last executing test programs: 21.071719447s ago: executing program 0 (id=1091): lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0), 0x2, 0x2) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f240a06010904"], 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) syz_usb_connect$uac2(0x1, 0xc9, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x7, 0x50, 0xa, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x2, 0x19, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x2, 0x402, 0x1, 0x8, 0x8, 0x0, 0x10, 0x7, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7f, 0x6, 0x1, {0x8, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xfa}, @as_header={0x10, 0x24, 0x1, 0xd, 0x5, 0x3, 0x1001, 0x2, 0x4831}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2e, 0x3, 0x1, 0x1, '\\'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x8, 0x1, 0x6, 0xec}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}, @as_header={0x10, 0x24, 0x1, 0x1, 0x1, 0x0, 0x1002, 0xc, 0x5, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x440, 0x6, 0x64, 0x80, {0x8, 0x25, 0x1, 0x80, 0xc, 0x7, 0x7}}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x300, 0x2, 0x8, 0x8, 0x8, 0x6}, 0x1e, &(0x7f0000000bc0)={0x5, 0xf, 0x1e, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x8, 0x9c4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x8, 0x1, 0x4, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x9, 0x7f}]}, 0xa, [{0xd0, &(0x7f0000000c00)=@string={0xd0, 0x3, "91f652061ac9caabf5f3d1c4185c1704e5ab96afef7e6eaaca80e7df9ec6965301e3a5cb98e65b71419d9550b613ec306142b3f7ff8c4471e2352164a155784ef7bb12605ad9864205b934726f89394d525d53261a0adc608d0130f684b23002c6bb592e8abc05d2b037597d6908d3cecb3d3a0b2ceb4c68e37022f6f83429e12a783ddc38de547695d10e675d44d10ea05db57b174964483328833eac6fa31e78b0f9a754a4d756e6ae8fbc3fbbfefcedc813ae9783f94efbf5b9e9d467860a859319f6db88a68beb56591aa711"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x4001}}, {0xff, &(0x7f0000000d40)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x425}}, {0x6d, &(0x7f0000000ec0)=@string={0x6d, 0x3, "cc499fab4d2d17ce211b10498ee763c67b037d9d16c54c9d9129cadce00c89d756f43fb70ef431baf36d618a2b3ce9c8403214933ef1945cd69e2f1075f113d646cfbf530d4eb5feaabf924e190960ce25b83e74ea712949ed6cba7704435a81be9d20731475702b2c609f"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x411}}, {0x101, &(0x7f0000000f80)=@string={0x101, 0x3, "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"}}, {0x9d, &(0x7f00000010c0)=@string={0x9d, 0x3, "9fc6f6efa3b1832ce71ca50dd4130724a470829543f372097152f268fcedf9048895197260302c683ce045b0a4b909464a20f6a2064c2a312a6a74e8868362c5e490b7eb58a9b90d59f4359f7042dff0eb1caba6583cc78b9dbcc36f34a1a439f764f8cff378ebb1fd9a65f2a0b0380dc7ad100dbb1af70c47fa520c316a1a2fd143d20b988d44383da082c265c99e40bc8ad5fb176d783705689e"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x500a}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) sendto$packet(r9, &(0x7f0000000480)="af49a3abfeb49f919763fd16c03a9a9ae17db009bf4a585b8332236caaa970aca222637f2cc612740d4f3801b2c448853654893d03def56f9cf65c329d3c9622278573abc116c1cbbe956818092d875e26b2b1254cb864a0a80027e579d29876ee047221f1b0fb5ea389516be37fdc1c5f258c639e1cc37cd8e6203d1932ab79cc", 0x81, 0x80, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x1, 0x1}, 0x14) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) r11 = dup3(r2, r10, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x7, '\x00', {0xe, 0xffff, 0x9, 0x10000, 0x9, 0x3a, 0xff, 0x5, {0x2, 0x6c842c5c}, {0xb, 0x173}, {0x5, 0xc}, 0x4, 0xff, 0x7, 0x30000000, 0x9, 0x3, 0x101, 0x7, 0x7, 0x754, '\x00', 0x41f4, 0x7, 0x0, 0x4}}) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x2d, &(0x7f0000000680)={0xa78b, {{0x2, 0x4e24, @remote}}}, 0x88) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x40, 0xdddcf74db5cf748b, 0x37, {0x37, 0xd, "e75bcf47a88a34d2dd23ee24020010da0300000069cf2fa3d3d4832d0e95ce301f08dd21aa6394c59aa60200000001710300000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, r13, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000000640)={'veth1_to_hsr\x00'}) 20.818967695s ago: executing program 0 (id=1098): syz_ublk_setup_io_uring(0x5fe3, &(0x7f0000000900)={0x0, 0xa403, 0x2, 0x3, 0x36a}, &(0x7f0000000980), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@\\,!$-*J'}, {0x20, '\x00'}, {}, {0x20, '\x00'}], 0xa, "6e19c826dddb5870d7e7e225f2a34fe923bfe5256cbd98e3589037556ce9ad149c6d39d56913a2b6b679431fee1c452b1b365d5a937668c9bc1f623da537191d2972498d0da5f49b9b3208c15f453f9a92383233d483c36b"}, 0x71) syz_clone3(&(0x7f0000002040)={0x80, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20.604177262s ago: executing program 0 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x179}]}) (fail_nth: 2) 20.529478985s ago: executing program 0 (id=1102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsmount(0xffffffffffffffff, 0x1, 0x18) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x41, 0x4}, 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = memfd_secret(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000240)={0xed, 0x0, 0x8001}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400"], 0x0) dup(r3) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x753, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0xfc, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x2c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0xf3, 0xff}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x80, 0x4, 0x0, 0x20, 0x26}, 0x102, &(0x7f00000000c0)={0x5, 0xf, 0x102, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x0, 0x29}, @generic={0x1a, 0x10, 0x3, "eab70e6ee66f9017c14a905327869fc1a5ea98bce5416b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x26, 0xe713}, @generic={0xc5, 0x10, 0xb, "6fa52575b755b7d1e6a27f7d711d185b32b504a177ece8525a4f3d42b4a5a1fed4a4c3e74ba05750e3f28c9d2765ab507bab6dbcf1197893975c923b259c34c6a2a8f5a67c58c72c6ec1e52deab7a46732b597b6851eeabc685000ab95cf19cac2d92ad00117b5fc6dff5a4ab536123b030d558ff4373e443c63f5cb5a1d7c4495c3476a9e9ccd9a4ebad656a7961c2236b7e26255057581f285a417dcd0bd9bea8d8ad26479e6d898cac5ae1811a05560ef3c601337a9dfd365a24346641429de0e"}]}, 0x3, [{0x89, &(0x7f0000000200)=@string={0x89, 0x3, "39e4337374913cceef718c35d82a1f4b873fa7fef2b41564e1c1273d1efd82a0f9b623886ee9ff89d5a364be266f2864f82660e1c820082c8271ed7ff4e2625f82ecfb73007f27251ee108013598175c424ea5598b3241d2a9a499a0e3d3a3d3a30ed899ee337e8821668c62b1973d3a1c18a6df1cd2bdba95c73ee57118c441e9cfe13021b4b7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x8c, &(0x7f0000000300)=@string={0x8c, 0x3, "8e4e782221cfceb4ea50ac32b6bb3dbf04aa2dec9f3e9775fe4b97e8617af951bfc50803e4b90b003f97e33e5b53314ac3e9bcc9d1c609cacdb8a3940020e945ea49416c8e9d33e7bba9566fda00e75207dd64423a1375cba5fe373989ca22458f22077b43bf170a9b86ff6f05691f96d63119a78d1556a8570d9fe46ea4a73287a4a2b02782e3b93926"}}]}) 19.639183283s ago: executing program 0 (id=1105): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x9, 0x40, 0x8, 0x78e7}, 0x4b, [0x1, 0xfffffffa, 0x2, 0x0, 0x1, 0x853, 0x0, 0x2, 0x6, 0x81, 0x1, 0xa, 0x6, 0x2, 0x0, 0x400, 0x10001, 0x6, 0x80000000, 0x8001, 0x7, 0x116000, 0x2, 0x9, 0x1, 0x3, 0x3, 0x10001, 0x7, 0xdade, 0xffffd343, 0x40, 0x1, 0x0, 0xb, 0x0, 0x6, 0x9, 0x1, 0x3, 0x3, 0x91, 0x0, 0xcc50, 0x80, 0x8, 0x6, 0x6a2, 0x6, 0x2, 0x1, 0xfffff800, 0x7, 0x2, 0x6, 0x7, 0x2, 0x7, 0x0, 0x81, 0x8, 0x0, 0x0, 0x3], [0xbb75, 0xf6, 0x1, 0xe, 0x6, 0x5, 0x5, 0x0, 0x0, 0x9, 0x2, 0x4, 0x1, 0x80, 0xffffffff, 0x2, 0x3, 0x1, 0x8001, 0x0, 0xd82d, 0x6, 0x1, 0xedfa, 0x4, 0xda, 0x65f3ab95, 0x4, 0x1, 0x5a42273, 0xffffffff, 0x7, 0x5, 0x8, 0x7, 0x4d55, 0x1, 0x92, 0x100, 0x2, 0x4, 0x8, 0x9, 0x2, 0x5, 0x1, 0x1, 0xfffffeff, 0x3, 0x8, 0xfffffffc, 0x4, 0x7f, 0x0, 0x80, 0x53b3656b, 0xd, 0x40, 0xffffffff, 0x6, 0x3, 0x6, 0x400, 0x57], [0x2, 0x5, 0xfffffffa, 0x66f, 0x5de, 0x40, 0x264, 0x1, 0x2a00f62f, 0x6, 0x7, 0x80000001, 0x1, 0x5, 0x7, 0x8f13, 0x3ff, 0xffffffff, 0x5, 0x5, 0x6, 0x3, 0x2, 0x4, 0x6, 0x3, 0x8, 0x1, 0xfffffffd, 0xfffffffa, 0x6, 0x3ce, 0x1, 0x7, 0x5dc, 0x0, 0x5, 0x5, 0x5, 0x9b, 0x9, 0x3ff, 0x2, 0x4, 0x4, 0x6, 0x8, 0x8, 0x4, 0xe5, 0xc, 0x8, 0x9c, 0x3, 0x8, 0x7, 0xb4c, 0x38e8, 0xc9, 0x1, 0x7, 0x7, 0x5, 0x9], [0x8, 0x3, 0x7, 0x7, 0x18, 0x6e, 0x89d3, 0xba18, 0x3, 0xbfa8, 0x5, 0x327c, 0x8, 0xe, 0x4, 0x5, 0x1, 0xffff5ef0, 0x6, 0x3, 0x5, 0x0, 0x4, 0x4, 0x6, 0x4, 0x9, 0x2, 0xffffff67, 0x4, 0x8, 0x6, 0xff, 0x0, 0x10, 0x5, 0x5b3, 0x8, 0xf5, 0x6, 0x20000000, 0x1, 0x2e2, 0xda8, 0x8000, 0x3, 0xaa, 0xaf4, 0x6, 0x8, 0x19cf, 0x6, 0x8, 0x314, 0x7, 0x4, 0xbcc4, 0x7, 0x0, 0xe730, 0x1, 0x7, 0x1, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0xfffffffc, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc3c3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10e3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) 19.508094108s ago: executing program 0 (id=1106): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x7, 0x60, 0x8b, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x7, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5c, 0x2, 0x0, 0x87, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xec, 0x5, 0xd, 0x9, 0x2}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x2, 0x1002, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x24, 0x2, 0xd, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x84, 0x7}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) 8.163653749s ago: executing program 3 (id=1176): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x23184c8fbb0e826, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000001}) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x6, 0x0, 0x7, 0x1f, 0x576}, {0x1e644cd2, 0x8, 0x9, 0x8, 0x9}], 0x2, 0x28, 0x5, 0xfab}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x190) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0xfffffe8b, &(0x7f0000000180)=[{&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r2, @ANYRESDEC=r1], 0x2c}], 0x1}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.132348891s ago: executing program 3 (id=1177): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202"], 0x0) (async) syz_io_uring_setup(0x766f, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$uac3(0x2, 0xc6, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0xec, 0x90, 0x40, {0x8, 0xb, 0x2, 0x0, 0x1, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x8a89}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x7c, "9f9d", '@'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x59, 0x3, 0x7, 0xf, 'c0', "bb"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x7, 0x6, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x2, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0x9, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x7f, 0x6, {0xa, 0x25, 0x25, 0x0, 0x3, 0x758}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x46, 0x2, 0x9e, 0x2, "b1b714", "014a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x3, {0xa, 0x25, 0x25, 0x5, 0x4, 0xd0}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x5, 0xeb, 0x5b, 0xff, 0x3}, 0x6c, &(0x7f00000008c0)={0x5, 0xf, 0x6c, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xa, 0x1}, @generic={0x0, 0x10, 0xb, "ea7970bc49c4e9d860087235cbd7112040405de9bb99aea2f9827145e21f5b4702d7d1247e48a40af180168bc9f031971cd089870106c65ec39aec2eeadc33a1514a0ca15de17077b24e4780e385780dc8929d79215b"}, @generic={0x56, 0x10, 0x4, "fe114d38904a9916ea6491d2d4008620fa52033cb86e22ddfff3f94690550507f9b7d4ada28c518c79794ba9d7459ba6a82d4d713946c56008a93f0462ca0fa2add03494efb553be4c50a35fcd2c2003e2c6b6"}, @ssp_cap={0x0, 0x10, 0xa, 0x2, 0x0, 0x8, 0xff00, 0x5, [0xc000]}]}, 0x4, [{0x32, &(0x7f0000000540)=@string={0xfffffffffffffe7e, 0x3, "e962faf675abaddfb7e84eeae8009e9735459f26aed5346d8236210a46bd02dd288e1dafe091ef21db50a39c46278a5e"}}, {0xc3, &(0x7f0000000580)=@string={0xc3, 0x3, "9f6f8a1c6427732b22680808c299e007cf8589a92dfa17d34d08e55c2ebc6905470d4b52d9d95fde247eaf7cba9fc8caa7a78ae92b39872a0f81b2214d0d7b59a9f581e16cc0b27780fce3b8571df5492f5477cfc20871f3aadfda0d6dbdf124ee07d3229f1f8ef2a18b5d13ac5c06fba1f4fbedf259d387c045910e876b66751fe8d3f222b4c614c4f9873748bfbb81e04399f00c16c9ae206e93c790c483dcb9a95c4104342dedcc14c5a9328640755236d44bb1a146aa9f1bd16e37dcc09f58"}}, {0x55, &(0x7f0000000680)=@string={0x55, 0x3, "74590c345917762f45473d4a45726c46448ce80a8b0d9699e380b8e89b215d87d38ef9e92100cb849998309b495f67dc9979c705debd90385f2a01f0ea58eeb73333c6e86922057619edc2d1625dd4bcfdddc0"}}, {0x93, &(0x7f0000000700)=@string={0x93, 0x3, "a69c2dea7493868eb1b0af4a9ee551fe54263c7c96fe36c3b286f8a68fc563c5973a4d23a0b82085c1329981fdba61824616e040e9753571c59d2e5b7265133fb1840c107ef1591a99211b4312f769421161442e407130f2f6dab9a975a3286d725bd3c75daa66e01354d96d8473c23ebfce9ecae109501f76166f0992853972c15c02967d00"/145}}]}) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_connect$midi(0x6, 0x37, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x582, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25, 0x1, 0x1, 0x8c, 0x60, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0xe6, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x48, 0x27}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x7f}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xb1, 0x4, 0x1, 0x20, 0x77}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x92, &(0x7f0000000180)=@string={0x92, 0x3, "c03de48d5a9f2458cfa67651fa81c5c36476b6b54f85ac23192197d3fc3bbc50fafee856f5f12433697dce09df022a66ad594388cb4915f5fc231185adaa06acc702f42c80a4bf140752222b5fb5ab034f767352b95aa0e5afab05755478e34fe2a993ca34664ee50fdee1f4a1a94b54c235686d397d2186df7747522542fb5aceae0d9f8791408bd7709b2de75bd9e4"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3401}}, {0xa5, &(0x7f0000000280)=@string={0xa5, 0x3, "39949146aa1bc40e2db6a8de35bbd90cb87a4164abb578aea8cd1e6f7497bf60e6b107d46862266eaf5bac37aa865c48611fe89928f7288262666032afd598b8a2ec2fb4d0e28008ae4573823c85abd43948f15397c64320c10c9ff1b99cf8430d874905bb37af9f317d9e4043d3583199e1af98d54eb8a7ef1f9ab8b4bf45a78dcad14c25d1860162630c32c3409876bb17e5601e067866b91f03059d66bcd5b83ae3"}}]}) 6.696199976s ago: executing program 3 (id=1187): r0 = memfd_secret(0x80000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000002500)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000002600)={0x60, 0x1, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x800000000000, 0x0, 0x0, 0x1, 0x28}) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="87b65fba3ce4cd0b650800429b0000000709040004010300010000deffffffffcac359ffffff006c"], 0x0) 4.515934346s ago: executing program 32 (id=1106): syz_usb_connect$uac2(0x3, 0xa0, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x7, 0x60, 0x8b, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x7, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5c, 0x2, 0x0, 0x87, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xec, 0x5, 0xd, 0x9, 0x2}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x2, 0x1002, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x24, 0x2, 0xd, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x84, 0x7}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) 4.256745084s ago: executing program 2 (id=1213): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000001) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x4ea5, 0x4) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) read$snapshot(0xffffffffffffffff, &(0x7f0000000040)=""/123, 0x7b) 4.172229457s ago: executing program 2 (id=1214): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x20}}, 0x40816) (async) syz_usb_disconnect(r0) (async) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x24, 0x0, @thr={&(0x7f0000000080)="e5d87346892326270878a7d4759e5f882294fe3d38683ea0cb460ca8c89a5b1efed8e6837f90433d36330a16c167229c39a7fefe84e0e0", &(0x7f0000000100)="8a5da7b8bf35526faabd81a9f46d8f45c1a9e7387d0cdbce5d2dff27e053948d13327304f362bf691c590d85fc6a48dd11b7ee82ff3cacfa3373233e7bfd904d566e55b8db1baf769a360ebf57980c9c5cd3fe35"}}, &(0x7f0000000200)) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='mand\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f00000000c0)=0x18) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000200)={{r3, &(0x7f0000000080)='.\x00', 0x288400, &(0x7f00000000c0)={@align=0xc3f, {0x80, 0x8, 0x7, 0x2}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0x10001, 0x1, 0x8, 0xffffff80]}, 0xc4, 0x7e, &(0x7f0000000180)=""/126}) 4.160292967s ago: executing program 2 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x16}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000004) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='.]\x00', &(0x7f0000000140)=',-\x00', 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8) read$ptp(r1, &(0x7f0000000180)=""/204, 0xcc) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x48, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000002400)) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x40013, r1, 0x7ff) mprotect(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x200000f) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000002480)={{0x2, 0x0, 0x8, 0x2334}, &(0x7f0000002440)}) pwritev(r1, &(0x7f0000002700)=[{&(0x7f0000002500)="4f42cf89cd6beeeaa68e9c262994c4505646c05f9a7dd1492483ae6e7f02ed00ea26265b434bfdd2a16f7006469ffeec4f03eabcb63be9acd39bfd083e7cdf9ad7aaf3a1f2e09f1f7787a836ca47f37c38cb7174777be2092a257ca4e403186a336b737553588b1a24bf57d4be3567fce9305e44db11d5cbe191580b7bb10d65ea22fd918792cda2d5db4a394b92ebf2f1d87843cb8819e2e49ac3de382421d31cb417c8", 0xa4}, {&(0x7f00000025c0)="e5163023081a8dec7269dfbf228e46e608bbd94d0fa37be4956a8934a692ddab434314e7bdc72c059b30136e0f7ab686bd0e009e218b449f38f60e1415922f4104c32f0a3588b7fdbf710172bc366057a9383fde2b4e3c2c2d2b3efa49bd6c268fdc53d4e878cb5f4a4448c3a595ef0a950080abe15abdcac534924b8ccc245cf20186f9ed4d61a05ebe9d4e3ff716c2b424ced0696dee5ebf894a8e7eee0812536a0de4a7fccf17cf77445661bfc1dd9781c1aae344fbcafb0292fc88ad6bf02df4d563aafbe7d96d9dceea6a3d2a554d87f25f34b942040e188a", 0xdb}, {&(0x7f00000026c0)="21a2ab049d908652e378bc859ac439bb9a25f13273c1b66c5aea64a44eea0977d6602ecfad", 0x25}], 0x3, 0xa09, 0x1) close_range(r0, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000002840)={&(0x7f0000002740), 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c800) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000002880), 0x4) read$FUSE(r1, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000004900)='(.$(\x00', &(0x7f0000004940)='.]