last executing test programs: 1m5.194905344s ago: executing program 1 (id=187): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffa, 0x800) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/47) 1m5.180877045s ago: executing program 1 (id=188): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x2c4, &(0x7f0000000140), 0x0}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='fusectl\x00', 0x10, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x100000000000000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_TDX_FINALIZE_VM(r4, 0xc008aeba, &(0x7f0000000000)) 1m4.800128014s ago: executing program 1 (id=189): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffa, 0x800) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/47) (fail_nth: 1) 1m4.789039754s ago: executing program 1 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}, {&(0x7f0000000940)="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", 0x1000}], 0x2, 0x4, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40300, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f0000000280)='./trace\x00', 0x8, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x46, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x2, 0x0, 0x3, 0x0, 0x5}], 0x1) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 1m4.58134347s ago: executing program 1 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x46, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x2, 0x0, 0x3, 0x0, 0x5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 1m4.065286483s ago: executing program 1 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x3) 1m4.039469904s ago: executing program 32 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ae0000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x3) 1m3.338396531s ago: executing program 4 (id=201): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x33) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='/usr/lib/telepathy/mission-control-5\x00', 0x25) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1m3.276775472s ago: executing program 4 (id=210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000e80)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1fd) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={r2, r3, r4}, 0xc) setregid(0xee00, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x2, 0x0, 0x0) write(r1, &(0x7f00000001c0)='1af4 10', 0x7) 1m3.256746923s ago: executing program 4 (id=211): keyctl$set_timeout(0xf, 0x0, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x100, 0x2c, "", [{{0x9, 0x4, 0x0, 0xb, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x87, 0x81}}}}}]}}]}}, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xd9, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x99, 0x7835, 0xff, 0xf7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x92, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x13, 0x37, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x5b, 0x7}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xca, 0x3a, '/dev/uinput\x00', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x43]}, 0x40) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0xc9, 0xe6}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'blake2s-224-x86\x00'}}, &(0x7f0000000100)="bd39df74ae09967e2d8e8a0b1abc02f6df7262d677ab4be37f5eafe19a957b3e14601ced67beb92ee3e86f9ace3a56b1c5fe79ce3f8b34dde80107744085cdf88e186220c856bbab99d255266742239c5dbf0ae06e56e99370054a101d7dd9ff972706db409e4d938f7d0e261d3be36f6e967b6c7a5ac7d4067dfdd555a40904a633d48c376d7c30f022761a1552314f869af22e5d61e28a452a12f4e4e4f98c92bb0b33598fdcfbefdad04badd67c5cb1bab511e3f4ebfe2b11dbdc4fd85221d7e68f9e3700db62f7", &(0x7f0000000300)="27da116dad281cf12d7a52a3e14a3ec4c6ab67cfe83bf1570f056ba615329634df4897f2cd56628c5cdf11b95e41545e3bfd77f92eedef966f4d1ebc0386293cbccabddf7475d62cb76d939a7bdd563d546db15f5b61bfe8b227055b3a59f3f60b488c3f1831b56410b7f53bdc0a4ff764eaa8bdf7becd23a9fc0b51ea6942a398ddf27578473df6efdf0d1f57195240d8f45a521a4f49b2b06c9eb33f087eec06ab2e822017a755a22de610697d1fb9a9b561270f818053901cc12de3827f61c2d399e0aa3db7e796af4963da3d674a1bd60baa9c44cabef57328e067f092581b3829f2ffac") syz_usb_control_io(r0, &(0x7f0000001040)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0001180000001801c010cc936599fc7e380600000000000000de5ef4154a71ff0436ab13e39c57a934642352e4516ece99e18d5873f97bb63c24e8e61244e97e85a6238cfa7a5e2afa0f8f86f7ac32d6fd2f02a8e5e0c5432db719179b66"], 0x0, 0x0, 0x0, 0x0}, 0x0) 48.219424108s ago: executing program 33 (id=211): keyctl$set_timeout(0xf, 0x0, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x100, 0x2c, "", [{{0x9, 0x4, 0x0, 0xb, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x87, 0x81}}}}}]}}]}}, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect$cdc_ecm(0x5, 0x150, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x1, 0x1, 0xd9, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x99, 0x7835, 0xff, 0xf7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x92, "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"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x13, 0x37, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x5b, 0x7}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xca, 0x3a, '/dev/uinput\x00', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x43]}, 0x40) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0xc9, 0xe6}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'blake2s-224-x86\x00'}}, &(0x7f0000000100)="bd39df74ae09967e2d8e8a0b1abc02f6df7262d677ab4be37f5eafe19a957b3e14601ced67beb92ee3e86f9ace3a56b1c5fe79ce3f8b34dde80107744085cdf88e186220c856bbab99d255266742239c5dbf0ae06e56e99370054a101d7dd9ff972706db409e4d938f7d0e261d3be36f6e967b6c7a5ac7d4067dfdd555a40904a633d48c376d7c30f022761a1552314f869af22e5d61e28a452a12f4e4e4f98c92bb0b33598fdcfbefdad04badd67c5cb1bab511e3f4ebfe2b11dbdc4fd85221d7e68f9e3700db62f7", &(0x7f0000000300)="27da116dad281cf12d7a52a3e14a3ec4c6ab67cfe83bf1570f056ba615329634df4897f2cd56628c5cdf11b95e41545e3bfd77f92eedef966f4d1ebc0386293cbccabddf7475d62cb76d939a7bdd563d546db15f5b61bfe8b227055b3a59f3f60b488c3f1831b56410b7f53bdc0a4ff764eaa8bdf7becd23a9fc0b51ea6942a398ddf27578473df6efdf0d1f57195240d8f45a521a4f49b2b06c9eb33f087eec06ab2e822017a755a22de610697d1fb9a9b561270f818053901cc12de3827f61c2d399e0aa3db7e796af4963da3d674a1bd60baa9c44cabef57328e067f092581b3829f2ffac") syz_usb_control_io(r0, &(0x7f0000001040)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0001180000001801c010cc936599fc7e380600000000000000de5ef4154a71ff0436ab13e39c57a934642352e4516ece99e18d5873f97bb63c24e8e61244e97e85a6238cfa7a5e2afa0f8f86f7ac32d6fd2f02a8e5e0c5432db719179b66"], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.670928574s ago: executing program 5 (id=895): ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x2, 0x26ff152c84020a8d, 0x5, 0x4, 0x9, 0x103}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) 12.522352778s ago: executing program 5 (id=899): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300ef0000000000001e000000ffffffff00"/88, 0x58) 12.478653909s ago: executing program 5 (id=900): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000003c0)={0x2001, {{0x2, 0x4e23, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000a00)={{r1, &(0x7f00000002c0)='/dev/kvm\x00', 0x200200, &(0x7f0000000300)={@_ha_fsid={[0xffffffff, 0x3756]}, {0x6, 0x4, 0xd, 0x3}}, 0x8, &(0x7f0000000380), &(0x7f0000000500)=0x2}, 0x5, &(0x7f0000000940)=[{0x3, 0x5, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', &(0x7f0000000580), 0x0, 0x22}, {0x2, 0x4, &(0x7f00000005c0)='!\xac\x00', &(0x7f0000000600)="eec10eb134200c84dca9a41387269da0e90d21d74f4f1790bcfd84d11e563f680da4b2afb1675d73eb2cca7e2ca9af657d6c1d113f6261d2ab362da2064284f21ad4ff6ac2dfc452505452", 0x4b}, {0x1, 0xcb, &(0x7f0000000680)='%%)\'\x00', &(0x7f00000006c0)="911d495bc43d63c5a108a8fa233217ef4ff59324822104cbaf4f7f2d0d5dd581758505a535894c7c74270221e75f6064e134d85c7254e4b8d2a6952a140c103f8f7c684b341f6f0af895535057f4dd12bcc6e9298f0134f039cfb02f4e739f008538aed65046ab9bfbeca09b629bb2339ffff93ec378fe8075fca605fe46f78ff2303541cf72a890934c3370362cdd8afd01fe4552b5a832523522b055583ef89728687eb90476c21868812ed995b608774927801ed588b8e93ad8e1bf0cc4", 0xbf, 0x30}, {0x1, 0xa, &(0x7f0000000780)='(\f\x00', &(0x7f00000007c0)="0c754b028a063442a5115cd5eea17c7ece377f1fc697d59410e83f5d0c58dd341ea01fd2704c83ceb72315a8acf4270c073846a8b512f8bb679bc120949f7ecae9957079", 0x44, 0x8}, {0x2, 0x9, &(0x7f0000000840)='({[-{*d\x00', &(0x7f0000000880)="9e36af1f3ee1206aaf82534bf7df3915dd1ccdabcb5bbb17903a53fd53196d73e1048245e0fb58ff01416f2e9fcb392596a4577eba3f3c50e7f413adc211550fc7f625925ed94fe70ac33da7ccb7c4abdd26fc9b638e5e05ffb133ab676f6d982f66cdf312d4bbc48c1225b3f627836516a0deb893aceb8451e13270e6ae1fd7e21d2b40", 0x84, 0x12}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r7, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0xf, 0x2, 0x4, 0xff, 0x9, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x2, 0x5, 0x400000c9}, {0x2, 0x2, 0x1, 0x40, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20a}, {0x40000001, 0x3, 0x38, 0x3, 0x84, 0x7, 0xd6, 0x0, 0x8, 0x5, 0x4, 0x9, 0x1}], 0xffffffef}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000001c0)={[{0x5, 0x4, 0x94, 0x9, 0x40, 0x40, 0x2, 0x40, 0x4, 0xee, 0x2e, 0x1, 0x5}, {0x3, 0x2, 0x2b, 0x8, 0x4, 0x3, 0x5, 0x5, 0x51, 0xe, 0x7e, 0x4, 0x3}, {0x1, 0x4, 0x8e, 0xe, 0x9, 0x9, 0x9, 0xf4, 0x7, 0x3, 0x3, 0x1, 0x4c541683}]}) sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x18, 0xc00c890}}], 0x1, 0x20000001) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x79, r10}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000)) 12.275315794s ago: executing program 5 (id=901): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c0000001800077bab092500090007000a0700870000000600003693", 0x1c) 12.206522106s ago: executing program 5 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r1, 0x0, 0x1007) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000002580)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x8000000}}, 0x30) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x69, &(0x7f0000000000)=[@cstype3={0x5, 0x7}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) clock_settime(0x300, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000180001002cbd7000ffdbdf25fc000000000000000000000000000000e00000010000000000000000000000004e2100814e23ffff0a0020103c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d5ff000000ff01000000000000000000000000000109000000000000000500000000000000e2d400000000000007000000000000000900000000000000070000000000000003000000000000000c000000000000000400000000000000ff01de00000000000700000000000000070000000000000009000000ff07000081000000290600000000000000000101de00000000000000aa000000000000000c0015005d07350000fcffff"], 0x104}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r8 = syz_clone(0x1040000, &(0x7f0000000640)="26510144ea8f65c9169b576753d25d866cc631ef712e883146b27ada1bf8c593670a7d55", 0x24, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="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") r9 = gettid() ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000003800)=0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') statx(r2, &(0x7f00000049c0)='./file0\x00', 0x0, 0x800, &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r13, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000000040)={0x50, 0x0, r14, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r16 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_ENTRY(r16, &(0x7f00000004c0)={0x90, 0xfffffffffffffff5, r14, {0x5, 0x3, 0x6, 0x800, 0x6, 0x4, {0x3, 0x0, 0x6, 0x8000000000000000, 0x4, 0x101, 0xcd, 0x3, 0xee, 0xa000, 0x8, 0x0, r15, 0x2, 0x3}}}, 0x90) sendmsg$netlink(r6, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000001c0)={0x220, 0x2b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0xc, 0x7a, 0x0, 0x1, [@nested={0x4, 0x12e}, @nested={0x4, 0x132}]}, @nested={0x59, 0x13c, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @generic="ac15b14247181eab281ef0b2187f27bb9ceebdb2cd39ff79f8c9c1f12cb2c6823d8646056498d78f447b4feae88a9f92a73bffc2cded922133bb70f421b57b53999d5643f941f09c4b", @nested={0x4, 0x6e}]}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x149, 0xc7, 0x0, 0x1, [@nested={0x4, 0xc2}, @generic="f94c900ce76f21c713adc8a779a6b762fd9edf2bf587cfd330df3df9f1e4fcf9c061c8aa4bdf812b4ceee074e6e4c6aeabb58e08d2d9c1ef", @generic="e83d2e6a46bf7f0b3d459ce37436226ae0aaed2e14da2e5dbd15b0bd2d72edf0a8b3fc3787ebcd51748a82a24671ee5a3b6fea7a0faa8406f862f311ba59da4881e436f6b35707356d56d17e4679ddee8b2698f71a71fb0eb61b49699ea18f60422884673a43a6bbd6bd67d045d003c1dc421f30187d3539c78ba332e00a9d36a72c97bfcb0e1461ac425f42e269095ff389a1c0c09dede71851fe0d5f1292398a72da7afcbbbcaacc52e0f8a6da71e27d0130a912e55dc9021e9a39d6db0bffbc9cea49b199bb7c33c6997c0b0f7b5c28e7dbe7c9f891ef80e933c4f72ae8df6e5004ebb481201ec1d2ca6eca2974af22", @nested={0x4, 0x5a}, @typed={0xa, 0xdb, 0x0, 0x0, @str=']-{{^\x00'}, @nested={0x4, 0x51}, @nested={0x4, 0xd3}]}, @typed={0xd, 0x9, 0x0, 0x0, @str='/dev/kvm\x00'}, @generic="f2f69ac642a612821ab30881208ce0d4933316ffb86853284451fd347e70d59d5080474d91b9ade067e05bfe74e5e3ce419d9aa067"]}, 0x220}, {&(0x7f0000000480)={0x16c, 0x18, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x153, 0x0, 0x0, @u32=0xf6}, @typed={0x4, 0xde}, @typed={0x8, 0x55, 0x0, 0x0, @uid=r7}, @nested={0x8, 0x7d, 0x0, 0x1, [@typed={0x4, 0x122, 0x0, 0x0, @binary}]}, @typed={0xc, 0xcc, 0x0, 0x0, @u64}, @generic="f2efbbdbc915d233921be125a462a797c46f9767c14b0cb4b5288d9345b9e4a6e6a355f7ed92139fe6fdcd80b6b7f2ab311ebc9d1bab8f06bfd3626e165656b0ebd502bb", @generic="719ca78421c2d36d75ae12ee923ec4d05bb665ea046b58e273c8df0beb11d8cffa74ee8abd09ee3e2c48589f325b6530047a04a69e891bdc93865fb23443cb1f3de6d86d2b98909103d1e434761a303a953fe4bdfe1f5dda52e4aa0d293250356d9b6970b7107aa501555504e772b45aa0e151b6407c775ae06ad1eff192f30a6759a2281a7c363f3360b344e48477b1b04e8fbf9723ca3fb768bb2a00d81f0f3119f7a7217f599787febdcff2007f393419a3bc6fc4fd76580b6ef8577a1b2fb1236f0110dae16ba857d84c84dee8af0b096e27e1e1414cf0495d2a149b87e588c0c5a4e9bc2c95cc70de344578"]}, 0x16c}, {&(0x7f0000000600)={0x34, 0x42, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x24, 0xe9, 0x0, 0x1, [@nested={0x4, 0x150}, @generic="b373dee15ea7ba068b7c2fc0b68f8ff6b91b2dfec90afdbd5f4a0649"]}]}, 0x34}, {&(0x7f00000025c0)={0x1224, 0x12, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x14, 0xee, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x10ef, 0xab, 0x0, 0x1, [@generic="712af25467b901eb5a8e321e20d875cec54d9f308e2c9371e629ff49c106f979e3d0d5", @generic="fd3c93042c373b7e", @generic="5c802564c775ffc4e27dfa2e88947b8fd679680238c2ea5bf8de0b453d2c03a041292ef9112f00d67c10f530de29a1b7029538925c57352d6be9c589d9ddf906e88907c48abd7326825073df826ab5ad7bc662809e905602cc4a7048cc166f190c600828186b0b8efe45274d8fa9f1817c9552cc09f217fe253c2fee20cf5d2af93ab25cee66d2db007227188b60ec2ed227ad48a22edcb6e8adb581fca8ee7e06a36500c9980fa6eb19376265eefac637364f7b32a4d8225849e92c", @generic="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", @nested={0x4, 0x133}]}, @generic, @nested={0x10, 0x35, 0x0, 0x1, [@nested={0x4, 0x6a}, @typed={0x8, 0x116, 0x0, 0x0, @pid=r8}]}, @nested={0xaa, 0xb0, 0x0, 0x1, [@nested={0x4, 0x61}, @generic="39c464431a9c34702ad76ef6530c62a3f38e9b95648b13aa5d3d9c31ed3518fda43de5a6ce7c23f28903051e29c0e7c6dbc9ee3d7a0d133d526c6cf431d9b0f447e7527439e4c70c6798dbe17d93b67972d28327ef7087dc95455f8459d4d0b423fd5323db9ab30e38613b7cf6e408b09d46cd96861e613d63ef5025862d8e3efa1697b72f097d675898a4fbe06a13c2ea0c", @nested={0x4, 0xe9}, @typed={0x8, 0xa2, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x8f}]}, @generic="4826807865b85c409d3bc270c0877fc1c159ce5172bc197fc6fd400d62fa8fc274a6b08fd4234bcf69c1af565c8ce3786547f53fa306891862f341143e5373db71af53fe5378d67eb548d1fef7e4c809e8"]}, 0x1224}, {&(0x7f0000003840)={0x10d4, 0x10, 0x8, 0x70bd2d, 0x25dfdbff, "", [@generic="b777f401d37fa7943a564e6836b4a2fc6344e4c406e93a37835f47575772ea7d0d5cd32bba35ad44264053370bcb82fbb4cf4431ba17776f", @generic="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", @nested={0x8b, 0xe7, 0x0, 0x1, [@generic="5c0cf76099fa47c440a79b53aba4e2335a5dd9da8d98ab73656f53963b9d53ce895d4bbbb15180532ef902e92a81b157c442ba29c900ac2124dda5d30faf3029564f5bba4012e1255a9fcb48a2d1974b858589805777f1ebf8f3ffd3469733", @generic, @typed={0x8, 0xf5, 0x0, 0x0, @pid=r9}, @typed={0xb, 0x98, 0x0, 0x0, @str='{)#-@#\x00'}, @nested={0x4, 0xef}, @typed={0x4, 0x55}, @nested={0x4, 0x15e}, @typed={0x8, 0xbf, 0x0, 0x0, @pid=r10}]}]}, 0x10d4}], 0x5, &(0x7f0000004b00)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r15}}}], 0x20, 0x4}, 0x0) 12.05447344s ago: executing program 5 (id=906): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "37a466fe"}]}}, 0x0}, 0x0) syz_usb_connect(0x3, 0x8c6, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) read$hidraw(r1, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r1}, 0xffffffffffff34b4, 0x7, 0x5}) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") 5.478899463s ago: executing program 2 (id=984): r0 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187014, &(0x7f0000000040)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)="319bbb", 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2, 0x2, 0x1, 0x8, 0x5, 0x1}, 0x30, 0x1) splice(r3, &(0x7f0000000000)=0x7, r4, &(0x7f0000000180)=0x84f, 0x1, 0x14) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack\x00') close(r5) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0", @ANYRESDEC, @ANYRES64, @ANYRESHEX], 0x0}, 0x0) 5.097677073s ago: executing program 3 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async, rerun: 64) r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='iocharset', &(0x7f00000001c0)='exfat\x00', 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x40000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1440000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x80, r9, 0x5, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) (async) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000200)={0x3, 0x1}) (async, rerun: 64) r12 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (rerun: 64) ioctl$UFFDIO_UNREGISTER(r12, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x5000)=nil, 0x5000}) 4.942934337s ago: executing program 2 (id=998): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000500000000001e000000ffffffff00"/88, 0x58) 4.941983897s ago: executing program 2 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x440, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb908}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b23}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x134a65b7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @private0, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @loopback, 0xa}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffe8bd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x81, @local, 0x8000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x1}, 0x20008052) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) recvmmsg(r0, &(0x7f0000006840)=[{{&(0x7f0000000840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/113, 0x71}], 0x3}, 0xfffffffb}, {{&(0x7f0000000b00)=@xdp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b80)=""/42, 0x2a}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/64, 0x40}], 0x6}, 0xe5eb}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/68, 0x44}, {&(0x7f0000002e40)=""/197, 0xc5}, {&(0x7f0000002f40)}], 0x4, &(0x7f0000002fc0)=""/98, 0x62}, 0x501}, {{&(0x7f0000003040)=@ieee802154, 0x80, &(0x7f00000044c0)=[{&(0x7f00000030c0)=""/176, 0xb0}, {&(0x7f0000003180)=""/137, 0x89}, {&(0x7f0000003240)=""/81, 0x51}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/11, 0xb}, {&(0x7f0000004300)=""/156, 0x9c}, {&(0x7f00000043c0)=""/79, 0x4f}, {&(0x7f0000004440)=""/3, 0x3}, {&(0x7f0000004480)}], 0x9, &(0x7f0000004580)=""/29, 0x1d}}, {{&(0x7f00000045c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004640)}, {&(0x7f0000004680)=""/61, 0x3d}, {&(0x7f00000046c0)=""/158, 0x9e}, {&(0x7f0000004780)=""/25, 0x19}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/138, 0x8a}, {&(0x7f00000048c0)=""/228, 0xe4}, {&(0x7f00000049c0)}], 0x8, &(0x7f0000004a80)=""/128, 0x80}, 0x9}, {{&(0x7f0000004b00)=@xdp, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)}, {&(0x7f0000005bc0)=""/41, 0x29}, {&(0x7f0000005c00)=""/55, 0x37}, {&(0x7f0000005c40)}], 0x5, &(0x7f0000005d00)=""/117, 0x75}, 0x3}, {{&(0x7f0000005d80)=@tipc=@id, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005e00)=""/86, 0x56}, {&(0x7f0000005e80)=""/184, 0xb8}, {&(0x7f0000005f40)=""/240, 0xf0}, {&(0x7f0000006040)=""/89, 0x59}, {&(0x7f00000060c0)=""/211, 0xd3}], 0x5, &(0x7f0000006240)=""/188, 0xbc}, 0x5e6}, {{&(0x7f0000006300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006380)=""/169, 0xa9}, {&(0x7f0000006440)=""/134, 0x86}, {&(0x7f0000006500)=""/234, 0xea}, {&(0x7f0000006600)=""/111, 0x6f}, {&(0x7f0000006680)=""/62, 0x3e}, {&(0x7f00000066c0)=""/159, 0x9f}], 0x6, &(0x7f0000006800)=""/24, 0x18}, 0x8000}], 0x8, 0x0, &(0x7f0000006a40)={0x77359400}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000006b40)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006b00)={&(0x7f0000006ac0)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x44004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000006c40)={&(0x7f0000006b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006c00)={&(0x7f0000006bc0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macsec0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000006d40)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006d00)={&(0x7f0000006cc0)={0x34, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000006e40)={&(0x7f0000006d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006e00)={&(0x7f0000006dc0)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x800) sendto(r4, &(0x7f0000006e80)="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", 0xfc, 0x880, &(0x7f0000006f80)=@ax25={{0x3, @null, 0x8}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000007000), 0x16b001, 0x0) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000007100)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000070c0)={&(0x7f0000007080)={0x10, 0x3f5, 0x800, 0x70bd26, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x45}, 0x64048005) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000007180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000007280)={&(0x7f0000007140)={0x10, 0x0, 0x0, 0xd3570458eee2a458}, 0xc, &(0x7f0000007240)={&(0x7f00000071c0)={0x44, r3, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x48}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x0, 0x101, 0x200]}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000072c0), 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000007300)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_timeval(r10, 0x1, 0x43, &(0x7f0000007340)={0x77359400}, 0x10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007380)='/proc/sysvipc/sem\x00', 0x0, 0x0) close_range(r11, r4, 0x0) lremovexattr(&(0x7f00000073c0)='./file0\x00', &(0x7f0000007400)=@random={'btrfs.', 'batadv\x00'}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000007440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xf7bb5a6df14ab48c, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa4, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000079c0)={0xa, &(0x7f0000007480)={0xa, 0x6, 0x300, 0x1, 0x2, 0x5, 0xdf, 0x4}, 0xfd, &(0x7f00000074c0)={0x5, 0xf, 0xfd, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x3, 0x8, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0xb, 0xe0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0x3, 0x1, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x4, 0x7}, @generic={0xd5, 0x10, 0xa, "d0e681b3587a580e58443fe72d24e93fe9005e6b464c1f561adf88ea62ec77161225d2f6089578e0a67f0f9fa09f846778aa5ec22cc1c6d0ec052ed55de75b9c5cc74443bd4c9424ef675cceb9861f69e83f8243b479f8501e5431ed6489be9d129d8ecf6db85aff928e98ba88d29a23661dd02291883b6f04e307dfd19b5b37dfffc65177387a2f292fc2d94beb21acbd272378f689332343f25fb328ff8dafd6dae60530f2005a029203d692913d62a4e0ca715fb62872c93a14d2d4d974ea91025f86b69d55027547006259bc9803db10"}]}, 0x9, [{0xe3, &(0x7f00000075c0)=@string={0xe3, 0x3, "a69fd9807df38fbc9afd0a33be9c74abf19304d8c88628ecf6efb0d4f20989daa4fd36bd07ef3a43de8553ca56f653ebeac903c07546c69546ba9d66e61ef230888812abd481a46576f94f7c6fd5fa64cf8534d3f589ec619ed5449613ab4516ff19b6ea475f6dea1043cc0c1d3b9e7febb2e73ba3f356357987fafe65abd4931d7f9e2cefc5a81b2bc44b881280d2c1b9c46cd30424692c4db929163c754a6d0fcb195115a927f0bdcac9a564b03adf65daaf907fead1f6a82d17d939dd385db119fdb11de1e05b6cf4cecb308873248a62b99b5dab33b0b0909c50f75d989e81"}}, {0x4, &(0x7f00000076c0)=@lang_id={0x4, 0x3, 0x408}}, {0xa0, &(0x7f0000007700)=@string={0xa0, 0x3, "16c99f387e7235a192ee0f6b584e1e29bb01b632f8152794a78aac36e74379ade26f7a95a6616bc68e39073bcaf9c6794e422120e1764d4ad4c0f627f57b62eeaf4796b92ca3b0833670347a04adc024296465274c0360510557c5f021af7963fb0ded5df5f2eb5ed19609078f23a1ecb2081041809076faacab970a498e14e2ff5292d12af44fdb83631d85238d38c1f0365e9cf707ff3acefc53261bfa"}}, {0x4, &(0x7f00000077c0)=@lang_id={0x4, 0x3, 0x837}}, {0x4, &(0x7f0000007800)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000007840)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000007880)=@lang_id={0x4, 0x3, 0x100a}}, {0xbb, &(0x7f00000078c0)=@string={0xbb, 0x3, "1f6abaf199109f9a1c8df5672a8126e494af0c77da872dbdec70d426ce0127c50de7b7383d4ac89aee38824428d99179bc4f1e241b48464e3e600908515c2b2c1a369d69ff107d7a0a1931e95239a31c8551063dee26ee6b1e9f95623631df62bbee7380c936695d0abb6f361593be88051594c61be8dd16b1fef66c4e9c23b2e54ce0dc12239b07c0edc2a5d7ba60f34076845dab5ac57d633377c17e66db6e4d65b90d9e5aa0010c3ef9c7338894fdce7269516053a40499"}}, {0x4, &(0x7f0000007980)=@lang_id={0x4, 0x3, 0x42c}}]}) 4.686751183s ago: executing program 3 (id=1003): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}) 4.668237953s ago: executing program 3 (id=1005): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x10000, 0x5, 0xffff, 0x8}, 0x10) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x3, 0x5d, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xaa7554130ed2c951, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x40, 0x170, 0xc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x4b, {{0x8, 0x24, 0x6, 0x0, 0x0, "93d06a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0xa, 0xce}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x8, 0xc6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xf2, 0x8a, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x30, 0x40, 0x10}}}}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xf, 0x0, 0x7, 0xff, 0x2}, 0x8, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}}) (async, rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x1a, 0x800, 0x9) close_range(r4, 0xffffffffffffffff, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 4.316561313s ago: executing program 0 (id=1013): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000002200)=""/4097, 0x1001}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f00000000c0)=""/53, 0x35}], 0x9}, 0x72}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x800}, {{0x0, 0x0, 0x0}, 0x11f74}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x7, 0x0, 0x0) 4.301021483s ago: executing program 0 (id=1014): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x8a804) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x80) sendto$packet(r3, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) accept$packet(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x14) fadvise64(r1, 0x401, 0xffffffff, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) 4.262935764s ago: executing program 0 (id=1015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x7fff, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x196, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9, 0x1900}, {0x6, 0x0, 0x1f, 0x2}, {0x2, 0x7}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xb, 0xacd555cb1b3d945c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x14) 4.179045346s ago: executing program 0 (id=1016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x46, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x2, 0x0, 0x3, 0x0, 0x5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 1.932240392s ago: executing program 2 (id=1017): r0 = socket$inet6(0xa, 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) r1 = inotify_init1(0x800) cachestat(r1, &(0x7f0000000040)={0x5, 0x4}, &(0x7f0000000080), 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x0, 0x2, 0x1}, 0x20) close(r0) 1.928716452s ago: executing program 0 (id=1025): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x2, 0xbf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x58, 0x582, 0x52, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x1, 0x1, 0x0, 0x70, 0xa5, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x1c, [@midi_out_jack={0x1b, 0x24, 0x3, 0x1, 0x1, 0xa, [{0x3, 0x4}, {0x9, 0x9}, {0xf8, 0xf9}, {0x3, 0xd1}, {0x6, 0x6}, {0x9, 0x5}, {0x10, 0xe2}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x4}], 0x10}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7, 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x92}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xff, 0x9}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x80, 0x3, [{0x2, 0x4}, {0x2, 0x3}, {0x0, 0x2}], 0x4}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0x7, 0x5, {0x12, 0x25, 0x1, 0xe, "3914b10cc8c3d91a5448370b3d14"}}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0x6, 0x8, {0xc, 0x25, 0x1, 0x8, "e99f4d5d606153d6"}}}, {{0x9, 0x5, 0x2, 0x12, 0x40, 0x8, 0x3, 0x6, {0x10, 0x25, 0x1, 0xc, "7c25224245bddf9feffe8cd9"}}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x3, 0x7f, 0x0, {0x8, 0x25, 0x1, 0x4, "4f5adfc3"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xd, 0x1, 0x7b, 0x40}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x6, 0x9, 0xff80, 0xe7}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x59, &(0x7f0000000380)=ANY=[@ANYBLOB="5903dae0411192b1b624b5256cf9d09ea359d2662deab3cc9c96b7f9549e7aadd102f77f86831da28214c52ab7bd2be9b6273cb1729419b6c684ca2d065d528a44faa083860a46072c642a750c1ebadb6eb685c8856e73f7b8b6f1e245a5bce65908dd7d499f64ecd90f495c1c8fc1fd0d059a388027a91e78656ff60bd330f67f4eff3e7c5d5bd415df5f084dc6af40b4b92d9ca07c8e8f54a7011292ebfd105895e54eec3bc07e"]}, {0xa4, &(0x7f0000000280)=@string={0xa4, 0x3, "4a81f3c68c9b901d3aba35968f8a8557fd8297e1aab11232645466cb20f39137b91e8634c7c3733845b4463f61e88b58afbbe246820415fdad3f89ccf92ffcf64b8f8fa2f7c3517de2fd2bb49be5a061fcdf656228232c5e5699320fc61102ae04cee15078698e9ab3fa44cd6e6436e5f398bc6df61202fe6865f3dfa2e649fb2db8a1fc38e6b6017719288ba4a41c9ea01978c3c939b96c87cdc2ac9957a20cedb8"}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000500)={0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="2006a8000000a80ca2777dbd79d0c8193e81b04ef531155041db54f4fc2a3c2070a58bfe17d39831caf8bdc35ecfe7c057ec4ad5d81ebb96395c3e9afd9e369aa41fe6914315e1b95b43b6604c708b6b6f427c98c0ae0e3803e565234de34dba31e5ac43974ce678ad4f34c6dcd13b2c455016fe6e0e6d171093f835042d0f726e0401f803baa013ad108e70b480d6b95907424481e15f4f96cc65e80400f2f796a7660c45a2a6902dc9a6fee01a1611adf0cb403b17dadbc365b7240f2013e0780e18fdc0605913fc901df41c4bf8a13d443c4f600afe17ed1da8d3ac5a2f847df6466ad44ff820099b431c97"], &(0x7f0000000440)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "d0cea4e0be870604a227eb7c1000b4bb7f68395bac3edf0c97cf5d81ce6ef2a88deff4fe05bf4bd4cf7b8e87362560c5e8eb2c457bfa765bab96671c48cdb48d68850521c1be2049d6497549cdc4c6ad723e3c1241cc5a99a14c81af85e6ef5996fac4a9b5a4b81f03d388fed653a8eb6d23dc583f851662c19bd91380f38173c7ff4a4fc306f4d14639e4839c"}}}, &(0x7f0000000a80)={0x44, &(0x7f00000006c0)={0x20, 0xc, 0xb1, "09ef9fd5310c11a1c4a3f256917f4f41bfef289b8b9046b3ec5d8ab8137082934ce87d302599ef91ac40106597971715d78742d49d26c22de2b9e1dcc520a4a8277b04a1e65f6594cec6dc00d2a116f24baf2df43631b5864057226dbb9f051b3dc49df48fbd774a9ac56db5a62fe7ab00d6ed178ec9fa5265868a70993969f78eb69c0391eb749dee6e2370b218514c159de2b6f94a5848d13a8109d548820e055a8165225611787acf3c3e4bf43ea9c1"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x81, 0x3, "7b8510"}, &(0x7f0000000880)={0x20, 0x82, 0x1, 'A'}, &(0x7f00000008c0)={0x20, 0x83, 0x3, "5af44c"}, &(0x7f0000000900)={0x20, 0x84, 0x3, "e91cd5"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "9fc7a7"}}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x0, 0x3, 0x1, "02"}, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xb, 0x2, '|5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003480)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20007c4a95c221e2022d3bac25fefc404566e186c4c4aaacad921a13c1d5ee318b0307d1d3a7c42d21f7610929c880b71416fa59e255756efc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.650882269s ago: executing program 3 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chown(&(0x7f00000001c0)='./mnt\x00', 0x0, 0xee00) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3400) 1.649409789s ago: executing program 2 (id=1019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TCSETSW2(r1, 0x5408, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3b4f, {{0x6, 0x4, 0x3, 0x18, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x12) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000040)=[{r0, 0x4300}, {r0, 0x200}, {r3, 0x220}, {r1, 0x50}, {r3, 0x4209}, {r0, 0x104}, {r0, 0x201}], 0x7, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={[0x3]}, 0x8) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) (async, rerun: 32) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100363863510f30c10108736010203010902120001c271500009047c0b00a4cad400"], 0x0) (rerun: 32) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.619473969s ago: executing program 3 (id=1020): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x110, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.386419326s ago: executing program 3 (id=1021): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) listen(r3, 0x1) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) 1.5146ms ago: executing program 0 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/irq_vectors/vector_setup/id\x00', 0x0, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = gettid() tkill(r2, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x2, &(0x7f00000002c0)=[{0x2b3c, 0x0, 0x7, 0x1ff}, {0x7, 0x9, 0x80, 0x76}]}) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) 0s ago: executing program 2 (id=1023): ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1200000000000, 0x20009, 0x68cb, 0x4000000000000, 0x6, 0x8, 0x252b}, 0x0, 0xfffffffffffffffc, 0x0, 0x0) ptrace(0x10, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x1000000000, 0x6}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xc0000010}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto$packet(r1, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000200)={0x29, 0x11, 0x4, 0xffffffff, 0xa, 0x8, 0x1, 0x12f, 0x1}) kernel console output (not intermixed with test programs): 4][ T9] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.209301][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.216006][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 48.225198][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.236502][ T9] usb 4-1: config 0 descriptor?? [ 48.242502][ T1058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 48.250858][ T439] usb 3-1: bad CDC descriptors [ 48.266106][ T439] usb 3-1: USB disconnect, device number 11 [ 48.662065][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x2 [ 48.670318][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x7 [ 48.680661][ T9] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.0c Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 48.697976][ T9] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 48.936218][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x9c0e, unable to proceed further with wheel init [ 48.953752][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.953759][ T1048] Bluetooth: hci0: command 0x1003 tx timeout [ 49.002891][ T1063] FAULT_INJECTION: forcing a failure. [ 49.002891][ T1063] name failslab, interval 1, probability 0, space 0, times 0 [ 49.015640][ T1063] CPU: 1 UID: 0 PID: 1063 Comm: syz.2.281 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 49.015677][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.015694][ T1063] Call Trace: [ 49.015703][ T1063] [ 49.015714][ T1063] __dump_stack+0x21/0x30 [ 49.015751][ T1063] dump_stack_lvl+0x140/0x1c0 [ 