last executing test programs: 7.039687305s ago: executing program 0 (id=96): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001100010002000000f6dbdf256500000013", @ANYBLOB], 0xb4}], 0x1}, 0x0) 6.908335198s ago: executing program 0 (id=97): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0x4, 0x10, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x4000080) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x8) fchdir(r1) lstat(&(0x7f0000000040)='./sys\x00', &(0x7f0000001300)) 6.904329828s ago: executing program 0 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001340), 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788030c09103328", 0xffffffffffffffd7, 0x4, &(0x7f0000000140)={0x11, 0x86c6, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'ip6gretap0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x10, r5}, 0x10) recvfrom(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) 6.902857819s ago: executing program 0 (id=99): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 64) r1 = openat(r0, 0x0, 0x42, 0x1) (rerun: 64) fallocate(r1, 0x3b9f522abd93d96e, 0x8000000000000001, 0x9) (async) truncate(0x0, 0x6) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)=ANY=[@ANYRES64=r0], 0x40}], 0x1, 0x0, 0x0, 0xb305e06daab48262}, 0x48000) (async) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x470}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x6, 0x800, 0x0}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r8, 0x0) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0xe) (rerun: 64) setuid(0xee00) (async, rerun: 32) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async, rerun: 32) recvmmsg(r7, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a00)=""/4095, 0xfff}, {&(0x7f0000000000)=""/113, 0x71}], 0x2}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2, 0x0) 6.899719409s ago: executing program 0 (id=100): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) 6.85159756s ago: executing program 0 (id=102): setfsgid(0xee01) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) signalfd4(r1, &(0x7f0000000000)={[0x4490dec2]}, 0x8, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9cba8344"], 0x0}, 0x0) 4.223665981s ago: executing program 2 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCXONC(r1, 0x40045436, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25380000000c005800480000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc090}, 0x4850) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x124, {0x0, 0x0, 0x4, 0x4, 0x8, 0x55c96986}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0xfffffffffffffe6c) socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0xc498, 0x3, 0x2}, 0x18, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffbf}]}) ioctl$KVM_GET_TSC_KHZ_cpu(r5, 0xaea3) setregid(0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.210759831s ago: executing program 2 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004000)={0x1, 0x0, 0xfec00000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e090c00, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) lstat(&(0x7f00000065c0)='./file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x78, 0x0, 0x7, {0x9, 0x1, 0x0, {0x4, 0xffffffffffffffff, 0x0, 0x10, 0x8, 0xfff, 0x6, 0x100, 0x9, 0x6000, 0x6c86a3a2, 0x0, 0x0, 0x400, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setuid(0xee01) fcntl$setlease(r7, 0x400, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioctl$SNAPSHOT_FREE(r3, 0x3305) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001000)={0x0, &(0x7f0000002000)=[@code={0xa, 0x1b, {"48c7c0000000080f01d8"}}], 0x1b}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.199999962s ago: executing program 3 (id=124): syz_usb_connect$cdc_ecm(0x2, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x81, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x53c}, {0xd, 0x24, 0xf, 0x1, 0xfde3, 0x9, 0x2, 0xb}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xfc01}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x6, 0x2}}}}}]}}]}}, 0x0) 3.748452812s ago: executing program 2 (id=128): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001480)=[{0xe0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000240)='pim6reg1\x00'}) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x81007702, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @loopback}, &(0x7f0000000040)=0xc) sendmsg$xdp(r3, &(0x7f0000002540)={&(0x7f00000001c0)={0x2c, 0x5, r4, 