last executing test programs: 2m12.066949525s ago: executing program 32 (id=94): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x2d, [0x80000000, 0x3, 0x3ff0, 0x1eb, 0xfffffffd, 0x0, 0x4000004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0xfffffffe, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x401e, 0x0, 0x20, 0x13f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x401, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0xc5, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x1], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x219, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x800000, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x89e6, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0x7, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x6, 0x2000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)="3145d6f500000000c87b0400f96ebdefee9b486474091eb834749e6a074775ccfd77d0d9c0ae", 0x26) pwritev(r3, &(0x7f0000000800)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x7012}) write$cgroup_subtree(r5, &(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRES32, @ANYRES32=r5, @ANYBLOB="29e71bfaaa42f236d5f8a03327f8abf9b7d3f1b42ee135f5cc7341d9d37c47799bcd1351e60d15c31d2c694370af222efaa6b154f1fb8463e8c7069a14b570f4cf6d893522513fb61314c9cc44eb802fcaadfc0ceb9c9aefab1e0a49fc9403b573f8a8269e56fbc91fa08bd06bdf8ac437d8352c955e73eb232fc676426a045c845753e7a3f07a2638a76ddf537cdaef2a76c7506a28827a2e4f6c3d0652918d6f33f8f0a6d62e6010cf27224bb9ea0262de985aafe1e18b9545e6e6babb304d89048f5fe8e1bd2839e9a0eb93e9bd6f501c0da16efc09ac70502506476f0f1086e8f39027eacab39567966f0440b8", @ANYRESOCT=r3, @ANYRES16=r3, @ANYRES32=r4], 0x6e8a) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect(0x1, 0x51, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @empty}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000001480)=ANY=[], 0x0) pread64(r7, &(0x7f0000000600)=""/92, 0x5c, 0xf7) 2m7.978641137s ago: executing program 5 (id=114): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500000000000000000090f84f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) (async, rerun: 64) pipe(&(0x7f00000001c0)) (async, rerun: 64) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000140)={0xd6d, 0x2}) (async) write(r3, &(0x7f0000000200)="70f752ee296877c97f5df01b896aa10ef3ef9e795f5efb9df22f14887ab2268264937b7913940673fda377b310b0de67880b44d9f47412479e4681aaf103291921866c20678f0be8e5072c490d70dbd0b53383a6b1f55918ae760080b2de72584f251b5dc0", 0x65) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRESDEC], 0xfe, 0x1518, &(0x7f00000022c0)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x4d842, 0x180) write$FUSE_OPEN(r4, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) (async) write$FUSE_BMAP(r4, &(0x7f0000005840)={0x18, 0x0, 0x0, {0x5}}, 0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x1, 0xe}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x408c4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m7.85877454s ago: executing program 5 (id=117): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="d000c76e", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000055008e0003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x1, 'pimreg0\x00', {}, 0xd594}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0200000001"], 0x48) r10 = fsmount(r4, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) fchdir(r10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000009f40)={0x2020}, 0x2020) 2m7.167204767s ago: executing program 33 (id=123): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x5, 0x4, 0x3c8, 0x110, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local, @private=0xa010101, @broadcast, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000000c0)={[{@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@rodir}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@fat=@showexec}, {@uni_xlate}, {@utf8}, {@fat=@nfs_stale_rw}, {@utf8}, {@utf8}, {@utf8}, {@fat=@nfs_stale_rw}, {@rodir}], [{@seclabel}]}, 0x1, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") 2m6.972242282s ago: executing program 5 (id=126): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44041}, 0x4) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x7003, [0x80002, 0xfffffff9, 0x7ff, 0x2, 0xa]}, &(0x7f0000000100)=0xfffffffffffffcef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x80d, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d66642c727f646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=client,version=9p2000,\x00']) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfff, 0x3, 0x7}, {0x8, 0x1, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24049084}, 0x0) 2m6.761316217s ago: executing program 5 (id=128): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f0000000240)={[{@errors_remount}, {@mblk_io_submit}, {@grpjquota}, {@grpid}, {@quota}]}, 0x5, 0x4f7, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x20080}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m6.384036657s ago: executing program 5 (id=130): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002a80)=[{&(0x7f0000000980)=""/4091, 0xffb}], 0x1, 0xffffff2c, 0x6) pread64(r0, &(0x7f0000000080)=""/24, 0x18, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000200", @ANYRES16=r2, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x8000800}, 0x4040800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f0000002a80)=[{&(0x7f0000000980)=""/4091, 0xffb}], 0x1, 0xffffff2c, 0x6) (async) pread64(r0, &(0x7f0000000080)=""/24, 0x18, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000200", @ANYRES16=r2, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x8000800}, 0x4040800) (async) 2m6.085498364s ago: executing program 6 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x46f8, 0x20000000, 0x400000, 0x1, 0x900}}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000022, &(0x7f0000000040)=0x5, 0x4) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000000)) (async) pread64(r2, &(0x7f0000000040)=""/103, 0x67, 0x800) (async) truncate(&(0x7f0000000000)='./proc/kallsyms\x00', 0x4) 2m6.036576965s ago: executing program 6 (id=132): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@errors_remount}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@bh}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="7dbe", 0x2, 0xffffffffffffffff) r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4004, r1, 0x0, 0x0, 0xdf, 0x0, 0x2}]) 2m5.954338927s ago: executing program 5 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$wireguard(0x0, r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610faca20180c2000100023d00450000240000e0004f1190787f000001000000008000fffc04109078a20c0001"], 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000003500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}]}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @broadcast}, 0xc8cc6de1a20d61c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 2m5.85964751s ago: executing program 34 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$wireguard(0x0, r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610faca20180c2000100023d00450000240000e0004f1190787f000001000000008000fffc04109078a20c0001"], 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000003500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}]}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e23, @broadcast}, 0xc8cc6de1a20d61c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 2m5.797203001s ago: executing program 6 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) fstat(0xffffffffffffffff, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0) mount(0x0, 0x0, 0x0, 0x904018, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='mounts\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) 2m5.570156777s ago: executing program 6 (id=138): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@auto_da_alloc}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x606681, 0x0) fallocate(r0, 0x0, 0xfff, 0x9) (async) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x5c, 0xe9, &(0x7f0000000140)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x49, 0x0, 0x0, 0x2}, 0x23) 2m5.536979828s ago: executing program 35 (id=138): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@auto_da_alloc}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x606681, 0x0) fallocate(r0, 0x0, 0xfff, 0x9) (async) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x5c, 0xe9, &(0x7f0000000140)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x49, 0x0, 0x0, 0x2}, 0x23) 1m59.330238942s ago: executing program 7 (id=189): r0 = userfaultfd(0x80801) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) unshare(0x62020600) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000003dc0)=0x1, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="090000000b0000000200000009"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x4, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}]}]}, 0xdc}}, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "25351d", 0x18, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @enc_lim, @jumbo, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r4, &(0x7f0000000240), 0x0}, 0x20) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000440c0000140012800b0001006d6163736563000004000280ef91727b0a9e1821f65e1b565495c6ea0493687593316037359bda11ab6b61566407405aece66935a46f94e0c3c4f7502d0515b7c3b3df897a9f4d15ff20ccc70a318231a647c9671556bd690308f67cd221c763e2c84ee7960e40844f91f22592f6da990473897c8b71c0c0ce7d0f69201fccacdaeed82440086697eb3f4ca6b27af04b0475d158593b02235de4d79bd0c7b1994b71d46a57108050ee2ac3175938a22752"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x810) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="70020700"/20, @ANYBLOB="eedc3d4def55ebe86eaa719b51254b21755c071eff95021f53c037162d02829c9f6d383ad80ec0fbae95720de29417edbef664a9a0fd3cc4e317d275f8e98bb66b873d761eca8ef86e3fedfd763c64b14dedcc72a2e1a07fc5b16e98600c2d05f369035c61b2af782b5c5a0f0295f91d09b3deeb37cc1b447d6763f9a182da583345d4249be067d40b7586e62f1ca88de03cd6576bf0e9f570af1877ce14b8ffa1adf0a9d660c4b829400bda", @ANYBLOB="0000000000db89985811000000100400ae9a1930ce76d0ab170dfaf3eba179953e8c750400001000000000e4f4c9752aacac49a9ea7031"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x20040004) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.030743859s ago: executing program 7 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f1063ed094defdb886f746d6f64653d7030303030303030303030303030303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r2}, 0x10) pipe2(&(0x7f0000000440), 0x1080) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x3) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/keycreate\x00') fchdir(r3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x866040, 0x0, 0x1, 0x0, 0x0) 1m58.982689351s ago: executing program 7 (id=192): syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000240)={[{@uni_xlateno}, {@utf8}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@shortname_winnt}, {@fat=@umask}, {@rodir}, {@rodir}, {@utf8}, {@shortname_winnt}, {@shortname_win95}]}, 0x2d, 0x33e, &(0x7f0000000480)="$eJzs3T1sW1UUAODjPidOIpVkQEIwGTYkVDVBDDAlqopUkQGKLP4WIppAyTOVYmEpDHWzFDGCWJDY2DrAyIwYEGJjYKUDKiAWulVqxUP2e7aff0JThMPf9w3V6bnn+N13cxW/RMnNq+uxe2Eudm7evBELC5Worp9Zj1uVWIkTkUTuSgAA/yW3six+zXJ3r/5gqR/Nz3heAMDs9N7/Xz+Z/yeNiFosTq+8eqzzAgBm54hf/z87NXtpZtMCAGZo4v3/kZHhsW/zVwc/EwAA/Hs9/9LLz2xsRpyv1xcimu+2G+1GPDUcX4y4GGlsx+lYjjsR+YNC/rTQ/ffpc5tnT9e7flyJRrej3YhodtqN/ElhI+n112I1lmOl6M8G/Um3f7XXX4+IK53e9aNZaTfmYqnbvxMXv1+K7ViL5bh/oj/i3ObZtXrxAo1mv78TcRAL/Zvozv9ULMe3r8WlSONCdHuH87+8Wq+fyTZH+tvXar06AAAAAAAAAAAAAAAAAAAAAACYhVP1gZXB+TdZs9O+en68YGXkfJxGPryx0zvf5yA/Hyir9U/neS8ZPx9o9HyedqMaJ/7WOwcAAAAAAAAAAAAAAAAAAIB/jtb+fGyl6fZea/+d3XLQKWXe+vrTLxdjvObNZJiJav5yIzVFLkpdSQzas0F7lozUFEESMSy+9vlgxuWa2uAuJtq7QW1iqFLMaStNTz78w8fTun4bZpKYWJbRoFJcvzTUvC9P/UHX4cHaXWquZ1l2WPvljya7ohJRnfjA/RXBVzfeePDx1gNP9DJfFIc+PPrY8gvXP/zk592tNIqlSdP5vdad7E9fKyntn0qxzpUpO2F6cDDMHOy19reS73558aH3v+nXVPOdkEzfP1k58/bh1/psPDOfB91pHuVO56Zs/unBK7cHu/eeF3O+WLSfjtpV+iThoA4AAAAAAAAAAAAAAAAAADgWpd8VvwdPPje7GQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8Rv+/f9ScDCROUpwuxOTQ7XtvdahF1881lsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7PcAAAD//9Yzc50=") syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200c8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000030303"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) 1m58.679847848s ago: executing program 7 (id=194): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_usb_connect$cdc_ncm(0x2, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="120110011d0000402505a1a440000102030109028700020110509f0904000001020d000006240600014405240009000d240f013f0f000000020002e0f742535310e998b23a20d15c062c1a0300001424120100a317a88b045e4f01a607c0ffcb7e392a1524120200a317a88b045e4f01a607c0ffcb7f392a09058103ff030905020904010000020d00000b04010102020d0000090582020002020105090503021000020e10"], 0x0) 1m56.940949962s ago: executing program 7 (id=202): syz_emit_ethernet(0xfc1, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x8, 0x4) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) r2 = socket(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x1) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x2c, 0x5a, 0x11d, 0x70bd32, 0x25dfdbf9, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x44800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) ftruncate(0xffffffffffffffff, 0x8800000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x578410eb) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m56.892318213s ago: executing program 7 (id=203): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_print_times', 0x20001, 0x139) write$FUSE_DIRENT(r1, &(0x7f0000000280)={0x128, 0xffffffffffffffda, 0x0, [{0x4, 0x5, 0x7, 0x4, '{*$#}-!'}, {0x3, 0x7ff, 0x3, 0x200, '$$.'}, {0x0, 0xce8f, 0x1, 0x3, '\x00'}, {0x5, 0x7fffffff, 0x1, 0x1, '{'}, {0x3, 0x5, 0xb, 0xb8, '/dev/loop#\x00'}, {0x5, 0xa, 0xb, 0xffffff01, '/dev/loop#\x00'}, {0x3, 0x3, 0x1, 0x8001, '\x00'}, {0x6, 0x5, 0xb, 0x4, '/dev/loop#\x00'}]}, 0x128) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0xba8c051, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x6, 0x19, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "5237601a8ca5b07fcc141802c4dae4162e43ac61b7ad3300000000001000", [0x0, 0x3]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 1m56.867065433s ago: executing program 36 (id=203): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_print_times', 0x20001, 0x139) write$FUSE_DIRENT(r1, &(0x7f0000000280)={0x128, 0xffffffffffffffda, 0x0, [{0x4, 0x5, 0x7, 0x4, '{*$#}-!'}, {0x3, 0x7ff, 0x3, 0x200, '$$.'}, {0x0, 0xce8f, 0x1, 0x3, '\x00'}, {0x5, 0x7fffffff, 0x1, 0x1, '{'}, {0x3, 0x5, 0xb, 0xb8, '/dev/loop#\x00'}, {0x5, 0xa, 0xb, 0xffffff01, '/dev/loop#\x00'}, {0x3, 0x3, 0x1, 0x8001, '\x00'}, {0x6, 0x5, 0xb, 0x4, '/dev/loop#\x00'}]}, 0x128) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0xba8c051, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x6, 0x19, 0x0, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "5237601a8ca5b07fcc141802c4dae4162e43ac61b7ad3300000000001000", [0x0, 0x3]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 1m44.330795315s ago: executing program 3 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlink(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000002c0)='\n', 0x1) write(r0, &(0x7f0000000300)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000340)='\n', 0x1) write(r0, &(0x7f0000000380)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000003c0)='\n', 0x1) write(r0, &(0x7f0000000400)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000440)='\n', 0x1) write(r0, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000540)='\n', 0x1) write(r0, &(0x7f0000000580)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000005c0)='\n', 0x1) write(r0, &(0x7f0000000600)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000640)='\n', 0x1) write(r0, &(0x7f0000000680)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000006c0)='\n', 0x1) write(r0, &(0x7f0000000700)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000740)='\n', 0x1) 1m44.194012629s ago: executing program 3 (id=308): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60410100000010203010902200001010080320904000002080680000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x40, 0x82, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x4}, &(0x7f0000000c00)={0x20, 0x0, 0x4}, &(0x7f0000000d00)={0x40, 0x7, 0x2}, &(0x7f0000000e00)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0xc0, 0x82, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000700)={0x40, 0x40, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000900)={0xc0, 0x50, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)) nanosleep(&(0x7f0000000f00)={0x2, 0x5f5e100}, 0x0) 1m41.263974941s ago: executing program 3 (id=320): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000000, 0x1}}, @code={0xa, 0x17, {"0f01c10f01d9"}}], 0x37}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x1, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0x10676}, {0x40000000, 0x0, 0x0, 0x4000000a, 0x78756e69, 0x7648204d}, {0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000000, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m41.093404706s ago: executing program 3 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="50000000100005060100000000000000000000000000000001000000010000000c00030076786c616e300000240012000a00010076786c616e00000014000200080001002a0000000600050012b50000", 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0800000000002a0011223344", 0xc, 0x0, &(0x7f0000000200)={0x2, 0x12b5, @local}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500002c000000004011fa95ac141402ac14140112b512b5001800000800000000002a001122334455667788"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000040000000004001fa91ac141402ac1414010303a5820000000045000024000000004011fa9dac141401ac14140212b512b5001000000800000000002a00"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 1m41.019924898s ago: executing program 3 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='./sys\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1e.