last executing test programs: 3.519667664s ago: executing program 1 (id=1954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ptrace$setsig(0x4203, 0x0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.499929795s ago: executing program 1 (id=1955): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x5813, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x101, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0xf7d, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x9, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x4, 0x7fffffff, 0x6, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x6, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x2, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf9, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x8, 0x6, 0xd, 0xcf000000, 0x8, 0x4, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000440)="9a007800002c0066baf80cb8cc407488ef66bafc0c66edb8cc3fb6fe0f23d80f21f835800000100f23f866baf80cb8349d8e82ef66bafc0c66ed66ba4000ed8fe99001ce36e39e676483f165b9800000c00f3235010000000f30a5", 0x5b}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.388985722s ago: executing program 1 (id=1956): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018f"], 0xfdef) (async, rerun: 32) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) (rerun: 32) getpeername$packet(r2, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002080)=0x14) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) sendmmsg$inet(r6, &(0x7f0000001f40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f1b8aca714502d9f70feb699e2e86f1a74a3f5c9690433e8da4fdb7c2130dd3eb9df187bd3fb053a1816fbb91bd9be0d24c31946f7d7276098330a85f8528a4badc00b6fc8858b089a5b54dbfbff20eead389543e601fe3a2de91bd942a61c914e3c7a00c27547f470a23e94e820deedb99766bcfcb3fb21530c2f351a01ad762b65f6377f57ae7c1467471072b2b1165503736f953344ad07a66c0a", 0x9c}, {&(0x7f0000000100)="8571e19df8f4f0b52bb5a53032afb4dd68eb36245237242b25332537b161dcd2e662221b29ad24851bb5112a68a82a2fca2cdd2e35260299404263b62e016eade6eb64893035d51995d8044b680a451d93bd819702e5c8a10f68be1dfa1807794709fa0c832db07d06e145dfdb75d105ab2b72c47f71bbd0ab33f5a1217ef24c95518e95f6c0c74457c799af8164d1a2692c42bf3c6766ea03fdc30d9c4de19e90005c23c5efefeb", 0xa8}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x60}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x701}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14}}], 0xc0}}, {{&(0x7f0000000300)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="85f83c41534ffc569d90682f65f75ef42a0698f4d3d28a84db0b80599158dc549dfb317505cbad8744f9299912ecc0ab328a34076a26cb22fe200b581e8c6d80b5e510a3c830d6c23fc63ee46c130766029b83e2356dc4b6b5582819cd756aa330b9cedf2760729a5876d7623065e9a0f353dc57061961724954f24124d51d91a5625be046effcac19f2514c6150933b3c213bdb8a32dbb5c090b2fe98b6167deb6567c50f834db5bea1c54873d421ee128c26b7e1fee70f4a75880d3205991053a465d98b32b0a66f8101de95d181a7177d71123b1e8cd1ceaf92d417718aa0040ffc17f5caf2821b2169e51185", 0xee}], 0x1, 0xfffffffffffffffc}}, {{&(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000500)=[{&(0x7f00000004c0)="3e1f4bcd54eba523af4ad9d33840743daa8e33d34e3063328cde45dfdb9bf063d8c1560b42cfd84c", 0x28}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="4838870000000000000000000700e61f88fd5c00008903dd8904f2878317937f0000010000000000000009ac1414bb7f00000107174fac1414bbe0000001ffffffffac14000000000000000000800002000000040000000000000024000000000000000000000007a54388a7b390fdd365801dc600000044144851ac1e0101000000ff64018101ffffffff"], 0x88}}, {{&(0x7f0000000600)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x1000}], 0x1}}, {{&(0x7f0000001680)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001cc0)=[{&(0x7f00000016c0)="7e6222f219d4d93137abcce8bc1d51bbc8708badb790fd2b4e8bc51f7f3d721f6ab7bad3b62e5edb0e087821e5999811cd255399d42222d9fc81da43d182d1560e89e6e730eb7ad33b49d9f72fe5047bda0b63476881ef8e6cddc3b9c0baa7d1698979963bda5d14d9d98d4e77b0ace692f6227d6f0adddd536bff98addf6cc18fbed5595973e2941b87b4c6465fa576c98f05ab0c8785a8b4f07768265c8b30e6e5cc5d05b28d234385f8b61e80a10646447b2631a762dd3972643d77dbdf693bde4e5f1e697a0e867c2fa45860e23d9b3eca73f02bdaa3232e494de2329fec64ecbc6fb1939bbfe2d54a83f2ac8524f33b89ce248aa9ffc4", 0xf9}, {&(0x7f00000017c0)="0bf9cc714da62499742566ac8761", 0xe}, {&(0x7f0000001800)="c61ab29c6a3057597c28c01dc95e3f44010be6192453da5ebb2c5105ce7524d7dd5f28e492c35dd09bd86952322d12e1775a55d2e344", 0x36}, {&(0x7f0000001840)="7189909d0b65ce6d4e7c2040f0a2d7fc037c7b1e35bb09564e9868d5b299d21a72d9658f8c8f89b9f09d906c554146c39a4aba711c83b6c7f79044fe0a55fa70446d0eaf155bb5078fe095e8df29cdcc559d15a17bec0d10c8a98c0dfb712262b0eb7ccb7ae481fb69754821b04a9ff6eb896cbc14f715a09c392b9a3b2c3457668ebea71b0fd5eb96714c64918a113e3762c13137b6034cac2a38", 0x9b}, {&(0x7f0000001900)="9c516adfee698361adda52aecc2f75c34248cedeed423364ed0ff7778ec4305d741c3f97853e6f545ab8beabf8061b19b8484c27a84330cf2ecb6476323cbb131cd95bb6a9bf7eeb0c667b7358d670e519e90c61cc01719f05e45fe9dc97748fd6034f25e37fed2e23d050bc2f7840b7f19429a52461b2fd173666cddf42320976b12e3b284706f2d95b121609f3836a2acf46c1642bae0ccdfbd85b544a400c70a59fa8523392011d4fd9c5b69897de781c4941eee8f3e6dd865d9e697cd00f1448a091e7ee98aad2128ca3b4ef5563f211f11cc840", 0xd6}, {&(0x7f0000001a00)="28ccd2fec1b7eb25fc0ac462fa0a8ca8c1872f304d17aa371234baf9be40c9ef41ad263022bdeafdf3d252ea76f77d15a9c275ba3d11395e21f91fcf65d1a9be380b3894998d7a75cf6b1264e6f851e58f163dbc0aea6204d7fa7809ea7be7303922fa8a47653a833257d3a3d7e7892f110900b4fdafac3ef67d7fe4f30d601eab53e05f14462178b4a8ee371684644c8b08522566669819800213a9708d", 0x9c}, {&(0x7f0000001ac0)="429d625311b5dc5841b006a6d6e8c332e903370f9a8c859f714b0586874bf3e4412b3b5ccde12556214b90da4f85e92d23bcee18a711a8480ef1da8045747977a4aba8fbf8d67ae9a5dadefa4ec1542c027dde591ea80c18c51baf1daaa20020aaf4786789277e65ea56ab55d00ef48fc65d3f5402feaebf46c5367f7dc1539f52cc2d3aa2121b7c8043690f19f5d07e22430e0f4b8ab65291e8f36563058edd524f83b5af339b0e0c76ea4a4a53a427ad535a44e32c706158d8ce79de0df282c841d8f7371fb96b65b82025f950d3c6aa6f5e1bd17678ba951904da8debd5db3c4166e1d44bfda9d56ce86754bb3b70", 0xf0}, {&(0x7f0000001bc0)="d4d88969469396316b7b7273430297", 0xf}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="17885119c5e7b2e69c3ba37d6dc9fe297fe9f3367604b428a81c3ff322b666e1551b0b837293b26f589a02ab41e7cb32b8ee4c017a546a4816ff5462a87e14f76ef171c8ae6945c934d323e9b2ea6ba38ec93b90f865f8bbf9", 0x59}], 0xa, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x188}}], 0x5, 0x80) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (rerun: 32) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) write$tun(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0088a8ffffffffffff2833b16565320806000108000604c0ffff"], 0x2e) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000340)="1003", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000020c0)={r12, 0x1, 0x6, @random="6a7385244222"}, 0x10) (async) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') 3.223694701s ago: executing program 1 (id=1957): socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x20, 0xf, 0x2, "5cf0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000cc0)={0x0, 0xd, 0x2, "8016"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) setuid(0xee01) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, 0x0, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xb5}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000035c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) 2.997452684s ago: executing program 0 (id=1963): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008884, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r0, 0x2000000, 0x11, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d800000117000280"], 0x44}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f60, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x5813, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0xd755, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x3, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x4, 0x8, 0xffffff7f, 0x400, 0x6, 0x400, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x3, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x7, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x2, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x6, 0x89d86, 0xd, 0xcf000000, 0x8, 0x4, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x824403d2e3bc09e9}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.861078332s ago: executing program 0 (id=1964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ptrace$setsig(0x4203, 0x0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.697781472s ago: executing program 0 (id=1968): r0 = syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xa39f, 0x80, 0x3, 0x389}, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x8a45, 0x8000, 0x100002, 0xf1, 0x0, r0}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="4400d772d1576a7f2894dbf8284e71e61e8e97ba5b9cb28c8bb639b6441358815414aee3ecb230", 0x27}, {&(0x7f00000000c0)="4c08c559bd369f250a80c71b57d8f6318550930f81458f95ad01595297f07f11bef02ef9c8272ae806c70107c9ab89155676b711bf2229bfb2f8951e36e2d0d7cb0eb8f2955ae426e63853ccab2fcc56d160c102cf1c6b0bc3", 0x59}], 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.670586563s ago: executing program 0 (id=1969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x8ed9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x2000200) 2.609824997s ago: executing program 3 (id=1970): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet(r5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 2.479648805s ago: executing program 0 (id=1971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xa000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x27, 0x2, '\x00', 0xb}, {0x7b, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x1c, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x70, 0x1, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc, '\x00', 0x4}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x4, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0x12, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x1b, '\x00', 0xb}, {0x9, 0x6, 0x80, '\x00', 0x8}, {0x7, 0xc, 0x2, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x7d, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x2, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000001c0)={0x80000, 0x0, {[0x7, 0x7, 0x8000000000000001, 0x9, 0x9, 0x9, 0x6e9a]}}) 2.474980635s ago: executing program 3 (id=1972): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x6, 0x20}}}}}]}}]}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000013c0)={{r2, r3+10000000}, {r4, r5+60000000}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000300)={{r7}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107}) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) syz_usb_control_io$hid(r0, 0x0, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000880), 0x76, 0x109301) ioctl$USBDEVFS_GETDRIVER(r11, 0x41045508, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xff7f, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5}, 0x0}, 0x0) 2.459494936s ago: executing program 0 (id=1973): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="20b0f4ce0a120200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="3ef9b94900008016dcfaa6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000035c0)={0x2c, &(0x7f0000000780)={0x40, 0x16, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0xc, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x2, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x5813, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x5, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x2, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xcf000000, 0x8, 0x4, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.150340984s ago: executing program 2 (id=1974): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x5813, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xccc, 0xfffffffe, 0xffff, 0x637b, 0x7e, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0xb, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x2, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xcf000000, 0x8, 0x4, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000240)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c9200904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050204078887000ae4ff0824030101010505ae1564349b7c3cd245c0"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x85, &(0x7f0000000140)=@string={0x85, 0x3, "d26191a23e100495379a4f96317e9e7211ba2deaf4b97568aa1f01edf5d945548b21c76cc1c9acdaf59742170c8372b3f8d3909e10f47ab7a727d33092ae751e2e470813e854affb544aed427b0c6e468d9bca99fd5af9222e4db5749421a60aec269091a0bdf16d214f83a73906d5669b6869d413e32e37448a2acb7efb52d4be6a67"}}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0xffffffff, 0x10410}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 941.170945ms ago: executing program 3 (id=1975): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x5813, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x101, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0xf7d, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x9, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x4, 0x7fffffff, 0x6, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x6, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x2, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf9, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x8, 0x6, 0xd, 0xcf000000, 0x8, 0x4, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000440)="9a007800002c0066baf80cb8cc407488ef66bafc0c66edb8cc3fb6fe0f23d80f21f835800000100f23f866baf80cb8349d8e82ef66bafc0c66ed66ba4000ed8fe99001ce36e39e676483f165b9800000c00f3235010000000f30a5", 0x5b}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 940.541615ms ago: executing program 3 (id=1976): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r0) removexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=@random={'security.', '.