last executing test programs: 3m42.695442349s ago: executing program 3 (id=549): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140)=r2, 0x12) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000003c0)) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f0000000fc0)={0x2020}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffff32, 0x101200) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) umount2(&(0x7f00000001c0)='./file0\x00', 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, r10, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3m42.695113519s ago: executing program 3 (id=550): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) r1 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640), 0x0}, 0x0) 3m42.085331939s ago: executing program 3 (id=553): socket(0x22, 0x5, 0x3ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x38, r3, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x804) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20000004) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000006900150000000008ffffffff0a08"], 0x18}], 0x1}, 0x8000) 3m42.085072949s ago: executing program 3 (id=554): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x3f, 0x0) (async) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r2, &(0x7f0000000140)="1a09d21635124c1f706c117b105f", 0xe, 0x4000, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x4, 0x3, 0x0, 0x1}}, 0x80) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="7636d6f3d5b5cf5972286be21402a777f0deede31dc5b596fe757a04964c6cfde8df29fe534e35fbb62bc771c9ce358bb5078d0d9d90c4f011af3de701111a7dff25b8b196ed13b51c6af0b04f5edc020f14c477df352e94524ca413271c8b850fcdf980d1fdfb5a57752143", 0x6c}, {&(0x7f0000000140)="ac0bd28d88e9e4d7ab99fd499084f264b0916a776ca357e6915a9b88a44c81a7ea60991fddc808c87ac77cad09755940e51a5bc3e1db4ca00c36", 0x3a}, {&(0x7f0000000180)="91b41176af4b090f71494c78d11e029fe63358a93c9d2aba3ee31795e703838973ea51eeb9dfd993bdb35acef9dcbda97bd0e100f150751da2a0a46f1f76f5bee037a86996f1579b7020d77f86598f45a0aa1a90806e7e14b9f28ac913a4e630f9c761c95cbf5c76f8ba51566db3e95bd3c3b1b30285c429c26e6b92e5baeced1c06575ddf74523ea7809d531a17fbf149bd5bfd12a7f42803c178d298590faf3d5f51eca51457d87b93ed38e032cab42a", 0xb1}, {&(0x7f0000000240)="937d63196feaca404c6f4a17c33a", 0xe}, {&(0x7f0000000280)="c252a06e55bc8d65608553", 0xb}, {&(0x7f00000002c0)="45e9394aa820fe59cd1271dcffd80b7610095885447b", 0x16}], 0x6, 0x1b) 3m42.062772393s ago: executing program 3 (id=556): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_TDX_CAPABILITIES(r0, 0xc008aeba, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x4, 0x0, [{}, {}, {}, {}]}}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3m42.00937817s ago: executing program 3 (id=558): syz_open_dev$loop(&(0x7f00000001c0), 0x71, 0x2000) socket$inet(0x2, 0x6000000000000001, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 3m26.966905539s ago: executing program 32 (id=558): syz_open_dev$loop(&(0x7f00000001c0), 0x71, 0x2000) socket$inet(0x2, 0x6000000000000001, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) 2m36.941302059s ago: executing program 1 (id=867): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f00000001c0)={r4, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x880008, 0x4) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000c80)={0x14, &(0x7f0000000f80)=ANY=[], 0x0}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x10, 0x52, "458e5d719936885a9fe980ad677dc16c6ede855c8e9cc07d67262746e79c226354fb26f3f335c1e1cd746c356060a7ef79d6b5be4af6f966c1f6e4463e74b6e1252a17ce2facc744045c49402fc3f15af8e0"}, 0x0, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000e00)={0x20, 0x82, 0x3, "f5eb7e"}, &(0x7f0000000e40)={0x20, 0x83, 0x3, "cdb924"}, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x4, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, &(0x7f0000000100)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="204405"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ext4\x00', 0x800000, &(0x7f0000000180)='check=relaxed') syz_usb_control_io(r7, &(0x7f0000001540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xdf9c) 2m34.95826294s ago: executing program 1 (id=874): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='u\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200026bd7000fcdbdf250300000008000200020000000800010002000000080002000200000008000200020000000800020002000000080002000200000008000200020000000800020002000020"], 0x54}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008004) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x23e, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_connect(0x5, 0x2fd, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x63, 0x69, 0xe8, 0xff, 0x572, 0x58a1, 0xce86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2eb, 0x2, 0x5, 0xad, 0x0, 0x1, [{{0x9, 0x4, 0x47, 0x3, 0xc, 0xf4, 0xb2, 0x24, 0x0, [@generic={0x30, 0x3, "3ad91f89f3e22c10adf9f5ec0ff4283edf425dc1a6e6199c7545e3c432fe9d843d9b3afd542946e366e05bec3b2e"}, @generic={0x8, 0x5, "5ad4de62b88e"}], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x7, 0x2, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x5, 0xf5, 0x9, [@generic={0xa5, 0x21, "5b2a5e6a8f80d6fd8621f5623dd0765126dfe5a84068fb09a76d4bb8b694ae058719d7da054e13030dc8dc5c04a584c1dfc60e1b6b1a3840c74e631afa79bf3a6c4fc0b06abef9b4db3069ea6a19ef1e2c93d70739d99b80b552b47ad628d7b6dcd650fc2ed0674960b4874a68401764db4f5c5edd255f01e0121f740579fc32e94307ac0313dfe76262f284ca7f40ebf41810b01f3c7fb00d21fbe12c88ed095b7e00"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xd6, 0x0, [@generic={0x2f, 0x0, "1ac2cade57beef0ed7e6f4425f951102a50704821d66e86b92d0808d4b7af675d44d85870ff94825787c3127b7"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x3, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7f}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x65, 0x0, 0x6}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x4, 0x8, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x4, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x4, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xfff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}, @generic={0xfe, 0x2, "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"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x1, 0xd1, 0x3}}]}}, {{0x9, 0x4, 0x53, 0x4, 0x3, 0x47, 0xc, 0x9c, 0x4, [], [{{0x9, 0x5, 0xb, 0x23, 0x8, 0x5, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xf, 0x74, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x40, 0xaf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x3}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x9, 0xe, 0x1, 0x20, 0x6}, 0x2e, &(0x7f0000000740)={0x5, 0xf, 0x2e, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x3, 0xf00, 0x4, [0x3f, 0x0, 0x3f00, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x81, 0x7fff}]}, 0x1, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mknod$loop(0x0, 0xfff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c4}, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r6 = timerfd_create(0x1, 0x80800) timerfd_gettime(r6, &(0x7f0000000000)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r7, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000800)={&(0x7f00000008c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989149d2f, 0xdcf, 0x9, 0x10000, 0x800, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x100000000, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x3ff, 0x80000001, 0x0, 0x8001ffffffffffe, 0x9e9, 0x0, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 2m33.437011964s ago: executing program 1 (id=878): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') utimensat(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) r3 = syz_usb_connect(0x5, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x7a, 0x55, 0x1d, 0x10, 0xb48, 0x3009, 0xf1b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x7, 0xf5, 0x0, 0xd2, [{{0x9, 0x4, 0xb0, 0x1, 0x3, 0x35, 0x74, 0x33, 0x2a, [@hid_hid={0x9, 0x21, 0x8001, 0x0, 0x1, {0x22, 0x5c4}}], [{{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x9, 0x7, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x7, 0xc3, 0xef, [@generic={0xd, 0xd, "e8127fbc679a03bf630ddf"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb4, 0x800}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x6, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf, 0x4}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x3, 0x3, 0x3, 0x10, 0x2}, 0x25, &(0x7f0000000300)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x7fffffc, 0xf, 0x555d, [0x3e40, 0xff0000, 0xf0, 0xffff3f, 0xffc0cf]}]}, 0x7, [{0x4e, &(0x7f00000003c0)=@string={0x4e, 0x3, "6fb55e59a583db1641b4710c50e08f27168fde673ed7f108ecf947b321a7b826462560601104c423953c864ed3bddb9a5ddf67a4152162b1be7d01abd8e11d157eaeb2ebc0dfecebc574c6b0"}}, {0xe7, &(0x7f0000000440)=@string={0xe7, 0x3, "c4538d509265e4a6b9c0f85e2378e5062e4fe96470e5328549b9457e7eba3bd41a5a475147796ab9f246903439ca0b21c4e2fcdcb60ca1b2f136ae8a9122c111208e77120e61b5f5676432eaddf0d355107fbc6100d335aca768dfc237ca25c5cdf33c1e8485f6faa744971be3ecb84480411f6396b0473940d829d426bcd31ae60ba944b9c2d255ad4da1a7b0bad9e87febd05a1799fa51c06621e316fd4b3d27e78f7586a6925bcda01b586677f0f7e076eedaa344dd6feb5ef3259514a331caf875c4fe970ad822109ffe8104e931fd46cd9704396f6ef670d82f422a89f9613e18294f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2c74}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x240a}}, {0xfd, &(0x7f00000006c0)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x7, @private1, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)}, {0x0}], 0x2, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x4048004) (async) pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}], 0x10000000000000a3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbf) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 2m30.424114731s ago: executing program 1 (id=887): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20041, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@nested_amd_invlpga={0x17d, 0x20, {0x7000, 0xf6c7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc0a, 0x6, 0x87b, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x69, 0x0, 0x6, 0x2}}, @nested_load_syzos={0x136, 0x130, {0x2, 0x0, [@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1, 0x1, 0x1}}, @wr_crn={0x67, 0x20, {0x8, 0xc}}, @wrmsr={0x65, 0x20, {0xae5, 0xffffffff}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xb33}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4820, 0x1, 0x4, 0x9}}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x6}}]}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0xa4, {0x1, 0x1, [@code={0xa, 0x6c, {"460f23eb0f229c36430f01f38f89a0024d00663e42831ba666430fc77628b931020000b801000000ba000000000f303e6526262e0f78d4c744240006000000c74424020f000000c7442406000000000f011424420f00156136e5e9"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}]}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0xc6, {0x0, 0x2, [@cpuid={0x64, 0x18, {0xfdb, 0xf}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x7}}, @code={0xa, 0x6e, {"43a900000000b9800000c00f3235004000000f30470f015f36d268fcf3450f09b8010000000f01c10f1ca5309000000f20d835080000000f22d866baa000b023eec744240000000000c744240200780000c7442406000000000f011424"}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x7cc0}}, @out_dx={0x6a, 0x28, {0x294e, 0x1, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x99, 0x1, 0x5e, 0x3}}, @out_dx={0x6a, 0x28, {0x8949, 0x3, 0xfffffffffffffff7}}, @uexit={0x0, 0x18, 0xffff}], 0x44a}) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@nested_amd_invlpga={0x17d, 0x20, {0x7000, 0xf6c7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc0a, 0x6, 0x87b, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x69, 0x0, 0x6, 0x2}}, @nested_load_syzos={0x136, 0x130, {0x2, 0x0, [@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1, 0x1, 0x1}}, @wr_crn={0x67, 0x20, {0x8, 0xc}}, @wrmsr={0x65, 0x20, {0xae5, 0xffffffff}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xb33}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4820, 0x1, 0x4, 0x9}}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x6}}]}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0xa4, {0x1, 0x1, [@code={0xa, 0x6c, {"460f23eb0f229c36430f01f38f89a0024d00663e42831ba666430fc77628b931020000b801000000ba000000000f303e6526262e0f78d4c744240006000000c74424020f000000c7442406000000000f011424420f00156136e5e9"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}]}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0xc6, {0x0, 0x2, [@cpuid={0x64, 0x18, {0xfdb, 0xf}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x7}}, @code={0xa, 0x6e, {"43a900000000b9800000c00f3235004000000f30470f015f36d268fcf3450f09b8010000000f01c10f1ca5309000000f20d835080000000f22d866baa000b023eec744240000000000c744240200780000c7442406000000000f011424"}}]}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x7cc0}}, @out_dx={0x6a, 0x28, {0x294e, 0x1, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x99, 0x1, 0x5e, 0x3}}, @out_dx={0x6a, 0x28, {0x8949, 0x3, 0xfffffffffffffff7}}, @uexit={0x0, 0x18, 0xffff}], 0x44a}) syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000600)={0x4, 0x0, [{0x848, 0x0, 0x5}, {0x86d, 0x0, 0x9}, {0x375, 0x0, 0xc}, {0x989, 0x0, 0xfffffffffffffff0}]}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x36, &(0x7f0000000300)=ANY=[], 0x0) (async) syz_usb_connect(0x6, 0x36, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000100)=0xffffcbfa) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f00000026c0)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000002680)={0x9, 0x200, 0x1}}) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000004a00010200000000000000000a0000037078"], 0x14}, 0x1, 0x0, 0x0, 0x24048090}, 0x4000080) 2m29.69044243s ago: executing program 1 (id=890): lsm_list_modules(&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=0x20, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2m28.492019065s ago: executing program 1 (id=897): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) read$FUSE(r1, &(0x7f0000005dc0)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000001c0)={0x1, 0x0, 0x81, 0x0, 0x1ff, 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b00000065ffff"], 0x41) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0xf4b3, 0x3, 0x0, 0x0, @adapter={0x4, 0x5, 0xfffffffffffffff7, 0x3, 0x10000}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x60, 0x8, 0x16, {0x16, 0x21, "ee112debb0bbfa2704c282c35f5a8b4848b455b6"}}, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xab}, 0x0, 0x0, 0x0}) syz_usb_ep_write(r7, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) 2m13.224758548s ago: executing program 33 (id=897): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) read$FUSE(r1, &(0x7f0000005dc0)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000001c0)={0x1, 0x0, 0x81, 0x0, 0x1ff, 0x20}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b00000065ffff"], 0x41) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0xf4b3, 0x3, 0x0, 0x0, @adapter={0x4, 0x5, 0xfffffffffffffff7, 0x3, 0x10000}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x60, 0x8, 0x16, {0x16, 0x21, "ee112debb0bbfa2704c282c35f5a8b4848b455b6"}}, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xab}, 0x0, 0x0, 0x0}) syz_usb_ep_write(r7, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) 6.303880964s ago: executing program 2 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1d, 0x3, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x325, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1100, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x1}}}}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000100)={0x897, 0x0, [{0x0, 0x8, 0x6, 0x1, 0x6, 0x9ecb, 0x8}]}) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) 5.109357672s ago: executing program 2 (id=1625): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x7, "a7e65d02"}, @global=@item_4={0x3, 0x1, 0x3, "0600"}, @local=@item_012={0x2, 0x2, 0x8, "77a1"}]}}, 0x0}, 0x0) 4.277144434s ago: executing program 4 (id=1632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x1, 0xe, 0x7, 0x100, 0x3}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000340)={0x20, 0x31, 0xea, {0xea, 0x21, "9dc3a9d548e0e2c4e9d98d525993912eb840112ed3e0e5637894f9573342db50bb34030050d6e0070e672f2277603b0717e1a90d626d7c204105aff5ecb0557527693aa072f88dddace04288dc6f9e475ce937936df0953017451ac047aa8aa0708ed1c7920530ab746a4a1b5837dd472b5260c4145e2926620010e07c00cbbf95724ea498d269476971bfe5f4ae21880e29f3aa42e57363a0416491b1e4fb06d32ea29eb01edec1ef071d0e86a0a06ca176f1ca7468b87525fffbaadfee5aaa6967c1333afbd2258d4ab929f978ee6cfd4e5ce7190e1d8fecf5d85235bbf4a7e3372309c18d3bc5"}}, &(0x7f0000000440)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "e5b6282ff536d193c66b0e199a1ec1ea859e2d3128c57bceb00f48202ad38fac0f78c58561f2d62c33f0501505530a17d78bfa4c64ddf30d0df6c9a36617b8fe0ef79be672dada61c687fe055f12c54ed35f2be58c190940b7f85e771b6e8832dff484569c5535ed9a46bca23d489d407f201ddf84452465fb385626986b5699e0f646700de3b30100c0d615bcd4ad38b085459b27d09505250435b67267bc5a715bcf0ba47d1b9d14dce291fd1bea6e743cfb412ac7a18fc893f9d7470e98d01e4a6efdc3eb7fe6d786db52b6d4a06ac9c91184cc927ccb76b7aa"}}, &(0x7f00000000c0)={0x0, 0x22, 0x17, {[@local=@item_4={0x3, 0x2, 0x7, "1ff4c146"}, @local=@item_4={0x3, 0x2, 0x7, "37cbd3b1"}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_4={0x3, 0x1, 0x4, "dcc86859"}, @local=@item_012={0x2, 0x2, 0x9, 'w>'}, @local=@item_012={0x1, 0x2, 0x3, 'x'}, @local=@item_012={0x1, 0x2, 0x4, '%'}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x42c}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000540)={0x0, 0x1b, 0xc8, "924700719e15cf5e2f952f90a231d2aed95df1b219054a5fb1eb20ef9f987431b17b730d338ae208cf3e45df4c0e74b89c26453432028246463a6568546db0e682394645f0132af188c2d385f85a0cbc98e478bd349225f9aa3ef10755425bbebafcce8b7e841782fb469cd12dd74711f463e591a6daf59d19ab21f7dc08127803d8e9cb38f712caf23c35f2a54749300ccdfce422031bd0c92f1c08aacd6ecba46e7d856f9bdfe9e387a44844d86b405262447a74b4d94c537b775028fd433ca74b1178fa216fea"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x24}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x1, 