49.015778][ T1063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.015805][ T1063] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 49.015834][ T1063] ? kasan_save_alloc_info+0x3a/0x50 [ 49.015856][ T1063] dump_stack+0x19/0x20 [ 49.015882][ T1063] should_fail_ex+0x3c2/0x510 [ 49.015916][ T1063] should_failslab+0xac/0x100 [ 49.015944][ T1063] __kmalloc_node_noprof+0x69/0x500 [ 49.015969][ T1063] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 49.016002][ T1063] __vmalloc_node_range_noprof+0x529/0x1300 [ 49.016037][ T1063] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 49.016069][ T1063] ? arch_dup_task_struct+0x5b/0xe0 [ 49.016099][ T1063] ? __asan_memcpy+0x5a/0x80 [ 49.016120][ T1063] dup_task_struct+0x5d6/0xd80 [ 49.016144][ T1063] ? copy_process+0x57c/0x3350 [ 49.016169][ T1063] ? _raw_spin_lock_irq+0x93/0x120 [ 49.016199][ T1063] ? copy_process+0x3350/0x3350 [ 49.016224][ T1063] ? stack_trace_save+0xaa/0x100 [ 49.016249][ T1063] ? __kasan_check_write+0x18/0x20 [ 49.016271][ T1063] copy_process+0x57c/0x3350 [ 49.016296][ T1063] ? kasan_save_track+0x3e/0x80 [ 49.016319][ T1063] ? kasan_save_alloc_info+0x3a/0x50 [ 49.016339][ T1063] ? __kasan_kmalloc+0x96/0xb0 [ 49.016364][ T1063] ? io_wq_enqueue+0x62f/0x8d0 [ 49.016386][ T1063] ? io_queue_iowq+0x38b/0x520 [ 49.016411][ T1063] ? io_submit_sqes+0x1099/0x1b70 [ 49.016438][ T1063] ? __se_sys_io_uring_enter+0x302/0x25c0 [ 49.016467][ T1063] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.016493][ T1063] ? __cfi_copy_process+0x10/0x10 [ 49.016519][ T1063] ? __cfi_io_wq_worker+0x10/0x10 [ 49.016540][ T1063] ? __cfi_io_wq_worker+0x10/0x10 [ 49.016563][ T1063] create_io_thread+0x122/0x190 [ 49.016591][ T1063] ? __cfi_create_io_thread+0x10/0x10 [ 49.016619][ T1063] ? __cfi_io_wq_worker+0x10/0x10 [ 49.016650][ T1063] ? __kasan_kmalloc+0x96/0xb0 [ 49.016678][ T1063] ? __kmalloc_cache_noprof+0x23c/0x470 [ 49.016702][ T1063] ? create_io_worker+0xaf/0x690 [ 49.016725][ T1063] create_io_worker+0x198/0x690 [ 49.016750][ T1063] io_wq_enqueue+0x62f/0x8d0 [ 49.016771][ T1063] ? __kasan_check_write+0x18/0x20 [ 49.016792][ T1063] ? __cfi_io_wq_work_match_item+0x10/0x10 [ 49.016814][ T1063] io_queue_iowq+0x38b/0x520 [ 49.016839][ T1063] io_queue_sqe_fallback+0xb1/0x160 [ 49.016868][ T1063] io_submit_sqes+0x1099/0x1b70 [ 49.016898][ T1063] __se_sys_io_uring_enter+0x302/0x25c0 [ 49.016928][ T1063] ? __kasan_check_read+0x15/0x20 [ 49.016948][ T1063] ? rb_commit+0x753/0x7b0 [ 49.016972][ T1063] ? __x64_sys_io_uring_enter+0x110/0x110 [ 49.017000][ T1063] ? __kasan_check_read+0x15/0x20 [ 49.017021][ T1063] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 49.017046][ T1063] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 49.017072][ T1063] ? trace_event_buffer_commit+0x256/0x8f0 [ 49.017097][ T1063] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 49.017139][ T1063] __x64_sys_io_uring_enter+0xe9/0x110 [ 49.017169][ T1063] x64_sys_call+0x2d28/0x2ee0 [ 49.017191][ T1063] do_syscall_64+0x57/0xf0 [ 49.017222][ T1063] ? clear_bhb_loop+0x50/0xa0 [ 49.017247][ T1063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.017270][ T1063] RIP: 0033:0x7ffae459e159 [ 49.017290][ T1063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.017309][ T1063] RSP: 002b:00007ffae5504f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 49.017335][ T1063] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffae459e159 [ 49.017351][ T1063] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000015 [ 49.017365][ T1063] RBP: 0000000000000045 R08: 0000000000000000 R09: 0000000000000008 [ 49.017380][ T1063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000b20 [ 49.017394][ T1063] R13: 0000200000000b28 R14: 00000000000003c9 R15: 0000000000000001 [ 49.017410][ T1063] [ 49.017421][ T1063] syz.2.281: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 49.175180][ T9] usb 4-1: USB disconnect, device number 14 [ 49.178188][ T1063] ,cpuset= [ 49.343804][ T421] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 49.345361][ T1063] syz2,mems_allowed=0 [ 49.463747][ T1063] CPU: 1 UID: 0 PID: 1063 Comm: syz.2.281 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 49.463782][ T1063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.463796][ T1063] Call Trace: [ 49.463804][ T1063] [ 49.463813][ T1063] __dump_stack+0x21/0x30 [ 49.463847][ T1063] dump_stack_lvl+0x140/0x1c0 [ 49.463872][ T1063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.463898][ T1063] dump_stack+0x19/0x20 [ 49.463924][ T1063] warn_alloc+0x1e7/0x2c0 [ 49.463951][ T1063] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 49.463984][ T1063] ? __cfi_warn_alloc+0x10/0x10 [ 49.464013][ T1063] ? __kmalloc_node_noprof+0x3fe/0x500 [ 49.464048][ T1063] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 49.464079][ T1063] __vmalloc_node_range_noprof+0x65f/0x1300 [ 49.464113][ T1063] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 49.464144][ T1063] ? arch_dup_task_struct+0x5b/0xe0 [ 49.464174][ T1063] ? __asan_memcpy+0x5a/0x80 [ 49.464196][ T1063] dup_task_struct+0x5d6/0xd80 [ 49.464222][ T1063] ? copy_process+0x57c/0x3350 [ 49.464247][ T1063] ? _raw_spin_lock_irq+0x93/0x120 [ 49.464277][ T1063] ? copy_process+0x3350/0x3350 [ 49.464301][ T1063] ? stack_trace_save+0xaa/0x100 [ 49.464326][ T1063] ? __kasan_check_write+0x18/0x20 [ 49.464348][ T1063] copy_process+0x57c/0x3350 [ 49.464374][ T1063] ? kasan_save_track+0x3e/0x80 [ 49.464398][ T1063] ? kasan_save_alloc_info+0x3a/0x50 [ 49.464418][ T1063] ? __kasan_kmalloc+0x96/0xb0 [ 49.464442][ T1063] ? io_wq_enqueue+0x62f/0x8d0 [ 49.464465][ T1063] ? io_queue_iowq+0x38b/0x520 [ 49.464491][ T1063] ? io_submit_sqes+0x1099/0x1b70 [ 49.464517][ T1063] ? __se_sys_io_uring_enter+0x302/0x25c0 [ 49.464545][ T1063] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.464571][ T1063] ? __cfi_copy_process+0x10/0x10 [ 49.464597][ T1063] ? __cfi_io_wq_worker+0x10/0x10 [ 49.464618][ T1063] ? __cfi_io_wq_worker+0x10/0x10 [ 49.464640][ T1063] create_io_thread+0x122/0x190 [ 49.464666][ T1063] ? __cfi_create_io_thread+0x10/0x10 [ 49.464693][ T1063] ? __cfi_io_wq_worker+0x10/0x10 [ 49.464716][ T1063] ? __kasan_kmalloc+0x96/0xb0 [ 49.464741][ T1063] ? __kmalloc_cache_noprof+0x23c/0x470 [ 49.464764][ T1063] ? create_io_worker+0xaf/0x690 [ 49.464787][ T1063] create_io_worker+0x198/0x690 [ 49.464810][ T1063] io_wq_enqueue+0x62f/0x8d0 [ 49.464831][ T1063] ? __kasan_check_write+0x18/0x20 [ 49.464853][ T1063] ? __cfi_io_wq_work_match_item+0x10/0x10 [ 49.464877][ T1063] io_queue_iowq+0x38b/0x520 [ 49.464903][ T1063] io_queue_sqe_fallback+0xb1/0x160 [ 49.464934][ T1063] io_submit_sqes+0x1099/0x1b70 [ 49.464966][ T1063] __se_sys_io_uring_enter+0x302/0x25c0 [ 49.464996][ T1063] ? __kasan_check_read+0x15/0x20 [ 49.465018][ T1063] ? rb_commit+0x753/0x7b0 [ 49.465049][ T1063] ? __x64_sys_io_uring_enter+0x110/0x110 [ 49.465078][ T1063] ? __kasan_check_read+0x15/0x20 [ 49.465099][ T1063] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 49.465124][ T1063] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 49.465150][ T1063] ? trace_event_buffer_commit+0x256/0x8f0 [ 49.465175][ T1063] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 49.465211][ T1063] __x64_sys_io_uring_enter+0xe9/0x110 [ 49.465239][ T1063] x64_sys_call+0x2d28/0x2ee0 [ 49.465260][ T1063] do_syscall_64+0x57/0xf0 [ 49.465288][ T1063] ? clear_bhb_loop+0x50/0xa0 [ 49.465311][ T1063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.465331][ T1063] RIP: 0033:0x7ffae459e159 [ 49.465351][ T1063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.465371][ T1063] RSP: 002b:00007ffae5504f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 49.465396][ T1063] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffae459e159 [ 49.465413][ T1063] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000015 [ 49.465426][ T1063] RBP: 0000000000000045 R08: 0000000000000000 R09: 0000000000000008 [ 49.465440][ T1063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000b20 [ 49.465455][ T1063] R13: 0000200000000b28 R14: 00000000000003c9 R15: 0000000000000001 [ 49.465473][ T1063] [ 49.465497][ T1063] Mem-Info: [ 49.556936][ T421] usb 1-1: too many configurations: 118, using maximum allowed: 8 [ 49.561094][ T1063] active_anon:6410 inactive_anon:0 isolated_anon:0 [ 49.561094][ T1063] active_file:6734 inactive_file:2305 isolated_file:0 [ 49.561094][ T1063] unevictable:0 dirty:911 writeback:0 [ 49.561094][ T1063] slab_reclaimable:3726 slab_unreclaimable:77226 [ 49.561094][ T1063] mapped:26961 shmem:167 pagetables:873 [ 49.561094][ T1063] sec_pagetables:0 bounce:0 [ 49.561094][ T1063] kernel_misc_reclaimable:0 [ 49.561094][ T1063] free:1530758 free_pcp:1779 free_cma:0 [ 49.572641][ T421] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 49.576097][ T1063] Node 0 active_anon:25640kB inactive_anon:0kB active_file:26936kB inactive_file:9220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107844kB dirty:3644kB writeback:0kB shmem:668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4668kB pagetables:3492kB sec_pagetables:0kB all_unreclaimable? no [ 49.583724][ T421] usb 1-1: can't read configurations, error -61 [ 49.585705][ T1063] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963384kB mlocked:0kB bounce:0kB free_pcp:5220kB local_pcp:0kB free_cma:0kB [ 49.723774][ T421] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 49.724733][ T1063] lowmem_reserve[]: [ 49.886030][ T421] usb 1-1: too many configurations: 118, using maximum allowed: 8 [ 49.931810][ T1063] 0 [ 49.984977][ T421] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 50.006922][ T1063] 3921 3921 [ 50.041254][ T421] usb 1-1: can't read configurations, error -61 [ 50.043623][ T1063] Normal free:3171448kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25584kB inactive_anon:0kB active_file:26936kB inactive_file:9220kB unevictable:0kB writepending:2644kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3696kB local_pcp:16kB free_cma:0kB [ 50.064053][ T421] usb usb1-port1: attempt power cycle [ 50.088251][ T1063] lowmem_reserve[]: 0 0 0 [ 50.118604][ T1063] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 50.135095][ T1063] Normal: 191*4kB (UE) 241*8kB (UME) 400*16kB (UME) 123*32kB (UME) 99*64kB (UME) 52*128kB (UME) 21*256kB (UME) 20*512kB (UME) 7*1024kB (UM) 1*2048kB (E) 763*4096kB (UM) = 3176100kB [ 50.154285][ T1063] 9200 total pagecache pages [ 50.159186][ T1063] 0 pages in swap cache [ 50.163484][ T1063] Free swap = 124728kB [ 50.168000][ T1063] Total swap = 124996kB [ 50.174594][ T1063] 2097051 pages RAM [ 50.194534][ T1063] 0 pages HighMem/MovableOnly [ 50.199244][ T1063] 352239 pages reserved [ 50.203404][ T1063] 0 pages cma reserved [ 50.209831][ T1063] Memory allocations: [ 50.213900][ T1063] 0 B 0 init/main.c:1477 func:do_initcalls [ 50.221301][ T1063] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 50.229851][ T1063] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 50.237721][ T1063] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 50.261593][ T1063] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 50.269887][ T1063] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 50.278679][ T1063] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 50.286745][ T1063] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 50.295756][ T1063] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 50.303825][ T1063] 0 B 0 init/initramfs.c:101 func:find_link [ 50.335073][ T1082] IPv6: Can't replace route, no match found [ 50.453793][ T421] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 50.484604][ T421] usb 1-1: too many configurations: 118, using maximum allowed: 8 [ 50.494173][ T421] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 50.501756][ T421] usb 1-1: can't read configurations, error -61 [ 50.603831][ T439] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 50.643874][ T421] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 50.674682][ T421] usb 1-1: too many configurations: 118, using maximum allowed: 8 [ 50.684173][ T421] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 50.696612][ T421] usb 1-1: can't read configurations, error -61 [ 50.703321][ T421] usb usb1-port1: unable to enumerate USB device [ 50.773138][ T36] audit: type=1400 audit(1788313811.250:264): avc: denied { append } for pid=1090 comm="syz.3.291" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.805770][ T439] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.814401][ T439] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 50.826153][ T439] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 50.835606][ T439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.843613][ T439] usb 3-1: Product: syz [ 50.853418][ T439] usb 3-1: Manufacturer: syz [ 50.858471][ T439] usb 3-1: SerialNumber: syz [ 50.868901][ T1084] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.033896][ T421] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 51.195064][ T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.206160][ T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.217691][ T421] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 51.230908][ T421] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 51.240308][ T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.250005][ T421] usb 4-1: config 0 descriptor?? [ 51.256768][ T421] usbhid 4-1:0.0: can't add hid device: -22 [ 51.262753][ T421] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 51.285402][ T439] usb 3-1: invalid MIDI out EP 0 [ 51.315701][ T439] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 51.326866][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.344046][ T439] usb 3-1: USB disconnect, device number 12 [ 51.875617][ T1100] tipc: Started in network mode [ 51.881005][ T1100] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 51.890702][ T1100] tipc: Enabled bearer , priority 10 [ 51.898140][ T1100] tipc: Enabled bearer , priority 10 [ 51.905901][ T1100] tipc: Enabled bearer , priority 0 [ 52.244982][ T36] audit: type=1400 audit(1788313812.730:265): avc: denied { append } for pid=1109 comm="syz.0.298" name="pfkey" dev="proc" ino=4026532445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 52.272652][ T36] audit: type=1400 audit(1788313812.750:266): avc: denied { associate } for pid=1109 comm="syz.0.298" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.498546][ T36] audit: type=1400 audit(1788313812.980:267): avc: denied { read } for pid=1117 comm="syz.0.300" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.537183][ T36] audit: type=1400 audit(1788313812.980:268): avc: denied { open } for pid=1117 comm="syz.0.300" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.913808][ T861] tipc: Node number set to 4269801491 [ 53.082703][ T36] audit: type=1400 audit(1788313813.560:269): avc: denied { mount } for pid=1139 comm="syz.2.308" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.144331][ T36] audit: type=1400 audit(1788313813.620:270): avc: denied { unlink } for pid=1139 comm="syz.2.308" name="#1" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.193122][ T36] audit: type=1400 audit(1788313813.620:271): avc: denied { mount } for pid=1139 comm="syz.2.308" name="/" dev="overlay" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.262219][ T36] audit: type=1400 audit(1788313813.740:272): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.509315][ T1164] netlink: 208 bytes leftover after parsing attributes in process `syz.0.315'. [ 53.523238][ T36] audit: type=1400 audit(1788313814.000:273): avc: denied { relabelfrom } for pid=1163 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 53.564695][ T36] audit: type=1400 audit(1788313814.000:274): avc: denied { relabelto } for pid=1163 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 53.583177][ T1164] loop7: detected capacity change from 0 to 16384 [ 53.638208][ T421] usb 4-1: USB disconnect, device number 15 [ 53.724331][ T1166] loop7: detected capacity change from 16384 to 16383 [ 54.074003][ T439] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.156211][ T1180] IPv6: Can't replace route, no match found [ 54.264796][ T439] usb 3-1: Using ep0 maxpacket: 32 [ 54.274325][ T754] bridge_slave_1: left allmulticast mode [ 54.281536][ T439] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 54.283123][ T754] bridge_slave_1: left promiscuous mode [ 54.289789][ T439] usb 3-1: config 2 has no interface number 0 [ 54.296142][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.310180][ T439] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 54.310392][ T754] bridge_slave_0: left allmulticast mode [ 54.326005][ T439] usb 3-1: config 2 interface 88 has no altsetting 0 [ 54.334278][ T754] bridge_slave_0: left promiscuous mode [ 54.340190][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.348684][ T439] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 54.357934][ T439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.363802][ T421] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 54.366561][ T439] usb 3-1: Product: syz [ 54.378234][ T439] usb 3-1: Manufacturer: syz [ 54.382851][ T439] usb 3-1: SerialNumber: syz [ 54.393508][ T1173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.524950][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.532766][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.536503][ T421] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.540640][ T1183] bridge_slave_0: entered allmulticast mode [ 54.555409][ T1183] bridge_slave_0: entered promiscuous mode [ 54.563070][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.564471][ T421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.570804][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.584023][ T421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.587763][ T1183] bridge_slave_1: entered allmulticast mode [ 54.602178][ T421] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 54.602212][ T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.602236][ T421] usb 4-1: Product: syz [ 54.625582][ T1173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.637072][ T1183] bridge_slave_1: entered promiscuous mode [ 54.646608][ T421] usb 4-1: Manufacturer: syz [ 54.651303][ T421] usb 4-1: SerialNumber: syz [ 54.651570][ T754] veth1_macvtap: left promiscuous mode [ 54.659215][ T421] usb 