last executing test programs: 2m21.857061005s ago: executing program 3 (id=160): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) (async, rerun: 64) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000004c0)='./file1\x00', 0x5) (async, rerun: 32) unlinkat(r1, &(0x7f00000011c0)='./file0\x00', 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000000080)=""/4096, 0x1000) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x6, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c040e610012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "f175dd8f", {0x3, 0x102, 0x0, 0x0, 0x8, 0x5}}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (rerun: 32) sendmmsg$inet(r7, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000980)="fec2627e201afe409696be35b7b4e3bbe335b80aa6b25e81d0fb1d2f738e5c09f0932b634e2deaa427a229d8e93a063395eb283741822b729f125cdcc34bc3215575d5a0b9b6bca5f382db533f8e2deede3d13e5459eb3c346fd02ad2f7e90cfb55b887a54052dd2f4cab7b4dae68f05d8549e3567fc577a4c3dc2af83e4289768b57c38db2ee438fb7ea3149d71aebe343b3bd8a884e35a7e227ee60958ac92c57373c7d05808723ce6c95dcf26320422a1ef6a73699ebf95ae5be00098f18bb460e242de6003a90049280035fcf5f932dc5ceec3343c232f2694ec1447d29f95944da89a0838b887a0481452ee11fd6d9a4e36dbf81d7e509ba2b4770eef40bb06214991b30d390008f53ef67309314eb2af31428c4987554ea751cbe28fdc33c82cd779cb54f95b2abbd4b7ec6476b2fdcbe12486c63391815065eac15b75cebd7ba291989a3c4db44cfabefacb334d039c985a551edeb9d3c1c46bba04923fca9348fa174113daf8686a48ee992d6090a8388b5d33505bfe91baf9d8707592a67e833402ec282edc75c38505112032dff3566d70e71ae79ecf1dc9bb90742d06df7c09339f6b3e2a98397a4b0409d45c0d5a5ef15a8feb01c53f8600ecbd0f9c87b718cb4d4579dba8bec1ed61f7d0b2462d251d59864003fb12cf222bf4b5b1eacea9eec7a77ed28289f097ea6e3a998cac175d672319f4b046de41baf400110b8055e65274ffdf13c2af128c05dcd7e65705101cc13a71595e4ec5f56ebe75df09dba8eb5d4b7877d2353e4a1274d7c31da805790c443a61ae33c70b5ad26c199327686092b92c7804af625f7c90d885257e604a55e8a797c7793041caf6af81bdb25996b475780978784e75e8c8f7d439fa5898110ff727dcf9a4f78ac18bf4f66676025bf385d77af5ff0b0560bbddc0065f748b3a8ab8380f492666960780ac0c2916da9cc2f20eabf7a96fb240eb251bbdf7e56841d7c8b70b1aba655cd6615f8bc34e5aa2b59f261605c511add1eeb3704699823c8a2ba3ea85caad4ceb225c0a555405e41799847ee15f30f08a93538d4946c9fcb88be29d2aafe1ad605c051fcfa409e252806d1046dd96f07c7fe9f3a5e7225ac0145ba19d4066bf1ac4b809ba1c0a63718e5a43bf284a1b63a33e17cb1a84df648b1907dde0a7c2805e25e0bd00ac8d4fb49d45c478f521a2f58c45e7b02d5ce0ef129ea31a82b12217d98b9a4a5edde68e3a82618f7ca5e0c449fce0ec031ccad45b082ba8b0f4cf4d044f51f43bcacbdfc85e1aaa878c6d187c2da993dd43eac23b5075d9c2db5e6e59a09cc14086847632db7c736a32a0db022b08d0ae5d875dc8b089e9394589e53c5cd1d1ddd0ac1fb751387b4b0d9562bf93dc1f4deb5daf78968b986b903106f09f987475f7ff1031b50ab7aaa0a2589244243df3d402e15415f30e660f6d94c6f2f88771623532d7e7a7fe0bef07be4d60afbba5cf22d98059cd55791da8944b36381fc2cb198102bc986df3aced3fe11190fb1f067541b1863874da35ea0c9106bf4aed0669542303751779336f98bb8d03d6f55dd32df65739c58901a1f7dbdebae690411f90029fa480f269092727f54dd5bcb73c355430f020055cafbc6c34592b647befff12a61ba080741178527e5b952e9d79ffa6d4b8ec16a0209581dcbf63bf554899249acc06b24701ddcfa3f68469d74efda774a57322ebef533499e07d49b7d6ffac3e9852e10e7f833dd56ee0c905aca6c3aedbf9073f04fbd8c2efcfa4246552af849bec5448513865652bd2fe2e300f59571ba0bf2a4daf82a91fc1ffe5e2add8fe84a54f51358851bdd760c9482bed3df2a10c5ae251664a11af095d5b6f48ef851edf034b0c5b0491d0bb5b4df6bc6c878746b9dfce4a4a376695e037a0fac092e5686564c83d9adb4c8846a5924bf24db357c4d99074b78b310db948dd413d3d34cfb605818bea81c6dc4051557a319fdf0a3f0c2dc131e21157382d46977913583b3b6800edd3384fdd0bc8070807f086c26201d23658107e08237e5216446b4cae0db896adda688dedbfa0455b38c7b54fb7d55fda6869ee5462506688800903221803b0384f1485e399138c3208d7e64946b15b83d38fc9aaaa95e57504de586286745781288255cc128fe6a1a3255e5ec8b2b7aad901276b5983a462ead6cb86d35f0550da8a79cd1f8743ab5e62e8beead83771e4228eb5317568e23f766eed1aef4510fa2631fcf4bb0ae7de7b1e896f3551fdfb9c0646b25b5d2872773e32e75c37618e6f745969e218f40fb3a14b78d2f88e2f9262beeb7cd86933994bbf46cb98ded56646d6dddb215e9a0b92aeed", 0x681}, {&(0x7f0000001980)="6bd0", 0x2}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)="0f", 0x1}, {&(0x7f0000000380)='9', 0x1}], 0x9}}], 0x1, 0x4000000) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async, rerun: 32) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) socket(0x3, 0x3, 0x88) 2m21.842533206s ago: executing program 3 (id=162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40050) memfd_create(&(0x7f0000002240)='key_or_keyring:', 0x2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x3d, 0x1, 0x1, 0xfffffffc}]}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @loopback}}) 2m21.786500258s ago: executing program 3 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x64, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}]}]}, 0x64}}, 0x0) 2m21.74285088s ago: executing program 3 (id=164): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) (async) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x140, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4028700f, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xd9a77000) syz_clone(0x80040000, &(0x7f0000003300), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/129, 0x81) (async) r2 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) splice(r2, &(0x7f0000000000)=0x3, r2, &(0x7f0000000040)=0x2, 0x0, 0x1) 2m21.645026453s ago: executing program 3 (id=165): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000700)={0x0, 0x2, 0x1, [0xaf, 0xffffffffffffffc5, 0x7ffffffffdffffff, 0x400, 0x29], [0x0, 0x7, 0xeffffffffffffefe, 0x4, 0x4, 0x10, 0xffffffffffbffffe, 0x3f, 0x5, 0x81, 0x40, 0x7, 0x9, 0x4, 0x5, 0x7, 0x2, 0x8000, 0x4, 0x9, 0x202, 0x0, 0x9, 0x4000000009, 0xa, 0xbec0, 0x7fffffffffffffff, 0x9, 0x93, 0x8000, 0x7, 0x20000005, 0x8fff, 0x7fff, 0x7, 0x1, 0x200003, 0x3, 0xfa, 0x7fffffffffffffff, 0x1, 0x81, 0x7, 0x1, 0xa, 0xb8, 0xffffffffffffffff, 0x81, 0xe69e, 0x5, 0x2, 0x9, 0x8000, 0x6, 0x3, 0x7f, 0x405, 0x5, 0x200, 0x4, 0x128a000, 0x1, 0x0, 0x1, 0x9, 0x200, 0x400, 0x6, 0xd, 0x756e, 0x6, 0x5, 0x2, 0x10000000000003, 0x3, 0x3fd, 0xb, 0x15, 0x2007, 0x1, 0x5, 0xc, 0xc51c, 0xfa18, 0xffffffffffffffff, 0x2, 0x81, 0x8, 0x9, 0x1, 0x100052, 0x5, 0xca, 0x2, 0xc, 0xffff800000000000, 0xc7f9, 0x10088, 0xfffffffd, 0x86d, 0x7, 0xffffffffffffdfff, 0x1, 0x7, 0xfffffffffffffffe, 0xcd, 0xf, 0x1, 0x82, 0xd9f, 0x10000000000006, 0x4, 0x4, 0x0, 0xea, 0x82, 0x4000002d, 0x8, 0x7, 0x9, 0x44]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000040000000c000a"], 0x24}}, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000001c0)={r0, 0xbdaa, 0x100}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b40)={0x8, 0x3, {0x80, @struct={0x8, 0x7}, r0, 0x8, 0x7, 0x8, 0x3, 0x2, 0x96d4247c3d4f855f, @usage=0x6, 0x500, 0x1, [0x5, 0x3, 0x5, 0x9, 0x8, 0x8]}, {0x1, @usage=0x6, r0, 0x7fffffff, 0x8000000000000001, 0x7, 0x2, 0x0, 0x8, @struct={0x5, 0x3ff}, 0x5, 0x7, [0x7fffffffffffffff, 0x3, 0x6c33f3e3, 0x3, 0xffffffffffffffff, 0xd]}, {0x3, @struct={0x40000, 0x2}, r2, 0xb8ae, 0x3, 0x34, 0x95b1, 0x101, 0x0, @usage=0x8, 0xa, 0x7, [0x6, 0x8, 0x7, 0xb5c, 0x6, 0x200]}, {0x3ff, 0x800, 0x8}}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001440)={0x0, &(0x7f0000000f40)=[@uexit={0x0, 0x18, 0x7}, @wr_drn={0x68, 0x20, {0x0, 0x7a9b}}, @in_dx={0x69, 0x20, {0x5d9d, 0x5}}, @wr_drn={0x68, 0x20, {0x7, 0x762}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c02, 0x1}}, @nested_load_code={0x12e, 0x69, {0x1, "b805000000b9000000000f01c166baf80cb8b074998bef66bafc0cec0f01cff266430f2286450f0766baf80cb81697b68fef66bafc0c66ed8f8800cd02fbc4a2f91e9900000000f3410fc7b663850000ac"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x7a, 0x3, 0x5, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x64, {0x0, "66baa000ec450f01c866baf80cb8fc4e0b89ef66bafc0cedb9800b0000b8ce000000ba000000000f30f3426fc403fd68300d0fc3ba00000000410f352636400f01c9f364410f009380810000"}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x6, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x4355}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x133, {0x3, 0x8, [@nested_load_code={0x12e, 0x8b, {0x1, "66baf80cb840d8198cef66bafc0cb800880000ef48b809000000000000000f23c80f21f8350c00f0000f23f866b8d8008ee048b800000000010000000f23d00f21f8353000000a0f23f80f005a00480fc79ef62c9df5c482353ddec4c3ad6c060e400f01c8b9800000c00f3235010000000f30"}}, @cpuid={0x64, 0x18, {0x4, 0x401}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x33, 0x0, 0x1, 0x5}}, @wrmsr={0x65, 0x20, {0xaea, 0x6}}]}}, @in_dx={0x69, 0x20, {0x2357, 0x1}}, @wrmsr={0x65, 0x20, {0x381, 0xd0e6}}, @wr_crn={0x67, 0x20, {0xbab0b9ac677f442b, 0x9}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x968}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x4d8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000700)={0x0, 0x2, 0x1, [0xaf, 0xffffffffffffffc5, 0x7ffffffffdffffff, 0x400, 0x29], [0x0, 0x7, 0xeffffffffffffefe, 0x4, 0x4, 0x10, 0xffffffffffbffffe, 0x3f, 0x5, 0x81, 0x40, 0x7, 0x9, 0x4, 0x5, 0x7, 0x2, 0x8000, 0x4, 0x9, 0x202, 0x0, 0x9, 0x4000000009, 0xa, 0xbec0, 0x7fffffffffffffff, 0x9, 0x93, 0x8000, 0x7, 0x20000005, 0x8fff, 0x7fff, 0x7, 0x1, 0x200003, 0x3, 0xfa, 0x7fffffffffffffff, 0x1, 0x81, 0x7, 0x1, 0xa, 0xb8, 0xffffffffffffffff, 0x81, 0xe69e, 0x5, 0x2, 0x9, 0x8000, 0x6, 0x3, 0x7f, 0x405, 0x5, 0x200, 0x4, 0x128a000, 0x1, 0x0, 0x1, 0x9, 0x200, 0x400, 0x6, 0xd, 0x756e, 0x6, 0x5, 0x2, 0x10000000000003, 0x3, 0x3fd, 0xb, 0x15, 0x2007, 0x1, 0x5, 0xc, 0xc51c, 0xfa18, 0xffffffffffffffff, 0x2, 0x81, 0x8, 0x9, 0x1, 0x100052, 0x5, 0xca, 0x2, 0xc, 0xffff800000000000, 0xc7f9, 0x10088, 0xfffffffd, 0x86d, 0x7, 0xffffffffffffdfff, 0x1, 0x7, 0xfffffffffffffffe, 0xcd, 0xf, 0x1, 0x82, 0xd9f, 0x10000000000006, 0x4, 0x4, 0x0, 0xea, 0x82, 0x4000002d, 0x8, 0x7, 0x9, 0x44]}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000040000000c000a"], 0x24}}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000001c0)={r0, 0xbdaa, 0x100}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b40)={0x8, 0x3, {0x80, @struct={0x8, 0x7}, r0, 0x8, 0x7, 0x8, 0x3, 0x2, 0x96d4247c3d4f855f, @usage=0x6, 0x500, 0x1, [0x5, 0x3, 0x5, 0x9, 0x8, 0x8]}, {0x1, @usage=0x6, r0, 0x7fffffff, 0x8000000000000001, 0x7, 0x2, 0x0, 0x8, @struct={0x5, 0x3ff}, 0x5, 0x7, [0x7fffffffffffffff, 0x3, 0x6c33f3e3, 0x3, 0xffffffffffffffff, 0xd]}, {0x3, @struct={0x40000, 0x2}, r2, 0xb8ae, 0x3, 0x34, 0x95b1, 0x101, 0x0, @usage=0x8, 0xa, 0x7, [0x6, 0x8, 0x7, 0xb5c, 0x6, 0x200]}, {0x3ff, 0x800, 0x8}}) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) (async) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001440)={0x0, &(0x7f0000000f40)=[@uexit={0x0, 0x18, 0x7}, @wr_drn={0x68, 0x20, {0x0, 0x7a9b}}, @in_dx={0x69, 0x20, {0x5d9d, 0x5}}, @wr_drn={0x68, 0x20, {0x7, 0x762}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c02, 0x1}}, @nested_load_code={0x12e, 0x69, {0x1, "b805000000b9000000000f01c166baf80cb8b074998bef66bafc0cec0f01cff266430f2286450f0766baf80cb81697b68fef66bafc0c66ed8f8800cd02fbc4a2f91e9900000000f3410fc7b663850000ac"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x7a, 0x3, 0x5, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x64, {0x0, "66baa000ec450f01c866baf80cb8fc4e0b89ef66bafc0cedb9800b0000b8ce000000ba000000000f30f3426fc403fd68300d0fc3ba00000000410f352636400f01c9f364410f009380810000"}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x6, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x4355}}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x133, {0x3, 0x8, [@nested_load_code={0x12e, 0x8b, {0x1, "66baf80cb840d8198cef66bafc0cb800880000ef48b809000000000000000f23c80f21f8350c00f0000f23f866b8d8008ee048b800000000010000000f23d00f21f8353000000a0f23f80f005a00480fc79ef62c9df5c482353ddec4c3ad6c060e400f01c8b9800000c00f3235010000000f30"}}, @cpuid={0x64, 0x18, {0x4, 0x401}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x33, 0x0, 0x1, 0x5}}, @wrmsr={0x65, 0x20, {0xaea, 0x6}}]}}, @in_dx={0x69, 0x20, {0x2357, 0x1}}, @wrmsr={0x65, 0x20, {0x381, 0xd0e6}}, @wr_crn={0x67, 0x20, {0xbab0b9ac677f442b, 0x9}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x968}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x4d8}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) (async) 2m21.523980187s ago: executing program 3 (id=166): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x3, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x2, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) (async) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x3, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x2, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) close(r0) (async) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x2000c010) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)=""/61, 0x3d}], 0x2, 0x1, 0xffffff7c) (async) preadv(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)=""/61, 0x3d}], 0x2, 0x1, 0xffffff7c) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x800, 0x3, 0x7f, 0xa, 0xd, 0xca4e}) 2m21.489367958s ago: executing program 32 (id=166): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x3, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x2, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) (async) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x3, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x2, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) close(r0) (async) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x2000c010) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)=""/61, 0x3d}], 0x2, 0x1, 0xffffff7c) (async) preadv(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)=""/61, 0x3d}], 0x2, 0x1, 0xffffff7c) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x800, 0x3, 0x7f, 0xa, 0xd, 0xca4e}) 3.880647348s ago: executing program 2 (id=1289): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002a80)={{0xffffffffffffffff, 0x0, 0x600002, 0x0, 0x1, 0x0, 0x0}, 0x0, 0x0}) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x3, 0x9d, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x2, 0x1, 0x8, 0x0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a50d32e91e"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x77, 0x10, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x97, 0x10, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xc, 0xe6, 0xa5, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xaf68, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7ff, 0x2, 0xb7, 0x1ff, 0xd0}, @network_terminal={0x7, 0x24, 0xa, 0xab, 0xc, 0x4, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0xc, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5de, 0xc, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x8, 0x4}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0x6, 0xb0, 0x7, 0x0, 0x3}, 0x22c, &(0x7f0000000c80)={0x5, 0xf, 0x22c, 0x6, [@generic={0xf5, 0x10, 0x3, "984628a48c0a4038db60a2f4349fc9e46dcd0a87fe58c0faf872f11bad73b25aa3532a53a311e09007fdde9c9cd97936a9502257c73b4597e0498600368ed07f9e7bf91a01ee88f69a82541e0a892d0fbd6e5fd1b24db8fe1367058650195acdaa6ef5ed15849473a2c375768fece7e5bd5ccfaac1b956d49f56daa0517fe45529f9e6ea85c27b71419fc0baf3697e2b6cfed3f4b00c324b1ff209ed39799cd857ec92e301c31444d080b43106f8c4021f4394abe55efcda53bf4e875bbe9e427f106a7857f70cfb54a1d493470c31cc90b82fbd8e4582ec7da8dbe3c8edb79b10c6d41016ea7aa2d46437b64202ba2c1a4a"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "2257550f461438683b2e1d1c7412d8a8"}, @generic={0xe9, 0x10, 0xa, "44dc3a41af1378a2625a2ca62365bca949f5c615dda20cd6d2de67bc195e069dff4905335b4c1f39c24448390720da040e4cab2c845e95994bbc33cfb51b4e8e2d2d03af816c76955609376512991ce8ac6f87fd28b38f4f6737cf181cbeceec4d566a61db0af5b665e642f4e7e1576ff3d48f1977495ceabcda2c195b4c6c6a47300957b5becd5e7ae8754cdcc1224843cb6eba6f4a13dce73ae232ee1516e993961a0f9f0f6cbd856314f716996d77303c17dbc1bbfcf98884bb13e4a7e71c419d70b1c37e53762fea5020117043f4f064446ca3e34214954649ab2bada31fc6741612489c"}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7, 0xf000, 0x0, [0xc0, 0x18000, 0x0, 0x0, 0x18, 0xff0000]}]}, 0x2, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_disconnect(r1) syz_usb_connect$uac3(0x6, 0x116, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x3, 0x1, 0x9, 0xe0, 0xfc, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x56, 0x80000000}, [@mixer_unit={0x5, 0x24, 0x5, 0x3, 0x7}, @cluster_info_segment={0x6, 0x20, 0x7, 0xbe, 0xfe}, @processing_unit={0x1d, 0x24, 0x9, 0x1, 0x1, [0x0, 0x3, 0x3, 0x1, 0x3, 0x2]}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x204, 0x1, 0x4, 0x17, 0x16b6, 0x16, 0x3c9, 0x8}, @power_domain={0x10, 0x24, 0x10, 0xfa, 0x0, 0x7ff, 0x56, "5893511449c421"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x408, 0x4, 0x1, 0x6, {0xa, 0x25, 0x25, 0x0, 0x1, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0xb, "dabb9e", '/'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xb2, 0x1, 0x7, "7d35e21b412fd1d188"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x0, 0x0, 0x6}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x7, 0xfc}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0xc, 0x3, "eb38a9cb8968e650"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0xff, 0x61}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x7, 0x3, {0xa, 0x25, 0x25, 0x84b, 0x9}}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0xc, 0x6, 0x40, 0x10}, 0x5a, &(0x7f00000006c0)={0x5, 0xf, 0x5a, 0x6, [@generic={0x29, 0x10, 0xcdc0f00f030ca635, "174b26ef88d854629cc9f267c1e976ff38b434234902be5ee78d39c5e61f849ba097a918cf0a"}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "3aa9398a38a9c50643f574689c5f6f0f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7, 0x8, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0xf, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x9, [{0xa, &(0x7f0000000740)=@string={0xa, 0x3, "5b167d5d69b1f88b"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x436}}, {0xab, &(0x7f00000007c0)=@string={0xab, 0x3, "597bad3d2dfeb57a612240db976cb09bf168b46c4b4c30c5cbfb7124942d79262338f11608f1a4e4c415b26ae3e9b8fa4c1074350f0b284c44a689fa750b27998cc1876a95a888dfefce3cf304e25fd027501883c4db76b93245d44c2c97936f28ba3f60d7cb5a97f3067e9f31ac87da19cd2625369d16a94a2dfa2640eeeca4817c3bc0ec211172219170c20911ef02a94ff8e614d2f54733a7551c2501cb71635bcd1b58ea504e9a"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x43, &(0x7f0000000900)=@string={0x43, 0x3, "653c4597afbfd6101adf17a1402820b740cbb15a3dccc45747b7117f6a0f59bfbfea74c639efef409b848557a820076f07eb7c345fecc38f7f576b62ea3f446f2b"}}, {0x89, &(0x7f0000000980)=@string={0x89, 0x3, "1b8cd92b7b9155d478ed2e460213763709d2794ca4aa339795a25212ad1f07fe48c1cf924a1ad6a25c25d61404ad10835bd1a8dae8a926f1543cafc7f38639eb5165ac1c7466803f329e055b4f77cf5f838d17594ac386247ff60cbd334fcd9879f3da806a14a5768bdc97dc72d749aa96a7965711a6d6e543e217463c3fc08b0c5ae0b925985a"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x426}}, {0xe1, &(0x7f0000000a80)=@string={0xe1, 0x3, "c9babe2d007fee5dc51658a0df7d45e542fcb642856ae81673276e5f58f5dc35c56e86e834b9ab852e27a317e0b7845e3153c5bd22bb06006eb0623520871438ace3d17f62299f20eff4ffd4a43f8b233fd4f0d6668a94f56056948d9643a9c1d4641a3bb82db0fe6c4295b5bf97968996c34cdfca879fb37f380ce928778d25a6356a6d5f4d40ee7e96bd12c6b04e37cf8ff05d1afb6685366126f22eeacb3f318ae2a9eab066db4a47f6f806822c7f3aaa47a9dae7205b6eed2309049655025e370177a2d473d74bc9cdad5d28da30cb4457ff3de747bfd2a42ae3ebbf00"}}]}) syz_usb_connect(0x0, 0x3d0, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x3a, 0x6d, 0x45, 0x40, 0x84b, 0xa001, 0x2b8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3be, 0x2, 0x2, 0x1, 0x60, 0x3, "", [{{0x9, 0x4, 0xe4, 0x0, 0x7, 0xe9, 0xb2, 0xf0, 0x6, [], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x1e, 0x0, 0xd8, [@generic={0x32, 0x22, "c75b7d05540795da890e26ee2865d97d0f28d2e6913f066f7d4b74c27057702b8a98e119441530b9e825bf33370210c0"}, @generic={0xdd, 0x11, "2f0bc74a5924ec5f8062e094a0cd4690ebeb02319725e07a79285ed9fa080fd902357a3ac52bcd19fcb7fb2adc03586b46027feb825ddb040feb345e67133dfcc4fbc508450eccfd9344156917947203b4c8fe156854dbe0f5d1e68e77d46389a6679a7185ec923e40ca38db72ed1a5a59910a64b69a1c101fb9d1f09fe6a77fa3c5a1716510cee31dbec087083eed7efbbb9bde27d41ea2d38951d04fdfe25907fc9a65c61a14270a3f458cce423b22863f5e7802a5c9a5443356db6f33cf358d74c304a90b145cca2768d8cd5f4ef4e7175625e71fabc95502f5"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x51, 0xd6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x40, 