last executing test programs: 7.040991846s ago: executing program 1 (id=86): r0 = socket$inet6(0xa, 0x2, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe) (async) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x31, 0xde, 0xf8, 0x10, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x78, 0x2f, 0x90, 0x2, "", [{{0x9, 0x4, 0x7d, 0x8, 0x2, 0x4a, 0x6d, 0x55, 0x7, [], [{{0x9, 0x5, 0x3, 0x2, 0x8936cfdb1cf781b6, 0xb1, 0x3, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x6, 0x9, 0xab}}]}}]}}]}}, 0x0) 6.517227443s ago: executing program 1 (id=88): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', '', [], 0xa, "eeed6e0fdcd442b63e20ba3e695c583e270fbe0ca885ba5a02d65ce3f3d023cf45c1633ae3f494f6b91997a2cad960a39e803a254cf3d30b0d2ac1fc54630cb66281b062debab2d7474f788f6ee238b4aa01e22b82d9c7ec96e9ded185906ef22ba7624361cf0700000000000000a58df4bc97f423df347ec08b6ce307b9fcc614fea64e6b27138e3e3dead55bd61b102fad96908576874485bc9276c939151a51"}, 0xa5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2e, 0x6}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x306, 0x6, 0x4, 0xff, 0xc, 0x9, 0x8, 0x8}, @extension_unit={0x11, 0x24, 0xa, 0x4, 0x1, [0x0, 0x7, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 4.453036008s ago: executing program 2 (id=97): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x1b, 0x2000fff5, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @remote}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001a80)={0x1, [{0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x252d, 0x0}, {0x2, 0x0, 0x81, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x85a, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xffff, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xdaf8, 0x0}, {0x1, 0x0, 0xbf, 0x0}, {0x3, 0x0, 0xff, 0x0}, {0x1, 0x0, 0xe2, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}]}) 4.375873721s ago: executing program 2 (id=98): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xe, 0xae6, 0xffdf]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xca8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x51}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10d}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "382d1e3ebd889e9c18a91f29a8dc786a2f3e4fd4767da223"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "47250d518d9a164df3e6e222317702f693ffa4e6b081722d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9187710b8611eddbf92268468f6014a6e57c357634a881e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x4008810) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x41}, {r4, 0x300}], 0x2, &(0x7f0000000480), &(0x7f00000004c0)={[0x2b8]}, 0x8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x6c, 0x3, {{0x27, 0x4, 0x1, 0x4, 0x9c, 0x66, 0x0, 0xa, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x3, '-'}, @rr={0x7, 0xf, 0xf6, [@rand_addr=0x64010101, @broadcast, @loopback]}, @cipso={0x86, 0x27, 0x2, [{0x1, 0x9, "5793bc03e4170d"}, {0x2, 0x8, "789ba2e4f067"}, {0x5, 0x2}, {0x0, 0xe, "5da4d01c42374718413238aa"}]}, @generic={0x88, 0x9, "0db7c8e3fa2ca7"}, @rr={0x7, 0x1f, 0x25, [@local, @rand_addr=0x64010100, @multicast1, @multicast1, @local, @rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x3, [{@private=0xa010100, 0xbe}, {@empty}]}, @lsrr={0x83, 0xf, 0xba, [@rand_addr=0x64010102, @loopback, @broadcast]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000008c0)) close(r4) mount$binderfs(&(0x7f0000000900), &(0x7f0000000940)='./binderfs\x00', &(0x7f0000000980), 0x882805, &(0x7f00000009c0)={[{@max={'max', 0x3d, 0x2}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x6862}}, {@stats}, {@stats}, {@stats}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@obj_role={'obj_role', 0x3d, 'cpuset.memory_pressure\x00'}}, {@dont_appraise}]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x12, r3, 0xc3193000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008095}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x154, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e57fee91e900e2df"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="806466ff51ac35b701aa40e6518695c2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6be4796ba5b7375b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d6fd8b22abdf8043935a9798d2c22b5ba8b0f92c09423c39"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c94ff4ec5462988110b6cdba2d64acb5be8358e1b4b988ce"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bc02930f7b207785"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="80f0d3f3dc6e6d8a454dd42bd76bd54b"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a79a2c6b856ff0cc0a08a9434e615861"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dda55217bdf5a852"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="da12b2029ce062bfa5b9c47617bf920b2d55a49d7ea62f3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c331de74349e2d90"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "45ccd379220e8a7f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1a8e1b2dea5b2f29fab9f40e5f9e2030"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "370ea47744781a18"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x9010}, 0x8000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x1, 0x2, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x2005c000}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x88, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) r10 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000001200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x20, 0x4, 0x84, 0xe}, {0x9, 0x5, 0xf, 0x2, 0x20, 0x6, 0x1, 0x7}, {0x9, 0x5, 0x4, 0x3, 0x200, 0x90, 0xb, 0x4}}}}}}]}}, 0x0) syz_usb_disconnect(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000001280), r3) sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x68, r12, 0x110, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r13 = openat$vsock(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r13, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x60, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf64}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c001}, 0x4) 4.118551659s ago: executing program 1 (id=100): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x25, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x8, 0xc2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.544932288s ago: executing program 3 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r2, 0xfffffffffffffffd, 0x1) sendfile(r2, r2, &(0x7f0000000040)=0x2ec8, 0x1) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800400, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x30}}, 0x0) 3.536954108s ago: executing program 3 (id=102): process_vm_readv(0x0, 0x0, 0x44, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x608200, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.440845071s ago: executing program 3 (id=103): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0xe18, 0x5, 0x45, 0xfe}}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909090702020005cbad092403"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r1, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x29, {0x29, 0xc, "575853592a74ce20bc6f75974c1d1f5da6c679437f5e7d1c90cb2c15b337da28fc8c423bc48244"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r4) syz_usb_control_io$uac3(r4, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x21, 0xcb, {0xcb, 0x11, "e2464054a9c15b355fb2aec521e2be2afe7999c69a34c2fa6a7a9fce56f9e1ef0cf3dbc62e7e9e9c5a46cc8dce6ff2a2ebdf0010c1fe8bcaa63906332fd373e87ade32060da65f2c3d9ba352f798c6822c17bc19db3c910bd1cb45289eb8c5842a993fff37c48a400db287b7a1b1aa02078cbe43e5628ed75c355345cca2fbaa34f3d4db624715c3c1b14b5e8ef38681a18b4aa0348503a180f7aa9a341575dece9ff032516a82ab7acb81ab41f877ddf13cdd55a548a08617706dd4aa0e6b71a569ab287fa6169290"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3, @string={0x3, 0x3, "9f"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0xe, 0xc8, "c16ff8ff7409f64facbe046df45378da45f849d2c3e1fa8c40c096981dd92804a78f17d7aa5505ce0411781814e774b35ee41b6cea47ced8e2eb56d7e3cea443e50f5e6fb66402da8763f885afdf713edd44d43d8f1f9319c9e5fc3ae5817e615c646f123067966427127d67838b847b54199bb26a7bea71a45acb8a941f7c4fc418ed63646f264fec9c26de2d31dfc2b4027ca9b5f00b747325819a55b3eeabc4e87c1b0a40a9ddbbbda66fc00cd2f6b476d7c212c3e35f43ac1f2805cf44cbb49143b81b28e6dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x81, 0x1, "16"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, 'Q'}, &(0x7f0000000240)=ANY=[@ANYBLOB="20830000009f009aa9b6d97ff8d066796b5c778cae1cf57406e99bfc4c74141abd66806a68e74e4cb6"], &(0x7f0000000540)={0x20, 0x84, 0x2, "dd1a"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "dc2cee"}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0xe18, 0x5, 0x45, 0xfe}}}}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909090702020005cbad092403"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) getpid() (async) syz_pidfd_open(r2, 0x0) (async) pidfd_getfd(r3, r1, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x29, {0x29, 0xc, "575853592a74ce20bc6f75974c1d1f5da6c679437f5e7d1c90cb2c15b337da28fc8c423bc48244"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r4) (async) syz_usb_control_io$uac3(r4, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x21, 0xcb, {0xcb, 0x11, "e2464054a9c15b355fb2aec521e2be2afe7999c69a34c2fa6a7a9fce56f9e1ef0cf3dbc62e7e9e9c5a46cc8dce6ff2a2ebdf0010c1fe8bcaa63906332fd373e87ade32060da65f2c3d9ba352f798c6822c17bc19db3c910bd1cb45289eb8c5842a993fff37c48a400db287b7a1b1aa02078cbe43e5628ed75c355345cca2fbaa34f3d4db624715c3c1b14b5e8ef38681a18b4aa0348503a180f7aa9a341575dece9ff032516a82ab7acb81ab41f877ddf13cdd55a548a08617706dd4aa0e6b71a569ab287fa6169290"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3, @string={0x3, 0x3, "9f"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0xe, 0xc8, "c16ff8ff7409f64facbe046df45378da45f849d2c3e1fa8c40c096981dd92804a78f17d7aa5505ce0411781814e774b35ee41b6cea47ced8e2eb56d7e3cea443e50f5e6fb66402da8763f885afdf713edd44d43d8f1f9319c9e5fc3ae5817e615c646f123067966427127d67838b847b54199bb26a7bea71a45acb8a941f7c4fc418ed63646f264fec9c26de2d31dfc2b4027ca9b5f00b747325819a55b3eeabc4e87c1b0a40a9ddbbbda66fc00cd2f6b476d7c212c3e35f43ac1f2805cf44cbb49143b81b28e6dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x81, 0x1, "16"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, 'Q'}, &(0x7f0000000240)=ANY=[@ANYBLOB="20830000009f009aa9b6d97ff8d066796b5c778cae1cf57406e99bfc4c74141abd66806a68e74e4cb6"], &(0x7f0000000540)={0x20, 0x84, 0x2, "dd1a"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "dc2cee"}}) (async) 2.868901169s ago: executing program 2 (id=104): syz_usb_connect$midi(0x5, 0x41, &(0x7f0000006400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x6, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x80, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x8, 0x0, [], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5f27, 0x7}], [{{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0x40, 0x7, {0x6, 0x25, 0x1, 0x2, "bf08"}}}]}}}}}]}}, &(0x7f00000065c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x9a, &(0x7f0000000140)={{0x12, 0x1, 0x9c196f63445f12b6, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "46fd84f7"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xa, 0x81, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x12}, [@mbim={0xc, 0x24, 0x1b, 0xb, 0x6f8, 0x9, 0xb, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x160}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x6, 0x16, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x46, 0x6, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0xff, 0x2, 0x10, 0x20, 0x2}, 0x4d, &(0x7f00000003c0)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x6d, 0x4, 0xe28, 0x1100, 0x8, [0xffc000, 0xff0037, 0x30, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0xae, 0x2, 0x46d8, 0x11013ac67b408299, 0x8, [0x6030, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x6, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x7, 0x10}]}, 0x1, [{0x42, &(0x7f0000000440)=@string={0x42, 0x3, "69d1ba9c8dfa9bfa75984a917644be9846fbc7ec8da685d6351eaad505e4dc5a71ee470d579b36e506ea1a6042d86c7999c59c7b081f0e1f124a761fda15c44a"}}]}) pidfd_send_signal(0xffffffffffffffff, 0x400, 0x0, 0x3) syz_usb_connect$uac3(0x3, 0xe8, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x0, 0x20, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x30, 0xb99}, [@cluster_info_segment={0x6, 0x20, 0x7, 0xb1, 0x1}, @mixer_unit={0xb, 0x24, 0x5, 0x5, 0x22, "a314c71f76a9"}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x0, 