0xbc, "d5680e09dbf9ed52b069d21ab6d4e19571dcd1b79edc6f5bc5cecee41ddf0f6374d75dc311750cf2e5fb6252e8c9959565c193d7c8809b3ef43ad79ed2061f7435e83aa87abccdfa3d3be4c026fb14031702d8edae8f0f1824554e6ffa11e00e2e510a2d1f6d9f9e28404e75eafbe0bd61a9ee9b3362343d1e8e7c328a59e693c50b70c6787a299b1d2a9d2230ca7c1f43aa48a13539a22ec7df828d7e44ed98b71b4a0ade5c8dac1c347a97ccdf2a538c13dd524d63e184a8550469"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xa}}) 3.576575403s ago: executing program 2 (id=1633): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x18, 0x54, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041dc3208570b8d2a74330102030109021b00010000000009046003010301820009058803"], 0x0) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x9, 0x2007, 0x8, 0x1, 0xfffffff7, &(0x7f0000000000)='k'}) (async) lsm_list_modules(0x0, &(0x7f0000000040)=0xfffffffffffffc4b, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000480)=0xfffffbff, 0x4) (async, rerun: 32) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.551724938s ago: executing program 2 (id=1634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1b) 3.497347406s ago: executing program 2 (id=1635): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x1ffe, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) sigaltstack(&(0x7f0000001ac0)={0x0, 0x80000002}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) 3.332746683s ago: executing program 0 (id=1636): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x800, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xd}]}, 0x24}}, 0x44000) ioctl$SIOCSIFMTU(r0, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) 3.322591191s ago: executing program 0 (id=1637): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, 0x0, 0x24c02, 0x104) 2.745290994s ago: executing program 4 (id=1639): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4001, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYBLOB="74be1e8ed9f2930179795145d0885831fba22e569ef26734a0d3ed3e6a593610d70e1d3a8ec505daac74684ae9b5802fb9a5b679262d54df67ed66d934"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0x1, 0x0, @pic={0x2, 0x45, 0x6, 0x3, 0x7, 0x0, 0x6, 0x2, 0x81, 0xd, 0x9, 0x4, 0x40, 0x6f, 0xad, 0x3}}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x1}, 0x9}) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r5 = socket(0x1, 0x80802, 0x0) (async, rerun: 64) r6 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7, 0xffffff81, 0x4eae, 0xe, 0x8001, 0x3ff, 0xe663}, 0x1c) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1f4, r5, &(0x7f00000000c0)={0x10000001}) (async, rerun: 64) syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 64) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000000080)={0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 64) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) (async) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async, rerun: 32) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) bind$bt_hci(r12, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/233) 1.913975287s ago: executing program 4 (id=1642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900150000000000fcffffff0a00000000090002"], 0x1c}], 0x1}, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) 1.805070454s ago: executing program 4 (id=1643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc5) (async) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r2, &(0x7f000000ae00)=[{{&(0x7f0000001b00)=@caif, 0x80, 0x0}}], 0x1, 0x10) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro32=0x4406, 0x7, 0x2, 0x4}}, @code={0xa, 0x63, {"66baa10066b8370066ef66baf80cb85c05b286ef66bafc0ced66baf80cb85cce9780ef66bafc0c66b8ea9466efb99b0b00000f320fc7585adc6c2fef660fc7370f795b0266b823018ed8660fc7b005000000"}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x2c, 0x2, 0x7, 0x1}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x5d, {"66440f381781f6ffffffc40279224600b805000000b9ce0000000f01c1c441fa2ac866440f383732420f2266410fa9f30fc77100b9630a0000b80f000000ba000000000f300f79a28132637d"}}, @wr_crn={0x67, 0x20, {0x4, 0xfffffffffffffff8}}, @code={0xa, 0x76, {"66baf80cb81a0a1a8def66bafc0c66edc744240035010000c74424020b000000ff2c2426650f01c2400f01ca0f78a5997f9babb91f0b00000f32c422412d010f20e035002000000f22e0f30fc7b600000000c744240014010000c744240214890000ff2c24"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa5, 0x5, 0x2, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x46, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x92, 0x6, 0x1, 0x2}}, @nested_load_syzos={0x136, 0x78, {0x1, 0xffffffffffffff21, [@nested_load_syzos={0x136, 0x58, {0x3, 0xb, [@wrmsr={0x65, 0x20, {0xc0011031, 0x9}}, @nested_vmresume={0x130, 0x18, 0x2}]}}]}}, @code={0xa, 0x6b, {"b9ca0b00000f32b9800000c00f3235000400000f30c4a27d7934cd00200000c744240038000000c744240200700000ff2c240f060f01d166ba4300b000ee3ef30f09b93e090000b800200000ba000000000f3066b8d4000f00d0"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x8, 0xec95}}, @nested_load_code={0x12e, 0x62, {0x3, "66b8c3008ee0450f204067410fc7a90080000047cda72e0f01c567410f0866baf80cb8fc278883ef66bafc0cb8e2000000ef400f01f866ba4200b05cee440f20c0350d000000440f22c0"}}, @out_dx={0x6a, 0x28, {0x80aa, 0x6, 0xffffffffffffffff}}, @set_irq_handler={0xc8, 0x20, {0x83}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}], 0x46b}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.741138761s ago: executing program 4 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x22080) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x0, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x71, 0x5, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9f, 0x7, 0x6, 0x10, 0x9}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc, 0xe, 0xdfd9}]}, 0x3, [{0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "5109cc32ca29b856c0e8bab33a96b08e5d687087323418d00ce07f2d38152c7c1ade25c07e2d8dce2d50de7bdc550404df48e25963d3f1ac7588238cb459cde3622eabe3f2f6ad7ca08cafb5582a3e1e34e4d446f446a5b4c335bfec2c18b3fc624020434f95f33b538ce63cc319adeb5e0ec781b0c75d0dfc796b0a3ab3cf05bea59014e53572d1c7e6eb36aa4d164e6eaf426aedb62757bc90faff8c8e8fee1fc5a4599130b495309ceb6d124cf6a716dd01e4c492e660af56cc1f7157d3af78051b2b5ddf32"}}, {0x56, &(0x7f00000001c0)=@string={0x56, 0x3, "d29e3d53abe970423da97706c3ce2c7346a3e0f44bfa90459a6e7468e1041b1050415a9681c88fdde6eca51d2e97eb3c1e22c0f25d4614fe187ee78bd9fd86ac0a5a7267df599d69bbeab9abd6b064022900304c"}}, {0x12, &(0x7f0000000280)=@string={0x12, 0x3, "f8660c6307349a54ea54de47ae0e78d2"}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x28, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, 0x28}}, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x167002) 1.698926873s ago: executing program 0 (id=1645): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000040)) (async) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x7fffffff, 0x9, 0x5, [0x1, 0x2, 0x8, 0x8a, 0x7]}}) (async, rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000001980)=0x1) (async, rerun: 64) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) (async) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xc008) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000007140)='./binderfs/binder1\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x0, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x2, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x52, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x4, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x5, 0x2, 0x2, 0x9, 0x800004, 0x9, 0x8, 0x9, 0x6, 0x2b, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0x400ff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x55, 0xb, 0x4, 0x5, 0x1005, 0x4188, 0x1f0, 0xfffffffd, 0x2, 0x1a, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x9, 0xb1f, 0x1, 0x200, 0x2, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 1.68479174s ago: executing program 0 (id=1646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) 1.551681423s ago: executing program 0 (id=1647): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x40816) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000000)=[@request_death, @register_looper], 0x50, 0x0, &(0x7f0000000180)="db48cd0e4072624902cb7e537e2fd64478f18ada2b4a53082068cb20dfa8006a0a729b137ec1b8504925bb0056f719494a9385485bee634d993af6a49625d22ada74506a749f6c478d5bac82acf19f55"}) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000c00fe080000802dca8a9848a3c728f5c46b7b311338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade0000c58f98", 0x58}], 0x1}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x1}, 0x9}) 1.507294564s ago: executing program 0 (id=1648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x1, 0xe, 0x7, 0x100, 0x3}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000340)={0x20, 0x31, 0xea, {0xea, 0x21, "9dc3a9d548e0e2c4e9d98d525993912eb840112ed3e0e5637894f9573342db50bb34030050d6e0070e672f2277603b0717e1a90d626d7c204105aff5ecb0557527693aa072f88dddace04288dc6f9e475ce937936df0953017451ac047aa8aa0708ed1c7920530ab746a4a1b5837dd472b5260c4145e2926620010e07c00cbbf95724ea498d269476971bfe5f4ae21880e29f3aa42e57363a0416491b1e4fb06d32ea29eb01edec1ef071d0e86a0a06ca176f1ca7468b87525fffbaadfee5aaa6967c1333afbd2258d4ab929f978ee6cfd4e5ce7190e1d8fecf5d85235bbf4a7e3372309c18d3bc5"}}, &(0x7f0000000440)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "e5b6282ff536d193c66b0e199a1ec1ea859e2d3128c57bceb00f48202ad38fac0f78c58561f2d62c33f0501505530a17d78bfa4c64ddf30d0df6c9a36617b8fe0ef79be672dada61c687fe055f12c54ed35f2be58c190940b7f85e771b6e8832dff484569c5535ed9a46bca23d489d407f201ddf84452465fb385626986b5699e0f646700de3b30100c0d615bcd4ad38b085459b27d09505250435b67267bc5a715bcf0ba47d1b9d14dce291fd1bea6e743cfb412ac7a18fc893f9d7470e98d01e4a6efdc3eb7fe6d786db52b6d4a06ac9c91184cc927ccb76b7aa"}}, &(0x7f00000000c0)={0x0, 0x22, 0x17, {[@local=@item_4={0x3, 0x2, 0x7, "1ff4c146"}, @local=@item_4={0x3, 0x2, 0x7, "37cbd3b1"}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_4={0x3, 0x1, 0x4, "dcc86859"}, @local=@item_012={0x2, 0x2, 0x9, 'w>'}, @local=@item_012={0x1, 0x2, 0x3, 'x'}, @local=@item_012={0x1, 0x2, 0x4, '%'}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x42c}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000540)={0x0, 0x1b, 0xc8, "924700719e15cf5e2f952f90a231d2aed95df1b219054a5fb1eb20ef9f987431b17b730d338ae208cf3e45df4c0e74b89c26453432028246463a6568546db0e682394645f0132af188c2d385f85a0cbc98e478bd349225f9aa3ef10755425bbebafcce8b7e841782fb469cd12dd74711f463e591a6daf59d19ab21f7dc08127803d8e9cb38f712caf23c35f2a54749300ccdfce422031bd0c92f1c08aacd6ecba46e7d856f9bdfe9e387a44844d86b405262447a74b4d94c537b775028fd433ca74b1178fa216fea"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x24}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x1, 0xbc, "d5680e09dbf9ed52b069d21ab6d4e19571dcd1b79edc6f5bc5cecee41ddf0f6374d75dc311750cf2e5fb6252e8c9959565c193d7c8809b3ef43ad79ed2061f7435e83aa87abccdfa3d3be4c026fb14031702d8edae8f0f1824554e6ffa11e00e2e510a2d1f6d9f9e28404e75eafbe0bd61a9ee9b3362343d1e8e7c328a59e693c50b70c6787a299b1d2a9d2230ca7c1f43aa48a13539a22ec7df828d7e44ed98b71b4a0ade5c8dac1c347a97ccdf2a538c13dd524d63e184a8550469"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xa}}) 857.154713ms ago: executing program 5 (id=1650): r0 = socket$inet6(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000080)) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x3d}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0x941}], 0x1}, 0xc0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x8, 0x0, &(0x7f0000000240)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000540)="a903426832f555066bd350789098bb") r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r9, 0xc00c55ca, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r10, &(0x7f0000000280)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) 856.423783ms ago: executing program 5 (id=1651): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1471590f280c0000fc2502447fa1a922fabf628c1c93"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 855.868792ms ago: executing program 5 (id=1652): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x660f3000) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x660f3000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x24}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) 852.189471ms ago: executing program 5 (id=1653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r9, 0xaead) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 626.461236ms ago: executing program 5 (id=1654): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FIONCLEX(r1, 0x5450) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r2, 0x40284504, 0x0) 573.368135ms ago: executing program 5 (id=1655): r0 = syz_usb_connect$hid(0x3, 0x73, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d0404ca907fdf2bd843918824000100000010090400010403001400092100003301220500090581031000067f0f"], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x6, 0x18, 0xd, "fee8a2ab70fc17daaca7bd6447a4b4e00d9683dda1afb94c1956b73fd95a8e4210c80000000300000000000000000000000000e0ffd0d2b95600", "2809e8dbe10859892d0000b420a9ca1f40f05f819e0117020000f20020000000e90300100000000000000000000000000000000000003fa2a49be15510e700", "90be8b1c5512406c5f000000000000008000000900", [0x4, 0x5]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r1) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x0, 0x10, 0x5, {0x5, 0xb, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x28, 0x5, 0x0) 9.760662ms ago: executing program 4 (id=1656): syz_usb_connect$uac1(0x5, 0xb1, &(0x7f00000013c0)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109029f0003010010000904000000010100000a2401030070020102052404020209240304070304010191c50302000005060b08240402033161820624050206150904010000010200000904010101010200000c2402020200070002c9b9540724013a9301100824020108020380090501090002090101072501830103040201010102000009058209200003060507250183080200"/177], &(0x7f00000019c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x200, 0x7, 0x6, 0xe, 0x10, 0x4}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x3801}}]}) 0s ago: executing program 2 (id=1657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0), 0x0, 0x4000000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000e1019ef52c2a99f6443cbbd99fc7534e80ab33e301188e3d1536f9d300a730b2f3d927a42d9da9cefd459aee7007826e681d92360940e5a8d71de0ec7053ba3baa96eff54530947d84f64a580c3e5fbb27d3b6a3279913db4f8f8b36a9aa7485bc68902c2f30ad85dee9fdaa5a2f9146ab810a40312fb3623b700a68be5512249de912e8"], 0x44}}, 0x10004000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="200802010000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x40, 0xf, 0x2, "92ee"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = fsmount(0xffffffffffffffff, 0x0, 0x74) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000680)={0xffffffd6, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x117c}}, {{0xa, 0x4e20, 0x10000, @private1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x5, {{0xa, 0x4e21, 0x200000b, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r4, 0x29, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): 12] hub 3-1:0.0: bad descriptor, ignoring hub [ 269.537710][ T412] hub 3-1:0.0: probe with driver hub failed with error -5 [ 269.545248][ T412] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 269.562392][ T412] usb 3-1: Detected SIO [ 269.577788][ T412] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 269.605097][ T4955] gretap0: mtu less than device minimum [ 269.614228][ T4955] gretap0: mtu less than device minimum [ 269.620181][ T4955] gretap0: mtu less than device minimum [ 269.625764][ T4955] gretap0: mtu less than device minimum [ 269.631545][ T4955] gretap0: mtu less than device minimum [ 269.637107][ T4955] gretap0: mtu less than device minimum [ 269.642869][ T4955] gretap0: mtu less than device minimum [ 269.648469][ T4955] gretap0: mtu less than device minimum [ 269.654122][ T4955] gretap0: mtu less than device minimum [ 269.659675][ T4955] gretap0: mtu less than device minimum [ 269.677890][ T36] audit: type=1326 audit(1788780827.163:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.4.1356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6139c629 code=0x0 [ 269.778576][ T4961] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.840027][ T466] usb 3-1: USB disconnect, device number 18 [ 269.846510][ T466] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.856723][ T466] ftdi_sio 3-1:0.0: device disconnected [ 270.019960][ T377] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 270.149962][ T427] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 270.169948][ T377] usb 5-1: Using ep0 maxpacket: 8 [ 270.176303][ T377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.184640][ T377] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 270.194970][ T377] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.207871][ T377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 270.216314][ T377] usb 5-1: string descriptor 0 read error: -22 [ 270.222539][ T377] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.231587][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.248977][ T377] cdc_ether 5-1:1.0: skipping garbage [ 270.257364][ T377] usb 5-1: bad CDC descriptors [ 270.273949][ T4965] kvm: pic: single mode not supported [ 270.273967][ T4965] kvm: pic: level sensitive irq not supported [ 270.279620][ T4965] kvm: pic: level sensitive irq not supported [ 270.299962][ T427] usb 1-1: Using ep0 maxpacket: 16 [ 270.312847][ T427] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.325860][ T427] usb 1-1: config 0 interface 0 has no altsetting 0 [ 270.332518][ T427] usb 1-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 270.341797][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.351171][ T427] usb 1-1: config 0 descriptor?? [ 270.558067][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.566849][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.576147][ T427] wacom 0003:056A:00DA.004C: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 270.586342][ T427] wacom 0003:056A:00DA.004C: hidraw1: USB HID v8.6b Device [HID 056a:00da] on usb-dummy_hcd.0-1/input0 [ 270.598142][ T427] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DA.004C/input/input62 [ 270.786270][ T427] usb 1-1: USB disconnect, device number 35 [ 271.479973][ T1058] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 271.631021][ T1058] usb 3-1: unable to get BOS descriptor set [ 271.637400][ T1058] usb 3-1: not running at top speed; connect to a high speed hub [ 271.646503][ T1058] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.659581][ T1058] usb 3-1: config 1 interface 0 has no altsetting 0 [ 271.667837][ T1058] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40 [ 271.677160][ T1058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.685351][ T1058] usb 3-1: Product: 䡘멧ᵛ㥡펼䟐㩓Ṯ謧숦ȋ衊⷇찲췴恹姢 [ 271.694088][ T1058] usb 3-1: Manufacturer: љ [ 271.899623][ T377] usb 6-1: USB disconnect, device number 45 [ 271.920447][ T1058] usbhid 3-1:1.0: can't add hid device: -71 [ 271.927923][ T1058] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 271.955847][ T1058] usb 3-1: USB disconnect, device number 19 [ 272.479984][ T427] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 272.629953][ T427] usb 1-1: Using ep0 maxpacket: 32 [ 272.636495][ T427] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.644893][ T427] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 272.653258][ T427] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 272.663563][ T427] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 272.672598][ T427] usb 1-1: config 128 has no interface number 0 [ 272.678890][ T427] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 272.685796][ T1058] usb 5-1: USB disconnect, device number 97 [ 272.690159][ T427] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.706302][ T427] usb 1-1: config 128 interface 127 has no altsetting 0 [ 272.715605][ T427] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 272.724718][ T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.732727][ T427] usb 1-1: Product: syz [ 272.736933][ T427] usb 1-1: Manufacturer: syz [ 272.741558][ T427] usb 1-1: SerialNumber: syz [ 272.989994][ T412] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 273.039960][ T1058] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 273.150152][ T412] usb 6-1: Using ep0 maxpacket: 8 [ 273.156290][ T412] usb 6-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.167664][ T412] usb 6-1: config 0 interface 0 has no altsetting 0 [ 273.175112][ T412] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 273.184290][ T412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.193847][ T412] usb 6-1: config 0 descriptor?? [ 273.200663][ T427] usb 1-1: USB disconnect, device number 36 [ 273.201685][ T1058] usb 5-1: Using ep0 maxpacket: 32 [ 273.213406][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 273.213802][ T1058] usb 5-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.240538][ T1058] usb 5-1: config 0 interface 0 altsetting 35 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.253624][ T1058] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.260264][ T1058] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 273.269301][ T1058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.278528][ T1058] usb 5-1: config 0 descriptor?? [ 273.285008][ T1058] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 273.412822][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.419892][ T5004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.428889][ T5004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.437432][ T5004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.446589][ T412] usbhid 6-1:0.0: can't add hid device: -71 [ 273.452643][ T412] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 273.461286][ T412] usb 6-1: USB disconnect, device number 46 [ 273.929981][ T412] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 274.080142][ T412] usb 1-1: Using ep0 maxpacket: 32 [ 274.086468][ T412] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.097418][ T412] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.108220][ T412] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.117347][ T412] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 274.125769][ T412] usb 1-1: Product: syz [ 274.129956][ T412] usb 1-1: Manufacturer: syz [ 274.136276][ T412] hub 1-1:4.0: USB hub found [ 274.209960][ T427] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 274.337338][ T412] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 274.359962][ T427] usb 6-1: Using ep0 maxpacket: 16 [ 274.367062][ T427] usb 6-1: config 250 has an invalid interface number: 111 but max is 3 [ 274.375455][ T427] usb 6-1: config 250 has an invalid interface number: 173 but max is 3 [ 274.383852][ T427] usb 6-1: config 250 has an invalid interface number: 102 but max is 3 [ 274.392222][ T427] usb 6-1: config 250 contains an unexpected descriptor of type 0x2, skipping [ 274.401123][ T427] usb 6-1: config 250 contains an unexpected descriptor of type 0x1, skipping [ 274.410006][ T427] usb 6-1: config 250 has an invalid interface number: 202 but max is 3 [ 274.418375][ T427] usb 6-1: config 250 has no interface number 0 [ 274.424659][ T427] usb 6-1: config 250 has no interface number 1 [ 274.430960][ T427] usb 6-1: config 250 has no interface number 2 [ 274.437202][ T427] usb 6-1: config 250 has no interface number 3 [ 274.443539][ T427] usb 6-1: config 250 interface 111 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 274.454699][ T427] usb 6-1: config 250 interface 111 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 274.465795][ T427] usb 6-1: config 250 interface 111 altsetting 3 endpoint 0x7 has an invalid bInterval 251, changing to 7 [ 274.477137][ T427] usb 6-1: config 250 interface 111 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 274.488047][ T427] usb 6-1: config 250 interface 111 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 274.499113][ T427] usb 6-1: config 250 interface 111 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 274.510019][ T427] usb 6-1: config 250 interface 111 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 274.521087][ T427] usb 6-1: config 250 interface 111 altsetting 3 endpoint 0x2 has an invalid bInterval 193, changing to 7 [ 274.532418][ T427] usb 6-1: config 250 interface 111 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 274.543416][ T427] usb 6-1: config 250 interface 173 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 274.556221][ T427] usb 6-1: config 250 interface 173 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 274.567170][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x6, skipping [ 274.578238][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x5, skipping [ 274.589322][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x6, skipping [ 274.600415][ T427] usb 6-1: config 250 interface 102 altsetting 179 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 274.611886][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x86, skipping [ 274.623073][ T427] usb 6-1: config 250 interface 102 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 274.634356][ T427] usb 6-1: config 250 interface 102 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 274.645802][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x1, skipping [ 274.656895][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x5, skipping [ 274.668062][ T1065] usb 1-1: USB disconnect, device number 37 [ 274.674017][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x1, skipping [ 274.685804][ T427] usb 6-1: config 250 interface 102 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 274.697661][ T427] usb 6-1: config 250 interface 102 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 274.708932][ T427] usb 6-1: config 250 interface 102 altsetting 179 has a duplicate endpoint with address 0x2, skipping [ 274.720137][ T427] usb 6-1: config 250 interface 111 has no altsetting 0 [ 274.727076][ T427] usb 6-1: config 250 interface 173 has no altsetting 0 [ 274.734069][ T427] usb 6-1: config 250 interface 102 has no altsetting 0 [ 274.741014][ T427] usb 6-1: config 250 interface 202 has no altsetting 0 [ 275.419985][ T466] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 275.439957][ T1065] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 275.569953][ T466] usb 3-1: Using ep0 maxpacket: 32 [ 275.576129][ T466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.587207][ T466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.597079][ T466] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 275.601045][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.606139][ T466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.615991][ T1065] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 275.624857][ T466] usb 3-1: config 0 descriptor?? [ 275.636746][ T1065] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 275.650812][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.659437][ T1065] usb 1-1: config 0 descriptor?? [ 275.719405][ T1058] usbhid 5-1:0.0: can't add hid device: -71 [ 275.725467][ T1058] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 275.735953][ T1058] usb 5-1: USB disconnect, device number 98 [ 275.865969][ T5019] netlink: 'syz.0.1377': attribute type 4 has an invalid length. [ 276.048373][ T466] koneplus 0003:1E7D:2D51.004D: item fetching failed at offset 4/5 [ 276.056582][ T466] koneplus 0003:1E7D:2D51.004D: parse failed [ 276.062614][ T466] koneplus 0003:1E7D:2D51.004D: probe with driver koneplus failed with error -22 [ 276.075988][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.084592][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.132989][ T1065] kye 0003:0458:5017.004E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 276.144498][ T1065] kye 0003:0458:5017.004E: hidraw1: USB HID v80.00 Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0 [ 276.155606][ T1065] kye 0003:0458:5017.004E: tablet-enabling feature report not found [ 276.163663][ T1065] kye 0003:0458:5017.004E: tablet enabling failed [ 276.255208][ T1065] usb 3-1: USB disconnect, device number 20 [ 276.338458][ T412] usb 1-1: USB disconnect, device number 38 [ 276.829969][ T412] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 276.856930][ T5040] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1384'. [ 276.959960][ T412] usb 5-1: device descriptor read/64, error -71 [ 276.979704][ T427] usb 6-1: New USB device found, idVendor=04e8, idProduct=5f01, bcdDevice=f7.b9 [ 276.989022][ T427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.998157][ T427] usb 6-1: can't set config #250, error -71 [ 277.005622][ T427] usb 6-1: USB disconnect, device number 47 [ 277.039989][ T1065] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 277.057422][ T5044] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 277.067409][ T36] audit: type=1400 audit(1788780834.563:2331): avc: denied { relabelto } for pid=5043 comm="syz.5.1386" name="103" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 277.069966][ T5044] syzkaller0: entered promiscuous mode [ 277.094315][ T36] audit: type=1400 audit(1788780834.563:2332): avc: denied { associate } for pid=5043 comm="syz.5.1386" name="103" dev="tmpfs" ino=563 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 277.100054][ T5044] syzkaller0: entered allmulticast mode [ 277.128317][ T36] audit: type=1400 audit(1788780834.623:2333): avc: denied { write } for pid=5043 comm="syz.5.1386" name="103" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 277.132615][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 277.167199][ T36] audit: type=1400 audit(1788780834.623:2334): avc: denied { add_name } for pid=5043 comm="syz.5.1386" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 277.191966][ T36] audit: type=1400 audit(1788780834.623:2335): avc: denied { associate } for pid=5043 comm="syz.5.1386" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.213660][ T36] audit: type=1400 audit(1788780834.653:2336): avc: denied { mounton } for pid=5043 comm="syz.5.1386" path="/103/bus" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.236036][ T36] audit: type=1400 audit(1788780834.653:2337): avc: denied { write } for pid=5043 comm="syz.5.1386" name="bus" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.257815][ T36] audit: type=1400 audit(1788780834.653:2338): avc: denied { add_name } for pid=5043 comm="syz.5.1386" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.269983][ T1065] usb 3-1: Using ep0 maxpacket: 32 [ 277.278464][ T36] audit: type=1400 audit(1788780834.653:2339): avc: denied { setattr } for pid=5043 comm="syz.5.1386" name="work" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.284489][ T1065] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.306232][ T36] audit: type=1400 audit(1788780834.653:2340): avc: denied { write open } for pid=5043 comm="syz.5.1386" path=2F202864656C6574656429 dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 277.316435][ T1065] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.349692][ T412] usb 5-1: device descriptor read/64, error -71 [ 277.357183][ T1065] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 277.366309][ T1065] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 277.374689][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 277.379852][ T1065] usb 3-1: Product: syz [ 277.384038][ T1065] usb 3-1: Manufacturer: syz [ 277.390047][ T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 277.398230][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.408884][ T1065] hub 3-1:4.0: USB hub found [ 277.413605][ T9] usb 1-1: config 1 has no interface number 0 [ 277.419728][ T9] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.432842][ T9] usb 1-1: config 1 interface 105 has no altsetting 0 [ 277.441081][ T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 277.450408][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 277.458519][ T9] usb 1-1: Product: syz [ 277.463485][ T9] usb 1-1: Manufacturer: syz [ 277.470772][ T9] usb 1-1: SerialNumber: syz [ 277.589955][ T412] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 277.598595][ T1065] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 277.677147][ T9] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 277.729962][ T412] usb 5-1: device descriptor read/64, error -71 [ 277.884926][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.893418][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.910107][ T9] usb 3-1: USB disconnect, device number 21 [ 277.958730][ T9] usb 1-1: USB disconnect, device number 39 [ 277.969977][ T412] usb 5-1: device descriptor read/64, error -71 [ 278.080227][ T412] usb usb5-port1: attempt power cycle [ 278.420182][ T412] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 278.439970][ T466] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 278.441093][ T412] usb 5-1: device descriptor read/8, error -71 [ 278.550027][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 278.580984][ T412] usb 5-1: device descriptor read/8, error -71 [ 278.600892][ T466] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.608966][ T466] usb 6-1: config 0 has no interface number 0 [ 278.615219][ T466] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.626186][ T466] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.635961][ T466] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 278.645045][ T466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.653651][ T466] usb 6-1: config 0 descriptor?? [ 278.699978][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 278.706196][ T9] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 278.714511][ T9] usb 3-1: config 0 has no interface number 0 [ 278.722215][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f3.10 [ 278.731346][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.739337][ T9] usb 3-1: Product: syz [ 278.743572][ T1065] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 278.751163][ T9] usb 3-1: Manufacturer: syz [ 278.755791][ T9] usb 3-1: SerialNumber: syz [ 278.761929][ T9] usb 3-1: config 0 descriptor?? [ 278.819990][ T412] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 278.840985][ T412] usb 5-1: device descriptor read/8, error -71 [ 278.909969][ T1065] usb 1-1: Using ep0 maxpacket: 32 [ 278.916339][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.927273][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.937057][ T1065] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.946184][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.954889][ T1065] usb 1-1: config 0 descriptor?? [ 278.960857][ T1065] hub 1-1:0.0: USB hub found [ 278.969859][ T1058] usb 3-1: USB disconnect, device number 22 [ 278.972860][ T412] usb 5-1: device descriptor read/8, error -71 [ 279.062090][ T466] prodikeys 0003:041E:2801.004F: item fetching failed at offset 3/7 [ 279.070375][ T466] prodikeys 0003:041E:2801.004F: hid parse failed [ 279.076820][ T466] prodikeys 0003:041E:2801.004F: probe with driver prodikeys failed with error -22 [ 279.090048][ T412] usb usb5-port1: unable to enumerate USB device [ 279.161266][ T1065] hub 1-1:0.0: 6 ports detected [ 279.166360][ T1065] hub 1-1:0.0: insufficient power available to use all downstream ports [ 279.263073][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.271680][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.280344][ T466] usb 6-1: USB disconnect, device number 48 [ 279.424599][ T1065] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 279.431005][ T1065] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 279.439671][ T1065] usbhid 1-1:0.0: can't add hid device: -71 [ 279.445667][ T1065] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 279.470393][ T1065] usb 1-1: USB disconnect, device number 40 [ 279.769966][ T466] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 279.863713][ T5084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5084 comm=syz.5.1400 [ 279.876947][ T5084] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1400'. [ 279.919941][ T466] usb 3-1: Using ep0 maxpacket: 8 [ 