\x00'}) 883.693998ms ago: executing program 3 (id=1977): r0 = syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xa39f, 0x80, 0x3, 0x389}, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x8a45, 0x8000, 0x100002, 0xf1, 0x0, r0}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x4, 0xfb, 0x0, 0x10001, 0x2, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0x65, 0x5, 0x9, 0xc, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 732.514277ms ago: executing program 2 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ptrace$setsig(0x4203, 0x0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 573.447386ms ago: executing program 2 (id=1979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffc4a, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x40000) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000540)=0x7, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0xfffffffffffffc7c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x28}}], 0x1, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x80000000) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x1) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000092000/0x3000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r6, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000a96000/0x3000)=nil) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00004e5000/0x400000)=nil) 383.691207ms ago: executing program 2 (id=1980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x8ed9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 265.557074ms ago: executing program 2 (id=1981): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x282, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x545a, 0x4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) (async) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000000140)=0xffffff80) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) (rerun: 64) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=""/29, 0x1d}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) 230.144826ms ago: executing program 1 (id=1982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfdef) clock_gettime(0x5, &(0x7f00000001c0)) r3 = socket(0x10, 0x3, 0x0) (async) unshare(0x20040600) (async) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030e0000002cbd70000000000005000600332000000a00000000000000fe800000000000000000000000000018000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}, 0x1, 0x7}, 0x4000000) tgkill(r4, r4, 0x21) (async) write(r3, &(0x7f0000000080)="240000001e005f02941d00fffffffff802000000dd00000000000000080008000d000000", 0x24) (async) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0) r7 = epoll_create1(0x80000) epoll_pwait2(r7, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x4ffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x10000005, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x6, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x3, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4000006, 0xb, 0xa, 0x1001, 0x9, 0x9, 0x2, 0x7f, 0xa, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x804, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r8, 0xe, 0xffffffffffffffff) syz_clone3(&(0x7f0000000280)={0xc8001200, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x28}, &(0x7f0000001900)=""/4096, 0x1000, &(0x7f0000000200)=""/99, &(0x7f0000000140)=[r4, r4, r4, r4, r4, r4, r4], 0x7, {r8}}, 0x58) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000000880)=ANY=[@ANYBLOB="001c0000", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250c000000180001801400020076657468305f746f5f687372000000000c0003800400010004000500", @ANYRES16=r5, @ANYRESHEX=r4, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x8014) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f000000004098f586b91c24ef5f0001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) futex_waitv(&(0x7f0000000ec0), 0x0, 0x0, 0x0, 0x1) 119.716662ms ago: executing program 1 (id=1983): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000fc0)={0x1c, &(0x7f0000000c80)={0x0, 0xf, 0x5, "da47a59cbf"}, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x4281, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbe) r4 = epoll_create(0x1) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d755eda8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 71.650236ms ago: executing program 2 (id=1984): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000003c0)={0x10000, 0xe4, 0x3, 0x101, 0x6, "0200000000002000000000000000fcffffff00", 0x0, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2046) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FITHAW(r1, 0xc0045878) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, r4, {{0x5, 0x1, 0x9b88, 0x6c, 0x8, 0x4, {0x5, 0x3, 0x4, 0x0, 0x2, 0x6, 0xf7, 0x8001, 0x8, 0xc000, 0x3, 0x0, r3, 0x9, 0xe}}, {0x0, 0x1}}}, 0xa0) 0s ago: executing program 3 (id=1985): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000003840)={0x12, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x9, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x5813, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffff8, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x2, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xcf000000, 0x8, 0x4, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): ace 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 283.710956][ T331] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 283.720092][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.728158][ T331] usb 2-1: Product: syz [ 283.732344][ T331] usb 2-1: Manufacturer: syz [ 283.736968][ T331] usb 2-1: SerialNumber: syz [ 283.742544][ T331] usb 2-1: config 0 descriptor?? [ 283.747936][ T5267] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 283.858089][ T45] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 283.956082][ T5267] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 284.009275][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.020301][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.030140][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 284.039246][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.051687][ T45] usb 1-1: config 0 descriptor?? [ 284.408176][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 284.414206][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 284.424181][ T31] usb 3-1: USB disconnect, device number 104 [ 284.461171][ T45] lenovo 0003:17EF:60B5.0042: unknown main item tag 0x0 [ 284.474401][ T45] lenovo 0003:17EF:60B5.0042: hidraw1: USB HID v0.00 Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 284.658232][ T31] usb 1-1: USB disconnect, device number 104 [ 284.744903][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.753622][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.765135][ T331] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 284.775413][ T331] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 284.785858][ T331] asix 2-1:0.188: probe with driver asix failed with error -61 [ 284.978041][ T45] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 285.108077][ T45] usb 3-1: device descriptor read/64, error -71 [ 285.339725][ T331] usb 4-1: USB disconnect, device number 93 [ 285.355301][ T36] audit: type=1400 audit(1803335077.396:421): avc: denied { setattr } for pid=5302 comm="syz.3.1623" name="/" dev="incremental-fs" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.378213][ T45] usb 3-1: device descriptor read/64, error -71 [ 285.618055][ T45] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 285.748046][ T45] usb 3-1: device descriptor read/64, error -71 [ 285.814281][ T5321] netlink: 368 bytes leftover after parsing attributes in process `syz.3.1628'. [ 285.988011][ T45] usb 3-1: device descriptor read/64, error -71 [ 286.098149][ T45] usb usb3-port1: attempt power cycle [ 286.308169][ T31] usb 2-1: USB disconnect, device number 108 [ 286.418019][ T36] audit: type=1400 audit(1803335078.446:422): avc: denied { map } for pid=5329 comm="syz.1.1631" path="/proc/1142/task/1143/status" dev="proc" ino=82528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 286.448109][ T45] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 286.499076][ T45] usb 3-1: device descriptor read/8, error -71 [ 286.629062][ T45] usb 3-1: device descriptor read/8, error -71 [ 286.768004][ T5344] tipc: Started in network mode [ 286.772957][ T5344] tipc: Node identity e20eebc06e74, cluster identity 4711 [ 286.780592][ T5344] tipc: Enabled bearer , priority 0 [ 286.801343][ T5344] syzkaller0: entered promiscuous mode [ 286.806880][ T5344] syzkaller0: entered allmulticast mode [ 286.812768][ T5344] tipc: Resetting bearer [ 286.868329][ T45] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 286.889102][ T45] usb 3-1: device descriptor read/8, error -71 [ 286.928181][ T750] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 287.019247][ T45] usb 3-1: device descriptor read/8, error -71 [ 287.058048][ T750] usb 2-1: device descriptor read/64, error -71 [ 287.058048][ T599] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 287.128102][ T45] usb usb3-port1: unable to enumerate USB device [ 287.188114][ T599] usb 4-1: device descriptor read/64, error -71 [ 287.307997][ T750] usb 2-1: device descriptor read/64, error -71 [ 287.328127][ T31] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 287.428020][ T599] usb 4-1: device descriptor read/64, error -71 [ 287.477955][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 287.484366][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 287.492616][ T31] usb 1-1: config 0 has no interface number 0 [ 287.500343][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 287.509458][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.517467][ T31] usb 1-1: Product: syz [ 287.521682][ T31] usb 1-1: Manufacturer: syz [ 287.526306][ T31] usb 1-1: SerialNumber: syz [ 287.531680][ T31] usb 1-1: config 0 descriptor?? [ 287.537746][ T31] smsc95xx v2.0.0 [ 287.557964][ T750] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 287.668011][ T599] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 287.687970][ T750] usb 2-1: device descriptor read/64, error -71 [ 287.738797][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 287.785110][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 287.797966][ T331] tipc: Node number set to 2356865984 [ 287.800510][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 287.803665][ T599] usb 4-1: device descriptor read/64, error -71 [ 287.818078][ T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 287.830283][ T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 287.840387][ T31] usb 1-1: USB disconnect, device number 105 [ 287.937964][ T750] usb 2-1: device descriptor read/64, error -71 [ 288.057967][ T599] usb 4-1: device descriptor read/64, error -71 [ 288.058058][ T750] usb usb2-port1: attempt power cycle [ 288.168031][ T599] usb usb4-port1: attempt power cycle [ 288.317954][ T31] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 288.407946][ T750] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 288.429069][ T750] usb 2-1: device descriptor read/8, error -71 [ 288.467925][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 288.474255][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 288.482679][ T31] usb 3-1: config 0 has no interface number 0 [ 288.488883][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 288.500439][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 288.509560][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.517597][ T31] usb 3-1: Product: syz [ 288.518109][ T599] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 288.521797][ T31] usb 3-1: Manufacturer: syz [ 288.533979][ T31] usb 3-1: SerialNumber: syz [ 288.539339][ T31] usb 3-1: config 0 descriptor?? [ 288.544681][ T5360] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.559007][ T750] usb 2-1: device descriptor read/8, error -71 [ 288.559026][ T599] usb 4-1: device descriptor read/8, error -71 [ 288.690398][ T599] usb 4-1: device descriptor read/8, error -71 [ 288.697789][ T5362] FAULT_INJECTION: forcing a failure. [ 288.697789][ T5362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.711179][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.0.1641 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 288.711213][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.711227][ T5362] Call Trace: [ 288.711236][ T5362] [ 288.711250][ T5362] __dump_stack+0x21/0x30 [ 288.711275][ T5362] dump_stack_lvl+0x140/0x1c0 [ 288.711294][ T5362] ? __cfi_dump_stack_lvl+0x10/0x10 [ 288.711335][ T5362] ? check_stack_object+0x12b/0x150 [ 288.711363][ T5362] dump_stack+0x19/0x20 [ 288.711386][ T5362] should_fail_ex+0x3d7/0x530 [ 288.711410][ T5362] should_fail+0xf/0x20 [ 288.711425][ T5362] should_fail_usercopy+0x1e/0x30 [ 288.711442][ T5362] _copy_to_user+0x24/0xa0 [ 288.711481][ T5362] simple_read_from_buffer+0xed/0x160 [ 288.711514][ T5362] proc_fail_nth_read+0x1aa/0x220 [ 288.711535][ T5362] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 288.711558][ T5362] ? bpf_lsm_file_permission+0xd/0x20 [ 288.711573][ T5362] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 288.711588][ T5362] vfs_read+0x286/0xcb0 [ 288.711623][ T5362] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 288.711654][ T5362] ? __cfi_vfs_read+0x10/0x10 [ 288.711677][ T5362] ? __kasan_check_write+0x18/0x20 [ 288.711704][ T5362] ? mutex_lock+0x97/0x1d0 [ 288.711721][ T5362] ? __cfi_mutex_lock+0x10/0x10 [ 288.711736][ T5362] ? __fget_files+0x2c5/0x340 [ 288.711774][ T5362] ksys_read+0x145/0x260 [ 288.711800][ T5362] ? __cfi_ksys_read+0x10/0x10 [ 288.711825][ T5362] ? __kasan_check_read+0x15/0x20 [ 288.711851][ T5362] __x64_sys_read+0x7f/0x90 [ 288.711876][ T5362] x64_sys_call+0x2638/0x2ee0 [ 288.711907][ T5362] do_syscall_64+0x57/0xf0 [ 288.711951][ T5362] ? clear_bhb_loop+0x50/0xa0 [ 288.711999][ T5362] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 288.712028][ T5362] RIP: 0033:0x7ff13e75b78e [ 288.712043][ T5362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.712057][ T5362] RSP: 002b:00007ff13f70cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.712095][ T5362] RAX: ffffffffffffffda RBX: 00007ff13f70d6c0 RCX: 00007ff13e75b78e [ 288.712118][ T5362] RDX: 000000000000000f RSI: 00007ff13f70d0a0 RDI: 0000000000000006 [ 288.712132][ T5362] RBP: 00007ff13f70d090 R08: 0000000000000000 R09: 0000000000000000 [ 288.712147][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.712164][ T5362] R13: 00007ff13ea16038 R14: 00007ff13ea15fa0 R15: 00007ffc0e1be878 [ 288.712179][ T5362] [ 288.898200][ T750] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 288.911706][ T5360] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.956949][ T750] usb 2-1: device descriptor read/8, error -71 [ 289.087944][ T599] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 289.109087][ T599] usb 4-1: device descriptor read/8, error -71 [ 289.118870][ T750] usb 2-1: device descriptor read/8, error -71 [ 289.237963][ T750] usb usb2-port1: unable to enumerate USB device [ 289.249000][ T599] usb 4-1: device descriptor read/8, error -71 [ 289.358043][ T599] usb usb4-port1: unable to enumerate USB device [ 289.765837][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 289.776368][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 289.787021][ T31] asix 3-1:0.188: probe with driver asix failed with error -61 [ 289.798587][ T5344] tipc: Resetting bearer [ 289.820646][ T5344] tipc: Disabling bearer [ 290.230972][ T5398] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.238011][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.743312][ T36] audit: type=1400 audit(1803335082.786:423): avc: denied { mounton } for pid=5402 comm="syz.3.1652" path="/394/file0" dev="tmpfs" ino=2136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.095253][ T31] usb 3-1: USB disconnect, device number 109 [ 291.167895][ T750] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 291.369292][ T750] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.380783][ T750] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.391459][ T750] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.401102][ T750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.409423][ T750] usb 1-1: SerialNumber: syz [ 291.517861][ T31] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 291.627881][ T750] usb 1-1: 0:2 : does not exist [ 291.635764][ T750] usb 1-1: USB disconnect, device number 106 [ 291.645693][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.669138][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.675920][ T31] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 291.685126][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.697739][ T31] usb 3-1: config 0 descriptor?? [ 292.057884][ T377] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 292.207896][ T377] usb 4-1: Using ep0 maxpacket: 16 [ 292.214282][ T377] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 292.222627][ T377] usb 4-1: config 0 has no interface number 0 [ 292.228888][ T377] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 292.239439][ T377] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 292.253072][ T377] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 292.262266][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 292.269268][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.277323][ T377] usb 4-1: Product: syz [ 292.281652][ T377] usb 4-1: Manufacturer: syz [ 292.286415][ T377] usb 4-1: SerialNumber: syz [ 292.294095][ T377] usb 4-1: config 0 descriptor?? [ 292.303777][ T5423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 292.322928][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 292.331121][ T5423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 292.343068][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 292.352799][ T31] usb 3-1: USB disconnect, device number 110 [ 292.543433][ T5423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 292.550833][ T5423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 292.918879][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.029505][ T377] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.042340][ T377] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 293.054984][ T377] asix 4-1:0.251: probe with driver asix failed with error -71 [ 293.065020][ T377] usb 4-1: USB disconnect, device number 98 [ 293.658458][ T2437] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 293.790216][ T31] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 293.817878][ T2437] usb 1-1: Using ep0 maxpacket: 32 [ 293.824175][ T2437] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 293.832428][ T2437] usb 1-1: config 0 has no