0x401, 0x4, 0x1}, @power_domain={0x9, 0x24, 0x10, 0x7, 0xfff, 0x3, 0x82}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x0, 0x51, 0x1, 0xe}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x40, 0x3, "", "babb64"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x3, 0xf6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0x2, 0x2c}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7c9, 0x7, 0x4, "eabd1e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x10, 0xff, 0x5, {0xa, 0x25, 0x25, 0x7, 0x8, 0xadf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x4, 0x8, 0xbc}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x9, 0x6, {0xa, 0x25, 0x25, 0x1, 0x1, 0x1ff}}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x5d, 0x1, 0x10, 0xfb}, 0x51, &(0x7f0000000240)={0x5, 0xf, 0x51, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0xd, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0xd8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4f66675a22e147cbb70e71fb82e46bb0"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7fffffa, 0xf00, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x24, "f7db56a40e8ca279f9ca9090330ed725"}]}, 0x1, [{0x9a, &(0x7f00000002c0)=@string={0x9a, 0x3, "28e8fb2799f79f78437505dad96bd9898957c65f54fbb4a894e1f77c6fd9e19c684bd9c064289f6e2bb78fafd44c098f16c325b80dfb68472085cb0d31f966f27b2aa6d33e16f281eb872b5cac4a668d366fb385bcfbbc21e83c4171b3a1d5e19500976ecf85a6f5eba206855f058d7fdeae189276129f5a7676da8312c9112ee30b9462965a3ee4e532f68a9a42c57af0d9f96170244b0b"}}]}) 2.82053654s ago: executing program 0 (id=106): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000180)={0xfffffffffffffffe, 0x200, 0x6, 0x1000, 0x4, 0x0, [{0x10, 0x6, 0xffffffffffffffff, '\x00', 0x4}, {0x764b, 0x1, 0x5, '\x00', 0x108}, {0x1, 0x4000000, 0x9}, {0x1, 0x8001, 0x3, '\x00', 0x3800}]}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x80) sync_file_range(r5, 0x5, 0x9, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f0000000880)={0x20, 0x12, 0xc9222ec23c9a640f, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x14e, 0x0, 0x1, [@nested={0x4, 0x77}]}, @generic="17ad583718"]}, 0x20}], 0x2}, 0x800) sendto$packet(r1, &(0x7f0000000e40)="690f5698389584ff0b8a17abfa1d2b99f7e4d40c83b05c25286bfdbb5d5d92a06c3c8d363594e8a4", 0x28, 0x20040044, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NFNL_MSG_ACCT_DEL(r0, 0x0, 0x8000) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x200400c0) 2.736443773s ago: executing program 0 (id=107): set_tid_address(&(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2c", 0x9a}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x5, 0x8, 0x6, 0x5, 0x80000000, 0xfffffffc}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) 2.622290277s ago: executing program 0 (id=108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x8000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x820080, &(0x7f0000000540)={[{@uuid_null}, {@verity_require}, {@nfs_export_off}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}], [{@fowner_gt={'fowner>', r1}}, {@smackfshat={'smackfshat', 0x3d, '}!/.J'}}, {@dont_measure}, {@appraise}, {@context={'context', 0x3d, 'system_u'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d726463612c706f72743d3078303030303030303030303030346532322c72713d3078303030303030303080af07cd303030402c72713d3078303030303030303030303030303538332c66736e616d653d5c2425402c6f626a5f747970653d73656375726974792e6361706162696c697479002c6673757569643d61656231623063632d653034362d383862312d646236612d63620031653830622c736d61636b6673666c6f6f723d6f7665726c616e746578743d73797374656d5f752c0000000000000000"]) 2.621555867s ago: executing program 0 (id=109): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000805}, 0x2000c0c4) (async) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) getdents64(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0xf8, r2, &(0x7f0000000340)=0xfffffffffffffff9, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000"], 0x0) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0xfffffffd, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x1, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000440)="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", 0xfc) (async) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 2.542005929s ago: executing program 1 (id=110): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/377, 0x179) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x0, 0x4}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x400c890) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@rnullb, 0x0, 0x0) 1.983979087s ago: executing program 3 (id=111): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="120110037fb370207205241365aa010203010902120001074356c62c204d5991e4141ed8"], 0x0) r0 = socket(0x800000000000019, 0x4, 0x7) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0xfec5) accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = eventfd2(0xa75a, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={r2}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000040)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000600)={0x0, &(0x7f0000000480)=[@nested_load_syzos={0x136, 0x78, {0x0, 0x4, [@uexit={0x0, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x2f8}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmload={0x182, 0x18}]}}, @in_dx={0x69, 0x20, {0x38e5, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xff, 0x0, 0xa0f3, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xf, 0x3, 0x5, 0x3}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x4}}], 0x158}) setsockopt$sock_int(r6, 0x1, 0x4a, &(0x7f0000001600)=0xffffffff, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.830162602s ago: executing program 0 (id=112): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9401000000402c12f600000000000000030000050841ea209f3d57211912966ba1f085a4000740000000091000170000000007000000010000c9dfbc0002801400018008000100e000000108000200ac1414bb0c00028005000100210000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb06000340000200002c00018014000300fc00000000000000000000000000000014000400ff0200000000000000000000000000012c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c0002800500010084000000140005800e0001006674702d32303030300000008000068008000200ac1e0001080002000a010101080002006401010108000100e000000134000395060002004e240000060002004e210000060002004e240000060002004ec60000060002004e230000060001004e2400001400050000000000000000000000ffff7f00000114000500fc010000000000000000000000000000180001800600034000"], 0x194}, 0x1, 0x0, 0x0, 0x4810}, 0x40080) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvfrom$inet(r1, &(0x7f0000000500)=""/164, 0xa4, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0xc4, r2, 0x108, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x41) 1.798766943s ago: executing program 0 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r2 = syz_clone(0x9400, &(0x7f0000000980)="cc3749112d3b4a18059f42fa0578fae748387e912771b18f194a99e38b2b57ca2058d9f8499387e5f8a0b908db8f655524e3e14cd4d1a597130de8636408f83014f00251664570a6dbd551851e845c72afdc635f39b5b7c6f5f64c0205d62731a5b7166fe9bca62a15911d71b9d33309da00b62a23ee592629666d23f4bb42d381927142a9ddd0af70f0ef69a2b23fbb9ae06a70a435ea2fee4d50f881fa3ad0f15e5cf070d6f72d61771a530ab728c3d9f38f6725b90f799afb", 0xba, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="87ee6a25430546a78df58add47e4b3b86ce64110a7ac9ae4f675f9a706da0989f4accdc10543f32263e83cf61742ced7baa50a7b8d992c54c32375754f9ba41fb0e53e2fa19240a1198d1064a6f3afba99bf2b67ca4dfc043d26fab3f31200844786aeba11801e9b242090f114b070c363bf85029337a1ba6d7007fbfb8f7335913f2052893105fbb18a32801a0508caa41b5904c35ceed7c64af912d38e8b46606201c516c0d0818f8a84189fd219c2b81431207802d8b27ff32f6671f33bf92bb2f38332c44605b569021e0e125b85141095") syz_open_procfs(r2, &(0x7f0000000bc0)='net/udplite\x00') r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000780), 0x2) dup3(0xffffffffffffffff, r3, 0x80000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0xb, 0xaa, &(0x7f0000000040)="61d19f3634148c090aa13f297793bfef2ac93036e8c723ae5979dfbf46a51bf0e2c189a6d05844d250e7d9282c9e36f8e1b3a4ace5b9c61474ac38657298b663c2b44cf7d1eccf3d2632c7a0aa5f14b41e6614872538c159b8beebfae016507f2f057d1d6bb36a8cf5b81b05fdc11b9c419ffaba6b2fe8e5ea1d08d7ceb79af9b9f9b1c251589b24ba1a2838baea979750c376420ec71db43adeff98a161c45349794299e7268332f58b") syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00020524edff0005240006241a0000080905810300020000000904010000020d00000904010102020def00090582199b130851a0a8da8ba473dbab13e04126af1a2ea886bb52a1dbdadf2c81e87d9c73bc70c95929c0956ebc4a688964259aad664500cc27eacce9bf36dff63bdbefec25cef2e1b0cb"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8b, 0x20, 0xd, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xf9, 0x0, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x4, 0x40, 0x4, 0x8, 0xd}, 0xc, &(0x7f0000000c00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x3, 0x1, 0xa}]}, 0x5, [{0x50, &(0x7f0000000c40)=@string={0x50, 0x3, "6d0f15216bd1933a0e2bcfd5263b0d6e1c131062ffb2158990be5a4949fd9452f8f240199d6338b5a5ee10de517851fa214506d927062afc16889108176714101bd65a01152bf775bf8e0c40a96a"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x200a}}, {0xb1, &(0x7f0000000d00)=@string={0xb1, 0x3, "0a526a8a24dfd5f056f4d8257d63f684ab12dd4d58f3ad1c48ab98fbb399aaf35748f1910b484b746ed7b9d340272ec4ddbbae921c7112023ac372f8298e90784569ec5f7b1167fa9d0ccd31ee0541d39a4216c1a5bcf0c7f9c433a3f3a4faad72e945bd6a002dca9057197c9d5209f16104c580a658a230d0a09bb0ed9ca86996cdce5b6bf5225a6b752fd12a0d52cc84f4a882b6f898f9e0671b873e23c53cd5bb2bcb6341d5fec361b97cce2531"}}, {0x98, &(0x7f0000000dc0)=@string={0x98, 0x3, "e08d6340c70d2ffb1f79c85e804dd4ce56379f733811ab430dc35612b29ad1176c155bc91c30761883322d4ed4fb196474127289190c67924c02d4b679608d56a9e391496c0fc2a608db1b1a34c11adae811040658abb4abd21c6ea7d70b6ab46b4f3a9fa672e67f5d3e1d35104764260e6dd0f585cec79fc861248de5ed82fae4153d0d92792441bbf24f398a4af1cc440bee0e0c95"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$printer(r5, &(0x7f0000001000)={0x14, &(0x7f0000000f40)={0x0, 0x24, 0x6c, {0x6c, 0xc, "dabf6863b7aa95b2a44e4cb7bbc98a89cad0eab3082744e2950a711744f40cd1e4b04db5013650bdc5f71ab94f77786fa4b68d44e3fc228af3b13546c5adaf13e70ac874142101eb568b2e5f0ad142a4cb6a6152059e6a075e3086718a88b3aee43cd4637d778b526d33"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x10, @string={0x10, 0x3, "bf68682f1cccf726f3f3ea2f4a85"}}}, &(0x7f0000001280)={0x34, &(0x7f0000001040)={0x40, 0x16, 0x26, "be2506a02a5059bc0118afe4e028ae13c068e36adc59e202ec17576bfe5fda1ed8c773acae55"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000001100)={0x20, 0x0, 0xcd, {0xcb, "b44dcff29e652798faa255eab536740560e522efa714cd78ef674f89fb751302fc7c511ead507f42d01e46af49d8fe0ded75c2fd6d6fdf55c9ba621d16c8fd40fb2ef95f18f632429d28ab5960b70cc05664c6dd5e3c49ff5065bde1d1bb62f6fb549bb3ba4fdeb13e73b8e98c93426a2713388b8137f04448e0efbed9911508564bf6c096c0e3244b07814955fdcb6d3105e9faaf892e2103047fb48e1128cc533369fa5f78ad24c3947a14b3a9bd7abc1fa75cf208e32ded8c993c8d36c49b12ee52916822bc5958d753"}}, &(0x7f0000001200)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000001240)={0x20, 0x0, 0x1, 0x5}}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) fsetxattr$security_capability(r4, &(0x7f00000008c0), &(0x7f0000000880)=@v2={0x2000000, [{0x1}, {0x1, 0x8}]}, 0x14, 0x1) syz_usb_connect$cdc_ncm(0x5, 0x1a0, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18e, 0x2, 0x1, 0x4, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d9ae5713a0"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x2, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x2, 0x4, [0x8, 0xf6e2, 0x7]}, @mdlm_detail={0xf7, 0x24, 0x13, 0x9, "33b2a0866b174212c4cdbe464c3b6978caa4090c51e94fd9fd7cfc3b11f3095e33de40d6098f5f0427dec232f2b2e2c44861037e0e44cf3ee48f87d33987666a68edcf41ded28e2ef4d1a6261f42326ec739fdbb0925bb8684357e35743867cc554f2815c66891cbe3617db6024887ecf3d96feb9aeb1bc8b8d15402cc67b2ed4e52e16a5242ce112b018da26c6c41ce0a6a7d4414c9cc77b83fb0df7ee685bf89bfb82212fb6c4665bec2c41a69c8e71b45a116a16dc05ee09710c514b025e654e165316d59ba3a03e9d57974881979d76e28946b72c1118387bacadc4d6dce82f121ca02b4d69e056570b955d6f9e334408c"}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x1, 0x9, 0x7e, 0x6, 0x3}, @obex={0x5, 0x24, 0x15, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x9, 0x81}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x6, 0xff, 0x1, 0x20, 0xf2}, 0x9e, &(0x7f00000004c0)={0x5, 0xf, 0x9e, 0x2, [@generic={0x96, 0x10, 