0x2a}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000280)="cab3fb5c533d957f2b23bafada86144862566b967768ac2aed059d84aa526ee3a05e3d71143e072d46f155ae44bf6c4473c052c0f697938877d5b44633bf3d0c9e1e39466cbc73cd6dadb09e7481d584a951deeea19399f9a734d90cef73d6d14466548c0256706a15acacd61b46d7be7bd6bcb3588cf4b16385083592", 0x7d}, {&(0x7f0000000300)="6eb52836203d58ac678e1e21bc6a77a3d934a22a3ec86cbdcd41d545ee1860ef48e3a898c41a7e209bf124d043b2df690878f55bf66fd89ffc76318ac9e2bece14c6299a7b27cd1aa2fe60c3579f3512ba8ac94ed7dbec87806bdfe53414109b3b552ebdc7cdf45224f5e4f46a1950e08b76dedc9cd34330011ddc5817fd25e74aacd8e784ea27c1377555e2954bc525d3e1f8dbea7e327003d48edd04fc9a68ed2ba9ed001d5a1fa3421e369eab08140e86072d39d41c9f9f7f818ac34feaf7c69525976cf3b51fe5b2cb44221e7096e64ca3415a9efd29082898439380ad8e1955236875078f5739b49e560343d7", 0xef}, {&(0x7f0000000400)="cbcbb3c3b66df0a350313a9ed85818180769a82469772ae4f6aef4a61d17f4e5fa81afc3a8744ffcb21a95fcc57e9bdd7382480015b38d5fdaedd8edf747c72eb3819b6a71c6dba623371c484b9f1b673474c0fb060cc4754eebb93429080b22993b81777af82ce2d51d49ae698218e07671318a8a9d2638e47477da1898988a79feedc85ae6c377a5804b4076c9c8412c52d2313c3114e5844a6b2f0ad1e0e53d6cad564546a957df272fad7ab23f97b9593c32b494bfb05fdf793a9ddfa9923bc540e69261ed53d4443b7b9d644fd256c1b72fbcc73bd8f796d6e0164bf0decf3b8991c961ec18661c71b79c3a49e1a9f67fef1e284dc3", 0xf8}, {&(0x7f0000000500)="a7c810e485ec9bd021327c5cd73949a8722678440d6ae00abbf1fd5e465195f1a6e34b186ad9fe013bade04cdf2b2a6d32b3bb352d2b663d23911522009a269c6b816ed079cb1415e1fabde8666bca61aebf3bae1bbbb5d80bd58673887d3e7ef406c676d71b8c01b5ad6991cdaae044f82498be3359ba78da24e1864b039287c05142b6ba0ab43a9d4858defb7ed28dd7ca607c40223d186ce9f5d7e847e9322baa7e42bd9d23c2abd039a7466f4d2c29fd1f980a80b8947b70e744091a36c665bf343c08e6913429", 0xc9}, {&(0x7f00000014c0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x4004814}, 0x8080) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$hidraw(0x0, 0x0, 0xbb42) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.172248595s ago: executing program 2 (id=133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) shutdown(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001100010000000000ffdbdf25100000000b0000005681ccabd869c20300"], 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a0090000180c20000000bb79e2ce9b803"], 0x72) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x7800, 0xc7, 0x9, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xf2, 0x3, 0x2, [{@rand_addr=0x64010101, 0x6}, {@multicast1, 0x3}]}, @end, @timestamp={0x44, 0x1c, 0xcb, 0x0, 0x8, [0x9, 0x0, 0xfffffff7, 0x6, 0x4, 0xf3]}]}}}}}) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x7, 0x7000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040810}, 0x4004090) 3.171699835s ago: executing program 1 (id=134): r0 = socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="600000004200017ef0"], 0x60}], 0x1}, 0x800) 3.170906475s ago: executing program 1 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x893, 0x9}}, @wrmsr={0x65, 0x20, {0xa2a, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x9e, 0x5, 0x4, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xed08783434aab37b, 0xda12}}, @cpuid={0x64, 0x18, {0x3, 0x400}}, @code={0xa, 0x59, {"44f789a5689343000000003c06b9170900000f320f0175000f7f6fc7b90b0200000f3266baf80cb8a0018a8eef66bafc0cb06fee0f2cc766baf80cb8afdb2184ef66bafc0cecd9e1"}}, @uexit={0x0, 0x18, 0x10000}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x5d, 0x0, 0x1, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xa81e, 0x2}}, @nested_load_code={0x12e, 0x51, {0x1, "670f32c48379163726362e3e440fc7b978000000c402c19be80f38f63b660fd7f40f01b41f040000000f79f546c8271f04660f6b9700800000"}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5, 0x7, 0x1}}, @in_dx={0x69, 0x20, {0x287b, 0x5}}], 0x272}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000003c0)) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.077580418s ago: executing program 1 (id=136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}]}) (async) r2 = syz_usb_connect(0x3c2e47af687d8b2, 0xb8, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0xb7, 0x95, 0xe3, 0x10, 0x16d8, 0x7005, 0xe21f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x1, 0x4, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x9a, 0xfc, 0x2, 0x27, 0x84, 0xf5, 0x7, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x0, 0x78, 0x0, 