279.926366][ T466] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.936273][ T466] usb 3-1: config 9 has an invalid interface number: 5 but max is 0 [ 279.944337][ T466] usb 3-1: config 9 has no interface number 0 [ 279.950462][ T466] usb 3-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 279.960916][ T466] usb 3-1: config 9 interface 5 has no altsetting 0 [ 279.968773][ T466] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 279.977848][ T466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.985897][ T466] usb 3-1: Product: syz [ 279.990080][ T466] usb 3-1: Manufacturer: syz [ 279.994670][ T466] usb 3-1: SerialNumber: syz [ 280.169975][ T1065] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 280.169976][ T1058] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 280.262075][ T466] usb 3-1: USB disconnect, device number 23 [ 280.320975][ T1058] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 280.329168][ T1058] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 280.329964][ T1065] usb 1-1: Using ep0 maxpacket: 32 [ 280.338403][ T1058] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 280.344386][ T1065] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.352448][ T1058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.362765][ T1065] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.370083][ T1058] usb 5-1: config 0 descriptor?? [ 280.379993][ T1065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.383874][ T1058] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 280.392410][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.398386][ T1058] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 280.408181][ T1065] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.416137][ T1058] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 280.425927][ T1065] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.447796][ T1065] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.456877][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.465640][ T1065] usb 1-1: config 0 descriptor?? [ 280.595427][ T412] usb 5-1: USB disconnect, device number 103 [ 280.674802][ T5091] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 280.678518][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.692303][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.700233][ T1065] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.718045][ T1065] usb 1-1: USB disconnect, device number 41 [ 280.726447][ T1065] usblp0: removed [ 280.809478][ T5103] can_create: 23 callbacks suppressed [ 280.809491][ T5103] can: request_module (can-proto-0) failed. [ 280.969965][ T1058] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 281.029974][ T1065] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 281.132488][ T1058] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 281.141605][ T1058] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.149771][ T1058] usb 6-1: Product: syz [ 281.154265][ T1058] usb 6-1: Manufacturer: syz [ 281.158896][ T1058] usb 6-1: SerialNumber: syz [ 281.164177][ T1058] usb 6-1: config 0 descriptor?? [ 281.189962][ T1065] usb 1-1: Using ep0 maxpacket: 16 [ 281.196255][ T1065] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.206313][ T412] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 281.213936][ T1065] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.223988][ T1065] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.237026][ T1065] usb 1-1: config 1 interface 0 has no altsetting 0 [ 281.245637][ T1065] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 281.254765][ T1065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.262779][ T1065] usb 1-1: Product: syz [ 281.266974][ T1065] usb 1-1: Manufacturer: syz [ 281.271597][ T1065] usb 1-1: SerialNumber: syz [ 281.349967][ T466] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 281.385815][ T1058] usb 6-1: USB disconnect, device number 49 [ 281.393537][ T412] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.401813][ T412] usb 3-1: not running at top speed; connect to a high speed hub [ 281.404482][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.410296][ T412] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.435379][ T412] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.446453][ T412] usb 3-1: string descriptor 0 read error: -22 [ 281.452738][ T412] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.461838][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.474265][ T412] usb 3-1: 0:2 : does not exist [ 281.482061][ T1065] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 281.494060][ T1065] usb 1-1: USB disconnect, device number 42 [ 281.501118][ T1065] usblp0: removed [ 281.511096][ T466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.521277][ T466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.531742][ T466] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.540828][ T466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.548890][ T466] usb 5-1: Product: syz [ 281.553271][ T466] usb 5-1: Manufacturer: syz [ 281.557886][ T466] usb 5-1: SerialNumber: syz [ 281.878944][ T412] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 281.889617][ T412] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 281.899996][ T412] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 281.912320][ T412] usb 3-1: USB disconnect, device number 24 [ 281.914522][ T466] usb 5-1: 0:2 : does not exist [ 281.927751][ T466] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 281.941948][ T466] usb 5-1: USB disconnect, device number 104 [ 282.130027][ T1065] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 282.281061][ T1065] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 282.289237][ T1065] usb 6-1: config 0 has no interface number 0 [ 282.295457][ T1065] usb 6-1: config 0 interface 29 has no altsetting 0 [ 282.305734][ T1065] usb 6-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 282.314843][ T1065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.324115][ T1065] usb 6-1: config 0 descriptor?? [ 282.330014][ T1065] usb-storage 6-1:0.29: USB Mass Storage device detected [ 282.337857][ T1065] usb-storage 6-1:0.29: Quirks match for vid 357d pid 7788: 4800000 [ 282.539954][ T412] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 282.592730][ T1065] usb 6-1: USB disconnect, device number 50 [ 282.630127][ T427] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 282.689983][ T412] usb 5-1: Using ep0 maxpacket: 32 [ 282.696381][ T412] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.707543][ T412] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.719083][ T412] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.728431][ T412] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 282.736973][ T412] usb 5-1: Product: syz [ 282.741396][ T412] usb 5-1: Manufacturer: syz [ 282.747932][ T412] hub 5-1:4.0: USB hub found [ 282.790043][ T427] usb 1-1: Using ep0 maxpacket: 8 [ 282.796258][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 282.807816][ T427] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 282.817095][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.826427][ T427] usb 1-1: config 0 descriptor?? [ 282.950083][ T412] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 283.033732][ T5137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.042351][ T5137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.170603][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 283.252712][ T427] kye 0003:0458:5014.0050: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 283.270113][ T466] usb 5-1: USB disconnect, device number 105 [ 283.280262][ T427] kye 0003:0458:5014.0050: item fetching failed at offset 3/5 [ 283.288186][ T427] kye 0003:0458:5014.0050: parse failed [ 283.303252][ T427] kye 0003:0458:5014.0050: probe with driver kye failed with error -22 [ 283.440048][ T412] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 283.453659][ T1064] usb 1-1: USB disconnect, device number 43 [ 283.569998][ T427] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.589963][ T412] usb 6-1: Using ep0 maxpacket: 32 [ 283.596336][ T412] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.607512][ T412] usb 6-1: string descriptor 0 read error: -71 [ 283.613769][ T412] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice=1e.40 [ 283.623060][ T412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.633152][ T412] usb 6-1: can't set config #1, error -71 [ 283.639678][ T412] usb 6-1: USB disconnect, device number 51 [ 283.719986][ T427] usb 3-1: Using ep0 maxpacket: 16 [ 283.726445][ T427] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.736880][ T427] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.747687][ T427] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.756783][ T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.764920][ T427] usb 3-1: Product: syz [ 283.769084][ T427] usb 3-1: Manufacturer: syz [ 283.773717][ T427] usb 3-1: SerialNumber: syz [ 283.981761][ T427] usb 3-1: skipping empty audio interface (v1) [ 283.989539][ T427] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 283.999585][ T427] usb 3-1: USB disconnect, device number 25 [ 284.005125][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.209966][ T412] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 284.281936][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 284.281954][ T36] audit: type=1400 audit(1788780841.773:2351): avc: denied { setattr } for pid=5174 comm="syz.4.1432" path="/proc/570/net/netfilter" dev="proc" ino=4026532832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 284.370047][ T1065] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 284.377702][ T412] usb 1-1: device descriptor read/64, error -71 [ 284.509965][ T1065] usb 6-1: device descriptor read/64, error -71 [ 284.620002][ T412] usb 1-1: device descriptor read/64, error -71 [ 284.739964][ T427] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 284.750728][ T1065] usb 6-1: device descriptor read/64, error -71 [ 284.860030][ T412] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 284.890690][ T427] usb 3-1: not running at top speed; connect to a high speed hub [ 284.899230][ T427] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.909417][ T427] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.919872][ T427] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.928970][ T427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.937248][ T427] usb 3-1: Product: syz [ 284.941607][ T427] usb 3-1: Manufacturer: syz [ 284.946217][ T427] usb 3-1: SerialNumber: syz [ 284.989997][ T1065] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 284.999985][ T412] usb 1-1: device descriptor read/64, error -71 [ 285.119973][ T1065] usb 6-1: device descriptor read/64, error -71 [ 285.153524][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.162105][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.174382][ T427] usb 3-1: USB disconnect, device number 26 [ 285.182834][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 285.239962][ T412] usb 1-1: device descriptor read/64, error -71 [ 285.350128][ T412] usb usb1-port1: attempt power cycle [ 285.360005][ T1065] usb 6-1: device descriptor read/64, error -71 [ 285.470055][ T1065] usb usb6-port1: attempt power cycle [ 285.689999][ T412] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 285.711051][ T412] usb 1-1: device descriptor read/8, error -71 [ 285.809974][ T1065] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 285.831003][ T1065] usb 6-1: device descriptor read/8, error -71 [ 285.841086][ T412] usb 1-1: device descriptor read/8, error -71 [ 285.919989][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 285.960974][ T1065] usb 6-1: device descriptor read/8, error -71 [ 286.070077][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 286.076286][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.087257][ T412] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 286.094852][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.105732][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 286.114859][ T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 286.123279][ T9] usb 3-1: Product: syz [ 286.127522][ T9] usb 3-1: Manufacturer: syz [ 286.132834][ T412] usb 1-1: device descriptor read/8, error -71 [ 286.140402][ T9] hub 3-1:4.0: USB hub found [ 286.200101][ T1065] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 286.220962][ T1065] usb 6-1: device descriptor read/8, error -71 [ 286.261085][ T412] usb 1-1: device descriptor read/8, error -71 [ 286.341601][ T9] hub 3-1:4.0: 5 ports detected [ 286.346771][ T9] hub 3-1:4.0: insufficient power available to use all downstream ports [ 286.356173][ T1065] usb 6-1: device descriptor read/8, error -71 [ 286.370075][ T412] usb usb1-port1: unable to enumerate USB device [ 286.470070][ T1065] usb usb6-port1: unable to enumerate USB device [ 286.945713][ T9] usb 3-1: USB disconnect, device number 27 [ 286.993076][ T5184] fuse: Bad value for 'user_id' [ 286.997967][ T5184] fuse: Bad value for 'user_id' [ 287.140961][ T36] audit: type=1400 audit(1788780844.633:2352): avc: denied { execute_no_trans } for pid=5187 comm="syz.5.1438" path="/file0" dev="ramfs" ino=38372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 287.390106][ T412] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 287.398339][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.406983][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.519985][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 287.537143][ T5206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1444'. [ 287.539985][ T412] usb 1-1: Using ep0 maxpacket: 16 [ 287.546228][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 287.552807][ T412] usb 1-1: config 3 has an invalid interface number: 156 but max is 0 [ 287.560240][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 287.568525][ T412] usb 1-1: config 3 has no interface number 0 [ 287.583622][ T412] usb 1-1: config 3 interface 156 has no altsetting 0 [ 287.592335][ T412] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 287.601955][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.609985][ T412] usb 1-1: Product: syz [ 287.614211][ T412] usb 1-1: Manufacturer: syz [ 287.618802][ T412] usb 1-1: SerialNumber: syz [ 287.629964][ T466] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 287.671016][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 287.680160][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.688910][ T9] usb 6-1: config 0 descriptor?? [ 287.769985][ T466] usb 5-1: device descriptor read/64, error -71 [ 287.826791][ T412] gl620a 1-1:3.156: probe with driver gl620a failed with error -22 [ 287.837001][ T412] usb 1-1: USB disconnect, device number 48 [ 287.849967][ T377] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 287.999953][ T377] usb 3-1: Using ep0 maxpacket: 32 [ 288.006156][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.017238][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.027025][ T466] usb 5-1: device descriptor read/64, error -71 [ 288.033339][ T377] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.042514][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.051165][ T377] usb 3-1: config 0 descriptor?? [ 288.057081][ T377] hub 3-1:0.0: USB hub found [ 288.096521][ T9] itetech 0003:06CB:73F4.0051: item fetching failed at offset 0/3 [ 288.104587][ T9] itetech 0003:06CB:73F4.0051: probe with driver itetech failed with error -22 [ 288.270036][ T466] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 288.353770][ T343] usb 6-1: USB disconnect, device number 56 [ 288.355483][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1447'. [ 288.368784][ T5218] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1447'. [ 288.378084][ T5218] netlink: 'syz.0.1447': attribute type 5 has an invalid length. [ 288.385919][ T5218] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1447'. [ 288.409943][ T466] usb 5-1: device descriptor read/64, error -71 [ 288.457969][ T377] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 288.649953][ T466] usb 5-1: device descriptor read/64, error -71 [ 288.668592][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 288.674644][ T377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 288.700586][ T377] usb 3-1: USB disconnect, device number 28 [ 288.760041][ T466] usb usb5-port1: attempt power cycle [ 288.829963][ T9] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 288.830002][ T343] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 288.959977][ T9] usb 1-1: device descriptor read/64, error -71 [ 288.989959][ T343] usb 6-1: device descriptor read/64, error -71 [ 289.099982][ T412] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 289.109957][ T466] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 289.130950][ T466] usb 5-1: device descriptor read/8, error -71 [ 289.199978][ T9] usb 1-1: device descriptor read/64, error -71 [ 289.230006][ T343] usb 6-1: device descriptor read/64, error -71 [ 289.249989][ T412] usb 3-1: Using ep0 maxpacket: 32 [ 289.256292][ T412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.267254][ T412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.271034][ T466] usb 5-1: device descriptor read/8, error -71 [ 289.277019][ T412] usb 3-1: New USB device found, idVendor=6172, idProduct=2377, bcdDevice= 0.00 [ 289.292292][ T412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.300941][ T412] usb 3-1: config 0 descriptor?? [ 289.308491][ T412] hub 3-1:0.0: USB hub found [ 289.439980][ T9] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 289.470008][ T343] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 289.507225][ T412] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 289.516473][ T412] usbhid 3-1:0.0: can't add hid device: -71 [ 289.522568][ T412] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 289.529955][ T466] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 289.550762][ T412] usb 3-1: USB disconnect, device number 29 [ 289.551144][ T466] usb 5-1: device descriptor read/8, error -71 [ 289.570066][ T9] usb 1-1: device descriptor