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='0000:00:1e.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers_probe\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0000:00:1e.0\x00', 0xd) 1m40.963361719s ago: executing program 3 (id=325): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e0903000001000000010902270001010080320904000003ff00000007058102000200070502020002000705830340000a"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m26.661829555s ago: executing program 37 (id=325): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e0903000001000000010902270001010080320904000003ff00000007058102000200070502020002000705830340000a"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 18.954541829s ago: executing program 8 (id=519): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000780)='0\x00', 0x2) 18.939939399s ago: executing program 8 (id=520): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:10.0\x00', 0xd) write(r0, &(0x7f00000001c0)='0000:00:11.0\x00', 0xd) write(r0, &(0x7f0000000200)='0000:00:12.0\x00', 0xd) write(r0, &(0x7f0000000240)='0000:00:13.0\x00', 0xd) write(r0, &(0x7f0000000280)='0000:00:14.0\x00', 0xd) write(r0, &(0x7f00000002c0)='0000:00:15.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0000:00:10.0\x00', 0xd) write(r1, &(0x7f0000000380)='0000:00:11.0\x00', 0xd) write(r1, &(0x7f00000003c0)='0000:00:12.0\x00', 0xd) write(r1, &(0x7f0000000400)='0000:00:13.0\x00', 0xd) write(r1, &(0x7f0000000440)='0000:00:14.0\x00', 0xd) write(r1, &(0x7f0000000480)='0000:00:15.0\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mysys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0000:00:10.0\x00', 0xd) write(r2, &(0x7f0000000540)='0000:00:11.0\x00', 0xd) write(r2, &(0x7f0000000580)='0000:00:12.0\x00', 0xd) write(r2, &(0x7f00000005c0)='0000:00:13.0\x00', 0xd) write(r2, &(0x7f0000000600)='0000:00:14.0\x00', 0xd) write(r2, &(0x7f0000000640)='0000:00:15.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='1af4 1000\x00', 0xa) 18.92281102s ago: executing program 8 (id=521): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/usb2/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='auto\x00', 0x5) 18.867884041s ago: executing program 8 (id=522): syz_usb_connect(0x0, 0x32, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4e6, 0x1010, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 18.032661742s ago: executing program 4 (id=526): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='stm32g0-typec 0x35\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='stm32g0-typec 0x35\n', 0x13) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='stm32g0-typec 0x35\n', 0x13) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='freeze\n\x00'/23, 0x7) close(r3) 15.972608383s ago: executing program 8 (id=549): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r4) 15.903312445s ago: executing program 8 (id=551): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a120100010203010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r0) 14.823116261s ago: executing program 0 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='auto\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='auto\x00', 0x5) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='0\x00', 0x2) close(r6) write(0xffffffffffffffff, &(0x7f0000000880)='auto\x00', 0x5) 14.804114382s ago: executing program 0 (id=568): add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000000), &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) 14.743700723s ago: executing program 0 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 14.645581646s ago: executing program 0 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r3, 0x5427) 14.614469197s ago: executing program 0 (id=572): syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010000000109024400020100c000090400000102020100052400100105240100010424020205240600010705810310000a09040100020a0000000705020240000007058102400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x0, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000300)=0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000400)={{{0x2}}, 0x11, 0x0, &(0x7f0000000500)='hello_bulk_write\x00'}) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) 14.267640886s ago: executing program 4 (id=573): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) 14.146501158s ago: executing program 4 (id=574): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r4) 14.023748052s ago: executing program 4 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mount/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='dummy_hcd.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c60511920001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/bus/usb/drivers/qcserial/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1-1:1.0', 0x7) 1.399361265s ago: executing program 38 (id=551): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a120100010203010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r0) 1.376188666s ago: executing program 0 (id=579): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 1.363345587s ago: executing program 4 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) nanosleep(&(0x7f0000000440)={0x0, 0x5f5e100}, 0x0) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 1.261838179s ago: executing program 2 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r3, 0x5427) 1.171512421s ago: executing program 2 (id=585): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r4) 1.146483152s ago: executing program 4 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000401aeb20280000010203010902190001010080fa0904000001ff00000007058202000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/em28xx/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1-1:1.0\x00', 0x8) 1.032395105s ago: executing program 2 (id=588): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:1d.7\x00', 0xd) close(r0) nanosleep(&(0x7f0000000600)={0x1, 0x1dcd6500}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000700), 0xc, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000800), 0xd, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000900), 0xe, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000a00), 0xf, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x10, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000001100), 0x16, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000001200), 0x17, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000001300), 0x18, 0x2) r9 = syz_open_dev$usbfs(&(0x7f0000001400), 0x20, 0x2) r10 = syz_open_dev$usbfs(&(0x7f0000001500), 0x21, 0x2) r11 = syz_open_dev$usbfs(&(0x7f0000001600), 0x22, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000c00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000d00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000e00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000f00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001000)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000001700)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000001800)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000001900)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000001a00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000001b00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000001c00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) 467.739289ms ago: executing program 9 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 397.780601ms ago: executing program 9 (id=597): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) close(0xffffffffffffffff) 319.931253ms ago: executing program 1 (id=598): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r4) 254.493124ms ago: executing program 9 (id=599): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='testfile\x00', 0x42, 0x1ff) ftruncate(r0, 0x400000) mmap(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x3, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x64, 0x0, 0x8000000, 0x400000, &(0x7f0000800000/0x400000)=nil}) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0x4b564d02, 0x7f0000c1000b}}, @code={0xa, 0x18, {"488b0500000008"}}], 0x38}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 210.450375ms ago: executing program 2 (id=600): mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) 198.496476ms ago: executing program 1 (id=601): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:10.0\x00', 0xd) write(r0, &(0x7f00000001c0)='0000:00:11.0\x00', 0xd) write(r0, &(0x7f0000000200)='0000:00:12.0\x00', 0xd) write(r0, &(0x7f0000000240)='0000:00:13.0\x00', 0xd) write(r0, &(0x7f0000000280)='0000:00:14.0\x00', 0xd) write(r0, &(0x7f00000002c0)='0000:00:15.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0000:00:10.0\x00', 0xd) write(r1, &(0x7f0000000380)='0000:00:11.0\x00', 0xd) write(r1, &(0x7f00000003c0)='0000:00:12.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1af4 1000\x00', 0xa) 159.787457ms ago: executing program 2 (id=602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x1, 0x1000000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@out_dx={0x69, 0x20, {0x10, 0x1, 0x42}}]}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc010ae42, &(0x7f0000000400)={0x1, 0x40, 0x0, &(0x7f0000000540)}) 159.400077ms ago: executing program 1 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='auto\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='auto\x00', 0x5) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/devices/usb2/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000880)='auto\x00', 0x5) 158.980897ms ago: executing program 9 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ehci-platform\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='pcspkr\x00', 0x7) 119.128367ms ago: executing program 9 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ehci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_link/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='ehci-platform\x00', 0xe) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='serial8250\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='ehci-pci\x00', 0x9) close(r4) write(0xffffffffffffffff, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) 94.038028ms ago: executing program 1 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r2, 0x5427) 15.82834ms ago: executing program 1 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 15.63176ms ago: executing program 2 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, &(0x7f0000ff0000), 0x0, &(0x7f0000000000), &(0x7f0000000004), &(0x7f0000000008)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.87567ms ago: executing program 9 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0C0C:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='acpi-fan\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='PNP0C0C:00\x00', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/PNP0100:00/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='acpi-fan\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='PNP0100:00\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='acpi-fan\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='pcspkr\x00', 0x7) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x0, 0x0) read(r6, &(0x7f0000000a00), 0x64) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/class/thermal/cooling_device1/cur_state\x00', 0x0, 0x0) read(r7, &(0x7f0000000c00), 0x64) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/class/thermal/cooling_device2/cur_state\x00', 0x0, 0x0) read(r8, &(0x7f0000000e00), 0x64) close(r8) 0s ago: executing program 1 (id=610): syz_usb_connect(0x1, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402404009500000102030109022700010100c0320904000003ff000000070581020002000705020200020007058303100001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): 3] __dump_stack+0x21/0x24 [ 60.100128][ T963] dump_stack_lvl+0x1a7/0x208 [ 60.104799][ T963] ? f2fs_get_next_page_offset+0x760/0x760 [ 60.110596][ T963] ? show_regs_print_info+0x18/0x18 [ 60.115788][ T963] dump_stack+0x15/0x1c [ 60.119937][ T963] f2fs_is_valid_blkaddr+0xc2f/0x1330 [ 60.125310][ T963] f2fs_map_blocks+0xa2b/0x34e0 [ 60.130175][ T963] ? f2fs_do_map_lock+0x2e0/0x2e0 [ 60.135192][ T963] ? page_cache_sync_ra+0x250/0x2a0 [ 60.140376][ T963] ? f2fs_readdir+0x43e/0x970 [ 60.145044][ T963] ? xa_load+0x47d/0x490 [ 60.149295][ T963] f2fs_mpage_readpages+0xc02/0x1e20 [ 60.154573][ T963] ? has_enough_free_blks+0x2d0/0x2d0 [ 60.159934][ T963] ? __mod_memcg_state+0xc0/0x210 [ 60.164948][ T963] ? xas_nomem+0x6b/0x1d0 [ 60.169267][ T963] f2fs_readahead+0xfc/0x240 [ 60.173845][ T963] ? f2fs_set_data_page_dirty+0x6e0/0x6e0 [ 60.179556][ T963] read_pages+0x17b/0xb50 [ 60.183889][ T963] ? workingset_activation+0x250/0x250 [ 60.189336][ T963] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 60.194883][ T963] ? page_cache_ra_unbounded+0x790/0x790 [ 60.200542][ T963] ? lru_cache_add+0x15f/0x380 [ 60.205331][ T963] page_cache_ra_unbounded+0x638/0x790 [ 60.210806][ T963] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 60.217328][ T963] ? lru_cache_add+0x15f/0x380 [ 60.222109][ T963] ondemand_readahead+0x780/0xbc0 [ 60.227153][ T963] page_cache_sync_ra+0x250/0x2a0 [ 60.232198][ T963] f2fs_readdir+0x43e/0x970 [ 60.236718][ T963] ? f2fs_fill_dentries+0xc90/0xc90 [ 60.241968][ T963] ? __kasan_check_write+0x14/0x20 [ 60.247098][ T963] iterate_dir+0x25c/0x560 [ 60.251541][ T963] ? f2fs_fill_dentries+0xc90/0xc90 [ 60.256767][ T963] __se_sys_getdents64+0xf2/0x250 [ 60.261805][ T963] ? __x64_sys_getdents64+0x90/0x90 [ 60.267012][ T963] ? filldir+0x660/0x660 [ 60.271277][ T963] ? debug_smp_processor_id+0x17/0x20 [ 60.276675][ T963] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 60.282769][ T963] __x64_sys_getdents64+0x7b/0x90 [ 60.287819][ T963] do_syscall_64+0x31/0x40 [ 60.289394][ T15] usb 8-1: unable to get BOS descriptor or descriptor too short [ 60.292338][ T963] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.305828][ T963] RIP: 0033:0x7fc51a99ba73 [ 60.310263][ T963] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 60.329891][ T963] RSP: 002b:00007ffc88c4b368 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 60.338325][ T963] RAX: ffffffffffffffda RBX: 000055555c68c910 RCX: 00007fc51a99ba73 [ 60.346349][ T963] RDX: 0000000000008000 RSI: 000055555c68c940 RDI: 0000000000000005 [ 60.354335][ T963] RBP: 000055555c68c940 R08: 0000000000028701 R09: 0000000000000001 [ 60.362325][ T963] R10: 00007fc51abc7e20 R11: 0000000000000293 R12: 000055555c68c914 [ 60.370316][ T963] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffc88c4d610 [ 60.393239][ T963] F2FS-fs (loop8): Inconsistent error blkaddr:5633, sit bitmap:0 [ 60.403478][ T963] CPU: 1 PID: 963 Comm: syz-executor Not tainted syzkaller #0 [ 60.410971][ T963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.421045][ T963] Call Trace: [ 60.424361][ T963] __dump_stack+0x21/0x24 [ 60.428710][ T963] dump_stack_lvl+0x1a7/0x208 [ 60.433409][ T963] ? f2fs_get_next_page_offset+0x760/0x760 [ 60.439232][ T963] ? show_regs_print_info+0x18/0x18 [ 60.444449][ T963] ? mark_page_accessed+0x334/0x6c0 [ 60.449667][ T963] dump_stack+0x15/0x1c [ 60.453845][ T963] f2fs_is_valid_blkaddr+0xc2f/0x1330 [ 60.459235][ T963] f2fs_get_read_data_page+0x417/0x7a0 [ 60.460807][ T15] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 60.464710][ T963] ? lru_cache_add+0x15f/0x380 [ 60.464753][ T963] ? f2fs_get_block+0x140/0x140 [ 60.483296][ T963] ? __kasan_check_read+0x11/0x20 [ 60.484530][ T1150] FAT-fs (loop0): Unrecognized mount option "vfat" or missing value [ 60.488383][ T963] f2fs_find_data_page+0x18f/0x3f0 [ 60.501442][ T963] f2fs_readdir+0x457/0x970 [ 60.505384][ T15] usb 8-1: config 1 has no interface number 0 [ 60.506008][ T963] ? f2fs_fill_dentries+0xc90/0xc90 [ 60.517243][ T963] ? __kasan_check_write+0x14/0x20 [ 60.522363][ T963] iterate_dir+0x25c/0x560 [ 60.526800][ T963] ? f2fs_fill_dentries+0xc90/0xc90 [ 60.531179][ T1150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 60.532070][ T963] __se_sys_getdents64+0xf2/0x250 [ 60.545993][ T963] ? __x64_sys_getdents64+0x90/0x90 [ 60.551204][ T963] ? filldir+0x660/0x660 [ 60.555482][ T963] ? debug_smp_processor_id+0x17/0x20 [ 60.555497][ T963] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 60.555509][ T963] __x64_sys_getdents64+0x7b/0x90 [ 60.555520][ T963] do_syscall_64+0x31/0x40 [ 60.555532][ T963] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.555541][ T963] RIP: 0033:0x7fc51a99ba73 [ 60.555553][ T963] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 60.555561][ T963] RSP: 002b:00007ffc88c4b368 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 60.555598][ T963] RAX: ffffffffffffffda RBX: 000055555c68c910 RCX: 00007fc51a99ba73 [ 60.623158][ T963] RDX: 0000000000008000 RSI: 000055555c68c940 RDI: 0000000000000005 [ 60.623167][ T963] RBP: 000055555c68c940 R08: 0000000000028701 R09: 0000000000000001 [ 60.623175][ T963] R10: 00007fc51abc7e20 R11: 0000000000000293 R12: 000055555c68c914 [ 60.623184][ T963] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffc88c4d610 [ 60.634999][ T7] attempt to access beyond end of device [ 60.634999][ T7] loop8: rw=2049, want=45104, limit=40427 [ 60.640817][ T430] usb 5-1: MIDIStreaming interface descriptor not found [ 60.726516][ T15] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 60.735752][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.743991][ T15] usb 8-1: Product: syz [ 60.748371][ T15] usb 8-1: Manufacturer: syz [ 60.753000][ T15] usb 8-1: SerialNumber: syz [ 60.833406][ T1086] udc-core: couldn't find an available UDC or it's busy [ 60.840517][ T1086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.966481][ T1157] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 60.973810][ T1157] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 60.982334][ T1157] F2FS-fs (loop8): Unrecognized mount option "coss_cache" or missing value [ 60.993030][ T430] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 61.061612][ T24] audit: type=1400 audit(1786952115.027:380): avc: denied { watch } for pid=1166 comm="syz.8.178" path="/5" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.084294][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 61.094478][ T24] audit: type=1400 audit(1786952115.069:381): avc: denied { shutdown } for pid=1166 comm="syz.8.