interface number 0 [ 293.838573][ T2437] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 293.850197][ T2437] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 293.860095][ T2437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.868238][ T2437] usb 1-1: Product: syz [ 293.872434][ T2437] usb 1-1: Manufacturer: syz [ 293.877083][ T2437] usb 1-1: SerialNumber: syz [ 293.882545][ T2437] usb 1-1: config 0 descriptor?? [ 293.887955][ T5453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.958947][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.969174][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.979039][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 293.988168][ T31] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 293.996264][ T31] usb 4-1: Manufacturer: syz [ 294.001838][ T31] usb 4-1: config 0 descriptor?? [ 294.017912][ T377] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 294.096790][ T5453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.169496][ T377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.177723][ T377] usb 2-1: not running at top speed; connect to a high speed hub [ 294.186378][ T377] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 294.196744][ T377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.207282][ T377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.216479][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.224565][ T377] usb 2-1: Product: syz [ 294.228782][ T377] usb 2-1: Manufacturer: syz [ 294.233399][ T377] usb 2-1: SerialNumber: syz [ 294.611011][ T377] usb 2-1: 0:2 : does not exist [ 294.617845][ T377] usb 2-1: USB disconnect, device number 113 [ 294.628388][ T588] udevd[588]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 294.705675][ T2437] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 294.716096][ T2437] asix 1-1:0.188: probe with driver asix failed with error -61 [ 294.977893][ T5399] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.977893][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 295.247845][ T377] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 295.377877][ T377] usb 3-1: device descriptor read/64, error -71 [ 295.617881][ T377] usb 3-1: device descriptor read/64, error -71 [ 295.857865][ T377] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 295.987861][ T377] usb 3-1: device descriptor read/64, error -71 [ 296.227837][ T377] usb 3-1: device descriptor read/64, error -71 [ 296.258812][ T31] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 296.337972][ T377] usb usb3-port1: attempt power cycle [ 296.417866][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 296.424323][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.435389][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.441927][ T331] usb 1-1: USB disconnect, device number 107 [ 296.445357][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.464604][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 296.476317][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.488453][ T31] usb 2-1: config 0 descriptor?? [ 296.575069][ T599] usb 4-1: USB disconnect, device number 99 [ 296.678001][ T377] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 296.709067][ T377] usb 3-1: device descriptor read/8, error -71 [ 296.838983][ T377] usb 3-1: device descriptor read/8, error -71 [ 296.903323][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.913903][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.921359][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.928292][ T599] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 296.929158][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.943832][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.951217][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.958718][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.966213][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.973669][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.982346][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.989861][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 296.997193][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 297.004642][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 297.012030][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 297.019504][ T31] microsoft 0003:045E:07DA.0043: unknown main item tag 0x0 [ 297.041061][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0043/input/input30 [ 297.066539][ T31] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 297.077963][ T377] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 297.090553][ T599] usb 4-1: Using ep0 maxpacket: 16 [ 297.108664][ T599] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 297.109859][ T750] usb 2-1: USB disconnect, device number 114 [ 297.116915][ T599] usb 4-1: config 0 has no interface number 0 [ 297.116974][ T599] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 297.139473][ T377] usb 3-1: device descriptor read/8, error -71 [ 297.154642][ T5486] fido_id[5486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 297.177523][ T599] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 297.189323][ T599] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 297.198520][ T599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.206557][ T599] usb 4-1: Product: syz [ 297.211722][ T599] usb 4-1: Manufacturer: syz [ 297.217353][ T599] usb 4-1: SerialNumber: syz [ 297.225809][ T599] usb 4-1: config 0 descriptor?? [ 297.233387][ T5485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.240950][ T5485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.279002][ T377] usb 3-1: device descriptor read/8, error -71 [ 297.398010][ T377] usb usb3-port1: unable to enumerate USB device [ 297.450282][ T5485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.457697][ T5485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 297.787835][ T377] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 297.867722][ T599] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 297.878317][ T599] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 297.896347][ T599] asix 4-1:0.251: probe with driver asix failed with error -71 [ 297.906010][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 297.922048][ T599] usb 4-1: USB disconnect, device number 100 [ 297.941855][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.952972][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.962835][ T377] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 297.974057][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.988065][ T377] usb 1-1: config 0 descriptor?? [ 298.394688][ T36] audit: type=1400 audit(7213357749.737:424): avc: denied { getopt } for pid=5490 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.414766][ T750] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 298.429020][ T377] usbhid 1-1:0.0: can't add hid device: -71 [ 298.435515][ T377] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.444569][ T377] usb 1-1: USB disconnect, device number 108 [ 298.452987][ T5513] netlink: 'syz.3.1686': attribute type 4 has an invalid length. [ 298.462386][ T5514] netlink: 'syz.3.1686': attribute type 4 has an invalid length. [ 298.480979][ T36] audit: type=1400 audit(7213357749.827:425): avc: denied { mount } for pid=5517 comm="syz.3.1687" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 298.579010][ T750] usb 3-1: No LPM exit latency info found, disabling LPM. [ 298.586980][ T750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.597429][ T750] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.606658][ T750] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.622136][ T750] usb 3-1: string descriptor 0 read error: -22 [ 298.628585][ T750] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.637735][ T750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.649684][ T750] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 298.662093][ T750] cdc_ncm 3-1:1.0: bind() failure [ 298.851779][ T377] usb 3-1: USB disconnect, device number 115 [ 299.018775][ T5536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5536 comm=syz.1.1694 [ 299.137956][ T599] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 299.187844][ T750] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 299.287851][ T599] usb 4-1: Using ep0 maxpacket: 32 [ 299.294153][ T599] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 299.302423][ T599] usb 4-1: config 0 has no interface number 0 [ 299.308624][ T599] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 299.320251][ T599] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 299.328321][ T2437] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 299.329461][ T599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.344930][ T599] usb 4-1: Product: syz [ 299.347948][ T750] usb 1-1: Using ep0 maxpacket: 16 [ 299.349232][ T599] usb 4-1: Manufacturer: syz [ 299.356612][ T750] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 299.358902][ T599] usb 4-1: SerialNumber: syz [ 299.361145][ T599] usb 4-1: config 0 descriptor?? [ 299.377483][ T750] usb 1-1: config 0 has no interface number 0 [ 299.378583][ T5532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.390839][ T750] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 299.401080][ T750] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 299.413053][ T750] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 299.422462][ T750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.430690][ T750] usb 1-1: Product: syz [ 299.435047][ T750] usb 1-1: Manufacturer: syz [ 299.439920][ T750] usb 1-1: SerialNumber: syz [ 299.445616][ T750] usb 1-1: config 0 descriptor?? [ 299.451275][ T5534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.458914][ T5534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.467834][ T2437] usb 2-1: device descriptor read/64, error -71 [ 299.596874][ T5532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.668080][ T5534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.675338][ T5534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.707884][ T2437] usb 2-1: device descriptor read/64, error -71 [ 299.718034][ T377] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 299.867888][ T377] usb 3-1: Using ep0 maxpacket: 32 [ 299.877571][ T377] usb 3-1: unable to get BOS descriptor or descriptor too short [ 299.886556][ T377] usb 3-1: config 1 has an invalid interface number: 15 but max is 0 [ 299.894778][ T377] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.904931][ T377] usb 3-1: config 1 has no interface number 0 [ 299.911086][ T377] usb 3-1: config 1 interface 15 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.924131][ T377] usb 3-1: config 1 interface 15 has no altsetting 0 [ 299.932536][ T377] usb 3-1: New USB device found, idVendor=19d2, idProduct=7e26, bcdDevice=96.b3 [ 299.941721][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.949839][ T599] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 299.949839][ T2437] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 299.949958][ T599] asix 4-1:0.188: probe with driver asix failed with error -71 [ 299.975164][ T377] usb 3-1: Product: syz [ 299.979403][ T377] usb 3-1: Manufacturer: syz [ 299.984071][ T377] usb 3-1: SerialNumber: syz [ 299.993412][ T599] usb 4-1: USB disconnect, device number 101 [ 300.088540][ T750] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 300.099944][ T2437] usb 2-1: device descriptor read/64, error -71 [ 300.106280][ T750] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 300.118308][ T750] asix 1-1:0.251: probe with driver asix failed with error -71 [ 300.127003][ T750] usb 1-1: USB disconnect, device number 109 [ 300.192711][ T377] usb 3-1: bad CDC descriptors [ 300.198648][ T377] usb 3-1: USB disconnect, device number 116 [ 300.338030][ T2437] usb 2-1: device descriptor read/64, error -71 [ 300.448000][ T2437] usb usb2-port1: attempt power cycle [ 300.465151][ T36] audit: type=1400 audit(7213357751.807:426): avc: denied { create } for pid=5544 comm="syz.3.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 300.485394][ T36] audit: type=1400 audit(7213357751.807:427): avc: denied { write } for pid=5544 comm="syz.3.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 300.505800][ T36] audit: type=1400 audit(7213357751.817:428): avc: denied { nlmsg_write } for pid=5544 comm="syz.3.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 300.670917][ T5551] x_tables: duplicate entry at hook 2 [ 300.742062][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.750836][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.787910][ T2437] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 300.809009][ T2437] usb 2-1: device descriptor read/8, error -71 [ 300.907839][ T377] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 300.939403][ T2437] usb 2-1: device descriptor read/8, error -71 [ 300.977862][ T750] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 301.057828][ T377] usb 1-1: Using ep0 maxpacket: 8 [ 301.064051][ T377] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 301.072465][ T377] usb 1-1: config 0 has no interface number 0 [ 301.079996][ T377] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b3.78 [ 301.089134][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.097217][ T377] usb 1-1: Product: syz [ 301.101448][ T377] usb 1-1: Manufacturer: syz [ 301.106067][ T377] usb 1-1: SerialNumber: syz [ 301.111446][ T377] usb 1-1: config 0 descriptor?? [ 301.117847][ T750] usb 4-1: device descriptor read/64, error -71 [ 301.177867][ T2437] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 301.198941][ T2437] usb 2-1: device descriptor read/8, error -71 [ 301.326166][ T377] usbserial_generic 1-1:0.155: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 301.329884][ T2437] usb 2-1: device descriptor read/8, error -71 [ 301.338872][ T377] usbserial_generic 1-1:0.155: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 301.355204][ T377] usbserial_generic 1-1:0.155: device has no bulk endpoints [ 301.357931][ T750] usb 4-1: device descriptor read/64, error -71 [ 301.369056][ T377] usb 1-1: USB disconnect, device number 110 [ 301.443893][ T36] audit: type=1326 audit(7213357752.787:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.1704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13e79aeb9 code=0x0 [ 301.458452][ T2437] usb usb2-port1: unable to enumerate USB device [ 301.487830][ T599] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 301.607857][ T750] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 301.639428][ T599] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.647622][ T599] usb 3-1: not running at top speed; connect to a high speed hub [ 301.656280][ T599] usb 3-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 301.666783][ T599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.677322][ T599] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.686460][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.694538][ T599] usb 3-1: Product: syz [ 301.698740][ T599] usb 3-1: Manufacturer: syz [ 301.703349][ T599] usb 3-1: SerialNumber: syz [ 301.737863][ T750] usb 4-1: device descriptor read/64, error -71 [ 301.977918][ T750] usb 4-1: device descriptor read/64, error -71 [ 301.985455][ T599] usb 3-1: 0:2 : does not exist [ 301.992714][ T599] usb 3-1: USB disconnect, device number 117 [ 302.002273][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 302.087959][ T750] usb usb4-port1: attempt power cycle [ 302.140050][ T5578] netlink: 'syz.1.1706': attribute type 64 has an invalid length. [ 302.148025][ T5578] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1706'. [ 302.157001][ T5578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.427856][ T750] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 302.448934][ T750] usb 4-1: device descriptor read/8, error -71 [ 302.477853][ T2437] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 302.578909][ T750] usb 4-1: device descriptor read/8, error -71 [ 302.614265][ T5599] input: syz0 as /devices/virtual/input/input31 [ 302.627857][ T2437] usb 2-1: Using ep0 maxpacket: 16 [ 302.634969][ T2437] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 302.643303][ T2437] usb 2-1: config 0 has no interface number 0 [ 302.649803][ T2437] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 