read/64, error -71 [ 289.609968][ T343] usb 6-1: device descriptor read/64, error -71 [ 289.690870][ T466] usb 5-1: device descriptor read/8, error -71 [ 289.800032][ T466] usb usb5-port1: unable to enumerate USB device [ 289.809968][ T9] usb 1-1: device descriptor read/64, error -71 [ 289.849966][ T343] usb 6-1: device descriptor read/64, error -71 [ 289.920080][ T9] usb usb1-port1: attempt power cycle [ 289.960024][ T343] usb usb6-port1: attempt power cycle [ 290.259968][ T9] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 290.281021][ T9] usb 1-1: device descriptor read/8, error -71 [ 290.299987][ T343] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 290.320891][ T343] usb 6-1: device descriptor read/8, error -71 [ 290.410955][ T9] usb 1-1: device descriptor read/8, error -71 [ 290.450982][ T343] usb 6-1: device descriptor read/8, error -71 [ 290.649964][ T9] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 290.670012][ T1058] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 290.671013][ T9] usb 1-1: device descriptor read/8, error -71 [ 290.689995][ T343] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 290.710899][ T343] usb 6-1: device descriptor read/8, error -71 [ 290.799950][ T466] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 290.811032][ T9] usb 1-1: device descriptor read/8, error -71 [ 290.820908][ T1058] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 290.829987][ T1058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.838578][ T1058] usb 3-1: config 0 descriptor?? [ 290.845263][ T343] usb 6-1: device descriptor read/8, error -71 [ 290.920059][ T9] usb usb1-port1: unable to enumerate USB device [ 290.960050][ T343] usb usb6-port1: unable to enumerate USB device [ 290.967761][ T466] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.979361][ T466] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 290.990765][ T466] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.000612][ T466] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 291.009653][ T466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.220982][ T466] usb 5-1: string descriptor 0 read error: -71 [ 291.227403][ T466] hub 5-1:32.0: USB hub found [ 291.232686][ T466] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 291.260332][ T466] usb 5-1: USB disconnect, device number 110 [ 291.394124][ T633] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.521229][ T1058] usbhid 3-1:0.0: can't add hid device: -71 [ 291.527627][ T1058] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 291.536286][ T1058] usb 3-1: USB disconnect, device number 30 [ 291.729969][ T1065] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 291.759528][ T5256] tipc: Enabling of bearer rejected, media not registered [ 291.779365][ T5258] fuse: Bad value for 'user_id' [ 291.784293][ T5258] fuse: Bad value for 'user_id' [ 291.789883][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 291.839352][ T5264] loop9: detected capacity change from 0 to 7 [ 291.879954][ T1065] usb 1-1: Using ep0 maxpacket: 32 [ 291.886379][ T1065] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.897563][ T1065] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.908581][ T1065] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 291.922737][ T1065] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 291.931208][ T1065] usb 1-1: Product: syz [ 291.935385][ T1065] usb 1-1: Manufacturer: syz [ 291.942991][ T1065] hub 1-1:4.0: USB hub found [ 292.142952][ T1065] hub 1-1:4.0: 5 ports detected [ 292.148100][ T1065] hub 1-1:4.0: insufficient power available to use all downstream ports [ 292.269981][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 292.420972][ T9] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.432146][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 292.438816][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 292.447903][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.456586][ T9] usb 3-1: config 0 descriptor?? [ 292.544280][ T1065] hub 1-1:4.0: set hub depth failed [ 292.551638][ T1065] usb 1-1: USB disconnect, device number 53 [ 292.664766][ T9] playstation 0003:054C:0BA0.0052: unknown main item tag 0x2 [ 292.673037][ T9] playstation 0003:054C:0BA0.0052: hidraw1: USB HID v0.02 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 292.736060][ T36] audit: type=1400 audit(1788780850.223:2353): avc: denied { create } for pid=5275 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.756385][ T9] playstation 0003:054C:0BA0.0052: Failed to retrieve feature with reportID 18: -32 [ 292.766309][ T9] playstation 0003:054C:0BA0.0052: Failed to retrieve DualShock4 pairing info: -32 [ 292.775685][ T9] playstation 0003:054C:0BA0.0052: Failed to get MAC address from DualShock4 [ 292.784846][ T9] playstation 0003:054C:0BA0.0052: Failed to create dualshock4. [ 292.793444][ T9] playstation 0003:054C:0BA0.0052: probe with driver playstation failed with error -32 [ 292.865239][ T1058] usb 3-1: USB disconnect, device number 31 [ 293.370037][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 293.469966][ T574] Bluetooth: hci0: command 0x1003 tx timeout [ 293.469973][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 293.519974][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 293.526453][ T9] usb 1-1: config 4 has an invalid interface number: 228 but max is 0 [ 293.534830][ T9] usb 1-1: config 4 has no interface number 0 [ 293.540962][ T9] usb 1-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 293.552110][ T9] usb 1-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 293.562084][ T9] usb 1-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 293.572330][ T9] usb 1-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 293.576503][ T629] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.585955][ T1065] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 293.592183][ T629] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.599824][ T9] usb 1-1: config 4 interface 228 has no altsetting 0 [ 293.614573][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 293.623725][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.631739][ T9] usb 1-1: Product: syz [ 293.635934][ T9] usb 1-1: Manufacturer: syz [ 293.640539][ T9] usb 1-1: SerialNumber: syz [ 293.739985][ T1065] usb 5-1: device descriptor read/64, error -71 [ 293.847444][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.856100][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.864934][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.873491][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.881996][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.890555][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.903788][ T9] snd-usb-audio 1-1:4.228: probe with driver snd-usb-audio failed with error -12 [ 293.914288][ T9] usb 1-1: USB disconnect, device number 54 [ 293.922857][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 293.989969][ T1065] usb 5-1: device descriptor read/64, error -71 [ 294.165598][ T5310] SELinux: failed to load policy [ 294.229975][ T1065] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 294.359969][ T1065] usb 5-1: device descriptor read/64, error -71 [ 294.378605][ T5320] bridge: RTM_NEWNEIGH with invalid ether address [ 294.380230][ T36] audit: type=1400 audit(1788780851.873:2354): avc: denied { mount } for pid=5319 comm="syz.2.1483" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 294.385265][ T5320] bridge: RTM_NEWNEIGH with invalid ether address [ 294.443650][ T36] audit: type=1400 audit(1788780851.933:2355): avc: denied { checkpoint_restore } for pid=5329 comm="syz.0.1486" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 294.465601][ T36] audit: type=1326 audit(1788780851.933:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.0.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e6919c629 code=0x0 [ 294.600013][ T1065] usb 5-1: device descriptor read/64, error -71 [ 294.709980][ T412] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 294.717708][ T1065] usb usb5-port1: attempt power cycle [ 294.869970][ T412] usb 3-1: Using ep0 maxpacket: 16 [ 294.876566][ T412] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.884988][ T412] usb 3-1: config 127 has an invalid interface number: 121 but max is 0 [ 294.893432][ T412] usb 3-1: config 127 has no interface number 0 [ 294.899745][ T412] usb 3-1: config 127 interface 121 has no altsetting 0 [ 294.908321][ T412] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=ba.4a [ 294.917480][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.925538][ T412] usb 3-1: Product: 槶ꚦ蜽ᘢຖ䘸ొඈ᮶鶑퀮⺨騩⑃榒㣙詀ᢍᚷ꟔㛳ẊꚐ襓楴ጁ [ 294.937620][ T412] usb 3-1: Manufacturer: Х [ 294.942177][ T412] usb 3-1: SerialNumber: Ї [ 295.059963][ T1065] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 295.080974][ T1065] usb 5-1: device descriptor read/8, error -71 [ 295.149935][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.158543][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.210976][ T1065] usb 5-1: device descriptor read/8, error -71 [ 295.369356][ T412] usb_ehset_test 3-1:127.121: probe with driver usb_ehset_test failed with error -32 [ 295.379717][ T412] usb 3-1: USB disconnect, device number 32 [ 295.449962][ T1065] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 295.470974][ T1065] usb 5-1: device descriptor read/8, error -71 [ 295.560009][ T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 295.600981][ T1065] usb 5-1: device descriptor read/8, error -71 [ 295.629962][ T574] Bluetooth: hci0: command 0x1003 tx timeout [ 295.630123][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.653650][ T5349] rust_binder: 361: no such ref 0 [ 295.658906][ T5348] netlink: 'syz.5.1493': attribute type 27 has an invalid length. [ 295.710067][ T1065] usb usb5-port1: unable to enumerate USB device [ 295.717914][ T9] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.727817][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.734435][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 295.743526][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.752121][ T9] usb 1-1: config 0 descriptor?? [ 295.899952][ T1058] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 296.050367][ T1058] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 296.059234][ T1058] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 296.066830][ T1058] usb 6-1: can't read configurations, error -61 [ 296.160282][ T9] sony 0003:054C:0374.0053: unknown main item tag 0x0 [ 296.167144][ T9] sony 0003:054C:0374.0053: unknown main item tag 0x0 [ 296.173966][ T9] sony 0003:054C:0374.0053: unknown main item tag 0x0 [ 296.180796][ T9] sony 0003:054C:0374.0053: unknown main item tag 0x0 [ 296.187566][ T9] sony 0003:054C:0374.0053: unknown main item tag 0x0 [ 296.196555][ T9] sony 0003:054C:0374.0053: hiddev96,hidraw1: USB HID vff.fe Device [HID 054c:0374] on usb-dummy_hcd.0-1/input0 [ 296.208603][ T9] sony 0003:054C:0374.0053: failed to claim input [ 296.212598][ T1058] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 296.362144][ T427] usb 1-1: USB disconnect, device number 55 [ 296.371196][ T1058] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 296.380455][ T1058] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 296.388016][ T1058] usb 6-1: can't read configurations, error -61 [ 296.394418][ T1058] usb usb6-port1: attempt power cycle [ 296.739969][ T1058] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 296.739969][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 296.760601][ T1058] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 296.769434][ T1058] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 296.777019][ T1058] usb 6-1: can't read configurations, error -61 [ 296.901011][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.907645][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 296.916873][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.919996][ T1058] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 296.925919][ T9] usb 5-1: config 0 descriptor?? [ 296.950628][ T1058] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 296.959501][ T1058] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 296.967127][ T1058] usb 6-1: can't read configurations, error -61 [ 296.973556][ T1058] usb usb6-port1: unable to enumerate USB device [ 297.119960][ T427] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 297.269942][ T427] usb 1-1: Using ep0 maxpacket: 32 [ 297.276153][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.287218][ T427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.296984][ T427] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 297.309860][ T427] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 297.318921][ T427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.327676][ T427] usb 1-1: config 0 descriptor?? [ 297.340282][ T9] elo 0003:04E7:0009.0054: item fetching failed at offset 0/3 [ 297.347957][ T9] elo 0003:04E7:0009.0054: parse failed [ 297.353580][ T9] elo 0003:04E7:0009.0054: probe with driver elo failed with error -22 [ 297.534429][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.543007][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.545170][ T1058] usb 5-1: USB disconnect, device number 115 [ 297.757529][ T427] hid (null): unknown global tag 0xd [ 297.762938][ T427] hid (null): unknown global tag 0xc [ 297.768260][ T427] hid (null): unknown global tag 0xe [ 297.774140][ T427] hid (null): unknown global tag 0xd [ 297.781677][ T427] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0055/input/input66 [ 297.794381][ T427] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0055/input/input67 [ 297.810661][ T427] kye 0003:0458:5011.0055: input,hiddev96,hidraw1: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 297.965587][ T427] usb 1-1: USB disconnect, device number 56 [ 298.669966][ T574] Bluetooth: hci0: command 0x1003 tx timeout [ 298.676079][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.687756][ T36] audit: type=1400 audit(1788780856.183:2357): avc: denied { read } for pid=5392 comm="syz.5.1512" path="socket:[39751]" dev="sockfs" ino=39751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 298.739977][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 298.743375][ T5404] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 298.756648][ T5404] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 298.889956][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 298.896475][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.906965][ T9] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 298.915150][ T9] usb 1-1: config 0 has no interface number 1 [ 298.921903][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.928575][ T9] usb 1-1: config 0 interface 98 has no altsetting 0 [ 298.932123][ T5412] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 298.937082][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=40.12 [ 298.952775][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.961092][ T9] usb 1-1: Product: syz [ 298.965592][ T9] usb 1-1: Manufacturer: syz [ 298.970364][ T9] usb 1-1: SerialNumber: syz [ 298.978726][ T9] usb 1-1: config 0 descriptor?? [ 299.031378][ T633] Bluetooth: hci0: Frame reassembly failed (-84) [ 299.031767][ T5422] FAULT_INJECTION: forcing a failure. [ 299.031767][ T5422] name failslab, interval 1, probability 0, space 0, times 0 [ 299.050519][ T5422] CPU: 0 UID: 0 PID: 5422 Comm: syz.4.1521 Not tainted syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 299.050553][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.050565][ T5422] Call Trace: [ 299.050572][ T5422] [ 299.050580][ T5422] __dump_stack+0x21/0x30 [ 299.050608][ T5422] dump_stack_lvl+0x140/0x1c0 [ 299.050628][ T5422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.050651][ T5422] dump_stack+0x19/0x20 [ 299.050669][ T5422] should_fail_ex+0x3d7/0x530 [ 299.050689][ T5422] should_failslab+0xac/0x100 [ 299.050713][ T5422] kmem_cache_alloc_node_noprof+0x45/0x420 [ 299.050733][ T5422] ? selinux_perf_event_alloc+0x110/0x110 [ 299.050751][ T5422] ? __alloc_skb+0x108/0x370 [ 299.050773][ T5422] __alloc_skb+0x108/0x370 [ 299.050794][ T5422] create_monitor_ctrl_open+0x15d/0x8c0 [ 299.050814][ T5422] ? selinux_capable+0x38/0x50 [ 299.050837][ T5422] ? bpf_lsm_capable+0xd/0x20 [ 299.050858][ T5422] ? hci_sock_gen_cookie+0x120/0x120 [ 299.050878][ T5422] ? ns_capable+0x90/0xf0 [ 299.050901][ T5422] hci_sock_ioctl+0x3b8/0x9e0 [ 299.050922][ T5422] sock_do_ioctl+0x118/0x330 [ 299.050942][ T5422] ? sock_show_fdinfo+0xd0/0xd0 [ 299.050960][ T5422] ? sched_clock_noinstr+0xd/0x30 [ 299.050980][ T5422] ? sched_clock+0x44/0x60 [ 299.051001][ T5422] ? sched_clock_cpu+0x75/0x400 [ 299.051024][ T5422] sock_ioctl+0x5b5/0x7f0 [ 299.051042][ T5422] ? __cfi_sock_ioctl+0x10/0x10 [ 299.051061][ T5422] ? __fget_files+0x2c5/0x340 [ 299.051086][ T5422] ? bpf_lsm_file_ioctl+0xd/0x20 [ 299.051103][ T5422] ? security_file_ioctl+0x3e/0x110 [ 299.051122][ T5422] ? __cfi_sock_ioctl+0x10/0x10 [ 299.051140][ T5422] __se_sys_ioctl+0x135/0x1b0 [ 299.051165][ T5422] __x64_sys_ioctl+0x7f/0xa0 [ 299.051189][ T5422] x64_sys_call+0x1878/0x2ee0 [ 299.051228][ T5422] do_syscall_64+0x57/0xf0 [ 299.051243][ T5422] ? clear_bhb_loop+0x50/0xa0 [ 299.051260][ T5422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 299.051284][ T5422] RIP: 0033:0x7f9c6139c629 [ 299.051300][ T5422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.051315][ T5422] RSP: 002b:00007f9c62326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.051338][ T5422] RAX: ffffffffffffffda RBX: 00007f9c61615fa0 RCX: 00007f9c6139c629 [ 299.051351][ T5422] RDX: 0000200000000100 RSI: 00000000400448c9 RDI: 0000000000000005 [ 299.051364][ T5422] RBP: 00007f9c62326090 R08: 0000000000000000 R09: 0000000000000000 [ 299.051376][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.051387][ T5422] R13: 00007f9c61616038 R14: 00007f9c61615fa0 R15: 00007ffe32f75e58 [ 299.051403][ T5422] [ 299.051432][ T36] audit: type=1326 audit(1788780856.543:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.2.