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.136392][ T24] audit: type=1400 audit(1786952115.069:382): avc: denied { read } for pid=1166 comm="syz.8.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.173316][ T24] audit: type=1400 audit(1786952115.069:383): avc: denied { block_suspend } for pid=1168 comm="syz.0.179" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.201048][ T24] audit: type=1400 audit(1786952115.174:384): avc: denied { append } for pid=1181 comm="syz.0.182" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.256225][ T15] usb 8-1: USB disconnect, device number 3 [ 61.313571][ T1184] udc-core: couldn't find an available UDC or it's busy [ 61.320641][ T1184] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.421951][ T428] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 61.441242][ T430] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 61.452077][ T430] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.465233][ T430] usb 4-1: config 1 interface 0 has no altsetting 0 [ 61.472070][ T529] udevd[529]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 61.564777][ T321] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 61.650541][ T428] usb 9-1: Using ep0 maxpacket: 32 [ 61.697942][ T430] usb 4-1: string descriptor 0 read error: -22 [ 61.704223][ T430] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40 [ 61.713461][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.735986][ T1155] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 61.764684][ T428] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.776033][ T428] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.786811][ T428] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.796301][ T321] usb 1-1: Using ep0 maxpacket: 32 [ 61.802338][ T428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.811705][ T428] usb 9-1: config 0 descriptor?? [ 61.850956][ T428] hub 9-1:0.0: USB hub found [ 61.907496][ T321] usb 1-1: config 221 has an invalid interface number: 30 but max is 2 [ 61.915834][ T321] usb 1-1: config 221 has an invalid interface number: 250 but max is 2 [ 61.924281][ T321] usb 1-1: config 221 has an invalid interface number: 211 but max is 2 [ 61.932729][ T321] usb 1-1: config 221 has no interface number 0 [ 61.939105][ T321] usb 1-1: config 221 has no interface number 1 [ 61.945425][ T321] usb 1-1: config 221 has no interface number 2 [ 61.952317][ T321] usb 1-1: config 221 interface 30 altsetting 242 endpoint 0xA has invalid wMaxPacketSize 0 [ 61.962528][ T24] audit: type=1400 audit(1786952115.962:385): avc: denied { mmap_zero } for pid=1154 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 61.985157][ T321] usb 1-1: config 221 interface 30 altsetting 242 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 62.012105][ T24] audit: type=1400 audit(1786952116.014:386): avc: denied { ioctl } for pid=1214 comm="syz.7.189" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19601 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.039205][ T321] usb 1-1: config 221 interface 30 altsetting 242 has a duplicate endpoint with address 0xC, skipping [ 62.056662][ T321] usb 1-1: config 221 interface 30 altsetting 242 has a duplicate endpoint with address 0x4, skipping [ 62.069064][ T1155] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 62.074421][ T321] usb 1-1: config 221 interface 30 altsetting 242 has a duplicate endpoint with address 0xA, skipping [ 62.089341][ T321] usb 1-1: config 221 interface 250 altsetting 2 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 62.100773][ T321] usb 1-1: config 221 interface 250 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 62.109430][ T1155] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.112799][ T321] usb 1-1: config 221 interface 250 altsetting 2 has an invalid endpoint with address 0x6D, skipping [ 62.133195][ T321] usb 1-1: config 221 interface 250 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 62.144922][ T1173] netlink: 20 bytes leftover after parsing attributes in process `syz.8.178'. [ 62.147563][ T321] usb 1-1: config 221 interface 250 altsetting 2 endpoint 0x5 has an invalid bInterval 196, changing to 11 [ 62.165252][ T321] usb 1-1: config 221 interface 30 has no altsetting 0 [ 62.166129][ T1215] netlink: 'syz.7.189': attribute type 1 has an invalid length. [ 62.172155][ T321] usb 1-1: config 221 interface 250 has no altsetting 0 [ 62.186985][ T321] usb 1-1: config 221 interface 211 has no altsetting 0 [ 62.194347][ T427] usb 5-1: USB disconnect, device number 6 [ 62.203366][ T1173] netlink: 20 bytes leftover after parsing attributes in process `syz.8.178'. [ 62.221585][ T1215] Zero length message leads to an empty skb [ 62.283995][ T1155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1155 comm=syz.3.176 [ 62.297099][ T1155] udc-core: couldn't find an available UDC or it's busy [ 62.304289][ T1155] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.315897][ T1226] fuse: Unknown parameter 'rocí MïÛˆotmode' [ 62.319374][ T1220] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 62.327436][ T428] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 62.348061][ T1220] EXT4-fs (loop4): re-mounted. Opts: [ 62.355352][ T1220] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.371084][ T1220] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 62.383870][ T321] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d5.1f [ 62.392929][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.400864][ T1220] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.400864][ T1220] [ 62.403006][ T430] usbhid 4-1:1.0: can't add hid device: -71 [ 62.416825][ T1220] EXT4-fs (loop4): Total free blocks count 0 [ 62.417657][ T430] usbhid: probe of 4-1:1.0 failed with error -71 [ 62.424393][ T1220] EXT4-fs (loop4): Free/Dirty block details [ 62.429923][ T321] usb 1-1: Product: syz [ 62.435964][ T1220] EXT4-fs (loop4): free_blocks=2415919104 [ 62.445296][ T430] usb 4-1: USB disconnect, device number 14 [ 62.447675][ T321] usb 1-1: Manufacturer: syz [ 62.452049][ T1220] EXT4-fs (loop4): dirty_blocks=48 [ 62.456816][ T428] usbhid 9-1:0.0: can't add hid device: -71 [ 62.461865][ T1220] EXT4-fs (loop4): Block reservation details [ 62.473386][ T1220] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 62.483598][ T1229] FAT-fs (loop7): Directory bread(block 64) failed [ 62.484150][ T1231] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 62.498238][ T321] usb 1-1: SerialNumber: syz [ 62.503312][ T1229] FAT-fs (loop7): Directory bread(block 65) failed [ 62.508493][ T428] usbhid: probe of 9-1:0.0 failed with error -71 [ 62.519676][ T1229] FAT-fs (loop7): Directory bread(block 66) failed [ 62.526520][ T1229] FAT-fs (loop7): Directory bread(block 67) failed [ 62.533327][ T1229] FAT-fs (loop7): Directory bread(block 68) failed [ 62.539924][ T1229] FAT-fs (loop7): Directory bread(block 69) failed [ 62.546505][ T1229] FAT-fs (loop7): Directory bread(block 70) failed [ 62.553389][ T1229] FAT-fs (loop7): Directory bread(block 71) failed [ 62.562957][ T1229] FAT-fs (loop7): Directory bread(block 72) failed [ 62.569571][ T1229] FAT-fs (loop7): Directory bread(block 73) failed [ 62.576190][ T428] usb 9-1: USB disconnect, device number 3 [ 62.704337][ T1233] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 62.720412][ T1233] incfs: ino conflict with backing FS 1 [ 62.737599][ T1233] overlayfs: upper fs does not support tmpfile. [ 62.765710][ T1184] udc-core: couldn't find an available UDC or it's busy [ 62.772667][ T1184] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.780597][ T1185] udc-core: couldn't find an available UDC or it's busy [ 62.780601][ T1184] udc-core: couldn't find an available UDC or it's busy [ 62.780643][ T1184] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.787778][ T1185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.851509][ T1244] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 62.860640][ T1244] EXT4-fs (loop8): orphan cleanup on readonly fs [ 62.877144][ T1244] EXT4-fs error (device loop8): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 24 vs 41 free clusters [ 62.891718][ T1244] EXT4-fs error (device loop8): ext4_acquire_dquot:6230: comm syz.8.196: Failed to acquire dquot type 0 [ 62.903261][ T1244] EXT4-fs (loop8): 1 truncate cleaned up [ 62.909481][ T1244] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue [ 62.941092][ T1244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=279 sclass=netlink_route_socket pid=1244 comm=syz.8.196 [ 63.002716][ T394] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 63.042324][ T321] usb 1-1: USB disconnect, device number 12 [ 63.202735][ T428] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 63.364731][ T394] usb 8-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 63.375131][ T394] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.384077][ T394] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.393312][ T321] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 63.450393][ T428] usb 9-1: Using ep0 maxpacket: 16 [ 63.517789][ T1259] Unknown ioctl 1076391951 [ 63.522326][ T1260] Unknown ioctl 1076391951 [ 63.527026][ T1259] Unknown ioctl -1006595043 [ 63.532020][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 63.532034][ T24] audit: type=1400 audit(1786952117.621:394): avc: denied { append } for pid=1258 comm="syz.4.199" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.562392][ T394] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.576103][ T394] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.584357][ T394] usb 8-1: Product: syz [ 63.588607][ T394] usb 8-1: Manufacturer: syz [ 63.593203][ T394] usb 8-1: SerialNumber: syz [ 63.631325][ T321] usb 1-1: Using ep0 maxpacket: 16 [ 63.736705][ T428] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 63.745760][ T428] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.753913][ T428] usb 9-1: Product: syz [ 63.758295][ T428] usb 9-1: Manufacturer: syz [ 63.762883][ T428] usb 9-1: SerialNumber: syz [ 63.768218][ T428] usb 9-1: config 0 descriptor?? [ 63.793698][ T321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.831390][ T429] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 63.869959][ T321] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 63.870050][ T394] cdc_ncm 8-1:1.0: bind() failure [ 63.885703][ T394] usb 8-1: USB disconnect, device number 4 [ 63.936390][ T427] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 64.031936][ T321] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 64.041163][ T321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.049192][ T321] usb 1-1: Product: syz [ 64.053503][ T321] usb 1-1: Manufacturer: syz [ 64.058102][ T321] usb 1-1: SerialNumber: syz [ 64.079484][ T1257] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 64.098027][ T429] usb 5-1: device descriptor read/64, error -71 [ 64.279101][ T427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.290195][ T427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.300226][ T427] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 64.308838][ T1257] udc-core: couldn't find an available UDC or it's busy [ 64.310437][ T427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.324473][ T1257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 64.334640][ T427] usb 4-1: config 0 descriptor?? [ 64.339860][ T24] audit: type=1400 audit(1786952118.471:395): avc: denied { remove_name } for pid=947 comm="syz-executor" name="file0" dev="loop7" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.363526][ T24] audit: type=1400 audit(1786952118.471:396): avc: denied { rmdir } for pid=947 comm="syz-executor" name="file0" dev="loop7" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.386454][ T24] audit: type=1400 audit(1786952118.503:397): avc: denied { unlink } for pid=947 comm="syz-executor" name="file1" dev="loop7" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.469514][ T429] usb 5-1: device descriptor read/64, error -71 [ 64.535076][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.542223][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.549963][ T1266] device bridge_slave_0 entered promiscuous mode [ 64.558778][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.565910][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.573348][ T1266] device bridge_slave_1 entered promiscuous mode [ 64.583333][ T321] usb 1-1: USB disconnect, device number 13 [ 64.635016][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.642078][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.649346][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.656410][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.677075][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.684717][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.692699][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.703934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.712261][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.719337][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.726660][ T429] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 64.734825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.743241][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.750353][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.763631][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.773177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.787750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.803922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.812065][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.819795][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.826242][ T427] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 64.835396][ T427] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 64.842079][ T1266] device veth0_vlan entered promiscuous mode [ 64.851630][ T427] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 64.861015][ T427] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 64.876239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.885549][ T1266] device veth1_macvtap entered promiscuous mode [ 64.896018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.905513][ T9] device bridge_slave_1 left promiscuous mode [ 64.911968][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.919650][ T9] device bridge_slave_0 left promiscuous mode [ 64.925769][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.933914][ T9] device veth1_macvtap left promiscuous mode [ 64.936261][ T427] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 64.941018][ T9] device veth0_vlan left promiscuous mode [ 64.948203][ T427] hid-steam 0003:28DE:1142.0003: No HID_FEATURE_REPORT submitted - nothing to read [ 64.983782][ T429] usb 5-1: device descriptor read/64, error -71 [ 65.020806][ T1264] udc-core: couldn't find an available UDC or it's busy [ 65.027928][ T1264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.036657][ T394] usb 4-1: USB disconnect, device number 15 [ 65.044538][ T394] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 65.055664][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.086945][ T24] audit: type=1400 audit(1786952119.248:398): avc: denied { setopt } for pid=1271 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.105203][ T1270] fido_id[1270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 65.177557][ T24] audit: type=1400 audit(1786952119.353:399): avc: denied { relabelfrom } for pid=1284 comm="syz.9.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 65.197541][ T24] audit: type=1400 audit(1786952119.353:400): avc: denied { relabelto } for pid=1284 comm="syz.9.