0x9, "4620fb8b52fbe088863d4111697174eca2d0281224ddbdc062b24732e6ac900328ffc612807c068e938f51c248db43d5c02ad8680a99eaebe83788664d52745e9be83df0d299b3ec606d6fca05307d4b6df76ad758c4cfcb8e85f6180562f394a5bc745413a78d200c9005e67f316181feaee14f18624227c5b72461265ef88208b09c15979da777dfd38cd22a4f52ee69900d"}, @ptm_cap={0x3}]}, 0x5, [{0x65, &(0x7f0000000900)=ANY=[@ANYBLOB="6503288ae80b38129cefd1621f040ebe3525fc0110ba5f4263b9ca3d0f81c5bb2cf8be68da0c6042238135bf2a37e61c92f81f40849725297f3359aac81749e1752673741697d37b8964fbe240b7510b9348fed474e3b3a12cac6d00"/103]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x430}}, {0x30, &(0x7f00000006c0)=@string={0x30, 0x3, "46dda9dbb9f8205028ea464e8b4613c4e8e8f518f01bd936fd1b6721564c60a5c41442f6c30f7db9d25cdbb8fd13"}}]}) syz_usb_ep_write(r0, 0x81, 0x360f8e036fa604d7, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.672039057s ago: executing program 1 (id=114): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x9, 0x7, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0xff7f, 0x0, 0x40000042, 0xffffffff, 0xfe, "db2d416fbecfb84b5400000000000000801089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xd) 1.604719119s ago: executing program 1 (id=115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000004c0)={0x0, 0xb, 0x9e, {0x9e, 0x2, "f70fa39f030000000300000000cb4fdca0560f920d54b365c5b105000000bf6fc96439f13aa0e887cc3d222fc497e755539071192d02147ad0dee9a6d465feb07741eccc8b55b44e9d4377927affd2570d09ec54b3c5a47f3256cf7b1dfacbac74dae016d854647db18a22c0bc1aa600000000949cac35766a37a7f53ff7aca80f1dc659977646cec8e339e3c00005846800"/156}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x20, 0x28, 0x6d, {0x6d, 0x10, "55732634da23dda8633a6081d4a68b7e9a57dfa92253b6a515ed3f6ede84367b49ac34e8a324e8cccc922ba69e8209a00fa79028833297b20407b3a3197b1f3740c636ee6e878e3cb7794ac42017f73e4609e5cf1255266d3f38812758e3287ff90a720a50d9ab40814d1a"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000480)=ANY=[@ANYBLOB="00220c1d0000e2b275f46ee90e83c04511af15a23910c8190c1e9d1f88dfcf8e"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xf87}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x60, 0xc, 0xc, "3205ea94ee341b05e33afeda"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x8}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000300)={[0x80000001, 0x7, 0x20000000, 0x100000000, 0x1000, 0x4, 0x7, 0x3, 0x8, 0x5, 0x5, 0x5, 0x3, 0xc, 0x9, 0x2], 0x0, 0x200000}) 1.58387128s ago: executing program 2 (id=116): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="050300061800091c6202a0ffffffff006003000000007f141434e3177f430557655880948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x8, 0x28002) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x101ff, 0x4, 0x4000, 0x1000, &(0x7f0000010000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="0f07c40e66ba4100ecd01ac4c231cf7105b8530000000f23d80f21f835800000800f23f8b9e50b0000b800000000ba008000000f300f011bb805000000b9e3e600000f01c1c4c109e87700"}], 0xaaaaaaaaaaaab36, 0x1, 0x0, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x94b7777fd1709e3a, 0xffffffffffffffff, 0x2fde4000) signalfd(r6, &(0x7f0000000200)={[0x80000001]}, 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000040)) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100300000020670a115040000102030109022e0001011810040904000002010300060905780b20000fd702052501"], &(0x7f0000000000)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]}) 863.283233ms ago: executing program 3 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0003287000fedbdf25050000000800030000", @ANYRES16=r1, @ANYRESOCT=r1], 0x1c}}, 0x8000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0xb522f000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80202, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3462e5c1", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf25540000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x50) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x401) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000003200)='net/psched\x00') pread64(r7, &(0x7f0000003240)=""/4096, 0x1000, 0x2) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) r8 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r8, r8, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1800, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x4210, r9) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r10, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r11, 0x0, r11, 0x0, 0x2, 0x99) 108.861817ms ago: executing program 2 (id=118): read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/60, 0x3c) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x240000000, 0x200) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x529c) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2aa040, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000140)={@multicast1, @loopback, 0xffffffffffffffff, "eb292340dab16061228421bb7b59fdfe2522249120e7ebc71690f3e38cab5c98", 0x3, 0x7f, 0x2e56, 0x79d}, 0x3c) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x191002) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000001c0)=0x2) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0xc9, 0xb, 0x8, 0xd4b, "690b09a66e4c3e0c8322a876245792b87a22070594663b3f77883c87a2cb870d"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x200001, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000280)=""/94) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) r5 = syz_clone(0x80000100, &(0x7f0000000300)="56f3d120ff0193c5414f2022a3052f89c465018be105f5d7eabc10a27576afa8c3bb75ce5a9081e75295c5f240c5a5bf0400b6d2ab01d68c36c8eebb4fc385db75edbac4f9e74e0326aef5d5b664cf6c8c58572a2d892c15330691ac56b490f6c9fb4f25628c8ea901174a25280707e26ba2579748b9e3c87f741540b305eb869891fe9e40249d99df3576f9168019c4bcac18eea7230ee9093af1ba763a8abfbc869e2c610a5c2d8d97ffbad5e5dbedcbd93c6bfb4962a753cbf795cb4c3e7400a81d5f88725279e4b7cd26fb2575abe999c6d4d9fc3ad651347db7ab8ab801", 0xe0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="a3331f6b8e2548bac047b52af39fb58bc1d2cfebeb9f4c3ed2bdd8129548e94d18a1a9d004f4e1c405ccfd62e6899864287e27774e6302641b2f2543eb92d8beb79127") r6 = syz_open_dev$hiddev(&(0x7f0000000500), 0x7, 0x400400) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f0000000540)={0x3c, "23946514f4b4d8f01451fd868f8e25cda4c40fcbeccc565a726a34e2ed6c5cd9226da2fd184b715aa6dc0a1c02ca695f165478093b1699491f1f1400"}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000580)=[{r0, 0x2002}, {0xffffffffffffffff, 0x4}, {r1, 0x80e2}, {r2, 0xc0e0}, {r2, 0x41}], 0x5, &(0x7f0000000600)={r7, r8+10000000}, &(0x7f0000000640), 0x8) r9 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)="25c278d24478490b6d8ea0b51c07fc780dec9fb38e285fc8f4a3b734670e6759d0338d74d784b1f556bf0ff50f1178046c7cf054f59e03ba6b2e128eb38edb8ba0a3d1f0caf8a6047812a94ec22c8c7ce8fff1832760b648c14eab01373671ebc1b781a8565e374b7ab74fc52ce95a9a64dddd826046cda658d40c3bec78fe779abea6536de7bb27637ae8d55c13d01d8bb2dfbd4037baa7d6605bd0db8b8ae4c4d4041c452ee00e322d6c0c9a3a01ac30a7ea33169e7710108426fcee160e5feb3d88cb19e6fec33e4e76fd667da7363e5190", 0xd3, r9) clock_getres(0x3, &(0x7f0000000880)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000008c0)=""/175) accept4$inet(r4, 0x0, &(0x7f0000000980), 0x80800) preadv2(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f00000009c0)}], 0x1, 0x0, 0xf, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00'}) sched_getaffinity(r5, 0x8, &(0x7f0000000a80)) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, r9) io_setup(0x4d83, &(0x7f0000000b40)) keyctl$update(0x2, r9, &(0x7f0000000b80)="e545a572b88aa764f2a9aa9bfe75ccdb47384d52b23a26331bb53878697d32575969c3452226e244fdae8bfe33bf361001bb6386dbfd517d5761804341d8aae4a53b54a1c15799e7570d59b252411cf99082ce6bc8a2bb9016c076c2a68e7fed30ce1f7538950e49476183048680390bd2aed7fa93cdd487eecb3c49b8b41e6a01e068c5772cf0573e3ab92f089301d38f", 0x91) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000c40)={0x0, 0x3f9e868f, 0x4, 0x5, 0x2, "7da808d1a4123e5f28bb74ff9791bca9d9d84d"}) 82.085298ms ago: executing program 2 (id=119): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000100)) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r2, &(0x7f00000007c0)="5bea", 0x2, 0x8001, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_4={0x3, 0x1, 0xb, "4c2595a5"}, @global=@item_4={0x3, 0x1, 0x4, "0100"}, @global=@item_012={0x2, 0x1, 0x3, "921d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "0688c200"}, @local=@item_4={0x3, 0x2, 0x3, "000400"}, @main=@item_4={0x3, 0x0, 0x9, "85900e97"}]}}, 0x0}, 0x0) 0s ago: executing program 3 (id=120): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 32.768954][ T36] audit: type=1400 audit(1781225464.970:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.775847][ T287] cgroup: Unknown subsys name 'net' [ 32.802444][ T36] audit: type=1400 audit(1781225464.970:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.845444][ T36] audit: type=1400 audit(1781225465.010:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.846218][ T287] cgroup: Unknown subsys name 'devices' [ 32.995429][ T287] cgroup: Unknown subsys name 'hugetlb' [ 33.002702][ T287] cgroup: Unknown subsys name 'rlimit' [ 33.098670][ T36] audit: type=1400 audit(1781225465.300:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.132159][ T36] audit: type=1400 audit(1781225465.300:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.165830][ T36] audit: type=1400 audit(1781225465.300:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.189204][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.212409][ T36] audit: type=1400 audit(1781225465.420:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 33.247144][ T36] audit: type=1400 audit(1781225465.420:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.273863][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.287113][ T36] audit: type=1400 audit(1781225465.470:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.334979][ T36] audit: type=1400 audit(1781225465.470:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.319826][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.332655][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.343813][ T294] bridge_slave_0: entered allmulticast mode [ 34.351632][ T294] bridge_slave_0: entered promiscuous mode [ 34.361560][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.370634][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.379386][ T294] bridge_slave_1: entered allmulticast mode [ 34.388115][ T294] bridge_slave_1: entered promiscuous mode [ 34.496208][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.506573][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.515943][ T295] bridge_slave_0: entered allmulticast mode [ 34.524453][ T295] bridge_slave_0: entered promiscuous mode [ 34.543637][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.554238][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.565121][ T295] bridge_slave_1: entered allmulticast mode [ 34.572898][ T295] bridge_slave_1: entered promiscuous mode [ 34.586852][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.597001][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.606523][ T296] bridge_slave_0: entered allmulticast mode [ 34.614921][ T296] bridge_slave_0: entered promiscuous mode [ 34.624039][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.634614][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.643770][ T296] bridge_slave_1: entered allmulticast mode [ 34.652173][ T296] bridge_slave_1: entered promiscuous mode [ 34.741897][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.754308][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.762736][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.771054][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.805411][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.815056][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.824635][ T297] bridge_slave_0: entered allmulticast mode [ 34.833232][ T297] bridge_slave_0: entered promiscuous mode [ 34.854549][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.863989][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.874006][ T297] bridge_slave_1: entered allmulticast mode [ 34.882396][ T297] bridge_slave_1: entered promiscuous mode [ 