0x29, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0xf0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x8}, @generic={0x63, 0x1, "d45bf0e4bd0411576a46d5977f6d9aa7b22b2852d498a0c10860d0c068f653d884b03e4624cd7421dc1635489430ad9d579c4ffb68e08667ca9a618f332fef0169f369c5854128544543474acdb8c3489ab3b10dd41e07f251f34ecb0ceb08035f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x9, 0x5b, [@generic={0x76, 0x23, "91b20d388c7eead87b902abcc836ec95ef2836c30a620e05f19cbeec1e8431511f8e6318d181dd53b9af1ea89b4a16e87b296237c08f622ce9898b308f6034c35e8b0e94f062356044bd1c226863fa94c46a9b2e5d403981501344e40c3abcfd117aee90a76cdc864da779296715810402f69ddd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x40, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xa, 0xab, 0x0, [@generic={0xa1, 0x24, "a09dd855326f5d64abd36bdfc5bded9ad097146c7e5119d243ebc1096a9ee3d303d7d8990bca3c9841a1eaaa5e8c16d563700c7fafda15e7f1adca15437ed4ee2fbfcbdd62db215ad001fb8cc70422f76b507e2512affcb11bb645ed091e7fdc57ffe8d8023ad95ae7fe9d40bcc248bb7c7ed8c98ca81d4f7f6e7b44812f658622bff92f878fd3b37c5b4c70b72fccd40685737b9bb7b1b99666b49321e51b"}]}}]}}, {{0x9, 0x4, 0x87, 0x0, 0x2, 0xbb, 0xa9, 0xff, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "60d32af1fa"}, {0x5, 0x24, 0x0, 0x4b}, {0xd, 0x24, 0xf, 0x1, 0x897, 0x5, 0x7, 0x2}, {0x6, 0x24, 0x1a, 0xfff7, 0x8}, [@acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0xe, 0x8, 0x400, 0x2, 0x6b, 0x5, [@generic={0x80, 0x22, "160fcab4639adb92efa35bf9552d8c407cd8a7bc418bda77b0ccb1cb61c8ecc45f73c0da4f242ad6343d9e12a1a9d2ab18b9907bb247e160e06590de6894796c38769ed81b9805b3af49337ade2ccc57c9b4ab16b3d932b8cc3397eead7cdc2275e8d41164b29f6131b45feca5939ef16a0a080d9e0067ec9eed85e70a89"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0xe, 0xfa}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000640)=ANY=[]) 2.611764751s ago: executing program 0 (id=1296): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) setregid(0xee00, 0xee00) r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') setgid(0x0) (async) fchdir(r1) (async, rerun: 32) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) (async, rerun: 32) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x76b6c76c2b62b365, 0x0, 0x2d}, 0x10) (async) r4 = socket(0xa, 0xa, 0x529) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x90) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f00000000c0)=0x3be, 0x4) (async, rerun: 32) mmap(&(0x7f0000041000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r9, 0x5000aea5, &(0x7f0000000180)={[0x0, 0xc00, 0xffff, 0x18, 0x0, 0xfff, 0x3, 0x5, 0x6, 0x8, 0x3, 0x2, 0x5, 0x8, 0x46360325, 0x7fff, 0x100, 0x3, 0x3, 0x5, 0xce, 0x3, 0x3, 0x1, 0x4, 0xfffffffc, 0x80000001, 0x0, 0x8000, 0xfffffffc, 0x2, 0x8, 0xfffffff2, 0x3, 0x80000000, 0x9, 0x1, 0x3, 0x5, 0x2, 0x1, 0x1, 0x8, 0xf, 0xed4, 0x0, 0x8000, 0xfffffff7, 0x8, 0xffffffff, 0x2, 0x7fff, 0x2, 0x41, 0xfff, 0x7, 0x1, 0x0, 0x2, 0x4, 0x6cc, 0x1000, 0xe227, 0x9, 0x5, 0x2, 0x4, 0x7, 0x8b80, 0xfff, 0x5a, 0x3, 0x20, 0x4, 0x2, 0x3, 0x20, 0x6, 0x8, 0xfffffffa, 0x3012f1d9, 0x2ac, 0x401, 0xb, 0x1, 0x2, 0xe0, 0x5, 0xfe, 0x100, 0x5, 0x2, 0x4, 0x9, 0xd95c, 0x80000000, 0x8, 0x100, 0x2, 0x8, 0x8, 0x1, 0x587, 0x9, 0x80000001, 0x0, 0x7, 0x9, 0x8, 0x200, 0x6, 0x2, 0x38, 0x101, 0x7, 0x1, 0xfffffff4, 0x4000fff, 0xffffffff, 0xfffffffc, 0x17e4, 0x53e, 0xf1, 0x9, 0x4, 0x1, 0xb0, 0xfffffffc, 0xba64, 0x4, 0x4, 0x6, 0x10, 0x3f8, 0x1, 0x6, 0x3, 0x8001, 0x3, 0x10, 0x9, 0x40000000, 0x8, 0x8e, 0x5, 0x3, 0x3, 0x0, 0x6, 0x0, 0x14000000, 0x4, 0x8, 0xffffffff, 0x4, 0x7, 0x2, 0x382c57e1, 0x3, 0x1, 0x1000, 0x65a2c517, 0x6, 0xf4, 0x14000000, 0x4, 0x3, 0x80000001, 0x5, 0x7, 0x4, 0x8, 0xe56, 0x5, 0x5, 0x8, 0x7fff, 0x2e, 0x2, 0x7, 0x100, 0x7fff, 0x3473, 0xd, 0x7, 0xe, 0xb2d, 0x101, 0x8, 0x1, 0x0, 0x1, 0x5, 0x8082, 0x0, 0x8, 0x2, 0x3ff, 0x8, 0xa, 0x1, 0x3, 0x3, 0x3, 0x1, 0xd52b, 0x96, 0x6, 0x5, 0x7ff, 0x7ff, 0x9, 0x7, 0x4, 0x3, 0x6, 0x81, 0x8000, 0x3, 0x2, 0xbd1, 0x2, 0x0, 0xfffffff9, 0x8, 0x101, 0xff, 0xd0, 0x8, 0xcd72, 0x7ff, 0x1e7a, 0x66c, 0x10001, 0x9, 0x3, 0x4, 0x0, 0x6, 0xffff6e13, 0x5, 0xffffffff, 0x3, 0x81, 0x9, 0x6, 0x245296a7, 0x7, 0x8, 0x108, 0x7, 0x10001, 0x7, 0x4, 0x3f4, 0x9, 0x68, 0x7fffffff, 0xfffffffb, 0x6, 0x80, 0xffffffff, 0x4, 0x3, 0x9dc6, 0xffffffd3, 0x1, 0x3ff, 0x9, 0x74, 0x4, 0x5, 0x101, 0x7ff, 0x4000000, 0x1000, 0x15, 0x7, 0x0, 0x5, 0x5ee, 0x7, 0x5, 0x7f, 0x4, 0xdb0, 0x8, 0x9, 0x2, 0x3, 0x5, 0x9, 0x1, 0x8721, 0x6, 0x4, 0x6, 0x0, 0x8, 0x8, 0x0, 0xffff, 0x101000, 0x6, 0x1, 0x6000, 0xd1bb, 0x3, 0x8000, 0x6, 0x3, 0x4, 0x6, 0xd4, 0x7fff, 0xca3, 0xfffffff4, 0x2, 0x10, 0xdaa5, 0x9e22, 0x1, 0x6436, 0x9893, 0x1, 0x35, 0x1, 0x1, 0x1, 0x1f7b, 0xf, 0x9b98b4c, 0x6, 0x2, 0x9, 0x81, 0x1, 0xfffffffd, 0x7, 0x100020, 0x2, 0x3, 0xffff0000, 0x612, 0x8, 0x3, 0x5, 0x3, 0x9, 0xd0, 0x5, 0x3, 0x6, 0x3, 0x7fff, 0x2, 0x6, 0x3ff, 0x8, 0x9, 0x5, 0x5, 0x7, 0x8, 0x6, 0x9, 0x0, 0x3, 0x1, 0x0, 0x80, 0xc, 0x2, 0x110a, 0x0, 0x9, 0x8, 0x8, 0x3, 0x2, 0x3, 0x1ff, 0x9, 0x2, 0x800, 0x5, 0x8, 0x86cb, 0x4, 0xfff, 0x3, 0xfffffff8, 0xc, 0x5, 0x1, 0xffff, 0x6b2, 0x200, 0x3ff, 0x3, 0x4, 0x913, 0x101, 0x401, 0x2, 0x83, 0x1, 0x100000, 0x1, 0x142, 0x3, 0x8, 0x7, 0x9, 0x6, 0x400, 0x2a, 0x6, 0x9, 0xfffffffc, 0x7, 0x3, 0xf, 0x3, 0x7, 0x1, 0x494, 0x1e7b9b7, 0x1, 0x8, 0x6, 0xffff, 0x6, 0x6, 0x3, 0x101, 0x6, 0x214, 0x472cb066, 0x2, 0x4, 0x7, 0x2, 0xe5, 0x60000000, 0x3, 0x40, 0x205, 0x7, 0x1000, 0x8, 0x38b, 0xfff, 0x7, 0x3, 0x9, 0x71, 0x2, 0x1, 0x4, 0xe, 0x6, 0x3, 0x5, 0xa, 0xb, 0x5, 0x80, 0x0, 0x2, 0x9, 0x6, 0x1, 0x4, 0x401, 0x4, 0x79, 0x2, 0x7, 0x7, 0x7fffffff, 0xfffff801, 0xfff, 0x8, 0x0, 0xffffff81, 0xd, 0xe70, 0x1, 0x7, 0x3, 0x5, 0x0, 0x3ff, 0xcc1, 0x2, 0xfffffc01, 0x9, 0x2, 0x191, 0xfd65, 0x7, 0x8120, 0x7, 0xb928, 0x3, 0x5, 0x40, 0x8, 0x4b, 0x34b, 0x1000, 0xd2fd, 0x6, 0x5, 0x2, 0x7, 0x7, 0x401, 0x3, 0x7ff, 0xfc, 0x1, 0x2, 0x4, 0x401, 0x7, 0xa9, 0x0, 0xff, 0x3, 0xd, 0x1, 0x0, 0x0, 0x3, 0x3, 0x7, 0xffffffff, 0x2, 0x1, 0xe, 0x24f, 0x8, 0x7, 0x5, 0xc1c1, 0x7f, 0xff, 0x8, 0x9, 0xffffff18, 0x1, 0x5, 0x6, 0x7, 0x1, 0x5, 0xd3a9, 0xff, 0xf10, 0x1000, 0x8, 0x6, 0x8, 0x3, 0x2, 0xfffffff8, 0x5, 0x1, 0x80000000, 0x4, 0x4, 0x7fff, 0xffff3e69, 0x2, 0xc, 0x3, 0xb62, 0xfffffff2, 0x10, 0x9, 0x3, 0x42c, 0x101, 0xb, 0x5, 0x9, 0x8bd9, 0x81, 0x0, 0x8001, 0xe9, 0xfffffffb, 0x14, 0x1, 0x8, 0x3, 0x5, 0xa87, 0x9, 0x5, 0x1, 0x1ff, 0x2, 0x25c, 0x3, 0x9, 0x800, 0xfffff6f3, 0x3, 0x4, 0x9, 0x3, 0x68dc, 0xb, 0x0, 0x6, 0x8, 0x1, 0x1, 0x8, 0x6, 0x7, 0x17, 0x101, 0x4000000, 0x200, 0xffffffff, 0x543, 0x1, 0x8, 0xb, 0x7, 0xaec3, 0x8, 0x3, 0x3, 0x0, 0x9, 0x3, 0x0, 0x6, 0x200, 0x6, 0x5, 0xd, 0x5, 0x6f9a029a, 0x9, 0x6, 0x4, 0x3, 0x1, 0x6, 0x0, 0x607, 0x9, 0x1, 0x0, 0x7a63, 0x0, 0x77fdbc97, 0x3b3a, 0xffffffff, 0xb, 0x9, 0x10000, 0x0, 0xc, 0x1, 0x67b, 0x1074000, 0x5, 0xa, 0x200, 0xb, 0x2, 0x6, 0x0, 0x8, 0x101, 0x0, 0x1, 0x6, 0xffffffff, 0x5, 0x4, 0x3, 0x3, 0x6, 0x8, 0x0, 0xce, 0x2, 0x6, 0x1000, 0x7, 0x9, 0x0, 0x5, 0x5, 0x3, 0x8, 0x7ff, 0xffff, 0x3, 0xb, 0x3, 0x3e6ff4, 0x2, 0xcf2b, 0x6, 0x5a, 0x2, 0x5, 0xf52c, 0x5, 0x0, 0x0, 0x1, 0x9, 0x3ff, 0x4, 0x2dd18db8, 0xfffffffd, 0x7fffffff, 0x7fff, 0x8, 0x97, 0x10001, 0x2, 0x101, 0x3, 0x4ecf, 0x9, 0x5, 0x10000, 0x2, 0x5, 0x4b31f17c, 0x5, 0xf5, 0x8001, 0x6, 0x8001, 0x3, 0x8, 0x800, 0x3, 0x1, 0x7f, 0x3, 0x7, 0x1, 0x2, 0x2, 0x9, 0xf, 0xc508, 0x9, 0x8, 0x10001, 0x3b60, 0x7, 0x8000, 0x4, 0x80000000, 0x7, 0x6, 0x8, 0xffffffff, 0xf, 0xfffffffa, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x0, 0x0, 0x10000, 0x1, 0x9, 0x2, 0x7fffffff, 0x8, 0x4, 0x4, 0x40, 0x2, 0x3, 0x1, 0x80000000, 0xcb, 0xffffffff, 0x5, 0x5f46ee24, 0xfffffff6, 0x2004, 0x0, 0x0, 0x0, 0x200, 0x2, 0x9, 0x6, 0x8, 0x6, 0xfffffffc, 0x4, 0x2, 0x1, 0x8, 0x5, 0x8, 0x80, 0x10, 0x0, 0x8000, 0x6, 0xa, 0x9, 0x0, 0x80000001, 0xffffffff, 0x7, 0x5, 0xfffffff7, 0x5, 0x7, 0x7, 0x6, 0xffffff00, 0x896, 0x8, 0x80000000, 0x1, 0xfffffffb, 0xfffffffb, 0x88, 0x0, 0xb, 0x9, 0x3, 0xfffffff3, 0x3, 0x80000001, 0x4, 0x2, 0xc9f, 0x3, 0x0, 0x9, 0x6, 0x8, 0xfffffffe, 0x0, 0x8, 0x6, 0x3, 0x6, 0x7, 0x3, 0x8, 0x1, 0x5, 0x101, 0x8, 0x1000, 0x8, 0x9, 0x6, 0x7fffffff, 0x11400000, 0x2, 0x9, 0x0, 0x9, 0x1, 0xfffffc01, 0x401, 0x0, 0xfffffffc, 0x200, 0x0, 0x9, 0x9, 0x6c79c321, 0x10, 0x5, 0x9, 0x5, 0x1, 0x3, 0xed0, 0x0, 0x7f, 0x0, 0x2, 0x5571, 0x5, 0xffff2367, 0x6, 0x7c90, 0x417d, 0x460, 0xa, 0x8c8, 0x1, 0xd8, 0x101, 0x4, 0x4, 0x8000, 0x10, 0x4, 0x5, 0x1a5f, 0x400, 0xfffffffc, 0xea7, 0x4, 0x6, 0x4, 0x3, 0x10001, 0x3, 0x3, 0x9, 0x1, 0x9, 0x3, 0x8001, 0x8, 0x9, 0xe, 0x6, 0x578c, 0x4, 0x8000, 0x6, 0x8, 0x1000, 0x7, 0x7, 0x8000, 0x6, 0x8000, 0x3, 0x6, 0x2, 0x5, 0x4b0b, 0x3, 0xb, 0x2, 0x7, 0xe8, 0xee1, 0xb, 0x0, 0x87, 0x7fffffff, 0x3ff, 0x8, 0xfffffff9, 0x10200000, 0x2, 0x9, 0x10, 0x10, 0x0, 0x6, 0x7, 0x81, 0x5, 0xa36, 0xb6, 0x2354, 0x36cb, 0x7, 0x3, 0x669c, 0x3, 0x0, 0x6, 0x0, 0x3, 0xd3, 0x8001, 0xf30, 0x5, 0x4f6, 0x9, 0x3, 0x8, 0x3, 0x3, 0x8, 0x5, 0xfffffffe, 0x9, 0x1, 0x372f, 0x60, 0x6, 0x2, 0x200, 0xfffffff9, 0x8000, 0xf, 0x4, 0xa, 0x9142, 0x8001, 0xfffffffa, 0xc95b, 0x5, 0x2, 0x9, 0xc3, 0x4, 0x5]}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000080)=0x508, 0x4) (async) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) syz_io_uring_setup(0x21c0, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000000)) (async) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.529317554s ago: executing program 0 (id=1297): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003020000ff2505a1a440000102030109025c0002010200f70904000001020d0000052406000105240080000d240f0105000000080004000306241a080011090581030004fc00ff0904010000020d00000904010102020d0000090582022200010f0009055d03020002097a"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x15, &(0x7f0000000300)=ANY=[@ANYRES16=r0]}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20c0c1, 0xc02d6bb7f4f3a0dd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000008) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') 2.05328713s ago: executing program 2 (id=1300): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x501801, 0x0) ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f0000001740)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x8001) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x1}, 0xc) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6(0xa, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r7], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000540)=0x16, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x34, r3, 0x301, 0x70bd2b, 0x25dfdbfb, {0x21}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20004814) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x208, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x6e24, 0x0, 0x2, 0x0, 0x20, 0x0, r9, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x2, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6, 0xffffffff}, 0x70bd30, 0x0, 0xa, 0x2, 0x9}, [@algo_aead={0x115, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x648, 0x60, "fb695c1c2b0adabc399d03ca99760e2e2d4ffe240c8b474b404667cffc50ebe6142bd42a244765952f7ce3fb02f9752f80aeb58320e9059ca1a2d203ff772ca6e1e9a1ab99e531a18275460fb51a326088004ec71b96ddfc930b77189b0b1e6f912102ebaa0793ad0b56857ec2bdf299b7e1e593706c74fc7e5fb8ea61584ba0f1ae1307e697ddc669b0c51232d95c6ec6450c4286205c60dacef335c8bcb23f17e55e11a6b745b183197f76c3d07e5e002ecd0f1a03d291828d2989ae1504c9f876c3e2a78147a5a7"}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 1.517648748s ago: executing program 4 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x3a, 0xc, "03a6dbffcedb76197f92a6c5097187f8e7958c40c553edb714242523dc6315af3b278cd34beec8ec914932484c6bc67e5c0f79a62d09"}]}, 0x64}, 0x1, 0x0, 0x0, 0x200008c0}, 0x20000001) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000180)={0x6, 'veth0_to_team\x00', {0x7}, 0x933}) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000002380)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10, &(0x7f0000002300)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="65629477084eac61cfc6c352e0b3e0", 0xf}, {&(0x7f0000002280)="6761cf140e9c9c9e1b0329e277e749d3b26fae649e3494252194d475fa5a29b717ae3bb73125b1c976a4e1a529925b08eb07d4b47fa186e63505f0eaa561d0878dfe12260cc208bfe94a50454f3f7f97205897dadadde5ceb0560807294b751ac0", 0x61}], 0x4, &(0x7f0000002340)="241b15df", 0x4, 0x20000000}, 0x24000000) (async, rerun: 32) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000023c0), &(0x7f0000002400)=0x4) (rerun: 32) msync(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000002440), 0x9, 0x2bc9dfd2d11182a) r4 = dup(r3) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000002480)) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1c) (async) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f00000024c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async, rerun: 64) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000002500)) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000002540)=@usbdevfs_disconnect={0x6}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000026c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/252, 0xfc, 0x0, &(0x7f0000002680)=""/53, 0x35}, &(0x7f0000002700)=0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000002900)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002780)={0x118, 0x2, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2947}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1dc7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r2, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000002980)={0x444de01b, r0, 'id1\x00'}) (async) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000002a00), 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = open(&(0x7f0000002a40)='./file0\x00', 0x101040, 0x6c) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000002a80)={0x3, 0x1, 0x11}) (async, rerun: 64) accept4(r5, &(0x7f0000002ac0)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002b40)=0x80, 0x0) (rerun: 64) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000ff9000/0x2000)=nil) (async) pipe2$9p(&(0x7f0000002c00)={0xffffffffffffffff}, 0x81800) r9 = eventfd2(0xa, 0x1) mount$9p_fd(0x0, &(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0), 0x80000, &(0x7f0000002c40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}, {@access_user}, {@debug={'debug', 0x3d, 0x6}}, {@aname={'aname', 0x3d, 'syz0\x00'}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) 1.515919038s ago: executing program 2 (id=1305): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYRESHEX], 0x1c}], 0x1}, 0x4080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x144, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2bd, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x3, 0x0, 0xd, 0x4, 0x12a0, 0xc6, 0x1, 0x7, 0x8, 0x7, 0x81, 0xb6a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0xbe, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400004, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0x9, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x0, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ca, 0x4, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x80000001, 0x5, 0x5, 0x491, 0x7fffffff, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x6, 0x8000, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x0, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e59, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x203, 0x5, 0x1], [0xa772, 0x3, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x7f, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0xfa, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8d, 0x7fffffff, 0x9, 0xc, 0x32d, 0x0, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x1, 0xfffffff9, 0xd, 0xc, 0x463f, 0x7fffffff, 0x7fffffff, 0x8006, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)}], 0x1, 0xe, 0xff, 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000080, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x90, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x37, 0x7, {0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xfd, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x5bbe}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) (async) read$FUSE(r5, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000003180)={0x20080522, r8}, &(0x7f00000031c0)={0x5765, 0x1, 0x6, 0x2939, 0xf}) 1.482114929s ago: executing program 4 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x3c, r2, 0x201, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x25}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x1c, 0xe, [@peer_mgmt={0x75, 0x16, {0x1, 0x6, @val=0x800, @void, @val="644dfc0e7dbbc750ce015c527b581d19"}}]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x5}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040) 1.413253212s ago: executing program 4 (id=1307): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="cf23280000000e17210000000000000000004a0004007729e2000000"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r3, r4+10000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0xfffffffd, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = dup2(r6, r6) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4}}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r9, 0x7, 0x4) sendmsg$netlink(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0xe1742, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r10, 0xc65c9000) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x10}}, 0x20000800) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000001980)) syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090286000201df40010904000001020d00000524060001052400da8efbe00f01fcffffffba00b4000906241abcf806152412ff00a317a88b045e4f01a607c0ffcb7e392a1524120100a317a88b045e4f01a607c0ffcb7e392a090581031000dd05030904010000020d00000904010102020d000009058202ff0318090909050302080102060b"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 1.303537536s ago: executing program 2 (id=1308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103780, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0) write(r3, &(0x7f0000000340)="64c25baba3", 0x5) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'wg2\x00', 0x112}) 1.053757484s ago: executing program 0 (id=1309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x80, 0x700, 0x81, 0x3, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=@flushsa={0x228, 0x1c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x32}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e20, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @extra_flags={0x8, 0x18, 0x3}, @offload={0xc, 0x1c, {r1, 0x1}}, @policy_type={0xa}, @replay_thresh={0x8, 0xb, 0x7}, @algo_comp={0xce, 0x3, {{'lzs\x00'}, 0x430, "93936c641d0df2a821e2e1eeab4c805fb986ca49a3f760f45357eda18953edcf6c1aba7c217105414a744dba7d1a95977d2da31233eadcbdbeeb93e73c99edc522af0103e15266d786134dc3ca2e4c1d5694aaa792dc922e7854794e4355137c32af68e5764e33a063ad49d89a23107a1f93377fa4b94c6b2652d49822a2634dd8cadd362de4"}}, @tfcpad={0x8, 0x16, 0x9}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x29}}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@remote, 0x4e21, 0x6, 0x4e20, 0x9, 0xa, 0x0, 0x0, 0x2c, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x28000000, 0x4e, 0x1, 0x2e3, 0x400, 0xfffffffffffffffe, 0xa}, {0x0, 0x9, 0x4, 0x400}, {0x3, 0x8, 0xc}, 0x70bd26, 0x0, 0x2, 0xe8a92f15277b2aa7, 0x8, 0x8}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mkdir(&(0x7f00000004c0)='./file0\x00', 0x100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x22600, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'gre0\x00', r1, 0x7800, 0x8, 0x1, 0xfffffffb, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x64, 0x0, 0x8, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x21, 0x1, 0xf, [{@rand_addr=0x64010102, 0x4}, {@loopback, 0x80}]}, @rr={0x7, 0xb, 0x9e, [@empty, @dev={0xac, 0x14, 0x14, 0x21}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendfile(r3, r0, &(0x7f0000000600)=0xfffffffffffffff9, 0x1) r5 = socket(0x3, 0xce9ddb54d497a25, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000700)={&(0x7f0000000640)=""/189, 0xbd}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3f) removexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@random={'user.', '\x00'}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000007c0)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r6, &(0x7f0000004740)=[{{&(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/14, 0xe}, {&(0x7f00000008c0)=""/25, 0x19}, {&(0x7f0000000900)=""/177, 