302.660013][ T2437] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 302.675123][ T2437] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 302.685285][ T2437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.693690][ T2437] usb 2-1: Product: syz [ 302.694486][ T36] audit: type=1400 audit(7213357754.037:430): avc: denied { create } for pid=5604 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 302.697971][ T2437] usb 2-1: Manufacturer: syz [ 302.723520][ T2437] usb 2-1: SerialNumber: syz [ 302.732323][ T2437] usb 2-1: config 0 descriptor?? [ 302.738900][ T36] audit: type=1400 audit(7213357754.077:431): avc: denied { ioctl } for pid=5594 comm="syz.2.1711" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.764071][ T5582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.771684][ T5582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.787850][ T377] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 302.827880][ T750] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 302.843857][ T36] audit: type=1400 audit(7213357754.187:432): avc: denied { read write } for pid=5613 comm="syz.0.1719" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.867435][ T36] audit: type=1400 audit(7213357754.187:433): avc: denied { open } for pid=5613 comm="syz.0.1719" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.868962][ T750] usb 4-1: device descriptor read/8, error -71 [ 302.967853][ T377] usb 3-1: Using ep0 maxpacket: 32 [ 302.974251][ T377] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 302.982688][ T377] usb 3-1: config 0 has no interface number 0 [ 302.983364][ T5582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.989699][ T377] usb 3-1: config 0 interface 184 has no altsetting 0 [ 302.996876][ T5582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.005677][ T377] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.019196][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.027249][ T377] usb 3-1: Product: syz [ 303.031492][ T377] usb 3-1: Manufacturer: syz [ 303.036134][ T377] usb 3-1: SerialNumber: syz [ 303.039933][ T750] usb 4-1: device descriptor read/8, error -71 [ 303.047438][ T377] usb 3-1: config 0 descriptor?? [ 303.053814][ T377] smsc75xx v1.0.0 [ 303.077868][ T599] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 303.147983][ T750] usb usb4-port1: unable to enumerate USB device [ 303.229293][ T599] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.237523][ T599] usb 1-1: not running at top speed; connect to a high speed hub [ 303.246206][ T599] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 303.256600][ T599] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.269427][ T599] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.278568][ T599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.286724][ T599] usb 1-1: Product: syz [ 303.290959][ T599] usb 1-1: Manufacturer: syz [ 303.295595][ T599] usb 1-1: SerialNumber: syz [ 303.413944][ T2437] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 303.424232][ T2437] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 303.436333][ T2437] asix 2-1:0.251: probe with driver asix failed with error -71 [ 303.445180][ T2437] usb 2-1: USB disconnect, device number 119 [ 303.631080][ T599] usb 1-1: 0:2 : does not exist [ 303.638230][ T599] usb 1-1: USB disconnect, device number 111 [ 303.647586][ T588] udevd[588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.668306][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 303.679347][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 303.868569][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 303.879543][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 303.889271][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 303.899737][ T377] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 303.909236][ T377] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 304.187875][ T2437] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 304.338910][ T2437] usb 2-1: config 127 has an invalid interface number: 48 but max is 0 [ 304.347220][ T2437] usb 2-1: config 127 has no interface number 0 [ 304.353711][ T2437] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 304.362803][ T2437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.397888][ T377] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 304.476720][ T5656] FAULT_INJECTION: forcing a failure. [ 304.476720][ T5656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.490161][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.3.1732 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 304.490204][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.490215][ T5656] Call Trace: [ 304.490222][ T5656] [ 304.490229][ T5656] __dump_stack+0x21/0x30 [ 304.490260][ T5656] dump_stack_lvl+0x140/0x1c0 [ 304.490280][ T5656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 304.490301][ T5656] dump_stack+0x19/0x20 [ 304.490321][ T5656] should_fail_ex+0x3d7/0x530 [ 304.490339][ T5656] should_fail_alloc_page+0xec/0x110 [ 304.490363][ T5656] __alloc_pages_noprof+0x1c0/0x7e0 [ 304.490380][ T5656] ? kernel_text_address+0xa9/0xe0 [ 304.490400][ T5656] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 304.490416][ T5656] ? unwind_get_return_address+0x51/0x90 [ 304.490436][ T5656] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 304.490455][ T5656] get_free_pages_noprof+0x14/0x40 [ 304.490471][ T5656] kasan_populate_vmalloc_pte+0x4c/0x170 [ 304.490492][ T5656] __apply_to_page_range+0x7c2/0xd00 [ 304.490516][ T5656] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 304.490538][ T5656] ? do_syscall_64+0x57/0xf0 [ 304.490561][ T5656] ? apply_to_page_range+0x60/0x60 [ 304.490583][ T5656] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 304.490604][ T5656] apply_to_page_range+0x3f/0x60 [ 304.490625][ T5656] kasan_populate_vmalloc+0x64/0x80 [ 304.490645][ T5656] alloc_vmap_area+0x1e6a/0x26c0 [ 304.490663][ T5656] ? kasan_save_alloc_info+0x40/0x50 [ 304.490681][ T5656] ? __kasan_kmalloc+0x96/0xb0 [ 304.490703][ T5656] ? vm_map_ram+0xdc0/0xdc0 [ 304.490720][ T5656] __get_vm_area_node+0x201/0x3d0 [ 304.490737][ T5656] __vmalloc_node_range_noprof+0x30e/0x1480 [ 304.490756][ T5656] ? copy_process+0x55a/0x3220 [ 304.490776][ T5656] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 304.490795][ T5656] ? kasan_save_alloc_info+0x40/0x50 [ 304.490812][ T5656] ? __kasan_slab_alloc+0x73/0x90 [ 304.490834][ T5656] ? arch_dup_task_struct+0x5b/0xe0 [ 304.490855][ T5656] ? __asan_memcpy+0x5a/0x80 [ 304.490875][ T5656] dup_task_struct+0x5d6/0xd50 [ 304.490891][ T5656] ? copy_process+0x55a/0x3220 [ 304.490908][ T5656] ? _raw_spin_lock_irq+0x93/0x120 [ 304.490954][ T5656] ? copy_process+0x3220/0x3220 [ 304.490974][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.491000][ T5656] copy_process+0x55a/0x3220 [ 304.491026][ T5656] ? __cfi_copy_process+0x10/0x10 [ 304.491049][ T5656] ? __kmalloc_cache_noprof+0x23c/0x470 [ 304.491078][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.491098][ T5656] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 304.491124][ T5656] vhost_task_create+0x1f7/0x400 [ 304.491149][ T5656] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 304.491209][ T5656] ? __cfi_vhost_task_create+0x10/0x10 [ 304.491245][ T5656] ? __cfi_vhost_task_fn+0x10/0x10 [ 304.491269][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.491288][ T5656] ? mutex_lock+0x97/0x1d0 [ 304.491304][ T5656] ? __cfi_mutex_lock+0x10/0x10 [ 304.491319][ T5656] ? kernel_text_address+0xa9/0xe0 [ 304.491338][ T5656] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 304.491359][ T5656] kvm_mmu_post_init_vm+0x161/0x300 [ 304.491380][ T5656] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 304.491402][ T5656] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 304.491421][ T5656] ? kstrtoull+0x13b/0x1e0 [ 304.491436][ T5656] ? kstrtouint+0x78/0xf0 [ 304.491451][ T5656] ? ioctl_has_perm+0x1bc/0x500 [ 304.491468][ T5656] ? __asan_memcpy+0x5a/0x80 [ 304.491487][ T5656] ? ioctl_has_perm+0x408/0x500 [ 304.491503][ T5656] ? has_cap_mac_admin+0xd0/0xd0 [ 304.491519][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.491538][ T5656] ? mutex_lock_killable+0x97/0x1d0 [ 304.491555][ T5656] ? __cfi_mutex_lock_killable+0x10/0x10 [ 304.491573][ T5656] ? proc_fail_nth_write+0x184/0x220 [ 304.491590][ T5656] kvm_vcpu_ioctl+0xa48/0x1000 [ 304.491614][ T5656] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 304.491637][ T5656] ? __cfi_vfs_write+0x10/0x10 [ 304.491657][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.491676][ T5656] ? mutex_unlock+0x90/0x240 [ 304.491697][ T5656] ? __cfi_mutex_unlock+0x10/0x10 [ 304.491714][ T5656] ? __fget_files+0x2c5/0x340 [ 304.491737][ T5656] ? __fget_files+0x2c5/0x340 [ 304.491759][ T5656] ? bpf_lsm_file_ioctl+0xd/0x20 [ 304.491775][ T5656] ? security_file_ioctl+0x3e/0x110 [ 304.491790][ T5656] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 304.491813][ T5656] __se_sys_ioctl+0x132/0x1b0 [ 304.491836][ T5656] __x64_sys_ioctl+0x7f/0xa0 [ 304.491858][ T5656] x64_sys_call+0x1878/0x2ee0 [ 304.491880][ T5656] do_syscall_64+0x57/0xf0 [ 304.491902][ T5656] ? clear_bhb_loop+0x50/0xa0 [ 304.491926][ T5656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 304.491949][ T5656] RIP: 0033:0x7f7dfdd9aeb9 [ 304.491964][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.491979][ T5656] RSP: 002b:00007f7dfc7e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.491997][ T5656] RAX: ffffffffffffffda RBX: 00007f7dfe015fa0 RCX: 00007f7dfdd9aeb9 [ 304.492010][ T5656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 304.492021][ T5656] RBP: 00007f7dfc7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 304.492032][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.492043][ T5656] R13: 00007f7dfe016038 R14: 00007f7dfe015fa0 R15: 00007ffe72c03008 [ 304.492057][ T5656] [ 304.492092][ T5656] syz.3.1732: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 304.559938][ T377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.565495][ T5656] ,cpuset= [ 304.571621][ T377] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.580149][ T5656] syz3 [ 304.592252][ T377] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 304.593094][ T2437] usb 2-1: string descriptor 0 read error: -71 [ 304.601906][ T377] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 304.603827][ T5656] ,mems_allowed=0 [ 304.609847][ T377] usb 1-1: Manufacturer: syz [ 304.619965][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.3.1732 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 304.620066][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.620106][ T5656] Call Trace: [ 304.620127][ T5656] [ 304.620149][ T5656] __dump_stack+0x21/0x30 [ 304.620224][ T5656] dump_stack_lvl+0x140/0x1c0 [ 304.620252][ T5656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 304.620291][ T5656] dump_stack+0x19/0x20 [ 304.620393][ T5656] warn_alloc+0x1e7/0x2c0 [ 304.620483][ T5656] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 304.620562][ T5656] ? __cfi_warn_alloc+0x10/0x10 [ 304.620616][ T5656] ? kfree+0x158/0x440 [ 304.620688][ T5656] ? __get_vm_area_node+0x21a/0x3d0 [ 304.620752][ T5656] __vmalloc_node_range_noprof+0x333/0x1480 [ 304.620829][ T5656] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 304.620895][ T5656] ? kasan_save_alloc_info+0x40/0x50 [ 304.620955][ T5656] ? __kasan_slab_alloc+0x73/0x90 [ 304.621033][ T5656] ? arch_dup_task_struct+0x5b/0xe0 [ 304.621108][ T5656] ? __asan_memcpy+0x5a/0x80 [ 304.621254][ T5656] dup_task_struct+0x5d6/0xd50 [ 304.621321][ T5656] ? copy_process+0x55a/0x3220 [ 304.621398][ T5656] ? _raw_spin_lock_irq+0x93/0x120 [ 304.621476][ T5656] ? copy_process+0x3220/0x3220 [ 304.621540][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.621607][ T5656] copy_process+0x55a/0x3220 [ 304.621674][ T5656] ? __cfi_copy_process+0x10/0x10 [ 304.621738][ T5656] ? __kmalloc_cache_noprof+0x23c/0x470 [ 304.621841][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.621923][ T5656] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 304.622004][ T5656] vhost_task_create+0x1f7/0x400 [ 304.622087][ T5656] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 304.622184][ T5656] ? __cfi_vhost_task_create+0x10/0x10 [ 304.622271][ T5656] ? __cfi_vhost_task_fn+0x10/0x10 [ 304.622372][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.622438][ T5656] ? mutex_lock+0x97/0x1d0 [ 304.622494][ T5656] ? __cfi_mutex_lock+0x10/0x10 [ 304.622556][ T5656] ? kernel_text_address+0xa9/0xe0 [ 304.622623][ T5656] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 304.622689][ T5656] kvm_mmu_post_init_vm+0x161/0x300 [ 304.622774][ T5656] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 304.622851][ T5656] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 304.622925][ T5656] ? kstrtoull+0x13b/0x1e0 [ 304.622999][ T5656] ? kstrtouint+0x78/0xf0 [ 304.623054][ T5656] ? ioctl_has_perm+0x1bc/0x500 [ 304.623112][ T5656] ? __asan_memcpy+0x5a/0x80 [ 304.623224][ T5656] ? ioctl_has_perm+0x408/0x500 [ 304.623310][ T5656] ? has_cap_mac_admin+0xd0/0xd0 [ 304.623372][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.623437][ T5656] ? mutex_lock_killable+0x97/0x1d0 [ 304.623502][ T5656] ? __cfi_mutex_lock_killable+0x10/0x10 [ 304.623568][ T5656] ? proc_fail_nth_write+0x184/0x220 [ 304.623641][ T5656] kvm_vcpu_ioctl+0xa48/0x1000 [ 304.623719][ T5656] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 304.623816][ T5656] ? __cfi_vfs_write+0x10/0x10 [ 304.623882][ T5656] ? __kasan_check_write+0x18/0x20 [ 304.623959][ T5656] ? mutex_unlock+0x90/0x240 [ 304.624015][ T5656] ? __cfi_mutex_unlock+0x10/0x10 [ 304.624071][ T5656] ? __fget_files+0x2c5/0x340 [ 304.624154][ T5656] ? __fget_files+0x2c5/0x340 [ 304.624249][ T5656] ? bpf_lsm_file_ioctl+0xd/0x20 [ 304.624312][ T5656] ? security_file_ioctl+0x3e/0x110 [ 304.624368][ T5656] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 304.624491][ T5656] __se_sys_ioctl+0x132/0x1b0 [ 304.624604][ T5656] __x64_sys_ioctl+0x7f/0xa0 [ 304.624680][ T5656] x64_sys_call+0x1878/0x2ee0 [ 304.624757][ T5656] do_syscall_64+0x57/0xf0 [ 304.624840][ T5656] ? clear_bhb_loop+0x50/0xa0 [ 304.624934][ T5656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 304.625047][ T5656] RIP: 0033:0x7f7dfdd9aeb9 [ 304.625100][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.625154][ T5656] RSP: 002b:00007f7dfc7e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.625228][ T5656] RAX: ffffffffffffffda RBX: 00007f7dfe015fa0 RCX: 00007f7dfdd9aeb9 [ 304.625288][ T5656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 304.625323][ T5656] RBP: 00007f7dfc7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 304.625365][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.625405][ T5656] R13: 00007f7dfe016038 R14: 00007f7dfe015fa0 R15: 00007ffe72c03008 [ 304.625457][ T5656] [ 304.626710][ T5656] Mem-Info: [ 304.650463][ T377] usb 1-1: config 0 descriptor?? [ 304.659437][ T2437] usb 2-1: USB disconnect, device number 120 [ 304.740246][ T5656] active_anon:58303 inactive_anon:3 isolated_anon:0 [ 304.740246][ T5656] active_file:20711 inactive_file:2388 isolated_file:0 [ 304.740246][ T5656] unevictable:0 dirty:174 writeback:0 [ 304.740246][ T5656] slab_reclaimable:7014 slab_unreclaimable:70424 [ 304.740246][ T5656] mapped:25365 shmem:37477 pagetables:1688 [ 304.740246][ T5656] sec_pagetables:3 bounce:0 [ 304.740246][ T5656] kernel_misc_reclaimable:0 [ 304.740246][ T5656] free:1468403 free_pcp:1809 free_cma:0 [ 305.205127][ T5659] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 305.206696][ T5656] Node 0 active_anon:233236kB inactive_anon:12kB active_file:82844kB inactive_file:9552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101460kB dirty:696kB writeback:0kB shmem:149892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6464kB pagetables:6664kB sec_pagetables:12kB all_unreclaimable? no [ 305.212130][ T5659] SELinux: failed to load policy [ 305.215951][ T5656] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:68kB free_cma:0kB [ 305.226494][ T5659] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 305.228253][ T5656] lowmem_reserve[]: [ 305.233788][ T5659] SELinux: failed to load policy [ 305.239320][ T5656] 0 [ 305.271098][ T36] audit: type=1400 audit(7213357756.587:434): avc: denied { setopt } for pid=5639 comm="syz.0.