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83d19c629 code=0x7fc00000 [ 299.080435][ T1058] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 299.190172][ T9] usb 1-1: bad CDC descriptors [ 299.352470][ T9] usb 1-1: USB disconnect, device number 57 [ 299.360078][ T1058] usb 6-1: Using ep0 maxpacket: 16 [ 299.366187][ T1058] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.376986][ T1058] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.387555][ T1058] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.396867][ T1058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.406174][ T1058] usb 6-1: Product: syz [ 299.410619][ T1058] usb 6-1: Manufacturer: syz [ 299.410815][ T629] Bluetooth: hci1: Frame reassembly failed (-84) [ 299.415247][ T1058] usb 6-1: SerialNumber: syz [ 299.629720][ T1058] usb 6-1: 0:2 : does not exist [ 299.636589][ T1058] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 299.648663][ T1058] usb 6-1: USB disconnect, device number 65 [ 299.657182][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 299.765589][ T5427] veth1_to_hsr: entered promiscuous mode [ 299.775801][ T5427] veth1_to_hsr: left promiscuous mode [ 299.786958][ T36] audit: type=1400 audit(1788780857.273:2359): avc: denied { setattr } for pid=5431 comm="syz.0.1524" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 301.070023][ T571] Bluetooth: hci0: command 0x1003 tx timeout [ 301.070023][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 301.410152][ T5449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=5449 comm=syz.4.1531 [ 301.429962][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 301.440513][ T36] audit: type=1400 audit(1788780858.933:2360): avc: denied { create } for pid=5453 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 301.470198][ T586] Bluetooth: hci1: command 0x1003 tx timeout [ 301.471854][ T5456] VFS: Mount too revealing [ 301.476252][ T574] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 301.579962][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 301.586254][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.597181][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.608046][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 301.617359][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 301.625748][ T9] usb 6-1: Product: syz [ 301.629989][ T9] usb 6-1: Manufacturer: syz [ 301.636862][ T9] hub 6-1:4.0: USB hub found [ 301.739996][ T412] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 301.789954][ T54] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 301.808056][ T633] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.836949][ T9] hub 6-1:4.0: 5 ports detected [ 301.842137][ T9] hub 6-1:4.0: insufficient power available to use all downstream ports [ 301.869988][ T412] usb 3-1: device descriptor read/64, error -71 [ 302.120133][ T412] usb 3-1: device descriptor read/64, error -71 [ 302.239605][ T9] hub 6-1:4.0: set hub depth failed [ 302.251249][ T9] usb 6-1: USB disconnect, device number 66 [ 302.359967][ T412] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 302.489965][ T412] usb 3-1: device descriptor read/64, error -71 [ 302.729974][ T412] usb 3-1: device descriptor read/64, error -71 [ 302.840081][ T412] usb usb3-port1: attempt power cycle [ 302.922857][ T36] audit: type=1326 audit(1788780860.413:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.1541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6139c629 code=0x0 [ 303.000050][ T1065] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 303.151336][ T1065] usb 6-1: unable to get BOS descriptor or descriptor too short [ 303.159717][ T1065] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 303.168702][ T1065] usb 6-1: config 1 has no interface number 1 [ 303.174869][ T1065] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 303.187696][ T412] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 303.196649][ T1065] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.205771][ T1065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.213870][ T1065] usb 6-1: Product: syz [ 303.218090][ T1065] usb 6-1: Manufacturer: syz [ 303.222740][ T1065] usb 6-1: SerialNumber: syz [ 303.228449][ T412] usb 3-1: device descriptor read/8, error -71 [ 303.360941][ T412] usb 3-1: device descriptor read/8, error -71 [ 303.438229][ T1065] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 303.446175][ T1065] usb 6-1: found format II with max.bitrate = 26774, frame size=65535 [ 303.454439][ T1065] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 303.462317][ T1065] usb 6-1: found format II with max.bitrate = 26774, frame size=65535 [ 303.474839][ T1065] usb 6-1: USB disconnect, device number 67 [ 303.485566][ T2849] udevd[2849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.600023][ T412] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 303.620972][ T412] usb 3-1: device descriptor read/8, error -71 [ 303.750977][ T412] usb 3-1: device descriptor read/8, error -71 [ 303.860090][ T412] usb usb3-port1: unable to enumerate USB device [ 303.870042][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.947691][ T629] Bluetooth: hci0: Frame reassembly failed (-84) [ 303.999957][ T1065] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 304.150004][ T1065] usb 5-1: Using ep0 maxpacket: 32 [ 304.156259][ T1065] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 304.164778][ T1065] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 304.173573][ T1065] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 304.182587][ T1065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.192278][ T1065] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.201986][ T1065] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.215016][ T1065] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.224082][ T1065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.232126][ T412] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 304.240570][ T1065] usb 5-1: config 0 descriptor?? [ 304.389959][ T412] usb 1-1: Using ep0 maxpacket: 8 [ 304.396362][ T412] usb 1-1: unable to get BOS descriptor or descriptor too short [ 304.404752][ T412] usb 1-1: config 4 has an invalid interface number: 207 but max is 0 [ 304.412992][ T412] usb 1-1: config 4 has no interface number 0 [ 304.419084][ T412] usb 1-1: config 4 interface 207 has no altsetting 0 [ 304.427813][ T412] usb 1-1: New USB device found, idVendor=067b, idProduct=25a1, bcdDevice=f6.38 [ 304.436993][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.445006][ T412] usb 1-1: Product: syz [ 304.449441][ T412] usb 1-1: Manufacturer: syz [ 304.454194][ T1065] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 116 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 304.465031][ T412] usb 1-1: SerialNumber: syz [ 304.471189][ T1065] usb 5-1: USB disconnect, device number 116 [ 304.480028][ T1065] usblp0: removed [ 304.879976][ T466] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 304.909970][ T1058] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 305.029958][ T466] usb 5-1: Using ep0 maxpacket: 32 [ 305.036185][ T466] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 305.044645][ T466] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 305.053347][ T466] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 305.062342][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 305.072060][ T466] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 305.081748][ T466] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 305.094820][ T466] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 305.103896][ T466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.112278][ T1058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.123360][ T1058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.133369][ T466] usb 5-1: config 0 descriptor?? [ 305.138416][ T1058] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 305.147486][ T1058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.156870][ T1058] usb 3-1: config 0 descriptor?? [ 305.356612][ T466] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 305.570345][ T633] Bluetooth: hci1: Frame reassembly failed (-84) [ 305.572772][ T1058] usbhid 3-1:0.0: can't add hid device: -71 [ 305.582724][ T1058] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 305.591700][ T1058] usb 3-1: USB disconnect, device number 37 [ 305.759937][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.768500][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.777181][ T1058] usb 5-1: USB disconnect, device number 117 [ 305.784192][ T1058] usblp0: removed [ 305.949956][ T586] Bluetooth: hci0: command 0x1003 tx timeout [ 305.949969][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.559973][ T1058] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 306.709960][ T1058] usb 5-1: Using ep0 maxpacket: 32 [ 306.716194][ T1058] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.727148][ T1058] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.737936][ T1058] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 306.747123][ T1058] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 306.755492][ T1058] usb 5-1: Product: syz [ 306.759668][ T1058] usb 5-1: Manufacturer: syz [ 306.767140][ T1058] hub 5-1:4.0: USB hub found [ 306.897398][ T412] plusb 1-1:4.207: probe with driver plusb failed with error -22 [ 306.911539][ T412] usb 1-1: USB disconnect, device number 58 [ 306.966506][ T1058] hub 5-1:4.0: 5 ports detected [ 306.971622][ T1058] hub 5-1:4.0: insufficient power available to use all downstream ports [ 307.210004][ T412] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 307.250147][ T629] Bluetooth: hci0: Frame reassembly failed (-84) [ 307.256793][ T5508] FAULT_INJECTION: forcing a failure. [ 307.256793][ T5508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.269960][ T5508] CPU: 1 UID: 0 PID: 5508 Comm: syz.5.1551 Not tainted syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 307.269989][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.270001][ T5508] Call Trace: [ 307.270010][ T5508] [ 307.270017][ T5508] __dump_stack+0x21/0x30 [ 307.270052][ T5508] dump_stack_lvl+0x140/0x1c0 [ 307.270072][ T5508] ? __cfi_dump_stack_lvl+0x10/0x10 [ 307.270094][ T5508] ? check_stack_object+0x12b/0x150 [ 307.270115][ T5508] dump_stack+0x19/0x20 [ 307.270134][ T5508] should_fail_ex+0x3d7/0x530 [ 307.270153][ T5508] should_fail+0xf/0x20 [ 307.270169][ T5508] should_fail_usercopy+0x1e/0x30 [ 307.270189][ T5508] _copy_to_user+0x24/0xa0 [ 307.270210][ T5508] simple_read_from_buffer+0xed/0x160 [ 307.270236][ T5508] proc_fail_nth_read+0x1aa/0x220 [ 307.270254][ T5508] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 307.270272][ T5508] ? bpf_lsm_file_permission+0xd/0x20 [ 307.270288][ T5508] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 307.270304][ T5508] vfs_read+0x289/0xcb0 [ 307.270324][ T5508] ? sock_show_fdinfo+0xd0/0xd0 [ 307.270344][ T5508] ? __cfi_vfs_read+0x10/0x10 [ 307.270362][ T5508] ? __kasan_check_write+0x18/0x20 [ 307.270381][ T5508] ? mutex_lock+0x97/0x1d0 [ 307.270402][ T5508] ? __cfi_mutex_lock+0x10/0x10 [ 307.270421][ T5508] ? __fget_files+0x2c5/0x340 [ 307.270445][ T5508] ksys_read+0x145/0x260 [ 307.270469][ T5508] ? __cfi_ksys_read+0x10/0x10 [ 307.270490][ T5508] ? __kasan_check_read+0x15/0x20 [ 307.270509][ T5508] __x64_sys_read+0x7f/0x90 [ 307.270529][ T5508] x64_sys_call+0x2638/0x2ee0 [ 307.270551][ T5508] do_syscall_64+0x57/0xf0 [ 307.270568][ T5508] ? clear_bhb_loop+0x50/0xa0 [ 307.270585][ T5508] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 307.270610][ T5508] RIP: 0033:0x7f1dfb75cece [ 307.270629][ T5508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.270644][ T5508] RSP: 002b:00007f1dfc674fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.270670][ T5508] RAX: ffffffffffffffda RBX: 00007f1dfc6756c0 RCX: 00007f1dfb75cece [ 307.270684][ T5508] RDX: 000000000000000f RSI: 00007f1dfc6750a0 RDI: 0000000000000004 [ 307.270696][ T5508] RBP: 00007f1dfc675090 R08: 0000000000000000 R09: 0000000000000000 [ 307.270709][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.270720][ T5508] R13: 00007f1dfba16038 R14: 00007f1dfba15fa0 R15: 00007ffee535a0f8 [ 307.270736][ T5508] [ 307.481131][ T412] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 307.486880][ T1058] hub 5-1:4.0: set hub depth failed [ 307.496364][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.506269][ T1058] usb 5-1: USB disconnect, device number 118 [ 307.525450][ T412] usb 1-1: config 0 descriptor?? [ 307.629945][ T574] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 307.629968][ T586] Bluetooth: hci1: command 0x1003 tx timeout [ 307.758817][ T412] elecom 0003:056E:010C.0056: hidraw1: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.0-1/input0 [ 307.958340][ T412] usb 1-1: USB disconnect, device number 59 [ 308.009963][ T1065] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 308.041734][ T629] Bluetooth: hci1: Frame reassembly failed (-84) [ 308.161056][ T1065] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 308.171889][ T1065] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 308.184809][ T1065] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.191440][ T1065] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 308.200521][ T1065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.209079][ T1065] usb 3-1: config 0 descriptor?? [ 308.492868][ T36] audit: type=1400 audit(1788780865.983:2362): avc: denied { listen } for pid=5523 comm="syz.0.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 308.616639][ T1065] wacom 0003:056A:0065.0057: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 308.626828][ T1065] wacom 0003:056A:0065.0057: hidraw1: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.2-1/input0 [ 308.638815][ T1065] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0065.0057/input/input68 [ 308.817275][ T1065] usb 3-1: USB disconnect, device number 38 [ 309.305097][ T36] audit: type=1400 audit(1788780866.793:2363): avc: denied { nlmsg_write } for pid=5536 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 309.309989][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 309.325932][ T586] Bluetooth: hci0: command 0x1003 tx timeout [ 309.338344][ T36] audit: type=1400 audit(1788780866.793:2364): avc: denied { audit_write } for pid=5536 comm="syz.0.1560" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 309.370718][ T36] audit: type=1107 audit(1788780866.793:2365): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 309.385671][ T36] audit: type=1400 audit(1788780866.863:2366): avc: denied { validate_trans } for pid=5540 comm="syz.5.1562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 309.620022][ T1065] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 309.649965][ T466] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 309.769945][ T1065] usb 3-1: Using ep0 maxpacket: 32 [ 309.776221][ T1065] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.787222][ T1065] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.798845][ T1065] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.807978][ T1065] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 309.809971][ T466] usb 6-1: Using ep0 maxpacket: 16 [ 309.816378][ T1065] usb 3-1: Product: syz [ 309.824180][ T466] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 309.825670][ T1065] usb 3-1: Manufacturer: syz [ 309.834947][ T466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.843033][ T1065] hub 3-1:4.0: USB hub found [ 309.847459][ T466] usb 6-1: Product: syz [ 309.856003][ T466] usb 6-1: Manufacturer: syz [ 309.860681][ T466] usb 6-1: SerialNumber: syz [ 309.868272][ T466] r8152-cfgselector 6-1: Unknown version 0x0000 [ 309.874628][ T466] r8152-cfgselector 6-1: config 0 descriptor?? [ 310.043916][ T1065] hub 3-1:4.0: 5 ports detected [ 310.049081][ T1065] hub 3-1:4.0: insufficient power available to use all downstream ports [ 310.083541][ T5545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.092112][ T5545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.100478][ T466] r8152-cfgselector 6-1: Needed 1 retries to read version [ 310.107669][ T466] r8152-cfgselector 6-1: Unknown version 0x60b0 [ 310.110017][ T574] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 310.114275][ T466] r8152-cfgselector 6-1: bad CDC descriptors [ 310.120031][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 310.308076][ T466] r8152-cfgselector 6-1: USB disconnect, device number 68 [ 310.445168][ T1065] hub 3-1:4.0: set hub depth failed [ 310.453796][ T1065] usb 3-1: USB disconnect, device number 39 [ 310.819027][ T36] audit: type=1400 audit(1788780868.303:2367): avc: denied { remount } for pid=5560 comm="syz.5.1570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 310.980890][ T36] audit: type=1400 audit(1788780868.473:2368): avc: denied { getopt } for pid=5565 comm="syz.0.