 R09: 0000000000000004 [ 84.271582][ T979] R10: dffffc0000000000 R11: fffff52000235f04 R12: dffffc0000000000 [ 84.279610][ T979] R13: dffffc0000000000 R14: ffff888104ba4000 R15: 0000000000000020 [ 84.287586][ T979] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 84.296537][ T979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.303142][ T979] CR2: 00007fa63e1de4c0 CR3: 000000010b36e000 CR4: 00000000003526b0 [ 84.311135][ T979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.319098][ T979] DR3: 000000000000d046 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 84.327086][ T979] Call Trace: [ 84.330467][ T979] [ 84.333417][ T979] cleanup_net+0x6bd/0xc90 [ 84.337839][ T979] ? __cfi_cleanup_net+0x10/0x10 [ 84.342798][ T979] ? kick_pool+0xb9/0x550 [ 84.347136][ T979] process_scheduled_works+0x7d4/0x1020 [ 84.352789][ T979] worker_thread+0xc70/0x10b0 [ 84.357479][ T979] kthread+0x2c9/0x370 [ 84.361558][ T979] ? __cfi_worker_thread+0x10/0x10 [ 84.366671][ T979] ? __cfi_kthread+0x10/0x10 [ 84.371278][ T979] ret_from_fork+0x67/0xa0 [ 84.375714][ T979] ? __cfi_kthread+0x10/0x10 [ 84.380318][ T979] ret_from_fork_asm+0x1a/0x30 [ 84.385081][ T979] [ 84.388077][ T979] ---[ end trace 0000000000000000 ]--- [ 84.400117][ T979] ------------[ cut here ]------------ [ 84.405585][ T979] WARNING: CPU: 0 PID: 979 at net/xfrm/xfrm_state.c:3215 xfrm_state_fini+0x2be/0x310 [ 84.415153][ T979] Modules linked in: [ 84.419046][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/u8:31 Tainted: G W syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 84.432276][ T979] Tainted: [W]=WARN [ 84.436065][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.446147][ T979] Workqueue: netns cleanup_net [ 84.450948][ T979] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 84.456490][ T979] Code: 3c 20 00 74 08 48 89 df e8 4f 07 f6 fc 48 8b 3b e8 e7 45 e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b3 b7 00 cc e8 72 40 9e fc <0f> 0b e9 b0 fd ff ff e8 66 40 9e fc 0f 0b e9 18 fe ff ff e8 5a 40 [ 84.476492][ T979] RSP: 0018:ffffc900011afb70 EFLAGS: 00010293 [ 84.482587][ T979] RAX: ffffffff84e95c9e RBX: ffff88811ff36a80 RCX: ffff888115ad1300 [ 84.490637][ T979] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888115ad1300 [ 84.498604][ T979] RBP: ffffc900011afb98 R08: ffffffff87d350c7 R09: 1ffffffff0fa6a18 [ 84.506610][ T979] R10: dffffc0000000000 R11: fffffbfff0fa6a19 R12: 1ffffffff0fa6768 [ 84.514612][ T979] R13: dffffc0000000000 R14: ffff88811ff37680 R15: dffffc0000000000 [ 84.522615][ T979] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 84.531570][ T979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.538162][ T979] CR2: 00007f60f6482e9c CR3: 00000000074a8000 CR4: 00000000003526b0 [ 84.546173][ T979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.554175][ T979] DR3: 000000000000d046 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 84.562203][ T979] Call Trace: [ 84.562980][ T1846] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 84.565485][ T979] [ 84.565495][ T979] xfrm_net_exit+0x31/0x80 [ 84.572361][ T1846] ACPI: PM: Preparing to enter system sleep state S5 [ 84.574419][ T979] cleanup_net+0x6bd/0xc90 [ 84.589935][ T979] ? __cfi_cleanup_net+0x10/0x10 [ 84.594872][ T979] ? kick_pool+0xb9/0x550 [ 84.599223][ T979] process_scheduled_works+0x7d4/0x1020 [ 84.604767][ T979] worker_thread+0xc70/0x10b0 [ 84.609465][ T979] kthread+0x2c9/0x370 [ 84.613530][ T979] ? __cfi_worker_thread+0x10/0x10 [ 84.618629][ T979] ? __cfi_kthread+0x10/0x10 [ 84.623237][ T979] ret_from_fork+0x67/0xa0 [ 84.627652][ T979] ? __cfi_kthread+0x10/0x10 [ 84.632265][ T979] ret_from_fork_asm+0x1a/0x30 [ 84.637032][ T979] [ 84.640060][ T979] ---[ end trace 0000000000000000 ]--- [ 84.645710][ T979] ------------[ cut here ]------------ [ 84.645719][ T1846] kvm: exiting hardware virtualization [ 84.651193][ T1846] reboot: Power down [ 84.660572][ T979] WARNING: CPU: 1 PID: 979 at net/xfrm/xfrm_state.c:3222 xfrm_state_fini+0x2e2/0x310 [ 84.660604][ T979] Modules linked in: [ 84.660620][ T979] CPU: 1 UID: 0 PID: 979 Comm: kworker/u8:31 Tainted: G W syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 84.687197][ T979] Tainted: [W]=WARN [ 84.687207][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 serialport: VM disconnected.