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.287906][ T5656] 3921 [ 305.434635][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 305.438947][ T5656] 3921 [ 305.470674][ T36] audit: type=1400 audit(7213357756.807:435): avc: denied { nlmsg_write } for pid=5665 comm="syz.1.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 305.477238][ T5656] [ 305.482991][ T5667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=5667 comm=syz.1.1735 [ 305.488441][ T5656] Normal free:2916040kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:233392kB inactive_anon:12kB active_file:82844kB inactive_file:9552kB unevictable:0kB writepending:704kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:968kB local_pcp:968kB free_cma:0kB [ 305.495677][ T36] audit: type=1107 audit(7213357756.807:436): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 305.503962][ T5656] lowmem_reserve[]: [ 305.541592][ T2437] usb 3-1: USB disconnect, device number 118 [ 305.573643][ T5656] 0 0 0 [ 305.799748][ T5656] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 305.815378][ T5656] Normal: 254*4kB (UE) 243*8kB (UME) 340*16kB (UME) 237*32kB (UME) 106*64kB (UME) 34*128kB (UME) 26*256kB (UME) 17*512kB (UME) 13*1024kB (UME) 8*2048kB (UME) 694*4096kB (UM) = 2914800kB [ 305.833817][ T5656] 60574 total pagecache pages [ 305.838555][ T5656] 4 pages in swap cache [ 305.842752][ T5656] Free swap = 124816kB [ 305.846917][ T5656] Total swap = 124996kB [ 305.851133][ T5656] 2097051 pages RAM [ 305.854973][ T5656] 0 pages HighMem/MovableOnly [ 305.859699][ T5656] 352242 pages reserved [ 305.863869][ T5656] 0 pages cma reserved [ 305.870086][ T5656] Memory allocations: [ 305.874088][ T5656] 0 B 0 init/main.c:1477 func:do_initcalls [ 305.881333][ T5656] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 305.889451][ T5656] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 305.897104][ T5656] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 305.905047][ T5656] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 305.912986][ T5656] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 305.921631][ T5656] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 305.929591][ T5656] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 305.937491][ T5656] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 305.945444][ T5656] 0 B 0 init/initramfs.c:101 func:find_link [ 305.997927][ T2437] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 306.160154][ T2437] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.168556][ T2437] usb 3-1: not running at top speed; connect to a high speed hub [ 306.177731][ T2437] usb 3-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 306.188746][ T2437] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.200434][ T2437] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.209771][ T2437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.236628][ T2437] usb 3-1: Product: syz [ 306.242722][ T2437] usb 3-1: Manufacturer: syz [ 306.247574][ T2437] usb 3-1: SerialNumber: syz [ 306.254062][ T36] audit: type=1400 audit(7213357757.597:437): avc: denied { setopt } for pid=5684 comm="syz.3.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.513179][ T2437] usb 3-1: 0:2 : does not exist [ 306.535706][ T2437] usb 3-1: USB disconnect, device number 119 [ 306.757820][ T599] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 306.917830][ T599] usb 4-1: Using ep0 maxpacket: 32 [ 306.929029][ T599] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.937646][ T599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.948177][ T599] usb 4-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.961471][ T599] usb 4-1: config 1 interface 0 has no altsetting 0 [ 306.970000][ T599] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.979449][ T599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.987530][ T599] usb 4-1: Product: syz [ 306.992112][ T599] usb 4-1: Manufacturer: syz [ 306.996804][ T599] usb 4-1: SerialNumber: syz [ 307.161762][ T2437] usb 1-1: USB disconnect, device number 112 [ 307.225637][ T5707] netlink: 'syz.2.1747': attribute type 21 has an invalid length. [ 307.233706][ T5708] netlink: 'syz.2.1747': attribute type 21 has an invalid length. [ 307.341740][ T36] audit: type=1400 audit(7213357758.687:438): avc: denied { unmount } for pid=5714 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 307.427872][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 307.577840][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 307.584286][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 307.592742][ T9] usb 2-1: config 0 has no interface number 0 [ 307.599145][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 307.610756][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 307.620243][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.628302][ T9] usb 2-1: Product: syz [ 307.632522][ T9] usb 2-1: Manufacturer: syz [ 307.637161][ T9] usb 2-1: SerialNumber: syz [ 307.642622][ T9] usb 2-1: config 0 descriptor?? [ 307.648057][ T5704] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 307.667817][ T377] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 307.747837][ T331] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 307.819369][ T377] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.827443][ T377] usb 3-1: not running at top speed; connect to a high speed hub [ 307.836115][ T377] usb 3-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 307.846494][ T377] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.856221][ T5704] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 307.858193][ T377] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.873220][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.881373][ T377] usb 3-1: Product: syz [ 307.885634][ T377] usb 3-1: Manufacturer: syz [ 307.890292][ T377] usb 3-1: SerialNumber: syz [ 307.899165][ T331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.909363][ T331] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.919180][ T331] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 307.928367][ T331] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 307.936468][ T331] usb 1-1: Manufacturer: syz [ 307.942047][ T331] usb 1-1: config 0 descriptor?? [ 308.149825][ T5724] rust_binder: Write failure EFAULT in pid:1298 [ 308.161299][ T377] usb 3-1: 0:2 : does not exist [ 308.174683][ T377] usb 3-1: USB disconnect, device number 120 [ 308.184137][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 308.675972][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 308.686824][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 308.697405][ T9] asix 2-1:0.188: probe with driver asix failed with error -61 [ 308.917872][ T2437] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 309.067845][ T2437] usb 3-1: Using ep0 maxpacket: 16 [ 309.074251][ T2437] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 309.082522][ T2437] usb 3-1: config 0 has no interface number 0 [ 309.090211][ T2437] usb 3-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 309.099332][ T2437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.107356][ T2437] usb 3-1: Product: syz [ 309.111580][ T2437] usb 3-1: Manufacturer: syz [ 309.116204][ T2437] usb 3-1: SerialNumber: syz [ 309.121823][ T2437] usb 3-1: config 0 descriptor?? [ 309.127747][ T2437] usb 3-1: bad CDC descriptors [ 309.349758][ T2437] usb 3-1: USB disconnect, device number 121 [ 309.477792][ T599] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 309.490241][ T599] usb 4-1: USB disconnect, device number 106 [ 309.907163][ T5739] SELinux: failed to load policy [ 309.960239][ T5743] SELinux: failed to load policy [ 310.204745][ T750] usb 2-1: USB disconnect, device number 121 [ 310.337880][ T599] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 310.489362][ T599] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.497517][ T599] usb 3-1: not running at top speed; connect to a high speed hub [ 310.506432][ T599] usb 3-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 310.517231][ T599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.532242][ T2437] usb 1-1: USB disconnect, device number 113 [ 310.532537][ T599] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.548177][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.556914][ T599] usb 3-1: Product: syz [ 310.561207][ T599] usb 3-1: Manufacturer: syz [ 310.565886][ T599] usb 3-1: SerialNumber: syz [ 310.573064][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5761 comm=syz.0.1766 [ 310.693967][ T5765] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1765'. [ 310.703418][ T5765] gretap0: entered promiscuous mode [ 310.710601][ T5765] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1765'. [ 310.719653][ T5765] 0{X: renamed from gretap0 [ 310.725682][ T5765] 0{X: left promiscuous mode [ 310.730987][ T5765] 0{X: entered allmulticast mode [ 310.737238][ T5765] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 310.811136][ T599] usb 3-1: 0:2 : does not exist [ 310.817748][ T599] usb 3-1: USB disconnect, device number 122 [ 310.826893][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 310.917848][ T2437] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 311.047844][ T2437] usb 1-1: device descriptor read/64, error -71 [ 311.086129][ T36] audit: type=1400 audit(7213357762.427:439): avc: denied { mounton } for pid=5769 comm="syz.1.1769" path="/419/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 311.086727][ T5771] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 311.117088][ T5772] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 311.125944][ T36] audit: type=1400 audit(7213357762.467:440): avc: denied { read } for pid=5769 comm="syz.1.1769" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 311.147647][ T36] audit: type=1400 audit(7213357762.467:441): avc: denied { open } for pid=5769 comm="syz.1.1769" path="/419/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 311.179764][ T36] audit: type=1400 audit(7213357762.527:442): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 311.205616][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 311.307901][ T2437] usb 1-1: device descriptor read/64, error -71 [ 311.346268][ T36] audit: type=1400 audit(7213357762.687:443): avc: denied { execute } for pid=5780 comm="syz.2.1773" name="file0" dev="ramfs" ino=88023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 311.350479][ T5781] 9pnet_fd: p9_fd_create_tcp (5781): problem connecting socket to 127.0.0.1 [ 311.370338][ T36] audit: type=1400 audit(7213357762.687:444): avc: denied { execute_no_trans } for pid=5780 comm="syz.2.1773" path="/file0" dev="ramfs" ino=88023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 311.401141][ T36] audit: type=1400 audit(7213357762.697:445): avc: denied { mounton } for pid=5780 comm="syz.2.1773" path="/file0" dev="ramfs" ino=88023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 311.447945][ T31] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 311.557835][ T2437] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 311.607835][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 311.614054][ T31] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 311.626045][ T31] usb 2-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice= 5.2b [ 311.635486][ T31] usb 2-1: New USB device strings: Mfr=1, Product=199, SerialNumber=3 [ 311.643765][ T31] usb 2-1: Product: syz [ 311.648013][ T31] usb 2-1: Manufacturer: syz [ 311.652625][ T31] usb 2-1: SerialNumber: syz [ 311.660151][ T31] rtl8150 2-1:2.0: couldn't find required endpoints [ 311.666816][ T31] rtl8150 2-1:2.0: probe with driver rtl8150 failed with error -5 [ 311.687960][ T2437] usb 1-1: device descriptor read/64, error -71 [ 311.861215][ T31] usb 2-1: USB disconnect, device number 122 [ 311.929436][ T2437] usb 1-1: device descriptor read/64, error -71 [ 312.038066][ T2437] usb usb1-port1: attempt power cycle [ 312.287981][ T9] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 312.367864][ T31] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 312.377892][ T2437] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 312.393731][ T5798] rust_binder: 1253: no such ref 1 [ 312.409281][ T2437] usb 1-1: device descriptor read/8, error -71 [ 312.417842][ T9] usb 4-1: device descriptor read/64, error -71 [ 312.510019][ T5805] SELinux: policydb magic number 0xf3 does not match expected magic number 0xf97cff8c [ 312.519735][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.519804][ T5805] SELinux: failed to load policy [ 312.536026][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.545889][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 312.555293][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.565743][ T2437] usb 1-1: device descriptor read/8, error -71 [ 312.575463][ T31] usb 3-1: config 0 descriptor?? [ 312.657848][ T9] usb 4-1: device descriptor read/64, error -71 [ 312.807868][ T2437] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 312.828826][ T2437] usb 1-1: device descriptor read/8, error -71 [ 312.897902][ T9] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 312.940121][ T36] audit: type=1400 audit(7213357764.287:446): avc: denied { mounton } for pid=5816 comm="syz.1.1787" path="/428/file0" dev="tmpfs" ino=2340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 312.963338][ T36] audit: type=1401 audit(7213357764.287:447): op=setxattr invalid_context="system_u:object_r:apt_var_lib_t:s0" [ 312.976397][ T2437] usb 1-1: device descriptor read/8, error -71 [ 312.986230][ T31] koneplus 0003:1E7D:2D51.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 313.037890][ T9] usb 4-1: device descriptor read/64, error -71 [ 313.088013][ T2437] usb usb1-port1: unable to enumerate USB device [ 313.177830][ T599] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 313.187294][ T2437] usb 3-1: USB disconnect, device number 123 [ 313.277895][ T9] usb 4-1: device descriptor read/64, error -71 [ 313.327839][ T599] usb 2-1: Using ep0 maxpacket: 32 [ 313.334531][ T599] usb 2-1: config 0 has no interfaces? [ 313.341672][ T599] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 313.350819][ T599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.358891][ T599] usb 2-1: Product: syz [ 313.363078][ T599] usb 2-1: Manufacturer: syz [ 313.367728][ T599] usb 2-1: SerialNumber: syz [ 313.373119][ T599] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 313.381883][ T599] usb 2-1: no configuration chosen from 1 choice [ 313.388669][ T9] usb usb4-port1: attempt power cycle [ 313.667532][ T5821] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 313.727882][ T9] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 313.749016][ T9] usb 4-1: device descriptor read/8, error -71 [ 313.889362][ T9] usb 4-1: device descriptor read/8, error -71 [ 313.947842][ T599] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 314.108979][ T599] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.121884][ T599] usb 3-1: config 1 interface 0 has no altsetting 0 [ 314.128590][ T9] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 314.137862][ T599] usb 3-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.40 [ 314.147036][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.155156][ T599] usb 3-1: Product: 䕮蕐ഫ活糉꿍䆘돾笲䵯煉¦࿵縊∍旫⊓爂㍹ꀄ瀝龬儏眐䇱鬗瞼എ际䵔仐Ⱬ튲㍣⊿ュꑅᥞ糍踒ꭜ㖜쌠쬒몝ﵒ楮㏋擹䓝㔁⏗炏蚞ꓞ旫 [ 314.175296][ T599] usb 3-1: Manufacturer: 畿휳Ꟛ輨駱撫䷆젿ఔⱨ댚ㅠዑμ뀞ㄖ삮눂휪鼩伡矿䠦悒쇾簴刻鶪羿욘欯莑㋺赻烅쇋懚䖻 [ 314.190670][ T599] usb 3-1: SerialNumber: с [ 314.195811][ T9] usb 4-1: device descriptor read/8, error -71 [ 314.329109][ T9] usb 4-1: device descriptor read/8, error -71 [ 314.404221][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.412931][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.422716][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.431345][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.439337][ T9] usb usb4-port1: unable to enumerate USB device [ 314.461624][ T599] usbhid 3-1:1.0: can't add hid device: -71 [ 314.467636][ T599] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 314.478799][ T599] usb 3-1: USB disconnect, device number 124 [ 314.717887][ T2437] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 314.869371][ T2437] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 314.877348][ T2437] usb 1-1: can't read configurations, error -22 [ 315.017842][ T2437] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 315.164962][ T36] audit: type=1400 audit(7213357766.507:448): avc: denied { map } for pid=5837 comm="syz.2.1795" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.170776][ T2437] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 315.195933][ T2437] usb 1-1: can't read configurations, error -22 [ 315.202409][ T2437] usb usb1-port1: attempt power cycle [ 315.558112][ T2437] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 315.579839][ T2437] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 315.587957][ T2437] usb 1-1: can't read configurations, error -22 [ 315.687877][ T31] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 315.717903][ T2437] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 315.739822][ T2437] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 315.747985][ T2437] usb 1-1: can't read configurations, error -22 [ 315.754440][ T2437] usb usb1-port1: unable to enumerate USB device [ 315.839210][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.850317][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.860191][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.873205][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.882317][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.891061][ T31] usb 4-1: config 0 descriptor?? [ 315.951311][ T599] usb 2-1: USB disconnect, device number 123 [ 316.110625][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 316.116828][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 316.127413][ T31] usb 4-1: USB disconnect, device number 111 [ 316.327871][ T599] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 316.439438][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 316.439457][ T36] audit: type=1400 audit(7213357767.787:451): avc: denied { create } for pid=5883 comm="syz.3.