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 65.225996][ T1287] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.234012][ T1287] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodelalloc,auto_da_alloc,,errors=continue [ 65.247616][ T1287] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.264902][ T1287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 65.283248][ T24] audit: type=1400 audit(1786952119.458:401): avc: denied { create } for pid=1285 comm="syz.0.208" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 65.346392][ T24] audit: type=1400 audit(1786952119.532:402): avc: denied { mounton } for pid=1295 comm="syz.9.211" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 65.384064][ T429] usb 5-1: device descriptor read/64, error -71 [ 65.400320][ T1296] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 65.414922][ T1296] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 65.425022][ T1296] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 65.436073][ T1296] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 65.444573][ T1296] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 65.452796][ T1296] EXT4-fs (loop9): failed to initialize system zone (-117) [ 65.460242][ T1296] EXT4-fs (loop9): mount failed [ 65.498587][ T429] usb usb5-port1: attempt power cycle [ 65.557118][ T1311] EXT4-fs (loop0): Ignoring removed orlov option [ 65.586073][ T1311] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 65.619622][ T427] usb 9-1: USB disconnect, device number 4 [ 65.707287][ T1321] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.741616][ T1321] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 65.751568][ T1321] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 65.795237][ T24] audit: type=1400 audit(1786952120.004:403): avc: denied { create } for pid=1310 comm="syz.0.213" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.857475][ T1335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 65.864625][ T1332] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1, [ 65.885020][ T1335] xt_hashlimit: size too large, truncated to 1048576 [ 65.917270][ T429] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 66.011302][ T1344] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.221: missing EA_INODE flag [ 66.032019][ T1344] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.221: error while reading EA inode 2 err=-117 [ 66.062259][ T1344] EXT4-fs (loop8): 1 orphan inode deleted [ 66.068049][ T1344] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 66.097991][ T1341] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 66.104695][ T429] usb 5-1: device descriptor read/8, error -71 [ 66.121766][ T1344] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.128677][ T1341] EXT4-fs (loop3): mount failed [ 66.160523][ T1339] F2FS-fs (loop0): invalid crc value [ 66.168330][ T1339] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.213856][ T1339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.337526][ T1356] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 66.355779][ T1356] SELinux: failed to load policy [ 66.377600][ T429] usb 5-1: device descriptor read/8, error -71 [ 66.403534][ T1364] input: syz0 as /devices/virtual/input/input6 [ 66.434026][ T1364] FAT-fs (loop8): IO charset tf8=0 not found [ 66.571438][ T1339] F2FS-fs (loop0): Start checkpoint disabled! [ 66.601341][ T9] attempt to access beyond end of device [ 66.601341][ T9] loop0: rw=2049, want=40976, limit=40427 [ 66.631208][ T1373] EXT4-fs (loop4): Test dummy encryption mode enabled [ 66.639457][ T1373] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 66.648949][ T394] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 66.654477][ T1373] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 66.689734][ T1373] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=204ec1a8, mo2=0003] [ 66.714088][ T1373] System zones: 0-5 [ 66.723518][ T1373] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,usrjquota=./file1,errors=remount-ro,jqfmt=vfsv0,usrquota,nodelalloc, [ 66.783955][ T427] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 66.845609][ T1373] 9pnet: Insufficient options for proto=fd [ 66.853415][ T1377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 66.864460][ T1373] overlayfs: unrecognized mount option "dont_measure" or missing value [ 66.969248][ T1358] F2FS-fs (loop3): Unrecognized mount option "@" or missing value [ 66.993672][ T394] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.009297][ T394] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.034568][ T1390] sock: sock_set_timeout: `syz.3.232' (pid 1390) tries to set negative timeout [ 67.070114][ T427] usb 9-1: device descriptor read/64, error -71 [ 67.161618][ T1395] EXT4-fs error (device loop4): ext4_fill_super:4959: inode #2: comm syz.4.233: iget: special inode unallocated [ 67.181012][ T1395] EXT4-fs (loop4): get root inode failed [ 67.190976][ T394] usb 10-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 67.200257][ T1381] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 67.216194][ T394] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.217240][ T1381] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 67.224359][ T1395] EXT4-fs (loop4): mount failed [ 67.231933][ T394] usb 10-1: Product: syz [ 67.246572][ T394] usb 10-1: Manufacturer: syz [ 67.251682][ T394] usb 10-1: SerialNumber: syz [ 67.258324][ T1381] F2FS-fs (loop0): invalid crc value [ 67.271609][ T1381] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 67.289649][ T394] uvcvideo: Found UVC 1.00 device syz (046d:0821) [ 67.298335][ T394] uvcvideo: No streaming interface found for terminal 2. [ 67.306949][ T394] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input7 [ 67.326540][ T1381] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 67.336821][ T1381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.388796][ T281] attempt to access beyond end of device [ 67.388796][ T281] loop0: rw=2049, want=45104, limit=40427 [ 67.450647][ T427] usb 9-1: device descriptor read/64, error -71 [ 67.522731][ T1405] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 67.539168][ T1405] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 67.548357][ T1405] F2FS-fs (loop3): invalid crc value [ 67.555113][ T1405] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 67.575934][ T1362] EXT4-fs (loop9): Test dummy encryption mode enabled [ 67.589832][ T1362] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.225: inode has both inline data and extents flags [ 67.604539][ T1362] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.225: couldn't read orphan inode 15 (err -117) [ 67.616775][ T1405] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 67.616785][ T1362] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 67.651561][ T1405] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.673259][ T280] attempt to access beyond end of device [ 67.673259][ T280] loop3: rw=2049, want=45104, limit=40427 [ 67.718154][ T427] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 67.747738][ T1438] netlink: 64 bytes leftover after parsing attributes in process `syz.4.242'. [ 67.757938][ T1431] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 67.784863][ T1431] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.834800][ T1362] udc-core: couldn't find an available UDC or it's busy [ 67.841952][ T1362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.850467][ T394] usb 10-1: USB disconnect, device number 2 [ 67.859327][ T1431] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #2: block 3: comm syz.0.241: bad entry in directory: inode out of bounds - offset=24, inode=65547, rec_len=20, size=2048 fake=0 [ 67.921734][ T1446] netlink: 84 bytes leftover after parsing attributes in process `syz.3.243'. [ 68.031737][ T427] usb 9-1: device descriptor read/64, error -71 [ 68.042681][ T1453] erofs: (device loop0): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block) [ 68.061578][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 68.073088][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.200640][ T1459] FAT-fs (loop0): bogus sectors per cluster 223 [ 68.207217][ T1459] FAT-fs (loop0): Can't find a valid FAT filesystem [ 68.214369][ T53] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.223347][ T1462] mmap: syz.4.250 (1462) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 68.314098][ T1466] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.320948][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 68.320960][ T24] audit: type=1400 audit(1786952122.650:416): avc: denied { read } for pid=1468 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.333935][ T1466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.357567][ T1466] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.251: bad orphan inode 131072 [ 68.368733][ T1466] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,inode_readahead_blks=0x0000000000000004,norecovery,,errors=continue [ 68.384364][ T24] audit: type=1400 audit(1786952122.702:417): avc: denied { write } for pid=1468 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.406751][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 68.475340][ T427] usb 9-1: device descriptor read/64, error -71 [ 68.508914][ T53] usb 4-1: Using ep0 maxpacket: 16 [ 68.630870][ T53] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.743159][ T53] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.864498][ T53] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 68.979045][ T53] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.014825][ T53] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 69.146049][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.211450][ T53] usb 4-1: config 0 descriptor?? [ 69.459582][ T1499] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 69.470072][ T24] audit: type=1326 audit(1786952123.857:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1506 comm="syz.8.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51a9730d9 code=0x7ffc0000 [ 69.525997][ T1507] EXT4-fs (loop8): Unrecognized mount option "dont_measure" or missing value [ 69.535138][ T24] audit: type=1326 audit(1786952123.889:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1506 comm="syz.8.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc51a9730d9 code=0x7ffc0000 [ 69.560812][ T24] audit: type=1400 audit(1786952123.889:420): avc: denied { write } for pid=1506 comm="syz.8.260" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.581741][ T427] usb usb9-port1: attempt power cycle [ 69.592596][ T24] audit: type=1400 audit(1786952123.889:421): avc: denied { open } for pid=1506 comm="syz.8.260" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.617946][ T24] audit: type=1326 audit(1786952123.889:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1506 comm="syz.8.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51a9730d9 code=0x7ffc0000 [ 69.645434][ T1513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.663531][ T24] audit: type=1326 audit(1786952123.889:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1506 comm="syz.8.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc51a9730d9 code=0x7ffc0000 [ 69.689827][ T24] audit: type=1326 audit(1786952123.889:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1506 comm="syz.8.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51a9730d9 code=0x7ffc0000 [ 69.715767][ T24] audit: type=1326 audit(1786952123.889:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1506 comm="syz.8.260" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc51a9730d9 code=0x7ffc0000 [ 69.910439][ T53] hid (null): unknown global tag 0xe [ 69.916132][ T53] hid (null): global environment stack underflow [ 69.922773][ T53] hid (null): invalid report_size 1765707594 [ 69.928811][ T53] hid (null): global environment stack underflow [ 69.935442][ T53] hid (null): unknown global tag 0xe [ 69.940829][ T53] hid (null): unknown global tag 0x62 [ 69.946799][ T53] hid (null): unknown global tag 0xe [ 69.953266][ T53] hid (null): unknown global tag 0x48 [ 69.959283][ T53] hid (null): unknown global tag 0xd [ 69.964596][ T53] hid (null): bogus close delimiter [ 69.969920][ T53] hid (null): unknown global tag 0xc [ 69.975303][ T53] hid (null): invalid report_count 344031198 [ 69.981352][ T53] hid (null): bogus close delimiter [ 70.023093][ T1513] EXT4-fs (loop9): Ignoring removed orlov option [ 70.065480][ T1513] EXT4-fs (loop9): can't mount with commit=6, fs mounted w/o journal [ 70.106173][ T53] usb 4-1: USB disconnect, device number 16 [ 70.338639][ T1531] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 70.361846][ T1535] device syzkaller0 entered promiscuous mode [ 70.368008][ T5] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 70.601726][ T1549] process 'syz.3.271' launched './file1' with NULL argv: empty string added [ 70.613845][ T1549] xt_ecn: cannot match TCP bits for non-tcp packets [ 70.621192][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 70.631965][ T53] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 70.681493][ T1551] xt_hashlimit: max too large, truncated to 1048576 [ 70.688147][ T1551] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 70.718184][ T5] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.729324][ T5] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.742398][ T5] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.749244][ T5] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 70.758531][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.766550][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 70.776077][ T5] usb 5-1: config 0 descriptor?? [ 70.803499][ T427] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 70.861003][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 70.975015][ T53] usb 1-1: too many endpoints for config 0 interface 0 altsetting 10: 65, using maximum allowed: 30 [ 70.986219][ T53] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 70.997502][ T53] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 71.012621][ T1567] loop3: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 71.013114][ T427] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.015611][ T53] usb 1-1: config 0 interface 0 has no altsetting 0 [ 71.100353][ T427] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.127733][ T427] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 71.136793][ T427] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.139863][ T53] usb 1-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00 [ 71.154041][ T427] usb 9-1: config 0 descriptor?? [ 71.159189][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.168512][ T53] usb 1-1: config 0 descriptor?? [ 71.283167][ T1570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 71.292177][ T1570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 71.318970][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 71.327039][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x7 [ 71.334590][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 71.342657][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 71.350287][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 71.357866][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 71.365355][ T5] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 71.374031][ T5] pantherlord 0003:0E8F:0003.0006: hidraw0: USB HID v80.00 Device [HID 0e8f:0003] on usb-dummy_hcd.4-1/input0 [ 71.385976][ T5] pantherlord 0003:0E8F:0003.0006: no output reports found [ 71.488419][ T527] udevd[527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 71.494931][ T528] udevd[528]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 71.503637][ T544] udevd[544]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 71.536462][ T527] udevd[527]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 71.582519][ T1579] udevd[1579]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 71.582524][ T1578] udevd[1578]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 71.594975][ T528] udevd[528]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory [ 71.605411][ T527] udevd[527]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 71.622913][ T544] udevd[544]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 71.633634][ T1587] udc-core: couldn't find an available UDC or it's busy [ 71.640647][ T1587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.650574][ T1577] udevd[1577]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 71.661365][ T53] apple 0003:05AC:021E.0007: unbalanced collection at end of report description [ 71.671067][ T53] apple 0003:05AC:021E.0007: parse failed [ 71.676889][ T53] apple: probe of 0003:05AC:021E.0007 failed with error -22 [ 71.689380][ T427] usbhid 9-1:0.0: can't add hid device: -71 [ 71.695852][ T5] usb 5-1: USB disconnect, device number 11 [ 71.699750][ T427] usbhid: probe of 9-1:0.0 failed with error -71 [ 71.720679][ T427] usb 9-1: USB disconnect, device number 7 [ 71.794024][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 71.861606][ T53] usb 1-1: USB disconnect, device number 14 [ 72.146504][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.157812][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.167976][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.180852][ T20] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.189931][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.201189][ T20] usb 4-1: config 0 descriptor?? [ 72.356193][ T427] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 72.389067][ T1593] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.283: missing EA_INODE flag [ 72.400706][ T1593] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.283: error while reading EA inode 2 err=-117 [ 72.413135][ T1593] EXT4-fs (loop0): 1 orphan inode deleted [ 72.418870][ T1593] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 72.460630][ T429] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 72.594256][ T427] usb 9-1: Using ep0 maxpacket: 32 [ 72.661626][ T20] plantronics 0003:047F:FFFF.0008: unbalanced collection at end of report description [ 72.671541][ T20] plantronics 0003:047F:FFFF.0008: parse failed [ 72.677860][ T20] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 72.698956][ T429] usb 5-1: Using ep0 maxpacket: 16 [ 72.708466][ T427] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.718702][ T427] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 72.728705][ T427] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 72.738775][ T427] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.813000][ T429] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 72.821308][ T429] usb 5-1: config 1 has no interface number 0 [ 72.827587][ T429] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 72.837573][ T429] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 72.847717][ T429] usb 5-1: config 1 interface 105 has no altsetting 0 [ 72.856342][ T20] usb 4-1: USB disconnect, device number 17 [ 72.898870][ T427] usb 9-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 72.908008][ T427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.916151][ T427] usb 9-1: Product: syz [ 72.920367][ T427] usb 9-1: Manufacturer: syz [ 72.924964][ T427] usb 9-1: SerialNumber: syz [ 72.946788][ T1589] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.953881][ T1589] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.003536][ T429] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 73.012648][ T429] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 73.020760][ T429] usb 5-1: Product: syz [ 73.024992][ T429] usb 5-1: Manufacturer: syz [ 73.029580][ T429] usb 5-1: SerialNumber: syz [ 73.051091][ T1591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.058255][ T1591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.157334][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 73.157348][ T24] audit: type=1400 audit(1786952127.732:475): avc: denied { map } for pid=1588 comm="syz.8.281" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.461176][ T1591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.468210][ T1591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.680333][ T24] audit: type=1400 audit(1786952128.277:476): avc: denied { read } for pid=1590 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.718281][ T429] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 73.729256][ T429] aqc111: probe of 5-1:1.105 failed with error -71 [ 73.743438][ T429] usb 5-1: USB disconnect, device number 12 [ 73.863367][ T1604] F2FS-fs (loop3): Test dummy encryption mode enabled [ 73.871034][ T1604] F2FS-fs (loop3): invalid crc value [ 73.878298][ T1604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.913231][ T1604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.184441][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 74.451599][ T429] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 74.459280][ T20] usb 4-1: device descriptor read/64, error -71 [ 74.718144][ T429] usb 5-1: device descriptor read/64, error -71 [ 74.841847][ T20] usb 4-1: device descriptor read/64, error -71 [ 75.005200][ T1618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.289'. [ 75.024795][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.033053][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.070382][ T1622] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 75.098905][ T429] usb 5-1: device descriptor read/64, error -71 [ 75.108465][ T20] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 75.175550][ T427] usb 9-1: MIDIStreaming interface descriptor not found [ 75.188095][ T427] usb 9-1: USB disconnect, device number 8 [ 75.224750][ T1616] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 75.236473][ T1616] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 75.246219][ T1616] F2FS-fs (loop9): invalid crc value [ 75.266184][ T1616] F2FS-fs (loop9): Found nat_bits in checkpoint [ 75.305869][ T1616] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 75.313000][ T1616] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 75.375093][ T429] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 75.394221][ T20] usb 4-1: device descriptor read/64, error -71 [ 75.461154][ T1632] binder: 1629:1632 ioctl c0306201 200000000480 returned -14 [ 75.483204][ T24] audit: type=1400 audit(1786952130.167:477): avc: denied { remount } for pid=1629 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.534744][ T1616] attempt to access beyond end of device [ 75.534744][ T1616] loop9: rw=2049, want=80720, limit=40427 [ 75.550388][ T1616] attempt to access beyond end of device [ 75.550388][ T1616] loop9: rw=2049, want=81920, limit=40427 [ 75.571739][ T1616] attempt to access beyond end of device [ 75.571739][ T1616] loop9: rw=2049, want=52944, limit=40427 [ 75.585949][ T1616] attempt to access beyond end of device [ 75.585949][ T1616] loop9: rw=2049, want=53248, limit=40427 [ 75.619372][ T1616] attempt to access beyond end of device [ 75.619372][ T1616] loop9: rw=2049, want=65896, limit=40427 [ 75.655497][ T1622] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 75.659400][ T1616] attempt to access beyond end of device [ 75.659400][ T1616] loop9: rw=2049, want=77824, limit=40427 [ 75.663609][ T1622] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 75.673614][ T429] usb 5-1: device descriptor read/64, error -71 [ 75.694666][ T1622] F2FS-fs (loop8): invalid crc value [ 75.709928][ T1616] attempt to access beyond end of device [ 75.709928][ T1616] loop9: rw=2049, want=85856, limit=40427 [ 75.723916][ T1622] F2FS-fs (loop8): Found nat_bits in checkpoint [ 75.744935][ T1266] attempt to access beyond end of device [ 75.744935][ T1266] loop9: rw=2049, want=40968, limit=40427 [ 75.772628][ T1622] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 75.779835][ T20] usb 4-1: device descriptor read/64, error -71 [ 75.786274][ T1622] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 75.816428][ T1621] F2FS-fs (loop8): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 75.899443][ T20] usb usb4-port1: attempt power cycle [ 76.051364][ T429] usb 5-1: device descriptor read/64, error -71 [ 76.061667][ T1647] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 76.068878][ T1647] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 76.078805][ T1647] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 76.078805][ T1647] [ 76.165695][ T429] usb usb5-port1: attempt power cycle [ 76.184877][ T321] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 76.399222][ T1674] netlink: 40 bytes leftover after parsing attributes in process `syz.8.302'. [ 76.413540][ T321] usb 10-1: Using ep0 maxpacket: 16 [ 76.442961][ T24] audit: type=1400 audit(1786952131.175:478): avc: denied { write } for pid=1679 comm="syz.3.304" name="usb_gadget" dev="configfs" ino=14099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.467022][ T24] audit: type=1400 audit(1786952131.175:479): avc: denied { add_name } for pid=1679 comm="syz.3.304" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.473834][ T1680] udc-core: couldn't find an available UDC or it's busy [ 76.488023][ T24] audit: type=1400 audit(1786952131.175:480): avc: denied { create } for pid=1679 comm="syz.3.304" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 76.514605][ T24] audit: type=1400 audit(1786952131.196:481): avc: denied { create } for pid=1679 comm="syz.3.304" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 76.518689][ T427] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 76.536105][ T24] audit: type=1400 audit(1786952131.207:482): avc: denied { write } for pid=1679 comm="syz.3.304" name="idVendor" dev="configfs" ino=20475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 76.543258][ T321] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 76.567516][ T24] audit: type=1400 audit(1786952131.207:483): avc: denied { open } for pid=1679 comm="syz.3.304" path="/63/config/usb_gadget/g1/idVendor" dev="configfs" ino=20475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 76.574390][ T429] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 76.747053][ T428] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 76.756277][ T321] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 76.765506][ T321] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.765703][ T429] usb 5-1: device descriptor read/8, error -71 [ 76.779962][ T321] usb 10-1: Product: syz [ 76.784206][ T321] usb 10-1: Manufacturer: syz [ 76.789286][ T321] usb 10-1: SerialNumber: syz [ 76.794978][ T321] usb 10-1: config 0 descriptor?? [ 76.975175][ T428] usb 9-1: Using ep0 maxpacket: 8 [ 76.985018][ T24] audit: type=1400 audit(1786952131.742:484): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.008202][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.016359][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.023812][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.031043][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.038367][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.045848][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.053287][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.060459][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.068653][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.076815][ T1683] udc-core: couldn't find an available UDC or it's busy [ 77.081297][ T429] usb 5-1: device descriptor read/8, error -71 [ 77.090168][ T428] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 77.098344][ T428] usb 9-1: config 0 has no interface number 0 [ 77.104671][ T427] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 77.123254][ T427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.133511][ T428] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 77.142772][ T427] usb 1-1: Product: syz [ 77.147115][ T427] usb 1-1: Manufacturer: syz [ 77.151977][ T427] usb 1-1: SerialNumber: syz [ 77.159017][ T428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.173715][ T428] usb 9-1: config 0 descriptor?? [ 77.406582][ T1676] udc-core: couldn't find an available UDC or it's busy [ 77.413677][ T1676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.421625][ T20] usb 9-1: USB disconnect, device number 9 [ 77.432477][ T15] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 77.584742][ T429] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 77.784866][ T429] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 77.794028][ T429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.975287][ T15] usb 4-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice= 0.00 [ 77.984409][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.992466][ T15] usb 4-1: Product: syz [ 77.996700][ T15] usb 4-1: Manufacturer: syz [ 78.001286][ T15] usb 4-1: SerialNumber: syz [ 78.042612][ T15] ums-usbat 4-1:1.0: USB Mass Storage device detected [ 78.050698][ T15] ums-usbat 4-1:1.0: Quirks match for vid 04e6 pid 1010: 1 [ 78.058012][ T15] ums-usbat 4-1:1.0: This device (04e6,1010,0000 S 06 P 80) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 78.058012][ T15] Please send a copy of this message to and [ 78.076845][ T429] usb 5-1: USB disconnect, device number 16 [ 78.165731][ T5] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 78.546744][ T5] usb 9-1: unable to get BOS descriptor or descriptor too short [ 78.584849][ T5] usb 9-1: not running at top speed; connect to a high speed hub [ 78.661071][ T5] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 78.800690][ T560] usb 10-1: USB disconnect, device number 3 [ 78.823181][ T5] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 78.832273][ T5] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.842793][ T5] usb 9-1: Product: syz [ 78.847005][ T5] usb 9-1: Manufacturer: syz [ 78.851617][ T5] usb 9-1: SerialNumber: syz [ 79.194442][ T5] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 79.202986][ T5] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 79.210992][ T5] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 79.219942][ T5] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 79.261117][ T5] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 79.299233][ T560] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 79.313957][ T5] usb 9-1: USB disconnect, device number 10 [ 79.451844][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 79.472218][ T1723] dummy_hcd dummy_hcd.0: remove, state 1 [ 79.477949][ T1723] usb usb1: USB disconnect, device number 1 [ 79.480765][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 79.519185][ T544] udevd[544]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.604024][ T560] usb 10-1: not running at top speed; connect to a high speed hub [ 79.699283][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 79.823075][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -19 [ 79.832870][ T5] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 79.834011][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 79.841607][ T560] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 79.852713][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -19 [ 79.861054][ T560] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.872330][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -19 [ 79.880414][ T560] usb 10-1: Product: syz [ 79.891761][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 79.895688][ T560] usb 10-1: Manufacturer: syz [ 79.906843][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 79.910832][ T560] usb 10-1: SerialNumber: syz [ 79.922347][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 79.937037][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 79.947870][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -19 [ 79.958681][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 79.969481][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -19 [ 79.980370][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -19 [ 79.991144][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -19 [ 80.001935][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -19 [ 80.012740][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -19 [ 80.023526][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -19 [ 80.040141][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -19 [ 80.051199][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -19 [ 80.062914][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -19 [ 80.073768][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -19 [ 80.084541][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -19 [ 80.095352][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -19 [ 80.106180][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -19 [ 80.116955][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -19 [ 80.127787][ T427] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -19 [ 80.140701][ T427] ax88179_178a 1-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, ba:f9:3e:26:ec:dc [ 80.156691][ T427] usb 1-1: USB disconnect, device number 15 [ 80.163563][ T427] ax88179_178a 1-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 80.177176][ T53] usb 10-1: USB disconnect, device number 4 [ 80.223152][ T427] ax88179_178a 1-1:1.0 eth1 (unregistered): Failed to write reg index 0x0002: -19 [ 80.233063][ T427] ax88179_178a 1-1:1.0 eth1 (unregistered): Failed to write reg index 0x0001: -19 [ 80.242757][ T427] ax88179_178a 1-1:1.0 eth1 (unregistered): Failed to write reg index 0x0002: -19 [ 80.257384][ T1723] dummy_hcd dummy_hcd.0: stopped [ 80.262434][ T1723] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 80.280564][ T15] ums-usbat: probe of 4-1:1.0 failed with error 4 [ 80.290366][ T15] usb 4-1: USB disconnect, device number 21 [ 80.356669][ T5] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 80.365912][ T5] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.373900][ T5] usb 9-1: Product: syz [ 80.378399][ T5] usb 9-1: Manufacturer: syz [ 80.382992][ T5] usb 9-1: SerialNumber: syz [ 80.396397][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 80.396412][ T24] audit: type=1400 audit(1786952135.333:486): avc: denied { read } for pid=1744 comm="syz.0.326" name="cpu_dma_latency" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 80.440138][ T24] audit: type=1400 audit(1786952135.333:487): avc: denied { open } for pid=1744 comm="syz.0.326" path="/68/dev/cpu_dma_latency" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 80.479054][ T1748] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.560675][ T1762] udc-core: couldn't find an available UDC or it's busy [ 80.567783][ T1762] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.689856][ T15] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 80.727881][ T53] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 80.760139][ T427] usb 9-1: USB disconnect, device number 11 [ 80.767123][ T1762] udc-core: couldn't find an available UDC or it's busy [ 80.774122][ T1762] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.966159][ T429] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 81.042297][ T15] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 1.00 [ 81.051547][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.090402][ T53] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 81.102896][ T53] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 81.233098][ T53] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 0.00 [ 81.242271][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.250250][ T53] usb 5-1: Product: syz [ 81.254503][ T53] usb 5-1: Manufacturer: syz [ 81.332848][ T1776] PM: suspend entry (s2idle) [ 81.337791][ T429] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 81.355981][ T429] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 81.366180][ T429] usb 10-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 81.375399][ T429] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.404204][ T1768] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 81.411373][ T1768] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 81.438844][ T1776] Filesystems sync: 0.096 seconds [ 81.444001][ T1776] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 81.453433][ T1776] OOM killer disabled. [ 81.457557][ T1776] Freezing remaining freezable tasks ... (elapsed 0.039 seconds) done. [ 81.503885][ T1776] printk: Suspending console(s) (use no_console_suspend to debug) [ 81.607193][ T300] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 81.782036][ T1776] PM: suspend debug: Waiting for 5 second(s). [ 87.129716][ T1791] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 