34.965618][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.974755][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.986127][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.996040][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.022136][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.031059][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.043645][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.053717][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.079654][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.090505][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.115587][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.126961][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.185754][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.195969][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.222677][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.233895][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.276446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.285495][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.304418][ T294] veth0_vlan: entered promiscuous mode [ 35.316033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.325617][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.358496][ T295] veth0_vlan: entered promiscuous mode [ 35.378080][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.386273][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.396771][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.405379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.429477][ T295] veth1_macvtap: entered promiscuous mode [ 35.444374][ T294] veth1_macvtap: entered promiscuous mode [ 35.484871][ T296] veth0_vlan: entered promiscuous mode [ 35.501661][ T297] veth0_vlan: entered promiscuous mode [ 35.535993][ T297] veth1_macvtap: entered promiscuous mode [ 35.550217][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.569144][ T296] veth1_macvtap: entered promiscuous mode [ 35.600079][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.714880][ T318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 35.751689][ T318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=318 comm=syz.2.3 [ 35.795810][ T318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=318 comm=syz.2.3 [ 35.996518][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.122430][ T310] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 36.164715][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 36.178331][ T329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.187870][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 72, changing to 7 [ 36.206287][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 36.221063][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.231402][ T10] usb 2-1: Product: syz [ 36.237569][ T10] usb 2-1: Manufacturer: syz [ 36.244405][ T10] usb 2-1: SerialNumber: syz [ 36.251906][ T10] usb 2-1: config 0 descriptor?? [ 36.262106][ T10] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress c0 [ 36.303939][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.322877][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.338869][ T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 36.350577][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.352481][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 36.363915][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.382085][ T310] usb 3-1: config 0 descriptor?? [ 36.392008][ T329] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.408035][ T329] usb 1-1: config 0 has no interface number 0 [ 36.420443][ T329] usb 1-1: config 0 interface 184 has no altsetting 0 [ 36.432957][ T329] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.445380][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.454442][ T329] usb 1-1: Product: syz [ 36.473369][ T10] usb 2-1: USB disconnect, device number 2 [ 36.489017][ T329] usb 1-1: Manufacturer: syz [ 36.498072][ T329] usb 1-1: SerialNumber: syz [ 36.511581][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.514888][ T329] usb 1-1: config 0 descriptor?? [ 36.539661][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 36.554546][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.556498][ T329] smsc75xx v1.0.0 [ 36.566305][ T31] usb 4-1: config 0 has no interface number 0 [ 36.581240][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.598346][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.612199][ T31] usb 4-1: Product: syz [ 36.619907][ T310] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 36.629550][ T31] usb 4-1: Manufacturer: syz [ 36.635539][ T310] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 36.643663][ T31] usb 4-1: SerialNumber: syz [ 36.651285][ T310] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 36.661086][ T31] usb 4-1: config 0 descriptor?? [ 36.669258][ T310] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 36.680054][ T310] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 36.691146][ T31] smsc95xx v2.0.0 [ 36.696136][ T310] savu 0003:1E7D:2D5A.0001: unbalanced collection at end of report description [ 36.707528][ T310] savu 0003:1E7D:2D5A.0001: parse failed [ 36.714705][ T310] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22 [ 36.819598][ T310] usb 3-1: USB disconnect, device number 2 [ 36.892791][ T345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.904144][ T345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.119459][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 37.135285][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.157729][ T328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.174535][ T328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.189262][ T355] tmpfs: Invalid gid '0x00000000ffffffff' [ 37.350052][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 37.366552][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 37.369358][ T363] fuse: Bad value for 'fd' [ 37.390279][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 37.410172][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 37.422351][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 37.436904][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 37.451382][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 37.464483][ T329] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 37.479587][ T329] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 37.491350][ T329] usb 1-1: USB disconnect, device number 2 [ 37.508366][ T367] GUP no longer grows the stack in syz.2.17 (367): 200000005000-200000008000 (200000004000) [ 37.524054][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz.2.17 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 37.524091][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.524114][ T367] Call Trace: [ 37.524121][ T367] [ 37.524130][ T367] __dump_stack+0x21/0x30 [ 37.524173][ T367] dump_stack_lvl+0x140/0x1c0 [ 37.524208][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.524240][ T367] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 37.524281][ T367] dump_stack+0x19/0x20 [ 37.524310][ T367] fixup_user_fault+0x62a/0x6b0 [ 37.524340][ T367] fault_in_user_writeable+0x75/0xe0 [ 37.524370][ T367] futex_lock_pi+0x2e0/0xa80 [ 37.524390][ T367] ? __cfi_futex_lock_pi+0x10/0x10 [ 37.524411][ T367] ? __cfi_futex_wake_mark+0x10/0x10 [ 37.524434][ T367] ? futex_setup_timer+0xb4/0xd0 [ 37.524462][ T367] ? __cfi_futex_wake_mark+0x10/0x10 [ 37.524486][ T367] do_futex+0x270/0x510 [ 37.524515][ T367] ? errseq_sample+0x48/0x70 [ 37.524537][ T367] ? __cfi_do_futex+0x10/0x10 [ 37.524567][ T367] ? alloc_file_pseudo+0x191/0x1f0 [ 37.524599][ T367] __se_sys_futex+0x13c/0x320 [ 37.524638][ T367] ? __x64_sys_futex+0x110/0x110 [ 37.524670][ T367] ? __kasan_check_write+0x18/0x20 [ 37.524693][ T367] __x64_sys_futex+0xe9/0x110 [ 37.524724][ T367] x64_sys_call+0x227f/0x2ee0 [ 37.524746][ T367] do_syscall_64+0x57/0xf0 [ 37.524778][ T367] ? clear_bhb_loop+0x50/0xa0 [ 37.524801][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.524836][ T367] RIP: 0033:0x7fbf77d9ce59 [ 37.524865][ T367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.524883][ T367] RSP: 002b:00007fbf78ba5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.524915][ T367] RAX: ffffffffffffffda RBX: 00007fbf78016090 RCX: 00007fbf77d9ce59 [ 37.524937][ T367] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 37.524952][ T367] RBP: 00007fbf77e32d6f R08: 0000000000000000 R09: 0000000000000001 [ 37.524971][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.524988][ T367] R13: 00007fbf78016128 R14: 00007fbf78016090 R15: 00007fffecbe7e38 [ 37.525012][ T367] [ 37.532463][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.742930][ T370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.873846][ T370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.902482][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 37.915441][ T10] usb 2-1: config 111 has an invalid descriptor of length 0, skipping remainder of the config [ 37.932768][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.938463][ T10] usb 2-1: config 111 has 0 interfaces, different from the descriptor's value: 1 [ 37.963581][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 37.977162][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.102386][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 38.113148][ T310] usb 3-1: config 1 interface 0 has no altsetting 0 [ 38.124508][ T310] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40 [ 38.136605][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.145952][ T310] usb 3-1: Product: 變᧘鹓瘾댥㊴趫ꔗᰃⲦ⣣å¾ï©²ï¸‰ç¨½ï­£éŠ¿ã‡“뜼ã˜èŸ”㯓벂볕瑠虾á•í”¾ãµ‡áƒ•à®–幞ԃ鴡朗‬࿩쭗ﮒìŠë‚ྒྷ쿟í¨î‘¾éš¥ïœ¢å¸®Ð泘ҷ䈇兖˦螣Χ艰锶铮熸䶋玷譒쇴ⶆ硻럽㆜듋妆䆕嫇挪緧â¹äµ°ìµµã˜›à¢“䷆ᄱ⿴拇釬潋調젡幒铇뫻䤯뒽蛨䗖⎳鱪êºì°Žî³˜ç•¢ã©„飱ὣ릅 [ 38.190309][ T310] usb 3-1: Manufacturer: ᰖ冽簖뼲᰽풷✤ល晕앤㚡۞藶农㻡㪷䄺ꄒ囚ꔉê­è€µæ•¶ì¸‹áŒ²â²†é¶²í„Žï¶´ç´å±„îƒï¬Œã‚³à½Šèž‘çŽå†²á¡ï¥ëŽêµ–幰⤉윰挳ïŸë²°çºá©“炪৹î•êŸ¥ëŒ¿áº´å‰£äž®âŒ´ãš‰êš™æ¼¾æŒ—î—㰻㳜ꅨ䩕è­ï °á»ƒæ¢¹â±­ê²ë½œá—߶䥭鬔⭼賿åŸÎ [ 38.234119][ T310] usb 3-1: SerialNumber: 泎暞쓈츓٬莧æ¥ïˆˆã¶»ê¯œç—±èŽ‘胫Ἳ䛶뚘漆껬䌕ñž»¾ë€‚ê‚曇譾á«á•¯ä’‡ã”‡ï“‹î‚¸âŒ…榄뭒껓ᔯ鯨澕媻懼ë’䪶慦땲䘸粲ꇰ譣狼æƒìœŒé†¶æ¦…ߨ᫵éŒå±’ꙶ켦ëퟟ㛋鄢빽ⶀ➠湟䵖éŽå¦¤çªŠâ¢á˜æ¡¹å·Ÿâª‚쌖璹壈妤뭧町谷堮질åšè„妩ጱ젶Ô먷畦ୖ㵤燃æŸà¾„娘酾ꦀ꒡蛋쮱悛⭇ì®ï·¾â¸•Ý– [ 38.292439][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.321819][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 38.321859][ T36] audit: type=1400 audit(1781225470.530:147): avc: denied { mounton } for pid=360 comm="syz.1.15" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.444611][ T10] usb 2-1: string descriptor 0 read error: -71 [ 38.460409][ T10] usb 2-1: USB disconnect, device number 3 [ 38.462348][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 38.477405][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 38.490093][ T36] audit: type=1400 audit(1781225470.690:148): avc: denied { read write } for pid=368 comm="syz.2.18" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.493719][ T31] usb 1-1: config 179 has no interface number 0 [ 38.528817][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 38.533748][ T36] audit: type=1400 audit(1781225470.690:149): avc: denied { open } for pid=368 comm="syz.2.18" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.542838][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 38.585677][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 38.603078][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 38.621619][ T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 38.637378][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 38.652566][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.664614][ T310] usbhid 3-1:1.0: can't add hid device: -71 [ 38.673246][ T310] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 38.690557][ T310] usb 3-1: USB disconnect, device number 3 [ 38.705864][ T372] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 38.717043][ T36] audit: type=1400 audit(1781225470.930:150): avc: denied { ioctl } for pid=376 comm="syz.2.20" path="socket:[3707]" dev="sockfs" ino=3707 ioctlcmd=0x6e8d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.010151][ T36] audit: type=1400 audit(1781225471.210:151): avc: denied { mounton } for pid=371 comm="syz.0.19" path="/syzcgroup/cpu/syz0/cpuset.cpus" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 39.026421][ T380] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 39.083938][ T10] usb 4-1: USB disconnect, device number 2 [ 39.102396][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.142065][ T387] Zero length message leads to an empty skb [ 39.211933][ T329] usb 1-1: USB disconnect, device number 3 [ 39.212091][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 39.230504][ T329] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 39.231761][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 39.272783][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 