0xb1}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/77, 0x4d}], 0x5, &(0x7f0000000b00)=""/20, 0x14}, 0x1}, {{&(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/67, 0x43}, {&(0x7f0000000d40)=""/18, 0x12}, {&(0x7f0000000d80)=""/49, 0x31}], 0x4}, 0x101}, {{&(0x7f0000000e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/175, 0xaf}, {&(0x7f0000000f40)=""/75, 0x4b}, {&(0x7f0000000fc0)}], 0x3, &(0x7f0000001040)=""/151, 0x97}, 0xd}, {{&(0x7f0000001100)=@nl=@unspec, 0x80, &(0x7f0000002440)=[{&(0x7f0000001180)=""/133, 0x85}, {&(0x7f0000001240)=""/214, 0xd6}, {&(0x7f0000001340)=""/224, 0xe0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4, &(0x7f0000002480)=""/134, 0x86}}, {{&(0x7f0000002540)=@ethernet={0x0, @local}, 0x80, &(0x7f00000025c0), 0x0, &(0x7f0000002600)=""/30, 0x1e}}, {{&(0x7f0000002640)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/22, 0x16}, {&(0x7f0000002700)=""/176, 0xb0}], 0x2, &(0x7f0000002800)=""/19, 0x13}, 0x4}, {{&(0x7f0000002840)=@rc={0x1f, @none}, 0x80, &(0x7f0000003c80)=[{&(0x7f00000028c0)=""/110, 0x6e}, {&(0x7f0000002940)=""/232, 0xe8}, {&(0x7f0000002a40)=""/196, 0xc4}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/7, 0x7}, {&(0x7f0000003b80)=""/7, 0x7}, {&(0x7f0000003bc0)=""/185, 0xb9}], 0x7, &(0x7f0000003d00)=""/194, 0xc2}, 0x9}, {{&(0x7f0000003e00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003e80)=""/9, 0x9}, {&(0x7f0000003ec0)=""/173, 0xad}, {&(0x7f0000003f80)=""/98, 0x62}, {&(0x7f0000004000)=""/201, 0xc9}, {&(0x7f0000004100)=""/93, 0x5d}, {&(0x7f0000004180)=""/245, 0xf5}, {&(0x7f0000004280)=""/153, 0x99}, {&(0x7f0000004340)=""/1, 0x1}], 0x8, &(0x7f0000004400)=""/196, 0xc4}, 0x1000}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004500)=""/239, 0xef}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/146, 0x92}, 0x5}], 0x9, 0x40000000, 0x0) socket$inet6(0xa, 0x5, 0xbc) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000004980)={0x3, 0x1}) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000049c0)={0x2c, 0x2a, 0xa, 0x1a, 0x2, 0x3ff, 0x2, 0x60, 0xfffffffffffffffe}) ioctl$XFS_IOC_FSGEOMETRY(r6, 0x8100587e, &(0x7f0000004a00)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000004b00)={r7, 0xa2, 0x9, 0xfffffffffffffffc}) mknodat(r9, &(0x7f0000004b40)='./file0/file0\x00', 0x100, 0xec40) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000004c80)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004bc0)={0x54, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x600}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x68}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x54}}, 0x50) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_GETPARENTS(r10, 0xc028583e, &(0x7f0000004d80)={{[0x5, 0x0, 0x5, 0xffffbcd3]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000004cc0)=[{{@_ha_fsid={[0x9, 0xc]}, {0x4, 0x2, 0x7, 0x1}}, 0x4bf4, 0x0, '\\-\x00'}, {{@_ha_fsid={[0x7ff, 0xc65d]}, {0xa, 0x1, 0x6, 0x89}}, 0x100, 0x0, 'tunl0\x00'}, {{@align=0x3, {0x80, 0xffff, 0x3, 0x8}}, 0x1, 0x0, '@,\x00'}, {{@align=0x5, {0x7, 0x17, 0xfe3b, 0xffff}}, 0xff, 0x0, '\x00'}]}) mount$9p_fd(0x0, &(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00), 0x20800, &(0x7f0000004e40)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_readahead}, {@access_user}, {@cache_fscache}, {@access_uid={'access', 0x3d, r2}}], [{@obj_type={'obj_type', 0x3d, '@$'}}]}}) read(r5, &(0x7f0000004f00)=""/39, 0x27) ioctl$KVM_RUN(r9, 0xae80, 0x0) 753.496304ms ago: executing program 4 (id=1311): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000001, 0xffffffffffffffbe, 0xe9b, 0x4, 0x20000007, 0x7f, 0x44233, 0xa, 0x3ff, 0x2, 0x80002000000ffff, 0x1005, 0x9, 0x403, 0x100000, 0xfffffdfffffffffd], 0x4000, 0xc2346}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000002c0)) (async) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000002c0)) 585.3552ms ago: executing program 4 (id=1313): write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'aly\x80\xb0\xce\xb2\xc4\x17(2low\xa6ot\x00\x00r', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x4e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300"], 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x40, 0x940, 0x1001, 0xe, 0x1043, 0x200000000006, 0x0, 0x71e, 0xf7fffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) 531.248362ms ago: executing program 1 (id=1315): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460300cf02810000000000000002003e00f9ffffffd80100000000000040000000000000008b00000000000004330d00000500380001", @ANYRES32=r0], 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xe000, 0x3, 0x8, 0x3, 0x0, [{0x7, 0x1, 0x7, '\x00', 0xe}, {0x9, 0x2, 0xa, '\x00', 0xff}, {0x6, 0x52, 0x3, '\x00', 0x2}, {0x70, 0x9, 0xf7, '\x00', 0x98}, {0x0, 0x3, 0x2, '\x00', 0x4}, {0x8, 0x5, 0x7, '\x00', 0x5}, {0x3, 0x6, 0x1, '\x00', 0xa}, {0xf0, 0x3c, 0x2, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x60}, {0x5, 0xbb, 0xd1, '\x00', 0x5}, {0x3, 0xc, 0xf8, '\x00', 0x40}, {0x5, 0xf, 0x9}, {0x78, 0x9, 0x2, '\x00', 0xb}, {0x9, 0xc3, 0x2, '\x00', 0x5}, {0x0, 0x2, 0x2, '\x00', 0xf7}, {0x7, 0x2, 0x2, '\x00', 0x1}, {0x7f, 0x0, 0x1, '\x00', 0x1e}, {0x2, 0xff, 0x1, '\x00', 0xb}, {0x8, 0x10, 0x5, '\x00', 0x66}, {0x9, 0x0, 0x2, '\x00', 0x9}, {0x2, 0x9, 0x4, '\x00', 0x8}, {0x4, 0x1, 0xc6, '\x00', 0x6}, {0x5, 0x2, 0x2, '\x00', 0xae}, {0x8, 0x9, 0x1, '\x00', 0x7}]}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x0, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x100000021, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8004], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="6c0000001900010000000000fbdbdf2d1d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000080005800400ce80"], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 405.325116ms ago: executing program 2 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000440)=""/139, 0x8b}], 0x6}, 0x9}], 0x3, 0x12040, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/40, 0x28) 403.657006ms ago: executing program 1 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5001000010001307fefffffffcdbdf25ac1414aa00000000000000000000000020010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000fe32000000200100000000000000000000000000000200000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000edffffffffffffff0400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002cbd700000350000020004005000000000000000600012006d6f727573313238302d737365320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000006000"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0x2000, 0x1, 0x55985931, 0x1, 0x0, [{0x4, 0x10, 0x7, '\x00', 0x3}, {0x3, 0x58, 0xf, '\x00', 0x89}, {0x9, 0x5, 0x7, '\x00', 0x4}, {0x7f, 0x5, 0xf8, '\x00', 0x8}, {0xda, 0x7, 0xf, '\x00', 0xf9}, {0xfa, 0x2b, 0x2, '\x00', 0xb}, {0x7, 0x8, 0xff, '\x00', 0x92}, {0x1, 0x8, 0x8, '\x00', 0x2}, {0x40, 0x2, 0x7f, '\x00', 0xe}, {0x1, 0x54, 0x7, '\x00', 0xff}, {0x4, 0x0, 0x5, '\x00', 0x7}, {0xff, 0x1, 0x4, '\x00', 0xfc}, {0xf9, 0x9, 0x9, '\x00', 0x3}, {0x8, 0x3, 0x4, '\x00', 0x3}, {0x2, 0x5c, 0x3, '\x00', 0x7}, {0x8, 0x8, 0x9, '\x00', 0x7}, {0x7, 0x9, 0x1, '\x00', 0x7}, {0x5, 0x3d, 0x5, '\x00', 0xd3}, {0x0, 0x3, 0x8, '\x00', 0x5}, {0x2, 0xff, 0x1, '\x00', 0x5}, {0x7, 0x5, 0x9c, '\x00', 0x3}, {0x4, 0xe2, 0x2, '\x00', 0x6}, {0x4, 0x7, 0x80, '\x00', 0x21}, {0x9, 0x0, 0xf, '\x00', 0x3}]}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x6) 403.425846ms ago: executing program 2 (id=1318): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) (async) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) setuid(0xee01) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) 359.640968ms ago: executing program 1 (id=1319): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001d40), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000001d80)={0x1}) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x27) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) creat(&(0x7f0000000180)='./file1\x00', 0x80) (async) mount$cgroup2(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x250430, &(0x7f0000000040)={[{@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}]}) fcntl$setstatus(r2, 0x4, 0x6000) (async) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x7fe, @mcast2, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}, 0x4000) 296.417ms ago: executing program 1 (id=1320): clock_getres(0xa, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x94) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 241.335412ms ago: executing program 1 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="99742bbd7000fbdbdf2515"], 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 240.397452ms ago: executing program 1 (id=1322): syz_usb_connect$uac1(0x5, 0xef, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100020008ba0d00504000010203010902dd0003010890050904"], 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x2, 0x80, 0x1, {0x22, 0x533}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xce, 0x9, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x41, 0x5, 0x1}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x9, 0x6, 0x40, 0x8}, 0xca, &(0x7f00000000c0)={0x5, 0xf, 0xca, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x8, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x4, 0x7}, @generic={0x98, 0x10, 0x0, "2297490b376bd79d782462a530fc1156e066471e358be06cfe3975b2fdf19a9f5212fc30efd544255a05df4967e55aecc5ac4650469b3bf658a06e2aac6b43dc06796166373f3532531795212ca760fcf547af66f616feec038d132bc370d8d39524112ecd0fe95da4eb7cdbaf37613b9ea254720cbf3df101dece0d8669808c8a5f3c602702f1ec80111596c410d818a36c61e8e1"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x2, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "07da49dc12973db2c84cb918141f5681"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44d}}]}) 203.845783ms ago: executing program 0 (id=1323): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x20002, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r0, 0xe28a0000) 190.759314ms ago: executing program 0 (id=1324): prctl$PR_GET_IO_FLUSHER(0x3a) (async) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) (async) prctl$PR_GET_IO_FLUSHER(0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000140)={r3, r0, 0x1}) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0), 0x4) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000200)=0x81) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/4, 0x4}], 0x5, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2002) (async) recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/4, 0x4}], 0x5, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000740)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "492fd961525063"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001740)={{r8, 0x2, 0x5, 0x8, 0xde, 0xec1c, 0x5, 0x8d, 0x3, 0x4, 0x40, 0x1, 0x5f5, 0x81, 0x7fff}, 0x18, [0x0, 0x0, 0x0]}) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000001800)=0x2, 0x4) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000001800)=0x2, 0x4) prctl$PR_GET_IO_FLUSHER(0x3a) flistxattr(r5, &(0x7f0000001840)=""/180, 0xb4) prctl$PR_GET_IO_FLUSHER(0x3a) (async) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) 85.257027ms ago: executing program 0 (id=1325): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d2236078f0080000004ff98023dffffffff"}) r1 = socket(0x10, 0x803, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000300)=0x30b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) getdents64(r2, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000004580)=""/4094, 0xffe}, {&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000480)=""/244, 0xf4}, {&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000680)=""/97, 0x61}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005140)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, 0xff}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4048044) 0s ago: executing program 4 (id=1326): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 616][ T2479] tmpfs: Too few inodes for current use [ 125.234506][ T2482] input: syz1 as /devices/virtual/input/input28 [ 125.265314][ T2485] incfs: Options parsing error. -22 [ 125.270787][ T2485] incfs: mount failed -22 [ 125.463631][ T31] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 125.495667][ T2499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.735'. [ 125.526910][ T2501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.538089][ T2501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.591681][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.601061][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.613883][ T2508] tipc: Started in network mode [ 125.619045][ T2508] tipc: Node identity , cluster identity 4711 [ 125.626085][ T2508] tipc: Failed to obtain node identity [ 125.632659][ T2508] tipc: Enabling of bearer rejected, failed to enable media [ 125.642844][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.651893][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 125.671470][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 125.693251][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 236, changing to 4 [ 125.710354][ T31] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 125.726356][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.728157][ T2518] input: syz1 as /devices/virtual/input/input29 [ 125.735267][ T31] usb 3-1: Product: syz [ 125.747044][ T31] usb 3-1: Manufacturer: syz [ 125.752070][ T31] usb 3-1: SerialNumber: syz [ 125.787049][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.797175][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.805434][ T36] audit: type=1400 audit(2000000005.710:399): avc: denied { listen } for pid=2519 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.826000][ T36] audit: type=1400 audit(2000000005.710:398): avc: denied { listen } for pid=2519 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.892729][ T2522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 125.904138][ T2522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 125.913053][ T2522] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 125.967103][ T31] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 125.976015][ T31] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 125.990517][ T31] usb 3-1: USB disconnect, device number 61 [ 126.003691][ T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.023542][ T9] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 126.174781][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 126.183855][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 126.193206][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.201761][ T9] usb 1-1: Product: syz [ 126.206500][ T9] usb 1-1: Manufacturer: syz [ 126.211575][ T9] usb 1-1: SerialNumber: syz [ 126.863565][ T349] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 127.015461][ T349] usb 3-1: config 1 interface 0 altsetting 242 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.028719][ T349] usb 3-1: config 1 interface 0 has no altsetting 0 [ 127.037245][ T349] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.40 [ 127.046459][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.054553][ T349] usb 3-1: Product: syz [ 127.058970][ T349] usb 3-1: Manufacturer: ã½¶êœï‘„é’°æ ‰á¿³æ­ºã¸©à¿–â­‹ê›…æ´‚æŸšï¡¬ìƒ“è±‚èŽ¢ì‰žï¡¯áŽ˜å›¿ï·­ä©‹æ•†âŽ®Ç­ï¶‡ëŒŒì›¸é•¿æ¥žâ›¯ç„¾î©¿Ä†î…©ç°˜æ«´ëƒŒèµží‡æ¶™éŽ€ç¶»à¿›å½·ì»›æ€œç°‰ã„¬é¬™á˜›ï‹èæ©§ä· ì¯Ì½ï­†ì”’쟹଴Ṁ赭æ¸å£¾ë™¯î‡“簌㯬療 [ 127.082855][ T349] usb 3-1: SerialNumber: syz [ 127.294454][ T349] usbhid 3-1:1.0: can't add hid device: -71 [ 127.300815][ T349] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 127.312495][ T349] usb 3-1: USB disconnect, device number 62 [ 127.646443][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.655154][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.179354][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.188524][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.313626][ T46] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 128.465641][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.474007][ T46] usb 3-1: not running at top speed; connect to a high speed hub [ 128.482245][ T46] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 128.491860][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 128.499825][ T46] usb 3-1: can't read configurations, error -61 [ 128.633630][ T46] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 128.726357][ T2550] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 128.735666][ T2550] SELinux: failed to load policy [ 128.758197][ T2555] input: syz1 as /devices/virtual/input/input30 [ 128.775871][ T605] udevd[605]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 128.784853][ T2557] tipc: Started in network mode [ 128.808143][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.820606][ T9] usb 1-1: USB disconnect, device number 74 [ 128.828759][ T2557] tipc: Node identity , cluster identity 4711 [ 128.835365][ T46] usb 3-1: not running at top speed; connect to a high speed hub [ 128.844885][ T46] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 128.852936][ T2557] tipc: Failed to obtain node identity [ 128.859602][ T2557] tipc: Enabling of bearer rejected, failed to enable media [ 128.870955][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 128.878787][ T46] usb 3-1: can't read configurations, error -61 [ 128.886290][ T46] usb usb3-port1: attempt power cycle [ 128.953575][ T2570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.761'. [ 128.983447][ T36] audit: type=1400 audit(2000000008.870:400): avc: denied { read } for pid=2572 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.092255][ T2582] input: syz1 as /devices/virtual/input/input31 [ 129.156800][ T2599] 9pnet_fd: p9_fd_create_unix (2599): problem connecting socket: ./cgroup/file0: -2 [ 129.225056][ T2610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.774'. [ 129.243578][ T46] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 129.275765][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.284265][ T46] usb 3-1: not running at top speed; connect to a high speed hub [ 129.292289][ T46] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 129.302709][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 129.310708][ T46] usb 3-1: can't read configurations, error -61 [ 129.453590][ T46] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 129.485766][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.494541][ T46] usb 3-1: not running at top speed; connect to a high speed hub [ 129.502880][ T46] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 129.512207][ T46] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 129.520128][ T46] usb 3-1: can't read configurations, error -61 [ 129.527344][ T36] audit: type=1400 audit(2000000009.410:401): avc: denied { read append } for pid=2629 comm="syz.4.782" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.552157][ T46] usb usb3-port1: unable to enumerate USB device [ 129.559349][ T36] audit: type=1400 audit(2000000009.410:402): avc: denied { open } for pid=2629 comm="syz.4.782" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.563325][ T2631] Restarting kernel threads ... [ 129.582943][ T36] audit: type=1400 audit(2000000009.460:403): avc: denied { ioctl } for pid=2629 comm="syz.4.782" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.613389][ T2631] done. [ 129.663574][ T31] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 129.813566][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 129.820006][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 129.831232][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 129.844476][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 129.853748][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.862006][ T31] usb 1-1: Product: syz [ 129.866349][ T31] usb 1-1: Manufacturer: syz [ 129.871057][ T31] usb 1-1: SerialNumber: syz [ 130.078232][ T2626] netlink: 'syz.0.779': attribute type 32 has an invalid length. [ 130.319844][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.328702][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.339048][ T2633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.348000][ T2633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.137189][ T2645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.156407][ T2645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.483610][ T349] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 131.634845][ T349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.646327][ T349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.656265][ T349] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 131.665712][ T349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.674730][ T349] usb 3-1: config 0 descriptor?? [ 131.913434][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.922232][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.083936][ T349] hid-led 0003:1D34:000A.000F: unknown main item tag 0x0 [ 132.091177][ T349] hid-led 0003:1D34:000A.000F: unknown main item tag 0x0 [ 132.098407][ T349] hid-led 0003:1D34:000A.000F: unknown main item tag 0x0 [ 132.283284][ T2645] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 132.283292][ T2646] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 132.303604][ T349] hid-led 0003:1D34:000A.000F: probe with driver hid-led failed with error -71 [ 132.314197][ T349] usb 3-1: USB disconnect, device number 67 [ 132.454546][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.461787][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.469760][ T31] usb 1-1: unit 4 not found! [ 132.479675][ T31] usb 1-1: USB disconnect, device number 75 [ 132.490586][ T2657] overlay: Unknown parameter 'audit' [ 132.509499][ T2655] tmpfs: Bad value for 'huge' [ 132.523462][ T2655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.533369][ T2655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.833600][ T31] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 132.985098][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.997021][ T31] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 133.007883][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.017353][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.033001][ T31] usb 1-1: invalid MIDI out EP 0 [ 133.045845][ T36] audit: type=1400 audit(2000000012.940:404): avc: denied { map } for pid=2660 comm="syz.2.792" path="socket:[19381]" dev="sockfs" ino=19381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.071879][ T605] udevd[605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.088773][ T31] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 133.165550][ T2666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.174381][ T2666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.184896][ T2666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.194531][ T2666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.229943][ T31] usb 1-1: USB disconnect, device number 76 [ 133.363634][ T349] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 133.513590][ T349] usb 3-1: Using ep0 maxpacket: 32 [ 133.520892][ T349] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.531230][ T349] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.541068][ T349] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 133.551316][ T349] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.560177][ T349] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.569514][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.578120][ T349] usb 3-1: Product: syz [ 133.582579][ T349] usb 3-1: Manufacturer: syz [ 133.587349][ T349] usb 3-1: SerialNumber: syz [ 133.593800][ T2664] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 133.805356][ T349] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 133.821736][ T349] usb 3-1: USB disconnect, device number 68 [ 133.838096][ T349] usblp0: removed [ 133.848166][ T2670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.796'. [ 133.933247][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.942543][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.993588][ T64] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 134.145001][ T64] usb 1-1: config 0 has an invalid interface number: 40 but max is 3 [ 134.153171][ T64] usb 1-1: config 0 has an invalid interface number: 187 but max is 3 [ 134.161513][ T64] usb 1-1: config 0 has an invalid interface number: 234 but max is 3 [ 134.169954][ T64] usb 1-1: config 0 has an invalid interface number: 255 but max is 3 [ 134.178246][ T64] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 134.187525][ T64] usb 1-1: config 0 has an invalid interface number: 174 but max is 3 [ 134.196014][ T64] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 134.205265][ T64] usb 1-1: config 0 has no interface number 0 [ 134.211733][ T64] usb 1-1: config 0 has no interface number 1 [ 134.218233][ T64] usb 1-1: config 0 has no interface number 2 [ 134.224582][ T64] usb 1-1: config 0 has no interface number 3 [ 134.230784][ T64] usb 1-1: config 0 has no interface number 4 [ 134.237179][ T64] usb 1-1: config 0 interface 40 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 134.248387][ T64] usb 1-1: config 0 interface 40 altsetting 255 endpoint 0x81 has invalid maxpacket 42262, setting to 64 [ 134.259958][ T64] usb 1-1: config 0 interface 40 altsetting 255 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 134.271059][ T64] usb 1-1: config 0 interface 40 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 134.282059][ T64] usb 1-1: config 0 interface 40 altsetting 255 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 134.293239][ T64] usb 1-1: config 0 interface 40 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 134.304325][ T64] usb 1-1: config 0 interface 40 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 134.315952][ T64] usb 1-1: config 0 interface 40 altsetting 255 has an endpoint descriptor with address 0x1E, changing to 0xE [ 134.327998][ T64] usb 1-1: config 0 interface 40 altsetting 255 endpoint 0x7 has invalid maxpacket 2047, setting to 64 [ 134.339404][ T64] usb 1-1: config 0 interface 40 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 134.350560][ T64] usb 1-1: config 0 interface 40 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.360750][ T64] usb 1-1: config 0 interface 187 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 134.372147][ T64] usb 1-1: config 0 interface 234 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 134.383545][ T64] usb 1-1: config 0 interface 234 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 134.394731][ T64] usb 1-1: config 0 interface 255 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 134.406612][ T64] usb 1-1: config 0 interface 255 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 134.417956][ T64] usb 1-1: config 0 interface 255 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 134.419982][ T2679] netlink: 'syz.2.800': attribute type 16 has an invalid length. [ 134.429647][ T64] usb 1-1: config 0 interface 255 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 134.438079][ T2679] netlink: 61822 bytes leftover after parsing attributes in process `syz.2.800'. [ 134.448525][ T64] usb 1-1: config 0 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 96, setting to 64 [ 134.470268][ T2679] tipc: Resetting bearer [ 134.479126][ T64] usb 1-1: config 0 interface 255 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 134.492913][ T64] usb 1-1: too many endpoints for config 0 interface 174 altsetting 115: 108, using maximum allowed: 30 [ 134.507052][ T64] usb 1-1: config 0 interface 174 altsetting 115 has an invalid descriptor for endpoint zero, skipping [ 134.519115][ T64] usb 1-1: config 0 interface 174 altsetting 115 has a duplicate endpoint with address 0x2, skipping [ 134.530630][ T64] usb 1-1: config 0 interface 174 altsetting 115 has a duplicate endpoint with address 0xF, skipping [ 134.542220][ T64] usb 1-1: config 0 interface 174 altsetting 115 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 134.553839][ T64] usb 1-1: config 0 interface 174 altsetting 115 has 4 endpoint descriptors, different from the interface descriptor's value: 108 [ 134.567729][ T64] usb 1-1: config 0 interface 40 has no altsetting 0 [ 134.574699][ T64] usb 1-1: config 0 interface 187 has no altsetting 0 [ 134.587451][ T64] usb 1-1: config 0 interface 234 has no altsetting 0 [ 134.594931][ T64] usb 1-1: config 0 interface 255 has no altsetting 0 [ 134.601806][ T64] usb 1-1: config 0 interface 174 has no altsetting 0 [ 134.611431][ T64] usb 1-1: New USB device found, idVendor=10c4, idProduct=800a, bcdDevice=c9.9f [ 134.620973][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.629173][ T64] usb 1-1: Product: syz [ 134.633761][ T64] usb 1-1: Manufacturer: á„ [ 134.638551][ T64] usb 1-1: SerialNumber: syz [ 134.644965][ T64] usb 1-1: config 0 descriptor?? [ 134.650541][ T2672] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 134.703455][ T2689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2689 comm=syz.4.803 [ 134.708519][ T2690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.724718][ T2690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.813642][ T329] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 134.869829][ T64] usb 1-1: USB disconnect, device number 77 [ 134.963633][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 134.970852][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.981592][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.992718][ T329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.002298][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.010782][ T329] usb 3-1: Product: syz [ 135.015100][ T329] usb 3-1: Manufacturer: syz [ 135.019848][ T329] usb 3-1: SerialNumber: syz [ 135.246423][ T2683] kvm: apic: phys broadcast and lowest prio [ 135.254029][ T329] usb 3-1: 0:2 : does not exist [ 135.264894][ T329] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 135.288657][ T329] usb 3-1: USB disconnect, device number 69 [ 135.314908][ T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.337879][ T36] audit: type=1400 audit(2000000015.230:405): avc: denied { getopt } for pid=2700 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.409411][ T2709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.811'. [ 135.476015][ T2711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.812'. [ 135.633618][ T64] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 135.785096][ T64] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 135.794054][ T64] usb 1-1: config 0 has no interface number 0 [ 135.802292][ T64] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 135.812059][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.820559][ T64] usb 1-1: Product: syz [ 135.824997][ T64] usb 1-1: Manufacturer: syz [ 135.829670][ T64] usb 1-1: SerialNumber: syz [ 135.836158][ T64] usb 1-1: config 0 descriptor?? [ 135.843091][ T64] ftdi_sio 1-1:0.32: FTDI USB Serial Device converter detected [ 135.851555][ T64] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 135.859819][ T36] audit: type=1326 audit(2000000015.760:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2720 comm="syz.2.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62f8b9c819 code=0x0 [ 135.912136][ T36] audit: type=1400 audit(2000000015.800:407): avc: denied { lock } for pid=2720 comm="syz.2.815" path="socket:[20581]" dev="sockfs" ino=20581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 136.044245][ T2707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.053429][ T2707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.063005][ T329] usb 1-1: USB disconnect, device number 78 [ 136.069753][ T329] ftdi_sio 1-1:0.32: device disconnected [ 136.601697][ T2739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.821'. [ 136.638319][ T36] audit: type=1400 audit(2000000016.530:408): avc: denied { transfer } for pid=2735 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 136.688071][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.704829][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.721605][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.732098][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.741836][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.750545][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.760887][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.769966][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.778551][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.787419][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.795888][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.805437][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.953627][ T349] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 137.103536][ T349] usb 1-1: Using ep0 maxpacket: 8 [ 137.110235][ T349] usb 1-1: config 3 has an invalid interface number: 255 but max is 0 [ 137.119621][ T349] usb 1-1: config 3 has no interface number 0 [ 137.125849][ T349] usb 1-1: config 3 interface 255 altsetting 243 bulk endpoint 0x6 has invalid maxpacket 32 [ 137.136231][ T349] usb 1-1: config 3 interface 255 has no altsetting 0 [ 137.145029][ T349] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 137.154276][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.162322][ T349] usb 1-1: Product: syz [ 137.166724][ T349] usb 1-1: Manufacturer: syz [ 137.171383][ T349] usb 1-1: SerialNumber: syz [ 137.177520][ T2749] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 137.336253][ T36] audit: type=1400 audit(2000000017.230:409): avc: denied { map } for pid=2753 comm="syz.4.825" path="socket:[21737]" dev="sockfs" ino=21737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.389778][ T349] usbserial_generic 1-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 137.402294][ T349] usbserial_generic 1-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 137.413672][ T349] usbserial_generic 1-1:3.255: generic converter detected [ 137.422950][ T349] usb 1-1: generic converter now attached to ttyUSB0 [ 137.433643][ T349] usb 1-1: USB disconnect, device number 79 [ 137.447181][ T349] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 137.457882][ T349] usbserial_generic 1-1:3.255: device disconnected [ 137.470029][ T36] audit: type=1400 audit(2000000017.370:410): avc: denied { mount } for pid=2758 comm="syz.4.826" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.493729][ T36] audit: type=1400 audit(2000000017.370:411): avc: denied { mounton } for pid=2758 comm="syz.4.826" path="/258/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 137.553616][ T36] audit: type=1400 audit(2000000017.440:412): avc: denied { unmount } for pid=836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.776996][ T2779] netlink: 'syz.4.833': attribute type 4 has an invalid length. [ 137.850113][ T2784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.859253][ T2784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.909470][ T2786] netlink: 112 bytes leftover after parsing attributes in process `syz.0.835'. [ 137.913771][ T349] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 137.936197][ T2788] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 137.944616][ T2788] netlink: 25 bytes leftover after parsing attributes in process `syz.0.836'. [ 138.075469][ T349] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.083967][ T349] usb 3-1: not running at top speed; connect to a high speed hub [ 138.093359][ T349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.103913][ T349] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 138.115571][ T349] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 138.128750][ T349] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 138.137894][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.146590][ T349] usb 3-1: Product: syz [ 138.150870][ T349] usb 3-1: Manufacturer: syz [ 138.155646][ T349] usb 3-1: SerialNumber: syz [ 138.161377][ T2775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 138.203647][ T64] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 138.355024][ T64] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 138.364335][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.377278][ T64] usb 1-1: config 0 descriptor?? [ 138.385428][ T349] usb 3-1: USB disconnect, device number 70 [ 138.399379][ T64] usb 1-1: selecting invalid altsetting 1 [ 138.423571][ T605] udevd[605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.424111][ T64] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 138.454016][ T2796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.462819][ T2796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.488381][ T1539] udevd[1539]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.512535][ T2802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.521601][ T2802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.594334][ T349] usb 1-1: USB disconnect, device number 80 [ 139.047708][ T2816] loop5: detected capacity change from 0 to 16384 [ 139.373972][ T2830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.852'. [ 139.466155][ T2833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.476028][ T2833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.487829][ T2833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.498171][ T2833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.993632][ T349] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 140.026207][ T36] audit: type=1400 audit(2000000019.920:413): avc: denied { shutdown } for pid=2840 comm="syz.4.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.129065][ T2851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'. [ 140.149005][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.160280][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.171157][ T349] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 140.180561][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.189061][ T64] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 140.206377][ T349] usb 1-1: config 0 descriptor?? [ 140.222978][ T2853] tipc: Enabling of bearer rejected, already enabled [ 140.240388][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.250267][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.375587][ T64] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.384194][ T64] usb 3-1: config 0 has no interface number 0 [ 140.390552][ T64] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.402115][ T64] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.416970][ T36] audit: type=1400 audit(2000000020.310:414): avc: denied { connect } for pid=2834 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.437419][ T64] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 140.447234][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.457586][ T64] usb 3-1: config 0 descriptor?? [ 140.639311][ T349] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 140.647257][ T349] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 140.654801][ T349] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 140.662342][ T349] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 140.669918][ T349] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 140.678379][ T349] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 140.792063][ T36] audit: type=1400 audit(2000000020.680:415): avc: denied { mounton } for pid=2856 comm="syz.4.861" path="/279/file0" dev="tmpfs" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 140.792127][ T2857] fuse: Unknown parameter 'group_¨d' [ 140.829929][ T2857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.861'. [ 140.864018][ T349] playstation 0003:054C:0DF2.0010: Invalid reportID received, expected 9 got 0 [ 140.873282][ T349] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense pairing info: -22 [ 140.882919][ T349] playstation 0003:054C:0DF2.0010: Failed to get MAC address from DualSense [ 140.891967][ T349] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 140.905656][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.913304][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.920943][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.929441][ T349] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -22 [ 140.940146][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.949531][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.957129][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.965513][ T64] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 140.980698][ T64] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 140.993813][ T64] hid_prodikeys: hid-prodikeys: failed to find output report [ 140.993813][ T64] [ 141.064568][ T2835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.073425][ T36] audit: type=1326 audit(2000000020.960:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.4.864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe7999c819 code=0x0 [ 141.075184][ T2835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.106250][ T349] usb 1-1: USB disconnect, device number 81 [ 141.318627][ T329] usb 3-1: USB disconnect, device number 71 [ 141.625986][ T36] audit: type=1400 audit(2000000021.520:417): avc: denied { nlmsg_write } for pid=2871 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 141.673663][ T36] audit: type=1400 audit(2000000021.520:418): avc: denied { audit_write } for pid=2871 comm="syz.0.866" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.713553][ T36] audit: type=1107 audit(2000000021.520:419): pid=2871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':ä!