0x9}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x2c}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0xe}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x3, 0xf3, 0xf0, 0x26, 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xba1, 0x3}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x0, 0xb9, "27add9"}]}], [{{0x9, 0x5, 0x8, 0x10, 0xec1e91fe3bae99f4, 0x6, 0x5, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x41, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xda, 0xfffa}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x3, 0x0, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x86}, @generic={0x38, 0x30, "3634019aa0aae1407f23e0e2f3db986954a1cc4780cf5396a2be72c1c8fabee28067737f2c763a3c5c0dab6f4c48ae3527ac31308ed5"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0xef, 0x4, 0x5, 0x20, 0xd}, 0x89, &(0x7f0000000300)=ANY=[@ANYBLOB="050f8900030a1003020000510d000070100162afd05efb59d96f318ab03fd34f5a285dd4e18ab86838aa7b76dc3182d2bffd38764f01dce9959c46ae1fe02bea09ef3e91a23e3053598053da27466c4adcea793319136cf4b17eeede21621b8551b94f6f6815e1a9a179f25b86992f0ae40f9e828293ea85c5ab6979160bea0a100300090007f80100"], 0x3, [{0x81, &(0x7f0000000440)=ANY=[@ANYBLOB="81032930867dbddd24c2512159b21e26ef62806cfcc2f6083b108b57e0cf4386d15f2e820cc5822fd1efb5088ebabb49d5a34cffdab0429ef29da9e4bf7955a0086cf69a09b032e059b1360f643893f9649e1f1f3ea670562b3ade31dffea6b4738caf2a439c0edc5552c3772cf1c76399cd00"/129]}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x15, &(0x7f0000000140)=@string={0x15, 0x3, "ce83394bb40de025f1a100987d8499b532c1e5"}}]}) syz_usb_disconnect(r2) (async) syz_usb_ep_write(r1, 0x7, 0xe9, &(0x7f0000000800)="b6c87c766c13dc2dd96093a1fb183165612c58d7375df9a2dbb3c28322cb63b2ee70c79019eeccc73bf61aefc4771930d1f87726dca4eb1145fa7e057b60d7d13393e933e7e612fbb610a846c1c731459d2497152196dd5897590f5c84da99e567990961984bce8d082c0b9e4dfd28349cba2d2cb16155336fceaec73a82d7700d418194390e764738678678c7e912db4576ea7ac5ab870bbeecdaaa5303c8f3a31726232d84f2cdc20da3ce513c0aab581e7a1acbda2edb7857125b76b1ea3e7c68e261dfb99f1358382dddec66f1c1856fe3e3d8dd1c4e42d0d987426d84e3fd886935285dd7342d") r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x5d, 0x7e, 0x69, 0x8, 0xe8d, 0x7961, 0x28a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0x50, 0xf9, "", [{{0x9, 0x4, 0x81, 0xa5, 0x0, 0x66, 0xb9, 0x80, 0x3}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f"]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xaf) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) fallocate(0xffffffffffffffff, 0x3, 0x10003, 0x2d22) ioctl(r5, 0xc0104d08, &(0x7f0000002480)) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340400002000010000000000100000000a00000008000000ac1414aa18041680aef6"], 0x434}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xcc, &(0x7f00000005c0)="019a18370cfb5b1ba08c228ce6ca19b6a99a071ca34c62c891f8a260fa0000008097c561e1a2a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000b738a3be1ad0f03390be2721ea85730fec8e757826fb993dde04f5b2d12744a944c13e296f7cbeea09b2b04dfb7ce4db93dfda9ea489eefb24d15e4437e535430ec5ddf6965f5bd422ee3fc0955ff49a6f3cdc4ef7a0b8afc068c64604734c35399d50637293fa80688a19b5b141638c73d1598c004976bf11a8d99369fb7a15f3c510") (async, rerun: 32) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000780)={0x60, 0x7, &(0x7f0000599000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8, &(0x7f0000000700)=[{0x3, 0x1, 0x1}, {0x7, 0x0, 0x27a}, {0x2, 0x2, 0xd}, {0x8001, 0x8000000000000001, 0x9}, {0xfffffffffffff801, 0x3, 0x2}], 0x5, 0x9, 0x1, 0x2, 0x41, 0x41}) (rerun: 32) 3.065912668s ago: executing program 2 (id=137): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.stat\x00', 0x26e1, 0x0) close(r1) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0xa) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a50c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) ioctl$FS_IOC_FIEMAP(r8, 0x40049409, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r9 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000040)) 3.00035831s ago: executing program 1 (id=138): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x4) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf252b00000008000300", @ANYRES32=r1, @ANYBLOB="0a00060075c54d78808a0000918f5b705924af4602bd11cb84e852ad6f6a029326c8de987aab24106082a16b094cf8ded7be68eeaac406fbe09060bbac68436cd97861120b00cd2e62b0fc09d7aae12aa50ade76c78a22f5104dd8205bf1e24bbd8d7b1cd109f409437c394e4efe437d7f4a79be2427b65f72410c8d38183738d827f8cb393bff74d2c7df375372daddf01eb5ff7510c9b37676e41e5a5f10a93a3e533942cb9d07c8ff36ea6c137494ec5d4d66d500631171677ad7632d57"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x14040010) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000600)={0x190, 