39.285370][ T310] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 39.297757][ T310] usb 3-1: config 0 has no interface number 0 [ 39.306961][ T310] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 39.321704][ T380] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.331496][ T310] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 39.348569][ T389] can: request_module (can-proto-6) failed. [ 39.358839][ T310] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 39.359786][ T36] audit: type=1400 audit(1781225471.560:152): avc: denied { ioctl } for pid=388 comm="syz.3.24" path="socket:[4283]" dev="sockfs" ino=4283 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.372608][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.419569][ T310] usb 3-1: Product: syz [ 39.436800][ T310] usb 3-1: Manufacturer: syz [ 39.447603][ T310] usb 3-1: SerialNumber: syz [ 39.456781][ T310] usb 3-1: config 0 descriptor?? [ 39.467167][ T383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.478866][ T383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.512404][ T380] usb 2-1: Using ep0 maxpacket: 16 [ 39.520819][ T380] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 39.537296][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.552534][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.578471][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 39.600201][ T380] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 39.614592][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.638108][ T36] audit: type=1400 audit(1781225471.840:153): avc: denied { mount } for pid=397 comm="syz.3.27" name="/" dev="ramfs" ino=4022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.641378][ T380] usb 2-1: config 0 descriptor?? [ 39.690510][ T383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.701809][ T383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.745064][ T402] loop2: detected capacity change from 0 to 7 [ 39.753775][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.765778][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.777782][ T347] loop2: unable to read partition table [ 39.788401][ T402] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.799183][ T402] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.811261][ T402] loop2: unable to read partition table [ 39.818802][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.829799][ T402] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 39.841702][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.858122][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.871035][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.880684][ T347] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.919325][ T380] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0002/input/input6 [ 39.962347][ T36] audit: type=1400 audit(1781225472.150:154): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=462 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.972625][ T380] input: HID 0458:5019 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5019.0002/input/input7 [ 40.008995][ T36] audit: type=1400 audit(1781225472.150:155): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=462 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.083964][ T380] kye 0003:0458:5019.0002: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 40.104355][ T412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.124550][ T412] netlink: 'syz.0.31': attribute type 12 has an invalid length. [ 40.142914][ T415] overlayfs: failed to resolve './file1': -2 [ 40.154047][ T36] audit: type=1400 audit(1781225472.210:156): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=462 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.154078][ T380] usb 2-1: USB disconnect, device number 4 [ 40.258099][ T417] fido_id[417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 40.352346][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.367326][ T431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 40.492461][ T311] usb 4-1: device descriptor read/64, error -71 [ 40.497417][ T436] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 40.520556][ T383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.530433][ T383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.572552][ T439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.38'. [ 40.682482][ T380] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.732486][ T311] usb 4-1: device descriptor read/64, error -71 [ 40.832422][ T72] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 40.842658][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 40.853834][ T380] usb 2-1: config index 0 descriptor too short (expected 57380, got 36) [ 40.864308][ T380] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 40.876543][ T380] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 40.889584][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.905746][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.919404][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 40.938152][ T380] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 40.951242][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.963816][ T380] usb 2-1: config 0 descriptor?? [ 40.972409][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.994099][ T72] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.008659][ T72] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.021487][ T72] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29810, setting to 8 [ 41.037390][ T72] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 41.053416][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.068180][ T439] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 41.083595][ T72] hub 1-1:1.0: bad descriptor, ignoring hub [ 41.099846][ T72] hub 1-1:1.0: probe with driver hub failed with error -5 [ 41.109451][ T72] cdc_wdm 1-1:1.0: skipping garbage [ 41.115273][ T72] cdc_wdm 1-1:1.0: skipping garbage [ 41.122659][ T311] usb 4-1: device descriptor read/64, error -71 [ 41.131214][ T72] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 41.143022][ T72] cdc_wdm 1-1:1.0: Unknown control protocol [ 41.154447][ T310] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 41.170147][ T310] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 41.188088][ T310] asix 3-1:0.34: probe with driver asix failed with error -71 [ 41.204695][ T310] usb 3-1: USB disconnect, device number 4 [ 41.382456][ T311] usb 4-1: device descriptor read/64, error -71 [ 41.383122][ T72] usb 1-1: USB disconnect, device number 4 [ 41.403437][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.420888][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.430772][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.441242][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.451681][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.460526][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.470357][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.479982][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.489919][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.500921][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.510532][ T311] usb usb4-port1: attempt power cycle [ 41.518319][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.527189][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.539400][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.548019][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.561429][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.570118][ T380] konepure 0003:1E7D:2DBE.0003: unknown main item tag 0x0 [ 41.580082][ T380] konepure 0003:1E7D:2DBE.0003: unbalanced collection at end of report description [ 41.593458][ T380] konepure 0003:1E7D:2DBE.0003: parse failed [ 41.600877][ T380] konepure 0003:1E7D:2DBE.0003: probe with driver konepure failed with error -22 [ 41.619463][ T380] usb 2-1: USB disconnect, device number 5 [ 41.862419][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.894100][ T311] usb 4-1: device descriptor read/8, error -71 [ 41.972463][ T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.034190][ T311] usb 4-1: device descriptor read/8, error -71 [ 42.052435][ T72] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.132335][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 42.150669][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.163748][ T310] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 42.174681][ T310] usb 3-1: can't read configurations, error -71 [ 42.212500][ T72] usb 1-1: Using ep0 maxpacket: 8 [ 42.220757][ T72] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 42.230959][ T72] usb 1-1: config 179 has no interface number 0 [ 42.242942][ T72] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 42.261657][ T72] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 42.276327][ T72] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 42.292656][ T72] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 42.293533][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.307320][ T72] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 42.307396][ T72] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 42.335116][ T311] usb 4-1: device descriptor read/8, error -71 [ 42.343115][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.376963][ T448] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 42.473766][ T311] usb 4-1: device descriptor read/8, error -71 [ 42.592629][ T311] usb usb4-port1: unable to enumerate USB device [ 42.604771][ T72] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 42.715046][ T446] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 42.862425][ T446] usb 2-1: device descriptor read/64, error -71 [ 43.103320][ T446] usb 2-1: device descriptor read/64, error -71 [ 43.362584][ T446] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 43.433004][ T311] usb 1-1: USB disconnect, device number 5 [ 43.433166][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 43.453611][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 43.453984][ T311] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 43.532352][ T446] usb 2-1: device descriptor read/64, error -71 [ 43.602813][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.701734][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 43.701754][ T36] audit: type=1400 audit(1781225475.900:182): avc: denied { watch watch_reads } for pid=497 comm="syz.0.54" path="/8" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.742480][ T36] audit: type=1400 audit(1781225475.920:183): avc: denied { connect } for pid=497 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.771060][ T36] audit: type=1400 audit(1781225475.920:184): avc: denied { write } for pid=497 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.832990][ T446] usb 2-1: device descriptor read/64, error -71 [ 43.859196][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 43.882012][ T310] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 43.893266][ T380] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.904484][ T310] usb 4-1: can't read configurations, error -71 [ 43.942631][ T446] usb usb2-port1: attempt power cycle [ 44.042427][ T72] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.064178][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.078230][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.091130][ T380] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 44.105127][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.119712][ T380] usb 3-1: config 0 descriptor?? [ 44.222467][ T72] usb 1-1: Using ep0 maxpacket: 16 [ 44.229914][ T72] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 44.242931][ T72] usb 1-1: config 0 has no interface number 0 [ 44.252518][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.253315][ T72] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 44.282481][ T446] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 44.282481][ T72] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 44.287258][ T72] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 44.315931][ T446] usb 2-1: device descriptor read/8, error -71 [ 44.320895][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.320923][ T72] usb 1-1: Product: syz [ 44.343411][ T72] usb 1-1: Manufacturer: syz [ 44.348714][ T72] usb 1-1: SerialNumber: syz [ 44.358527][ T72] usb 1-1: config 0 descriptor?? [ 44.364992][ T501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 44.376504][ T501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 