Ù܃„ÓÜK-l=ºø¤j.—ˆ!ãéWT‹¾_â Yj8m¯án›—ïì½=Vé' [ 141.743556][ T36] audit: type=1400 audit(2000000021.550:420): avc: denied { view } for pid=2871 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 141.933845][ T46] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 142.103516][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 142.110403][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.120855][ T46] usb 1-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 142.130529][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.139175][ T46] usb 1-1: Product: syz [ 142.143549][ T64] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 142.144082][ T46] usb 1-1: Manufacturer: syz [ 142.156244][ T46] usb 1-1: SerialNumber: syz [ 142.303545][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 142.314426][ T64] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 142.322790][ T64] usb 3-1: config 0 has no interface number 1 [ 142.333583][ T64] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.348593][ T64] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 142.360554][ T64] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 142.372107][ T64] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 142.374521][ T46] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.383365][ T64] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.403837][ T64] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 142.413049][ T46] usb 1-1: found format II with max.bitrate = 5, frame size=11 [ 142.416204][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 142.423820][ T46] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 142.435729][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 142.466382][ T64] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 142.483085][ T46] usb 1-1: USB disconnect, device number 82 [ 142.491193][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.492755][ T36] audit: type=1400 audit(2000000022.370:421): avc: denied { setopt } for pid=2885 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.500834][ T64] usb 3-1: Product: syz [ 142.523942][ T64] usb 3-1: Manufacturer: syz [ 142.528931][ T64] usb 3-1: SerialNumber: syz [ 142.549366][ T64] usb 3-1: config 0 descriptor?? [ 142.563839][ T2878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 142.785476][ T46] usb 3-1: USB disconnect, device number 72 [ 142.897904][ T2906] netlink: 'syz.4.878': attribute type 27 has an invalid length. [ 143.022459][ T2919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.033151][ T2919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.101853][ T2919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.111004][ T2919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.283567][ T46] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 143.413541][ T46] usb 3-1: device descriptor read/64, error -71 [ 143.634085][ T36] audit: type=1400 audit(2000000023.530:422): avc: denied { write } for pid=2926 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.654478][ T46] usb 3-1: device descriptor read/64, error -71 [ 143.720605][ T2932] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.729579][ T2932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.738751][ T2933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.748162][ T2932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.748608][ T2933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.848645][ T36] audit: type=1400 audit(2000000023.740:423): avc: denied { ioctl } for pid=2934 comm="syz.0.888" path="/158/file2" dev="tmpfs" ino=861 ioctlcmd=0x4b45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.893567][ T46] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 144.023695][ T46] usb 3-1: device descriptor read/64, error -71 [ 144.173579][ T64] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 144.263708][ T46] usb 3-1: device descriptor read/64, error -71 [ 144.323518][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 144.333446][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.343940][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.349319][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.359846][ T64] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 144.372842][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.375448][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.383159][ T46] usb usb3-port1: attempt power cycle [ 144.391414][ T64] usb 1-1: Product: syz [ 144.397529][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.401030][ T64] usb 1-1: Manufacturer: syz [ 144.413913][ T64] usb 1-1: SerialNumber: syz [ 144.415753][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.427636][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.436730][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.445314][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.454016][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.462692][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.471930][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.480654][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.489341][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.634190][ T64] usb 1-1: MIDIStreaming interface descriptor not found [ 144.645338][ T64] usb 1-1: USB disconnect, device number 83 [ 144.659291][ T1539] udevd[1539]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.743673][ T46] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 144.765921][ T46] usb 3-1: device descriptor read/8, error -71 [ 144.895102][ T46] usb 3-1: device descriptor read/8, error -71 [ 145.019161][ T2955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.028166][ T2955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.133660][ T46] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 145.154801][ T46] usb 3-1: device descriptor read/8, error -71 [ 145.242311][ T2961] 9pnet_fd: Insufficient options for proto=fd [ 145.285645][ T46] usb 3-1: device descriptor read/8, error -71 [ 145.356499][ T2976] rust_binder: Write failure EFAULT in pid:463 [ 145.357368][ T2976] rust_binder: Write failure EFAULT in pid:463 [ 145.378157][ T2980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'. [ 145.393916][ T46] usb usb3-port1: unable to enumerate USB device [ 145.414868][ T2983] fuse: Bad value for 'fd' [ 145.640066][ T2999] fuse: Unknown parameter '' [ 145.697368][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 145.697391][ T36] audit: type=1400 audit(2000000025.590:425): avc: denied { ioctl } for pid=3013 comm="syz.0.912" path="socket:[22632]" dev="sockfs" ino=22632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.794203][ T3024] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 145.802424][ T3024] netlink: 17 bytes leftover after parsing attributes in process `syz.0.914'. [ 145.814689][ T36] audit: type=1400 audit(2000000025.710:426): avc: denied { accept } for pid=3021 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 146.594241][ T36] audit: type=1400 audit(2000000026.490:427): avc: denied { setattr } for pid=3031 comm="syz.0.917" name="IEEE-802.15.4-MAC" dev="sockfs" ino=23666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.646104][ T3036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.918'. [ 146.754076][ T3039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=3039 comm=syz.0.919 [ 146.771892][ T36] audit: type=1400 audit(2000000026.670:428): avc: denied { relabelfrom } for pid=3038 comm="syz.0.919" name="NETLINK" dev="sockfs" ino=22723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 146.842339][ T3049] netlink: 'syz.2.923': attribute type 27 has an invalid length. [ 146.853719][ T3050] netlink: 'syz.2.923': attribute type 27 has an invalid length. [ 146.900295][ T36] audit: type=1400 audit(2000000026.790:429): avc: denied { read } for pid=3053 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.989847][ T36] audit: type=1400 audit(2000000027.880:430): avc: denied { write } for pid=3082 comm="syz.4.935" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.013589][ T36] audit: type=1400 audit(2000000027.880:431): avc: denied { append } for pid=3082 comm="syz.4.935" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.163539][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 148.260051][ T3099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.942'. [ 148.333566][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 148.349666][ T10] usb 3-1: config 8 has an invalid interface number: 74 but max is 0 [ 148.369649][ T10] usb 3-1: config 8 has no interface number 0 [ 148.383539][ T10] usb 3-1: config 8 interface 74 has no altsetting 0 [ 148.402228][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=ec.1a [ 148.422027][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.431377][ T10] usb 3-1: Product: syz [ 148.435932][ T10] usb 3-1: Manufacturer: syz [ 148.440660][ T10] usb 3-1: SerialNumber: syz [ 148.473212][ T36] audit: type=1400 audit(2000000028.360:432): avc: denied { create } for pid=3102 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.661102][ T3111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.674936][ T10] usb 3-1: bad CDC descriptors [ 148.684831][ T3111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.693823][ T10] usb 3-1: USB disconnect, device number 77 [ 148.707733][ T64] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 148.886481][ T64] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 148.896502][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.905853][ T64] usb 1-1: Product: syz [ 148.910369][ T64] usb 1-1: Manufacturer: syz [ 148.915497][ T64] usb 1-1: SerialNumber: syz [ 148.924425][ T64] r8152-cfgselector 1-1: Unknown version 0x0000 [ 148.932602][ T64] r8152-cfgselector 1-1: config 0 descriptor?? [ 149.143593][ T64] r8152-cfgselector 1-1: Unknown version 0x0000 [ 149.150622][ T64] r8152-cfgselector 1-1: bad CDC descriptors [ 149.159515][ T64] r8152-cfgselector 1-1: USB disconnect, device number 84 [ 149.265923][ T3122] overlayfs: upper fs does not support tmpfile. [ 149.306956][ T3127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.952'. [ 149.427180][ T3137] netlink: 92 bytes leftover after parsing attributes in process `syz.4.957'. [ 149.653540][ T64] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 149.773879][ T3160] FAULT_INJECTION: forcing a failure. [ 149.773879][ T3160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.801197][ T3164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.814582][ T64] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.822844][ T3164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.847331][ T64] usb 3-1: config 0 has no interface number 0 [ 149.863542][ T64] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.884637][ T64] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.912103][ T64] usb 3-1: config 0 interface 1 has no altsetting 0 [ 149.929486][ T64] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 149.934285][ T3160] CPU: 1 UID: 0 PID: 3160 Comm: syz.0.964 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 149.934394][ T3160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.934428][ T3160] Call Trace: [ 149.934448][ T3160] [ 149.934470][ T3160] __dump_stack+0x21/0x30 [ 149.934564][ T3160] dump_stack_lvl+0x140/0x1c0 [ 149.934637][ T3160] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.934713][ T3160] ? check_stack_object+0x12b/0x150 [ 149.934806][ T3160] dump_stack+0x19/0x20 [ 149.934879][ T3160] should_fail_ex+0x3d7/0x530 [ 149.934962][ T3160] should_fail+0xf/0x20 [ 149.935021][ T3160] should_fail_usercopy+0x1e/0x30 [ 149.935097][ T3160] _copy_to_user+0x24/0xa0 [ 149.935153][ T3160] simple_read_from_buffer+0xed/0x160 [ 149.935249][ T3160] proc_fail_nth_read+0x1aa/0x220 [ 149.935344][ T3160] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 149.935416][ T3160] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 149.935511][ T3160] ? bpf_lsm_file_permission+0xd/0x20 [ 149.935582][ T3160] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 149.935647][ T3160] vfs_read+0x286/0xcb0 [ 149.935734][ T3160] ? __cfi_mutex_unlock+0x10/0x10 [ 149.935798][ T3160] ? __cfi_vfs_read+0x10/0x10 [ 149.935872][ T3160] ? __kasan_check_write+0x18/0x20 [ 149.935955][ T3160] ? mutex_lock+0x97/0x1d0 [ 149.936023][ T3160] ? __cfi_mutex_lock+0x10/0x10 [ 149.936086][ T3160] ? __fget_files+0x2c5/0x340 [ 149.936141][ T3160] ksys_read+0x145/0x260 [ 149.936231][ T3160] ? __cfi_ksys_read+0x10/0x10 [ 149.936306][ T3160] ? __kasan_check_read+0x15/0x20 [ 149.936380][ T3160] __x64_sys_read+0x7f/0x90 [ 149.936473][ T3160] x64_sys_call+0x2638/0x2ee0 [ 149.936558][ T3160] do_syscall_64+0x57/0xf0 [ 149.936663][ T3160] ? clear_bhb_loop+0x50/0xa0 [ 149.936729][ T3160] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.936814][ T3160] RIP: 0033:0x7f559695d04e [ 149.936866][ T3160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.936920][ T3160] RSP: 002b:00007f559777bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.936978][ T3160] RAX: ffffffffffffffda RBX: 00007f559777c6c0 RCX: 00007f559695d04e [ 149.937022][ T3160] RDX: 000000000000000f RSI: 00007f559777c0a0 RDI: 0000000000000004 [ 149.937064][ T3160] RBP: 00007f559777c090 R08: 0000000000000000 R09: 0000000000000000 [ 149.937105][ T3160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.937140][ T3160] R13: 00007f5596c16038 R14: 00007f5596c15fa0 R15: 00007ffcbd86a7c8 [ 149.937199][ T3160] [ 150.198284][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.214118][ T64] usb 3-1: config 0 descriptor?? [ 150.412630][ T36] audit: type=1326 audit(2000000030.300:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3175 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7999c819 code=0x7ffc0000 [ 150.437509][ T36] audit: type=1326 audit(2000000030.300:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3175 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7999c819 code=0x7ffc0000 [ 150.643579][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 150.803555][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.865107][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.874606][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.883111][ T64] uclogic 0003:2179:0053.0012: pen parameters not found [ 150.890293][ T64] uclogic 0003:2179:0053.0012: interface is invalid, ignoring [ 150.901394][ T64] usb 3-1: USB disconnect, device number 78 [ 151.043542][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.283586][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 151.413578][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.423850][ T3198] netlink: 'syz.2.976': attribute type 46 has an invalid length. [ 151.446823][ T329] hid (null): unknown global tag 0xc [ 151.452666][ T329] hid (null): report_id 28248 is invalid [ 151.458809][ T329] hid (null): unknown global tag 0xe [ 151.464029][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 151.464082][ T36] audit: type=1400 audit(2000000031.350:439): avc: denied { getopt } for pid=3199 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.465253][ T329] hid (null): global environment stack underflow [ 151.498341][ T329] hid (null): bogus close delimiter [ 151.503757][ T329] hid (null): unknown global tag 0xe [ 151.509398][ T329] hid (null): unknown global tag 0xd [ 151.515208][ T329] hid (null): unknown global tag 0xd [ 151.520628][ T329] hid (null): invalid report_size 33797016 [ 151.526621][ T329] hid (null): report_id 0 is invalid [ 151.532055][ T329] hid (null): report_id 27314 is invalid [ 151.538041][ T329] hid (null): unknown global tag 0xd [ 151.543366][ T329] hid (null): unknown global tag 0xd [ 151.548783][ T329] hid (null): invalid report_count 22480 [ 151.555317][ T329] hid-generic 0004:0002:FFFFFFF8.0013: unknown main item tag 0xd [ 151.563117][ T329] hid-generic 0004:0002:FFFFFFF8.0013: unknown global tag 0xc [ 151.570658][ T329] hid-generic 0004:0002:FFFFFFF8.0013: item 0 2 1 12 parsing failed [ 151.578840][ T329] hid-generic 0004:0002:FFFFFFF8.0013: probe with driver hid-generic failed with error -22 [ 151.663513][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.712317][ T3221] tipc: Resetting bearer [ 151.717921][ T3221] sit0: entered promiscuous mode [ 151.725079][ T3221] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 151.732907][ T3221] netlink: 1 bytes leftover after parsing attributes in process `syz.2.984'. [ 151.773694][ T10] usb usb1-port1: attempt power cycle [ 152.042431][ T36] audit: type=1400 audit(2000000031.930:440): avc: denied { bind } for pid=3223 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.078533][ T3224] x_tables: unsorted underflow at hook 3 [ 152.086045][ T3235] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.113672][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 152.145008][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.243574][ T329] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 152.274590][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.401830][ T3245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.410921][ T3245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.420386][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.431629][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.443370][ T329] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 152.453249][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.466973][ T329] usb 3-1: config 0 descriptor?? [ 152.533810][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 152.554653][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.684880][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.738273][ T3254] FAT-fs (rnullb0): bogus number of reserved sectors [ 152.745256][ T3254] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 152.793735][ T10] usb usb1-port1: unable to enumerate USB device [ 152.884279][ T329] usbhid 3-1:0.0: can't add hid device: -71 [ 152.890803][ T329] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 152.899887][ T329] usb 3-1: USB disconnect, device number 79 [ 153.663591][ T31] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 153.813585][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 153.816455][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.830100][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.841382][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.852448][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 153.861779][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.869849][ T31] usb 3-1: Product: syz [ 153.874100][ T31] usb 3-1: Manufacturer: syz [ 153.878764][ T31] usb 3-1: SerialNumber: syz [ 153.973681][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 153.980386][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.988965][ T10] usb 1-1: config 0 has no interface number 0 [ 153.995255][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 154.003900][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.013262][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.021352][ T10] usb 1-1: Product: syz [ 154.025604][ T10] usb 1-1: Manufacturer: syz [ 154.030310][ T10] usb 1-1: SerialNumber: syz [ 154.036165][ T10] usb 1-1: config 0 descriptor?? [ 154.042256][ T10] smsc75xx v1.0.0 [ 154.092421][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 154.103628][ T31] usb 3-1: USB disconnect, device number 80 [ 154.116085][ T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.843600][ T329] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 