4-1: selecting invalid altsetting 1 [ 54.661610][ T754] veth0_vlan: left promiscuous mode [ 54.669698][ T421] usb 4-1: unit 6 not found! [ 54.863815][ T421] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 54.880108][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.887259][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.894680][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.901747][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.968949][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.979202][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.000210][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.007345][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.032536][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.039708][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.138636][ T1183] veth0_vlan: entered promiscuous mode [ 55.167023][ T1183] veth1_macvtap: entered promiscuous mode [ 55.181308][ T421] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 55.211692][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.574741][ T1228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.589738][ T1228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.622578][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 56.571111][ T1283] IPv6: Can't replace route, no match found [ 56.662541][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.674300][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.075332][ T421] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.106946][ T9] usb 4-1: USB disconnect, device number 16 [ 57.263785][ T421] usb 6-1: Using ep0 maxpacket: 8 [ 57.270431][ T421] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 57.281503][ T421] usb 6-1: config 179 has no interface number 0 [ 57.289596][ T421] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 57.320333][ T421] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 57.334446][ T421] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.354579][ T421] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 57.366708][ T421] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 57.392371][ T421] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 57.419526][ T421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.436256][ T1296] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 57.558854][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 57.558872][ T36] audit: type=1400 audit(1788313818.040:291): avc: denied { setopt } for pid=1329 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.867332][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.894355][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.007501][ T1368] IPv6: Can't replace route, no match found [ 58.086371][ T311] usb 6-1: USB disconnect, device number 2 [ 58.086448][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 58.100793][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.432870][ T36] audit: type=1400 audit(1788313818.910:292): avc: denied { ioctl } for pid=1377 comm="syz.0.393" path="uts:[4026532302]" dev="nsfs" ino=4026532302 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.583744][ T36] audit: type=1400 audit(1788313819.060:293): avc: denied { search } for pid=1383 comm="syz.0.395" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.930291][ T1411] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 58.940432][ T1411] overlayfs: missing 'lowerdir' [ 59.035487][ T1423] input: syz0 as /devices/virtual/input/input9 [ 59.056263][ T1423] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 59.124163][ T36] audit: type=1400 audit(1788313819.610:294): avc: denied { bind } for pid=1425 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.369155][ T1441] IPv6: Can't replace route, no match found [ 59.932085][ T439] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 59.949898][ T439] asix 3-1:2.88: probe with driver asix failed with error -110 [ 60.089584][ T36] audit: type=1400 audit(1788313820.570:295): avc: denied { getopt } for pid=1461 comm="syz.5.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.574938][ T1484] syz.3.433 uses obsolete (PF_INET,SOCK_PACKET) [ 60.937380][ T1498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.946430][ T1498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.023829][ T439] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 61.119934][ T36] audit: type=1400 audit(1788313821.600:296): avc: denied { map } for pid=1503 comm="syz.5.441" path="/30/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.173868][ T439] usb 1-1: Using ep0 maxpacket: 16 [ 61.182019][ T439] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 61.191392][ T439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.199842][ T439] usb 1-1: Product: syz [ 61.206231][ T439] usb 1-1: Manufacturer: syz [ 61.210969][ T439] usb 1-1: SerialNumber: syz [ 61.323566][ T36] audit: type=1400 audit(1788313821.800:297): avc: denied { write } for pid=1508 comm="syz.5.443" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.425723][ T36] audit: type=1400 audit(1788313821.910:298): avc: denied { getopt } for pid=1514 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.484633][ T1519] netlink: 'syz.2.446': attribute type 27 has an invalid length. [ 61.506299][ T1519] tipc: Resetting bearer [ 61.514612][ T1519] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.521873][ T1519] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.531188][ T1519] tipc: Resetting bearer [ 61.737808][ T1537] IPv6: Can't replace route, no match found [ 61.764702][ T1539] netlink: 57 bytes leftover after parsing attributes in process `syz.3.453'. [ 62.011999][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 62.103988][ T421] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.169163][ T36] audit: type=1400 audit(1788313822.650:299): avc: denied { create } for pid=1560 comm="syz.2.459" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 62.212967][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 62.226525][ T9] usb 4-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 62.241296][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 62.250986][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.276606][ T9] usb 4-1: Found UVC 1.00 device (046d:0825) [ 62.283607][ T9] usb 4-1: No streaming interface found for terminal 2. [ 62.290671][ T421] usb 6-1: Using ep0 maxpacket: 16 [ 62.297474][ T421] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 62.323353][ T421] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 62.336943][ T421] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.344019][ T421] usb 6-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 62.353116][ T421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.362634][ T421] usb 6-1: config 0 descriptor?? [ 62.470117][ T9] usb 4-1: USB disconnect, device number 17 [ 62.502638][ T1570] tmpfs: Unknown parameter 'nMnodes' [ 62.509182][ T1570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.517902][ T1570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.526972][ T36] audit: type=1400 audit(1788313823.010:300): avc: denied { map } for pid=1569 comm="syz.2.463" path="socket:[19087]" dev="sockfs" ino=19087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.951106][ T421] lg-g15 0003:046D:C227.0007: ignoring exceeding usage max [ 62.965926][ T421] lg-g15 0003:046D:C227.0007: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.5-1/input0 [ 63.044486][ T439] usb 1-1: MIDIStreaming interface descriptor not found [ 63.260410][ T421] usb 1-1: USB disconnect, device number 19 [ 63.636939][ T439] usb 6-1: USB disconnect, device number 3 [ 63.854758][ T1609] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 63.884238][ T1609] overlayfs: missing 'lowerdir' [ 63.886291][ T1610] 9pnet: Could not find request transport: unZx [ 64.081145][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 64.081166][ T36] audit: type=1400 audit(1788313824.560:302): avc: denied { mounton } for pid=1617 comm="syz.2.479" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.115523][ T1618] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 64.173903][ T861] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.211958][ T1630] syz.3.483 (1630): /proc/1627/oom_adj is deprecated, please use /proc/1627/oom_score_adj instead. [ 64.232148][ T1634] kvm: kvm [1627]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 64.240853][ T1634] kvm: kvm [1627]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 64.313786][ T861] usb 1-1: device descriptor read/64, error -71 [ 64.316923][ T1639] IPv6: Can't replace route, no match found [ 64.343993][ T36] audit: type=1400 audit(1788313824.820:303): avc: denied { connect } for pid=1640 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.367390][ T36] audit: type=1400 audit(1788313824.830:304): avc: denied { write } for pid=1640 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.564626][ T861] usb 1-1: device descriptor read/64, error -71 [ 64.813872][ T861] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.824111][ T36] audit: type=1400 audit(1788313825.300:305): avc: denied { setopt } for pid=1667 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.828283][ T1668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 64.993787][ T861] usb 1-1: device descriptor read/64, error -71 [ 65.233914][ T861] usb 1-1: device descriptor read/64, error -71 [ 65.242362][ T1679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.253412][ T1679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.353976][ T861] usb usb1-port1: attempt power cycle [ 65.473810][ T421] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.633787][ T421] usb 6-1: Using ep0 maxpacket: 32 [ 65.640569][ T421] usb 6-1: unable to get BOS descriptor or descriptor too short [ 65.649177][ T421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.659340][ T421] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.669778][ T421] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 65.678949][ T421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.686974][ T421] usb 6-1: Product: syz [ 65.691251][ T421] usb 6-1: Manufacturer: syz [ 65.693789][ T861] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 65.695927][ T421] usb 6-1: SerialNumber: syz [ 65.710136][ T421] usb 6-1: selecting invalid altsetting 1 [ 65.725260][ T861] usb 1-1: device descriptor read/8, error -71 [ 65.855031][ T861] usb 1-1: device descriptor read/8, error -71 [ 65.913303][ T421] usb 6-1: 6:0: failed to get current value for ch 0 (-71) [ 65.926490][ T421] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 65.937575][ T421] usb 6-1: USB disconnect, device number 4 [ 65.954908][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.093787][ T861] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 66.125056][ T861] usb 1-1: device descriptor read/8, error -71 [ 66.256375][ T861] usb 1-1: device descriptor read/8, error -71 [ 66.364071][ T861] usb usb1-port1: unable to enumerate USB device [ 66.488279][ T36] audit: type=1400 audit(1788313826.970:306): avc: denied { accept } for pid=1697 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.540451][ T36] audit: type=1400 audit(1788313827.020:307): avc: denied { map } for pid=1701 comm="syz.2.509" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.627275][ T1712] kernel profiling enabled (shift: 3) [ 66.653798][ T861] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 66.805977][ T861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.817546][ T861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.827651][ T861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.840627][ T861] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 66.849842][ T861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.859631][ T861] usb 4-1: config 0 descriptor?? [ 67.000573][ T1724] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.516'. [ 67.269765][ T1689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.286344][ T1689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.308924][ T861] logitech-hidpp-device 0003:046D:C262.0008: unbalanced collection at end of report description [ 67.327415][ T861] logitech-hidpp-device 0003:046D:C262.0008: hidpp_probe:parse failed [ 67.336245][ T861] logitech-hidpp-device 0003:046D:C262.0008: probe with driver logitech-hidpp-device failed with error -22 [ 67.453108][ T36] audit: type=1400 audit(1788313827.930:308): avc: denied { nlmsg_read } for pid=1749 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.507914][ T1754] cgroup: subsys name conflicts with all [ 67.516902][ T1754] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=118 sclass=netlink_xfrm_socket pid=1754 comm=syz.5.527 [ 67.530264][ T1754] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1754 comm=syz.5.527 [ 67.543077][ T1754] netlink: 72 bytes leftover after parsing attributes in process `syz.5.527'. [ 67.552683][ T1754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=1754 comm=syz.5.527 [ 67.575133][ T1754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1754 comm=syz.5.527 [ 67.727578][ T1766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.532'. [ 67.750269][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.532'. [ 67.765622][ T36] audit: type=1400 audit(1788313828.250:309): avc: denied { write } for pid=1764 comm="syz.5.532" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 67.793894][ T1766] size and base must be multiples of 4 kiB [ 67.811687][ T1766] CPU: 1 UID: 0 PID: 1766 Comm: syz.5.532 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 67.811725][ T1766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.811740][ T1766] Call Trace: [ 67.811747][ T1766] [ 67.811757][ T1766] __dump_stack+0x21/0x30 [ 67.811797][ T1766] dump_stack_lvl+0x140/0x1c0 [ 67.811825][ T1766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.811854][ T1766] dump_stack+0x19/0x20 [ 67.811878][ T1766] mtrr_del+0xcd/0xf0 [ 67.811901][ T1766] mtrr_ioctl+0xbf8/0x1170 [ 67.811924][ T1766] ? __cfi_mtrr_ioctl+0x10/0x10 [ 67.811946][ T1766] ? __kasan_check_read+0x15/0x20 [ 67.811967][ T1766] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 67.811990][ T1766] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 67.812013][ T1766] ? __fget_files+0x2bc/0x330 [ 67.812036][ T1766] ? __cfi_mtrr_ioctl+0x10/0x10 [ 67.812058][ T1766] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 67.812080][ T1766] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 67.812101][ T1766] __se_sys_ioctl+0x123/0x1b0 [ 67.812125][ T1766] __x64_sys_ioctl+0x7f/0xa0 [ 67.812172][ T1766] x64_sys_call+0x1878/0x2ee0 [ 67.812191][ T1766] do_syscall_64+0x57/0xf0 [ 67.812220][ T1766] ? clear_bhb_loop+0x50/0xa0 [ 67.812242][ T1766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.812264][ T1766] RIP: 0033:0x7fd0cd59e159 [ 67.812282][ T1766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.812300][ T1766] RSP: 002b:00007fd0ce380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.812324][ T1766] RAX: ffffffffffffffda RBX: 00007fd0cd825fa0 RCX: 00007fd0cd59e159 [ 67.812341][ T1766] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000004 [ 67.812356][ T1766] RBP: 00007fd0cd635024 R08: 0000000000000000 R09: 0000000000000000 [ 67.812369][ T1766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.812382][ T1766] R13: 00007fd0cd826038 R14: 00007fd0cd825fa0 R15: 00007ffc85403468 [ 67.812400][ T1766] [ 67.822760][ T36] audit: type=1400 audit(1788313828.280:310): avc: denied { ioctl } for pid=1764 comm="syz.5.532" path="/50/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 67.972246][ T861] usb 4-1: USB disconnect, device number 18 [ 68.004906][ T1770] incfs: Options parsing error. -22 [ 68.053235][ T1770] incfs: mount failed -22 [ 68.070659][ T36] audit: type=1400 audit(1788313828.550:311): avc: denied { remount } for pid=1769 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.139336][ T1782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.148230][ T1782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.201256][ T1782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.210063][ T1782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.293808][ T861] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 69.307580][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 69.307599][ T36] audit: type=1400 audit(1788313829.790:316): avc: denied { map } for pid=1840 comm="syz.0.562" path="pipe:[2970]" dev="pipefs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.466774][ T861] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 69.485050][ T861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.503334][ T861] usb 4-1: Product: syz [ 69.508007][ T861] usb 4-1: Manufacturer: syz [ 69.513178][ T861] usb 4-1: SerialNumber: syz [ 69.529875][ T1857] tipc: Disabling bearer [ 69.573836][ T36] audit: type=1400 audit(1788313830.050:317): avc: denied { bind } for pid=1853 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.603806][ T36] audit: type=1400 audit(1788313830.050:318): avc: denied { listen } for pid=1853 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.651079][ T36] audit: type=1400 audit(1788313830.050:319): avc: denied { connect } for pid=1853 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.671373][ T36] audit: type=1400 audit(1788313830.050:320): avc: denied { write } for pid=1853 comm="syz.2.566" path="socket:[26763]" dev="sockfs" ino=26763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.697460][ T36] audit: type=1400 audit(1788313830.050:321): avc: denied { accept } for pid=1853 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.721174][ T1864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.728418][ T36] audit: type=1400 audit(1788313830.050:322): avc: denied { read } for pid=1853 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.743296][ T1864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.749664][ T36] audit: type=1400 audit(1788313830.060:323): avc: denied { read write } for pid=1861 comm="syz.0.568" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.783841][ T36] audit: type=1400 audit(1788313830.060:324): avc: denied { open } for pid=1861 comm="syz.0.568" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.857359][ T1870] input: syz0 as /devices/virtual/input/input14 [ 69.887636][ T1870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=1870 comm=syz.0.572 [ 69.951667][ T36] audit: type=1400 audit(1788313830.430:325): avc: denied { append } for pid=1877 comm="syz.5.575" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 70.179644][ T861] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 70.391391][ T311] usb 4-1: USB disconnect, device number 19 [ 70.503337][ T1925] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 70.723781][ T421] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.893769][ T421] usb 6-1: Using ep0 maxpacket: 32 [ 70.912559][ T421] usb 6-1: unable to get BOS descriptor or descriptor too short [ 70.931911][ T421] usb 6-1: config 5 has an invalid interface number: 18 but max is 0 [ 70.940774][ T421] usb 6-1: config 5 has no interface number 0 [ 70.947045][ T421] usb 6-1: config 5 interface 18 has no altsetting 0 [ 70.955512][ T421] usb 6-1: New USB device found, idVendor=2357, idProduct=0601, bcdDevice=3f.ae [ 70.964796][ T421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.972815][ T421] usb 6-1: Product: syz [ 70.977210][ T421] usb 6-1: Manufacturer: syz [ 70.981848][ T421] usb 6-1: SerialNumber: syz [ 70.989078][ T421] r8152-cfgselector 6-1: Unknown version 0x0000 [ 71.108574][ T1974] syz.0.599 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.163866][ T311] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 71.205284][ T1930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.225322][ T1930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.236571][ T1930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.246364][ T1930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.261436][ T421] r8152 6-1:5.18: Expected endpoints are not found [ 71.270869][ T421] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 71.313778][ T311] usb 4-1: device descriptor read/64, error -71 [ 71.372860][ T1993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.382060][ T1993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.553830][ T311] usb 4-1: device descriptor read/64, error -71 [ 71.793776][ T311] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 71.924122][ T311] usb 4-1: device descriptor read/64, error -71 [ 72.096725][ T2025] program syz.0.