\x00', 0x0) mmap(&(0x7f0000d3f000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x86fde000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004980), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f00000049c0)={0x2, 0xb}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000004a00)={0x0, 0x1000, 0x34df4dad, 0x0, 0x10000}) wait4(r4, &(0x7f0000004a40), 0x4, &(0x7f0000004a80)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000004c40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004b80)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r7 = socket$inet(0x2, 0x6, 0xfffff24c) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000004c80)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x7, [@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x1, @private=0xa010102, @rand_addr=0x64010100, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x2c) 4.023656311s ago: executing program 2 (id=1218): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0x4, 0xf6, {0xf6, 0x23, "e37a3293cfc699392d136e90bc062992191dcee5472ab6e7851ffa39b700208426dd30547a21e2095024a26fdd4ea3a065a0ba01c0e5431331c0c246af598a8325d488c221d56c12a64452c2fbba3c3e88572819180136afdaf890c2332324f8cf294aa06637615e5bc58846f814ec11383080b726316fd9df337eb590084c3aa1e7df72fd432d433667392cb63bf2c14d429380eec407360d0cff2f7f2037984dc9faabaad457db5a7163abf0248eaa97c0cfae0308cc8ced3bec20f98725f3535d2be12b948e8668991ac0711c5b41386ed47e92fef2655f750a7e2566c3496d18b41c7f9c3c0804777ede7d7ae1a1721379ba"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x0, 0x4, 0x3e, "d336906f8d330d0ef9996d39148864702651edb1dde5c38ca211f15ac32b859a642299a3d7d974b0c499fdc497e5836c50345d5f245c0e01a78c9bf242e3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4b}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1e, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0xe}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x8000}, @ra={0x5, 0x2, 0x3}]}}}], 0x38}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2022280000002806c263258526792c3cbdeace918d0fb742374b4e88e78881ce2a52973661d67a0c55443894f06f53fb40ecef1f1910b4af715698461131b45fa632c91fc31383993329e65c22ac9b0ca383fd755a8a5b14f9d10e938a11854606003b89089febda956efacce0155d25d07ae57acbe5950c79cf0372b09ed53243e4ea32b238fcd33a32c40cbca0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.705207181s ago: executing program 3 (id=1220): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x15, 0x4, "84bd00a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x60000600) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) syz_usb_connect(0x2, 0x34e, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x3d, 0xbe, 0xc1, 0x40, 0x707, 0xee13, 0xdc5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33c, 0x2, 0x33, 0x9, 0xd0, 0x4, "", [{{0x9, 0x4, 0xd7, 0xec, 0x3, 0x6d, 0x1b, 0xd2, 0x17, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "4400d5"}, {0x5, 0x24, 0x0, 0xb81}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x40, 0x982b, 0x3d}}], [{{0x9, 0x5, 0x80, 0x1, 0x400, 0xfb, 0x9, 0x91, [@generic={0xf3, 0xd, "8aea89fbb100367104496253b26b3ca5c4db60ba8febe615699c742d76976331c5c4a9db722648ac5066de868de6785023acdb9d980d443d710437a40c359c7a1aa9ee1900a9096955e8a55e6db1fbe8a15f67f362510a315692cc71b1df1d343b20d9664bccab35aafac69253dd5adcabf98e30eb77f57a16e402cbaff488ed99dc7d1ada1869d12d426b929e13291c77105f65a6240688f3df267ad91a593e8e21302e77931eee34dfcdd9552edece78c04fe079c4470238c4e04543a9a8e389780fef50addb0409c8e97fc7e4af52fd22710fede6096aac6dd4bf4864eeeaae046071702660270dc9d0440a678348c6"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x9, 0x6, 0x73, [@generic={0x1f, 0xb, "4d5e7be11486728e1d16850d4c6fb0dee6e8c078bdb6a9e2936d65dcef"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x1, 0x240, 0x9, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}, @generic={0xdf, 0x3, "28613c3ec85a266318254b0545e534d4ca12d58206c914bfe5b1bf8de46839e759cace008a6f6fa96b7ae20bde84115d45ce2c3fa5b8bafa20f8b6d1823d60b8acced4bbdab04142ef8b90cd1a8fdecf72f547047c1efe26b374a182e9a558b5a6ea76a13ec7d4de7ad25f7b8b851ff7c92f7c2f7981789d17d1292c56d049283f064d77ac97906a8745c84db6d76de70361370f571d5a8063b0f0b1e8bd4e229825bbac8d538e879913e1f45b38cf5cb1ee11678fc33d9cc8bd1040cdd4f0873d4133e02fd3a556d25ad954e66d143f29231e57d7a560e4d29e59a087"}]}}]}}, {{0x9, 0x4, 0xc1, 0x7, 0x0, 0x86, 0x74, 0xbb, 0x6, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "4891"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfe, 0x8, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0x5}, [@mdlm_detail={0xc1, 0x24, 0x13, 0x8, "af509cafb72dc08eba29e2cc0d97540bc6b7a1e9d7630bbc8513617151820e24eb607bc5912146eca3ec7b7d04f20b8a28b166d43e722e67810be4fe91a97e677e359e599c1901ccdd72af2c11eb54ba1392194f273a849ed9e76e6bac99d0e389babd9ab1a614aaf01860359e237d6ee41cf06ce670e34b8dca867ab8b32bad091b98d02d49d0108bf5bbb0a6ceea7dd40ea9afc59d75801d4ca1c90c8fa416ddfc159323af0cee1d374d97a53492a4c47ca78644011192c6df2c5ced"}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xd2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf1}]}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x201, 0x6, 0x3, 0xf7, 0x10, 0x1}, 0x2a, &(0x7f0000000dc0)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "3663337b56824a254a81694196971168"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x73, 0xb, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x8, 0x2}]}, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) io_setup(0x7f, &(0x7f0000000100)=0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000f40)={{0x2, 0x1, 0x4, 0x81, 0x4, 0x6}, 0x207, [0x6, 0x45c2, 0x5, 0x3, 0x1, 0x313c, 0x4, 0x10, 0x7fffffff, 0xe, 0x6, 0x4, 0xe, 0x400, 0x7, 0x7, 0x4, 0x98f, 0x2, 0x4, 0x7, 0x5, 0x0, 0x9, 0x2, 0x39, 0x3, 0x9, 0x7, 0x0, 0x2, 0x93ac, 0x9, 0x10, 0x10001, 0x6, 0x2, 0x4, 0x4, 0xd, 0x4, 0xfffffffe, 0x9, 0xfa6, 0x7, 0x200, 0x6, 0xc5c4, 0x1000, 0x81, 0x7, 0x195c, 0x4, 0x4, 0x3bdf, 0x1, 0x81, 0x7, 0xb, 0x93f, 0x5, 0x9, 0x7, 0x8001, 0x0, 0x5, 0x4, 0x1, 0x7f, 0xc39, 0x80, 0x80000000, 0x101, 0x2, 0x5, 0x9000, 0x4, 0x0, 0x4, 0x9, 0x401, 0x400, 0x1, 0x8a, 0x5, 0x9, 0x8000, 0x6, 0x4, 0x8, 0x1, 0x6, 0xf, 0x4, 0x3, 0x3, 0xb, 0x1d59, 0x800, 0x5, 0x4, 0xfffffffa, 0xfff, 0x21, 0x40, 0x8, 0x1, 0x52b, 0x3, 0x8, 0x6, 0x7569, 0xe7d, 0x0, 0x400, 0xac9, 0x1, 0x639, 0xffff, 0x1, 0x6, 0x9, 0x800, 0x1000, 0x80, 0x81, 0x4, 0x8, 0x800, 0x0, 0x2d7a, 0x2d10, 0x1, 0x4, 0x3c5b, 0x8, 0x9, 0x4, 0x1, 0x0, 0x9, 0x1082e9de, 0x52, 0xfffffffc, 0x3ff, 0x6, 0x0, 0x30000, 0x4b0e, 0x0, 0x3, 0x401, 0x2, 0x0, 0xffff49dc, 0x4, 0x4, 0xec, 0xc2b, 0xb, 0x7, 0x1, 0xfffffffd, 0x4, 0x3ff, 0xf, 0xfffffff8, 0xff, 0x3, 0x9, 0x0, 0x7, 0x7, 0x3, 0x1b1f6c26, 0xffff, 0x9, 0x33, 0x46b1, 0xfffffff8, 0x800, 0x8, 0x40, 0xfffffffe, 0x401, 0x1000, 0x4, 0x7, 0x4000000, 0x8, 0xfffffffb, 0x0, 0x2, 0xfffffffe, 0x0, 0xef9, 0x3, 0x6, 0x6, 0x8, 0x0, 0x2, 0x7, 0x9, 0x0, 0x9, 0x7, 0xfa8, 0xc, 0x3, 0x7f, 0x4, 0x0, 0x4, 0x742, 0xffff, 0x3, 0x7, 0x6, 0x8, 0x4, 0x3, 0xf, 0x96d, 0x3, 0xff, 0x9, 0x9, 0xa, 0x21, 0x6, 0x101, 0x7, 0x2, 0x89, 0xde, 0xcd, 0x1, 0x6, 0x3, 0x7, 0xd, 0x3ae9, 0x0, 0x1, 0x6, 0x2, 0x0, 0x4, 0x7f, 0x4, 0xbc7e, 0x0, 0x4, 0x6a6eed5d, 0xb, 0x3ff, 0x3, 0x2, 0x400, 0x808, 0xc5b, 0x6, 0x4d, 0x4, 0x8e0c, 0x60, 0x9, 0x1, 0x2, 0x4b29, 0x9, 0x7, 0x2, 0x3, 0x3, 0x1, 0x70a, 0x6, 0x0, 0x8, 0xfffffff8, 0x2, 0x5, 0x0, 0x5, 0xfffffffc, 0x2, 0xfffffff3, 0x7fff, 0xfffffffb, 0x5, 0x6, 0x1, 0x1e000, 0x4, 0x80000000, 0x10001, 0x2, 0x1, 0x9, 0x8cd, 0x7fffffff, 0xf, 0x8, 0x7, 0x2b0, 0x2, 0x80000000, 0x6, 0x4, 0x6, 0x8, 0x9, 0x4, 0x2ea, 0x100, 0xdadf, 0x8, 0x1, 0x7f, 0x8, 0x0, 0x3, 0x6, 0x2, 0x5, 0xd163, 0x3, 0x9, 0x6, 0x5, 0x6, 0xc46, 0x2, 0x0, 0xfffffff3, 0x7690, 0x0, 0x8, 0x4, 0x7, 0x6, 0xe2, 0x0, 0x800, 0xfff, 0x7, 0x1, 0x1ff, 0xe, 0x3ff, 0x40, 0x0, 0x1, 0xb98, 0x3, 0x6, 0x2, 0x6, 0xfffffffb, 0xdbb8, 0x7fffffff, 0x9, 0x10001, 0x6, 0x8, 0x280000, 0x4, 0x8, 0x562, 0x7f, 0x81, 0x0, 0x7ff, 0xff, 0x3, 0xffff, 0x1, 0x6, 0x1, 0x8, 0x2, 0xc000, 0x5, 0x3, 0x7ff, 0x1, 0x3c8f, 0x1ff, 0x101, 0x7f, 0xc, 0x80000000, 0x5, 0xb3, 0x4, 0x6, 0xb1c, 0x1, 0x8, 0x8, 0x800, 0x8, 0xfff, 0x9, 0x2, 0x1, 0x2, 0x4, 0x8, 0x0, 0x2, 0x8, 0x7, 0x1, 0x6, 0x1, 0x0, 0x0, 0x401, 0x9, 0x7fff, 0x8, 0xe31d, 0x8001, 0x8, 0x2, 0xd9, 0x5, 0x2, 0x7, 0xa, 0xfffffffd, 0x3, 0x1, 0xa, 0x3ff, 0x72a, 0x9, 0x400, 0x1ff, 0x56, 0x6, 0x7, 0xfffffff8, 0x4, 0x10000, 0x1, 0x0, 0xfffffffb, 0x8, 0xfffeffff, 0x0, 0x200, 0x5f3f, 0x40, 0x88, 0x8, 0x6, 0x9, 0x4, 0x10, 0x9, 0x6, 0xfffffffc, 0x5, 0x7bc, 0x1, 0x42f, 0x80000001, 0x1, 0x6, 0x8, 0x5, 0xffffe295, 0xa55, 0x4, 0xfffffff8, 0x5, 0x7, 0x4, 0x101, 0x4, 0x5, 0x7, 0x4, 0x0, 0x8a11, 0xa, 0x6, 0xf80, 0xa, 0x7, 0x4, 0x3, 0x117c, 0x1000, 0x40, 0xf297, 0x100, 0x7, 0x9, 0x2, 0x7, 0x8, 0x5, 0x0, 0x3, 0x6, 0xb, 0x4, 0x1, 0x5, 0x8000, 0x3ff, 0x1, 0x7, 0x5, 0x8001, 0x9a, 0x6, 0xb2, 0x400000, 0xe84, 0x4, 0x7, 0xff, 0x80000001, 0x5, 0x9c03, 0x5, 0x9, 0x6, 0x4, 0x160, 0x8, 0x84c, 0x81, 0x6, 0x84c, 0x7, 0x800, 0xb8e1, 0x8001, 0x1b2, 0x8001, 0x6, 0x7, 0xf1f, 0xd086, 0x6, 0x6, 0xfffffffc, 0x0, 0x4, 0xdd, 0xffffffff, 0x10, 0x332b, 0x7fffffff, 0xffff, 0x7ff, 0x5, 0x9, 0xf, 0xeb6, 0x81, 0x4, 0xc7c9, 0x1, 0x7, 0xd2, 0x7fff, 0x0, 0xfdc7, 0x2, 0x2, 0x5, 0x1000, 0x796, 0x1000, 0x3, 0xff, 0x7f, 0x81, 0x2, 0x5, 0x2, 0x1, 0x1, 0x5, 0x7f, 0xe, 0x8, 0x7, 0x5, 0x8, 0x811, 0x8, 0x4, 0x2, 0xfeac, 0x2, 0x5, 0xb107, 0x1, 0x1e, 0xfff, 0x0, 0x4, 0x2, 0xe, 0xa2ba, 0xff, 0xfff, 0x3, 0xfff, 0x5, 0x2, 0x64d8, 0x1, 0x9e, 0x3, 0x9, 0x1, 0x1, 0x1, 0x5, 0x9, 0xc000, 0xd, 0x401, 0x5, 0x9, 0xa67, 0x10001, 0x7, 0x10001, 0x7, 0x5, 0x7, 0x7, 0x33, 0x39, 0x3, 0x23, 0x8, 0x7, 0x101, 0x414e, 0x93, 0x10, 0xffffffbe, 0x0, 0xfffeffff, 0x1, 0x5, 0x7, 0x3, 0x4, 0x5, 0x4, 0x0, 0xffff0dd4, 0x0, 0x0, 0x8, 0x200, 0x1, 0x4, 0x7, 0x1c0000, 0x9, 0xffff, 0x9, 0x0, 0x4, 0x400, 0x5, 0x3, 0x1, 0x0, 0x5, 0x8, 0x9, 0xc, 0x1, 0x9, 0xfffffff7, 0x93, 0x0, 0x680, 0x2c62, 0x889, 0x7270, 0x2, 0x7ff9, 0x8, 0x8000, 0x800, 0x4, 0x6, 0x2, 0xf, 0x13b0, 0x9, 0x40, 0x3, 0x1000, 0x2, 0x6, 0x6, 0x80000000, 0x200, 0x3, 0x80000001, 0x5, 0xffff, 0x354b, 0x454, 0x8, 0x9, 0x4, 0x44, 0x7ff, 0xaa84, 0x96e6, 0xffffffff, 0x9, 0x7, 0x7, 0xfff, 0x6, 0xfffffffa, 0x0, 0x7fff, 0x1, 0x5, 0x10001, 0x6, 0xb, 0x0, 0x0, 0x2, 0xb382, 0xe8, 0xc1f, 0x6, 0x40, 0x5, 0xf074, 0x1, 0xec, 0x9, 0x9, 0x401, 0x9000, 0xa830, 0x9, 0x8d53, 0x6, 0x3, 0x6, 0xfffffffd, 0x3, 0x3, 0x2, 0x76, 0x7f, 0x3, 0xffff8000, 0xff, 0xffffffff, 0xfffffffa, 0x8, 0x2, 0x1, 0x10000, 0x9, 0xb4d, 0x9, 0x7fff, 0x1000, 0x800, 0x8001, 0x40, 0xfa, 0x8, 0x5, 0x10001, 0x2, 0x3, 0x8, 0x8, 0x3, 0x9, 0xc, 0x0, 0x2, 0x5, 0x2, 0x10, 0xc, 0x7fff, 0xfffffffe, 0xfffffff8, 0x2, 0x7, 0xc, 0x3c942a7f, 0x7fff, 0x0, 0xfffffffa, 0x5a, 0x6, 0x5, 0x6, 0x100, 0x10000, 0xe, 0x4, 0x1, 0xebec, 0x0, 0x2, 0x5, 0x6, 0x80000001, 0x9, 0x8, 0xa, 0x2, 0x7, 0x6, 0x10, 0x7ff80000, 0x1, 0x9, 0x3, 0x7, 0x143, 0xffffffff, 0x5, 0x3, 0x1, 0x1, 0x0, 0x2, 0x402, 0x3, 0x1, 0x8, 0x9, 0x1, 0x5, 0x6, 0x4, 0x5c, 0x5, 0x1, 0x7, 0xec, 0x2, 0x4, 0x200, 0x101, 0x8, 0xfffffffe, 0x7f, 0xc16, 0x0, 0x5, 0x4, 0x80000000, 0x9, 0xfffffffc, 0x8, 0x10001, 0x0, 0x4, 0x401, 0x0, 0x2, 0x8, 0x62b42f64, 0x7, 0x7fff, 0x200, 0x1c00, 0xa, 0x3ff, 0xc6b, 0x959, 0x1, 0xffffad2b, 0x2, 0x4, 0x6, 0xfffffffb, 0x1, 0x7fff, 0x2, 0x9, 0x1, 0x9, 0x1, 0x8624c2d, 0x5, 0x4244, 0x8, 0x8, 0x7, 0x3, 0x7, 0x100, 0x2, 0x400, 0x7, 0x0, 0x2c, 0x90000000, 0x9, 0x1000, 0x0, 0x6, 0x579b, 0x1000, 0x0, 0x2, 0x7f, 0x6, 0xa17b, 0x4, 0x1000, 0x8, 0x0, 0x7, 0x8, 0x8, 0x5, 0x3, 0x7, 0xee8, 0x8, 0x3, 0x9, 0x6, 0x8, 0x0, 0x5, 0x8001, 0x1, 0x1, 0x7f, 0x3ff, 0x6, 0x4, 0x401, 0x315b9364, 0xff, 0x81, 0x40, 0x1, 0x9, 0x8, 0xffffffff, 0x6, 0xf9, 0x4, 0x4, 0x6, 0x5, 0xe39, 0x4, 0x0, 0x8, 0x5, 0x8, 0x1, 0x2, 0x2, 0x3ff, 0x101, 0x400, 0x67975087, 0x3, 0x6, 0x8, 0x24000000, 0x8c, 0x8001, 0x5, 0x7fffffff, 0x608, 0x0, 0x9, 0xffff, 0x0, 0x8441, 0x5, 0x4, 0x8, 0x8a, 0x0, 0x1, 0x70607537, 0xb, 0x9, 0xd536, 0x1, 0x6, 0x2, 0xd, 0xf, 0x4, 0x8, 0x80000001, 0x1, 0xf08c, 0x5ef0d963, 0x4, 0xf, 0x200]}) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0) syz_usb_connect$midi(0x5, 0xd5, &(0x7f0000001f80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x4, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x80, 0x1, [{0xf7, 0xf}], 0x4}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x7, 0x6, [{0x7, 0x7}, {0xfd, 0x6}, {0x1, 0xa7}, {0x7}, {0xa, 0x8}, {0x78, 0x8}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0xc4}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x4, 0x6, [{0x2, 0x5}, {0x2, 0x5}, {0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x4}], 0x40}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x10, 0xa}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x81, 0x2, [{0xc, 0x4}, {0x7, 0x40}]}], [{{0x9, 0x5, 0x3, 0x12, 0x8, 0x14, 0x10, 0x2, {0xb, 0x25, 0x1, 0x7, "747ec4f3375c8b"}}}, {{0x9, 0x5, 0x2, 0x11, 0x8, 0xf, 0x4, 0x1, {0xe, 0x25, 0x1, 0xa, "0038900b791efcceaf1d"}}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x6, 0x59, 0x7, {0xe, 0x25, 0x1, 0xa, "944a41e0fc780d02ec72"}}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x80, 0x1, {0xb, 0x25, 0x1, 0x7, "4d9c4b8245491a"}}}]}}}}}]}}, &(0x7f0000002240)={0xa, &(0x7f0000002080)={0xa, 0x6, 0x0, 0xff, 0x6, 0xe, 0xff, 0x1}, 0x5, &(0x7f00000020c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x2c, &(0x7f0000002200)=@string={0x2c, 0x3, "8e7b2c80733a27bb758e55376b7100e95da919a20727f1f24d375d9bce7874d94c1118cf82fad1f95ce6"}}]}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000680)={0x14, &(0x7f0000000240)={0x0, 0x24, 0x101, {0x101, 0x10, "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"}}, &(0x7f0000000580)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "ad9be442a1acffba07cdf23862fcb812de49bd6a147e5a90b949da03f12f3444e5714f7caaa7ba3d531ffc0cddfaa8d417d4a466f86f4e6f9e25eb71965911a7a8b5eaacefa4a5a765d7ba6dae0a5c067a2d2d100d543282f3be3b374124aa6b24f61a65c025ad1f828c23447692866264589f94eeadadd13093560b4182a01480d143ce39f26fe11c88a2247d32bd8d208687091731730b66e3d8bb80170f7f8042afbfe1dab823db3868a1836b7f6c636c5c27f3011dd3f64ed59b56d61efbda93d48a670ee7f5f951b7689e8661"}}}, &(0x7f0000000ec0)={0x44, &(0x7f00000006c0)={0x40, 0xf, 0x4, "a609432d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xe9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "c3ccc7"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "9d0b"}, &(0x7f0000000880)={0x20, 0x83, 0x3, "3c57aa"}, &(0x7f00000008c0)={0x20, 0x84, 0x2, "48ca"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "03f757"}}) r5 = eventfd(0x8e) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000380)={0x20, 0x3, 0x4, "e588a822"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.700413922s ago: executing program 4 (id=1208): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) 1.601390648s ago: executing program 4 (id=1227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_link_settings={0x20, 0x4, 0x1, 0x6, 0x2, 0x6, 0x4a, 0x28, 0xab, 0x97, [0xc, 0x5, 0x0, 0x10000, 0x3, 0x6, 0x10, 0xe]}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0xa5b32000) 1.352103016s ago: executing program 4 (id=1228): mkdir(&(0x7f0000000100)='./file0\x00', 0x71) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047440, 0xf0ff1f00000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x7}}, 0x24, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x1) 1.351730396s ago: executing program 4 (id=1229): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r0, 0xfffffffffffffffe, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x0, 0x100) read$FUSE(r1, 0x0, 0x3) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0xd) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x70, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xff, 0x3, 0x6, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x5, 0x7, {0x7, 0x25, 0x1, 0x8, 0x66, 0x5eef}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 1.198873552s ago: executing program 1 (id=1231): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x10100280, &(0x7f0000000000)="8e7bf2d5ea8ae35696aadc6bcb1c8b16047d3597ae0dca654a7568901805116ad1a88aa35d26f95e16a9a5d82fb201120f00a3031350f5183aa01f82112be9e454feb74bb625daaccce66400bf1b7f8d7ebbc130ef2a93cd53a32ce43f6800caaa42e02ed41105d5a6b2bd3b71d7e54ed7c7b16992f65346ad62ab2faf9a46447c587e2e5a5c9a2638dcb3d9826915", 0x8f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000008c0)="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") ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xb655, 0x2001) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000001c0)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x8000000, {}, 0x0, 0xa}, {"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", "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"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) r7 = socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x3) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r9, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, &(0x7f00000002c0)) shutdown(r6, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.092225115s ago: executing program 1 (id=1232): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 1.090610165s ago: executing program 1 (id=1233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x179}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="ba4100b87000efdef80faeef660f3881280f5cbd00806736660f3881192eda2c66b99f09000066b85300000066ba000000000f30f30f214fbaa100ec", 0x3c}], 0x1, 0x12, &(0x7f00000000c0)=[@flags={0x3, 0x20000}], 0x1) 1.081946255s ago: executing program 1 (id=1234): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x488000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40800) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x7e, 0x1, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xb59f, 0x7, 0x8000000000000001, 0x8, 0x9, 0x1000}) clock_gettime(0xfffffffffffffff9, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) clock_settime(0x1, &(0x7f00000001c0)={0x77359400}) 999.896208ms ago: executing program 2 (id=1235): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000080)={0xe, 0xffffffffffffffff, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x0, 0x200000a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf2c, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 948.16524ms ago: executing program 1 (id=1236): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000730904000000010100000a24010000060201020c24020502020602060006ff090401000001020000097801010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504071001000006000900020000040000000904020101ff"], &(0x7f0000000bc0)={0x0, 0x0, 0x1, 0x0}) 588.919391ms ago: executing program 3 (id=1237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2003) sendfile(r2, r0, &(0x7f0000000080)=0xfffffffffffffd4d, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="0f20d1360f79eb0f14340f211a0f01d0660fa2baf80c66b8c0e67a8566efbafc0c66ed8350120fbaf80c66b86ec7988966ef360f7967ebb026eef3ab", 0x3c}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0x1000, 0x1e800}) 372.485178ms ago: executing program 1 (id=1238): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_read(r1, 0x3, 0x4000, 0x0) 148.005215ms ago: executing program 3 (id=1239): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r3, 0x1) (async) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r7, 0x0, 0xb) (async) write$binfmt_script(r7, 0x0, 0xb) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r8, 0x0, 0x9, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c5602117436c379000000000000000058000b9e24ca945f6400940f6a0325010ebc00000000000a008000f0fffeffe809005300fff5dd00000010000100070c10000000224e224e0000", 0x58}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001200010028bd7000fddbdf2520010000000000000000000000000000000104d60a0132"], 0x48}, 0x1, 0x0, 0x0, 0x40901}, 0x20048080) 117.004236ms ago: executing program 4 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_TDX_INIT_MEM_REGION(r2, 0xc008aeba, &(0x7f0000000140)={0x3, 0x1, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x60000, 0x4}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000180)={0x5, 0x101, 0x4, 0x40, 0x4, 0x0, [{0x320, 0x4, 0x5, '\x00', 0x1000}, {0x8, 0x80000001, 0x7, '\x00', 0x300}, {0x2000000020, 0x8, 0x5, '\x00', 0x800}, {0x9, 0x3, 0x58b, '\x00', 0x2580}]}) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000880)={&(0x7f0000000800)=[{&(0x7f0000000280)="d9f8b82aa4b5f56c638227b92455cdd8743f99a960bf3d5a1a8f313f20ca3cdbcc0965caff9ec87a4554be6189616170587493e32d1cdcc4eb942735570562362bae36ab521a0bd84c4de203439e1cd54bf0feba4f86ea4d8b952d746ee9ade9dd2d36c4b8353a9e1ac8c03dae773e6a55604376409bcfe1f1531c6cc29d511906e11aeac0078f6c4ebf33300104852bce0fc7fb289eb2c096632a511509eb256f2e09541948ad69129d5f47955cf7d6cdb7a7e2ef7ee143ab75cf821776db227abe7524", 0xc4}, {&(0x7f0000000380)="46acf9bdf5fb13551c6240f421e45063b59fb4889d0178d4ebff3395f0fc04498b6367f7e1547582441d5af120be02cead4765199bda38163a7a3606b6b2c5231b4c8db303e4dccd4f438ef89d37e4b753b307b3dc7958144fd50321a6eee4bc887a40d50238edbc2892b9b3eaabba0213541d8954e04f8ddf0416783285ecac8b7e62", 0x83}, {&(0x7f0000000440)="d0dbf2f1c8067017e945b6fd40f3cc983141cb0dc2abe68475cb08fb1827ce65cabb46405aaa0f7eec335700", 0x2c}, {&(0x7f0000000480)="58e2f085c225dfcd2a39d5c84196c64dafe37ab354e937d0bd6d60132850c9f5e529a4cd22495d41a228da95e34d08e9740718c06dd8b3b9c113b73000cc94c528dd37918142a5315da99a672f3ea2de8e3105128977f4e94f0c0a9462790eda60096b3d8081026ee2023fd5b1fa0ed6841cc4a10a914e49a17bb61513", 0x7d}, {&(0x7f0000000500)="9038227c930ea11ea73bd3201a6bb1ce304f10d4c36879f0a36f66f6846de4d0fd6a40b6be4d5a19c7a3ceb75c4460d1a7a647e14f7e9cd39099a9b85cad80f1930b4cb1493df60a33c0889f0a2b5792f961031f9afdd3c709c90cc578ccea9ddd1d94b4eba9f3ab250d55a83925fa1721660ab60aa66c0ba5c2d0e6982d584899a1a68750a525aaae476778abbf3973deb95349fa56090de906fdc05d69cc1d52121aa5618a9589eac946ac600b530d9402fff0be2103acc88d75662b11c176d2", 0xc1}, {&(0x7f0000000600)="eda49d6ceffcb2d1f8c109433c66488cf2c4b8e6cc2c8b8cbb4bab657ce04a0bf3a361b5f0df78595495aa0fdfe6353a4d477d2b0d95c2d539db4c24df704233d013e667924fe5c9b373b3861d870ff0333af1909d897e7e95e9eec9450b728a93398c517427b513ef4262dfe45386a2f6b36f3f692a586e6ce5e261497b914615e56e98d7d9240d1f548fd467164f690b3b5eb40d026dd00424c731ca0f9c7d56a0b3868d2ce458522bcfcf7aab6cd743e4472b8fdc6109b0ec01747036b6e0ba2b4d5af0624a4a276d2f913556ca3840048fd164b15abc96351419c36c98575f72898ffa96927c2313d5f8ee2d040b6e68faad7330", 0xf6}, {&(0x7f0000000700)="53d7eb3fd6cd0cb2690788219496717f52df26418e68315098b31c582353b2a9e23e61252ceb0bb1d292e21fa2f5cc2281985b48f6949ff52a741f2351f3a1a91d8b903983b35884aa882053e82ba62341c4c02cf830b00b84cda87b497fe5954738db6454189032d96c4f3937f1aebd37c87dfb4b1dfb018722dc5d7fbb178cfe1cc3e94f900624f8225241a9000a697abc667e0e1d9cd8632f10148eef377910151f0d8992e378ad5906f0e022883bb6f3f781dbe45fe5cf9057f5f42269c537fbcd39ba622b259efd0ece5e94be4d10bea81ab718065e56feddf49a1aa6f8a75fc39c82071476360fc391ed", 0xed}], 0x7, 0xf2, 0x0, 0x7fff, 0x0, 0x1, 0x8, 0x2000000}) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000d40)={0x7, &(0x7f0000000900)=[{@fixed}, {@fixed}, {}, {@none}, {}, {}, {@fixed}]}) r6 = openat(r0, &(0x7f0000000d80)='./file0\x00', 0x86040, 0x66) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x2d) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000f00)={&(0x7f0000000dc0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x20004004) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x20080, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x90, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "717d67470bdfdfeceae308fb87bfadac"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1cf03aa77b8421ef67ffbb4f7e853ac3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c6805102e71e113932357b6096f01640"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a750214a10a789506ccf65c0a9dbdafc"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x40000c1) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r5, 0x40086e81, &(0x7f0000001140)=0x3) (async) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000001180)={0x0, r3, 0x2, 0x9, 0xb599, 0x8}) (async, rerun: 32) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f00000013c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x168, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x94, 0x48}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffff143}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xb7}, {0x8}, {0x8, 0x0, 0x53}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xbdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5097}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x6000}, {0x8, 0x0, 0x81}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x7c, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="c3f1c78130edae42dec93df7beb63df0a8000ea70e14e0660190c08e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a4c98dcef9ee"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8a}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x88}, 0x8000) (rerun: 32) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000001400)={0xc000000000000000, 0x0, 0x59c5, 0x1, 0x1c}) (async, rerun: 64) openat$cgroup_type(r6, &(0x7f0000001440), 0x2, 0x0) (async, rerun: 64) read$FUSE(r6, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000034c0)={r9}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, &(0x7f0000003500)) (async) sendmsg(r5, &(0x7f0000003cc0)={&(0x7f0000003540)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000035c0)="cd286e1ca8a4b51ef7fd823879e4b978594392ba6c9205db51b777020a69f58e24bd299f77cff2ba60fc9e02c26c2454dc560b650da4a45e79d738e3b497fba8956370a54f138a7b47674f1d3ddd6c95af282879bc93dfb4ff6013b96599bdf35dd000eae436c4855ff414512eb44a30b91f07b7cc149ce79b00b2071a10766432aa379f8531d8570e343abeb1c2187dfc1fb3cec814fe1206b49bf7a64d628d2124ddd11afb44b0e4e0c3cbe4dbefcfef26db55addba465f965f2728ff886d1168f8ab2f3de0aad74a740b19b4079576e51de6875d02d15ea7e896bcbd913d8b2fdfee45c6cfbbc0388436fdce3", 0xee}, {&(0x7f00000036c0)="9798cacb106d4abcf41a6bb15ecc649b0dcca204a7a105059375a7ac899ab5040cb621aacb9d6f4cb958bf18b9007472ca87b2", 0x33}, {&(0x7f0000003700)="3bfb4dcbb911cd5abc0f55abd8e156992fb21eb3dcf36a6d32fbeb6bebcc0f3564ec7678b6c93c4527823a2cfe734901f580ddffc551d4a397686c83bf1c747725e70f79158ddde9689ec3944da4a7516ff6064b2103a9eb5c2b4b4c715804d879b556aacd0b70fd29d1bdd03117e62b81427474d8657e9c732744936fc56e3c6db45450d0b2742cd936b38920c5b0c35a9cc7cd0fadb20edc934f0b6ccbcf8044dcf50adb906ca0bbaf6c6c53c04755de25fc1c", 0xb4}, {&(0x7f00000037c0)="b8", 0x1}, {&(0x7f0000003800)="591834f90ba6e1d6d07883e93018f2edf83f9af72e664c00498fec93e773471b931b4138757460f08557a887277aab005be07ac54c4aa54c", 0x38}, {&(0x7f0000003840)="0bd560dec2edb3d5b019498fd92a6fde9e1e01615251b09368c5994426a5e18dfbb0e5e7a3fd2bcf32bd0070884a6a442048b63c33fed3a3dba852f2a54bb097d12a1350f156d5a32968f8f3031679aa0a4dfddbfa27f052214fc9dd5f11837e826b0e25c8620c1d9762b16c95080e8e28fec7b336b15916fd625150ed3a5f65", 0x80}, {&(0x7f00000038c0)="8c41622044a16272e99292b2b6d1134b9b4fbe4f02a5233ccec80db6696f6889aa369e6d568935224eb018fbc3f7e3c8fc9b07d78067b61c448efd24ec07d1d366e60cf285999f64135fbacdd1b57eb52a3f07222d330c115a7cce76c5e577523dcfbe133adea7134710cc2d6bdb62d69a237041f7e59d6fda536314502f593e0a35b34fbe8472c0f2e5fe809cf96343b2bd", 0x92}, {&(0x7f0000003980)="03c504c71844f648f176d1fe5f36ae1c8e24c922889581c4f363e47c806dc93b3d7d79f48af3fcc91184e4c409d6037a44e0ade6684cf73932872e1f071201a04099b4b14cc32e33aa7fbfc762ac62c8065c4a17a9192250d93e7b64d0a04462b7c614d01f72fb78fb5bf9b21e227e694c624fc7c9a3039baa2f9ccdb940d6694597e3", 0x83}, {&(0x7f0000003a40)="e48659697cb81f0fdac47acb0a4b48dd9a9352d8064c3f834215a8f92c289ad21ca5ae540e13480d60db58e06b72ef5c0994e930a290361823d9b01ae1d988381f4c6d28a5fabdaecd906aa1c165aa4c80ebf2bfad05c6ef", 0x58}, {&(0x7f0000003ac0)="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", 0xfd}], 0xa, &(0x7f0000003c80)}, 0x4010) (async) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000003d00)={0xf000, 0x200000, 0x6, 0x9, 0x9}) accept(r1, &(0x7f0000003d40)=@pppol2tpin6, &(0x7f0000003dc0)=0x80) 48.610778ms ago: executing program 2 (id=1241): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201050000000000000000000207"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x347, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700)={0x0, 0x1, 0x0, 0x0, 0x323, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffc}}], 0x1, &(0x7f0000000900)={0x2e, 0x4, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) 0s ago: executing program 4 (id=1242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="b8010000000f01c139b463473b6bb7f4b8f82ee5c50f23c00f21f835030000000f23f80f20c035000000200f22c066b8d2000f00d8f20f302e642e363a138f43cbb805000000b9060000000f01c1", 0x4e}], 0x1, 0x1, &(0x7f0000000480)=[@cstype0={0x4, 0x4}], 0x1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x12e) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xcc, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x1}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x6}}, @proto={0x5, 0x19, 0x6c}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x400000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000c00)={0x2, [], 0x6, "859ae7f3db0b4f"}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x179}]}) kernel console output (not intermixed with test programs): dummy_hcd [ 112.959980][ T328] usb 4-1: Using ep0 maxpacket: 32 [ 112.967725][ T328] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 112.984944][ T328] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.030730][ T328] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 113.060017][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.078230][ T328] usb 4-1: Product: syz [ 113.083201][ T328] usb 4-1: Manufacturer: syz [ 113.087810][ T328] usb 4-1: SerialNumber: syz [ 113.095485][ T2641] SELinux: Context : is not valid (left unmapped). [ 113.323175][ T328] usb 4-1: unit 8 not found! [ 113.356110][ T328] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 113.375352][ T328] usb 4-1: USB disconnect, device number 47 [ 113.381340][ T1263] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 113.539965][ T1263] usb 3-1: Using ep0 maxpacket: 8 [ 113.565304][ T1263] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.592487][ T1263] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 113.608245][ T1263] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.628085][ T1263] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.676613][ T1263] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.687318][ T1263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.695896][ T1263] usb 3-1: Product: syz [ 113.700997][ T1263] usb 3-1: Manufacturer: syz [ 113.705597][ T1263] usb 3-1: SerialNumber: syz [ 113.932472][ T2643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'. [ 114.001753][ T2643] team_slave_1: entered promiscuous mode [ 114.007493][ T2643] team_slave_1: entered allmulticast mode [ 114.023337][ T2643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2643 comm=syz.2.640 [ 114.042261][ T1263] cdc_ncm 3-1:1.0: skipping garbage [ 114.047494][ T1263] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 114.068679][ T1263] cdc_ncm 3-1:1.0: bind() failure [ 114.085872][ T1263] usb 3-1: USB disconnect, device number 46 [ 114.120313][ T45] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 114.282463][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.290937][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 114.302718][ T45] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 114.312069][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.320081][ T45] usb 4-1: Product: syz [ 114.324234][ T45] usb 4-1: Manufacturer: syz [ 114.328802][ T45] usb 4-1: SerialNumber: syz [ 114.541034][ T2681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.549572][ T2688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.556868][ T2681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.558102][ T2688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.588040][ T45] usb 4-1: USB disconnect, device number 48 [ 114.630034][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.990029][ T1263] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 115.107612][ T2704] devpts: called with bogus options [ 115.119994][ T1263] usb 3-1: device descriptor read/64, error -71 [ 115.369996][ T1263] usb 3-1: device descriptor read/64, error -71 [ 115.390015][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 115.539985][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 115.546980][ T45] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 115.555394][ T45] usb 4-1: config 0 has no interface number 0 [ 115.561505][ T45] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 115.571521][ T45] usb 4-1: config 0 interface 196 has no altsetting 0 [ 115.580818][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 115.589876][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.597921][ T45] usb 4-1: Product: syz [ 115.602107][ T45] usb 4-1: Manufacturer: syz [ 115.606676][ T45] usb 4-1: SerialNumber: syz [ 115.612818][ T45] usb 4-1: config 0 descriptor?? [ 115.619977][ T1263] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 115.620408][ T2706] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 115.760019][ T1263] usb 3-1: device descriptor read/64, error -71 [ 115.842839][ T2706] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 115.866429][ T2715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 116.000004][ T1263] usb 3-1: device descriptor read/64, error -71 [ 116.054923][ T45] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 116.064030][ T45] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 116.110395][ T1263] usb usb3-port1: attempt power cycle [ 116.260012][ T2706] netlink: 'syz.3.658': attribute type 26 has an invalid length. [ 116.267826][ T2706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 116.418035][ T2720] netlink: 388 bytes leftover after parsing attributes in process `syz.1.663'. [ 116.450058][ T1263] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 116.471696][ T1263] usb 3-1: device descriptor read/8, error -71 [ 116.537832][ T2722] overlayfs: failed to clone upperpath [ 116.601855][ T1263] usb 3-1: device descriptor read/8, error -71 [ 116.799091][ T2725] cgroup: Unknown subsys name 'measure' [ 116.837251][ T2723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.849969][ T1263] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 116.857992][ T2723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.870650][ T36] kauditd_printk_skb: 965 callbacks suppressed [ 116.870665][ T36] audit: type=1400 audit(1781396751.520:23792): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.899324][ T1263] usb 3-1: device descriptor read/8, error -71 [ 116.902173][ T36] audit: type=1400 audit(1781396751.540:23793): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.932914][ T36] audit: type=1400 audit(1781396751.540:23794): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.958554][ T36] audit: type=1400 audit(1781396751.540:23795): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.983502][ T36] audit: type=1400 audit(1781396751.540:23796): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.014197][ T36] audit: type=1400 audit(1781396751.550:23797): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.040253][ T36] audit: type=1400 audit(1781396751.660:23798): avc: denied { read write } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.072819][ T1263] usb 3-1: device descriptor read/8, error -71 [ 117.081186][ T36] audit: type=1400 audit(1781396751.660:23799): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.106246][ T36] audit: type=1400 audit(1781396751.660:23800): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.131792][ T36] audit: type=1400 audit(1781396751.690:23801): avc: denied { ioctl } for pid=2696 comm="syz.2.655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.210058][ T1263] usb usb3-port1: unable to enumerate USB device [ 117.277147][ T2737] overlayfs: conflicting lowerdir path [ 117.390316][ T2750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.398837][ T2750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.460777][ T2755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.476343][ T2755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.050129][ T2779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.078619][ T2779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.170247][ T328] usb 4-1: USB disconnect, device number 49 [ 118.420005][ T626] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 118.582445][ T626] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.591496][ T626] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 118.605154][ T626] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 118.609983][ T328] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 118.614291][ T626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.629794][ T626] usb 3-1: Product: syz [ 118.634002][ T626] usb 3-1: Manufacturer: syz [ 118.638622][ T626] usb 3-1: SerialNumber: syz [ 118.749997][ T328] usb 4-1: device descriptor