0x9, &(0x7f0000000200)="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"}) 2.99882829s ago: executing program 1 (id=139): mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) (async) memfd_create(&(0x7f0000000140)='/dev/kvm\x00', 0x4) (async) ptrace(0x4208, r2) (async) ptrace(0x11, r2) (async) pipe(0x0) pipe(0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.97270411s ago: executing program 3 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCXONC(r1, 0x40045436, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf25380000000c005800480000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc090}, 0x4850) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x124, {0x0, 0x0, 0x4, 0x4, 0x8, 0x55c96986}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0xfffffffffffffe6c) socket$unix(0x1, 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000100)={0xc498, 0x3, 0x2}, 0x18, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffbf}]}) ioctl$KVM_GET_TSC_KHZ_cpu(r6, 0xaea3) setregid(0xffffffffffffffff, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.940181141s ago: executing program 3 (id=141): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf4}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xdd}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9c68}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x9, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xf, [@ms_header={0x7, 0x24, 0x1, 0x401, 0x7}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0xff, 0x2, 0x6, {0x4}}}]}}}}}]}}, 0x0) 2.376421994s ago: executing program 1 (id=142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) mount$incfs(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x1200010, 0x0) remap_file_pages(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 2.161951429s ago: executing program 2 (id=143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x0, 0x3, 0x240a}}, {0x0, 0x0}, {0x0, &(0x7f0000000040)=@string={0x0, 0x3, "3e9eaad1"}}, {0x0, &(0x7f00000001c0)=@string={0x0, 0x3, "086aa2d40dc22befdfe9d2cc9841433d3bb0e1605044fe5d07f579244de89abc4c7a43ea27de5adcc9ec7f5fb1906911ac7b14fd72874fc4b81e9891ad077a9c68119a975ddd7cf2d21d6c524caeb4768875c17e4d3388b7d1a36d66e3f9b3b0c42936f66f11ec48fcf2d3db1e61fc6df92592bb8f121aea249f7f8faf5f061e4b58a84b370f6888156c37910b8da6048aa3d1a3b4f490d3cc331c1b7acabba3faab725e25a8b43fbb0093310a07bd59d88888d765af3d5b8f52b51aff100b"}}, {0x0, &(0x7f0000000300)=@string={0x0, 0x3, "645c87a36c721370cd322af3a1471b974aef85eaf8116eeaf4b128e79424c8132a2f6171bd9ec7979b890b59e1ba7c423d534c7b836777c9e0168f13468c235ff8161712374a78d661ead94395b587957d744b49b4d3277f1725292325a2f126c913138990106817df9895ab7d0e"}}, {0x0, &(0x7f00000004c0)=@string={0x0, 0x3, "ef74187650d0aa18ff433cf8cb510022e7c6f762882423eac0d725f4a3660e9a79c14c8001bcb355a712b3c7dd6756b9c0884c987679ba78f62d42bb7aa18791e862b39157aec9a159d780f1725bb6e5dc9351fabe18d3a46548b604c3c3ae39ab30d7e03f80bf857d4a0ee9cf36dbc8e93f4a869db1fd636cb5c66aa3bd35ab7821a7be5f7ae8ffae0ed1d94eac50940127ccc8cd86d0"}}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x5d, 0x7e, 0x69, 0x8, 0xe8d, 0x7961, 0x28a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0x50, 0xf9, "", [{{0x9, 0x4, 0x81, 0xa5, 0x0, 0x66, 0xb9, 0x80, 0x3}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f"]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x1) getdents64(r2, 0x0, 0x4f) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.731696139s ago: executing program 3 (id=144): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x111002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143542, 0x160) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0xd2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000003240), 0x0) 1.67230785s ago: executing program 3 (id=145): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x400) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x2}}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x20040084) openat$tun(0xffffffffffffff9c, 0x0, 0x460203, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40010102, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000200)=0x1, 0x4) sendmsg(r6, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0x6}, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=ANY=[], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x80) 