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.163979][ T311] usb 4-1: device descriptor read/64, error -71 [ 72.273970][ T311] usb usb4-port1: attempt power cycle [ 72.409712][ T2047] fuse: Unknown parameter 'group_hd' [ 72.493794][ T543] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 72.613777][ T311] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 72.634874][ T311] usb 4-1: device descriptor read/8, error -71 [ 72.665011][ T543] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.675201][ T543] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.684990][ T543] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.694112][ T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.702129][ T543] usb 1-1: SerialNumber: syz [ 72.765042][ T311] usb 4-1: device descriptor read/8, error -71 [ 72.909387][ T2039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.918049][ T2039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.928497][ T543] usb 1-1: 0:2 : does not exist [ 72.936219][ T543] usb 1-1: USB disconnect, device number 24 [ 72.949006][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.005601][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 73.035139][ T311] usb 4-1: device descriptor read/8, error -71 [ 73.150097][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.158896][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.167891][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.174974][ T311] usb 4-1: device descriptor read/8, error -71 [ 73.176603][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.283913][ T311] usb usb4-port1: unable to enumerate USB device [ 73.405459][ T2083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.640'. [ 73.536453][ T2098] capability: warning: `syz.5.645' uses 32-bit capabilities (legacy support in use) [ 74.390219][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 74.390239][ T36] audit: type=1400 audit(1788313834.870:353): avc: denied { create } for pid=2152 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 75.178217][ T36] audit: type=1400 audit(1788313835.660:354): avc: denied { create } for pid=2230 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 75.504002][ T36] audit: type=1400 audit(1788313835.980:355): avc: denied { read append } for pid=2257 comm="syz.3.691" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.566021][ T36] audit: type=1400 audit(1788313835.980:356): avc: denied { open } for pid=2257 comm="syz.3.691" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.601194][ T36] audit: type=1400 audit(1788313836.020:357): avc: denied { map } for pid=2257 comm="syz.3.691" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.687360][ T2267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'. [ 75.773779][ T543] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 75.816596][ T36] audit: type=1400 audit(1788313836.300:358): avc: denied { add_name } for pid=2274 comm="syz.0.698" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.840117][ T36] audit: type=1400 audit(1788313836.300:359): avc: denied { create } for pid=2274 comm="syz.0.698" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.865040][ T36] audit: type=1400 audit(1788313836.300:360): avc: denied { associate } for pid=2274 comm="syz.0.698" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.887139][ T36] audit: type=1326 audit(1788313836.320:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2274 comm="syz.0.698" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e5419e159 code=0x0 [ 75.938401][ T543] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.947386][ T543] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.959651][ T543] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 75.969563][ T543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 75.978070][ T543] usb 4-1: Product: syz [ 75.986133][ T543] usb 4-1: Manufacturer: syz [ 76.000635][ T543] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 76.269649][ T36] audit: type=1400 audit(1788313836.750:362): avc: denied { mounton } for pid=2293 comm="syz.2.704" path="/161/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 76.292992][ T2294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.302796][ T2294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.320645][ T2294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.334164][ T2294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.342865][ T2294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.358102][ T2294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.367621][ T2294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.377640][ T2294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.386513][ T2294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.395708][ T2294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.404206][ T2294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.405182][ T543] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 76.412857][ T2294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.994436][ T311] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.068698][ T543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 77.089156][ T543] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.147712][ T311] usb 6-1: device descriptor read/64, error -71 [ 77.406126][ T311] usb 6-1: device descriptor read/64, error -71 [ 77.643812][ T311] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.793766][ T311] usb 6-1: device descriptor read/64, error -71 [ 77.800557][ T2371] FAULT_INJECTION: forcing a failure. [ 77.800557][ T2371] name failslab, interval 1, probability 0, space 0, times 0 [ 77.823765][ T2371] CPU: 0 UID: 0 PID: 2371 Comm: syz.2.729 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 77.823806][ T2371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.823822][ T2371] Call Trace: [ 77.823831][ T2371] [ 77.823842][ T2371] __dump_stack+0x21/0x30 [ 77.823881][ T2371] dump_stack_lvl+0x140/0x1c0 [ 77.823913][ T2371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.823942][ T2371] ? sched_clock_noinstr+0xd/0x30 [ 77.823968][ T2371] dump_stack+0x19/0x20 [ 77.824006][ T2371] should_fail_ex+0x3c2/0x510 [ 77.824033][ T2371] should_failslab+0xac/0x100 [ 77.824063][ T2371] kmem_cache_alloc_noprof+0x42/0x410 [ 77.824088][ T2371] ? vm_area_dup+0x3f/0x560 [ 77.824113][ T2371] vm_area_dup+0x3f/0x560 [ 77.824135][ T2371] ? __split_vma+0x1b8/0xc10 [ 77.824158][ T2371] __split_vma+0x1ce/0xc10 [ 77.824182][ T2371] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 77.824208][ T2371] ? mas_find+0x415/0x620 [ 77.824234][ T2371] vms_gather_munmap_vmas+0x446/0xd90 [ 77.824260][ T2371] do_vmi_align_munmap+0x251/0x5f0 [ 77.824285][ T2371] ? get_mem_cgroup_from_mm+0x193/0x270 [ 77.824315][ T2371] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 77.824342][ T2371] do_vmi_munmap+0x245/0x2e0 [ 77.824367][ T2371] __vm_munmap+0x25b/0x3d0 [ 77.824391][ T2371] ? vm_munmap+0x40/0x40 [ 77.824415][ T2371] ? blocking_notifier_call_chain+0x7c/0x90 [ 77.824439][ T2371] __se_sys_munmap+0xb4/0x390 [ 77.824462][ T2371] __x64_sys_munmap+0x5f/0x80 [ 77.824484][ T2371] x64_sys_call+0x9c6/0x2ee0 [ 77.824504][ T2371] do_syscall_64+0x57/0xf0 [ 77.824535][ T2371] ? clear_bhb_loop+0x50/0xa0 [ 77.824560][ T2371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.824583][ T2371] RIP: 0033:0x7ffae459df87 [ 77.824604][ T2371] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.824623][ T2371] RSP: 002b:00007ffae5503d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 77.824649][ T2371] RAX: ffffffffffffffda RBX: 00007ffadc000000 RCX: 00007ffae459df87 [ 77.824666][ T2371] RDX: 0000000000000000 RSI: 0000000001200000 RDI: 00007ffadae00000 [ 77.824682][ T2371] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 77.824696][ T2371] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 77.824712][ T2371] R13: 0000000000001000 R14: 00007ffae0000000 R15: 0000000001200000 [ 77.824733][ T2371] [ 78.123793][ T311] usb 6-1: device descriptor read/64, error -71 [ 78.271002][ T311] usb usb6-port1: attempt power cycle [ 78.289453][ T2377] tipc: Bearer : already 2 bearers with priority 10 [ 78.297209][ T2377] tipc: Bearer : trying with adjusted priority [ 78.305306][ T2377] tipc: Enabling of bearer rejected, failed to enable media [ 78.322570][ T2377] netlink: 80 bytes leftover after parsing attributes in process `syz.2.731'. [ 78.504932][ T45] usb 4-1: USB disconnect, device number 24 [ 78.633817][ T311] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 78.667009][ T311] usb 6-1: device descriptor read/8, error -71 [ 78.712166][ T2409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.734975][ T2409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.815036][ T311] usb 6-1: device descriptor read/8, error -71 [ 79.053862][ T311] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 79.075004][ T311] usb 6-1: device descriptor read/8, error -71 [ 79.212291][ T311] usb 6-1: device descriptor read/8, error -71 [ 79.333798][ T45] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 79.341724][ T311] usb usb6-port1: unable to enumerate USB device [ 79.504999][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.522320][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.532053][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.542492][ T45] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.551996][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.576752][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 79.579857][ T2468] FAULT_INJECTION: forcing a failure. [ 79.579857][ T2468] name failslab, interval 1, probability 0, space 0, times 0 [ 79.588422][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 79.596148][ T2468] CPU: 0 UID: 0 PID: 2468 Comm: syz.0.764 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 79.596180][ T2468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.596193][ T2468] Call Trace: [ 79.596201][ T2468] [ 79.596210][ T2468] __dump_stack+0x21/0x30 [ 79.596241][ T2468] dump_stack_lvl+0x140/0x1c0 [ 79.596266][ T2468] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.596298][ T2468] ? avc_has_perm+0x155/0x240 [ 79.596322][ T2468] ? __cfi_avc_has_perm+0x10/0x10 [ 79.596344][ T2468] dump_stack+0x19/0x20 [ 79.596367][ T2468] should_fail_ex+0x3c2/0x510 [ 79.596391][ T2468] should_failslab+0xac/0x100 [ 79.596415][ T2468] __kmalloc_cache_noprof+0x41/0x470 [ 79.596436][ T2468] ? vhost_task_create+0x12c/0x3f0 [ 79.596458][ T2468] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 79.596481][ T2468] vhost_task_create+0x12c/0x3f0 [ 79.596501][ T2468] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 79.596525][ T2468] ? __cfi_vhost_task_create+0x10/0x10 [ 79.596546][ T2468] ? __cfi_vhost_task_fn+0x10/0x10 [ 79.596566][ T2468] ? __kasan_check_write+0x18/0x20 [ 79.596585][ T2468] ? mutex_lock+0x97/0x1d0 [ 79.596606][ T2468] ? __cfi_mutex_lock+0x10/0x10 [ 79.596626][ T2468] ? kernel_text_address+0xa9/0xe0 [ 79.596651][ T2468] kvm_mmu_post_init_vm+0x161/0x300 [ 79.596679][ T2468] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 79.596703][ T2468] ? _parse_integer_limit+0x195/0x1e0 [ 79.596725][ T2468] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 79.596750][ T2468] ? kstrtoull+0x13b/0x1e0 [ 79.596770][ T2468] ? kstrtouint+0x78/0xf0 [ 79.596789][ T2468] ? __cfi_trace_clock_local+0x10/0x10 [ 79.596808][ T2468] ? ioctl_has_perm+0x1bc/0x500 [ 79.596827][ T2468] ? __asan_memcpy+0x5a/0x80 [ 79.596847][ T2468] ? ioctl_has_perm+0x408/0x500 [ 79.596866][ T2468] ? has_cap_mac_admin+0xd0/0xd0 [ 79.596887][ T2468] ? __kasan_check_write+0x18/0x20 [ 79.596906][ T2468] ? mutex_lock_killable+0x97/0x1d0 [ 79.596932][ T2468] ? __cfi_mutex_lock_killable+0x10/0x10 [ 79.596958][ T2468] kvm_vcpu_ioctl+0xa43/0x1000 [ 79.596978][ T2468] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.596998][ T2468] ? __kasan_check_read+0x15/0x20 [ 79.597017][ T2468] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 79.597044][ T2468] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 79.597069][ T2468] ? __fget_files+0x2bc/0x330 [ 79.597093][ T2468] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.597116][ T2468] ? security_file_ioctl+0x3e/0x110 [ 79.597135][ T2468] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.597154][ T2468] __se_sys_ioctl+0x123/0x1b0 [ 79.597176][ T2468] __x64_sys_ioctl+0x7f/0xa0 [ 79.597199][ T2468] x64_sys_call+0x1878/0x2ee0 [ 79.597217][ T2468] do_syscall_64+0x57/0xf0 [ 79.597243][ T2468] ? clear_bhb_loop+0x50/0xa0 [ 79.597265][ T2468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.597292][ T2468] RIP: 0033:0x7f9e5419e159 [ 79.597310][ T2468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.597328][ T2468] RSP: 002b:00007f9e55020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.597351][ T2468] RAX: ffffffffffffffda RBX: 00007f9e54425fa0 RCX: 00007f9e5419e159 [ 79.597367][ T2468] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.597380][ T2468] RBP: 00007f9e55020090 R08: 0000000000000000 R09: 0000000000000000 [ 79.597396][ T2468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.597409][ T2468] R13: 00007f9e54426038 R14: 00007f9e54425fa0 R15: 00007ffedfa318f8 [ 79.597426][ T2468] [ 79.901852][ T2444] input: syz1 as /devices/virtual/input/input16 [ 79.925655][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 79.979648][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 79.985495][ T45] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 80.026013][ T45] usb 4-1: USB disconnect, device number 25 [ 80.102862][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 80.102882][ T36] audit: type=1400 audit(1788313840.580:366): avc: denied { setopt } for pid=2475 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.153641][ T36] audit: type=1400 audit(1788313840.630:367): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.189004][ T2481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.199892][ T2481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.213758][ T36] audit: type=1400 audit(1788313840.690:368): avc: denied { bind } for pid=2480 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.543855][ T311] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 80.617491][ T36] audit: type=1400 audit(1788313841.100:369): avc: denied { connect } for pid=2520 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.637100][ T36] audit: type=1400 audit(1788313841.100:370): avc: denied { ioctl } for pid=2520 comm="syz.3.783" path="socket:[34101]" dev="sockfs" ino=34101 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.696010][ T311] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 80.704295][ T311] usb 1-1: config 1 has no interface number 0 [ 80.715949][ T311] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 80.725308][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.733408][ T311] usb 1-1: Product: syz [ 80.746598][ T311] usb 1-1: Manufacturer: syz [ 80.751250][ T311] usb 1-1: SerialNumber: syz [ 80.847505][ T36] audit: type=1400 audit(1788313841.330:371): avc: denied { append } for pid=2533 comm="syz.3.788" name="sda" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.937472][ T2538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.946886][ T2538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.972484][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.983438][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.998964][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.007806][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.023162][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.031800][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.087996][ T311] usb 1-1: 3:1 : does not exist [ 81.093034][ T311] usb 1-1: 3:2 : does not exist [ 81.102704][ T311] usb 1-1: USB disconnect, device number 25 [ 81.385627][ T2546] FAULT_INJECTION: forcing a failure. [ 81.385627][ T2546] name failslab, interval 1, probability 0, space 0, times 0 [ 81.398839][ T2546] CPU: 0 UID: 0 PID: 2546 Comm: syz.3.791 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 81.398872][ T2546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.398886][ T2546] Call Trace: [ 81.398894][ T2546] [ 81.398903][ T2546] __dump_stack+0x21/0x30 [ 81.398936][ T2546] dump_stack_lvl+0x140/0x1c0 [ 81.398962][ T2546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.398991][ T2546] dump_stack+0x19/0x20 [ 81.399016][ T2546] should_fail_ex+0x3c2/0x510 [ 81.399040][ T2546] should_failslab+0xac/0x100 [ 81.399065][ T2546] kmem_cache_alloc_node_noprof+0x45/0x420 [ 81.399085][ T2546] ? dup_task_struct+0xc1/0xd80 [ 81.399110][ T2546] ? kasan_save_alloc_info+0x3a/0x50 [ 81.399129][ T2546] ? __kasan_kmalloc+0x96/0xb0 [ 81.399152][ T2546] ? __kmalloc_cache_noprof+0x23c/0x470 [ 81.399175][ T2546] dup_task_struct+0xc1/0xd80 [ 81.399199][ T2546] ? __kasan_check_write+0x18/0x20 [ 81.399221][ T2546] ? _raw_spin_lock_irq+0x93/0x120 [ 81.399249][ T2546] ? copy_process+0x3350/0x3350 [ 81.399273][ T2546] ? __kasan_check_write+0x18/0x20 [ 81.399295][ T2546] copy_process+0x57c/0x3350 [ 81.399320][ T2546] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 81.399349][ T2546] ? kasan_save_alloc_info+0x3a/0x50 [ 81.399369][ T2546] ? __cfi_copy_process+0x10/0x10 [ 81.399393][ T2546] ? __kmalloc_cache_noprof+0x23c/0x470 [ 81.399414][ T2546] ? __kasan_check_write+0x18/0x20 [ 81.399433][ T2546] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 81.399455][ T2546] vhost_task_create+0x1f7/0x3f0 [ 81.399475][ T2546] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 81.399496][ T2546] ? __cfi_vhost_task_create+0x10/0x10 [ 81.399515][ T2546] ? __cfi_vhost_task_fn+0x10/0x10 [ 81.399534][ T2546] ? __kasan_check_write+0x18/0x20 [ 81.399553][ T2546] ? mutex_lock+0x97/0x1d0 [ 81.399585][ T2546] ? __cfi_mutex_lock+0x10/0x10 [ 81.399605][ T2546] ? kernel_text_address+0xa9/0xe0 [ 81.399631][ T2546] kvm_mmu_post_init_vm+0x161/0x300 [ 81.399656][ T2546] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 81.399686][ T2546] ? _parse_integer_limit+0x195/0x1e0 [ 81.399709][ T2546] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 81.399735][ T2546] ? kstrtoull+0x13b/0x1e0 [ 81.399757][ T2546] ? kstrtouint+0x78/0xf0 [ 81.399777][ T2546] ? __cfi_trace_clock_local+0x10/0x10 [ 81.399798][ T2546] ? ioctl_has_perm+0x1bc/0x500 [ 81.399819][ T2546] ? __asan_memcpy+0x5a/0x80 [ 81.399839][ T2546] ? ioctl_has_perm+0x408/0x500 [ 81.399860][ T2546] ? has_cap_mac_admin+0xd0/0xd0 [ 81.399880][ T2546] ? __kasan_check_write+0x18/0x20 [ 81.399900][ T2546] ? mutex_lock_killable+0x97/0x1d0 [ 81.399925][ T2546] ? __cfi_mutex_lock_killable+0x10/0x10 [ 81.399949][ T2546] kvm_vcpu_ioctl+0xa43/0x1000 [ 81.399971][ T2546] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 81.399990][ T2546] ? __kasan_check_read+0x15/0x20 [ 81.400010][ T2546] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 81.400035][ T2546] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 81.400057][ T2546] ? __fget_files+0x2bc/0x330 [ 81.400080][ T2546] ? bpf_lsm_file_ioctl+0xd/0x20 [ 81.400114][ T2546] ? security_file_ioctl+0x3e/0x110 [ 81.400133][ T2546] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 81.400152][ T2546] __se_sys_ioctl+0x123/0x1b0 [ 81.400182][ T2546] __x64_sys_ioctl+0x7f/0xa0 [ 81.400206][ T2546] x64_sys_call+0x1878/0x2ee0 [ 81.400225][ T2546] do_syscall_64+0x57/0xf0 [ 81.400253][ T2546] ? clear_bhb_loop+0x50/0xa0 [ 81.400276][ T2546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.400298][ T2546] RIP: 0033:0x7f6a6ab9e159 [ 81.400317][ T2546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.400336][ T2546] RSP: 002b:00007f6a6ba55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.400361][ T2546] RAX: ffffffffffffffda RBX: 00007f6a6ae25fa0 RCX: 00007f6a6ab9e159 [ 81.400378][ T2546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 81.400392][ T2546] RBP: 00007f6a6ba55090 R08: 0000000000000000 R09: 0000000000000000 [ 81.400407][ T2546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.400420][ T2546] R13: 00007f6a6ae26038 R14: 00007f6a6ae25fa0 R15: 00007ffe879ec6b8 [ 81.400439][ T2546] [ 81.479433][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.824023][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.872576][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.898853][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.206274][ T2594] netlink: 236 bytes leftover after parsing attributes in process `syz.3.807'. [ 82.243837][ T421] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 82.363799][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 82.373819][ T421] usb 6-1: device descriptor read/64, error -71 [ 82.489939][ T2603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.498877][ T2603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.518552][ T9] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 82.527862][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.536691][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.545236][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.553012][ T9] usb 1-1: Product: syz [ 82.557308][ T9] usb 1-1: Manufacturer: syz [ 82.561909][ T9] usb 1-1: SerialNumber: syz [ 82.569705][ T9] usb 1-1: config 0 descriptor?? [ 82.575787][ T9] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 82.623779][ T421] usb 6-1: device descriptor read/64, error -71 [ 82.775930][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.784641][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.793040][ T45] usb 1-1: USB disconnect, device number 26 [ 82.863862][ T421] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 82.993866][ T421] usb 6-1: device descriptor read/64, error -71 [ 83.106659][ T36] audit: type=1400 audit(1788313843.590:372): avc: denied { setopt } for pid=2611 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.113224][ T2612] netlink: 32 bytes leftover after parsing attributes in process `syz.2.812'. [ 83.235329][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.244077][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.252189][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.260752][ T421] usb 6-1: device descriptor read/64, error -71 [ 83.261212][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.275465][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.284184][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.292469][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.301626][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.312310][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.324573][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.334558][ T2615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.346345][ T2615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.374845][ T421] usb usb6-port1: attempt power cycle [ 83.526410][ T2631] FAULT_INJECTION: forcing a failure. [ 83.526410][ T2631] name failslab, interval 1, probability 0, space 0, times 0 [ 83.539298][ T2631] CPU: 0 UID: 0 PID: 2631 Comm: syz.0.820 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 83.539334][ T2631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.539348][ T2631] Call Trace: [ 83.539355][ T2631] [ 83.539365][ T2631] __dump_stack+0x21/0x30 [ 83.539394][ T2631] dump_stack_lvl+0x140/0x1c0 [ 83.539418][ T2631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.539442][ T2631] ? __kasan_check_read+0x15/0x20 [ 83.539461][ T2631] ? __rb_reserve_next+0x7d4/0xdf0 [ 83.539487][ T2631] dump_stack+0x19/0x20 [ 83.539508][ T2631] should_fail_ex+0x3c2/0x510 [ 83.539529][ T2631] should_failslab+0xac/0x100 [ 83.539552][ T2631] __kmalloc_cache_node_noprof+0x46/0x430 [ 83.539575][ T2631] ? __get_vm_area_node+0x150/0x390 [ 83.539602][ T2631] ? __kasan_check_read+0x15/0x20 [ 83.539621][ T2631] __get_vm_area_node+0x150/0x390 [ 83.539646][ T2631] __vmalloc_node_range_noprof+0x340/0x1300 [ 83.539675][ T2631] ? copy_process+0x57c/0x3350 [ 83.539701][ T2631] ? trace_event_buffer_lock_reserve+0x115/0x730 [ 83.539728][ T2631] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 83.539759][ T2631] ? arch_dup_task_struct+0x5b/0xe0 [ 83.539789][ T2631] ? __asan_memcpy+0x5a/0x80 [ 83.539810][ T2631] dup_task_struct+0x5d6/0xd80 [ 83.539833][ T2631] ? copy_process+0x57c/0x3350 [ 83.539858][ T2631] ? _raw_spin_lock_irq+0x93/0x120 [ 83.539898][ T2631] ? copy_process+0x3350/0x3350 [ 83.539921][ T2631] ? __kasan_check_write+0x18/0x20 [ 83.539940][ T2631] copy_process+0x57c/0x3350 [ 83.539961][ T2631] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 83.539987][ T2631] ? kasan_save_alloc_info+0x3a/0x50 [ 83.540006][ T2631] ? __cfi_copy_process+0x10/0x10 [ 83.540027][ T2631] ? __kmalloc_cache_noprof+0x23c/0x470 [ 83.540051][ T2631] ? __kasan_check_write+0x18/0x20 [ 83.540071][ T2631] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 83.540096][ T2631] vhost_task_create+0x1f7/0x3f0 [ 83.540117][ T2631] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 83.540143][ T2631] ? __cfi_vhost_task_create+0x10/0x10 [ 83.540166][ T2631] ? __cfi_vhost_task_fn+0x10/0x10 [ 83.540191][ T2631] ? __kasan_check_write+0x18/0x20 [ 83.540212][ T2631] ? mutex_lock+0x97/0x1d0 [ 83.540232][ T2631] ? __cfi_mutex_lock+0x10/0x10 [ 83.540252][ T2631] ? kernel_text_address+0xa9/0xe0 [ 83.540280][ T2631] kvm_mmu_post_init_vm+0x161/0x300 [ 83.540303][ T2631] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 83.540318][ T2631] ? _parse_integer_limit+0x195/0x1e0 [ 83.540331][ T2631] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 83.540348][ T2631] ? kstrtoull+0x13b/0x1e0 [ 83.540361][ T2631] ? kstrtouint+0x78/0xf0 [ 83.540374][ T2631] ? __cfi_trace_clock_local+0x10/0x10 [ 83.540387][ T2631] ? ioctl_has_perm+0x1bc/0x500 [ 83.540398][ T2631] ? __asan_memcpy+0x5a/0x80 [ 83.540410][ T2631] ? ioctl_has_perm+0x408/0x500 [ 83.540421][ T2631] ? has_cap_mac_admin+0xd0/0xd0 [ 83.540432][ T2631] ? __kasan_check_write+0x18/0x20 [ 83.540443][ T2631] ? mutex_lock_killable+0x97/0x1d0 [ 83.540455][ T2631] ? __cfi_mutex_lock_killable+0x10/0x10 [ 83.540468][ T2631] kvm_vcpu_ioctl+0xa43/0x1000 [ 83.540480][ T2631] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.540491][ T2631] ? __kasan_check_read+0x15/0x20 [ 83.540502][ T2631] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 83.540515][ T2631] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 83.540528][ T2631] ? __fget_files+0x2bc/0x330 [ 83.540542][ T2631] ? bpf_lsm_file_ioctl+0xd/0x20 [ 83.540556][ T2631] ? security_file_ioctl+0x3e/0x110 [ 83.540567][ T2631] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.540577][ T2631] __se_sys_ioctl+0x123/0x1b0 [ 83.540591][ T2631] __x64_sys_ioctl+0x7f/0xa0 [ 83.540603][ T2631] x64_sys_call+0x1878/0x2ee0 [ 83.540614][ T2631] do_syscall_64+0x57/0xf0 [ 83.540633][ T2631] ? clear_bhb_loop+0x50/0xa0 [ 83.540654][ T2631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.540674][ T2631] RIP: 0033:0x7f9e5419e159 [ 83.540694][ T2631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.540711][ T2631] RSP: 002b:00007f9e55020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.540735][ T2631] RAX: ffffffffffffffda RBX: 00007f9e54425fa0 RCX: 00007f9e5419e159 [ 83.540752][ T2631] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.540767][ T2631] RBP: 00007f9e55020090 R08: 0000000000000000 R09: 0000000000000000 [ 83.540781][ T2631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.540795][ T2631] R13: 00007f9e54426038 R14: 00007f9e54425fa0 R15: 00007ffedfa318f8 [ 83.540813][ T2631] [ 83.540945][ T2631] syz.0.820: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 84.007255][ T2631] CPU: 1 UID: 0 PID: 2631 Comm: syz.0.820 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 84.007291][ T2631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.007306][ T2631] Call Trace: [ 84.007313][ T2631] [ 84.007323][ T2631] __dump_stack+0x21/0x30 [ 84.007353][ T2631] dump_stack_lvl+0x140/0x1c0 [ 84.007389][ T2631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.007416][ T2631] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 84.007445][ T2631] dump_stack+0x19/0x20 [ 84.007469][ T2631] warn_alloc+0x1e7/0x2c0 [ 84.007494][ T2631] ? __kasan_kmalloc+0x28/0xb0 [ 84.007514][ T2631] ? __cfi_warn_alloc+0x10/0x10 [ 84.007544][ T2631] ? __get_vm_area_node+0x150/0x390 [ 84.007572][ T2631] ? __get_vm_area_node+0x382/0x390 [ 84.007598][ T2631] __vmalloc_node_range_noprof+0x365/0x1300 [ 84.007625][ T2631] ? trace_event_buffer_lock_reserve+0x115/0x730 [ 84.007652][ T2631] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 84.007681][ T2631] ? arch_dup_task_struct+0x5b/0xe0 [ 84.007707][ T2631] ? __asan_memcpy+0x5a/0x80 [ 84.007728][ T2631] dup_task_struct+0x5d6/0xd80 [ 84.007751][ T2631] ? copy_process+0x57c/0x3350 [ 84.007774][ T2631] ? _raw_spin_lock_irq+0x93/0x120 [ 84.007799][ T2631] ? copy_process+0x3350/0x3350 [ 84.007823][ T2631] ? __kasan_check_write+0x18/0x20 [ 84.007843][ T2631] copy_process+0x57c/0x3350 [ 84.007870][ T2631] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 84.007897][ T2631] ? kasan_save_alloc_info+0x3a/0x50 [ 84.007916][ T2631] ? __cfi_copy_process+0x10/0x10 [ 84.007940][ T2631] ? __kmalloc_cache_noprof+0x23c/0x470 [ 84.007963][ T2631] ? __kasan_check_write+0x18/0x20 [ 84.007984][ T2631] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 84.008006][ T2631] vhost_task_create+0x1f7/0x3f0 [ 84.008029][ T2631] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 84.008054][ T2631] ? __cfi_vhost_task_create+0x10/0x10 [ 84.008074][ T2631] ? __cfi_vhost_task_fn+0x10/0x10 [ 84.008095][ T2631] ? __kasan_check_write+0x18/0x20 [ 84.008115][ T2631] ? mutex_lock+0x97/0x1d0 [ 84.008135][ T2631] ? __cfi_mutex_lock+0x10/0x10 [ 84.008156][ T2631] ? kernel_text_address+0xa9/0xe0 [ 84.008184][ T2631] kvm_mmu_post_init_vm+0x161/0x300 [ 84.008209][ T2631] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 84.008235][ T2631] ? _parse_integer_limit+0x195/0x1e0 [ 84.008256][ T2631] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 84.008279][ T2631] ? kstrtoull+0x13b/0x1e0 [ 84.008298][ T2631] ? kstrtouint+0x78/0xf0 [ 84.008336][ T2631] ? __cfi_trace_clock_local+0x10/0x10 [ 84.008355][ T2631] ? ioctl_has_perm+0x1bc/0x500 [ 84.008383][ T2631] ? __asan_memcpy+0x5a/0x80 [ 84.008412][ T2631] ? ioctl_has_perm+0x408/0x500 [ 84.008431][ T2631] ? has_cap_mac_admin+0xd0/0xd0 [ 84.008450][ T2631] ? __kasan_check_write+0x18/0x20 [ 84.008470][ T2631] ? mutex_lock_killable+0x97/0x1d0 [ 84.008493][ T2631] ? __cfi_mutex_lock_killable+0x10/0x10 [ 84.008518][ T2631] kvm_vcpu_ioctl+0xa43/0x1000 [ 84.008540][ T2631] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 84.008561][ T2631] ? __kasan_check_read+0x15/0x20 [ 84.008582][ T2631] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 84.008607][ T2631] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 84.008633][ T2631] ? __fget_files+0x2bc/0x330 [ 84.008656][ T2631] ? bpf_lsm_file_ioctl+0xd/0x20 [ 84.008681][ T2631] ? security_file_ioctl+0x3e/0x110 [ 84.008702][ T2631] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 84.008722][ T2631] __se_sys_ioctl+0x123/0x1b0 [ 84.008747][ T2631] __x64_sys_ioctl+0x7f/0xa0 [ 84.008771][ T2631] x64_sys_call+0x1878/0x2ee0 [ 84.008789][ T2631] do_syscall_64+0x57/0xf0 [ 84.008815][ T2631] ? clear_bhb_loop+0x50/0xa0 [ 84.008836][ T2631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.008858][ T2631] RIP: 0033:0x7f9e5419e159 [ 84.008876][ T2631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.008894][ T2631] RSP: 002b:00007f9e55020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.008919][ T2631] RAX: ffffffffffffffda RBX: 00007f9e54425fa0 RCX: 00007f9e5419e159 [ 84.008936][ T2631] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 84.008950][ T2631] RBP: 00007f9e55020090 R08: 0000000000000000 R09: 0000000000000000 [ 84.008965][ T2631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.008978][ T2631] R13: 00007f9e54426038 R14: 00007f9e54425fa0 R15: 00007ffedfa318f8 [ 84.008997][ T2631] [ 84.027217][ T2631] Mem-Info: [ 84.075238][ T2646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.080050][ T421] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 84.080221][ T2631] active_anon:11939 inactive_anon:3 isolated_anon:0 [ 84.080221][ T2631] active_file:22554 inactive_file:2328 isolated_file:0 [ 84.080221][ T2631] unevictable:0 dirty:298 writeback:0 [ 84.080221][ T2631] slab_reclaimable:6594 slab_unreclaimable:69795 [ 84.080221][ T2631] mapped:25319 shmem:5077 pagetables:1380 [ 84.080221][ T2631] sec_pagetables:3 bounce:0 [ 84.080221][ T2631] kernel_misc_reclaimable:0 [ 84.080221][ T2631] free:1501795 free_pcp:2471 free_cma:0 [ 84.090782][ T2646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.105649][ T2631] Node 0 active_anon:47808kB inactive_anon:12kB active_file:90216kB inactive_file:9320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101280kB dirty:1196kB writeback:0kB shmem:20356kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6048kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no [ 84.113644][ T2646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.114983][ T2631] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963384kB mlocked:0kB bounce:0kB free_pcp:5220kB local_pcp:5220kB free_cma:0kB [ 84.128070][ T2646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.129596][ T2631] lowmem_reserve[]: [ 84.303783][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 84.307296][ T2631] 0 [ 84.443850][ T45] usb 4-1: device descriptor read/64, error -71 [ 84.445781][ T421] usb 6-1: device descriptor read/8, error -71 [ 84.448954][ T2631] 3921 [ 84.575032][ T421] usb 6-1: device descriptor read/8, error -71 [ 84.591410][ T2631] 3921 [ 84.637288][ T2631] Normal free:3049756kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47932kB inactive_anon:12kB active_file:90216kB inactive_file:9320kB unevictable:0kB writepending:1196kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:5356kB local_pcp:1592kB free_cma:0kB [ 84.668717][ T2631] lowmem_reserve[]: 0 0 0 [ 84.675667][ T2631] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 84.692026][ T2631] Normal: 528*4kB (UME) 635*8kB (ME) 416*16kB (UME) 485*32kB (UME) 331*64kB (UME) 29*128kB (UME) 23*256kB (UME) 23*512kB (UME) 11*1024kB (UME) 7*2048kB (UM) 722*4096kB (M) = 3054840kB [ 84.711539][ T2631] 29973 total pagecache pages [ 84.717297][ T2631] 3 pages in swap cache [ 84.721578][ T2631] Free swap = 124472kB [ 84.726166][ T2631] Total swap = 124996kB [ 