154.993531][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 155.000221][ T329] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.008851][ T329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.019401][ T329] usb 3-1: config 0 has no interface number 0 [ 155.027683][ T329] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.037008][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.045160][ T329] usb 3-1: Product: syz [ 155.049455][ T329] usb 3-1: Manufacturer: syz [ 155.054241][ T329] usb 3-1: SerialNumber: syz [ 155.059958][ T329] usb 3-1: config 0 descriptor?? [ 155.066238][ T329] smsc95xx v2.0.0 [ 155.070055][ T329] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 155.080329][ T329] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 155.257542][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 155.268895][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 155.277433][ T31] usb 3-1: USB disconnect, device number 81 [ 155.279243][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 155.307490][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 155.317429][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 155.328112][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 155.338087][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 155.348246][ T10] usb 1-1: USB disconnect, device number 89 [ 155.444549][ T36] audit: type=1400 audit(2000000035.340:441): avc: denied { shutdown } for pid=3282 comm="syz.4.1005" laddr=::ffff:172.20.20.10 lport=255 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.503059][ T36] audit: type=1400 audit(2000000035.390:442): avc: denied { create } for pid=3289 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.919487][ T3303] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3552445293 (56839124688 ns) > initial count (39727021584 ns). Using initial count to start timer. [ 155.991020][ T3309] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1014'. [ 156.002859][ T3309] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1014'. [ 156.112196][ T36] audit: type=1400 audit(2000000036.000:443): avc: denied { relabelfrom } for pid=3334 comm="syz.0.1022" name="NETLINK" dev="sockfs" ino=25707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.112203][ T3335] SELinux: Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped). [ 156.146380][ T36] audit: type=1400 audit(2000000036.040:444): avc: denied { relabelto } for pid=3334 comm="syz.0.1022" name="NETLINK" dev="sockfs" ino=25707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_xfrm_socket permissive=1 trawcon="system_u:object_r:dpkg_exec_t:s0" [ 156.180659][ T3336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.190054][ T3336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.413624][ T329] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 156.564873][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.575437][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.585216][ T329] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.594845][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.603207][ T329] usb 1-1: SerialNumber: syz [ 156.812313][ T329] usb 1-1: 0:2 : does not exist [ 156.817718][ T329] usb 1-1: unit 5: unexpected type 0x0b [ 156.828893][ T329] usb 1-1: USB disconnect, device number 90 [ 156.840967][ T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.113581][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 157.265516][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.274170][ T10] usb 3-1: config 192 has an invalid interface number: 40 but max is 1 [ 157.282593][ T10] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 157.293094][ T10] usb 3-1: config 192 has 1 interface, different from the descriptor's value: 2 [ 157.302669][ T10] usb 3-1: config 192 has no interface number 0 [ 157.309298][ T10] usb 3-1: too many endpoints for config 192 interface 40 altsetting 217: 207, using maximum allowed: 30 [ 157.321151][ T10] usb 3-1: config 192 interface 40 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 157.334843][ T10] usb 3-1: config 192 interface 40 has no altsetting 0 [ 157.344157][ T10] usb 3-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60 [ 157.353566][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.362144][ T10] usb 3-1: Product: à ” [ 157.366521][ T10] usb 3-1: Manufacturer: ãµ…â¨è›žâµŽÜ—完罹ï´á¢ìºž [ 157.373445][ T10] usb 3-1: SerialNumber: à Š [ 157.495923][ T3362] syzkaller1: entered promiscuous mode [ 157.501522][ T3362] syzkaller1: entered allmulticast mode [ 157.823631][ T329] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 157.889500][ T3368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.900256][ T3368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.973587][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 157.980248][ T329] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.992610][ T329] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.002888][ T329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.009869][ T329] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 158.019737][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.033935][ T329] usb 1-1: config 0 descriptor?? [ 158.121831][ T36] audit: type=1400 audit(2000000038.010:445): avc: denied { map } for pid=3369 comm="syz.2.1035" path="pipe:[3218]" dev="pipefs" ino=3218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 158.162521][ T10] usb-storage 3-1:192.40: USB Mass Storage device detected [ 158.170160][ T36] audit: type=1400 audit(2000000038.050:446): avc: denied { create } for pid=3371 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 158.193841][ T10] usb-storage 3-1:192.40: Quirks match for vid 125f pid a94a: 2000000 [ 158.266148][ T10] usb 3-1: USB disconnect, device number 82 [ 158.541684][ T3380] overlayfs: missing 'lowerdir' [ 158.573571][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 158.653072][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 158.661967][ T329] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 158.671065][ T329] usb 1-1: USB disconnect, device number 91 [ 158.723726][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 158.732310][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.743669][ T10] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 158.752931][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.762206][ T10] usb 3-1: config 0 descriptor?? [ 159.123950][ T3385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.133569][ T3385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.143864][ T36] audit: type=1400 audit(2000000039.040:447): avc: denied { setcurrent } for pid=3383 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.175741][ T36] audit: type=1400 audit(2000000039.060:448): avc: denied { create } for pid=3375 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.179140][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.205547][ T36] audit: type=1400 audit(2000000039.060:449): avc: denied { accept } for pid=3375 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 159.233184][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.241197][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.242254][ T3398] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.248849][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.264562][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.272254][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.280812][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.304827][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.312657][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.320644][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.330420][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.338456][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.365127][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.372861][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.382694][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.390627][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.419320][ T3410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.428840][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.436936][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.437367][ T3410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.445455][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.462371][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.475096][ T10] thrustmaster 0003:044F:B65A.0014: unknown main item tag 0x0 [ 159.482951][ T10] thrustmaster 0003:044F:B65A.0014: unbalanced collection at end of report description [ 159.494251][ T10] thrustmaster 0003:044F:B65A.0014: parse failed [ 159.500955][ T10] thrustmaster 0003:044F:B65A.0014: probe with driver thrustmaster failed with error -22 [ 159.514325][ T10] usb 3-1: USB disconnect, device number 83 [ 159.918310][ T3431] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1055'. [ 159.927347][ T3431] 0ªî{X¹¦: renamed from gretap0 [ 159.933360][ T3431] 0ªî{X¹¦: entered allmulticast mode [ 159.938915][ T3431] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 159.991646][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.013078][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.163143][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.173829][ T3474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.173995][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.183419][ T3474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.270334][ T3474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.279517][ T3474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.373566][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 160.393576][ T526] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 160.533697][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 160.540688][ T10] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 160.549098][ T10] usb 1-1: config 2 has no interface number 0 [ 160.555581][ T10] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 160.565797][ T10] usb 1-1: config 2 interface 88 has no altsetting 0 [ 160.576395][ T10] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 160.585919][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.594511][ T10] usb 1-1: Product: syz [ 160.599063][ T10] usb 1-1: Manufacturer: syz [ 160.604754][ T10] usb 1-1: SerialNumber: syz [ 160.610718][ T3469] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.662639][ T36] audit: type=1326 audit(2000000040.550:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.2.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62f8b9c819 code=0x0 [ 160.823586][ T3469] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.891474][ T3491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.902405][ T3491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.427570][ T3494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.436505][ T3494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.437313][ T3469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.454824][ T3469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.465507][ T3469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 161.475803][ T10] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.486930][ T10] asix 1-1:2.88: probe with driver asix failed with error -71 [ 161.503323][ T10] usb 1-1: USB disconnect, device number 92 [ 161.773615][ T526] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 161.923577][ T526] usb 3-1: Using ep0 maxpacket: 32 [ 161.929937][ T526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.940484][ T526] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.951573][ T526] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.961902][ T526] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 161.975809][ T526] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.983103][ T526] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 161.998108][ T3501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.002411][ T526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.018738][ T3501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.018762][ T526] usb 3-1: config 0 descriptor?? [ 162.244539][ T3514] overlay: Unknown parameter '¨é‡º?dÜF²ËžfQÎcùÄêaâóæÂÁ­“Á¸ä¼‰ZÛºÊRœš¼‡û1Òk´L.Ó*úÄöš'GîcæªzÿÿSŠ@xè}rú0ålUÙ”ýÆO»Õ­ëy T?cñ„îœAµåÓÎVð>+¿¹' [ 162.424684][ T526] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 162.435229][ T526] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 162.444141][ T526] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 162.453527][ T526] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 162.461966][ T526] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0 [ 162.481251][ T526] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 162.498674][ T3517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.513574][ T526] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints? [ 162.524053][ T3517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.633506][ T3499] netlink: 'syz.2.1079': attribute type 12 has an invalid length. [ 162.649542][ C0] hid-thrustmaster 0003:044F:B65D.0015: URB to get model id failed with error -71 [ 162.660306][ T526] usb 3-1: USB disconnect, device number 85 [ 162.899148][ T3537] syz.1.1091 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.603606][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 163.753578][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 163.760336][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.772139][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.782217][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.795815][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.806160][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.816466][ T10] usb 1-1: config 0 descriptor?? [ 163.953631][ T31] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 164.103589][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 164.110623][ T31] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 164.119411][ T31] usb 3-1: config 0 has no interface number 0 [ 164.126084][ T31] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 164.138530][ T31] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 164.149550][ T31] usb 3-1: config 0 interface 200 has no altsetting 0 [ 164.158798][ T31] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 164.169269][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.177856][ T31] usb 3-1: Product: syz [ 164.182825][ T31] usb 3-1: Manufacturer: syz [ 164.187751][ T31] usb 3-1: SerialNumber: syz [ 164.196964][ T31] usb 3-1: config 0 descriptor?? [ 164.227136][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.234981][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.243158][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.251318][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.259522][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.267081][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.274718][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.282105][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.289571][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.297357][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.304787][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.312557][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.321068][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.329209][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.337009][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 164.351492][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input37 [ 164.368366][ T10] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 164.409938][ T31] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input38 [ 164.430434][ T31] usb 3-1: USB disconnect, device number 86 [ 164.443312][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.454836][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.466779][ T329] usb 1-1: USB disconnect, device number 93 [ 164.924557][ T3548] tipc: Resetting bearer [ 164.947754][ T3550] fuse: Unknown parameter '' [ 165.080079][ T36] audit: type=1400 audit(2000000044.970:451): avc: denied { accept } for pid=3560 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.081957][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.115591][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.303583][ T10] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 165.465071][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.483207][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 165.502946][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.515325][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 165.527111][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 165.537256][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 165.551620][ T10] usb 3-1: string descriptor 0 read error: -22 [ 165.558650][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 165.568805][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.576243][ T3602] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1114'. [ 165.582736][ T10] usb 3-1: config 0 descriptor?? [ 165.593621][ T3566] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 165.624277][ T1539] udevd[1539]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.642649][ T3602] netlink: 'syz.4.1114': attribute type 27 has an invalid length. [ 165.653347][ T3602] gretap0: left promiscuous mode [ 165.681679][ T3604] netlink: 'syz.0.1115': attribute type 8 has an invalid length. [ 165.707788][ T36] audit: type=1400 audit(2000000045.600:452): avc: denied { create } for pid=3605 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 165.758955][ T3609] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 165.802399][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.823654][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.832772][ T10] usb 3-1: USB disconnect, device number 87 [ 165.981610][ T36] audit: type=1326 audit(2000000045.870:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3632 comm="syz.4.1124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe7999c819 code=0x0 [ 166.133608][ T526] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 166.284874][ T526] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.295959][ T526] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.305662][ T526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.314144][ T526] usb 1-1: SerialNumber: syz [ 166.321974][ T526] cdc_acm 1-1:1.0: skipping garbage [ 166.328526][ T526] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 166.351243][ T36] audit: type=1400 audit(2000000046.240:454): avc: denied { relabelfrom } for pid=3636 comm="syz.2.1125" name="" dev="pipefs" ino=26758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.387496][ T3641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 166.520606][ T3628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.530093][ T3628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.538858][ T3628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.547997][ T3628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.556878][ T3628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.565750][ T3628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.574607][ T3628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.584047][ T3628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.592541][ T3628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.602072][ T3628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.615008][ T526] usb 1-1: USB disconnect, device number 94 [ 166.653900][ T31] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 166.814860][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.836888][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.848244][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.858220][ T31] usb 3-1: SerialNumber: syz [ 166.975559][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.984880][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.158042][ T3663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3663 comm=syz.0.1134 [ 167.173055][ T3663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3663 comm=syz.0.1134 [ 167.189264][ T3663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3663 comm=syz.0.1134 [ 167.463584][ T326] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 167.480396][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 167.491324][ T31] usb 3-1: USB disconnect, device number 88 [ 167.520794][ T3668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.529761][ T3668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.615211][ T326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.624601][ T326] usb 1-1: config 4 has an invalid interface number: 226 but max is 0 [ 167.632888][ T326] usb 1-1: config 4 has no interface number 0 [ 167.640076][ T326] usb 1-1: config 4 interface 226 has no altsetting 0 [ 167.654709][ T326] usb 1-1: New USB device found, idVendor=257a, idProduct=1608, bcdDevice=29.a5 [ 167.664434][ T326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.672596][ T326] usb 1-1: Product: syz [ 167.677609][ T326] usb 1-1: Manufacturer: Т [ 167.682723][ T326] usb 1-1: SerialNumber: syz [ 167.900211][ T326] usb 1-1: USB disconnect, device number 95 [ 167.966888][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 168.054034][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'. [ 168.077619][ T36] audit: type=1400 audit(2000000047.970:455): avc: denied { checkpoint_restore } for pid=3687 comm="syz.4.1143" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.108966][ T36] audit: type=1400 audit(2000000048.000:456): avc: denied { setattr } for pid=3687 comm="syz.4.1143" name="PINGv6" dev="sockfs" ino=27804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.146398][ T36] audit: type=1400 audit(2000000048.040:457): avc: denied { create } for pid=3689 comm="syz.4.