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 316.465648][ T36] audit: type=1326 audit(7213357767.787:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.3.1810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdd9aeb9 code=0x0 [ 316.499480][ T599] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.510561][ T599] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.520487][ T599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.527126][ T599] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 316.536222][ T599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.545319][ T599] usb 2-1: config 0 descriptor?? [ 316.557943][ T2437] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 316.707855][ T2437] usb 3-1: Using ep0 maxpacket: 32 [ 316.714240][ T2437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.724500][ T2437] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 316.737509][ T2437] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 316.748503][ T2437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.757384][ T2437] usb 3-1: config 0 descriptor?? [ 316.766869][ T2437] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 317.024511][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.033889][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.413952][ T599] usbhid 2-1:0.0: can't add hid device: -71 [ 317.420392][ T599] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 317.429457][ T599] usb 2-1: USB disconnect, device number 124 [ 317.527839][ T2437] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 317.679830][ T2437] usb 4-1: Using ep0 maxpacket: 16 [ 317.690084][ T2437] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 317.700173][ T2437] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.710220][ T2437] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 317.729764][ T2437] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.739140][ T2437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 317.747580][ T2437] usb 4-1: SerialNumber: syz [ 317.760792][ T5893] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 317.897837][ T331] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 317.972303][ T2437] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 317.984162][ T2437] usb 4-1: USB disconnect, device number 112 [ 318.047812][ T331] usb 1-1: Invalid ep0 maxpacket: 32 [ 318.197821][ T331] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 318.367844][ T331] usb 1-1: Invalid ep0 maxpacket: 32 [ 318.373386][ T331] usb usb1-port1: attempt power cycle [ 318.525674][ T36] audit: type=1400 audit(7213357769.867:453): avc: denied { ioctl } for pid=5904 comm="syz.3.1814" path="socket:[88801]" dev="sockfs" ino=88801 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 318.718113][ T331] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 318.748211][ T331] usb 1-1: Invalid ep0 maxpacket: 32 [ 318.887824][ T31] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 318.897821][ T331] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 318.918187][ T331] usb 1-1: Invalid ep0 maxpacket: 32 [ 318.923632][ T331] usb usb1-port1: unable to enumerate USB device [ 319.039306][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.047606][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 319.056978][ T31] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 319.067407][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.078643][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.087865][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.095933][ T31] usb 4-1: Product: syz [ 319.100202][ T31] usb 4-1: Manufacturer: syz [ 319.104868][ T31] usb 4-1: SerialNumber: syz [ 319.359811][ T331] usb 3-1: USB disconnect, device number 125 [ 319.475504][ T36] audit: type=1400 audit(7213357770.787:454): avc: denied { lock } for pid=5930 comm="syz.1.1823" path="socket:[90016]" dev="sockfs" ino=90016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 319.521529][ T31] usb 4-1: 0:2 : does not exist [ 319.534200][ T31] usb 4-1: USB disconnect, device number 113 [ 319.697844][ T372] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 319.827864][ T372] usb 2-1: device descriptor read/64, error -71 [ 319.827860][ T331] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 319.978275][ T331] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 319.987590][ T331] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 319.995270][ T331] usb 3-1: can't read configurations, error -61 [ 320.077855][ T372] usb 2-1: device descriptor read/64, error -71 [ 320.104603][ T36] audit: type=1400 audit(7213357771.447:455): avc: denied { setattr } for pid=5944 comm="syz.3.1827" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 320.127914][ T331] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 320.278274][ T331] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 320.287300][ T331] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 320.294981][ T331] usb 3-1: can't read configurations, error -61 [ 320.301649][ T331] usb usb3-port1: attempt power cycle [ 320.317971][ T372] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 320.427823][ T599] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 320.447854][ T372] usb 2-1: device descriptor read/64, error -71 [ 320.536829][ T36] audit: type=1400 audit(7213357771.877:456): avc: denied { accept } for pid=5956 comm="syz.0.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 320.557838][ T599] usb 4-1: device descriptor read/64, error -71 [ 320.637842][ T331] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 320.658733][ T331] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 320.667963][ T331] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 320.676079][ T331] usb 3-1: can't read configurations, error -61 [ 320.687856][ T372] usb 2-1: device descriptor read/64, error -71 [ 320.694454][ T5965] loop2: detected capacity change from 0 to 7 [ 320.701058][ C1] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.711342][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.719521][ C0] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.729782][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.737683][ T5965] loop2: unable to read partition table [ 320.743590][ T5965] loop_reread_partitions: partition scan of loop2 (被xڬdGݡ [ 320.743590][ T5965] ) failed (rc=-5) [ 320.747506][ C1] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.767082][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.777918][ C0] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.788198][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.796470][ C1] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.806755][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.814817][ T372] usb usb2-port1: attempt power cycle [ 320.815386][ C0] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.830519][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.838494][ T599] usb 4-1: device descriptor read/64, error -71 [ 320.839624][ C1] critical medium error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.844840][ T331] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 320.854997][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 320.878644][ T331] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 320.887509][ T331] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 320.895184][ T331] usb 3-1: can't read configurations, error -61 [ 320.901824][ T331] usb usb3-port1: unable to enumerate USB device [ 321.037851][ T9] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 321.077831][ T599] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 321.157837][ T372] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 321.178822][ T372] usb 2-1: device descriptor read/8, error -71 [ 321.189356][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.197397][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 321.205949][ T9] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 321.216350][ T599] usb 4-1: device descriptor read/64, error -71 [ 321.222992][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.233755][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.242935][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.251165][ T9] usb 1-1: Product: syz [ 321.255324][ T9] usb 1-1: Manufacturer: syz [ 321.259973][ T9] usb 1-1: SerialNumber: syz [ 321.309195][ T372] usb 2-1: device descriptor read/8, error -71 [ 321.467820][ T599] usb 4-1: device descriptor read/64, error -71 [ 321.547850][ T372] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 321.569025][ T372] usb 2-1: device descriptor read/8, error -71 [ 321.587866][ T599] usb usb4-port1: attempt power cycle [ 321.698904][ T372] usb 2-1: device descriptor read/8, error -71 [ 321.807974][ T372] usb usb2-port1: unable to enumerate USB device [ 321.927976][ T599] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 321.948993][ T599] usb 4-1: device descriptor read/8, error -71 [ 322.089074][ T599] usb 4-1: device descriptor read/8, error -71 [ 322.347811][ T599] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 322.379062][ T599] usb 4-1: device descriptor read/8, error -71 [ 322.529178][ T599] usb 4-1: device descriptor read/8, error -71 [ 322.667986][ T599] usb usb4-port1: unable to enumerate USB device [ 322.808334][ T36] audit: type=1400 audit(7213357774.157:457): avc: denied { execmem } for pid=5974 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 323.547492][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 323.570246][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 323.782056][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.792575][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.840751][ T9] usb 1-1: 0:2 : does not exist [ 323.848245][ T9] usb 1-1: USB disconnect, device number 126 [ 323.860391][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.868677][ T599] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 323.885382][ T36] audit: type=1400 audit(7213357775.227:458): avc: denied { setattr } for pid=6004 comm="syz.0.1845" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.007889][ T372] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 324.059095][ T599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.071726][ T599] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.081067][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.089139][ T599] usb 3-1: Product: syz [ 324.093334][ T599] usb 3-1: Manufacturer: syz [ 324.097997][ T599] usb 3-1: SerialNumber: syz [ 324.137834][ T372] usb 4-1: device descriptor read/64, error -71 [ 324.197829][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 324.348379][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 324.354916][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 324.364077][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.376400][ T9] usb 1-1: config 0 descriptor?? [ 324.384718][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 324.387930][ T372] usb 4-1: device descriptor read/64, error -71 [ 324.393733][ T9] usb 1-1: Detected FT2233HP [ 324.583634][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 324.591840][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 324.599540][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 324.622732][ T9] usb 1-1: USB disconnect, device number 127 [ 324.629982][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 324.637973][ T372] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 324.640838][ T9] ftdi_sio 1-1:0.0: device disconnected [ 324.777950][ T372] usb 4-1: device descriptor read/64, error -71 [ 324.907824][ T331] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 325.017910][ T372] usb 4-1: device descriptor read/64, error -71 [ 325.060467][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.068769][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 325.077379][ T331] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 325.087872][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.100935][ T331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.110146][ T599] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 325.116640][ T599] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 325.124196][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.132295][ T331] usb 2-1: Product: syz [ 325.136479][ T331] usb 2-1: Manufacturer: syz [ 325.141151][ T599] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 325.141169][ T372] usb usb4-port1: attempt power cycle [ 325.146984][ T331] usb 2-1: SerialNumber: syz [ 325.311239][ T599] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 325.319418][ T599] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 325.332914][ T599] usb 3-1: USB disconnect, device number 4 [ 325.339263][ T599] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 325.407930][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 325.497850][ T372] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 325.519067][ T372] usb 4-1: device descriptor read/8, error -71 [ 325.578283][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 325.583952][ T9] usb 1-1: no configurations [ 325.588889][ T9] usb 1-1: can't read configurations, error -22 [ 325.648999][ T372] usb 4-1: device descriptor read/8, error -71 [ 325.727827][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 325.877838][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 325.887871][ T372] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 325.893409][ T9] usb 1-1: no configurations [ 325.906889][ T9] usb 1-1: can't read configurations, error -22 [ 325.918027][ T9] usb usb1-port1: attempt power cycle [ 325.937331][ T372] usb 4-1: device descriptor read/8, error -71 [ 326.069472][ T6038] loop2: detected capacity change from 0 to 7 [ 326.076869][ T372] usb 4-1: device descriptor read/8, error -71 [ 326.197876][ T372] usb usb4-port1: unable to enumerate USB device [ 326.267848][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 326.288229][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 326.293907][ T9] usb 1-1: no configurations [ 326.298923][ T9] usb 1-1: can't read configurations, error -22 [ 326.338064][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 326.427876][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 326.448212][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 326.453969][ T9] usb 1-1: no configurations [ 326.459171][ T9] usb 1-1: can't read configurations, error -22 [ 326.465748][ T9] usb usb1-port1: unable to enumerate USB device [ 