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.989992][ T1065] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 311.069982][ T466] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 311.159983][ T1065] usb 5-1: Using ep0 maxpacket: 32 [ 311.166276][ T1065] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 311.177239][ T1065] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 311.190215][ T1065] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.197129][ T1065] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 311.209980][ T466] usb 6-1: device descriptor read/64, error -71 [ 311.219951][ T1065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.240176][ T1065] usb 5-1: config 0 descriptor?? [ 311.309970][ T1058] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 311.450265][ T466] usb 6-1: device descriptor read/64, error -71 [ 311.451968][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.459991][ T1058] usb 3-1: Using ep0 maxpacket: 16 [ 311.465251][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.479245][ T1058] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 311.487730][ T1058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.497913][ T1058] usb 3-1: config 1 has no interface number 0 [ 311.504041][ T1058] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.517164][ T1058] usb 3-1: config 1 interface 105 has no altsetting 0 [ 311.522595][ T5559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1462272 (2924544 ns) > initial count (192 ns). Using initial count to start timer. [ 311.525828][ T1058] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 311.542676][ T5559] kvm: pic: non byte write [ 311.550136][ T1058] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 311.562543][ T1058] usb 3-1: Product: syz [ 311.566717][ T1058] usb 3-1: Manufacturer: syz [ 311.571332][ T1058] usb 3-1: SerialNumber: syz [ 311.690017][ T466] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 311.779058][ T1058] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 311.793980][ T1065] usbhid 5-1:0.0: can't add hid device: -71 [ 311.800072][ T1065] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 311.809275][ T1065] usb 5-1: USB disconnect, device number 119 [ 311.819951][ T466] usb 6-1: device descriptor read/64, error -71 [ 311.981646][ T377] usb 3-1: USB disconnect, device number 40 [ 312.060043][ T466] usb 6-1: device descriptor read/64, error -71 [ 312.170047][ T466] usb usb6-port1: attempt power cycle [ 312.509999][ T466] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 312.530917][ T466] usb 6-1: device descriptor read/8, error -71 [ 312.660917][ T466] usb 6-1: device descriptor read/8, error -71 [ 312.729976][ T1064] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 312.881018][ T1064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.891999][ T1064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.901772][ T1064] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 312.909976][ T466] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 312.911580][ T1064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.927280][ T1064] usb 3-1: config 0 descriptor?? [ 312.940981][ T466] usb 6-1: device descriptor read/8, error -71 [ 313.070947][ T466] usb 6-1: device descriptor read/8, error -71 [ 313.134596][ T5589] overlayfs: workdir and upperdir must be separate subtrees [ 313.180068][ T466] usb usb6-port1: unable to enumerate USB device [ 313.309979][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.309990][ T574] Bluetooth: hci0: command 0x1003 tx timeout [ 313.343019][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.351659][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.361248][ T1064] logitech-djreceiver 0003:046D:C71F.0058: unknown main item tag 0x7 [ 313.370422][ T1064] logitech-djreceiver 0003:046D:C71F.0058: hidraw1: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 313.429969][ T412] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 313.562857][ T466] usb 3-1: USB disconnect, device number 41 [ 313.570687][ T1065] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 313.579967][ T412] usb 5-1: Using ep0 maxpacket: 32 [ 313.586188][ T412] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.597154][ T412] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.607968][ T412] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.617051][ T412] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 313.625454][ T412] usb 5-1: Product: syz [ 313.629606][ T412] usb 5-1: Manufacturer: syz [ 313.636533][ T412] hub 5-1:4.0: USB hub found [ 313.719973][ T1065] usb 1-1: Using ep0 maxpacket: 8 [ 313.726093][ T1065] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.739071][ T1065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 313.745712][ T1065] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 313.754836][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.763512][ T1065] usb 1-1: config 0 descriptor?? [ 313.837247][ T412] hub 5-1:4.0: 5 ports detected [ 313.842454][ T412] hub 5-1:4.0: insufficient power available to use all downstream ports [ 314.170985][ T1065] logitech-hidpp-device 0003:046D:C086.0059: collection stack underflow [ 314.179463][ T1065] logitech-hidpp-device 0003:046D:C086.0059: item 0 1 0 12 parsing failed [ 314.188205][ T1065] logitech-hidpp-device 0003:046D:C086.0059: hidpp_probe:parse failed [ 314.196628][ T1065] logitech-hidpp-device 0003:046D:C086.0059: probe with driver logitech-hidpp-device failed with error -22 [ 314.224967][ T36] audit: type=1400 audit(1788780871.713:2369): avc: denied { link } for pid=5612 comm="syz.2.1588" name="#1c" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 314.226263][ T5613] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 314.249391][ T36] audit: type=1400 audit(1788780871.713:2370): avc: denied { rename } for pid=5612 comm="syz.2.1588" name="#1d" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 314.256276][ T412] hub 5-1:4.0: set hub depth failed [ 314.289408][ T412] usb 5-1: USB disconnect, device number 120 [ 314.372431][ T1065] usb 1-1: USB disconnect, device number 60 [ 314.437069][ T5617] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 314.447636][ T36] audit: type=1400 audit(1788780871.933:2371): avc: denied { relabelto } for pid=5616 comm="syz.5.1590" name="file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 314.475475][ T36] audit: type=1400 audit(1788780871.933:2372): avc: denied { associate } for pid=5616 comm="syz.5.1590" name="file0" dev="tmpfs" ino=766 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 314.570140][ T377] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 314.699989][ T466] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 314.720944][ T377] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.731969][ T377] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 314.742602][ T377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.749204][ T377] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 314.758399][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.773601][ T377] usb 3-1: config 0 descriptor?? [ 314.778887][ T5615] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.802963][ T36] audit: type=1400 audit(1788780872.293:2373): avc: denied { mounton } for pid=5625 comm="syz.4.1594" path="/239/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 314.803033][ T5626] overlayfs: failed to resolve 'obj_type=': -2 [ 314.849949][ T466] usb 6-1: Using ep0 maxpacket: 32 [ 314.856203][ T466] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 314.864598][ T466] usb 6-1: config 0 has no interface number 0 [ 314.870942][ T466] usb 6-1: config 0 interface 184 has no altsetting 0 [ 314.879205][ T466] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 314.888532][ T466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.897164][ T466] usb 6-1: Product: syz [ 314.901581][ T466] usb 6-1: Manufacturer: syz [ 314.906198][ T466] usb 6-1: SerialNumber: syz [ 314.916027][ T466] usb 6-1: config 0 descriptor?? [ 314.930429][ T466] smsc75xx v1.0.0 [ 315.132604][ T36] audit: type=1400 audit(1788780872.623:2374): avc: denied { accept } for pid=5633 comm="syz.4.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.187998][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.196516][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.205388][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 315.211926][ T377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 315.222679][ T377] usb 3-1: USB disconnect, device number 42 [ 315.932503][ T466] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 315.943385][ T466] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 315.952762][ T466] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 315.963615][ T377] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 315.971276][ T466] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 315.980984][ T466] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 315.991274][ T466] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 316.000881][ T466] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 316.010159][ T466] usb 6-1: USB disconnect, device number 73 [ 316.030671][ T1065] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 316.079969][ T427] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 316.149969][ T377] usb 5-1: Invalid ep0 maxpacket: 9 [ 316.189957][ T1065] usb 1-1: Using ep0 maxpacket: 32 [ 316.196388][ T1065] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.207382][ T1065] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.218233][ T1065] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 316.227320][ T1065] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 316.235715][ T1065] usb 1-1: Product: syz [ 316.239870][ T1065] usb 1-1: Manufacturer: syz [ 316.245501][ T427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.255815][ T427] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 316.265011][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.273705][ T1065] hub 1-1:4.0: USB hub found [ 316.278943][ T427] usb 3-1: config 0 descriptor?? [ 316.284872][ T427] usb 3-1: bad CDC descriptors [ 316.289957][ T377] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 316.439950][ T377] usb 5-1: Invalid ep0 maxpacket: 9 [ 316.449966][ T377] usb usb5-port1: attempt power cycle [ 316.474366][ T1065] hub 1-1:4.0: 5 ports detected [ 316.479507][ T1065] hub 1-1:4.0: insufficient power available to use all downstream ports [ 316.486126][ T466] usb 3-1: USB disconnect, device number 43 [ 316.709948][ T1058] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 316.789953][ T377] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 316.810312][ T377] usb 5-1: Invalid ep0 maxpacket: 9 [ 316.859954][ T1058] usb 6-1: Using ep0 maxpacket: 32 [ 316.866144][ T1058] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.878969][ T1058] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 316.882096][ T1065] hub 1-1:4.0: set hub depth failed [ 316.888105][ T1058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.896812][ T1065] usb 1-1: USB disconnect, device number 61 [ 316.910810][ T1058] usb 6-1: config 0 descriptor?? [ 316.959940][ T377] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 316.980279][ T377] usb 5-1: Invalid ep0 maxpacket: 9 [ 316.985632][ T377] usb usb5-port1: unable to enumerate USB device [ 317.003699][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.012723][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.239990][ T427] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 317.319375][ T1058] samsung 0003:0419:0600.005A: hidraw1: USB HID v2.fd Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0 [ 317.389963][ T427] usb 3-1: Using ep0 maxpacket: 16 [ 317.400992][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.413777][ T427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.423566][ T427] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.436593][ T427] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 317.445663][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.454315][ T427] usb 3-1: config 0 descriptor?? [ 317.521279][ T1058] usb 6-1: USB disconnect, device number 74 [ 317.649959][ T412] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 317.661687][ T427] usbhid 3-1:0.0: can't add hid device: -71 [ 317.667694][ T427] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 317.676390][ T427] usb 3-1: USB disconnect, device number 44 [ 317.801038][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.812156][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.821935][ T412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.834954][ T412] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.844080][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.852919][ T412] usb 1-1: config 0 descriptor?? [ 317.858864][ T412] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 318.059620][ T412] usbhid 1-1:0.0: can't add hid device: -71 [ 318.066723][ T412] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 318.075584][ T412] usb 1-1: USB disconnect, device number 62 [ 318.170354][ T5671] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 318.198427][ T36] audit: type=1400 audit(1788780875.683:2375): avc: denied { remount } for pid=5673 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 318.489964][ T1058] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 318.619967][ T427] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 318.640930][ T1058] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 318.649086][ T1058] usb 3-1: config 0 has no interface number 0 [ 318.655242][ T1058] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 318.667453][ T1058] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 318.676552][ T1058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.684578][ T1058] usb 3-1: Product: syz [ 318.688735][ T1058] usb 3-1: Manufacturer: syz [ 318.693353][ T1058] usb 3-1: SerialNumber: syz [ 318.698492][ T1058] usb 3-1: config 0 descriptor?? [ 318.703728][ T5682] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 318.711460][ T1058] ums-karma 3-1:0.46: USB Mass Storage device detected [ 318.743826][ T629] Bluetooth: hci0: Frame reassembly failed (-84) [ 318.744242][ T5704] netlink: 'syz.4.1618': attribute type 17 has an invalid length. [ 318.761128][ T1058] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 318.769940][ T427] usb 6-1: Using ep0 maxpacket: 32 [ 318.776664][ T427] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.787661][ T427] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.798580][ T427] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 318.807700][ T427] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 318.816130][ T427] usb 6-1: Product: syz [ 318.820320][ T427] usb 6-1: Manufacturer: syz [ 318.827450][ T427] hub 6-1:4.0: USB hub found [ 318.889971][ T412] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 318.911780][ T1058] usb 3-1: USB disconnect, device number 45 [ 319.027309][ T427] hub 6-1:4.0: 5 ports detected [ 319.032469][ T427] hub 6-1:4.0: insufficient power available to use all downstream ports [ 319.040844][ T412] usb 1-1: Using ep0 maxpacket: 8 [ 319.046938][ T412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.056743][ T412] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 319.065798][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.074717][ T412] usb 1-1: config 0 descriptor?? [ 319.129972][ T1065] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 319.279948][ T1065] usb 5-1: Using ep0 maxpacket: 32 [ 319.287166][ T1065] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 319.295353][ T1065] usb 5-1: config 0 has no interface number 0 [ 319.302809][ T1065] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 319.312334][ T1065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.320371][ T1065] usb 5-1: Product: syz [ 319.324576][ T1065] usb 5-1: Manufacturer: syz [ 319.329161][ T1065] usb 5-1: SerialNumber: syz [ 319.334827][ T1065] usb 5-1: config 0 descriptor?? [ 319.340592][ T1065] smsc95xx v2.0.0 [ 319.344265][ T1065] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 319.354355][ T1065] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 319.428884][ T427] hub 6-1:4.0: set hub depth failed [ 319.441533][ T427] usb 6-1: USB disconnect, device number 75 [ 319.487623][ T412] kye 0003:0458:5013.005B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 319.500227][ T412] kye 0003:0458:5013.005B: unknown main item tag 0x2 [ 319.508874][ T412] kye 0003:0458:5013.005B: hidraw1: USB HID vff.fe Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 319.520212][ T412] kye 0003:0458:5013.005B: tablet-enabling feature report not found [ 319.528288][ T412] kye 0003:0458:5013.005B: tablet enabling failed [ 319.543857][ T1058] usb 5-1: USB disconnect, device number 125 [ 319.562378][ T5716] tipc: Enabling of bearer rejected, failed to enable media [ 319.688534][ T427] usb 1-1: USB disconnect, device number 63 [ 319.809960][ T377] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 319.970890][ T377] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.980692][ T377] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.987290][ T377] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 319.996331][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.004897][ T377] usb 3-1: config 0 descriptor?? [ 320.179980][ T427] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 320.211395][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.219992][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.229834][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 320.235873][ T377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 320.244652][ T377] usb 3-1: USB disconnect, device number 46 [ 320.341078][ T427] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 320.349352][ T427] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.359505][ T427] usb 6-1: config 0 has no interface number 0 [ 320.365626][ T427] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 320.374721][ T427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.383423][ T427] usb 6-1: config 0 descriptor?? [ 320.389217][ T427] usb 6-1: bad CDC descriptors [ 320.439985][ T412] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 320.590080][ T412] usb 1-1: Using ep0 maxpacket: 16 [ 320.598887][ T412] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 320.608030][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.616046][ T412] usb 1-1: Product: syz [ 320.620294][ T412] usb 1-1: Manufacturer: syz [ 320.624924][ T412] usb 1-1: SerialNumber: syz [ 320.630265][ T412] usb 1-1: config 0 descriptor?? [ 320.636328][ T412] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 320.644249][ T412] usb 1-1: Detected FT232B [ 320.749993][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.749993][ T574] Bluetooth: hci0: command 0x1003 tx timeout [ 320.835939][ T412] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 320.843743][ T412] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 320.851529][ T412] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 320.860566][ T412] usb 1-1: USB disconnect, device number 64 [ 320.867245][ T412] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 320.876803][ T412] ftdi_sio 1-1:0.0: device disconnected [ 320.979977][ T427] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 321.102174][ T377] usb 6-1: USB disconnect, device