44.412518][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 44.463603][ T446] usb 2-1: device descriptor read/8, error -71 [ 44.486791][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.497982][ T310] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 44.507296][ T310] usb 4-1: can't read configurations, error -71 [ 44.515271][ T310] usb usb4-port1: attempt power cycle [ 44.544766][ T380] hid-steam 0003:28DE:1142.0004: unbalanced collection at end of report description [ 44.557563][ T380] hid-steam 0003:28DE:1142.0004: steam_probe:parse of hid interface failed [ 44.568098][ T380] hid-steam 0003:28DE:1142.0004: probe with driver hid-steam failed with error -22 [ 44.587788][ T501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 44.597778][ T501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 44.702588][ T446] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 44.734089][ T446] usb 2-1: device descriptor read/8, error -71 [ 44.763936][ T380] usb 3-1: USB disconnect, device number 7 [ 44.809363][ T72] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 44.824636][ T72] asix 1-1:0.34: probe with driver asix failed with error -61 [ 44.873821][ T446] usb 2-1: device descriptor read/8, error -71 [ 44.992539][ T446] usb usb2-port1: unable to enumerate USB device [ 45.012800][ T36] audit: type=1400 audit(1781225477.220:185): avc: denied { ioctl } for pid=511 comm="syz.3.59" path="socket:[5502]" dev="sockfs" ino=5502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.082018][ T36] audit: type=1400 audit(1781225477.280:186): avc: denied { ioctl } for pid=515 comm="syz.3.61" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.190304][ T36] audit: type=1400 audit(1781225477.390:187): avc: denied { associate } for pid=522 comm="syz.3.63" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.222886][ T36] audit: type=1400 audit(1781225477.390:188): avc: denied { write } for pid=522 comm="syz.3.63" name="pfkey" dev="proc" ino=4026532454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.309347][ T533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.320158][ T533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.602472][ T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 45.622853][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 45.632508][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.646341][ T380] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.657554][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.671656][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 45.690692][ T310] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 45.704557][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.717998][ T310] usb 4-1: config 0 descriptor?? [ 45.852381][ T380] usb 3-1: Using ep0 maxpacket: 32 [ 45.872342][ T446] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 45.915205][ T380] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.930510][ T380] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 45.940915][ T380] usb 3-1: can't read configurations, error -71 [ 45.950283][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 45.958632][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.974856][ T310] usb 4-1: USB disconnect, device number 9 [ 46.054182][ T446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.073163][ T446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.085774][ T446] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.099102][ T446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.109694][ T446] usb 2-1: config 0 descriptor?? [ 46.317803][ T538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.331714][ T538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.453811][ T546] syz.3.70 (546): /proc/543/oom_adj is deprecated, please use /proc/543/oom_score_adj instead. [ 46.546889][ T446] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 46.556065][ T446] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 46.565119][ T446] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 46.576011][ T446] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 46.585765][ T446] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 46.595161][ T446] savu 0003:1E7D:2D5A.0005: unbalanced collection at end of report description [ 46.611117][ T446] savu 0003:1E7D:2D5A.0005: parse failed [ 46.619130][ T446] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 46.702556][ T441] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.758057][ T446] usb 2-1: USB disconnect, device number 10 [ 46.816998][ T380] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.818683][ T72] usb 1-1: USB disconnect, device number 6 [ 46.844468][ T441] usb 4-1: device descriptor read/64, error -71 [ 46.853577][ T551] netlink: 'syz.0.71': attribute type 27 has an invalid length. [ 46.881530][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891423][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.944642][ T552] netlink: 'syz.0.71': attribute type 27 has an invalid length. [ 46.993745][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.993780][ T552] veth0_vlan: left promiscuous mode [ 46.994676][ T552] veth0_vlan: entered promiscuous mode [ 47.013625][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.029564][ T552] veth1_macvtap: left promiscuous mode [ 47.040371][ T380] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 47.053656][ T552] veth1_macvtap: entered promiscuous mode [ 47.058000][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.075375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.085763][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.096263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.103678][ T380] usb 3-1: config 0 descriptor?? [ 47.105959][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.125750][ T441] usb 4-1: device descriptor read/64, error -71 [ 47.342663][ T72] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 47.372530][ T441] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.482532][ T72] usb 1-1: device descriptor read/64, error -71 [ 47.512863][ T441] usb 4-1: device descriptor read/64, error -71 [ 47.532500][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.694692][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.713570][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 47.727872][ T72] usb 1-1: device descriptor read/64, error -71 [ 47.738436][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.751161][ T10] usb 2-1: config 0 descriptor?? [ 47.782409][ T441] usb 4-1: device descriptor read/64, error -71 [ 47.892492][ T441] usb usb4-port1: attempt power cycle [ 47.982522][ T72] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.122418][ T72] usb 1-1: device descriptor read/64, error -71 [ 48.165902][ T555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.179517][ T555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.251364][ T380] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 48.252484][ T441] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 48.291551][ T36] audit: type=1400 audit(1781225480.490:189): avc: denied { create } for pid=557 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.324614][ T380] usb 3-1: USB disconnect, device number 9 [ 48.335504][ T441] usb 4-1: device descriptor read/8, error -71 [ 48.368368][ T72] usb 1-1: device descriptor read/64, error -71 [ 48.368995][ T36] audit: type=1400 audit(1781225480.510:190): avc: denied { write } for pid=557 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.474105][ T441] usb 4-1: device descriptor read/8, error -71 [ 48.482557][ T72] usb usb1-port1: attempt power cycle [ 48.625998][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 48.635091][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.650454][ T10] usb 2-1: USB disconnect, device number 11 [ 48.712424][ T441] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 48.733030][ T380] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.744741][ T441] usb 4-1: device descriptor read/8, error -71 [ 48.823525][ T72] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.854231][ T72] usb 1-1: device descriptor read/8, error -71 [ 48.872403][ T380] usb 3-1: device descriptor read/64, error -71 [ 48.884079][ T441] usb 4-1: device descriptor read/8, error -71 [ 48.983922][ T72] usb 1-1: device descriptor read/8, error -71 [ 48.992632][ T441] usb usb4-port1: unable to enumerate USB device [ 49.112449][ T380] usb 3-1: device descriptor read/64, error -71 [ 49.222432][ T72] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 49.257160][ T72] usb 1-1: device descriptor read/8, error -71 [ 49.271307][ T36] audit: type=1400 audit(1781225481.470:191): avc: denied { node_bind } for pid=567 comm="syz.1.76" saddr=fe80::43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.303031][ T36] audit: type=1400 audit(1781225481.470:192): avc: denied { name_bind } for pid=567 comm="syz.1.76" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.362464][ T380] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.384281][ T36] audit: type=1400 audit(1781225481.590:193): avc: denied { sqpoll } for pid=570 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.415323][ T72] usb 1-1: device descriptor read/8, error -71 [ 49.504435][ T380] usb 3-1: device descriptor read/64, error -71 [ 49.519317][ T36] audit: type=1400 audit(1781225481.720:194): avc: denied { mount } for pid=570 comm="syz.1.77" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.551633][ T72] usb usb1-port1: unable to enumerate USB device [ 49.560846][ T36] audit: type=1400 audit(1781225481.760:195): avc: denied { create } for pid=570 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.564469][ T582] netlink: 'syz.1.77': attribute type 6 has an invalid length. [ 49.602801][ T36] audit: type=1400 audit(1781225481.780:196): avc: denied { setopt } for pid=570 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.752333][ T380] usb 3-1: device descriptor read/64, error -71 [ 49.868644][ T380] usb usb3-port1: attempt power cycle [ 49.892323][ T441] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 49.959049][ T36] audit: type=1400 audit(1781228060.164:197): avc: denied { write } for pid=594 comm="syz.0.81" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.069946][ T441] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.083310][ T441] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 50.094374][ T441] usb 4-1: can't read configurations, error -71 [ 50.212392][ T380] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.243566][ T380] usb 3-1: device descriptor read/8, error -71 [ 50.255139][ T606] overlay: Unknown parameter 'hash' [ 50.269420][ T606] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.279280][ T606] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.288261][ T72] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 50.288443][ T606] bridge0: entered allmulticast mode [ 50.311154][ T36] audit: type=1400 audit(1781228060.514:198): avc: denied { write } for pid=605 comm="syz.1.84" laddr=fe80::98f1:35ff:fe5c:cc79 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.320579][ T606] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.356476][ T606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.367275][ T606] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.377341][ T606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.386329][ T606] bridge0: entered promiscuous mode [ 50.395067][ T380] usb 3-1: device descriptor read/8, error -71 [ 50.430120][ T36] audit: type=1400 audit(1781228060.634:199): avc: denied { read } for pid=608 comm="syz.1.85" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.463606][ T36] audit: type=1400 audit(1781228060.634:200): avc: denied { open } for pid=608 comm="syz.1.85" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.504261][ T72] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 50.516250][ T72] usb 1-1: can't read configurations, error -22 [ 50.556927][ T613] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 4080 [ 50.652471][ T72] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 50.672383][ T380] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 50.703704][ T380] usb 3-1: device descriptor read/8, error -71 [ 50.814571][ T72] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 50.825907][ T72] usb 1-1: can't read configurations, error -22 [ 50.833589][ T72] usb usb1-port1: attempt power cycle [ 50.843807][ T380] usb 3-1: device descriptor read/8, error -71 [ 50.952646][ T380] usb usb3-port1: unable to enumerate