read/64, error -71 [ 118.855038][ T626] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.869798][ T626] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 118.877128][ T626] usb 3-1: unable to issue vendor read request (ret = -71) [ 118.884644][ T626] usb 3-1: unable to issue vendor read request (ret = -71) [ 118.899995][ T626] usb 3-1: unable to issue vendor read request (ret = -71) [ 118.918615][ T626] usb 3-1: unable to issue vendor read request (ret = -71) [ 118.950596][ T626] usb 3-1: USB disconnect, device number 51 [ 119.001448][ T328] usb 4-1: device descriptor read/64, error -71 [ 119.024257][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.071253][ T2818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.079825][ T2818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.249997][ T328] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 119.380029][ T328] usb 4-1: device descriptor read/64, error -71 [ 119.545594][ T2828] netlink: 'syz.2.697': attribute type 9 has an invalid length. [ 119.630145][ T328] usb 4-1: device descriptor read/64, error -71 [ 119.740070][ T328] usb usb4-port1: attempt power cycle [ 120.080002][ T328] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 120.101944][ T328] usb 4-1: device descriptor read/8, error -71 [ 120.231831][ T328] usb 4-1: device descriptor read/8, error -71 [ 120.470019][ T328] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 120.491767][ T328] usb 4-1: device descriptor read/8, error -71 [ 120.621898][ T328] usb 4-1: device descriptor read/8, error -71 [ 120.680008][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 120.730055][ T328] usb usb4-port1: unable to enumerate USB device [ 120.809991][ T10] usb 3-1: device descriptor read/64, error -71 [ 121.049990][ T10] usb 3-1: device descriptor read/64, error -71 [ 121.291167][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 121.410873][ T2868] Invalid ELF header len 6 [ 121.418428][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.428022][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.435993][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.440051][ T10] usb 3-1: device descriptor read/64, error -71 [ 121.444218][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.457568][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.464986][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.472469][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.479897][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.487331][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.494745][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.502152][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.509527][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.516924][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.524318][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.531723][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.539107][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.546497][ T626] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 121.556089][ T626] hid-generic 0006:0008:0001.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 121.616261][ T2869] fido_id[2869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.654333][ T2871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 121.699981][ T10] usb 3-1: device descriptor read/64, error -71 [ 121.810072][ T10] usb usb3-port1: attempt power cycle [ 121.880339][ T36] kauditd_printk_skb: 1082 callbacks suppressed [ 121.880357][ T36] audit: type=1400 audit(1781396756.530:24884): avc: denied { ioctl } for pid=2853 comm="syz.2.705" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.911542][ T36] audit: type=1400 audit(1781396756.530:24885): avc: denied { ioctl } for pid=2853 comm="syz.2.705" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.937382][ T36] audit: type=1326 audit(1781396756.530:24886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.708" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec6d5d68e code=0x7ffc0000 [ 121.964492][ T36] audit: type=1326 audit(1781396756.530:24887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.708" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec6d5d68e code=0x7ffc0000 [ 121.993278][ T36] audit: type=1326 audit(1781396756.530:24888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.708" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec6d5d68e code=0x7ffc0000 [ 122.020139][ T36] audit: type=1326 audit(1781396756.540:24889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.708" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec6d5d68e code=0x7ffc0000 [ 122.052362][ T2877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 122.075770][ T36] audit: type=1326 audit(1781396756.540:24890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.708" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec6d5d68e code=0x7ffc0000 [ 122.102340][ T2854] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.112818][ T2854] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 122.112825][ T36] audit: type=1326 audit(1781396756.540:24891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2859 comm="syz.1.708" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efec6d5d68e code=0x7ffc0000 [ 122.118774][ T2879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.154456][ T2879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.170034][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 122.192819][ T10] usb 3-1: device descriptor read/8, error -71 [ 122.333334][ T10] usb 3-1: device descriptor read/8, error -71 [ 122.589990][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 122.611984][ T10] usb 3-1: device descriptor read/8, error -71 [ 122.696057][ T2888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.709660][ T2888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.743525][ T10] usb 3-1: device descriptor read/8, error -71 [ 122.850281][ T10] usb usb3-port1: unable to enumerate USB device [ 123.505584][ T2907] fuse: Bad value for 'user_id' [ 123.510546][ T2907] fuse: Bad value for 'user_id' [ 123.678547][ T2919] cgroup: noprefix used incorrectly [ 123.716730][ T2921] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 123.736280][ T2921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 123.746006][ T2922] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 123.948103][ T2939] tipc: Enabling of bearer rejected, failed to enable media [ 124.095644][ T2947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 124.104497][ T626] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 124.168717][ T2944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.192446][ T2944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.292388][ T626] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.312725][ T626] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.322585][ T626] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 124.334274][ T626] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 124.351566][ T626] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 124.360739][ T626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.368712][ T626] usb 3-1: Product: syz [ 124.372908][ T626] usb 3-1: Manufacturer: syz [ 124.377494][ T626] usb 3-1: SerialNumber: syz [ 124.539982][ T10] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 124.632387][ T626] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 124.648984][ T626] usb 3-1: USB disconnect, device number 56 [ 124.691256][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.693446][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.733513][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 124.743150][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 124.762961][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 124.785465][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.789120][ T2964] netlink: 316 bytes leftover after parsing attributes in process `syz.0.738'. [ 124.802196][ T10] usb 4-1: Product: syz [ 124.804954][ T2962] netlink: 316 bytes leftover after parsing attributes in process `syz.0.738'. [ 124.810984][ T10] usb 4-1: Manufacturer: syz [ 124.820583][ T10] usb 4-1: SerialNumber: syz [ 124.900647][ T2968] PM: Enabling pm_trace changes system date and time during resume. [ 124.900647][ T2968] PM: Correct system time has to be restored manually after resume. [ 124.980466][ T2975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.989013][ T2975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.035953][ T2959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.044543][ T2959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.057613][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 125.069309][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.081022][ T10] usb 4-1: USB disconnect, device number 54 [ 125.116827][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.248695][ T2977] raw_sendmsg: syz.2.743 forgot to set AF_INET. Fix it! [ 125.529977][ T339] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 125.546158][ T2981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.559478][ T2981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.700040][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 125.708513][ T2983] SELinux: failed to load policy [ 125.769133][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.804406][ T339] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 125.817633][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.849998][ T339] usb 3-1: Product: syz [ 125.854198][ T339] usb 3-1: Manufacturer: syz [ 125.858805][ T339] usb 3-1: SerialNumber: syz [ 126.093625][ T339] usb 3-1: MIDIStreaming interface descriptor not found [ 126.130525][ T339] usb 3-1: USB disconnect, device number 57 [ 126.210401][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.640777][ T9] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 126.770884][ T3015] fuse: Bad value for 'user_id' [ 126.788802][ T3015] fuse: Bad value for 'user_id' [ 126.800030][ T9] usb 4-1: device descriptor read/64, error -71 [ 126.826810][ T3015] SELinux: failed to load policy [ 126.891612][ T36] kauditd_printk_skb: 2104 callbacks suppressed [ 126.891628][ T36] audit: type=1400 audit(1781396761.540:26995): avc: denied { search } for pid=3020 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.929643][ T36] audit: type=1400 audit(1781396761.560:26996): avc: denied { create } for pid=3021 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 126.951536][ T36] audit: type=1400 audit(1781396761.570:26997): avc: denied { search } for pid=3020 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.975831][ T36] audit: type=1400 audit(1781396761.570:26998): avc: denied { search } for pid=3020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.011984][ T36] audit: type=1400 audit(1781396761.570:26999): avc: denied { search } for pid=3020 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.035276][ T36] audit: type=1400 audit(1781396761.570:27000): avc: denied { sys_module } for pid=3021 comm="syz.2.755" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.064557][ T36] audit: type=1400 audit(1781396761.590:27001): avc: denied { ioctl } for pid=3000 comm="syz.3.751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.091880][ T3024] tmpfs: Unknown parameter '' [ 127.098231][ T36] audit: type=1400 audit(1781396761.600:27002): avc: denied { ioctl } for pid=3000 comm="syz.3.751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.100267][ T3027] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.124086][ T36] audit: type=1400 audit(1781396761.600:27003): avc: denied { ioctl } for pid=3000 comm="syz.3.751" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.154543][ T9] usb 4-1: device descriptor read/64, error -71 [ 127.308491][ T3043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.317305][ T3043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.409996][ T9] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 127.539984][ T9] usb 4-1: device descriptor read/64, error -71 [ 127.779977][ T9] usb 4-1: device descriptor read/64, error -71 [ 127.788464][ T3045] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 127.910420][ T9] usb usb4-port1: attempt power cycle [ 128.030995][ T3053] kvm: pic: non byte write [ 128.129183][ T3057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.157946][ T3057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.259969][ T9] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 128.283806][ T3064] tmpfs: Cannot retroactively limit inodes [ 128.290497][ T3066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 128.292040][ T9] usb 4-1: device descriptor read/8, error -71 [ 128.301724][ T3066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3066 comm=syz.2.768 [ 128.402657][ T3074] netlink: 'syz.1.771': attribute type 4 has an invalid length. [ 128.466022][ T9] usb 4-1: device descriptor read/8, error -71 [ 128.481555][ T3076] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 128.609998][ T1782] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 128.710041][ T9] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 128.751899][ T9] usb 4-1: device descriptor read/8, error -71 [ 128.762999][ T1782] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.772141][ T1782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.785846][ T1782] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.795427][ T1782] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 128.806859][ T1782] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 128.822706][ T1782] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.841605][ T1782] usb 3-1: config 1 interface 1 has no altsetting 0 [ 128.859544][ T1782] usb 3-1: string descriptor 0 read error: -22 [ 128.869986][ T1782] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 128.879042][ T1782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.891988][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.010463][ T9] usb usb4-port1: unable to enumerate USB device [ 129.059741][ T3098] bridge0: port 3(veth0_to_bridge) entered blocking state [ 129.067051][ T3098] bridge0: port 3(veth0_to_bridge) entered disabled state [ 129.074318][ T3098] veth0_to_bridge: entered allmulticast mode [ 129.080850][ T3098] veth0_to_bridge: entered promiscuous mode [ 129.337768][ T3100] syzkaller0: entered promiscuous mode [ 129.343292][ T3100] syzkaller0: entered allmulticast mode [ 129.426854][ T1782] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 129.458056][ T3105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.468267][ T3105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.472177][ T1782] usb 3-1: USB disconnect, device number 58 [ 129.513870][ T3105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.530907][ T3105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.630093][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.909983][ T1782] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 130.039981][ T1782] usb 3-1: device descriptor read/64, error -71 [ 130.279985][ T1782] usb 3-1: device descriptor read/64, error -71 [ 130.520433][ T1782] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 130.669985][ T1782] usb 3-1: device descriptor read/64, error -71 [ 130.829991][ T626] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 130.910441][ T1782] usb 3-1: device descriptor read/64, error -71 [ 130.977431][ T3144] random: crng reseeded on system resumption [ 130.983653][ T626] usb 4-1: Using ep0 maxpacket: 32 [ 130.997109][ T626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.020838][ T1782] usb usb3-port1: attempt power cycle [ 131.029967][ T626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.040442][ T626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.049319][ T626] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 200, using maximum allowed: 30 [ 131.060564][ T626] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 200 [ 131.088200][ T626] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.105808][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.117181][ T626] usb 4-1: Product: 䀊 [ 131.122118][ T626] usb 4-1: Manufacturer: ﮗ궀Ըᮖ [ 131.129955][ T626] usb 4-1: SerialNumber: 混◀⃡혛磾֌띮ꥨ㚇茦캣㿨▭큌啖䕊袃惌㲕ㄾ嗙郀輟룕농虸萙㇤脱蘃⭊Ⴥ⬊视ݽsﮄ瞉ᓃℶꖘ颟랧絻㔫궁✿팟ꈐ⯇ꙭ馥ȍ舃ꎦ䓙3୺⣁밂瓢䋆 [ 131.171216][ T3154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.180412][ T3154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.200725][ T3154] netlink: 'syz.0.797': attribute type 11 has an invalid length. [ 131.210875][ T3154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.220156][ T3154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.379975][ T1782] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 131.401955][ T1782] usb 3-1: device descriptor read/8, error -71 [ 131.532820][ T1782] usb 3-1: device descriptor read/8, error -71 [ 131.779982][ T1782] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 131.812053][ T1782] usb 3-1: device descriptor read/8, error -71 [ 131.900514][ T36] kauditd_printk_skb: 1624 callbacks suppressed [ 131.900532][ T36] audit: type=1400 audit(1781396766.546:28611): avc: denied { create } for pid=3139 comm="syz.3.792" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.928324][ T36] audit: type=1400 audit(1781396766.546:28612): avc: denied { map } for pid=3139 comm="syz.3.792" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.937911][ T3156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.953922][ T36] audit: type=1400 audit(1781396766.546:28613): avc: denied { read write } for pid=3139 comm="syz.3.792" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.959805][ T3156] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 131.984564][ T3110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.992976][ T3156] audit: backlog limit exceeded [ 131.998726][ T3110] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 132.006816][ T3156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.012004][ T3110] audit: backlog limit exceeded [ 132.024651][ T1782] usb 3-1: device descriptor read/8, error -71 [ 132.140411][ T1782] usb usb3-port1: unable to enumerate USB device [ 132.979978][ T45] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 133.129981][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 133.137459][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.149195][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.159551][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.168654][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.178211][ T45] usb 3-1: config 0 descriptor?? [ 133.191526][ T45] hub 3-1:0.0: USB hub found [ 133.392351][ T45] hub 3-1:0.0: 15 ports detected [ 133.397582][ T45] hub 3-1:0.0: insufficient power available to use all downstream ports [ 133.604482][ T626] usb-storage 4-1:1.0: USB Mass Storage device detected [ 133.667405][ T626] usb 4-1: USB disconnect, device number 59 [ 133.696879][ T3164] rust_binder: 3163:3164 transaction to 0 failed: BR_DEAD_REPLY [ 133.799474][ T45] usb 3-1: USB disconnect, device number 63 [ 134.197859][ T3166] netlink: 140 bytes leftover after parsing attributes in process `syz.0.801'. [ 134.396824][ T3176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.405443][ T3176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.609987][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 134.761866][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.772793][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.782582][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 134.791632][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.800969][ T10] usb 3-1: config 0 descriptor?? [ 134.957300][ T3180] tipc: Started in network mode [ 134.962379][ T3180] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 134.969671][ T3180] tipc: Enabled bearer , priority 10 [ 135.036959][ T3181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.045557][ T3181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.221319][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.231748][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.242843][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.249860][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.257924][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.265469][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.273012][ T10] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 135.283844][ T10] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 135.414083][ T10] cp2112 0003:10C4:EA90.0015: Part Number: 0x00 Device Version: 0x00 [ 135.419981][ T626] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 135.582508][ T626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.591545][ T626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.601672][ T626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.620001][ T626] usb 4-1: string descriptor 0 read error: -22 [ 135.629974][ T626] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 135.639056][ T626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.655933][ T626] usb 4-1: selecting invalid altsetting 1 [ 135.661951][ T626] usb 4-1: unit 3 not found! [ 135.802458][ T3195] netlink: 140 bytes leftover after parsing attributes in process `syz.1.812'. [ 135.862794][ T626] usb 4-1: unit 0 not found! [ 135.871395][ T626] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.894652][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.067893][ T626] usb 4-1: USB disconnect, device number 60 [ 136.079969][ T45] tipc: Node number set to 9611946 [ 136.428724][ T3200] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 136.462713][ T3202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 136.869977][ T626] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 136.950402][ T36] kauditd_printk_skb: 667 callbacks suppressed [ 136.950418][ T36] audit: type=1400 audit(1781396771.596:29243): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.009990][ T626] usb 4-1: device descriptor read/64, error -71 [ 137.109150][ T36] audit: type=1400 audit(1781396771.746:29244): avc: denied { name_bind } for pid=3213 comm="syz.1.819" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 137.130917][ T36] audit: type=1400 audit(1781396771.746:29245): avc: denied { node_bind } for pid=3213 comm="syz.1.819" saddr=fc00::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 137.154755][ T36] audit: type=1400 audit(1781396771.796:29246): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.179718][ T36] audit: type=1400 audit(1781396771.796:29247): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.204621][ T36] audit: type=1400 audit(1781396771.796:29248): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.229515][ T36] audit: type=1400 audit(1781396771.796:29249): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.254400][ T36] audit: type=1400 audit(1781396771.796:29250): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.279267][ T36] audit: type=1400 audit(1781396771.796:29251): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.304166][ T36] audit: type=1400 audit(1781396771.796:29252): avc: denied { ioctl } for pid=3209 comm="syz.3.818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.309957][ T626] usb 4-1: device descriptor read/64, error -71 [ 137.360941][ T10] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 137.382108][ T10] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 137.391683][ T3216] netlink: 148 bytes leftover after parsing attributes in process `syz.2.820'. [ 137.405074][ T10] usb 3-1: USB disconnect, device number 64 [ 137.432130][ T3219] netlink: 140 bytes leftover after parsing attributes in process `syz.2.821'. [ 137.569995][ T626] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 137.709984][ T626] usb 4-1: device descriptor read/64, error -71 [ 137.889981][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 137.949981][ T626] usb 4-1: device descriptor read/64, error -71 [ 138.049608][ T10] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 138.052629][ T3227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.825'. [ 138.064463][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.069181][ T626] usb usb4-port1: attempt power cycle [ 138.079156][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.092569][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.100586][ T10] usb 3-1: SerialNumber: syz [ 138.277258][ T3239] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.314088][ T10] usb 3-1: 0:2 : does not exist [ 138.332453][ T10] usb 3-1: USB disconnect, device number 65 [ 138.415756][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.441583][ T626] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 138.504231][ T626] usb 4-1: device descriptor read/8, error -71 [ 138.513039][ T3248] 9p: Unknown access argument userKg: -22 [ 138.570987][ T3245] netlink: 'syz.0.832': attribute type 12 has an invalid length. [ 138.641547][ T626] usb 4-1: device descriptor read/8, error -71 [ 138.789711][ T3253] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 138.797684][ T3253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.834'. [ 138.822264][ T3253] futex_wake_op: syz.0.834 tries to shift op by 144; fix this program [ 138.833731][ T3253] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.847809][ T3253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3253 comm=syz.0.834 [ 138.880020][ T626] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 138.889394][ T3256] input: syz0 as /devices/virtual/input/input22 [ 138.912767][ T3256] netlink: 84 bytes leftover after parsing attributes in process `syz.2.835'. [ 138.922130][ T626] usb 4-1: device descriptor read/8, error -71 [ 138.937255][ T3256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.835'. [ 139.066807][ T626] usb 4-1: device descriptor read/8, error -71 [ 139.190397][ T626] usb usb4-port1: unable to enumerate USB device [ 139.289986][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 139.352367][ T3278] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 139.360765][ T3277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=3277 comm=syz.0.843 [ 139.373628][ T3278] netlink: 72 bytes leftover after parsing attributes in process `syz.0.843'. [ 139.420860][ T3280] 9pnet_fd: Insufficient options for proto=fd [ 139.461913][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.473706][ T3280] VFS: Mount too revealing [ 139.489225][ T10] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 139.503654][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.513448][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.541675][ T10] usb 3-1: invalid MIDI out EP 0 [ 139.556214][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 139.678137][ T1630] udevd[1630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.731862][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.759515][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.767323][ T3261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.787429][ T3261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.797808][ T3288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.816683][ T626] usb 3-1: USB disconnect, device number 66 [ 139.827062][ T3288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.040006][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 140.200018][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 140.207286][ T10] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 140.218091][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 140.232647][ T10] usb 4-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.00 [ 140.242146][ T10] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 140.250582][ T10] usb 4-1: Product: syz [ 140.255972][ T10] usb 4-1: config 0 descriptor?? [ 140.263764][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.427710][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.436338][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.454115][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.462619][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.472955][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.481498][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.519086][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.531969][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.546692][ T3312] netlink: 72 bytes leftover after parsing attributes in process `syz.0.854'. [ 140.556955][ T3312] netlink: 64 bytes leftover after parsing attributes in process `syz.0.854'. [ 140.629976][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 140.713692][ T3314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 140.724861][ T3314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3314 comm=syz.1.855 [ 140.779967][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 140.787714][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.798728][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.808499][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.817876][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.848493][ T10] usb 3-1: config 0 descriptor?? [ 140.876335][ T10] hub 3-1:0.0: USB hub found [ 141.085804][ T10] hub 3-1:0.0: 1 port detected [ 141.231959][ T3317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.240813][ T3317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.666732][ T3334] ext3: Unknown parameter 'dVx' [ 141.672712][ T3332] 9pnet_fd: Insufficient options for proto=fd [ 141.751176][ T3341] netlink: 72 bytes leftover after parsing attributes in process `syz.1.864'. [ 141.973148][ T36] kauditd_printk_skb: 536 callbacks suppressed [ 141.973165][ T36] audit: type=1400 audit(1781396776.616:29789): avc: denied { read write } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.004470][ T36] audit: type=1400 audit(1781396776.616:29790): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.031627][ T36] audit: type=1400 audit(1781396776.616:29791): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.040413][ T3347] rust_binder: 778: no such ref 0 [ 142.059367][ T36] audit: type=1400 audit(1781396776.676:29792): avc: denied { read } for pid=3346 comm="syz.0.867" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.086431][ T36] audit: type=1400 audit(1781396776.676:29793): avc: denied { read open } for pid=3346 comm="syz.0.867" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.096508][ T3347] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 142.110971][ T36] audit: type=1400 audit(1781396776.676:29794): avc: denied { read } for pid=3346 comm="syz.0.867" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.117989][ T3347] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 142.139539][ T36] audit: type=1400 audit(1781396776.676:29795): avc: denied { read open } for pid=3346 comm="syz.0.867" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.146073][ T3347] syzkaller1: group set to 805 [ 142.169574][ T36] audit: type=1400 audit(1781396776.686:29796): avc: denied { ioctl } for pid=3346 comm="syz.0.867" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.177337][ T3348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.199875][ T36] audit: type=1400 audit(1781396776.726:29797): avc: denied { create } for pid=3346 comm="syz.0.867" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.200943][ T36] audit: type=1400 audit(1781396776.726:29798): avc: denied { ioctl } for pid=3346 comm="syz.0.867" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24680 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.225021][ T3348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.351899][ T10] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 142.358361][ T10] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 142.367161][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 142.373202][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 142.410382][ T10] usb 3-1: USB disconnect, device number 67 [ 142.763609][ T31] usb 4-1: USB disconnect, device number 65 [ 142.882622][ T3359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.915078][ T3359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.209987][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 143.268282][ T3387] netlink: 'syz.3.880': attribute type 12 has an invalid length. [ 143.330858][ T3388] overlayfs: failed to resolve '/`j': -2 [ 143.339969][ T31] usb 3-1: device descriptor read/64, error -71 [ 143.348216][ T3388] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 143.581124][ T31] usb 3-1: device descriptor read/64, error -71 [ 143.820039][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 143.960115][ T31] usb 3-1: device descriptor read/64, error -71 [ 144.239952][ T31] usb 3-1: device descriptor read/64, error -71 [ 144.350048][ T31] usb usb3-port1: attempt power cycle [ 144.449968][ T45] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 144.483853][ T3415] netlink: 148 bytes leftover after parsing attributes in process `syz.0.889'. [ 144.514541][ T3415] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 144.522210][ T3415] netlink: 'syz.0.889': attribute type 6 has an invalid length. [ 144.529828][ T3415] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.889'. [ 144.609960][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 144.621337][ T45] usb 4-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 144.626776][ T3421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.640110][ T3421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.641504][ T45] usb 4-1: config 1 interface 1 has no altsetting 0 [ 144.672965][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 144.688317][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.696359][ T45] usb 4-1: Product: syz [ 144.700552][ T31] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 144.708159][ T45] usb 4-1: Manufacturer: syz [ 144.712812][ T45] usb 4-1: SerialNumber: syz [ 144.731664][ T31] usb 3-1: device descriptor read/8, error -71 [ 144.862017][ T31] usb 3-1: device descriptor read/8, error -71 [ 144.935414][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.944451][ T45] usb 4-1: selecting invalid altsetting 0 [ 144.970390][ T45] usb 4-1: USB disconnect, device number 66 [ 145.006026][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.099973][ T31] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 145.122342][ T31] usb 3-1: device descriptor read/8, error -71 [ 145.249043][ T3430] netlink: 140 bytes leftover after parsing attributes in process `syz.1.895'. [ 145.252167][ T31] usb 3-1: device descriptor read/8, error -71 [ 145.369505][ T3435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.378062][ T3435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.385925][ T31] usb usb3-port1: unable to enumerate USB device [ 145.395544][ T3435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.404114][ T3435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.478043][ T3440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.898'. [ 145.540586][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.555220][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.575529][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.586209][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.322237][ T3465] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 146.330995][ T3465] netlink: 1 bytes leftover after parsing attributes in process `syz.0.909'. [ 146.401832][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.430088][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.450076][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.463222][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.480584][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.492152][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.653577][ T3483] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 146.920368][ T3494] cgroup: Unknown subsys name 'measure' [ 146.920368][ T3493] cgroup: Unknown subsys name 'measure' [ 146.990066][ T328] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 146.998168][ T36] kauditd_printk_skb: 525 callbacks suppressed [ 146.998183][ T36] audit: type=1400 audit(1781396781.636:30324): avc: denied { ioctl } for pid=3482 comm="syz.3.915" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.029959][ T45] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 147.043565][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.049966][ T36] audit: type=1400 audit(1781396781.656:30325): avc: denied { ioctl } for pid=3482 comm="syz.3.915" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.071856][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.083084][ T36] audit: type=1400 audit(1781396781.656:30326): avc: denied { read write } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.101755][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.117084][ T36] audit: type=1400 