326.467969][ T31] usb 3-1: device descriptor read/64, error -71 [ 326.717867][ T31] usb 3-1: device descriptor read/64, error -71 [ 326.957864][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 327.097834][ T31] usb 3-1: device descriptor read/64, error -71 [ 327.207844][ T372] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 327.337909][ T31] usb 3-1: device descriptor read/64, error -71 [ 327.358962][ T372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.369149][ T372] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.388216][ T372] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 327.397417][ T372] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 327.405608][ T372] usb 4-1: Manufacturer: syz [ 327.411487][ T372] usb 4-1: config 0 descriptor?? [ 327.457847][ T31] usb usb3-port1: attempt power cycle [ 327.720527][ T331] usb 2-1: 0:2 : does not exist [ 327.731161][ T331] usb 2-1: USB disconnect, device number 3 [ 327.743078][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 327.797987][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 327.819031][ T31] usb 3-1: device descriptor read/8, error -71 [ 327.949132][ T31] usb 3-1: device descriptor read/8, error -71 [ 328.027846][ T331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 328.177974][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 328.184393][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.188002][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 328.196317][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.212840][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.227035][ T6051] netlink: 'syz.0.1860': attribute type 4 has an invalid length. [ 328.227287][ T331] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.235161][ T6051] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1860'. [ 328.245320][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.262775][ T31] usb 3-1: device descriptor read/8, error -71 [ 328.263544][ T331] usb 2-1: config 0 descriptor?? [ 328.398972][ T31] usb 3-1: device descriptor read/8, error -71 [ 328.508098][ T31] usb usb3-port1: unable to enumerate USB device [ 328.546511][ T6068] overlayfs: failed to resolve './file1': -2 [ 328.553378][ T36] audit: type=1326 audit(7213357779.893:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6067 comm="syz.0.1864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13e79aeb9 code=0x0 [ 328.577240][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 328.584055][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.593941][ T331] usb 2-1: USB disconnect, device number 4 [ 328.857816][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 328.977839][ T331] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 329.008883][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.017004][ T31] usb 1-1: config 0 has no interface number 0 [ 329.023171][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.034118][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.043920][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 329.052998][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.072156][ T31] usb 1-1: config 0 descriptor?? [ 329.139294][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.147482][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 329.160432][ T331] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 329.171229][ T331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.182440][ T331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.191670][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.199777][ T331] usb 2-1: Product: syz [ 329.204951][ T331] usb 2-1: Manufacturer: syz [ 329.209636][ T331] usb 2-1: SerialNumber: syz [ 329.478794][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.489839][ T31] prodikeys 0003:041E:2801.0045: item fetching failed at offset 3/7 [ 329.491229][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.506554][ T31] prodikeys 0003:041E:2801.0045: hid parse failed [ 329.513126][ T31] prodikeys 0003:041E:2801.0045: probe with driver prodikeys failed with error -22 [ 329.537828][ T599] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 329.667727][ T599] usb 3-1: device descriptor read/64, error -71 [ 329.690579][ T31] usb 1-1: USB disconnect, device number 6 [ 329.937656][ T599] usb 3-1: device descriptor read/64, error -71 [ 329.984876][ T9] usb 4-1: USB disconnect, device number 122 [ 330.060569][ T6093] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 330.070199][ T6093] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 330.108607][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1871'. [ 330.187706][ T599] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 330.327716][ T599] usb 3-1: device descriptor read/64, error -71 [ 330.378508][ T6106] SELinux: failed to load policy [ 330.507815][ T9] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 330.597586][ T599] usb 3-1: device descriptor read/64, error -71 [ 330.678820][ T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 330.687151][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 330.697629][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.706083][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.715888][ T599] usb usb3-port1: attempt power cycle [ 330.721948][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.730677][ T9] usb 4-1: Product: syz [ 330.734995][ T9] usb 4-1: Manufacturer: syz [ 330.739998][ T9] usb 4-1: SerialNumber: syz [ 330.746050][ T9] usb 4-1: config 0 descriptor?? [ 330.752710][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 330.759090][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 330.767282][ T9] usb 4-1: selecting invalid altsetting 0 [ 331.067687][ T599] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 331.075508][ T9] usb 4-1: USB disconnect, device number 123 [ 331.098759][ T599] usb 3-1: device descriptor read/8, error -71 [ 331.250416][ T599] usb 3-1: device descriptor read/8, error -71 [ 331.487482][ T599] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 331.528789][ T599] usb 3-1: device descriptor read/8, error -71 [ 331.669489][ T599] usb 3-1: device descriptor read/8, error -71 [ 331.778154][ T599] usb usb3-port1: unable to enumerate USB device [ 331.800262][ T331] usb 2-1: 0:2 : does not exist [ 331.822496][ T331] usb 2-1: USB disconnect, device number 5 [ 332.049823][ T36] audit: type=1326 audit(7213357783.394:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.1.1885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f623599aeb9 code=0x0 [ 332.057484][ T750] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 332.227385][ T750] usb 4-1: Using ep0 maxpacket: 16 [ 332.237943][ T750] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 332.257543][ T750] usb 4-1: config 0 has no interface number 0 [ 332.270356][ T750] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 332.285511][ T750] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 332.298391][ T750] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 332.308167][ T750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.316264][ T750] usb 4-1: Product: syz [ 332.320613][ T750] usb 4-1: Manufacturer: syz [ 332.325284][ T750] usb 4-1: SerialNumber: syz [ 332.331026][ T750] usb 4-1: config 0 descriptor?? [ 332.336632][ T6134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.345288][ T6134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.554729][ T6134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.562203][ T6134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.677372][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 332.808998][ T750] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 332.822596][ T750] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 332.832748][ T750] asix 4-1:0.251: probe with driver asix failed with error -5 [ 332.841063][ T31] usb 3-1: config index 0 descriptor too short (expected 12336, got 82) [ 332.849889][ T31] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 332.859300][ T750] usb 4-1: USB disconnect, device number 124 [ 332.866263][ T31] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 332.877132][ T31] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 332.888007][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 332.897189][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.905277][ T31] usb 3-1: Product: syz [ 332.909572][ T31] usb 3-1: Manufacturer: syz [ 332.914203][ T31] usb 3-1: SerialNumber: syz [ 333.117200][ T6149] veth1: entered promiscuous mode [ 333.122927][ T6150] veth1: left promiscuous mode [ 333.547214][ T599] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 333.567209][ T331] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 333.698839][ T599] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.706937][ T599] usb 2-1: not running at top speed; connect to a high speed hub [ 333.715685][ T599] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 333.726087][ T599] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.736038][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.747162][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.757164][ T331] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 333.766655][ T599] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.775956][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.784247][ T599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.792788][ T599] usb 2-1: Product: syz [ 333.797302][ T331] usb 4-1: config 0 descriptor?? [ 333.802371][ T599] usb 2-1: Manufacturer: syz [ 333.807060][ T599] usb 2-1: SerialNumber: syz [ 333.949709][ T9] usb 3-1: USB disconnect, device number 13 [ 334.210309][ T599] usb 2-1: 0:2 : does not exist [ 334.219785][ T599] usb 2-1: USB disconnect, device number 6 [ 334.233603][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 334.274594][ T6187] netlink: 'syz.2.1899': attribute type 27 has an invalid length. [ 334.300623][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.308024][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.987046][ T599] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 335.137058][ T599] usb 1-1: Using ep0 maxpacket: 16 [ 335.143222][ T599] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 335.151700][ T599] usb 1-1: config 0 has no interface number 0 [ 335.157852][ T599] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 335.167847][ T599] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 335.179524][ T599] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 335.188668][ T599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.196699][ T599] usb 1-1: Product: syz [ 335.200914][ T599] usb 1-1: Manufacturer: syz [ 335.205542][ T599] usb 1-1: SerialNumber: syz [ 335.210997][ T599] usb 1-1: config 0 descriptor?? [ 335.216333][ T6193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.223672][ T6193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.277037][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 335.297437][ T750] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 335.427018][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 335.433470][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 335.434939][ T6193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.442776][ T31] usb 2-1: config 0 has no interface number 0 [ 335.449515][ T6193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.455437][ T750] usb 3-1: Using ep0 maxpacket: 16 [ 335.467300][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 335.479469][ T750] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 335.488571][ T750] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 335.498319][ T750] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 335.508085][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 335.517213][ T750] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 12815, setting to 1024 [ 335.528426][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.536443][ T31] usb 2-1: Product: syz [ 335.540683][ T750] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 335.550742][ T31] usb 2-1: Manufacturer: syz [ 335.555368][ T31] usb 2-1: SerialNumber: syz [ 335.560012][ T750] usb 3-1: config 1 interface 0 has no altsetting 0 [ 335.566649][ T750] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 335.576242][ T750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.584561][ T31] usb 2-1: config 0 descriptor?? [ 335.590151][ T6202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.598612][ T750] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 335.709146][ T599] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 335.719447][ T599] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 335.729249][ T599] asix 1-1:0.251: probe with driver asix failed with error -5 [ 335.738117][ T599] usb 1-1: USB disconnect, device number 8 [ 335.802780][ T6202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.819171][ T750] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 335.829671][ T750] usb 3-1: USB disconnect, device number 14 [ 336.410908][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 336.427389][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 336.448390][ T331] usb 4-1: USB disconnect, device number 125 [ 336.786848][ T599] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 336.827689][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 336.838237][ T31] asix 2-1:0.188: probe with driver asix failed with error -32 [ 336.946814][ T599] usb 3-1: Using ep0 maxpacket: 16 [ 336.953747][ T599] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 336.962731][ T599] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 336.973193][ T599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.984538][ T599] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.993987][ T599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.002133][ T599] usb 3-1: Product: syz [ 337.006545][ T599] usb 3-1: Manufacturer: syz [ 337.011282][ T599] usb 3-1: SerialNumber: syz [ 337.396756][ T331] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 337.548138][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.556451][ T331] usb 1-1: not running at top speed; connect to a high speed hub [ 337.565069][ T331] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 337.575567][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.586084][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.595283][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.603388][ T331] usb 1-1: Product: syz [ 337.609198][ T331] usb 1-1: Manufacturer: syz [ 337.613901][ T331] usb 1-1: SerialNumber: syz [ 337.996666][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 338.049644][ T668] usb 2-1: USB disconnect, device number 7 [ 338.146646][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 338.153122][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 338.161501][ T9] usb 4-1: config 0 has no interface number 0 [ 338.167692][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 338.177763][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 338.197150][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 338.207743][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.218657][ T9] usb 4-1: Product: syz [ 338.222870][ T9] usb 4-1: Manufacturer: syz [ 338.227541][ T9] usb 4-1: SerialNumber: syz [ 338.233092][ T9] usb 4-1: config 0 descriptor?? [ 338.238724][ T6232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 338.246029][ T6232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 338.460390][ T6232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 338.467697][ T6232] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 338.516672][ T668] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 338.667887][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.679204][ T668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.689041][ T668] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 338.698333][ T668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.707427][ T668] usb 2-1: config 0 descriptor?? [ 338.728286][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 338.738519][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 338.748310][ T9] asix 4-1:0.251: probe with driver asix failed with error -5 [ 338.757101][ T9] usb 4-1: USB disconnect, device number 126 [ 339.483906][ T599] usb 