USB device [ 51.162455][ T441] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.172731][ T72] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 51.204827][ T72] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 51.214613][ T72] usb 1-1: can't read configurations, error -22 [ 51.334179][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.348218][ T441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.366345][ T72] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 51.382031][ T441] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 51.382555][ T380] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.396632][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.422679][ T441] usb 4-1: config 0 descriptor?? [ 51.434237][ T72] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 51.443348][ T72] usb 1-1: can't read configurations, error -22 [ 51.453794][ T620] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 51.464099][ T72] usb usb1-port1: unable to enumerate USB device [ 51.529276][ T620] loop7: detected capacity change from 0 to 16384 [ 51.562391][ T380] usb 2-1: Using ep0 maxpacket: 32 [ 51.577491][ T380] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 51.589825][ T380] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 51.602397][ T380] usb 2-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 51.620431][ T380] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 51.634445][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.648652][ T380] usb 2-1: Product: syz [ 51.655884][ T380] usb 2-1: Manufacturer: syz [ 51.663532][ T380] usb 2-1: SerialNumber: syz [ 51.674575][ T380] usb 2-1: Fast Track Pro config OK [ 51.870274][ T441] hid-steam 0003:28DE:1142.0007: unbalanced collection at end of report description [ 51.885759][ T441] hid-steam 0003:28DE:1142.0007: steam_probe:parse of hid interface failed [ 51.901245][ T441] hid-steam 0003:28DE:1142.0007: probe with driver hid-steam failed with error -22 [ 52.013163][ T380] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 52.025557][ T380] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 52.036965][ T380] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 52.049543][ T380] usb 2-1: 0:2 : does not exist [ 52.057105][ T380] usb 2-1: unit 5 not found! [ 52.065292][ T380] usb 2-1: unit 6 not found! [ 52.078516][ T380] usb 2-1: USB disconnect, device number 12 [ 52.100048][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.100056][ T31] usb 4-1: USB disconnect, device number 15 [ 52.132321][ T446] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 52.292424][ T446] usb 3-1: Using ep0 maxpacket: 8 [ 52.303294][ T446] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 52.316634][ T446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.328547][ T446] usb 3-1: Product: syz [ 52.333872][ T446] usb 3-1: Manufacturer: syz [ 52.339605][ T446] usb 3-1: SerialNumber: syz [ 52.412408][ T380] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.556517][ T446] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 52.568900][ T446] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 52.578307][ T380] usb 2-1: Using ep0 maxpacket: 32 [ 52.587353][ T380] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.603875][ T446] usb 3-1: USB disconnect, device number 14 [ 52.618744][ T380] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 52.625254][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.639117][ T380] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 52.673809][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.685192][ T380] usb 2-1: Product: syz [ 52.693065][ T380] usb 2-1: Manufacturer: syz [ 52.700388][ T380] usb 2-1: SerialNumber: syz [ 52.915883][ T380] usb 2-1: unit 255 not found! [ 52.929050][ T380] usb 2-1: USB disconnect, device number 13 [ 52.947057][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.972458][ T72] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 53.010141][ T629] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 53.143777][ T72] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.162770][ T72] usb 4-1: not running at top speed; connect to a high speed hub [ 53.183424][ T72] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 53.202487][ T72] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.222379][ T72] usb 4-1: Product: syz [ 53.242417][ T72] usb 4-1: Manufacturer: syz [ 53.249680][ T72] usb 4-1: SerialNumber: syz [ 53.285029][ T637] tipc: Started in network mode [ 53.291816][ T637] tipc: Node identity b0a, cluster identity 4711 [ 53.301271][ T637] tipc: Node number set to 2826 [ 53.308103][ T637] tipc: Cannot configure node identity twice [ 53.470795][ T446] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 53.484695][ T627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.498451][ T627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.515940][ T72] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.528989][ T72] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 53.545421][ T72] usb 4-1: USB disconnect, device number 16 [ 53.559421][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.632391][ T441] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 53.636396][ T446] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 53.653955][ T446] usb 3-1: config 1 has no interface number 0 [ 53.663840][ T446] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 53.676825][ T446] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32 [ 53.691672][ T446] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 144, changing to 11 [ 53.709250][ T446] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 53.722704][ T446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.733269][ T446] usb 3-1: Product: syz [ 53.739048][ T446] usb 3-1: Manufacturer: syz [ 53.746294][ T446] usb 3-1: SerialNumber: syz [ 53.753913][ T642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.763489][ T642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.782346][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.794452][ T441] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 53.804900][ T441] usb 1-1: config 0 has no interface number 0 [ 53.815738][ T441] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 53.827261][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.839740][ T441] usb 1-1: Product: syz [ 53.845322][ T441] usb 1-1: Manufacturer: syz [ 53.850589][ T441] usb 1-1: SerialNumber: syz [ 53.857933][ T441] usb 1-1: config 0 descriptor?? [ 53.955022][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.968834][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 53.979871][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.990030][ T72] usb 3-1: USB disconnect, device number 15 [ 54.000543][ T31] usb 2-1: config 0 descriptor?? [ 54.093078][ T647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.103782][ T647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.117058][ T647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.130417][ T647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.142658][ T653] bridge0: entered promiscuous mode [ 54.150539][ T653] bridge0: entered allmulticast mode [ 54.151317][ T647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.170738][ T647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.234639][ T441] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 54.242534][ T441] usb 1-1: No valid video chain found. [ 54.252437][ T441] usb 1-1: USB disconnect, device number 15 [ 54.411487][ T649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.423104][ T649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.442398][ T446] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.565942][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 54.574276][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 54.585226][ T31] usb 2-1: USB disconnect, device number 14 [ 54.612410][ T446] usb 4-1: Using ep0 maxpacket: 32 [ 54.623497][ T446] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1560, setting to 1024 [ 54.638619][ T446] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.656362][ T446] usb 4-1: config 0 interface 0 has no altsetting 0 [ 54.664421][ T446] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 54.677001][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.688834][ T446] usb 4-1: config 0 descriptor?? [ 54.695207][ T655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.821237][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 54.821255][ T36] audit: type=1400 audit(1781228065.024:208): avc: denied { ioctl } for pid=663 comm="syz.0.106" path="socket:[5077]" dev="sockfs" ino=5077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.901250][ T666] capability: warning: `syz.0.107' uses deprecated v2 capabilities in a way that may be insecure [ 54.916457][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.932817][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.955815][ T668] 9pnet: Could not find request transport: rdca [ 54.979335][ T36] audit: type=1400 audit(1781228065.184:209): avc: denied { setopt } for pid=669 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.002460][ T441] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.144834][ T446] logitech 0003:046D:C293.0008: unknown main item tag 0x4 [ 55.155265][ T446] logitech 0003:046D:C293.0008: unknown main item tag 0x4 [ 55.165442][ T441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.165454][ T446] logitech 0003:046D:C293.0008: item fetching failed at offset 39/40 [ 55.179449][ T441] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 55.189099][ T446] logitech 0003:046D:C293.0008: parse failed [ 55.205018][ T441] usb 3-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 55.215539][ T446] logitech 0003:046D:C293.0008: probe with driver logitech failed with error -22 [ 55.221930][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 55.243146][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.254697][ T441] usb 3-1: Product: syz [ 55.259876][ T441] usb 3-1: Manufacturer: syz [ 55.266899][ T441] usb 3-1: SerialNumber: syz [ 55.273325][ T659] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.344459][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.356799][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.414142][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.426532][ T9] usb 1-1: config 0 has no interface number 0 [ 55.435369][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 55.446011][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 55.457862][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.467746][ T9] usb 1-1: Product: syz [ 55.474067][ T9] usb 1-1: Manufacturer: syz [ 55.479830][ T9] usb 1-1: SerialNumber: syz [ 55.488434][ T9] usb 1-1: config 0 descriptor?? [ 55.491197][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.506170][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.520748][ T441] usb 3-1: MIDIStreaming interface descriptor not found [ 55.534609][ T441] usb 3-1: USB disconnect, device number 16 [ 55.553540][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.573902][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.588679][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.590568][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.603298][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.628293][ T72] usb 4-1: USB disconnect, device number 17 [ 55.700904][ T36] audit: type=1326 audit(1781228065.904:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.0.109" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecc3f9ce59 code=0x0 [ 55.736567][ T9] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 55.751101][ T9] usb 1-1: USB disconnect, device number 16 [ 55.766960][ T683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=683 comm=syz.0.112 [ 55.786749][ T683] raw_sendmsg: syz.0.112 forgot to set AF_INET. Fix it! [ 55.798335][ T36] audit: type=1400 audit(1781228066.004:211): avc: denied { read } for pid=682 comm="syz.0.112" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.962729][ T72] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 56.122365][ T72] usb 4-1: Using ep0 maxpacket: 32 [ 56.132314][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.222420][ T446] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.228591][ T72] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.244654][ T72] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 56.256427][ T72] usb 4-1: can't read configurations, error -71 [ 