audit(1781396781.656:30327): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.117926][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.148016][ T36] audit: type=1400 audit(1781396781.656:30328): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.175413][ T36] audit: type=1400 audit(1781396781.686:30329): avc: denied { ioctl } for pid=3482 comm="syz.3.915" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.201281][ T36] audit: type=1400 audit(1781396781.686:30330): avc: denied { read write } for pid=3496 comm="syz.0.919" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.203142][ T328] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 147.225943][ T36] audit: type=1400 audit(1781396781.686:30331): avc: denied { read write open } for pid=3496 comm="syz.0.919" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.236811][ T328] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 147.260709][ T36] audit: type=1400 audit(1781396781.686:30332): avc: denied { ioctl } for pid=3496 comm="syz.0.919" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.272683][ T328] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 147.296735][ T36] audit: type=1400 audit(1781396781.686:30333): avc: denied { ioctl } for pid=3496 comm="syz.0.919" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.308456][ T328] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 147.335729][ T45] usb 3-1: descriptor type invalid, skip [ 147.342998][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.347837][ T45] usb 3-1: descriptor type invalid, skip [ 147.365236][ T45] usb 3-1: No LPM exit latency info found, disabling LPM. [ 147.375694][ T45] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 147.386414][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.388538][ T3483] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.397878][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.422458][ T45] usb 3-1: string descriptor 0 read error: -22 [ 147.429094][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.438167][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.450334][ T45] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 147.457134][ T45] cdc_ncm 3-1:1.0: bind() failure [ 147.607362][ T328] usb 4-1: string descriptor 0 read error: -71 [ 147.619192][ T328] hub 4-1:32.0: bad descriptor, ignoring hub [ 147.627000][ T328] hub 4-1:32.0: probe with driver hub failed with error -5 [ 147.665894][ T328] usb 4-1: USB disconnect, device number 67 [ 147.686795][ T9] usb 3-1: USB disconnect, device number 72 [ 147.714974][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.218499][ T3529] netlink: 104 bytes leftover after parsing attributes in process `syz.2.928'. [ 148.295373][ T3535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.320083][ T3535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.332811][ T3535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'. [ 148.343400][ T3535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.353548][ T3536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.362055][ T3535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.373862][ T3536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.409432][ T3538] syzkaller1: entered promiscuous mode [ 148.420069][ T3538] syzkaller1: entered allmulticast mode [ 148.529968][ T328] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 148.679968][ T328] usb 3-1: Using ep0 maxpacket: 8 [ 148.689395][ T328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.700868][ T328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.724259][ T328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.746742][ T328] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.775182][ T328] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.794895][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.813590][ T328] usb 3-1: Product: syz [ 148.817780][ T328] usb 3-1: Manufacturer: syz [ 148.835118][ T328] usb 3-1: SerialNumber: syz [ 149.009952][ T45] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 149.060381][ T328] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 149.067199][ T328] cdc_ncm 3-1:1.0: bind() failure [ 149.086690][ T328] usb 3-1: USB disconnect, device number 73 [ 149.189409][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 149.210403][ T45] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 149.220234][ T45] usb 4-1: config 0 has no interface number 1 [ 149.226346][ T45] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.238020][ T45] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 149.249977][ T45] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 149.261379][ T45] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 149.264818][ T3565] batadv_slave_1: entered promiscuous mode [ 149.271788][ T45] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.291559][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 149.303838][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 149.317120][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 149.320234][ T3564] batadv_slave_1: left promiscuous mode [ 149.331310][ T45] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 149.341816][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.349805][ T45] usb 4-1: Product: syz [ 149.361455][ T45] usb 4-1: Manufacturer: syz [ 149.368894][ T45] usb 4-1: SerialNumber: syz [ 149.387269][ T45] usb 4-1: config 0 descriptor?? [ 149.405597][ T3550] raw-gadget.7 gadget.3: fail, usb_ep_enable returned -22 [ 149.643453][ T328] usb 4-1: USB disconnect, device number 68 [ 149.878636][ T3577] netlink: 'syz.0.944': attribute type 27 has an invalid length. [ 149.902617][ T3577] sit0: left promiscuous mode [ 149.933928][ T3577] macsec0: left promiscuous mode [ 149.959289][ T3577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.975527][ T3577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.989991][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 150.140108][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 150.149200][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.168820][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7 [ 150.207119][ T9] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 150.226603][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.245462][ T9] usb 3-1: Product: syz [ 150.254399][ T9] usb 3-1: Manufacturer: syz [ 150.259275][ T9] usb 3-1: SerialNumber: syz [ 150.312028][ T3586] rust_binder: Failure in copy_transaction_data: EFAULT [ 150.312058][ T3586] rust_binder: 3584:3586 transaction to 3584 failed: EFAULT [ 150.557289][ T3589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.577861][ T3589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.981416][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.005212][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 151.043487][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 151.057292][ T9] usb 3-1: USB disconnect, device number 74 [ 151.209689][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.399967][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 151.552177][ T9] usb 3-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 151.562616][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.574235][ T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 151.583329][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.591382][ T9] usb 3-1: Product: syz [ 151.595536][ T9] usb 3-1: Manufacturer: syz [ 151.600130][ T9] usb 3-1: SerialNumber: syz [ 151.852489][ T9] usb 3-1: unit 4 not found! [ 151.867400][ T9] usb 3-1: USB disconnect, device number 75 [ 151.896165][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.059046][ T36] kauditd_printk_skb: 2156 callbacks suppressed [ 152.059063][ T36] audit: type=1400 audit(1781396786.696:32490): avc: denied { read write } for pid=2552 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.089609][ T36] audit: type=1400 audit(1781396786.696:32491): avc: denied { read write open } for pid=2552 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.116913][ T3615] tmpfs: Bad value for 'nr_inodes' [ 152.138292][ T36] audit: type=1400 audit(1781396786.696:32492): avc: denied { ioctl } for pid=2552 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.165910][ T36] audit: type=1400 audit(1781396786.756:32493): avc: denied { mounton } for pid=3614 comm="syz.3.956" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.219704][ T36] audit: type=1400 audit(1781396786.766:32494): avc: denied { read write } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.280574][ T36] audit: type=1400 audit(1781396786.766:32495): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.343367][ T36] audit: type=1400 audit(1781396786.766:32496): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.369444][ T36] audit: type=1400 audit(1781396786.796:32497): avc: denied { read write } for pid=2552 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.423958][ T36] audit: type=1400 audit(1781396786.796:32498): avc: denied { read write open } for pid=2552 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.452308][ T36] audit: type=1400 audit(1781396786.796:32499): avc: denied { ioctl } for pid=2552 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.572313][ T3636] netlink: 80 bytes leftover after parsing attributes in process `syz.3.964'. [ 152.593833][ T3638] sock: sock_set_timeout: `syz.2.966' (pid 3638) tries to set negative timeout [ 152.919987][ T45] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 152.977303][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.993327][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.113181][ T3640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.124827][ T3640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.294900][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.305500][ T45] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 153.313099][ T45] usb 4-1: can't read configurations, error -71 [ 153.578348][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.588072][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.590372][ T9] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 153.739962][ T9] usb 3-1: device descriptor read/64, error -71 [ 153.820400][ T3669] netlink: 'syz.3.977': attribute type 27 has an invalid length. [ 153.870914][ T3671] netlink: 104 bytes leftover after parsing attributes in process `syz.3.978'. [ 153.989077][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.163690][ T3687] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.983'. [ 154.240035][ T9] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 154.256142][ T3691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.275411][ T3691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.320772][ T3691] input: syz1 as /devices/virtual/input/input23 [ 154.380003][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.619967][ T9] usb 3-1: device descriptor read/64, error -71 [ 154.730029][ T9] usb usb3-port1: attempt power cycle [ 155.090010][ T9] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 155.126733][ T3710] batadv_slave_1: entered promiscuous mode [ 155.135608][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.148804][ T3709] batadv_slave_1: left promiscuous mode [ 155.259871][ T3722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.268492][ T3722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.290102][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.449997][ T1782] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 155.539982][ T9] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 155.561788][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.601861][ T1782] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.608828][ T1782] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 155.618527][ T1782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.630054][ T1782] usb 4-1: config 0 descriptor?? [ 155.691820][ T9] usb 3-1: device descriptor read/8, error -71 [ 155.800072][ T9] usb usb3-port1: unable to enumerate USB device [ 155.890258][ T3728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.900113][ T3728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.045942][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.056827][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.063766][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.070727][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.077589][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.084465][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.091352][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.098190][ T1782] apple 0003:05AC:027D.0016: unknown main item tag 0x0 [ 156.106670][ T1782] apple 0003:05AC:027D.0016: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 156.246958][ T1782] usb 4-1: USB disconnect, device number 71 [ 156.461997][ T3736] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.607216][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.630097][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.120346][ T36] kauditd_printk_skb: 1660 callbacks suppressed [ 157.120363][ T36] audit: type=1400 audit(1781396791.766:34160): avc: denied { ioctl } for pid=3763 comm="syz.2.1013" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.179962][ T328] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 157.188188][ T36] audit: type=1400 audit(1781396791.826:34161): avc: denied { ioctl } for pid=3763 comm="syz.2.1013" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.228247][ T36] audit: type=1400 audit(1781396791.826:34162): avc: denied { ioctl } for pid=3763 comm="syz.2.1013" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.264503][ T36] audit: type=1400 audit(1781396791.826:34163): avc: denied { ioctl } for pid=3763 comm="syz.2.1013" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.292985][ T36] audit: type=1400 audit(1781396791.866:34164): avc: denied { create } for pid=3765 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.313173][ T36] audit: type=1400 audit(1781396791.866:34165): avc: denied { setopt } for pid=3765 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.329977][ T328] usb 3-1: Using ep0 maxpacket: 16 [ 157.333007][ T36] audit: type=1400 audit(1781396791.866:34166): avc: denied { read write } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.341672][ T328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.362183][ T36] audit: type=1400 audit(1781396791.866:34167): avc: denied { read write open } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.399978][ T328] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 157.409083][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.414811][ T36] audit: type=1400 audit(1781396791.866:34168): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.435780][ T328] usb 3-1: config 0 descriptor?? [ 157.508401][ T36] audit: type=1400 audit(1781396791.896:34169): avc: denied { ioctl } for pid=3763 comm="syz.2.1013" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.867857][ T328] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x3 [ 157.876417][ T328] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x6 [ 157.884639][ T328] zeroplus 0003:0C12:0030.0017: unknown global tag 0xc [ 157.892260][ T328] zeroplus 0003:0C12:0030.0017: item 0 0 1 12 parsing failed [ 157.899892][ T328] zeroplus 0003:0C12:0030.0017: parse failed [ 157.907059][ T328] zeroplus 0003:0C12:0030.0017: probe with driver zeroplus failed with error -22 [ 157.939423][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.948067][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.076934][ T328] usb 3-1: USB disconnect, device number 80 [ 158.539959][ T328] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 158.618720][ T3805] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 158.630659][ T3805] overlayfs: missing 'lowerdir' [ 158.665055][ T3810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'. [ 158.681481][ T3810] 9pnet: Could not find request transport: f)nveu0x0000000000000006 [ 158.709958][ T328] usb 4-1: Using ep0 maxpacket: 32 [ 158.718209][ T3813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.744745][ T328] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 158.758265][ T3813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.774147][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.790296][ T328] usb 4-1: Product: syz [ 158.798412][ T328] usb 4-1: Manufacturer: syz [ 158.807049][ T3818] overlayfs: failed to resolve './file2/file0': -2 [ 158.815836][ T328] usb 4-1: SerialNumber: syz [ 158.829165][ T3818] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1031'. [ 158.840350][ T3820] netlink: 'syz.1.1032': attribute type 27 has an invalid length. [ 158.880479][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.040918][ T328] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.053124][ T328] usb 4-1: USB disconnect, device number 72 [ 159.146943][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.199688][ T3839] syz.2.1034(3839): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 159.487923][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.506457][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.689998][ T31] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 159.852252][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 159.860516][ T31] usb 3-1: config 0 has no interface number 0 [ 159.869060][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 159.878273][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.886283][ T31] usb 3-1: Product: syz [ 159.890483][ T31] usb 3-1: Manufacturer: syz [ 159.895068][ T31] usb 3-1: SerialNumber: syz [ 159.910016][ T31] usb 3-1: config 0 descriptor?? [ 159.916646][ T31] ftdi_sio 3-1:0.188: FTDI USB Serial Device converter detected [ 159.925248][ T31] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 160.116646][ T31] usb 3-1: USB disconnect, device number 81 [ 160.123018][ T31] ftdi_sio 3-1:0.188: device disconnected [ 160.280433][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.290340][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.303495][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.312992][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.662157][ T3873] netlink: 'syz.2.1047': attribute type 16 has an invalid length. [ 160.670114][ T3873] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1047'. [ 160.779957][ T626] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 