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 168.154457][ T3690] tipc: Trying to set illegal importance in message [ 168.206060][ T3694] tipc: Resetting bearer [ 168.226965][ T36] audit: type=1400 audit(2000000048.120:458): avc: denied { accept } for pid=3695 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 168.248338][ T36] audit: type=1400 audit(2000000048.150:459): avc: denied { read } for pid=3695 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.283594][ T526] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 168.333289][ T3707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.342286][ T3707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.444761][ T526] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.452931][ T526] usb 3-1: config 0 has no interface number 0 [ 168.459187][ T526] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.470591][ T526] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.480525][ T526] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.493949][ T526] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 168.503249][ T526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.512119][ T526] usb 3-1: config 0 descriptor?? [ 168.663590][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 168.813555][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 168.819963][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 168.828656][ T10] usb 1-1: config 0 has no interface number 0 [ 168.835016][ T10] usb 1-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.846110][ T10] usb 1-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.861848][ T10] usb 1-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.875139][ T10] usb 1-1: config 0 interface 6 has no altsetting 0 [ 168.882217][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 168.891395][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.900553][ T10] usb 1-1: config 0 descriptor?? [ 168.920235][ T526] uclogic 0003:28BD:0042.0017: failed retrieving string descriptor #100: -71 [ 168.953660][ T526] uclogic 0003:28BD:0042.0017: failed retrieving pen parameters: -71 [ 168.962590][ T526] uclogic 0003:28BD:0042.0017: pen probing failed: -71 [ 168.971076][ T526] uclogic 0003:28BD:0042.0017: failed probing parameters: -71 [ 168.979409][ T526] uclogic 0003:28BD:0042.0017: probe with driver uclogic failed with error -71 [ 168.994912][ T526] usb 3-1: USB disconnect, device number 89 [ 169.077441][ T3721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 169.110816][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.119682][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.145826][ T3727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.154889][ T3727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.166048][ T3727] exFAT-fs (rnullb0): invalid boot record signature [ 169.172948][ T3727] exFAT-fs (rnullb0): failed to read boot sector [ 169.179712][ T3727] exFAT-fs (rnullb0): failed to recognize exfat type [ 169.382294][ T10] uclogic 0003:28BD:0933.0018: interface is invalid, ignoring [ 169.391408][ T3727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.400718][ T3727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.443899][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'. [ 169.813555][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 169.963563][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 169.971047][ T10] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 169.979683][ T10] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.994520][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.003137][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 170.012555][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.014820][ T3744] fuse: Unknown parameter '*mú«cb' [ 170.020925][ T10] usb 3-1: Product: syz [ 170.032043][ T10] usb 3-1: Manufacturer: syz [ 170.036954][ T10] usb 3-1: SerialNumber: syz [ 170.043279][ T10] usb 3-1: config 0 descriptor?? [ 170.105003][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.114430][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.253549][ T10] usb 3-1: USB disconnect, device number 90 [ 170.656788][ T3757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.665805][ T3757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.787383][ T3759] tipc: Resetting bearer [ 171.113635][ T326] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 171.265035][ T326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.273347][ T326] usb 3-1: not running at top speed; connect to a high speed hub [ 171.282606][ T326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.293018][ T326] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 171.304993][ T326] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.321196][ T326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.330436][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.338894][ T326] usb 3-1: Product: syz [ 171.343115][ T326] usb 3-1: Manufacturer: syz [ 171.348012][ T326] usb 3-1: SerialNumber: syz [ 171.356998][ T3772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.366491][ T3772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.435278][ T526] usb 1-1: USB disconnect, device number 96 [ 171.473294][ T36] audit: type=1400 audit(2000000051.360:460): avc: denied { lock } for pid=3778 comm="syz.0.1177" path="socket:[28081]" dev="sockfs" ino=28081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.574764][ T326] usb 3-1: USB disconnect, device number 91 [ 171.932611][ T3785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.943596][ T3785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.363662][ T526] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 172.513830][ T526] usb 3-1: Using ep0 maxpacket: 16 [ 172.521429][ T526] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 172.529413][ T526] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.542829][ T526] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.551747][ T526] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 172.561347][ T526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.569647][ T526] usb 3-1: Product: syz [ 172.574042][ T526] usb 3-1: Manufacturer: syz [ 172.578962][ T526] usb 3-1: SerialNumber: syz [ 172.587001][ T526] usb 3-1: config 0 descriptor?? [ 172.643546][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 172.801590][ T526] usb 3-1: USB disconnect, device number 92 [ 172.810175][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.821893][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 172.832041][ T10] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 172.841074][ T10] usb 1-1: Manufacturer: syz [ 172.846804][ T10] usb 1-1: SerialNumber: syz [ 173.042922][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.051890][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.060193][ T3797] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1184'. [ 173.147740][ T36] audit: type=1400 audit(2000000053.040:461): avc: denied { getopt } for pid=3836 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.235741][ T10] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 173.250747][ T10] usb 1-1: USB disconnect, device number 97 [ 173.283049][ T1539] udevd[1539]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.553569][ T349] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 173.621220][ T3865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.630610][ T3865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.639425][ T3865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.649596][ T3865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.703578][ T349] usb 3-1: Using ep0 maxpacket: 32 [ 173.703584][ T326] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 173.718186][ T349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.730290][ T349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.741005][ T349] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 173.750569][ T349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.760337][ T349] usb 3-1: config 0 descriptor?? [ 173.833591][ T326] usb 1-1: device descriptor read/64, error -71 [ 173.961001][ T3870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.971894][ T3870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.073574][ T326] usb 1-1: device descriptor read/64, error -71 [ 174.178845][ T349] nintendo 0003:057E:200E.0019: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 174.243586][ T349] nintendo 0003:057E:200E.0019: Failed charging grip handshake [ 174.251859][ T349] nintendo 0003:057E:200E.0019: Failed to initialize controller; ret=-110 [ 174.261809][ T349] nintendo 0003:057E:200E.0019: probe - fail = -110 [ 174.269154][ T349] nintendo 0003:057E:200E.0019: probe with driver nintendo failed with error -110 [ 174.313587][ T326] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 174.377835][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.386644][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.395657][ T349] usb 3-1: USB disconnect, device number 93 [ 174.453552][ T326] usb 1-1: device descriptor read/64, error -71 [ 174.508461][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.517423][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.693674][ T326] usb 1-1: device descriptor read/64, error -71 [ 174.803765][ T326] usb usb1-port1: attempt power cycle [ 175.107498][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.116472][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.143859][ T326] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 175.165977][ T326] usb 1-1: device descriptor read/8, error -71 [ 175.295192][ T326] usb 1-1: device descriptor read/8, error -71 [ 175.533551][ T326] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 175.554943][ T326] usb 1-1: device descriptor read/8, error -71 [ 175.643554][ T3901] mmap: syz.4.1216 (3901): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 175.686828][ T326] usb 1-1: device descriptor read/8, error -71 [ 175.803697][ T326] usb usb1-port1: unable to enumerate USB device [ 176.520766][ T3912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.523392][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.539848][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.552559][ T36] audit: type=1400 audit(2000000056.450:462): avc: granted { setsecparam } for pid=3917 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 176.615405][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 176.625065][ T3927] bridge_slave_1: left allmulticast mode [ 176.630849][ T3927] bridge_slave_1: left promiscuous mode [ 176.636794][ T3927] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.644878][ T3927] bridge_slave_0: left allmulticast mode [ 176.650870][ T3927] bridge_slave_0: left promiscuous mode [ 176.657057][ T3927] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.758232][ T3930] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 177.004448][ T326] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 177.064994][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.075951][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.153537][ T326] usb 1-1: Using ep0 maxpacket: 32 [ 177.160521][ T326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.169404][ T326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.179965][ T326] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 177.191342][ T326] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 177.200932][ T326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.209796][ T326] usb 1-1: Product: syz [ 177.214312][ T326] usb 1-1: Manufacturer: syz [ 177.218961][ T326] usb 1-1: SerialNumber: syz [ 177.429357][ T326] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 177.438309][ T326] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 177.446484][ T326] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 177.454229][ T326] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 177.464222][ T326] usb 1-1: USB disconnect, device number 102 [ 177.477189][ T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 177.600142][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.609009][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.957667][ T36] audit: type=1400 audit(2000000057.850:463): avc: granted { setsecparam } for pid=3939 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 177.980860][ T36] audit: type=1400 audit(2000000057.880:464): avc: denied { map } for pid=3939 comm="syz.0.1230" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.116016][ T3944] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1232'. [ 178.182987][ T36] audit: type=1400 audit(2000000058.070:465): avc: denied { lock } for pid=3955 comm="syz.0.1235" path="socket:[28596]" dev="sockfs" ino=28596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 178.331809][ T36] audit: type=1400 audit(2000000058.220:466): avc: denied { read } for pid=3948 comm="syz.4.1233" name="/" dev="configfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.370564][ T36] audit: type=1400 audit(2000000058.250:467): avc: denied { open } for pid=3948 comm="syz.4.1233" path="/" dev="configfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 178.462980][ T36] audit: type=1400 audit(2000000058.350:468): avc: denied { bpf } for pid=3965 comm="syz.4.1238" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.333562][ T329] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 179.376283][ T36] audit: type=1400 audit(2000000059.270:469): avc: denied { bind } for pid=3992 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.384525][ T3993] netlink: 'syz.4.1248': attribute type 10 has an invalid length. [ 179.448568][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.458464][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.493569][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 179.500198][ T329] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.503705][ T526] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 179.509643][ T329] usb 3-1: config 179 has no interface number 0 [ 179.523366][ T329] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 179.535090][ T329] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 179.547933][ T329] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.559597][ T329] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.573812][ T329] usb 3-1: config 179 interface 65 has no altsetting 0 [ 179.581007][ T329] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 179.590629][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.603637][ T329] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input44 [ 179.643608][ T526] usb 1-1: device descriptor read/64, error -71 [ 179.663693][ T95] input input44: unable to receive magic message: -110 [ 179.671353][ T95] input input44: unable to receive magic message: -32 [ 179.681107][ T95] input input44: unable to receive magic message: -32 [ 179.689031][ T95] input input44: unable to receive magic message: -32 [ 179.697010][ T95] input input44: unable to receive magic message: -32 [ 179.819754][ T10] usb 3-1: USB disconnect, device number 94 [ 179.819913][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.834349][ T10] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 179.903596][ T526] usb 1-1: device descriptor read/64, error -71 [ 180.143623][ T526] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 180.255370][ T4001] cgroup: fork rejected by pids controller in /syz4 [ 180.291547][ T526] usb 1-1: device descriptor read/64, error -71 [ 180.311399][ T4126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.321370][ T4126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.533568][ T526] usb 1-1: device descriptor read/64, error -71 [ 180.643885][ T526] usb usb1-port1: attempt power cycle [ 180.703627][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 180.853535][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 180.860258][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.871752][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.882396][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.891706][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.900990][ T10] usb 3-1: config 0 descriptor?? [ 180.907872][ T10] hub 3-1:0.0: USB hub found [ 180.983583][ T526] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 181.004799][ T526] usb 1-1: device descriptor read/8, error -71 [ 181.134790][ T526] usb 1-1: device descriptor read/8, error -71 [ 181.310364][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.319433][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.334001][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 181.344645][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 181.350911][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 181.365164][ T4153] pim6reg1: entered promiscuous mode [ 181.370723][ T4153] pim6reg1: entered allmulticast mode [ 181.376494][ T526] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 181.385132][ T10] usb 3-1: USB disconnect, device number 95 [ 181.405645][ T526] usb 1-1: device descriptor read/8, error -71 [ 181.535356][ T526] usb 1-1: device descriptor read/8, error -71 [ 181.653995][ T526] usb usb1-port1: unable to enumerate USB device [ 181.737130][ T4175] incfs: Options parsing error. -22 [ 181.744726][ T4175] incfs: mount failed -22 [ 181.782546][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.796576][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.800789][ T4185] GUP no longer grows the stack in syz.2.1268 (4185): 200000005000-200000008000 (200000004000) [ 181.809322][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.821706][ T4185] CPU: 0 UID: 0 PID: 4185 Comm: syz.2.1268 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 181.821822][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.821866][ T4185] Call Trace: [ 181.821888][ T4185] [ 181.821918][ T4185] __dump_stack+0x21/0x30 [ 181.822040][ T4185] dump_stack_lvl+0x140/0x1c0 [ 181.822150][ T4185] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.822228][ T4185] ? find_vma+0xd3/0x120 [ 181.822334][ T4185] dump_stack+0x19/0x20 [ 181.822418][ T4185] __get_user_pages+0x1e18/0x22b0 [ 181.822493][ T4185] ? __kasan_check_write+0x18/0x20 [ 181.822574][ T4185] ? detach_entity_load_avg+0x7b0/0x7b0 [ 181.822680][ T4185] ? down_read_killable+0x7f/0x100 [ 181.822757][ T4185] ? populate_vma_page_range+0x220/0x220 [ 181.822843][ T4185] ? update_curr+0xf8/0x9e0 [ 181.822942][ T4185] ? xfd_validate_state+0x68/0x140 [ 181.823045][ T4185] __gup_longterm_locked+0xc5a/0x1600 [ 181.823114][ T4185] ? tokenize_frame_descr+0xa1/0xc0 [ 181.823198][ T4185] ? __switch_to+0xc4f/0x1300 [ 181.823292][ T4185] ? __cfi_sched_clock_cpu+0x10/0x10 [ 181.823377][ T4185] ? __pte_offset_map+0x1b0/0x230 [ 