56.294265][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.309149][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 56.321637][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.334108][ T9] usb 1-1: config 0 descriptor?? [ 56.342618][ T380] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 56.382405][ T446] usb 2-1: Using ep0 maxpacket: 8 [ 56.391630][ T446] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 56.413291][ T446] usb 2-1: config 0 interface 0 has no altsetting 0 [ 56.427999][ T446] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 56.443063][ T446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.455701][ T446] usb 2-1: config 0 descriptor?? [ 56.502341][ T380] usb 3-1: Using ep0 maxpacket: 32 [ 56.510287][ T380] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.522365][ T380] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.536239][ T380] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 56.553717][ T380] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.561573][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 56.575255][ T380] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 56.586157][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 56.598480][ T380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.616306][ T380] usb 3-1: Product: syz [ 56.617371][ T9] usb 1-1: USB disconnect, device number 17 [ 56.623412][ T380] usb 3-1: Manufacturer: syz [ 56.637533][ T380] usb 3-1: SerialNumber: syz [ 56.790062][ T695] Trying to write to read-only block-device rnullb0 [ 56.801437][ T36] audit: type=1400 audit(1781228067.014:212): avc: denied { block_suspend } for pid=694 comm="syz.3.117" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.855312][ T380] usb 3-1: MIDIStreaming interface descriptor not found [ 56.870005][ T446] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 56.879261][ T446] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 56.889262][ T380] usb 3-1: USB disconnect, device number 17 [ 56.898176][ T446] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 56.908764][ T446] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 56.920563][ T446] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 56.930914][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.937993][ T446] isku 0003:1E7D:3264.0009: unknown main item tag 0x0 [ 56.970127][ T446] isku 0003:1E7D:3264.0009: item fetching failed at offset 37/40 [ 56.981561][ T446] isku 0003:1E7D:3264.0009: parse failed [ 56.989771][ T446] isku 0003:1E7D:3264.0009: probe with driver isku failed with error -22 [ 57.092490][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 57.254386][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.269925][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 57.282669][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.293401][ T9] usb 1-1: config 0 descriptor?? [ 57.822341][ T72] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 57.882683][ T564] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.909321][ T685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.920712][ T685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.972323][ T72] usb 3-1: Using ep0 maxpacket: 16 [ 57.979838][ T72] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.994052][ T72] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.007430][ T72] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.024903][ T72] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.037462][ T72] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.049002][ T564] usb 4-1: Using ep0 maxpacket: 16 [ 58.057734][ T72] usb 3-1: config 0 descriptor?? [ 58.064962][ T564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.080065][ T564] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 58.093960][ T564] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 58.107234][ T564] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.127440][ T685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.138708][ T9] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 58.150164][ T564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.162706][ T685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.163806][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 58.183122][ T564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.193020][ T564] usb 4-1: SerialNumber: syz [ 58.203357][ T36] audit: type=1400 audit(2000000000.069:213): avc: denied { setattr } for pid=684 comm="syz.0.113" name="" dev="pipefs" ino=6274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.233872][ T707] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 58.243584][ T685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.244841][ T707] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 58.267643][ T564] hub 4-1:1.0: bad descriptor, ignoring hub [ 58.277878][ T564] hub 4-1:1.0: probe with driver hub failed with error -5 [ 58.292561][ T685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.421138][ C1] ------------[ cut here ]------------ [ 58.429094][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 58.440861][ C1] index 10911 is out of range for type 'const int[34]' [ 58.451093][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 58.451407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.451427][ C1] Call Trace: [ 58.451437][ C1] [ 58.451447][ C1] __dump_stack+0x21/0x30 [ 58.451495][ C1] dump_stack_lvl+0x140/0x1c0 [ 58.451555][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.451591][ C1] ? default_idle_call+0x3e/0x80 [ 58.451629][ C1] ? common_startup_64+0x13b/0x157 [ 58.451668][ C1] dump_stack+0x19/0x20 [ 58.451714][ C1] ubsan_epilogue+0xe/0x40 [ 58.451737][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 58.451780][ C1] ? __kasan_check_write+0x18/0x20 [ 58.451800][ C1] aiptek_irq+0x20cb/0x2a00 [ 58.451816][ C1] ? kcov_remote_start+0x1d3/0x3c0 [ 58.451853][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 58.451884][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 58.451909][ C1] dummy_timer+0x816/0x4300 [ 58.451950][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 58.451969][ C1] ? timerqueue_del+0xd7/0x130 [ 58.452010][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 58.452048][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 58.452076][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 58.452109][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 58.452133][ C1] ? read_tsc+0xd/0x20 [ 58.452188][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 58.452221][ C1] hrtimer_run_softirq+0x159/0x560 [ 58.452270][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 58.452308][ C1] handle_softirqs+0x1aa/0x630 [ 58.452336][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 58.452371][ C1] __irq_exit_rcu+0x47/0xb0 [ 58.452400][ C1] irq_exit_rcu+0xd/0x30 [ 58.452416][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 58.452452][ C1] [ 58.452461][ C1] [ 58.452470][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 58.452496][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 58.452529][ C1] Code: cc cc cc cc cc cc cc b8 75 7d 0b 98 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 58.452550][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 58.452567][ C1] RAX: ffff8881f6f00000 RBX: ffff888103669300 RCX: ffffffff85a89bcd [ 58.452580][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000090244 [ 58.452609][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 58.452631][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 58.452648][ C1] R13: 1ffff110206cd260 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 58.452674][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 58.452832][ C1] default_idle+0x17/0x30 [ 58.452876][ C1] arch_cpu_idle+0xd/0x20 [ 58.452907][ C1] default_idle_call+0x3e/0x80 [ 58.452942][ C1] do_idle+0x2fc/0x570 [ 58.452963][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 58.453010][ C1] ? do_idle+0x549/0x570 [ 58.453092][ C1] cpu_startup_entry+0x47/0x60 [ 58.453249][ C1] start_secondary+0x12e/0x140 [ 58.453285][ C1] common_startup_64+0x13b/0x157 [ 58.453341][ C1] [ 58.453348][ C1] ---[ end trace ]--- [ 58.531676][ T72] microsoft 0003:045E:07DA.000A: global environment stack underflow [ 58.535194][ C1] ------------[ cut here ]------------ [ 58.535210][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 58.535232][ C1] index 10912 is out of range for type 'const int[34]' [ 58.535248][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 58.535349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 58.535400][ C1] Call Trace: [ 58.535416][ C1] [ 58.535433][ C1] __dump_stack+0x21/0x30 [ 58.535556][ C1] dump_stack_lvl+0x140/0x1c0 [ 58.535682][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.535780][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 58.535936][ C1] dump_stack+0x19/0x20 [ 58.536037][ C1] ubsan_epilogue+0xe/0x40 [ 58.536094][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 58.536198][ C1] aiptek_irq+0x1f85/0x2a00 [ 58.536264][ C1] __usb_hcd_giveback_urb+0x375/0x540 [ 58.536325][ C1] usb_hcd_giveback_urb+0x11b/0x410 [ 58.536401][ C1] dummy_timer+0x816/0x4300 [ 58.536496][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 58.536569][ C1] ? timerqueue_del+0xd7/0x130 [ 58.536666][ C1] ? __hrtimer_run_queues+0x2c4/0x8e0 [ 58.536763][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 58.536935][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 58.537043][ C1] ? hrtimer_interrupt+0xf00/0xf00 [ 58.537133][ C1] ? read_tsc+0xd/0x20 [ 58.537220][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 58.537329][ C1] hrtimer_run_softirq+0x159/0x560 [ 58.537392][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 58.537536][ C1] handle_softirqs+0x1aa/0x630 [ 58.537649][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 58.537755][ C1] __irq_exit_rcu+0x47/0xb0 [ 58.537832][ C1] irq_exit_rcu+0xd/0x30 [ 58.537903][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 58.537976][ C1] [ 58.537998][ C1] [ 58.538019][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 58.538094][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 58.538173][ C1] Code: cc cc cc cc cc cc cc b8 75 7d 0b 98 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 bf 3e 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 58.538234][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 58.538298][ C1] RAX: ffff8881f6f00000 RBX: ffff888103669300 RCX: ffffffff85a89bcd [ 58.538339][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000090244 [ 58.538381][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 58.538426][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 58.538477][ C1] R13: 1ffff110206cd260 R14: dffffc0000000000 R15: ffffffff87ed4668 [ 58.538532][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 58.538648][ C1] default_idle+0x17/0x30 [ 58.538726][ C1] arch_cpu_idle+0xd/0x20 [ 58.538810][ C1] default_idle_call+0x3e/0x80 [ 58.538898][ C1] do_idle+0x2fc/0x570 [ 58.538973][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 58.539050][ C1] ? do_idle+0x549/0x570 [ 58.539115][ C1] cpu_startup_entry+0x47/0x60 [ 58.539188][ C1] start_secondary+0x12e/0x140 [ 58.539274][ C1] common_startup_64+0x13b/0x157 [ 58.539405][ C1] [ 58.539442][ C1] ---[ end trace ]--- [ 58.550240][ T72] microsoft 0003:045E:07DA.000A: item 0 4 1 11 parsing failed [ 58.596181][ T707] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 58.598733][ T72] microsoft 0003:045E:07DA.000A: parse failed [ 58.605401][ T707] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 58.609787][ T72] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 58.890258][ T380] usb 1-1: USB disconnect, device number 18 [ 58.890391][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 58.930168][ T72] usb 3-1: USB disconnect, device number 18 [ 59.045010][ T446] usb 2-1: USB disconnect, device number 15 [ 59.190474][ T564] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 59.435550][ T36] audit: type=1400 audit(2000000001.300:214): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.483018][ T36] audit: type=1400 audit(2000000001.300:215): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.512158][ T36] audit: type=1400 audit(2000000001.300:216): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=1338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.560007][ T36] audit: type=1400 audit(2000000001.300:217): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.722550][ T380] usb 4-1: USB disconnect, device number 20 [ 62.755117][ T380] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device