160.936985][ T3885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.965933][ T626] usb 4-1: device descriptor read/64, error -71 [ 160.975241][ T3886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.980096][ T3885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.994186][ T3886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.161563][ T3893] netlink: 'syz.1.1055': attribute type 16 has an invalid length. [ 161.229969][ T626] usb 4-1: device descriptor read/64, error -71 [ 161.243397][ T3897] 9pnet_fd: Insufficient options for proto=fd [ 161.250713][ T328] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 161.409950][ T328] usb 3-1: Using ep0 maxpacket: 32 [ 161.417427][ T328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.426760][ T328] usb 3-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 161.436965][ T328] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.445944][ T328] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 182, changing to 7 [ 161.456887][ T328] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 18208, setting to 1024 [ 161.471600][ T328] usb 3-1: string descriptor 0 read error: -22 [ 161.477783][ T328] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 161.479958][ T626] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 161.487796][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.619985][ T626] usb 4-1: device descriptor read/64, error -71 [ 161.752405][ T328] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 161.763409][ T328] usb 3-1: USB disconnect, device number 82 [ 161.788939][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.859961][ T626] usb 4-1: device descriptor read/64, error -71 [ 161.970298][ T626] usb usb4-port1: attempt power cycle [ 162.227487][ T36] kauditd_printk_skb: 699 callbacks suppressed [ 162.227504][ T36] audit: type=1400 audit(1781396796.866:34869): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.258887][ T36] audit: type=1400 audit(1781396796.866:34870): avc: denied { read write open } for pid=297 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.284966][ T36] audit: type=1400 audit(1781396796.866:34871): avc: denied { ioctl } for pid=297 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.309972][ T626] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 162.311226][ T36] audit: type=1400 audit(1781396796.896:34872): avc: denied { ioctl } for pid=3870 comm="syz.3.1046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.332261][ T626] usb 4-1: device descriptor read/8, error -71 [ 162.342947][ T36] audit: type=1400 audit(1781396796.926:34873): avc: denied { create } for pid=3916 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.369544][ T36] audit: type=1400 audit(1781396796.926:34874): avc: denied { create } for pid=3916 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.390086][ T36] audit: type=1400 audit(1781396796.936:34875): avc: denied { write } for pid=3916 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.410928][ T36] audit: type=1400 audit(1781396796.936:34876): avc: denied { read } for pid=3916 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.446844][ T36] audit: type=1400 audit(1781396796.936:34877): avc: denied { read } for pid=3916 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.468217][ T36] audit: type=1400 audit(1781396796.936:34878): avc: denied { write } for pid=3916 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.482147][ T626] usb 4-1: device descriptor read/8, error -71 [ 162.521414][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 162.763061][ T626] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 162.794096][ T626] usb 4-1: device descriptor read/8, error -71 [ 162.945530][ T626] usb 4-1: device descriptor read/8, error -71 [ 163.070323][ T626] usb usb4-port1: unable to enumerate USB device [ 163.473113][ T3982] incfs: Can't find or create .index dir in ./cgroup [ 163.487353][ T3982] incfs: mount failed -22 [ 163.570414][ T3986] FAULT_INJECTION: forcing a failure. [ 163.570414][ T3986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.610917][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.0.1088 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 163.610950][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.610962][ T3986] Call Trace: [ 163.610970][ T3986] [ 163.610978][ T3986] __dump_stack+0x21/0x30 [ 163.611009][ T3986] dump_stack_lvl+0x140/0x1c0 [ 163.611034][ T3986] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.611060][ T3986] ? __kasan_check_write+0x18/0x20 [ 163.611081][ T3986] dump_stack+0x19/0x20 [ 163.611105][ T3986] should_fail_ex+0x3d7/0x530 [ 163.611129][ T3986] should_fail+0xf/0x20 [ 163.611158][ T3986] should_fail_usercopy+0x1e/0x30 [ 163.611182][ T3986] _copy_from_user+0x20/0xa0 [ 163.611200][ T3986] msr_io+0xa1/0x2b0 [ 163.611219][ T3986] ? __cfi_kvm_arch_vcpu_load+0x10/0x10 [ 163.611238][ T3986] ? __cfi_do_get_msr+0x10/0x10 [ 163.611257][ T3986] ? kvm_arch_dev_ioctl+0x990/0x990 [ 163.611278][ T3986] kvm_arch_vcpu_ioctl+0x9ee/0x2d90 [ 163.611299][ T3986] ? __cfi_avc_has_perm+0x10/0x10 [ 163.611318][ T3986] ? avc_perm_nonode+0x118/0x1d0 [ 163.611338][ T3986] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 163.611359][ T3986] ? selinux_file_open+0x46c/0x630 [ 163.611379][ T3986] ? __cfi_selinux_file_open+0x10/0x10 [ 163.611402][ T3986] ? is_bpf_text_address+0x17b/0x1a0 [ 163.611429][ T3986] ? kernel_text_address+0xa9/0xe0 [ 163.611455][ T3986] ? __kernel_text_address+0x11/0x40 [ 163.611479][ T3986] ? __asan_set_shadow_00+0x12/0x20 [ 163.611504][ T3986] ? do_vfs_ioctl+0x182d/0x2010 [ 163.611527][ T3986] ? arch_stack_walk+0x10a/0x170 [ 163.611546][ T3986] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 163.611570][ T3986] ? _parse_integer_limit+0x195/0x1e0 [ 163.611593][ T3986] ? _parse_integer+0x2e/0x40 [ 163.611614][ T3986] ? kstrtoull+0x13b/0x1e0 [ 163.611635][ T3986] ? kstrtouint+0x78/0xf0 [ 163.611653][ T3986] ? ioctl_has_perm+0x1bc/0x500 [ 163.611671][ T3986] ? __asan_memcpy+0x5a/0x80 [ 163.611689][ T3986] ? ioctl_has_perm+0x408/0x500 [ 163.611708][ T3986] ? has_cap_mac_admin+0xd0/0xd0 [ 163.611727][ T3986] ? __kasan_check_write+0x18/0x20 [ 163.611745][ T3986] ? mutex_lock_killable+0x97/0x1d0 [ 163.611766][ T3986] ? __cfi_mutex_lock_killable+0x10/0x10 [ 163.611787][ T3986] ? proc_fail_nth_write+0x184/0x220 [ 163.611813][ T3986] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 163.611840][ T3986] kvm_vcpu_ioctl+0x7da/0x1000 [ 163.611861][ T3986] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 163.611880][ T3986] ? __cfi_vfs_write+0x10/0x10 [ 163.611900][ T3986] ? __kasan_check_write+0x18/0x20 [ 163.611919][ T3986] ? mutex_unlock+0x90/0x240 [ 163.611938][ T3986] ? __cfi_mutex_unlock+0x10/0x10 [ 163.611958][ T3986] ? __fget_files+0x2c5/0x340 [ 163.611980][ T3986] ? __fget_files+0x2c5/0x340 [ 163.612001][ T3986] ? bpf_lsm_file_ioctl+0xd/0x20 [ 163.612024][ T3986] ? security_file_ioctl+0x3e/0x110 [ 163.612051][ T3986] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 163.612070][ T3986] __se_sys_ioctl+0x132/0x1b0 [ 163.612093][ T3986] __x64_sys_ioctl+0x7f/0xa0 [ 163.612115][ T3986] x64_sys_call+0x1878/0x2ee0 [ 163.612134][ T3986] do_syscall_64+0x57/0xf0 [ 163.612164][ T3986] ? clear_bhb_loop+0x50/0xa0 [ 163.612184][ T3986] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 163.612212][ T3986] RIP: 0033:0x7fbad1d9ce59 [ 163.612244][ T3986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.612259][ T3986] RSP: 002b:00007fbad07e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.612279][ T3986] RAX: ffffffffffffffda RBX: 00007fbad2015fa0 RCX: 00007fbad1d9ce59 [ 163.612294][ T3986] RDX: 0000200000000240 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 163.612306][ T3986] RBP: 00007fbad07e3090 R08: 0000000000000000 R09: 0000000000000000 [ 163.612319][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.612332][ T3986] R13: 00007fbad2016038 R14: 00007fbad2015fa0 R15: 00007ffea23658b8 [ 163.612349][ T3986] [ 164.096536][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.124831][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.154917][ T3995] netlink: 'syz.0.1091': attribute type 16 has an invalid length. [ 164.210187][ T3995] netlink: 'syz.0.1091': attribute type 2 has an invalid length. [ 164.217937][ T3995] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.1091'. [ 164.305073][ T4006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.819960][ T328] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 164.862598][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.876653][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.991737][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.002700][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.012471][ T328] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 165.021611][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.031034][ T328] usb 4-1: config 0 descriptor?? [ 165.439998][ T3827] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 165.541472][ T4038] input: syz0 as /devices/virtual/input/input24 [ 165.579986][ T3827] usb 3-1: device descriptor read/64, error -71 [ 165.641289][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.663722][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.829966][ T3827] usb 3-1: device descriptor read/64, error -71 [ 166.053589][ T328] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 166.062191][ T328] usb 4-1: USB disconnect, device number 77 [ 166.091038][ T3827] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 166.229954][ T3827] usb 3-1: device descriptor read/64, error -71 [ 166.469967][ T3827] usb 3-1: device descriptor read/64, error -71 [ 166.580995][ T3827] usb usb3-port1: attempt power cycle [ 166.829964][ T328] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 166.929956][ T3827] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 166.951835][ T3827] usb 3-1: device descriptor read/8, error -71 [ 166.982114][ T328] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 166.992211][ T328] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 167.002192][ T328] usb 4-1: config 1 interface 0 has no altsetting 0 [ 167.011353][ T328] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 167.020473][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.028442][ T328] usb 4-1: Product: syz [ 167.032641][ T328] usb 4-1: Manufacturer: syz [ 167.037234][ T328] usb 4-1: SerialNumber: syz [ 167.044660][ T4048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 167.052291][ T4048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 167.081939][ T3827] usb 3-1: device descriptor read/8, error -71 [ 167.260705][ T36] kauditd_printk_skb: 534 callbacks suppressed [ 167.260721][ T36] audit: type=1400 audit(1781396801.906:35413): avc: denied { ioctl } for pid=4035 comm="syz.2.1104" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.292403][ T36] audit: type=1400 audit(1781396801.906:35414): avc: denied { ioctl } for pid=4047 comm="syz.3.1110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.317869][ T36] audit: type=1400 audit(1781396801.906:35415): avc: denied { ioctl } for pid=4047 comm="syz.3.1110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.342902][ T3827] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 167.350769][ T36] audit: type=1400 audit(1781396801.966:35416): avc: denied { name_bind } for pid=4061 comm="syz.1.1115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 167.372926][ T36] audit: type=1400 audit(1781396801.966:35417): avc: denied { node_bind } for pid=4061 comm="syz.1.1115" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 167.395210][ T36] audit: type=1400 audit(1781396801.966:35418): avc: denied { create } for pid=4061 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.415949][ T36] audit: type=1400 audit(1781396801.966:35419): avc: denied { create } for pid=4061 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.436748][ T36] audit: type=1400 audit(1781396801.966:35420): avc: denied { write } for pid=4061 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.457388][ T36] audit: type=1400 audit(1781396801.966:35421): avc: denied { read } for pid=4061 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.478111][ T36] audit: type=1400 audit(1781396801.966:35422): avc: denied { read } for pid=4061 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.498946][ T3827] usb 3-1: device descriptor read/8, error -71 [ 167.632698][ T3827] usb 3-1: device descriptor read/8, error -71 [ 167.740043][ T3827] usb usb3-port1: unable to enumerate USB device [ 168.082326][ T328] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 168.435872][ T4089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1121'. [ 168.491925][ T4094] netlink: 'syz.2.1122': attribute type 27 has an invalid length. [ 168.513666][ T328] usb 4-1: USB disconnect, device number 78 [ 168.769961][ T626] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 168.921706][ T626] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.932990][ T626] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 168.943916][ T626] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.950539][ T626] usb 3-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.00 [ 168.959560][ T626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.970026][ T626] usb 3-1: config 0 descriptor?? [ 168.976290][ T4094] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.389148][ T626] hid (null): invalid report_size -940173296 [ 169.397141][ T626] wacom 0003:056A:0097.0019: invalid report_size -940173296 [ 169.405425][ T31] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 169.413036][ T626] wacom 0003:056A:0097.0019: item 0 4 1 7 parsing failed [ 169.420352][ T626] wacom 0003:056A:0097.0019: parse failed [ 169.426449][ T626] wacom 0003:056A:0097.0019: probe with driver wacom failed with error -22 [ 169.569964][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 169.577552][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.587582][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 169.600724][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 169.609741][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.618119][ T31] usb 4-1: Product: syz [ 169.622293][ T31] usb 4-1: Manufacturer: syz [ 169.626864][ T31] usb 4-1: SerialNumber: syz [ 169.843784][ T31] usb 4-1: MIDIStreaming interface descriptor not found [ 169.860996][ T31] usb 4-1: USB disconnect, device number 79 [ 169.924951][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.257831][ T4157] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.264303][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.480175][ T3826] usb 3-1: USB disconnect, device number 87 [ 171.639280][ T4167] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1141'. [ 171.648300][ T4167] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1141'. [ 171.657288][ T4167] netlink: 'syz.1.1141': attribute type 5 has an invalid length. [ 171.665391][ T4167] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1141'. [ 171.704042][ T4172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4172 comm=syz.1.1142 [ 171.849995][ T3826] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 171.979974][ T3826] usb 3-1: device descriptor read/64, error -71 [ 172.219998][ T3826] usb 3-1: device descriptor read/64, error -71 [ 172.293614][ T36] kauditd_printk_skb: 3031 callbacks suppressed [ 172.293630][ T36] audit: type=1400 audit(1781396806.936:38454): avc: denied { create } for pid=4173 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.320601][ T36] audit: type=1400 audit(1781396806.936:38455): avc: denied { create } for pid=4173 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.341361][ T36] audit: type=1400 audit(1781396806.936:38456): avc: denied { write } for pid=4173 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.362119][ T36] audit: type=1400 audit(1781396806.936:38457): avc: denied { write } for pid=4173 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.382729][ T36] audit: type=1400 audit(1781396806.986:38458): avc: denied { ioctl } for pid=4158 comm="syz.2.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.407674][ T36] audit: type=1400 audit(1781396807.006:38459): avc: denied { ioctl } for pid=4158 comm="syz.2.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.433360][ T36] audit: type=1400 audit(1781396807.076:38460): avc: denied { ioctl } for pid=4158 comm="syz.2.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.489951][ T3826] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 172.498048][ T36] audit: type=1400 audit(1781396807.136:38461): avc: denied { ioctl } for pid=4158 comm="syz.2.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.524094][ T36] audit: type=1400 audit(1781396807.166:38462): avc: denied { ioctl } for pid=4158 comm="syz.2.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.549133][ T36] audit: type=1400 audit(1781396807.166:38463): avc: denied { ioctl } for pid=4158 comm="syz.2.