3-1: 0:2 : does not exist [ 339.493967][ T331] usb 1-1: 0:2 : does not exist [ 339.499237][ T599] usb 3-1: USB disconnect, device number 15 [ 339.510208][ T331] usb 1-1: USB disconnect, device number 9 [ 339.524335][ T588] udevd[588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 339.826473][ T331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 339.866458][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 339.986460][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 339.994364][ T331] usb 1-1: too many configurations: 24, using maximum allowed: 8 [ 340.009861][ T331] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 340.019120][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 340.024345][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.032472][ T331] usb 1-1: Product: syz [ 340.036748][ T331] usb 1-1: Manufacturer: syz [ 340.041402][ T331] usb 1-1: SerialNumber: syz [ 340.047374][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 340.055638][ T9] usb 4-1: config 0 has no interface number 0 [ 340.063275][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 340.077139][ T331] r8152-cfgselector 1-1: Unknown version 0x0000 [ 340.083514][ T331] r8152-cfgselector 1-1: config 0 descriptor?? [ 340.091162][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 340.100305][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.108411][ T9] usb 4-1: Product: syz [ 340.112618][ T9] usb 4-1: Manufacturer: syz [ 340.117272][ T9] usb 4-1: SerialNumber: syz [ 340.122654][ T9] usb 4-1: config 0 descriptor?? [ 340.127997][ T6260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.296994][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 340.297294][ T331] r8152-cfgselector 1-1: Unknown version 0x0000 [ 340.311103][ T331] r8152-cfgselector 1-1: bad CDC descriptors [ 340.318521][ T331] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 340.335971][ T6260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.456420][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 340.462940][ T31] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 340.471208][ T31] usb 3-1: config 0 has no interface number 0 [ 340.477378][ T31] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 340.487377][ T31] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 340.499020][ T31] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 340.508146][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.516181][ T31] usb 3-1: Product: syz [ 340.520433][ T31] usb 3-1: Manufacturer: syz [ 340.525055][ T31] usb 3-1: SerialNumber: syz [ 340.530654][ T31] usb 3-1: config 0 descriptor?? [ 340.535929][ T6273] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 340.543165][ T6273] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 340.817343][ T31] asix 3-1:0.251: probe with driver asix failed with error -71 [ 340.829275][ T31] usb 3-1: USB disconnect, device number 16 [ 341.156328][ T750] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 341.307771][ T750] usb 1-1: unable to get BOS descriptor or descriptor too short [ 341.315852][ T750] usb 1-1: not running at top speed; connect to a high speed hub [ 341.326182][ T750] usb 1-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 341.341383][ T750] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.352718][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 341.363791][ T750] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.368044][ T9] asix 4-1:0.188: probe with driver asix failed with error -32 [ 341.386751][ T750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.387525][ T668] usbhid 2-1:0.0: can't add hid device: -71 [ 341.400138][ T750] usb 1-1: Product: syz [ 341.405914][ T668] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 341.413801][ T750] usb 1-1: Manufacturer: syz [ 341.418528][ T750] usb 1-1: SerialNumber: syz [ 341.434869][ T6279] rust_binder: 1387: no such ref 2 [ 341.438667][ T668] usb 2-1: USB disconnect, device number 8 [ 341.448391][ T6279] rust_binder: Read failure Err(EAGAIN) in pid:1387 [ 341.764106][ T750] usb 1-1: 0:2 : does not exist [ 341.779871][ T750] usb 1-1: USB disconnect, device number 11 [ 341.787639][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 341.882440][ T6310] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 342.066207][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 342.217320][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 342.232999][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.243255][ T31] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 342.252565][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.266760][ T31] usb 3-1: config 0 descriptor?? [ 342.427715][ T6339] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.1947'. [ 342.437188][ T6339] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1947'. [ 342.484358][ T36] audit: type=1400 audit(7213357793.825:461): avc: denied { create } for pid=6338 comm="syz.0.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 342.542882][ T36] audit: type=1400 audit(7213357793.825:462): avc: denied { sys_admin } for pid=6338 comm="syz.0.1947" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 342.577735][ T36] audit: type=1400 audit(7213357793.925:463): avc: denied { append } for pid=6345 comm="syz.0.1948" name="pfkey" dev="proc" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 342.641744][ T2437] usb 4-1: USB disconnect, device number 127 [ 342.857310][ T750] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 343.036068][ T750] usb 1-1: Using ep0 maxpacket: 16 [ 343.047266][ T750] usb 1-1: unable to get BOS descriptor or descriptor too short [ 343.060267][ T750] usb 1-1: config 244 has an invalid interface number: 247 but max is 0 [ 343.073135][ T750] usb 1-1: config 244 has no interface number 0 [ 343.089632][ T750] usb 1-1: config 244 interface 247 has no altsetting 0 [ 343.107613][ T750] usb 1-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b0.16 [ 343.126044][ T750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.144270][ T750] usb 1-1: Product: syz [ 343.156060][ T750] usb 1-1: Manufacturer: syz [ 343.160758][ T750] usb 1-1: SerialNumber: syz [ 343.186065][ T668] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 343.347755][ T668] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.356127][ T668] usb 4-1: not running at top speed; connect to a high speed hub [ 343.364719][ T668] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 343.375196][ T668] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.387556][ T750] usb 1-1: Found UVC 0.00 device syz (174f:8a12) [ 343.388997][ T668] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.394074][ T750] usb 1-1: No valid video chain found. [ 343.405818][ T668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.420326][ T750] usb 1-1: USB disconnect, device number 12 [ 343.428980][ T668] usb 4-1: Product: syz [ 343.433448][ T668] usb 4-1: Manufacturer: syz [ 343.438280][ T668] usb 4-1: SerialNumber: syz [ 343.762579][ T668] usb 4-1: 0:2 : does not exist [ 343.771263][ T668] usb 4-1: USB disconnect, device number 2 [ 343.785327][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 344.116001][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 344.265910][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 344.286753][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 344.295049][ T9] usb 2-1: config 0 has no interface number 0 [ 344.301239][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 344.312863][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 344.327846][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.337711][ T9] usb 2-1: Product: syz [ 344.342001][ T9] usb 2-1: Manufacturer: syz [ 344.346730][ T9] usb 2-1: SerialNumber: syz [ 344.352714][ T9] usb 2-1: config 0 descriptor?? [ 344.361044][ T6373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.570562][ T6373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.855855][ T668] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 344.915876][ T599] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 344.978128][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 344.984259][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 344.994276][ T31] usb 3-1: USB disconnect, device number 17 [ 345.006913][ T668] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.013672][ T668] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 345.022878][ T668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.031790][ T668] usb 4-1: config 0 descriptor?? [ 345.065805][ T599] usb 1-1: Using ep0 maxpacket: 32 [ 345.072143][ T599] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 345.080408][ T599] usb 1-1: config 0 has no interface number 0 [ 345.086598][ T599] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 345.098158][ T599] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 345.107320][ T599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.115357][ T599] usb 1-1: Product: syz [ 345.119597][ T599] usb 1-1: Manufacturer: syz [ 345.124229][ T599] usb 1-1: SerialNumber: syz [ 345.129658][ T599] usb 1-1: config 0 descriptor?? [ 345.135072][ T6417] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 345.335822][ T31] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 345.344457][ T6417] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 345.447425][ T668] hid-led 0003:0FC5:B080.0046: unknown main item tag 0x0 [ 345.454603][ T668] hid-led 0003:0FC5:B080.0046: unknown main item tag 0x0 [ 345.461809][ T668] hid-led 0003:0FC5:B080.0046: unknown main item tag 0x0 [ 345.468977][ T668] hid-led 0003:0FC5:B080.0046: unknown main item tag 0x0 [ 345.476095][ T668] hid-led 0003:0FC5:B080.0046: unknown main item tag 0x0 [ 345.497472][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.505540][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 345.514172][ T31] usb 3-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 345.524537][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.535205][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.544433][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.552874][ T31] usb 3-1: Product: syz [ 345.553229][ T599] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 345.557219][ T31] usb 3-1: Manufacturer: syz [ 345.557242][ T31] usb 3-1: SerialNumber: syz [ 345.569298][ T599] asix 1-1:0.188: probe with driver asix failed with error -61 [ 345.593414][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 345.603851][ T9] asix 2-1:0.188: probe with driver asix failed with error -32 [ 345.889644][ T31] usb 3-1: 0:2 : does not exist [ 345.897414][ T31] usb 3-1: USB disconnect, device number 18 [ 345.907481][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 346.607579][ T36] audit: type=1400 audit(7213357797.955:464): avc: denied { write } for pid=6437 comm="syz.2.1979" name="/" dev="configfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 346.629855][ T36] audit: type=1400 audit(7213357797.955:465): avc: denied { add_name } for pid=6437 comm="syz.2.1979" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 346.651340][ T36] audit: type=1400 audit(7213357797.955:466): avc: denied { create } for pid=6437 comm="syz.2.1979" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 346.672451][ T36] audit: type=1400 audit(7213357797.955:467): avc: denied { ioctl } for pid=6437 comm="syz.2.1979" path="/" dev="configfs" ino=753 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 346.894553][ T599] usb 2-1: USB disconnect, device number 9 [ 347.237888][ T6464] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN PTI [ 347.250582][ T6464] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 347.259057][ T6464] CPU: 0 UID: 0 PID: 6464 Comm: syz.2.1984 Not tainted syzkaller #0 0044b833cf02edb59ee897eae4c42c13324c9de7 [ 347.270656][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.280766][ T6464] RIP: 0010:security_path_rename+0x95/0x2a0 [ 347.286739][ T6464] Code: 00 44 8b 2b 44 89 ee 81 e6 00 02 00 00 31 db 31 ff e8 ff 8b 15 ff 41 81 e5 00 02 00 00 0f 85 cd 00 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 e4 00 00 00 41 8b 1e 89 de 81 e6 00 00 [ 347.306414][ T6464] RSP: 0018:ffffc9000fa27cf0 EFLAGS: 00010202 [ 347.312546][ T6464] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000002 [ 347.320651][ T6464] RDX: ffff88811b40cc00 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.328675][ T6464] RBP: ffffc9000fa27d30 R08: 0000000000000000 R09: 1ffff1103edca178 [ 347.336691][ T6464] R10: dffffc0000000000 R11: ffffed103edca179 R12: ffff888135f1dbb0 [ 347.344713][ T6464] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 347.352732][ T6464] FS: 00007fe42f01a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 347.361718][ T6464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.368352][ T6464] CR2: 00007f7dfdde8600 CR3: 000000011c606000 CR4: 00000000003526b0 [ 347.376376][ T6464] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 347.384397][ T6464] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 347.392416][ T6464] Call Trace: [ 347.395737][ T6464] [ 347.398703][ T6464] do_renameat2+0x634/0xc40 [ 347.403290][ T6464] ? __cfi_do_renameat2+0x10/0x10 [ 347.408374][ T6464] ? __kasan_check_write+0x18/0x20 [ 347.413532][ T6464] ? getname_flags+0x208/0x700 [ 347.418352][ T6464] __x64_sys_rename+0x86/0xa0 [ 347.423090][ T6464] x64_sys_call+0x150b/0x2ee0 [ 347.427825][ T6464] do_syscall_64+0x57/0xf0 [ 347.432297][ T6464] ? clear_bhb_loop+0x50/0xa0 [ 347.437038][ T6464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 347.443008][ T6464] RIP: 0033:0x7fe42e19aeb9 [ 347.447487][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.467167][ T6464] RSP: 002b:00007fe42f01a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 347.476252][ T6464] RAX: ffffffffffffffda RBX: 00007fe42e416180 RCX: 00007fe42e19aeb9 [ 347.484285][ T6464] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 347.492308][ T6464] RBP: 00007fe42e208c1f R08: 0000000000000000 R09: 0000000000000000 [ 347.500327][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.508344][ T6464] R13: 00007fe42e416218 R14: 00007fe42e416180 R15: 00007fffe7854b48 [ 347.516375][ T6464] [ 347.519434][ T6464] Modules linked in: [ 347.523651][ T6464] ---[ end trace 0000000000000000 ]--- [ 347.536151][ T36] audit: type=1400 audit(7213357798.876:468): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 347.560012][ T6464] RIP: 0010:security_path_rename+0x95/0x2a0 [ 347.566103][ T6464] Code: 00 44 8b 2b 44 89 ee 81 e6 00 02 00 00 31 db 31 ff e8 ff 8b 15 ff 41 81 e5 00 02 00 00 0f 85 cd 00 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 e4 00 00 00 41 8b 1e 89 de 81 e6 00 00 [ 347.586291][ T36] audit: type=1400 audit(7213357798.876:469): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.595812][ T6464] RSP: 0018:ffffc9000fa27cf0 EFLAGS: 00010202 [ 347.608495][ T36] audit: type=1400 audit(7213357798.876:470): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.614109][ T6464] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000002 [ 347.635676][ T599] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 347.651176][ T6464] RDX: ffff88811b40cc00 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.652504][ T36] audit: type=1400 audit(7213357798.876:471): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.669787][ T6464] RBP: ffffc9000fa27d30 R08: 0000000000000000 R09: 1ffff1103edca178 [ 347.682988][ T36] audit: type=1400 audit(7213357798.876:472): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.708570][ T36] audit: type=1400 audit(7213357798.876:473): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.731599][ T6464] R10: dffffc0000000000 R11: ffffed103edca179 R12: ffff888135f1dbb0 [ 347.735536][ T31] usb 1-1: USB disconnect, device number 13 [ 347.740652][ T6464] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 347.754505][ T36] audit: type=1400 audit(7213357798.876:474): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.775630][ T6464] FS: 00007fe42f01a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 347.787861][ T6464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.794590][ T6464] CR2: 0000000000000000 CR3: 000000011c606000 CR4: 00000000003526b0 [ 347.802812][ T6464] Kernel panic - not syncing: Fatal exception [ 347.809548][ T6464] Kernel Offset: disabled [ 347.813896][ T6464] Rebooting in 86400 seconds..