181.823500][ T4185] gup_fast_fallback+0x12e9/0x14e0 [ 181.823585][ T4185] ? get_user_pages_fast_only+0xc0/0xc0 [ 181.823660][ T4185] get_user_pages_fast+0x73/0xb0 [ 181.823725][ T4185] get_futex_key+0x25f/0x940 [ 181.823800][ T4185] ? __cfi_get_futex_key+0x10/0x10 [ 181.823874][ T4185] futex_wait_setup+0xae/0x260 [ 181.823959][ T4185] ? __cfi_futex_wait_setup+0x10/0x10 [ 181.824046][ T4185] ? __asan_memcpy+0x5a/0x80 [ 181.824131][ T4185] __futex_wait+0x134/0x3e0 [ 181.824217][ T4185] ? __cfi___futex_wait+0x10/0x10 [ 181.824304][ T4185] ? __cfi_futex_wake_mark+0x10/0x10 [ 181.824390][ T4185] ? futex_wake+0x666/0x950 [ 181.824466][ T4185] ? futex_setup_timer+0xb4/0xd0 [ 181.824543][ T4185] futex_wait+0x129/0x7b0 [ 181.824628][ T4185] ? __cfi_futex_wait+0x10/0x10 [ 181.824714][ T4185] ? mas_walk+0x3f7/0x650 [ 181.824788][ T4185] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 181.824891][ T4185] ? mas_find+0x358/0x5f0 [ 181.824957][ T4185] do_futex+0x32a/0x510 [ 181.825030][ T4185] ? do_vmi_munmap+0x245/0x2e0 [ 181.825118][ T4185] ? __cfi_do_futex+0x10/0x10 [ 181.825191][ T4185] ? __vm_munmap+0x2de/0x390 [ 181.825287][ T4185] __se_sys_futex+0x13c/0x320 [ 181.825369][ T4185] ? __x64_sys_futex+0x110/0x110 [ 181.825445][ T4185] ? __kasan_check_write+0x18/0x20 [ 181.825508][ T4185] __x64_sys_futex+0xe9/0x110 [ 181.825589][ T4185] x64_sys_call+0x227f/0x2ee0 [ 181.825707][ T4185] do_syscall_64+0x57/0xf0 [ 181.825794][ T4185] ? clear_bhb_loop+0x50/0xa0 [ 181.825858][ T4185] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 181.825952][ T4185] RIP: 0033:0x7f62f8b9c819 [ 181.826008][ T4185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.826063][ T4185] RSP: 002b:00007f62f999a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.826127][ T4185] RAX: ffffffffffffffda RBX: 00007f62f8e15fa0 RCX: 00007f62f8b9c819 [ 181.826180][ T4185] RDX: 0000000001000000 RSI: 0000000000000009 RDI: 0000200000004000 [ 181.826247][ T4185] RBP: 00007f62f8c32c91 R08: 0000000000000000 R09: 0000000000000001 [ 181.826300][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.826342][ T4185] R13: 00007f62f8e16038 R14: 00007f62f8e15fa0 R15: 00007ffe904ac1c8 [ 181.826396][ T4185] [ 182.197356][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.208985][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.221011][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.230837][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.245276][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.254935][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.663610][ T46] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 182.813587][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 182.821054][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 182.831049][ T46] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 182.841410][ T46] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 182.851388][ T46] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 182.861820][ T46] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 182.871789][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 182.878548][ T46] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 182.887896][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.899344][ T46] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 182.925677][ T36] audit: type=1400 audit(2000000062.820:470): avc: denied { setopt } for pid=4201 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.936797][ T4202] netlink: 'syz.4.1274': attribute type 11 has an invalid length. [ 182.954076][ T4202] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 182.962107][ T4202] netlink: 3593 bytes leftover after parsing attributes in process `syz.4.1274'. [ 182.972799][ T4202] pim6reg1: entered promiscuous mode [ 182.978359][ T4202] pim6reg1: entered allmulticast mode [ 182.984676][ T4202] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.993062][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.002426][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.101231][ T46] scsi host1: usb-storage 1-1:1.0 [ 183.301470][ T64] usb 1-1: USB disconnect, device number 107 [ 183.570136][ T36] audit: type=1400 audit(2000000063.460:471): avc: denied { name_bind } for pid=4205 comm="syz.4.1275" src=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 183.599957][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.608958][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.803633][ T4187] Bluetooth: hci0: command 0x1003 tx timeout [ 183.803631][ T4186] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.063741][ T64] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 184.203646][ T46] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 184.214790][ T64] usb 1-1: config 0 has no interfaces? [ 184.222274][ T64] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 184.231631][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.239946][ T64] usb 1-1: SerialNumber: syz [ 184.245430][ T64] usb 1-1: config 0 descriptor?? [ 184.356101][ T46] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 184.365512][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.373614][ T46] usb 3-1: Product: syz [ 184.377894][ T46] usb 3-1: Manufacturer: syz [ 184.382630][ T46] usb 3-1: SerialNumber: syz [ 184.452836][ T329] usb 1-1: USB disconnect, device number 108 [ 184.594845][ T46] usb 3-1: USB disconnect, device number 96 [ 184.606451][ T1539] udevd[1539]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.080236][ T36] audit: type=1400 audit(2000000071.970:472): avc: denied { create } for pid=4231 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.084176][ T4240] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1285'. [ 192.140257][ T4233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 192.164291][ T36] audit: type=1400 audit(2000000071.980:473): avc: denied { write } for pid=4231 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.165314][ T4245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.198152][ T36] audit: type=1400 audit(2000000071.980:474): avc: denied { nlmsg_write } for pid=4231 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.224234][ T4245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.230081][ T36] audit: type=1400 audit(2000000072.010:475): avc: denied { ioctl } for pid=4231 comm="syz.0.1285" path="socket:[29942]" dev="sockfs" ino=29942 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.353623][ T329] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 192.373590][ T315] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 192.503626][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 192.512477][ T329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.521737][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.532794][ T329] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 192.542104][ T315] usb 3-1: Using ep0 maxpacket: 8 [ 192.549385][ T329] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 192.558855][ T315] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.568179][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.576678][ T315] usb 3-1: config 179 has no interface number 0 [ 192.583852][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.595326][ T329] usb 1-1: Product: syz [ 192.599627][ T329] usb 1-1: Manufacturer: syz [ 192.605731][ T329] usb 1-1: SerialNumber: syz [ 192.611122][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.627420][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.639016][ T315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 192.650877][ T315] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.665013][ T315] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 192.674652][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.685686][ T4243] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 192.819630][ T4251] netlink: 'syz.4.1292': attribute type 12 has an invalid length. [ 192.864515][ T4240] netlink: 'syz.0.1285': attribute type 11 has an invalid length. [ 192.872466][ T4240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1285'. [ 192.883868][ T329] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 192.891952][ T329] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 192.902860][ T329] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 192.904705][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.912755][ T329] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 192.925639][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.948042][ T329] usb 1-1: USB disconnect, device number 109 [ 192.970005][ T4246] udevd[4246]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.998338][ T4259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.009168][ T4259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.145183][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.154268][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.363971][ T526] usb 3-1: USB disconnect, device number 97 [ 193.364044][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.378646][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 193.409983][ T36] audit: type=1400 audit(2000000073.300:476): avc: denied { mounton } for pid=4264 comm="syz.0.1296" path="/proc/802/task" dev="proc" ino=29992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 193.683538][ T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 193.833624][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 193.840160][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.851800][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.861906][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.869219][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 193.878382][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.887638][ T10] usb 1-1: config 0 descriptor?? [ 193.900337][ T36] audit: type=1400 audit(2000000073.790:477): avc: denied { ioctl } for pid=4270 comm="syz.0.1297" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.935418][ T36] audit: type=1400 audit(2000000073.830:478): avc: denied { read } for pid=4281 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 194.103114][ T36] audit: type=1400 audit(2000000073.990:479): avc: denied { read write } for pid=4270 comm="syz.0.1297" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.128075][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.144097][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.183602][ T36] audit: type=1400 audit(2000000074.020:480): avc: denied { open } for pid=4270 comm="syz.0.1297" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK [ 194.374644][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.395870][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping crond: [ 194.427816][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 194.434221][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.446480][ T36] audit: type=1400 audit(2000000074.340:481): avc: denied { accept } for pid=4297 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 194.475815][ T10] usb 1-1: USB disconnect, device number 110 stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 194.605005][ T4315] netlink: 'syz.4.1307': attribute type 27 has an invalid length. Stopping network: [ 194.685834][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.696277][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 195.403124][ T4365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.412741][ T4365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.736708][ T4390] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1321'. [ 196.018851][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.027965][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.55 closed by remote host. Sent SIGTERM to all processes [ 196.838498][ T314] bridge_slave_1: left allmulticast mode [ 196.845420][ T314] bridge_slave_1: left promiscuous mode [ 196.851927][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.861779][ T314] bridge_slave_0: left allmulticast mode [ 196.868138][ T314] bridge_slave_0: left promiscuous mode [ 196.874280][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.882905][ T314] tipc: Resetting bearer [ 196.933005][ T314] tipc: Disabling bearer [ 197.023964][ T315] usb 5-1: USB disconnect, device number 24 [ 197.077948][ T314] tipc: Disabling bearer [ 197.083671][ T314] tipc: Left network mode [ 197.090613][ T314] veth1_macvtap: left promiscuous mode [ 197.096523][ T314] veth0_vlan: left promiscuous mode [ 197.102340][ T314] veth1_macvtap: left promiscuous mode [ 197.108286][ T314] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 197.565678][ T314] ------------[ cut here ]------------ [ 197.571614][ T314] WARNING: CPU: 0 PID: 314 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 197.582340][ T314] Modules linked in: [ 197.586518][ T314] CPU: 0 UID: 0 PID: 314 Comm: kworker/u8:4 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 197.598359][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.608927][ T314] Workqueue: netns cleanup_net [ 197.613849][ T314] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 197.620045][ T314] Code: e8 91 47 d9 fc 4b 83 3c 3e 00 75 19 e8 05 11 81 fc 49 81 ff f8 07 00 00 74 1b e8 f7 10 81 fc 49 83 c7 08 eb c9 e8 ec 10 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 197.640326][ T314] RSP: 0018:ffffc9000b80fb90 EFLAGS: 00010293 [ 197.646633][ T314] RAX: ffffffff850699f4 RBX: ffff888132856a80 RCX: ffff888108743900 [ 197.654927][ T314] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f840b8 [ 197.662917][ T314] RBP: ffffc9000b80fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 197.671059][ T314] R10: dffffc0000000000 R11: fffff52001701f04 R12: dffffc0000000000 [ 197.679372][ T314] R13: dffffc0000000000 R14: ffff888103f84000 R15: 00000000000000b8 [ 197.687459][ T314] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 197.696697][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.703501][ T314] CR2: 00007f6888026e9c CR3: 0000000109356000 CR4: 00000000003526b0 [ 197.711499][ T314] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 197.719683][ T314] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 197.727973][ T314] Call Trace: [ 197.731281][ T314] [ 197.734389][ T314] cleanup_net+0x6bd/0xc90 [ 197.738892][ T314] ? __cfi_cleanup_net+0x10/0x10 [ 197.744032][ T314] ? kick_pool+0xb9/0x550 [ 197.748576][ T314] process_scheduled_works+0x7d1/0x1020 [ 197.754299][ T314] worker_thread+0xc70/0x10b0 [ 197.759294][ T314] ? __cfi_try_to_wake_up+0x10/0x10 [ 197.764598][ T314] kthread+0x2c6/0x370 [ 197.768772][ T314] ? __cfi_worker_thread+0x10/0x10 [ 197.774514][ T314] ? __cfi_kthread+0x10/0x10 [ 197.779170][ T314] ret_from_fork+0x67/0xa0 [ 197.783765][ T314] ? __cfi_kthread+0x10/0x10 [ 197.788415][ T314] ret_from_fork_asm+0x1a/0x30 [ 197.793213][ T314] [ 197.796534][ T314] ---[ end trace 0000000000000000 ]--- [ 197.802577][ T314] ------------[ cut here ]------------ [ 197.808164][ T314] WARNING: CPU: 1 PID: 314 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 197.819409][ T314] Modules linked in: [ 197.823351][ T314] CPU: 1 UID: 0 PID: 314 Comm: kworker/u8:4 Tainted: G W syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 197.837063][ T314] Tainted: [W]=WARN [ 197.840890][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.851624][ T314] Workqueue: netns cleanup_net [ 197.856694][ T314] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 197.863829][ T314] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 b0 10 81 fc 49 81 ff f8 07 00 00 74 1b e8 a2 10 81 fc 49 83 c7 08 eb c5 e8 97 10 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 87 10 81 fc 5b 41 5c 41 5e 41 [ 197.884160][ T314] RSP: 0018:ffffc9000b80fb90 EFLAGS: 00010293 [ 197.890372][ T314] RAX: ffffffff85069a49 RBX: ffff888103f84800 RCX: ffff888108743900 [ 197.898688][ T314] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f84808 [ 197.906858][ T314] RBP: ffffc9000b80fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 197.915027][ T314] R10: dffffc0000000000 R11: fffff52001701f04 R12: dffffc0000000000 [ 197.923201][ T314] R13: dffffc0000000000 R14: ffff888103f84000 R15: 0000000000000008 [ 197.931397][ T314] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 197.940908][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.947645][ T314] CR2: 00007ffc04489ff4 CR3: 0000000109356000 CR4: 00000000003526b0 [ 197.955805][ T314] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 197.964129][ T314] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 197.972314][ T314] Call Trace: [ 197.975705][ T314] [ 197.978751][ T314] cleanup_net+0x6bd/0xc90 [ 197.983538][ T314] ? __cfi_cleanup_net+0x10/0x10 [ 197.988608][ T314] ? kick_pool+0xb9/0x550 [ 197.993131][ T314] process_scheduled_works+0x7d1/0x1020 [ 197.998808][ T314] worker_thread+0xc70/0x10b0 [ 198.003633][ T314] ? __cfi_try_to_wake_up+0x10/0x10 [ 198.008866][ T314] kthread+0x2c6/0x370 [ 198.012996][ T314] ? __cfi_worker_thread+0x10/0x10 [ 198.018336][ T314] ? __cfi_kthread+0x10/0x10 [ 198.022977][ T314] ret_from_fork+0x67/0xa0 [ 198.027872][ T314] ? __cfi_kthread+0x10/0x10 [ 198.032951][ T314] ret_from_fork_asm+0x1a/0x30 [ 198.038590][ T314] [ 198.041637][ T314] ---[ end trace 0000000000000000 ]--- [ 198.052208][ T314] ------------[ cut here ]------------ [ 198.058458][ T314] WARNING: CPU: 0 PID: 314 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 198.068821][ T314] Modules linked in: [ 198.073018][ T314] CPU: 0 UID: 0 PID: 314 Comm: kworker/u8:4 Tainted: G W syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 198.086652][ T314] Tainted: [W]=WARN [ 198.090721][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.100995][ T314] Workqueue: netns cleanup_net [ 198.106066][ T314] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 198.112162][ T314] Code: 3c 20 00 74 08 48 89 df e8 8f 13 f4 fc 48 8b 3b e8 f7 3b df fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 dc 9b fc <0f> 0b e9 b0 fd ff ff e8 e6 dc 9b fc 0f 0b e9 18 fe ff ff e8 da dc [ 198.132233][ T314] RSP: 0018:ffffc9000b80fb70 EFLAGS: 00010293 [ 198.138719][ T314] RAX: ffffffff84ebcdee RBX: ffff888132856a80 RCX: ffff888108743900 [ 198.146991][ T314] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888108743900 [ 198.155207][ T314] RBP: ffffc9000b80fb98 R08: ffffffff87d38c07 R09: 1ffffffff0fa7180 [ 198.163227][ T314] R10: dffffc0000000000 R11: fffffbfff0fa7181 R12: 1ffffffff0fa6ed0 [ 198.171293][ T314] R13: dffffc0000000000 R14: ffff888132857680 R15: dffffc0000000000 [ 198.179518][ T314] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 198.188845][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.195712][ T314] CR2: 00007f6888026e9c CR3: 0000000109356000 CR4: 00000000003526b0 [ 198.204202][ T314] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 198.212295][ T314] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 198.220514][ T314] Call Trace: [ 198.223884][ T314] [ 198.226936][ T314] xfrm_net_exit+0x31/0x80 [ 198.231465][ T314] cleanup_net+0x6bd/0xc90 [ 198.235951][ T314] ? __cfi_cleanup_net+0x10/0x10 [ 198.240916][ T314] ? kick_pool+0xb9/0x550 [ 198.245307][ T314] process_scheduled_works+0x7d1/0x1020 [ 198.251015][ T314] worker_thread+0xc70/0x10b0 [ 198.255978][ T314] ? __cfi_try_to_wake_up+0x10/0x10 [ 198.261405][ T314] kthread+0x2c6/0x370 [ 198.265591][ T314] ? __cfi_worker_thread+0x10/0x10 [ 198.270733][ T314] ? __cfi_kthread+0x10/0x10 [ 198.275567][ T314] ret_from_fork+0x67/0xa0 [ 198.280020][ T314] ? __cfi_kthread+0x10/0x10 [ 198.284886][ T314] ret_from_fork_asm+0x1a/0x30 [ 198.289712][ T314] [ 198.292749][ T314] ---[ end trace 0000000000000000 ]--- [ 198.364679][ T314] bridge_slave_1: left allmulticast mode [ 198.370906][ T314] bridge_slave_1: left promiscuous mode [ 198.377097][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.384990][ T314] bridge_slave_0: left allmulticast mode [ 198.390851][ T314] bridge_slave_0: left promiscuous mode [ 198.397013][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.416474][ T314] tipc: Disabling bearer [ 198.531323][ T4412] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 198.539180][ T4412] ACPI: PM: Preparing to enter system sleep state S5 [ 198.547325][ T314] tipc: Disabling bearer [ 198.552965][ T4412] kvm: exiting hardware virtualization [ 198.559023][ T314] tipc: Left network mode [ 198.566022][ T4412] reboot: Power down serialport: VM disconnected.