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.699955][ T3826] usb 3-1: device descriptor read/64, error -71 [ 172.949944][ T3826] usb 3-1: device descriptor read/64, error -71 [ 173.060026][ T3826] usb usb3-port1: attempt power cycle [ 173.089763][ T4178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1144'. [ 173.099090][ T4178] bridge_slave_0 (unregistering): left allmulticast mode [ 173.106161][ T4178] bridge_slave_0 (unregistering): left promiscuous mode [ 173.113143][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.121584][ T4178] veth0_to_bridge (unregistering): left allmulticast mode [ 173.128803][ T4178] veth0_to_bridge (unregistering): left promiscuous mode [ 173.136196][ T4178] bridge0: port 3(veth0_to_bridge) entered disabled state [ 173.309951][ T370] Bluetooth: hci0: command 0x1003 tx timeout [ 173.309951][ T369] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.409945][ T3826] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 173.431768][ T3826] usb 3-1: device descriptor read/8, error -71 [ 173.541356][ T4190] rust_binder: Failure in copy_transaction_data: EINVAL [ 173.541380][ T4190] rust_binder: 4188:4190 transaction to 4188 failed: EINVAL [ 173.562000][ T3826] usb 3-1: device descriptor read/8, error -71 [ 173.820006][ T3826] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 173.867047][ T3826] usb 3-1: device descriptor read/8, error -71 [ 174.021680][ T3826] usb 3-1: device descriptor read/8, error -71 [ 174.130009][ T3826] usb usb3-port1: unable to enumerate USB device [ 174.179956][ T626] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 174.309957][ T626] usb 4-1: device descriptor read/64, error -71 [ 174.552528][ T626] usb 4-1: device descriptor read/64, error -71 [ 174.679379][ T4215] incfs: Options parsing error. -22 [ 174.684703][ T4215] incfs: mount failed -22 [ 174.801348][ T626] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 174.911109][ T4233] netlink: 'syz.1.1162': attribute type 16 has an invalid length. [ 174.918959][ T4233] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1162'. [ 174.949964][ T626] usb 4-1: device descriptor read/64, error -71 [ 175.189960][ T626] usb 4-1: device descriptor read/64, error -71 [ 175.300026][ T626] usb usb4-port1: attempt power cycle [ 175.482326][ T4237] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 175.563674][ T4244] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 175.639961][ T626] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 175.661783][ T626] usb 4-1: device descriptor read/8, error -71 [ 175.791800][ T626] usb 4-1: device descriptor read/8, error -71 [ 175.834181][ T4248] netlink: 57 bytes leftover after parsing attributes in process `syz.2.1167'. [ 175.882272][ T4250] overlayfs: failed to resolve './file0': -2 [ 176.029956][ T626] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 176.051676][ T626] usb 4-1: device descriptor read/8, error -71 [ 176.181785][ T626] usb 4-1: device descriptor read/8, error -71 [ 176.189953][ T328] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 176.290287][ T626] usb usb4-port1: unable to enumerate USB device [ 176.342421][ T328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.352497][ T328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.362641][ T328] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 176.375865][ T328] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 176.384932][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.392925][ T328] usb 3-1: Product: syz [ 176.397059][ T328] usb 3-1: Manufacturer: syz [ 176.401654][ T328] usb 3-1: SerialNumber: syz [ 176.611573][ T328] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 08, bLength 9, bSynchAddress 00 [ 176.633865][ T328] usb 3-1: USB disconnect, device number 92 [ 176.708709][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 177.021243][ T4278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.029756][ T4278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.259946][ T31] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 177.330366][ T36] kauditd_printk_skb: 424 callbacks suppressed [ 177.330382][ T36] audit: type=1400 audit(1781396811.972:38888): avc: denied { ioctl } for pid=4277 comm="syz.3.1177" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.362484][ T36] audit: type=1400 audit(1781396811.972:38889): avc: denied { create } for pid=4297 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.409965][ T36] audit: type=1400 audit(1781396812.032:38890): avc: denied { create } for pid=4299 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.411706][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 177.466260][ T36] audit: type=1400 audit(1781396812.032:38891): avc: denied { write } for pid=4299 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.469331][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 177.506467][ T36] audit: type=1400 audit(1781396812.032:38892): avc: denied { read } for pid=4299 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.510054][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.527909][ T36] audit: type=1400 audit(1781396812.032:38893): avc: denied { read write } for pid=297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.536017][ T31] usb 4-1: Product: 奴㐌᝙⽶䝅䨽牅䙬豄૨උ首胣↛蝝軓!蓋颙鬰彉禙ׇ뷞㢐⩟壪럮㌳≩瘅퇂嵢볔 [ 177.558980][ T36] audit: type=1400 audit(1781396812.032:38894): avc: denied { create } for pid=4299 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.573777][ T31] usb 4-1: Manufacturer: 澟ᲊ❤⭳栢ࠈ駂ߠ藏ꦉ鶴팗ࡍ峥밮թേ剋򆙟縤粯龺쫈ꞧ㤫⪇脏↲്奻쁬瞲ﲀ룣ᵗ䧵启콷ࣂේ뵭⓱߮⋓ᾟ计፝岬st姲蟓䗀ຑ殇畦됢ᓆ龍㞇뽈膻䏠ᘌ껉渠잓쒐ꦹ䅜㐄ᓌ꧅蘲畀㙒䯔ꆱꩆᮟ滑鿀 [ 177.593269][ T36] audit: type=1400 audit(1781396812.032:38895): avc: denied { read write open } for pid=297 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.622412][ T31] usb 4-1: SerialNumber: 鲦鍴躆낱䪯﹑♔簼ﺖ쌶蚲꛸얏앣㪗⍍뢠蔠㋁膙뫽艡ᙆ䃠痩焵鷅嬮敲㼓蒱ဌᩙ↙䌛䉩愑⹄煀ꦹꍵ洨孲쟓꩝吓淙玄㻂캿쪞ৡὐᙶ९薒爹峁阂} [ 177.646310][ T36] audit: type=1400 audit(1781396812.032:38896): avc: denied { write } for pid=4299 comm="syz.1.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.688060][ T36] audit: type=1400 audit(1781396812.032:38897): avc: denied { ioctl } for pid=297 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.799941][ T626] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 177.879256][ T31] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 177.890777][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.911739][ T31] usb 4-1: USB disconnect, device number 84 [ 177.943777][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 177.959473][ T626] usb 3-1: Using ep0 maxpacket: 32 [ 177.966810][ T626] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 177.977566][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 177.986631][ T626] usb 3-1: config 0 has no interface number 0 [ 177.994877][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.003647][ T626] usb 3-1: config 0 has no interface number 0 [ 178.011703][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.020280][ T626] usb 3-1: config 0 has no interface number 0 [ 178.032353][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.040502][ T626] usb 3-1: config 0 has no interface number 0 [ 178.048071][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.056481][ T626] usb 3-1: config 0 has no interface number 0 [ 178.064067][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.072177][ T626] usb 3-1: config 0 has no interface number 0 [ 178.079466][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.087724][ T626] usb 3-1: config 0 has no interface number 0 [ 178.094903][ T626] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.102921][ T626] usb 3-1: config 0 has no interface number 0 [ 178.111343][ T626] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 178.120396][ T626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.128375][ T626] usb 3-1: Product: syz [ 178.132533][ T626] usb 3-1: Manufacturer: syz [ 178.137131][ T626] usb 3-1: SerialNumber: syz [ 178.143229][ T626] usb 3-1: config 0 descriptor?? [ 178.636369][ T4320] overlayfs: failed to resolve './bus': -2 [ 178.669967][ T626] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 178.819955][ T626] usb 4-1: device descriptor read/64, error -71 [ 179.069978][ T626] usb 4-1: device descriptor read/64, error -71 [ 179.309974][ T626] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 179.439955][ T626] usb 4-1: device descriptor read/64, error -71 [ 179.679949][ T626] usb 4-1: device descriptor read/64, error -71 [ 179.790420][ T626] usb usb4-port1: attempt power cycle [ 179.800932][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 179.814567][ T4335] overlayfs: conflicting options: userxattr,verity=on [ 179.823393][ T4335] netlink: 'syz.1.1197': attribute type 16 has an invalid length. [ 179.852506][ T4337] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1198'. [ 179.880344][ T4340] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1199'. [ 180.129981][ T626] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 180.151792][ T626] usb 4-1: device descriptor read/8, error -71 [ 180.282229][ T626] usb 4-1: device descriptor read/8, error -71 [ 180.453711][ T45] usb 3-1: USB disconnect, device number 93 [ 180.516100][ T4359] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 180.520782][ T626] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 180.573313][ T626] usb 4-1: device descriptor read/8, error -71 [ 180.681573][ T328] usb 1-1: USB disconnect, device number 31 [ 180.717910][ T626] usb 4-1: device descriptor read/8, error -71 [ 180.846728][ T4377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1211'. [ 180.870071][ T626] usb usb4-port1: unable to enumerate USB device [ 180.928903][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.957967][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.965150][ T4375] bridge_slave_0: entered allmulticast mode [ 180.971675][ T4375] bridge_slave_0: entered promiscuous mode [ 180.978986][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.986054][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.993193][ T4375] bridge_slave_1: entered allmulticast mode [ 180.999495][ T4375] bridge_slave_1: entered promiscuous mode [ 181.133427][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.140516][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.147796][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.154868][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.226059][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.234028][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.246274][ T914] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.253342][ T914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.263517][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.270577][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.330065][ T4375] veth0_vlan: entered promiscuous mode [ 181.357592][ T4375] veth1_macvtap: entered promiscuous mode [ 181.369968][ T328] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 181.510074][ T328] usb 3-1: device descriptor read/64, error -71 [ 181.689965][ T626] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 181.760224][ T328] usb 3-1: device descriptor read/64, error -71 [ 181.819960][ T3828] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 181.842237][ T626] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.851386][ T626] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 181.864850][ T626] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 181.873979][ T626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.883270][ T626] usb 5-1: Product: syz [ 181.887427][ T626] usb 5-1: Manufacturer: syz [ 181.892180][ T626] usb 5-1: SerialNumber: syz [ 181.979945][ T3828] usb 4-1: Using ep0 maxpacket: 32 [ 181.987060][ T3828] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 181.996037][ T3828] usb 4-1: config 0 has no interface number 0 [ 182.002617][ T328] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 182.010220][ T3828] usb 4-1: config 0 interface 184 has no altsetting 0 [ 182.026682][ T3828] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 182.035882][ T3828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.044696][ T3828] usb 4-1: Product: syz [ 182.048871][ T3828] usb 4-1: Manufacturer: syz [ 182.054663][ T3828] usb 4-1: SerialNumber: syz [ 182.061502][ T3828] usb 4-1: config 0 descriptor?? [ 182.072005][ T3828] smsc75xx v1.0.0 [ 182.113370][ T626] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 182.140346][ T328] usb 3-1: device descriptor read/64, error -71 [ 182.313514][ T626] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 182.321999][ T626] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 182.389991][ T328] usb 3-1: device descriptor read/64, error -71 [ 182.477171][ T36] kauditd_printk_skb: 576 callbacks suppressed [ 182.477188][ T36] audit: type=1400 audit(1781396817.112:39474): avc: denied { ioctl } for pid=4406 comm="syz.3.1220" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.508415][ T36] audit: type=1400 audit(1781396817.112:39475): avc: denied { ioctl } for pid=4406 comm="syz.3.1220" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.510499][ T328] usb usb3-port1: attempt power cycle [ 182.535311][ T36] audit: type=1400 audit(1781396817.152:39476): avc: denied { ioctl } for pid=4397 comm="syz.2.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.564040][ T36] audit: type=1400 audit(1781396817.182:39477): avc: denied { ioctl } for pid=4397 comm="syz.2.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.589048][ T36] audit: type=1400 audit(1781396817.182:39478): avc: denied { ioctl } for pid=4397 comm="syz.2.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.614234][ T36] audit: type=1400 audit(1781396817.182:39479): avc: denied { ioctl } for pid=4404 comm="syz.4.1208" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.639237][ T36] audit: type=1400 audit(1781396817.182:39480): avc: denied { ioctl } for pid=4404 comm="syz.4.1208" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.664360][ T36] audit: type=1400 audit(1781396817.262:39481): avc: denied { ioctl } for pid=4397 comm="syz.2.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.689818][ T36] audit: type=1400 audit(1781396817.262:39482): avc: denied { ioctl } for pid=4397 comm="syz.2.1218" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.713917][ T4407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.714830][ T36] audit: type=1400 audit(1781396817.332:39483): avc: denied { read write } for pid=4406 comm="syz.3.1220" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.727122][ T4407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.760549][ T3828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 182.772301][ T626] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 182.773449][ T3828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 182.889984][ T328] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 182.913068][ T328] usb 3-1: device descriptor read/8, error -71 [ 182.961663][ T3828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 182.972528][ T3828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 182.979587][ T4407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.983217][ T3828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 182.997031][ T4407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.003450][ T3826] usb 5-1: USB disconnect, device number 2 [ 183.016846][ T3828] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 183.026952][ T3828] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 183.048228][ T328] usb 3-1: device descriptor read/8, error -71 [ 183.299952][ T328] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 183.321692][ T328] usb 3-1: device descriptor read/8, error -71 [ 183.451767][ T328] usb 3-1: device descriptor read/8, error -71 [ 183.570031][ T328] usb usb3-port1: unable to enumerate USB device [ 183.795462][ T4436] overlayfs: overlapping lowerdir path [ 184.011634][ T4447] netlink: 'syz.1.1232': attribute type 3 has an invalid length. [ 184.039959][ T626] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.065404][ T4452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4452 comm=syz.1.1234 [ 184.201122][ T626] usb 5-1: Using ep0 maxpacket: 32 [ 184.216593][ T626] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.232335][ T626] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 184.246977][ T626] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 184.259921][ T626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.267925][ T626] usb 5-1: Product: syz [ 184.273031][ T626] usb 5-1: Manufacturer: syz [ 184.277638][ T626] usb 5-1: SerialNumber: syz [ 184.504266][ T626] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.513088][ T626] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 184.527141][ T45] usb 4-1: USB disconnect, device number 89 [ 184.536104][ T626] usb 5-1: USB disconnect, device number 3 [ 184.596394][ T31] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 184.610571][ T31] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.711543][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.024666][ T4470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1239'. [ 185.199794][ T4479] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1242'. [ 185.233169][ T922] ------------[ cut here ]------------ [ 185.238678][ T922] WARNING: CPU: 0 PID: 922 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 185.249225][ T922] Modules linked in: [ 185.253150][ T922] CPU: 0 UID: 0 PID: 922 Comm: kworker/u8:25 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 185.264956][ T922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.275038][ T922] Workqueue: iou_exit io_ring_exit_work [ 185.280628][ T922] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 185.286991][ T922] Code: 5d e9 c5 46 55 02 cc e8 0f 14 32 fe 0f 0b eb e3 e8 06 14 32 fe 0f 0b eb da e8 fd 13 32 fe 0f 0b e9 4d fe ff ff e8 f1 13 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 185.306616][ T922] RSP: 0018:ffffc9000ed3f990 EFLAGS: 00010293 [ 185.312847][ T922] RAX: ffffffff8355adbf RBX: 1ffff11021ee7fbd RCX: ffff88811a90cc00 [ 185.320874][ T922] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000347 [ 185.328853][ T922] RBP: ffffc9000ed3f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 185.336863][ T922] R10: 0000000000000000 R11: ffffffff83559da0 R12: ffff88812fb6df00 [ 185.344913][ T922] R13: ffff88810f73fdc0 R14: ffff888113b30000 R15: ffff888113b30010 [ 185.352896][ T922] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 185.361865][ T922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.368448][ T922] CR2: 000055de03cfd638 CR3: 000000012ff88000 CR4: 00000000003526b0 [ 185.376436][ T922] DR0: 0000000000000000 DR1: 00000000000039b7 DR2: 0000000000000000 [ 185.384426][ T922] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 185.392419][ T922] Call Trace: [ 185.395698][ T922] [ 185.398615][ T922] ? _raw_spin_unlock+0x45/0x60 [ 185.403480][ T922] ublk_ch_uring_cmd+0x6f/0xa0 [ 185.408246][ T922] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 185.414252][ T922] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 185.420170][ T922] ? io_uring_cancel_generic+0x6eb/0x6eb [ 185.425802][ T922] ? __cfi___switch_to+0x10/0x10 [ 185.430746][ T922] ? kthread_data+0x54/0xc0 [ 185.435251][ T922] io_ring_exit_work+0x23c/0x83b [ 185.440195][ T922] ? _raw_spin_unlock+0x45/0x60 [ 185.445842][ T922] ? __cfi_io_ring_exit_work+0x10/0x10 [ 185.451322][ T922] process_scheduled_works+0x7d4/0x1020 [ 185.456877][ T922] worker_thread+0xc51/0x1370 [ 185.461577][ T922] kthread+0x2c9/0x370 [ 185.465648][ T922] ? __cfi_worker_thread+0x10/0x10 [ 185.470889][ T922] ? __cfi_kthread+0x10/0x10 [ 185.475486][ T922] ret_from_fork+0x67/0xa0 [ 185.479918][ T922] ? __cfi_kthread+0x10/0x10 [ 185.484509][ T922] ret_from_fork_asm+0x1a/0x30 [ 185.489259][ T922] [ 185.492290][ T922] ---[ end trace 0000000000000000 ]---