number 76 [ 321.129983][ T427] usb 3-1: Using ep0 maxpacket: 16 [ 321.136283][ T427] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.149185][ T427] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.155841][ T427] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 321.164944][ T427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.173610][ T427] usb 3-1: config 0 descriptor?? [ 321.449985][ T377] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 321.581593][ T427] uclogic 0003:5543:0005.005C: item fetching failed at offset 5/8 [ 321.589603][ T427] uclogic 0003:5543:0005.005C: parse failed [ 321.595614][ T427] uclogic 0003:5543:0005.005C: probe with driver uclogic failed with error -22 [ 321.609947][ T377] usb 6-1: Using ep0 maxpacket: 32 [ 321.609966][ T412] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 321.616444][ T377] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 321.634105][ T377] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.640736][ T377] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 321.649764][ T377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.658319][ T377] usb 6-1: config 0 descriptor?? [ 321.771272][ T412] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.779652][ T412] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 321.788386][ T412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.790881][ T466] usb 3-1: USB disconnect, device number 47 [ 321.798542][ T412] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.814682][ T412] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.819945][ T1058] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 321.823772][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.839361][ T412] usb 1-1: Product: syz [ 321.843532][ T412] usb 1-1: Manufacturer: syz [ 321.848118][ T412] usb 1-1: SerialNumber: syz [ 321.979975][ T1058] usb 5-1: Using ep0 maxpacket: 32 [ 321.986170][ T1058] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.997059][ T1058] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.007900][ T1058] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.016995][ T1058] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 322.025346][ T1058] usb 5-1: Product: syz [ 322.029509][ T1058] usb 5-1: Manufacturer: syz [ 322.036650][ T1058] hub 5-1:4.0: USB hub found [ 322.056756][ T412] usb 1-1: 0:2 : does not exist [ 322.064412][ T412] usb 1-1: USB disconnect, device number 65 [ 322.072135][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 322.236492][ T1058] hub 5-1:4.0: 5 ports detected [ 322.241639][ T1058] hub 5-1:4.0: insufficient power available to use all downstream ports [ 322.295014][ T377] magicmouse 0003:05AC:0265.005D: unknown main item tag 0x0 [ 322.302441][ T377] magicmouse 0003:05AC:0265.005D: unknown main item tag 0x0 [ 322.309768][ T377] magicmouse 0003:05AC:0265.005D: unknown main item tag 0x0 [ 322.318064][ T377] magicmouse 0003:05AC:0265.005D: hidraw1: USB HID v0.06 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 322.358925][ T5752] netlink: 'syz.2.1635': attribute type 9 has an invalid length. [ 322.532516][ T412] usb 6-1: USB disconnect, device number 77 [ 322.638011][ T1058] hub 5-1:4.0: set hub depth failed [ 322.645444][ T1058] usb 5-1: USB disconnect, device number 126 [ 322.729949][ T466] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 322.809971][ T427] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 322.880944][ T466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.891891][ T466] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.900967][ T466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.909544][ T466] usb 3-1: config 0 descriptor?? [ 322.959953][ T427] usb 1-1: Using ep0 maxpacket: 32 [ 322.966235][ T427] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 322.974491][ T427] usb 1-1: config 0 has no interface number 0 [ 322.980619][ T427] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 322.990741][ T427] usb 1-1: config 0 interface 196 has no altsetting 0 [ 322.998854][ T427] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 323.007971][ T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.015979][ T427] usb 1-1: Product: syz [ 323.020208][ T427] usb 1-1: Manufacturer: syz [ 323.024791][ T427] usb 1-1: SerialNumber: syz [ 323.030130][ T427] usb 1-1: config 0 descriptor?? [ 323.035365][ T5756] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 323.316341][ T466] keytouch 0003:0926:3333.005E: fixing up Keytouch IEC report descriptor [ 323.326142][ T466] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.005E/input/input71 [ 323.393981][ T466] keytouch 0003:0926:3333.005E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 323.405500][ T1065] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 323.446794][ T427] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 323.455839][ T427] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 323.561091][ T1065] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.572104][ T1065] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.583668][ T36] audit: type=1400 audit(1788780881.073:2376): avc: denied { read } for pid=5762 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 323.600971][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1640'. [ 323.605756][ T1065] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.615143][ T5764] tipc: Started in network mode [ 323.621649][ T1065] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 323.626394][ T5764] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 323.644328][ T1065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.644492][ T5764] tipc: Enabled bearer , priority 10 [ 323.654933][ T427] usb 1-1: USB disconnect, device number 66 [ 323.665353][ T1065] usb 5-1: config 0 descriptor?? [ 323.825629][ T633] Bluetooth: hci0: Frame reassembly failed (-84) [ 323.827921][ T377] usb 3-1: USB disconnect, device number 48 [ 323.832636][ T633] Bluetooth: hci0: Frame reassembly failed (-84) Stopping sshd: [ 323.940014][ T466] usb 6-1: new high-speed USB device number 78 using dummy_hcd stopped /usr/sbin/sshd (pid 201) [ 323.953949][ T36] audit: type=1400 audit(1788780881.443:2377): avc: denied { read write } for pid=2654 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 OK [ 323.982191][ T1065] usbhid 5-1:0.0: can't add hid device: -71 [ 323.988492][ T1065] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 323.988727][ T36] audit: type=1400 audit(1788780881.443:2378): avc: denied { open } for pid=2654 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.006456][ T1065] usb 5-1: USB disconnect, device number 127 [ 324.023816][ T36] audit: type=1400 audit(1788780881.443:2379): avc: denied { ioctl } for pid=2654 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping crond: [ 324.054251][ T5777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5777 comm=syz.4.1642 stopped /usr/sbin/crond (pid 194) OK [ 324.091746][ T5783] raw_sendmsg: syz.4.1643 forgot to set AF_INET. Fix it! Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 324.131014][ T466] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 324.139774][ T466] usb 6-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config Stopping network: [ 324.159268][ T466] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.169081][ T466] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 324.178532][ T466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.197266][ T466] usb 6-1: config 0 descriptor?? [ 324.205648][ T36] audit: type=1400 audit(1788780881.683:2380): avc: denied { read write } for pid=5795 comm="ip" path="/dev/console" dev="rootfs" ino=40 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 324.304179][ T36] audit: type=1400 audit(1788780881.793:2381): avc: denied { set_context_mgr } for pid=5808 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 Stopping iptables: [ 324.325373][ T5809] rust_binder: Read failure Err(EAGAIN) in pid:1133 [ 324.325716][ T5809] netlink: 'syz.0.1647': attribute type 12 has an invalid length. [ 324.340884][ T5809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1647'. [ 324.352939][ T36] audit: type=1400 audit(1788780881.823:2382): avc: denied { read write } for pid=5812 comm="iptables" path="/dev/console" dev="rootfs" ino=40 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 324.383664][ T36] audit: type=1400 audit(1788780881.843:2383): avc: denied { search } for pid=5812 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 324.409405][ T36] audit: type=1400 audit(1788780881.843:2384): avc: denied { write } for pid=5812 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.431302][ T36] audit: type=1400 audit(1788780881.843:2385): avc: denied { add_name } for pid=5812 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.454246][ T412] usb 6-1: USB disconnect, device number 78 [ 324.460224][ T1065] usb 5-1: new high-speed USB device number 2 using dummy_hcd done [ 324.619951][ T1065] usb 5-1: Using ep0 maxpacket: 32 [ 324.629193][ T1065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 Stopping klogd: [ 324.640341][ T427] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 324.649165][ T1065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.659375][ T1065] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 324.668445][ T1065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.677229][ T1065] usb 5-1: config 0 descriptor?? OK Stopping acpid: [ 324.760000][ T1058] tipc: Node number set to 4269801494 [ 324.799975][ T427] usb 1-1: Using ep0 maxpacket: 32 [ 324.806140][ T427] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.817135][ T427] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.827965][ T427] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.837058][ T427] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 324.845491][ T427] usb 1-1: Product: syz [ 324.849690][ T427] usb 1-1: Manufacturer: syz [ 324.855623][ T427] hub 1-1:4.0: USB hub found [ 325.056406][ T427] hub 1-1:4.0: 5 ports detected [ 325.061645][ T427] hub 1-1:4.0: insufficient power available to use all downstream ports [ 325.085085][ T5788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1644'. [ 325.097728][ T1065] savu 0003:1E7D:2D5A.005F: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 325.360765][ T466] usb 5-1: USB disconnect, device number 2 [ 325.458182][ T427] hub 1-1:4.0: set hub depth failed [ 325.465164][ T427] usb 1-1: USB disconnect, device number 67 [ 325.519992][ T1058] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 325.669940][ T1058] usb 6-1: Using ep0 maxpacket: 32 [ 325.675419][ T1058] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 325.684128][ T1058] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 325.691708][ T1058] usb 6-1: can't read configurations, error -61 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only [ 325.819951][ T1058] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 325.869948][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 325.870316][ T574] Bluetooth: hci0: command 0x1003 tx timeout umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.20 closed by remote host. [ 326.141667][ T629] bridge_slave_1: left allmulticast mode [ 326.147353][ T629] bridge_slave_1: left promiscuous mode [ 326.170043][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.180199][ T629] bridge_slave_0: left allmulticast mode [ 326.185857][ T629] bridge_slave_0: left promiscuous mode [ 326.230022][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.389958][ T1058] usb 6-1: device not accepting address 80, error -71 [ 326.396910][ T1058] usb usb6-port1: attempt power cycle [ 326.406115][ T629] veth1_macvtap: left promiscuous mode [ 326.771239][ T629] bridge_slave_1: left allmulticast mode [ 326.776902][ T629] bridge_slave_1: left promiscuous mode [ 326.782531][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.790113][ T629] bridge_slave_0: left allmulticast mode [ 326.795760][ T629] bridge_slave_0: left promiscuous mode [ 326.801360][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.808889][ T629] bridge_slave_1: left allmulticast mode [ 326.814572][ T629] bridge_slave_1: left promiscuous mode [ 326.820171][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.827435][ T629] bridge_slave_0: left allmulticast mode [ 326.833087][ T629] bridge_slave_0: left promiscuous mode [ 326.838715][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.846219][ T629] bridge_slave_1: left allmulticast mode [ 326.851855][ T629] bridge_slave_1: left promiscuous mode [ 326.857428][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.864774][ T629] bridge_slave_0: left allmulticast mode [ 326.870469][ T629] bridge_slave_0: left promiscuous mode [ 326.876041][ T629] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 327.142876][ T629] tipc: Disabling bearer [ 327.148202][ T629] tipc: Left network mode [ 327.155097][ T629] veth1_macvtap: left promiscuous mode [ 327.160735][ T629] veth0_vlan: left promiscuous mode [ 327.166316][ T629] veth1_macvtap: left promiscuous mode [ 327.761973][ T629] ------------[ cut here ]------------ [ 327.767476][ T629] WARNING: CPU: 1 PID: 629 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 327.777503][ T629] Modules linked in: [ 327.781425][ T629] CPU: 1 UID: 0 PID: 629 Comm: kworker/u8:41 Not tainted syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 327.793179][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.803306][ T629] Workqueue: netns cleanup_net [ 327.808084][ T629] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 327.814078][ T629] Code: e8 a1 6b db fc 4b 83 3c 3e 00 75 19 e8 75 89 83 fc 49 81 ff f8 07 00 00 74 1b e8 67 89 83 fc 49 83 c7 08 eb c9 e8 5c 89 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 327.833720][ T629] RSP: 0018:ffffc9000f59fb90 EFLAGS: 00010293 [ 327.839794][ T629] RAX: ffffffff850412c4 RBX: ffff888125ee91c0 RCX: ffff888138ee0000 [ 327.847781][ T629] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103348000 [ 327.855781][ T629] RBP: ffffc9000f59fbb0 R08: ffffffff87d358c7 R09: 1ffffffff0fa6b18 [ 327.863782][ T629] R10: dffffc0000000000 R11: fffffbfff0fa6b19 R12: dffffc0000000000 [ 327.871777][ T629] R13: dffffc0000000000 R14: ffff888103348000 R15: 0000000000000000 [ 327.879754][ T629] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 327.888702][ T629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.895303][ T629] CR2: 00007ffd9ff30ff8 CR3: 000000010af2e000 CR4: 00000000003526b0 [ 327.903298][ T629] Call Trace: [ 327.906579][ T629] [ 327.909502][ T629] cleanup_net+0x6bd/0xc90 [ 327.913934][ T629] ? __cfi_cleanup_net+0x10/0x10 [ 327.918883][ T629] ? kick_pool+0xb9/0x550 [ 327.923230][ T629] process_scheduled_works+0x7d4/0x1020 [ 327.928796][ T629] worker_thread+0xc70/0x10b0 [ 327.933499][ T629] kthread+0x2c9/0x370 [ 327.937572][ T629] ? __cfi_worker_thread+0x10/0x10 [ 327.942695][ T629] ? __cfi_kthread+0x10/0x10 [ 327.947287][ T629] ret_from_fork+0x64/0xa0 [ 327.951725][ T629] ? __cfi_kthread+0x10/0x10 [ 327.956320][ T629] ret_from_fork_asm+0x1a/0x30 [ 327.961098][ T629] [ 327.964119][ T629] ---[ end trace 0000000000000000 ]--- [ 327.969844][ T629] ------------[ cut here ]------------ [ 327.975450][ T629] WARNING: CPU: 0 PID: 629 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 327.985598][ T629] Modules linked in: [ 327.989486][ T629] CPU: 0 UID: 0 PID: 629 Comm: kworker/u8:41 Tainted: G W syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 328.002709][ T629] Tainted: [W]=WARN [ 328.006524][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.007425][ T5859] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 328.016617][ T629] Workqueue: netns cleanup_net [ 328.023828][ T5859] ACPI: PM: Preparing to enter system sleep state S5 [ 328.027425][ T629] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 328.040198][ T629] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 20 89 83 fc 49 81 ff f8 07 00 00 74 1b e8 12 89 83 fc 49 83 c7 08 eb c5 e8 07 89 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 f7 88 83 fc 5b 41 5c 41 5e 41 [ 328.059864][ T629] RSP: 0018:ffffc9000f59fb90 EFLAGS: 00010293 [ 328.065968][ T629] RAX: ffffffff85041319 RBX: ffff888103348800 RCX: ffff888138ee0000 [ 328.073968][ T629] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103348808 [ 328.081979][ T629] RBP: ffffc9000f59fbb0 R08: ffffffff87d358c7 R09: 1ffffffff0fa6b18 [ 328.089974][ T629] R10: dffffc0000000000 R11: fffffbfff0fa6b19 R12: dffffc0000000000 [ 328.097954][ T629] R13: dffffc0000000000 R14: ffff888103348000 R15: 0000000000000008 [ 328.105963][ T629] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 328.114970][ T629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.121618][ T629] CR2: 000055ac0637e5a0 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 328.129699][ T629] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 328.137700][ T629] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 328.145700][ T629] Call Trace: [ 328.148979][ T629] [ 328.151915][ T629] cleanup_net+0x6bd/0xc90 [ 328.156347][ T629] ? __cfi_cleanup_net+0x10/0x10 [ 328.161323][ T629] ? kick_pool+0xb9/0x550 [ 328.165671][ T629] process_scheduled_works+0x7d4/0x1020 [ 328.171254][ T629] worker_thread+0xc70/0x10b0 [ 328.176041][ T629] kthread+0x2c9/0x370 [ 328.180150][ T629] ? __cfi_worker_thread+0x10/0x10 [ 328.185276][ T629] ? __cfi_kthread+0x10/0x10 [ 328.189857][ T629] ret_from_fork+0x64/0xa0 [ 328.194291][ T629] ? __cfi_kthread+0x10/0x10 [ 328.198886][ T629] ret_from_fork_asm+0x1a/0x30 [ 328.203663][ T629] [ 328.206676][ T629] ---[ end trace 0000000000000000 ]--- [ 328.212285][ T5859] kvm: exiting hardware virtualization [ 328.217786][ T5859] reboot: Power down [ 328.220880][ T629] ------------[ cut here ]------------ [ 328.227152][ T629] WARNING: CPU: 1 PID: 629 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 328.227186][ T629] Modules linked in: [ 328.227201][ T629] CPU: 1 UID: 0 PID: 629 Comm: kworker/u8:41 Tainted: G W syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 328.253768][ T629] Tainted: [W]=WARN [ 328.253777][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 serialport: VM disconnected.