87.138250][ T1792] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 87.149700][ T1793] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 92.121551][ T1793] usb 10-1: device descriptor read/64, error -110 [ 92.121558][ T1792] usb 5-1: device descriptor read/64, error -110 [ 92.129046][ T1791] usb 4-1: device descriptor read/64, error -110 [ 92.435843][ T1792] usb 5-1: device descriptor read/64, error -32 [ 92.443359][ T1793] usb 10-1: device descriptor read/64, error -32 [ 92.445824][ T1791] usb 4-1: device descriptor read/64, error -32 [ 92.693014][ T1792] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 92.700503][ T1793] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 92.702971][ T1791] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 92.893009][ T1792] usb 5-1: device descriptor read/64, error -32 [ 92.900524][ T1791] usb 4-1: device descriptor read/64, error -32 [ 92.900969][ T1793] usb 10-1: device descriptor read/64, error -32 [ 93.206853][ T1792] usb 5-1: device descriptor read/64, error -32 [ 93.215393][ T1793] usb 10-1: device descriptor read/64, error -32 [ 93.224476][ T1791] usb 4-1: device descriptor read/64, error -32 [ 93.464005][ T1792] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 93.473974][ T1793] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 93.481659][ T1791] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 93.567726][ T1792] usb 5-1: device descriptor read/8, error -32 [ 93.576889][ T1793] usb 10-1: device descriptor read/8, error -32 [ 93.586432][ T1791] usb 4-1: device descriptor read/8, error -32 [ 93.767413][ T1792] usb 5-1: device descriptor read/8, error -32 [ 93.776932][ T1793] usb 10-1: device descriptor read/8, error -32 [ 93.795938][ T1791] usb 4-1: device descriptor read/8, error -32 [ 94.025638][ T1792] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 94.034004][ T1793] usb 10-1: reset high-speed USB device number 5 using dummy_hcd [ 94.053544][ T1791] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 94.129320][ T1792] usb 5-1: device descriptor read/8, error -32 [ 94.138846][ T1793] usb 10-1: device descriptor read/8, error -32 [ 94.157879][ T1791] usb 4-1: device descriptor read/8, error -32 [ 94.329441][ T1792] usb 5-1: device descriptor read/8, error -32 [ 94.338877][ T1793] usb 10-1: device descriptor read/8, error -32 [ 94.357967][ T1791] usb 4-1: device descriptor read/8, error -32 [ 94.569947][ T1776] OOM killer enabled. [ 94.571605][ T1776] Restarting tasks ... [ 94.572859][ T394] usb 4-1: USB disconnect, device number 22 [ 94.586030][ T15] usb 5-1: USB disconnect, device number 17 [ 94.607437][ T5] usb 10-1: USB disconnect, device number 5 [ 94.626108][ T1776] done. [ 94.627391][ T1776] Resume cause unknown [ 94.629131][ T1776] PM: suspend exit [ 94.719723][ T53] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 94.736554][ T1810] udc-core: couldn't find an available UDC or it's busy [ 94.747424][ T1810] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.830772][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.833616][ T1816] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.836760][ T1816] device bridge_slave_0 entered promiscuous mode [ 94.839522][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.842397][ T1816] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.845698][ T1816] device bridge_slave_1 entered promiscuous mode [ 94.887105][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.889682][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.892372][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.895029][ T1816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.920395][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.923506][ T1793] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.926394][ T1793] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.931678][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.934588][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.937221][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.944541][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.947821][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.950357][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.959314][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.965599][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.974714][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.981256][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.984307][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.987380][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.991182][ T1816] device veth0_vlan entered promiscuous mode [ 95.000043][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.004176][ T1816] device veth1_macvtap entered promiscuous mode [ 95.009814][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.014826][ T5] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 95.018042][ T1793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.081293][ T15] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 95.177180][ T1791] device bridge_slave_1 left promiscuous mode [ 95.179520][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.182600][ T1791] device bridge_slave_0 left promiscuous mode [ 95.184891][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.188520][ T1791] device veth1_macvtap left promiscuous mode [ 95.190784][ T1791] device veth0_vlan left promiscuous mode [ 95.214686][ T53] usb 9-1: device descriptor read/64, error -71 [ 95.243363][ T5] usb 10-1: Using ep0 maxpacket: 8 [ 95.357957][ T5] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 95.361117][ T5] usb 10-1: config 0 has no interface number 0 [ 95.363414][ T5] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 95.366906][ T5] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.370857][ T5] usb 10-1: config 0 descriptor?? [ 95.576879][ T15] usb 5-1: New USB device found, idVendor=2040, idProduct=9300, bcdDevice= 0.00 [ 95.580356][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.583182][ T15] usb 5-1: Product: syz [ 95.584798][ T15] usb 5-1: Manufacturer: syz [ 95.586797][ T15] usb 5-1: SerialNumber: syz [ 95.597412][ T1803] udc-core: couldn't find an available UDC or it's busy [ 95.600013][ T1803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.603098][ T321] usb 10-1: USB disconnect, device number 6 [ 95.671887][ T53] usb 9-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.20 [ 95.675390][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.062756][ T53] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 96.338515][ T53] usb 9-1: device descriptor read/64, error -32 [ 96.348216][ T15] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 96.710012][ T53] usb 9-1: device descriptor read/64, error -32 [ 96.769267][ T429] usb 5-1: USB disconnect, device number 18 [ 96.843810][ T15] usb 10-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 96.852979][ T15] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.861147][ T15] usb 10-1: Product: syz [ 96.865422][ T15] usb 10-1: Manufacturer: syz [ 96.870126][ T15] usb 10-1: SerialNumber: syz [ 96.967267][ T53] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 97.224300][ T53] usb 9-1: device descriptor read/64, error -32 [ 97.280142][ T24] audit: type=1400 audit(1786952153.045:488): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 97.318094][ T20] kernel write not supported for file /null (pid: 20 comm: kworker/1:0) [ 97.599121][ T24] audit: type=1400 audit(1786952153.392:489): avc: denied { mount } for pid=1850 comm="syz.0.359" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 97.622777][ T1850] process '/newroot/77/file1' started with executable stack [ 97.630273][ T20] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 97.639472][ T24] audit: type=1400 audit(1786952153.434:490): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 97.665946][ T1853] udc-core: couldn't find an available UDC or it's busy [ 97.673098][ T1853] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.881497][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 97.995872][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.007091][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.020194][ T20] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.029480][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.055645][ T20] usb 10-1: USB disconnect, device number 7 [ 98.511685][ T1860] udc-core: couldn't find an available UDC or it's busy [ 98.891134][ T394] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 98.938748][ T53] usb 9-1: device descriptor read/64, error -71 [ 98.972132][ T1885] udc-core: couldn't find an available UDC or it's busy [ 98.979362][ T1885] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.119766][ T394] usb 10-1: Invalid ep0 maxpacket: 64 [ 99.195866][ T53] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 99.262575][ T394] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 99.281760][ T53] usb 9-1: device reset changed ep0 maxpacket size! [ 99.288677][ T53] r8152 9-1:1.0 (unnamed net_device) (uninitialized): Get ether addr fail [ 99.298836][ T53] r8152 9-1:1.0 eth1: v1.11.11 [ 99.304953][ T53] usb 9-1: USB disconnect, device number 12 [ 99.491136][ T394] usb 10-1: Invalid ep0 maxpacket: 64 [ 99.496895][ T394] usb usb10-port1: attempt power cycle [ 99.502516][ T53] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 99.748341][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 99.862688][ T53] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 99.871017][ T53] usb 9-1: config 0 has no interface number 0 [ 99.877215][ T53] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 99.886437][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.910234][ T394] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 99.996400][ T394] usb 10-1: Invalid ep0 maxpacket: 64 [ 100.139157][ T394] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 100.202351][ T20] usb 5-1: USB disconnect, device number 19 [ 100.224764][ T394] usb 10-1: Invalid ep0 maxpacket: 64 [ 100.230357][ T394] usb usb10-port1: unable to enumerate USB device [ 100.470932][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 100.548440][ T20] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 100.759105][ T24] audit: type=1400 audit(1786952156.709:491): avc: denied { write } for pid=1895 comm="syz.0.378" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 100.765121][ T1896] 0x000000000000c000 0x000000000000c03f 0x0000000000040101 [ 100.765121][ T1896] 0x00000000fe800000 0x00000000fe80007f 0x0000000000040200 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.765121][ T1896] 0x0000000000000000 0x0000000000000000 0x0000000000000000 [ 100.949824][ T1903] PM: suspend entry (deep) [ 101.019397][ T1909] udc-core: couldn't find an available UDC or it's busy [ 101.027023][ T1909] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.057360][ T1903] Filesystems sync: 0.107 seconds [ 101.062490][ T1903] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 101.071976][ T1903] OOM killer disabled. [ 101.076179][ T1903] Freezing remaining freezable tasks ... [ 106.025239][ T20] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 106.040274][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.048298][ T20] usb 5-1: Product: syz [ 106.053873][ T1903] (elapsed 5.226 seconds) done. [ 106.058849][ T1903] printk: Suspending console(s) (use no_console_suspend to debug) [ 106.294740][ T1787] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 106.478756][ T1903] ACPI: Preparing to enter system sleep state S3 [ 106.479013][ T1903] PM: Saving platform NVS memory [ 106.479017][ T1903] Disabling non-boot CPUs ... [ 106.483641][ T1903] smpboot: CPU 1 is now offline [ 106.507356][ T1903] PM: suspend debug: Waiting for 5 second(s). [ 111.508500][ T1903] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 111.525312][ T1903] Enabling non-boot CPUs ... [ 111.525550][ T1903] x86: Booting SMP configuration: [ 111.525557][ T1903] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 111.525898][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 111.527396][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 111.529854][ T1903] CPU1 is up [ 111.530440][ T1903] ACPI: Waking up from system sleep state S3 [ 111.579251][ T1911] hwrng: no data available [ 111.711935][ T1789] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 111.711951][ T1789] usb 9-1: PM: failed to resume async: error -107 [ 111.712037][ T1782] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 111.712049][ T1782] usb 5-1: PM: failed to resume async: error -107 [ 111.762486][ T1903] OOM killer enabled. [ 111.763978][ T1903] Restarting tasks ... done. [ 111.781326][ T1903] Resume cause unknown [ 111.782773][ T1903] PM: suspend exit [ 111.813169][ T433] usb 5-1: USB disconnect, device number 20 [ 111.825632][ T429] usb 9-1: USB disconnect, device number 13 [ 111.886226][ T1927] using random self ethernet address [ 111.904790][ T1927] using random host ethernet address [ 111.927342][ T1927] udc-core: couldn't find an available UDC or it's busy [ 112.206654][ T429] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 112.292344][ T433] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 112.425681][ T714] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 112.530717][ T433] usb 5-1: Using ep0 maxpacket: 8 [ 112.549746][ T429] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 112.553129][ T429] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.556983][ T429] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 112.560770][ T429] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 112.644900][ T433] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 112.648241][ T433] usb 5-1: config 0 has no interface number 0 [ 112.650624][ T433] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 112.654401][ T433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.711837][ T429] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 0.00 [ 112.715266][ T429] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.718151][ T429] usb 9-1: Product: syz [ 112.719703][ T429] usb 9-1: Manufacturer: syz [ 112.721528][ T429] usb 9-1: SerialNumber: syz [ 112.737583][ T1946] udc-core: couldn't find an available UDC or it's busy [ 112.740088][ T1946] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.940216][ T714] usb 10-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00 [ 112.943721][ T714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.946793][ T714] usb 10-1: Product: syz [ 112.948418][ T714] usb 10-1: Manufacturer: syz [ 112.950569][ T714] usb 10-1: SerialNumber: syz [ 114.188750][ T1948] udc-core: couldn't find an available UDC or it's busy [ 114.191432][ T1948] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.717914][ T714] usb 9-1: USB disconnect, device number 14 [ 114.761127][ T433] usb 5-1: USB disconnect, device number 21 [ 114.778748][ T24] audit: type=1400 audit(1786952171.182:492): avc: denied { ioctl } for pid=1951 comm="syz.4.399" path="/78/dev_mnt/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 114.850947][ T429] usb 10-1: USB disconnect, device number 12 [ 114.881743][ T1963] Module has invalid ELF structures [ 114.966432][ T1970] PM: suspend entry (s2idle) [ 114.968525][ T1970] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 114.973537][ T1970] PM: suspend exit [ 115.102249][ T714] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 115.236027][ T429] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 115.312164][ T321] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 115.407440][ T714] usb 9-1: not running at top speed; connect to a high speed hub [ 115.464461][ T429] usb 10-1: Using ep0 maxpacket: 16 [ 115.483241][ T714] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 115.486701][ T714] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.582595][ T429] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.587093][ T429] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.591932][ T429] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.595035][ T429] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.617182][ T1985] device-mapper: table: 253:1: zero-length target [ 115.619471][ T1985] device-mapper: ioctl: error adding target to table [ 115.622434][ T24] audit: type=1400 audit(1786952172.063:493): avc: denied { create } for pid=1984 comm="syz.2.412" name="wc0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=blk_file permissive=1 [ 115.642332][ T24] audit: type=1400 audit(1786952172.074:494): avc: denied { read write } for pid=1984 comm="syz.2.412" name="wc0" dev="devtmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=blk_file permissive=1 [ 115.654821][ T24] audit: type=1400 audit(1786952172.074:495): avc: denied { open } for pid=1984 comm="syz.2.412" path="/13/dev/mapper/wc0" dev="devtmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=blk_file permissive=1 [ 115.663601][ T24] audit: type=1400 audit(1786952172.074:496): avc: denied { ioctl } for pid=1984 comm="syz.2.412" path="/13/dev/mapper/wc0" dev="devtmpfs" ino=1177 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=blk_file permissive=1 [ 115.826155][ T321] usb 5-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 115.829561][ T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.832503][ T321] usb 5-1: Product: syz [ 115.834043][ T321] usb 5-1: Manufacturer: syz [ 115.835843][ T321] usb 5-1: SerialNumber: syz [ 116.624638][ T1997] udc-core: couldn't find an available UDC or it's busy [ 116.627312][ T1997] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.631838][ T1997] udc-core: couldn't find an available UDC or it's busy [ 116.634486][ T1997] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.132177][ T1999] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 117.135821][ T1999] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 117.139496][ T1999] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 117.213664][ T2007] using random self ethernet address [ 117.215699][ T2007] using random host ethernet address [ 117.220011][ T2007] udc-core: couldn't find an available UDC or it's busy [ 117.596537][ T433] usb 9-1: USB disconnect, device number 15 [ 117.693783][ T714] usb 5-1: USB disconnect, device number 22 [ 117.734002][ T321] usb 10-1: USB disconnect, device number 13 [ 118.018946][ T2020] udc-core: couldn't find an available UDC or it's busy [ 118.021695][ T2020] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.036175][ T433] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 118.111881][ T321] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 118.379041][ T433] usb 9-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice= 0.00 [ 118.382532][ T433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.473942][ T394] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 118.607185][ T321] usb 10-1: New USB device found, idVendor=041e, idProduct=401e, bcdDevice= 1.00 [ 118.610582][ T321] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.613714][ T321] usb 10-1: Product: syz [ 118.615401][ T321] usb 10-1: Manufacturer: syz [ 118.617237][ T321] usb 10-1: SerialNumber: syz [ 118.969294][ T394] usb 5-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 118.972844][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.975962][ T394] usb 5-1: Product: syz [ 118.977645][ T394] usb 5-1: Manufacturer: syz [ 118.979511][ T394] usb 5-1: SerialNumber: syz [ 119.472499][ T2029] udc-core: couldn't find an available UDC or it's busy [ 119.475254][ T2029] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.529384][ T394] usb 9-1: USB disconnect, device number 16 [ 120.544972][ T24] audit: type=1400 audit(1786952177.229:497): avc: denied { write } for pid=2031 comm="syz.8.433" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 120.567122][ T2032] smpboot: CPU 1 is now offline [ 120.577117][ T2032] x86: Booting SMP configuration: [ 120.579824][ T2032] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 120.582385][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 120.583726][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 120.612528][ T53] usb 10-1: USB disconnect, device number 14 [ 121.007300][ T53] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 121.064690][ T394] usb 5-1: USB disconnect, device number 23 [ 121.304603][ T24] audit: type=1400 audit(1786952178.027:498): avc: denied { read write } for pid=2051 comm="syz.4.440" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.313416][ T24] audit: type=1400 audit(1786952178.037:499): avc: denied { open } for pid=2051 comm="syz.4.440" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.323328][ T394] wiimote 0005:057E:0306.0009: unknown main item tag 0x0 [ 121.325717][ T394] wiimote 0005:057E:0306.0009: unbalanced collection at end of report description [ 121.329038][ T394] wiimote 0005:057E:0306.0009: HID parse failed [ 121.331480][ T394] wiimote: probe of 0005:057E:0306.0009 failed with error -22 [ 121.503081][ T53] usb 10-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice= 0.00 [ 121.517424][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.526039][ T53] usb 10-1: Product: syz [ 121.530325][ T53] usb 10-1: Manufacturer: syz [ 121.549081][ T2060] PM: suspend entry (deep) [ 121.643448][ T2060] Filesystems sync: 0.094 seconds [ 121.648951][ T2060] Freezing user space processes ... (elapsed 0.003 seconds) done. [ 121.660401][ T2060] OOM killer disabled. [ 121.664462][ T2060] Freezing remaining freezable tasks ... [ 121.713536][ T394] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 126.712813][ T394] usb 9-1: device descriptor read/64, error -110 [ 127.027633][ T394] usb 9-1: device descriptor read/64, error -32 [ 127.284298][ T394] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 127.484403][ T394] usb 9-1: device descriptor read/64, error -32 [ 127.799185][ T394] usb 9-1: device descriptor read/64, error -32 [ 127.915624][ T394] usb usb9-port1: attempt power cycle [ 128.303344][ T394] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 128.407963][ T394] usb 9-1: device descriptor read/8, error -32 [ 128.608389][ T394] usb 9-1: device descriptor read/8, error -32 [ 128.865933][ T394] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 128.970264][ T394] usb 9-1: device descriptor read/8, error -32 [ 129.170294][ T394] usb 9-1: device descriptor read/8, error -32 [ 129.289614][ T394] usb usb9-port1: unable to enumerate USB device [ 129.299439][ T2060] (elapsed 8.016 seconds) done. [ 129.304419][ T2060] printk: Suspending console(s) (use no_console_suspend to debug) [ 129.360820][ T1786] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 129.545839][ T2060] ACPI: Preparing to enter system sleep state S3 [ 129.546044][ T2060] PM: Saving platform NVS memory [ 129.546048][ T2060] Disabling non-boot CPUs ... [ 129.550314][ T2060] smpboot: CPU 1 is now offline [ 129.553477][ T2060] PM: suspend debug: Waiting for 5 second(s). [ 134.554664][ T2060] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 134.568909][ T2060] Enabling non-boot CPUs ... [ 134.569131][ T2060] x86: Booting SMP configuration: [ 134.569138][ T2060] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 134.569446][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 134.570703][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 134.573085][ T2060] CPU1 is up [ 134.573629][ T2060] ACPI: Waking up from system sleep state S3 [ 134.739730][ T1788] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 134.739747][ T1788] usb 10-1: PM: failed to resume async: error -107 [ 134.782222][ T2060] OOM killer enabled. [ 134.783647][ T2060] Restarting tasks ... done. [ 134.813342][ T2060] Resume cause unknown [ 134.826525][ T2060] PM: suspend exit [ 134.841575][ T1914] usb 10-1: USB disconnect, device number 15 [ 134.911544][ T2083] udc-core: couldn't find an available UDC or it's busy [ 134.984653][ T2091] udc-core: couldn't find an available UDC or it's busy [ 134.987863][ T2091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 135.101028][ T2066] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 135.272788][ T432] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 135.405819][ T1914] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 135.501141][ T432] usb 9-1: Invalid ep0 maxpacket: 64 [ 135.596466][ T2066] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice= 0.01 [ 135.599951][ T2066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.602820][ T2066] usb 5-1: Product: syz [ 135.604622][ T2066] usb 5-1: Manufacturer: syz [ 135.606679][ T2066] usb 5-1: SerialNumber: syz [ 135.644387][ T432] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 135.786979][ T1914] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 135.790459][ T1914] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.882435][ T432] usb 9-1: Invalid ep0 maxpacket: 64 [ 135.884615][ T432] usb usb9-port1: attempt power cycle [ 135.939523][ T1914] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice= 1.00 [ 135.943145][ T1914] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.946117][ T1914] usb 10-1: Product: syz [ 135.947737][ T1914] usb 10-1: Manufacturer: syz [ 135.949496][ T1914] usb 10-1: SerialNumber: syz [ 136.291582][ T432] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 136.377447][ T432] usb 9-1: Invalid ep0 maxpacket: 64 [ 136.520287][ T432] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 136.605972][ T432] usb 9-1: Invalid ep0 maxpacket: 64 [ 136.608060][ T432] usb usb9-port1: unable to enumerate USB device [ 137.404407][ T2097] udc-core: couldn't find an available UDC or it's busy [ 137.407108][ T2097] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.693514][ T432] usb 5-1: USB disconnect, device number 24 [ 137.888695][ T2066] usb 10-1: USB disconnect, device number 16 [ 138.082418][ T432] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 138.215571][ T430] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 138.272814][ T2066] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 138.310995][ T432] usb 5-1: Using ep0 maxpacket: 16 [ 138.425290][ T432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.429272][ T432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 138.433541][ T432] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.436792][ T432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.558624][ T430] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.562500][ T430] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.567260][ T430] usb 9-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00 [ 138.570597][ T430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.615870][ T2066] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 138.619349][ T2066] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.754325][ T2111] PM: suspend entry (deep) [ 138.810407][ T2111] Filesystems sync: 0.056 seconds [ 138.812616][ T2111] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 138.817637][ T2111] OOM killer disabled. [ 138.819254][ T2111] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 138.823810][ T2111] printk: Suspending console(s) (use no_console_suspend to debug) [ 138.873373][ T48] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 139.056657][ T2111] ACPI: Preparing to enter system sleep state S3 [ 139.056849][ T2111] PM: Saving platform NVS memory [ 139.056853][ T2111] Disabling non-boot CPUs ... [ 139.061060][ T2111] smpboot: CPU 1 is now offline [ 139.064051][ T2111] PM: suspend debug: Waiting for 5 second(s). [ 144.065390][ T2111] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 144.078992][ T2111] Enabling non-boot CPUs ... [ 144.079214][ T2111] x86: Booting SMP configuration: [ 144.079222][ T2111] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 144.079544][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 144.080745][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 144.083094][ T2111] CPU1 is up [ 144.083631][ T2111] ACPI: Waking up from system sleep state S3 [ 144.271343][ T1786] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 144.271367][ T1786] usb 5-1: PM: failed to resume async: error -107 [ 144.280358][ T1912] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 144.280375][ T1912] usb 10-1: PM: failed to resume async: error -107 [ 144.280392][ T419] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 144.280405][ T419] usb 9-1: PM: failed to resume async: error -107 [ 144.337248][ T2111] OOM killer enabled. [ 144.338826][ T2111] Restarting tasks ... done. [ 144.355928][ T2111] Resume cause unknown [ 144.357608][ T2111] PM: suspend exit [ 144.400934][ T2124] udc-core: couldn't find an available UDC or it's busy [ 144.403515][ T2124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.886607][ T2116] usb 5-1: USB disconnect, device number 25 [ 145.307621][ T1796] usb 9-1: USB disconnect, device number 25 [ 145.354184][ T2115] usb 10-1: USB disconnect, device number 17 [ 145.449805][ T2136] udc-core: couldn't find an available UDC or it's busy [ 145.883388][ T2147] udc-core: couldn't find an available UDC or it's busy [ 145.891425][ T2147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.051225][ T1796] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 146.127504][ T53] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 146.356446][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 146.394425][ T1796] usb 9-1: config index 0 descriptor too short (expected 45, got 39) [ 146.402617][ T1796] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 146.412600][ T1796] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 146.480310][ T53] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 146.494517][ T2159] udc-core: couldn't find an available UDC or it's busy [ 146.498852][ T53] usb 10-1: config 179 has no interface number 0 [ 146.503125][ T2159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.509402][ T53] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 146.527195][ T53] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 146.538837][ T53] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.550647][ T53] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 146.561088][ T53] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.574617][ T53] usb 10-1: config 179 interface 65 has no altsetting 0 [ 146.581755][ T53] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 146.590960][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.594665][ T2116] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 146.599558][ T1796] usb 9-1: New USB device found, idVendor=050d, idProduct=0103, bcdDevice= 2.00 [ 146.616179][ T1796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.625250][ T1796] usb 9-1: Product: syz [ 146.629451][ T1796] usb 9-1: Manufacturer: syz [ 146.634171][ T1796] usb 9-1: SerialNumber: syz [ 147.070868][ T2116] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00b7, bcdDevice= 1.00 [ 147.080134][ T2116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 147.088151][ T2116] usb 5-1: Product: syz [ 147.092460][ T2116] usb 5-1: Manufacturer: syz [ 147.491781][ T2170] udc-core: couldn't find an available UDC or it's busy [ 147.499120][ T2170] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.667410][ T432] usb 9-1: USB disconnect, device number 26 [ 148.697822][ T2175] file system registered [ 148.704943][ T24] audit: type=1400 audit(1786952205.176:500): avc: denied { mount } for pid=2174 comm="syz.8.486" name="/" dev="functionfs" ino=24036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 148.719774][ T2175] read descriptors [ 148.734034][ T2175] udc-core: couldn't find an available UDC or it's busy [ 148.742107][ T1796] usb 10-1: USB disconnect, device number 18 [ 148.753666][ T963] ffs_data_put(): freeing [ 148.758374][ T24] audit: type=1400 audit(1786952205.218:501): avc: denied { unmount } for pid=963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 148.797729][ T24] audit: type=1400 audit(1786952205.271:502): avc: denied { read write } for pid=2179 comm="syz.9.487" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.823978][ T24] audit: type=1400 audit(1786952205.302:503): avc: denied { open } for pid=2179 comm="syz.9.487" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.852792][ T2180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.44.0), user(4.50.0), cmd(3) [ 148.870925][ T2180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.44.0), user(4.50.0), cmd(9) [ 148.889640][ T24] audit: type=1400 audit(1786952205.302:504): avc: denied { ioctl } for pid=2179 comm="syz.9.487" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.893423][ T2180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.44.0), user(4.50.0), cmd(6) [ 149.076633][ T2192] udc-core: couldn't find an available UDC or it's busy [ 149.084197][ T2192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.192396][ T1796] usb 5-1: USB disconnect, device number 26 [ 149.210582][ T2196] udc-core: couldn't find an available UDC or it's busy [ 149.308666][ T2116] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 149.527727][ T20] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 149.651736][ T2116] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.689732][ T1796] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 149.746973][ T2116] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.756284][ T20] usb 10-1: Using ep0 maxpacket: 8 [ 149.761461][ T2116] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.769577][ T2116] usb 9-1: SerialNumber: syz [ 149.870656][ T20] usb 10-1: config index 0 descriptor too short (expected 76, got 63) [ 149.879019][ T20] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.918712][ T1796] usb 5-1: Invalid ep0 maxpacket: 64 [ 150.042103][ T20] usb 10-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 1.00 [ 150.051535][ T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.059653][ T20] usb 10-1: Product: syz [ 150.064133][ T20] usb 10-1: Manufacturer: syz [ 150.068844][ T20] usb 10-1: SerialNumber: syz [ 150.070880][ T1796] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 150.309367][ T1796] usb 5-1: Invalid ep0 maxpacket: 64 [ 150.314859][ T1796] usb usb5-port1: attempt power cycle [ 150.560468][ T2213] PM: suspend entry (deep) [ 150.653155][ T2213] Filesystems sync: 0.092 seconds [ 150.658381][ T2213] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 150.668301][ T2213] OOM killer disabled. [ 150.672423][ T2213] Freezing remaining freezable tasks ... [ 150.708946][ T1796] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 155.604820][ T1796] usb 5-1: device descriptor read/8, error -32 [ 155.804839][ T1796] usb 5-1: device descriptor read/8, error -32 [ 156.064369][ T1796] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 156.176302][ T1796] usb 5-1: device descriptor read/8, error -32 [ 156.376306][ T1796] usb 5-1: device descriptor read/8, error -32 [ 156.494261][ T1796] usb usb5-port1: unable to enumerate USB device [ 156.507118][ T2213] (elapsed 6.125 seconds) done. [ 156.512086][ T2213] printk: Suspending console(s) (use no_console_suspend to debug) [ 156.566838][ T1912] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 156.750629][ T2213] ACPI: Preparing to enter system sleep state S3 [ 156.750808][ T2213] PM: Saving platform NVS memory [ 156.750812][ T2213] Disabling non-boot CPUs ... [ 156.755473][ T2213] smpboot: CPU 1 is now offline [ 156.759008][ T2213] PM: suspend debug: Waiting for 5 second(s). [ 161.760280][ T2213] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 