84.730337][ T2631] 2097051 pages RAM [ 84.734611][ T2631] 0 pages HighMem/MovableOnly [ 84.739303][ T2631] 352239 pages reserved [ 84.743995][ T2631] 0 pages cma reserved [ 84.749884][ T2631] Memory allocations: [ 84.753922][ T2631] 0 B 0 init/main.c:1477 func:do_initcalls [ 84.761155][ T2631] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 84.769376][ T2631] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 84.777549][ T2631] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 84.785577][ T2631] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 84.793543][ T2631] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 84.802382][ T2631] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 84.810444][ T2631] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 84.819135][ T2631] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 84.827635][ T2631] 0 B 0 init/initramfs.c:101 func:find_link [ 84.827656][ T45] usb 4-1: device descriptor read/64, error -71 [ 84.835115][ T421] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 84.877168][ T421] usb 6-1: device descriptor read/8, error -71 [ 84.955736][ T2661] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 85.014034][ T421] usb 6-1: device descriptor read/8, error -71 [ 85.074303][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 85.095608][ T2680] netlink: 'syz.0.837': attribute type 19 has an invalid length. [ 85.103886][ T2680] netlink: 'syz.0.837': attribute type 28 has an invalid length. [ 85.134737][ T421] usb usb6-port1: unable to enumerate USB device [ 85.213836][ T45] usb 4-1: device descriptor read/64, error -71 [ 85.272935][ T36] audit: type=1400 audit(1788313845.750:373): avc: denied { write } for pid=2689 comm="syz.0.840" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.296770][ T2695] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 85.324317][ T36] audit: type=1400 audit(1788313845.800:374): avc: denied { relabelto } for pid=2689 comm="syz.0.840" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 85.353253][ T36] audit: type=1400 audit(1788313845.800:375): avc: denied { associate } for pid=2689 comm="syz.0.840" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:adjtime_t:s0" [ 85.503784][ T45] usb 4-1: device descriptor read/64, error -71 [ 85.583820][ T311] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 85.614001][ T45] usb usb4-port1: attempt power cycle [ 85.733787][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 85.740406][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.749108][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 85.760128][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.769804][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 85.780895][ T311] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 85.790867][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 85.800554][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 64 [ 85.813100][ T311] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 85.822202][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.823802][ T421] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 85.830379][ T311] usb 1-1: Product: syz [ 85.842148][ T311] usb 1-1: Manufacturer: syz [ 85.846824][ T311] usb 1-1: SerialNumber: syz [ 85.852094][ T311] usb 1-1: config 0 descriptor?? [ 85.857747][ T2695] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 85.886181][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.953825][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 85.975983][ T45] usb 4-1: device descriptor read/8, error -71 [ 85.985349][ T421] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 85.997066][ T421] usb 6-1: config 1 interface 0 has no altsetting 0 [ 86.006296][ T421] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.015969][ T421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.024326][ T421] usb 6-1: Product: syz [ 86.028747][ T421] usb 6-1: Manufacturer: syz [ 86.034684][ T421] usb 6-1: SerialNumber: syz [ 86.041258][ T2719] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 86.071232][ T36] audit: type=1400 audit(1788313846.550:376): avc: denied { wake_alarm } for pid=2689 comm="syz.0.840" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.127773][ T36] audit: type=1400 audit(1788313846.610:377): avc: denied { read } for pid=2734 comm="syz.2.858" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 86.180173][ T36] audit: type=1400 audit(1788313846.610:378): avc: denied { open } for pid=2734 comm="syz.2.858" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 86.269408][ T421] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 86.286832][ T421] usb 6-1: USB disconnect, device number 14 [ 86.306662][ T421] usblp0: removed [ 86.630263][ T45] usb 4-1: device descriptor read/8, error -71 [ 86.885489][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 86.906010][ T45] usb 4-1: device descriptor read/8, error -71 [ 87.045106][ T45] usb 4-1: device descriptor read/8, error -71 [ 87.143789][ T421] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 87.165884][ T45] usb usb4-port1: unable to enumerate USB device [ 87.303779][ T421] usb 6-1: Using ep0 maxpacket: 8 [ 87.311288][ T421] usb 6-1: unable to get BOS descriptor or descriptor too short [ 87.324287][ T421] usb 6-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 87.333535][ T421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.341896][ T421] usb 6-1: Product: syz [ 87.346382][ T421] usb 6-1: Manufacturer: syz [ 87.351109][ T421] usb 6-1: SerialNumber: syz [ 87.513796][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 87.585893][ T421] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.593007][ T421] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 87.600782][ T421] usb 6-1: unable to issue vendor read request (ret = -71) [ 87.608569][ T421] usb 6-1: unable to issue vendor read request (ret = -71) [ 87.616509][ T421] usb 6-1: unable to issue vendor read request (ret = -71) [ 87.624226][ T421] usb 6-1: unable to issue vendor read request (ret = -71) [ 87.636385][ T421] usb 6-1: USB disconnect, device number 15 [ 87.649705][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.665675][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 87.676749][ T45] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.687704][ T45] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 87.698857][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.711705][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.718398][ T45] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 87.727487][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.736438][ T45] usb 4-1: config 0 descriptor?? [ 87.741827][ T2762] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 88.062652][ T2784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.071420][ T2784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.154395][ T36] audit: type=1400 audit(1788313848.630:379): avc: denied { set_context_mgr } for pid=2761 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.161518][ T2762] rust_binder: 2761:2762 error while translating object: EPERM [ 88.177034][ T36] audit: type=1400 audit(1788313848.640:380): avc: denied { map } for pid=2761 comm="syz.3.867" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.186455][ T2762] rust_binder: Failure in copy_transaction_data: EPERM [ 88.208629][ T2762] rust_binder: 2761:2762 transaction call to 2761:0 failed EPERM, code 0 size 72-24 [ 88.213583][ T543] usb 1-1: USB disconnect, device number 27 [ 88.217444][ T36] audit: type=1400 audit(1788313848.640:381): avc: denied { call } for pid=2761 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.254439][ T45] input: HID 1b96:000a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:000A.000A/input/input18 [ 88.272134][ T36] audit: type=1400 audit(1788313848.640:382): avc: denied { transfer } for pid=2761 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.294882][ T45] ntrig 0003:1B96:000A.000A: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 88.448283][ T861] rust_binder: 2761: undelivered TRANSACTION_ERROR: 29201 [ 88.463800][ T45] usb 4-1: USB disconnect, device number 30 [ 88.505482][ T2792] input: syz0 as /devices/virtual/input/input19 [ 88.553836][ T311] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 88.706298][ T311] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 88.727761][ T311] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.738468][ T311] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.751831][ T311] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 88.761651][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.770892][ T311] usb 6-1: config 0 descriptor?? [ 88.781249][ T311] usb-storage 6-1:0.0: USB Mass Storage device detected [ 88.798795][ T311] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 88.987498][ T311] usb 6-1: USB disconnect, device number 16 [ 89.253760][ T543] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 89.423808][ T543] usb 4-1: device descriptor read/64, error -71 [ 89.544213][ T311] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 89.619054][ T2842] netlink: 'syz.2.897': attribute type 13 has an invalid length. [ 89.628789][ T2842] erspan0: refused to change device tx_queue_len [ 89.673833][ T543] usb 4-1: device descriptor read/64, error -71 [ 89.739851][ T311] usb 1-1: No LPM exit latency info found, disabling LPM. [ 89.749779][ T311] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 89.763780][ T311] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 89.774504][ T311] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.787894][ T311] usb 1-1: config 1 interface 0 has no altsetting 0 [ 89.797780][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.810418][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.818896][ T311] usb 1-1: Product: ڹ듾䯽몱ﯷⶈ汅鳨∟䮣㮷歘積⃋퍲唤楹맥罏Ŋ믐ⓤ栏ﶒ稈汯鏛莢⡢䕋앗㿘᪗珚⫗鱱㵢☼ퟺ蒥剒᱔卩ꜱ૖ᛡ杨␒ӗ찺葸뮠⦮⧉ꚵ⽺앵싛䃰퇁甇貕镃鉂㢡酥뒫䟀ꭺ餪㦜য় [ 89.845984][ T311] usb 1-1: Manufacturer: 䤖籩㞻ﲿ輭ཱ璗ᤝ䲅눪曅ﲱ덠휸朢풑ᗪ蕥䝄ᇗ䨹婱ﲤ勫嗽࿠ऺ䒑鐷ⷄ첄䦲逶밳簭ᬼ氏ല猊夃ﵔ㩬Ȝ㈅鋏眏흐罟㩟敎⚬턑䫒㊈ꗘ쏰⛪ꭁ젾둉ឍ㼳ឯ켥턀젺頯菣鍪맦湹⸀⇪䏤帋憗뮡秣翯褌తꇹ㌈豐⣂履玚苖푍샐㊹僆Ξܯꀮ趁ꁊ䧢呪鐭䏱毞ࣔ獲묒№㼞ﭞ [ 89.881199][ T311] usb 1-1: SerialNumber: ꨟཋ︭뺏䦀檅鵨铦ⳗ찠䱣찎舼⇤ᅂ뽋塻ཌྷ҂멝틅꾕ּ噔팟萦髿㴯鿤 [ 89.900092][ T2834] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 89.907596][ T2834] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 89.918262][ T2834] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 89.953756][ T543] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 90.073129][ T2854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=2854 comm=syz.5.902 [ 90.086127][ T2854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=2854 comm=syz.5.902 [ 90.105944][ T543] usb 4-1: device descriptor read/64, error -71 [ 90.335623][ T311] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 90.349067][ T311] usb 1-1: USB disconnect, device number 28 [ 90.353768][ T543] usb 4-1: device descriptor read/64, error -71 [ 90.463932][ T543] usb usb4-port1: attempt power cycle [ 90.708070][ T2871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'. [ 90.718558][ T2871] netlink: 156 bytes leftover after parsing attributes in process `syz.2.909'. [ 90.813869][ T543] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 90.835005][ T543] usb 4-1: device descriptor read/8, error -71 [ 90.893515][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 90.893535][ T36] audit: type=1400 audit(1788313851.370:386): avc: denied { view } for pid=2882 comm="syz.0.915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.962290][ T2889] x_tables: duplicate underflow at hook 1 [ 90.975230][ T543] usb 4-1: device descriptor read/8, error -71 [ 90.985413][ T2889] syzkaller1: entered promiscuous mode [ 91.005057][ T2889] syzkaller1: entered allmulticast mode [ 91.180801][ T2894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.205716][ T2894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.223791][ T543] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 91.254993][ T543] usb 4-1: device descriptor read/8, error -71 [ 91.389686][ T543] usb 4-1: device descriptor read/8, error -71 [ 91.504053][ T543] usb usb4-port1: unable to enumerate USB device [ 91.514265][ T36] audit: type=1400 audit(1788313852.000:387): avc: denied { write } for pid=2903 comm="syz.2.921" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 91.573978][ T36] audit: type=1400 audit(1788313852.020:388): avc: denied { map } for pid=2903 comm="syz.2.921" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 91.625318][ T36] audit: type=1400 audit(1788313852.090:389): avc: denied { ioctl } for pid=2903 comm="syz.2.921" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 91.664148][ T2909] netlink: 216 bytes leftover after parsing attributes in process `syz.2.921'. [ 91.761089][ T2912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.842089][ T2926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.854925][ T2926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.870624][ T2928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.880804][ T2928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.040668][ T2936] x_tables: unsorted underflow at hook 4 [ 92.413862][ T861] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 92.451324][ T2938] bridge_slave_0: default FDB implementation only supports local addresses [ 92.536838][ T2942] netlink: 80 bytes leftover after parsing attributes in process `syz.2.932'. [ 92.563757][ T861] usb 4-1: Using ep0 maxpacket: 16 [ 92.571622][ T861] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.580372][ T861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.591632][ T861] usb 4-1: config 0 has no interface number 0 [ 92.599641][ T861] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 92.610395][ T861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.624227][ T861] usb 4-1: Product: syz [ 92.631337][ T861] usb 4-1: Manufacturer: syz [ 92.638387][ T861] usb 4-1: SerialNumber: syz [ 92.650859][ T861] usb 4-1: config 0 descriptor?? [ 92.660870][ T861] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 92.667554][ T861] usb 4-1: No valid video chain found. [ 92.878415][ T421] usb 4-1: USB disconnect, device number 35 [ 92.944797][ T2959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.953348][ T2959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.980121][ T2959] netlink: 200 bytes leftover after parsing attributes in process `syz.2.939'. [ 92.989168][ T2959] tc_dump_action: action bad kind [ 93.003795][ T543] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 93.155368][ T543] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.166854][ T543] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.177116][ T543] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.183782][ T543] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 93.193099][ T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.204004][ T543] usb 1-1: config 0 descriptor?? [ 93.616402][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.630388][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.643823][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.657654][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.673770][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.687613][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.703781][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.721227][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.732354][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.740397][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.740468][ T36] audit: type=1400 audit(1788313854.220:390): avc: denied { read } for pid=2979 comm="syz.3.948" dev="sockfs" ino=38438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.748097][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.779486][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.787815][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.809863][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.817763][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.830742][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.840889][ T36] audit: type=1400 audit(1788313854.320:391): avc: denied { nlmsg_tty_audit } for pid=2950 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.841176][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.871501][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.878906][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.905579][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.913171][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.921020][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.928803][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.936563][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.943937][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.951268][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.958692][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.966219][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 93.994377][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.011715][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.018900][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.023769][ T861] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 94.030506][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.050796][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.062788][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.081081][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.091159][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.105267][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.122556][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.133746][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.143612][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.155598][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.163092][ T543] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 94.203920][ T861] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 94.223348][ T861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.232873][ T36] audit: type=1400 audit(1788313854.720:392): avc: denied { ioctl } for pid=2950 comm="syz.0.936" path="socket:[37379]" dev="sockfs" ino=37379 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.264372][ T861] usb 4-1: Product: syz [ 94.268566][ T861] usb 4-1: Manufacturer: syz [ 94.273176][ T861] usb 4-1: SerialNumber: syz [ 94.372223][ T543] hid-led 0003:0FC5:B080.000B: probe with driver hid-led failed with error -71 [ 94.403932][ T543] usb 1-1: USB disconnect, device number 29 [ 94.505405][ T2992] FAULT_INJECTION: forcing a failure. [ 94.505405][ T2992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.533786][ T2992] CPU: 0 UID: 0 PID: 2992 Comm: syz.2.951 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 94.533827][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.533845][ T2992] Call Trace: [ 94.533855][ T2992] [ 94.533865][ T2992] __dump_stack+0x21/0x30 [ 94.533903][ T2992] dump_stack_lvl+0x140/0x1c0 [ 94.533941][ T2992] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.533971][ T2992] ? get_sigframe+0x60d/0x830 [ 94.533992][ T2992] ? trace_event_buffer_commit+0x256/0x8f0 [ 94.534017][ T2992] dump_stack+0x19/0x20 [ 94.534046][ T2992] should_fail_ex+0x3c2/0x510 [ 94.534071][ T2992] should_fail+0xf/0x20 [ 94.534094][ T2992] should_fail_usercopy+0x1e/0x30 [ 94.534119][ T2992] _copy_to_user+0x24/0xa0 [ 94.534148][ T2992] copy_siginfo_to_user+0x26/0xb0 [ 94.534178][ T2992] x64_setup_rt_frame+0x774/0xc20 [ 94.534202][ T2992] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 94.534223][ T2992] arch_do_signal_or_restart+0x328/0x700 [ 94.534244][ T2992] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 94.534266][ T2992] ? syscall_exit_work+0x11f/0x150 [ 94.534288][ T2992] syscall_exit_to_user_mode+0x57/0xb0 [ 94.534315][ T2992] do_syscall_64+0x63/0xf0 [ 94.534344][ T2992] ? clear_bhb_loop+0x50/0xa0 [ 94.534370][ T2992] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.534394][ T2992] RIP: 0033:0x7ffae459e159 [ 94.534415][ T2992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.534434][ T2992] RSP: 002b:00007ffae54e40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.534462][ T2992] RAX: 0000000000000001 RBX: 00007ffae4826098 RCX: 00007ffae459e159 [ 94.534480][ T2992] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffae482609c [ 94.534496][ T2992] RBP: 00007ffae4826090 R08: 4000000000000000 R09: 0000000000000000 [ 94.534513][ T2992] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000000 [ 94.534528][ T2992] R13: 00007ffae4826128 R14: 00007ffe5f620500 R15: 00007ffe5f6205e8 [ 94.534547][ T2992] [ 94.737811][ T861] rtl8150 4-1:1.0: couldn't reset the device [ 94.772401][ T861] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 94.783453][ T861] usb 4-1: USB disconnect, device number 36 [ 94.890507][ T36] audit: type=1400 audit(1788313855.370:393): avc: denied { create } for pid=2997 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.972800][ T3004] VFS: file-max limit 0 reached [ 95.510286][ T3039] fuse: Bad value for 'user_id' [ 95.533745][ T3039] fuse: Bad value for 'user_id' [ 95.614051][ T543] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 95.722069][ T3046] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 95.743820][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 95.784670][ T543] usb 1-1: not running at top speed; connect to a high speed hub [ 95.798800][ T543] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.812122][ T543] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 95.827644][ T543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.846075][ T543] usb 1-1: Found UVC 1.00 device (0000:0000) [ 95.981921][ T3053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.978'. [ 95.991652][ T36] audit: type=1400 audit(1788313856.480:394): avc: denied { remount } for pid=3052 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.012103][ T3053] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 96.021081][ T45] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 96.046768][ T543] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 96.065969][ T543] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 96.085424][ T543] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 96.104335][ T543] usb 1-1: USB disconnect, device number 30 [ 96.131796][ T3061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.148086][ T3061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.183855][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 96.190666][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.201478][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.211947][ T45] usb 4-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 96.221380][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.229909][ T45] usb 4-1: SerialNumber: syz [ 96.240352][ T45] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 96.251495][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.274430][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.440180][ T45] usb 4-1: USB disconnect, device number 37 [ 96.977868][ T36] audit: type=1400 audit(1788313857.450:395): avc: denied { setopt } for pid=3087 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.552192][ T36] audit: type=1400 audit(1788313858.030:396): avc: denied { map } for pid=3116 comm="syz.0.1004" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.702514][ T3125] VFS: file-max limit 0 reached [ 97.784558][ T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 97.861011][ T3131] incfs: Options parsing error. -22 [ 97.867050][ T3131] incfs: mount failed -22 [ 97.921575][ T36] audit: type=1400 audit(1788313858.400:397): avc: denied { accept } for pid=3140 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.965053][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.976419][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.991888][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 98.005698][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 98.024444][ T9] usb 4-1: Product: syz [ 98.028654][ T9] usb 4-1: Manufacturer: syz [ 98.033621][ T9] usb 4-1: SerialNumber: syz [ 98.255805][ T3119] rust_binder: Write failure EFAULT in pid:562 [ 98.260748][ T36] audit: type=1400 audit(1788313858.740:398): avc: denied { create } for pid=3117 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.260850][ T3119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.297766][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 98.309162][ T3119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.334301][ T9] usb 4-1: USB disconnect, device number 38 [ 98.343964][ T9] usblp0: removed [ 98.643786][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 98.773782][ T9] usb 4-1: device descriptor read/64, error -71 [ 99.023863][ T9] usb 4-1: device descriptor read/64, error -71 [ 99.273831][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 99.403795][ T9] usb 4-1: device descriptor read/64, error -71 [ 99.643789][ T9] usb 4-1: device descriptor read/64, error -71 [ 99.764305][ T9] usb usb4-port1: attempt power cycle [ 100.113792][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 100.135196][ T9] usb 4-1: device descriptor read/8, error -71 [ 100.266238][ T9] usb 4-1: device descriptor read/8, error -71 [ 100.513802][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 100.535441][ T9] usb 4-1: device descriptor read/8, error -71 [ 100.603775][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 100.674439][ T9] usb 4-1: device descriptor read/8, error -71 [ 100.766823][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 100.793786][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.805470][ T9] usb usb4-port1: unable to enumerate USB device [ 100.817141][ T10] usb 1-1: Product: syz [ 100.821347][ T10] usb 1-1: Manufacturer: syz [ 100.843759][ T10] usb 1-1: SerialNumber: syz [ 101.213858][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 101.260862][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.276017][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.365835][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.374897][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.385697][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.395149][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 101.406640][ T9] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 101.420428][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 101.431861][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 101.442180][ T9] usb 4-1: string descriptor 0 read error: -22 [ 101.448925][ T9] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 101.458577][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.487351][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:5b:a9:ba:bd:71 [ 101.501705][ T10] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 101.691179][ T9] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 101.702169][ T10] usb 1-1: USB disconnect, device number 31 [ 101.914248][ T9] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 101.957762][ T9] usb 4-1: USB disconnect, device number 43 [ 102.266908][ T3195] FAULT_INJECTION: forcing a failure. [ 102.266908][ T3195] name failslab, interval 1, probability 0, space 0, times 0 [ 102.288211][ T3195] CPU: 0 UID: 0 PID: 3195 Comm: syz.0.1022 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 102.288251][ T3195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.288269][ T3195] Call Trace: [ 102.288286][ T3195] [ 102.288296][ T3195] __dump_stack+0x21/0x30 [ 102.288334][ T3195] dump_stack_lvl+0x140/0x1c0 [ 102.288363][ T3195] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.288393][ T3195] ? __kasan_check_write+0x18/0x20 [ 102.288416][ T3195] ? _raw_spin_lock+0x92/0x120 [ 102.288446][ T3195] dump_stack+0x19/0x20 [ 102.288474][ T3195] should_fail_ex+0x3c2/0x510 [ 102.288500][ T3195] should_failslab+0xac/0x100 [ 102.288526][ T3195] __kmalloc_cache_noprof+0x41/0x470 [ 102.288550][ T3195] ? down_write+0xee/0x2b0 [ 102.288574][ T3195] ? dummy_alloc_request+0x8e/0x1f0 [ 102.288595][ T3195] ? __cfi_down_write+0x10/0x10 [ 102.288625][ T3195] dummy_alloc_request+0x8e/0x1f0 [ 102.288646][ T3195] usb_ep_alloc_request+0x78/0x1c0 [ 102.288677][ T3195] gadget_bind+0xe5/0x590 [ 102.288708][ T3195] ? __cfi_mutex_unlock+0x10/0x10 [ 102.288731][ T3195] ? kernfs_put+0x314/0x360 [ 102.288760][ T3195] ? __cfi_gadget_bind+0x10/0x10 [ 102.288789][ T3195] gadget_bind_driver+0x304/0x9c0 [ 102.288814][ T3195] ? sysfs_create_link+0x6c/0x90 [ 102.288837][ T3195] ? __cfi_gadget_bind_driver+0x10/0x10 [ 102.288861][ T3195] really_probe+0x2e4/0x8b0 [ 102.288879][ T3195] __driver_probe_device+0x193/0x280 [ 102.288917][ T3195] driver_probe_device+0x54/0x3f0 [ 102.288939][ T3195] __driver_attach+0x422/0x5e0 [ 102.288969][ T3195] bus_for_each_dev+0x246/0x2d0 [ 102.288995][ T3195] ? __cfi___driver_attach+0x10/0x10 [ 102.289025][ T3195] ? __cfi_bus_for_each_dev+0x10/0x10 [ 102.289050][ T3195] ? __kasan_kmalloc+0x96/0xb0 [ 102.289076][ T3195] ? _raw_spin_unlock+0x45/0x60 [ 102.289104][ T3195] ? klist_add_tail+0x1dd/0x220 [ 102.289131][ T3195] driver_attach+0x46/0x50 [ 102.289159][ T3195] bus_add_driver+0x393/0x730 [ 102.289186][ T3195] driver_register+0x2b7/0x3c0 [ 102.289208][ T3195] usb_gadget_register_driver_owner+0xfc/0x270 [ 102.289232][ T3195] raw_ioctl+0x144c/0x37a0 [ 102.289272][ T3195] ? __cfi_raw_ioctl+0x10/0x10 [ 102.289309][ T3195] ? selinux_file_ioctl+0x732/0x1480 [ 102.289332][ T3195] ? __kasan_check_read+0x15/0x20 [ 102.289353][ T3195] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 102.289376][ T3195] ? __kasan_check_read+0x15/0x20 [ 102.289397][ T3195] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 102.289423][ T3195] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 102.289448][ T3195] ? __fget_files+0x2bc/0x330 [ 102.289474][ T3195] ? bpf_lsm_file_ioctl+0xd/0x20 [ 102.289500][ T3195] ? security_file_ioctl+0x3e/0x110 [ 102.289521][ T3195] ? __cfi_raw_ioctl+0x10/0x10 [ 102.289548][ T3195] __se_sys_ioctl+0x123/0x1b0 [ 102.289583][ T3195] __x64_sys_ioctl+0x7f/0xa0 [ 102.289618][ T3195] x64_sys_call+0x1878/0x2ee0 [ 102.289649][ T3195] do_syscall_64+0x57/0xf0 [ 102.289680][ T3195] ? clear_bhb_loop+0x50/0xa0 [ 102.289706][ T3195] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.289741][ T3195] RIP: 0033:0x7f9e5419ddeb [ 102.289763][ T3195] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 102.289783][ T3195] RSP: 002b:00007f9e5501df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.289811][ T3195] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9e5419ddeb [ 102.289829][ T3195] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 102.289853][ T3195] RBP: 00007f9e5501efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 102.289891][ T3195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.289907][ T3195] R13: 0000200000000300 R14: 0000000000000000 R15: 0000000000000000 [ 102.289925][ T3195] [ 102.290010][ T3195] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 102.667107][ T3195] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 102.675544][ T3195] CPU: 0 UID: 0 PID: 3195 Comm: syz.0.1022 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 102.687199][ T3195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.697275][ T3195] RIP: 0010:trace_event_raw_event_udc_log_req+0x1c1/0x6e0 [ 102.704422][ T3195] Code: 1c 3f 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 ce 02 00 00 41 c6 07 00 48 8b 54 24 08 4c 8d 7a 08 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 c8 02 00 00 41 8b 1f 4d 8d 7c 24 0c 4c [ 102.724183][ T3195] RSP: 0018:ffffc90007b8f680 EFLAGS: 00010202 [ 102.730278][ T3195] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000065 [ 102.738270][ T3195] RDX: 0000000000000000 RSI: ffffffff866d72a0 RDI: ffff88811d00b7d8 [ 102.746261][ T3195] RBP: ffffc90007b8f778 R08: 0000000000000070 R09: 0000000000000030 [ 102.754254][ T3195] R10: dffffc0000000000 R11: ffffed1023a016fc R12: ffff88811d00b798 [ 102.762245][ T3195] R13: ffffffff866d72a0 R14: dffffc0000000000 R15: 0000000000000008 [ 102.770245][ T3195] FS: 00007f9e550206c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.779289][ T3195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.785893][ T3195] CR2: 0000001b2f51bff8 CR3: 000000011c13a000 CR4: 00000000003526b0 [ 102.793890][ T3195] Call Trace: [ 102.797184][ T3195] [ 102.800134][ T3195] ? __cfi_trace_event_raw_event_udc_log_req+0x10/0x10 [ 102.807014][ T3195] ? __cfi_down_write+0x10/0x10 [ 102.811896][ T3195] usb_ep_alloc_request+0x16e/0x1c0 [ 102.817130][ T3195] gadget_bind+0xe5/0x590 [ 102.821504][ T3195] ? __cfi_mutex_unlock+0x10/0x10 [ 102.826575][ T3195] ? kernfs_put+0x314/0x360 [ 102.831108][ T3195] ? __cfi_gadget_bind+0x10/0x10 [ 102.836086][ T3195] gadget_bind_driver+0x304/0x9c0 [ 102.841150][ T3195] ? sysfs_create_link+0x6c/0x90 [ 102.846124][ T3195] ? __cfi_gadget_bind_driver+0x10/0x10 [ 102.851704][ T3195] really_probe+0x2e4/0x8b0 [ 102.856245][ T3195] __driver_probe_device+0x193/0x280 [ 102.861560][ T3195] driver_probe_device+0x54/0x3f0 [ 102.866610][ T3195] __driver_attach+0x422/0x5e0 [ 102.871404][ T3195] bus_for_each_dev+0x246/0x2d0 [ 102.876283][ T3195] ? __cfi___driver_attach+0x10/0x10 [ 102.881606][ T3195] ? __cfi_bus_for_each_dev+0x10/0x10 [ 102.886994][ T3195] ? __kasan_kmalloc+0x96/0xb0 [ 102.891786][ T3195] ? _raw_spin_unlock+0x45/0x60 [ 102.896667][ T3195] ? klist_add_tail+0x1dd/0x220 [ 102.901545][ T3195] driver_attach+0x46/0x50 [ 102.906025][ T3195] bus_add_driver+0x393/0x730 [ 102.910736][ T3195] driver_register+0x2b7/0x3c0 [ 102.915525][ T3195] usb_gadget_register_driver_owner+0xfc/0x270 [ 102.921703][ T3195] raw_ioctl+0x144c/0x37a0 [ 102.926152][ T3195] ? __cfi_raw_ioctl+0x10/0x10 [ 102.930948][ T3195] ? selinux_file_ioctl+0x732/0x1480 [ 102.936262][ T3195] ? __kasan_check_read+0x15/0x20 [ 102.941316][ T3195] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 102.946888][ T3195] ? __kasan_check_read+0x15/0x20 [ 102.951940][ T3195] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 102.957770][ T3195] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 102.964133][ T3195] ? __fget_files+0x2bc/0x330 [ 102.968843][ T3195] ? bpf_lsm_file_ioctl+0xd/0x20 [ 102.973817][ T3195] ? security_file_ioctl+0x3e/0x110 [ 102.979040][ T3195] ? __cfi_raw_ioctl+0x10/0x10 [ 102.983834][ T3195] __se_sys_ioctl+0x123/0x1b0 [ 102.988537][ T3195] __x64_sys_ioctl+0x7f/0xa0 [ 102.993162][ T3195] x64_sys_call+0x1878/0x2ee0 [ 102.997864][ T3195] do_syscall_64+0x57/0xf0 [ 103.002308][ T3195] ? clear_bhb_loop+0x50/0xa0 [ 103.007014][ T3195] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.012934][ T3195] RIP: 0033:0x7f9e5419ddeb [ 103.017378][ T3195] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 103.037007][ T3195] RSP: 002b:00007f9e5501df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.045453][ T3195] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9e5419ddeb [ 103.053446][ T3195] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 103.061438][ T3195] RBP: 00007f9e5501efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 103.069430][ T3195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.077424][ T3195] R13: 0000200000000300 R14: 0000000000000000 R15: 0000000000000000 [ 103.085420][ T3195] [ 103.088459][ T3195] Modules linked in: [ 103.092602][ T3195] ---[ end trace 0000000000000000 ]--- [ 103.098123][ T3195] RIP: 0010:trace_event_raw_event_udc_log_req+0x1c1/0x6e0 [ 103.105294][ T3195] Code: 1c 3f 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 ce 02 00 00 41 c6 07 00 48 8b 54 24 08 4c 8d 7a 08 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 c8 02 00 00 41 8b 1f 4d 8d 7c 24 0c 4c [ 103.124954][ T3195] RSP: 0018:ffffc90007b8f680 EFLAGS: 00010202 [ 103.131040][ T3195] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000065 [ 103.139068][ T3195] RDX: 0000000000000000 RSI: ffffffff866d72a0 RDI: ffff88811d00b7d8 [ 103.147145][ T3195] RBP: ffffc90007b8f778 R08: 0000000000000070 R09: 0000000000000030 [ 103.155167][ T3195] R10: dffffc0000000000 R11: ffffed1023a016fc R12: ffff88811d00b798 [ 103.163161][ T3195] R13: ffffffff866d72a0 R14: dffffc0000000000 R15: 0000000000000008 [ 103.171184][ T3195] FS: 00007f9e550206c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 103.180167][ T3195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.186801][ T3195] CR2: 0000001b2f51bff8 CR3: 000000011c13a000 CR4: 00000000003526b0 [ 103.194890][ T3195] Kernel panic - not syncing: Fatal exception [ 103.201221][ T3195] Kernel Offset: disabled [ 103.205539][ T3195] Rebooting in 86400 seconds..