161.773017][ T2213] Enabling non-boot CPUs ... [ 161.773227][ T2213] x86: Booting SMP configuration: [ 161.773235][ T2213] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 161.773555][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 161.774818][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 161.777085][ T2213] CPU1 is up [ 161.777628][ T2213] ACPI: Waking up from system sleep state S3 [ 161.972980][ T1789] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 161.972993][ T1789] usb 9-1: PM: failed to resume async: error -107 [ 161.982559][ T1793] PM: dpm_run_callback(): usb_dev_resume+0x0/0x20 returns -107 [ 161.982572][ T1793] usb 10-1: PM: failed to resume async: error -107 [ 162.029643][ T2213] OOM killer enabled. [ 162.030902][ T2213] Restarting tasks ... done. [ 162.037586][ T2213] Resume cause unknown [ 162.039375][ T2213] PM: suspend exit [ 162.047017][ T2218] usb 9-1: USB disconnect, device number 27 [ 162.074020][ T53] usb 10-1: USB disconnect, device number 19 [ 162.118414][ T2225] ehci-platform pcspkr: IRQ index 0 not found [ 162.126285][ T2225] ehci-platform serial8250: IRQ index 0 not found [ 162.133616][ T2225] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 162.150624][ T2225] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 162.174663][ T2232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.510'. [ 162.178419][ T2232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=2232 comm=syz.0.510 [ 162.185182][ T2232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=2232 comm=syz.0.510 [ 162.189666][ T2232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=2232 comm=syz.0.510 [ 162.194240][ T2232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=2232 comm=syz.0.510 [ 162.253746][ T2238] user requested TSC rate below hardware speed [ 162.351318][ T2254] udc-core: couldn't find an available UDC or it's busy [ 162.354471][ T2254] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.591462][ T2115] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 162.667599][ T2218] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 162.935546][ T2115] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.939827][ T2115] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.943357][ T2115] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.948112][ T2115] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.951239][ T2115] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.020145][ T2218] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.024059][ T2218] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.172673][ T2218] usb 9-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice= 1.00 [ 163.176328][ T2218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.179399][ T2218] usb 9-1: Product: syz [ 163.181177][ T2218] usb 9-1: Manufacturer: syz [ 163.183035][ T2218] usb 9-1: SerialNumber: syz [ 163.544324][ T2115] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 163.805075][ T2273] udc-core: couldn't find an available UDC or it's busy [ 163.807773][ T2273] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 164.001446][ T2115] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 164.004647][ T2115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 164.007329][ T2115] usb 5-1: Product: syz [ 164.008726][ T2115] usb 5-1: Manufacturer: syz [ 164.364482][ T2283] udc-core: couldn't find an available UDC or it's busy [ 164.534148][ T2294] udc-core: couldn't find an available UDC or it's busy [ 164.537098][ T2294] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.147879][ T2311] udc-core: couldn't find an available UDC or it's busy [ 165.197752][ T2115] usb 10-1: USB disconnect, device number 20 [ 165.242042][ T2318] udc-core: couldn't find an available UDC or it's busy [ 165.262685][ T24] audit: type=1400 audit(1786952221.675:505): avc: denied { read } for pid=2319 comm="syz.2.548" name="idVendor" dev="configfs" ino=24422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 165.272648][ T24] audit: type=1400 audit(1786952221.686:506): avc: denied { read } for pid=2319 comm="syz.2.548" name="c.1" dev="configfs" ino=20471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.282438][ T2320] udc-core: couldn't find an available UDC or it's busy [ 165.285110][ T24] audit: type=1400 audit(1786952221.686:507): avc: denied { open } for pid=2319 comm="syz.2.548" path="/39/config/usb_gadget/g1/configs/c.1" dev="configfs" ino=20471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.295518][ T2218] usb 9-1: USB disconnect, device number 28 [ 165.311262][ T2323] udc-core: couldn't find an available UDC or it's busy [ 165.532806][ T2340] udc-core: couldn't find an available UDC or it's busy [ 165.609155][ T2346] APIC base relocation is unsupported by KVM [ 165.622036][ T2349] PM: suspend entry (s2idle) [ 165.625904][ T2349] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 165.629466][ T2349] PM: suspend exit [ 165.651331][ T2351] udc-core: couldn't find an available UDC or it's busy [ 165.772670][ T2218] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 165.791606][ T2359] udc-core: couldn't find an available UDC or it's busy [ 165.794186][ T2358] udc-core: couldn't find an available UDC or it's busy [ 165.908904][ T2363] udc-core: couldn't find an available UDC or it's busy [ 165.911640][ T2363] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 166.115818][ T2218] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 166.119763][ T2218] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 166.248944][ T433] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 166.268072][ T2218] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 0.01 [ 166.271424][ T2218] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.274509][ T2218] usb 9-1: Product: syz [ 166.276132][ T2218] usb 9-1: Manufacturer: syz [ 166.278061][ T2218] usb 9-1: SerialNumber: syz [ 166.487010][ T433] usb 10-1: Using ep0 maxpacket: 32 [ 166.524131][ T2218] usb 5-1: USB disconnect, device number 31 [ 166.566717][ T2377] udc-core: couldn't find an available UDC or it's busy [ 166.639457][ T433] usb 10-1: unable to get BOS descriptor or descriptor too short [ 166.692963][ T2383] udc-core: couldn't find an available UDC or it's busy [ 166.719259][ T2385] udc-core: couldn't find an available UDC or it's busy [ 166.722367][ T2385] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 166.868046][ T433] usb 10-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 166.871933][ T433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.875416][ T433] usb 10-1: Product: syz [ 166.877312][ T433] usb 10-1: Manufacturer: syz [ 166.879715][ T433] usb 10-1: SerialNumber: syz [ 167.064624][ T2388] udc-core: couldn't find an available UDC or it's busy [ 167.415457][ T2397] udc-core: couldn't find an available UDC or it's busy [ 167.543688][ T2400] PM: suspend entry (s2idle) [ 167.610876][ T2218] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 167.705542][ T2400] Filesystems sync: 0.167 seconds [ 167.707410][ T2400] Freezing user space processes ... (elapsed 0.002 seconds) done. [ 167.712356][ T2400] OOM killer disabled. [ 167.713894][ T2400] Freezing remaining freezable tasks ... [ 172.630441][ T2218] usb 5-1: device descriptor read/all, error -110 [ 172.773221][ T2218] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 172.973308][ T2218] usb 5-1: device descriptor read/64, error -32 [ 173.299850][ T2218] usb 5-1: device descriptor read/64, error -32 [ 173.411795][ T2218] usb usb5-port1: attempt power cycle [ 173.801939][ T2218] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 173.907030][ T2218] usb 5-1: device descriptor read/8, error -32 [ 174.107109][ T2218] usb 5-1: device descriptor read/8, error -32 [ 174.366822][ T2218] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 174.478537][ T2218] usb 5-1: device descriptor read/8, error -32 [ 174.687733][ T2218] usb 5-1: device descriptor read/8, error -32 [ 174.807194][ T2218] usb usb5-port1: unable to enumerate USB device [ 174.817218][ T2400] (elapsed 7.457 seconds) done. [ 174.822671][ T2400] PM: suspend debug: Waiting for 5 second(s). [ 179.838020][ T2400] OOM killer enabled. [ 179.842062][ T2400] Restarting tasks ... [ 179.882387][ T53] usb 10-1: USB disconnect, device number 21 [ 179.913981][ T2400] done. [ 179.917286][ T2400] Resume cause unknown [ 179.944132][ T1796] usb 9-1: USB disconnect, device number 29 [ 179.957245][ T2400] PM: suspend exit [ 179.961294][ T2410] udc-core: couldn't find an available UDC or it's busy [ 179.988595][ T2412] udc-core: couldn't find an available UDC or it's busy [ 180.002855][ T2410] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.102140][ T2418] udc-core: couldn't find an available UDC or it's busy [ 180.129464][ T2420] udc-core: couldn't find an available UDC or it's busy [ 180.223966][ T2421] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.231902][ T2421] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.239628][ T2421] device bridge_slave_0 entered promiscuous mode [ 180.250193][ T2421] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.257409][ T2421] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.266568][ T2421] device bridge_slave_1 entered promiscuous mode [ 180.360840][ T2421] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.367988][ T2421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.375366][ T2421] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.382427][ T2421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.424396][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.435149][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.445630][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.453578][ T433] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 180.481662][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.490783][ T1913] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.497912][ T1913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.508862][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.517581][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.524784][ T1913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.532570][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.554944][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.585314][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.604261][ T2421] device veth0_vlan entered promiscuous mode [ 180.611359][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.620857][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.628790][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.656675][ T2421] device veth1_macvtap entered promiscuous mode [ 180.664856][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.682130][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.698850][ T1913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.751653][ T7] device bridge_slave_1 left promiscuous mode [ 180.760834][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.779304][ T2448] ehci-platform pcspkr: IRQ index 0 not found [ 180.786975][ T7] device bridge_slave_0 left promiscuous mode [ 180.793406][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.803236][ T7] device veth1_macvtap left promiscuous mode [ 180.804741][ T2448] ehci-platform serial8250: IRQ index 0 not found [ 180.810989][ T7] device veth0_vlan left promiscuous mode [ 180.880553][ T2456] udc-core: couldn't find an available UDC or it's busy [ 180.887879][ T2454] udc-core: couldn't find an available UDC or it's busy [ 180.941537][ T2458] udc-core: couldn't find an available UDC or it's busy [ 181.021879][ T433] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2820, bcdDevice= 0.00 [ 181.031927][ T433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.040106][ T433] usb 5-1: Product: syz [ 181.045323][ T433] usb 5-1: Manufacturer: syz [ 181.056032][ T433] usb 5-1: SerialNumber: syz [ 181.175776][ T2473] ehci-platform pcspkr: IRQ index 0 not found [ 181.235541][ T2478] ehci-platform pcspkr: IRQ index 0 not found [ 181.268298][ T2478] ehci-platform serial8250: IRQ index 0 not found [ 181.293480][ T2482] udc-core: couldn't find an available UDC or it's busy [ 181.361927][ T2489] general protection fault, probably for non-canonical address 0xdffffc0000000051: 0000 [#1] PREEMPT SMP KASAN [ 181.373705][ T2489] KASAN: null-ptr-deref in range [0x0000000000000288-0x000000000000028f] [ 181.382146][ T2489] CPU: 0 PID: 2489 Comm: syz.9.609 Tainted: G S syzkaller #0 [ 181.390841][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.400959][ T2489] RIP: 0010:acpi_fan_probe+0x10e/0x1030 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 181.406533][ T2489] Code: 84 fc 04 00 00 49 89 c6 4c 89 64 24 30 4c 89 7c 24 48 4c 8d bb 88 02 00 00 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 33 d2 20 ff 4c 89 7c 24 20 4d 89 [ 181.426196][ T2489] RSP: 0018:ffffc9000138f820 EFLAGS: 00010202 [ 181.432327][ T2489] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.440346][ T2489] RDX: ffffc9000690d000 RSI: 0000000000000a02 RDI: 00000000ffffffff [ 181.448345][ T2489] RBP: ffffc9000138f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 181.456344][ T2489] R10: dffffc0000000000 R11: fffff52000271ee4 R12: 0000000000000051 [ 181.464346][ T2489] R13: 1ffff92000271f14 R14: ffff8881123da118 R15: 0000000000000288 [ 181.472351][ T2489] FS: 00007f4d95e3f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 181.481304][ T2489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.487912][ T2489] CR2: 000000110c303f0f CR3: 000000011fb2d000 CR4: 00000000003526b0 [ 181.495916][ T2489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.503930][ T2489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.511934][ T2489] Call Trace: [ 181.515258][ T2489] ? clk_gpio_gate_is_enabled+0x40/0x40 [ 181.520830][ T2489] ? kernfs_activate+0x35e/0x370 [ 181.525794][ T2489] ? acpi_button_resume+0x3a0/0x3a0 [ 181.531021][ T2489] ? __kasan_check_write+0x14/0x20 [ 181.536155][ T2489] ? kernfs_put+0x44f/0x480 [ 181.540683][ T2489] ? kernfs_create_link+0x186/0x200 [ 181.546014][ T2489] ? is_acpi_device_node+0x26/0x60 [ 181.551154][ T2489] platform_drv_probe+0x11b/0x1a0 [ 181.556321][ T2489] really_probe+0x3bf/0xa60 [ 181.560862][ T2489] driver_probe_device+0xe1/0x190 [ 181.565919][ T2489] device_driver_attach+0x17a/0x280 [ 181.571142][ T2489] bind_store+0x369/0x3c0 [ 181.575507][ T2489] ? unbind_store+0x300/0x300 [ 181.580202][ T2489] ? __kasan_check_write+0x14/0x20 [ 181.585333][ T2489] ? mutex_lock+0x92/0xf0 [ 181.589680][ T2489] ? unbind_store+0x300/0x300 [ 181.594375][ T2489] drv_attr_store+0x79/0xa0 [ 181.598904][ T2489] ? drv_attr_show+0x90/0x90 [ 181.603528][ T2489] sysfs_kf_write+0x129/0x150 [ 181.608229][ T2489] ? sysfs_kf_read+0x270/0x270 [ 181.613022][ T2489] kernfs_fop_write_iter+0x2bd/0x400 [ 181.618339][ T2489] vfs_write+0x770/0xd70 [ 181.622611][ T2489] ? __kasan_check_read+0x11/0x20 [ 181.627653][ T2489] ? kernel_write+0x3c0/0x3c0 [ 181.632381][ T2489] ? mutex_trylock+0xb0/0xb0 [ 181.636992][ T2489] ? __fget_files+0x2e1/0x340 [ 181.641691][ T2489] ? __fdget_pos+0x2d2/0x380 [ 181.646299][ T2489] ? ksys_write+0x70/0x260 [ 181.650738][ T2489] ksys_write+0x14a/0x260 [ 181.655084][ T2489] ? __ia32_sys_read+0x90/0x90 [ 181.659865][ T2489] ? trace_event_raw_event_sys_enter+0x12d/0x140 [ 181.666213][ T2489] __x64_sys_write+0x7b/0x90 [ 181.670825][ T2489] do_syscall_64+0x31/0x40 [ 181.675271][ T2489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 181.679099][ T24] audit: type=1400 audit(1786952238.621:508): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[1484]" dev="pipefs" ino=1484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 181.681191][ T2489] RIP: 0033:0x7f4d973e60d9 [ 181.708517][ T2489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.728154][ T2489] RSP: 002b:00007f4d95e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.736625][ T2489] RAX: ffffffffffffffda RBX: 00007f4d9766dfa0 RCX: 00007f4d973e60d9 [ 181.744636][ T2489] RDX: 0000000000000007 RSI: 0000200000000800 RDI: 0000000000000003 [ 181.752638][ T2489] RBP: 00007f4d9747d024 R08: 0000000000000000 R09: 0000000000000000 [ 181.760625][ T2489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.768604][ T2489] R13: 00007f4d9766e038 R14: 00007f4d9766dfa0 R15: 00007ffdcc3a7a48 [ 181.776586][ T2489] Modules linked in: [ 181.807063][ T2066] usb 5-1: USB disconnect, device number 36 [ 181.841041][ T2489] ---[ end trace 190a888c614ef8b1 ]--- [ 181.846664][ T2489] RIP: 0010:acpi_fan_probe+0x10e/0x1030 [ 181.852514][ T2489] Code: 84 fc 04 00 00 49 89 c6 4c 89 64 24 30 4c 89 7c 24 48 4c 8d bb 88 02 00 00 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 33 d2 20 ff 4c 89 7c 24 20 4d 89 [ 181.898069][ T2489] RSP: 0018:ffffc9000138f820 EFLAGS: 00010202 [ 181.904196][ T2489] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.930082][ T2489] RDX: ffffc9000690d000 RSI: 0000000000000a02 RDI: 00000000ffffffff [ 181.948697][ T2489] RBP: ffffc9000138f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 181.956826][ T2489] R10: dffffc0000000000 R11: fffff52000271ee4 R12: 0000000000000051 [ 181.965341][ T2489] R13: 1ffff92000271f14 R14: ffff8881123da118 R15: 0000000000000288 [ 181.973547][ T2489] FS: 00007f4d95e3f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 181.983861][ T2489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.990513][ T2489] CR2: 0000560edd0a9af8 CR3: 000000011fb2d000 CR4: 00000000003506a0 [ 182.000565][ T2489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.008617][ T2489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.016694][ T2489] Kernel panic - not syncing: Fatal exception [ 182.023060][ T2489] Kernel Offset: disabled [ 182.027393][ T2489] Rebooting in 86400 seconds..