0s ago: executing program 3 (id=146): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x4}) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 21.722135][ T36] audit: type=1400 audit(1785633368.219:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.723266][ T286] cgroup: Unknown subsys name 'net' [ 21.744804][ T36] audit: type=1400 audit(1785633368.219:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.772083][ T36] audit: type=1400 audit(1785633368.249:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.772267][ T286] cgroup: Unknown subsys name 'devices' [ 21.901974][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.907596][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.020254][ T36] audit: type=1400 audit(1785633368.509:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.043427][ T36] audit: type=1400 audit(1785633368.519:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.068230][ T36] audit: type=1400 audit(1785633368.519:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.096797][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.105570][ T36] audit: type=1400 audit(1785633368.599:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.131062][ T36] audit: type=1400 audit(1785633368.599:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.166367][ T36] audit: type=1400 audit(1785633368.659:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.191942][ T36] audit: type=1400 audit(1785633368.659:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.192197][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.333057][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.340123][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.347249][ T293] bridge_slave_0: entered allmulticast mode [ 23.353627][ T293] bridge_slave_0: entered promiscuous mode [ 23.361209][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.368245][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.375396][ T293] bridge_slave_1: entered allmulticast mode [ 23.381619][ T293] bridge_slave_1: entered promiscuous mode [ 23.454932][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.462039][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.469249][ T296] bridge_slave_0: entered allmulticast mode [ 23.475501][ T296] bridge_slave_0: entered promiscuous mode [ 23.484708][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491778][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.498843][ T296] bridge_slave_1: entered allmulticast mode [ 23.505217][ T296] bridge_slave_1: entered promiscuous mode [ 23.561350][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.568407][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.575601][ T294] bridge_slave_0: entered allmulticast mode [ 23.581761][ T294] bridge_slave_0: entered promiscuous mode [ 23.591070][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.598143][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.605517][ T298] bridge_slave_0: entered allmulticast mode [ 23.611715][ T298] bridge_slave_0: entered promiscuous mode [ 23.619653][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.626763][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.633845][ T298] bridge_slave_1: entered allmulticast mode [ 23.639983][ T298] bridge_slave_1: entered promiscuous mode [ 23.646066][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.653125][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.660205][ T294] bridge_slave_1: entered allmulticast mode [ 23.666370][ T294] bridge_slave_1: entered promiscuous mode [ 23.751279][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.758334][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.765646][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.772715][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.823738][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.830819][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.838082][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.845123][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.869927][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.877003][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.884289][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.891317][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.905951][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.913489][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.920910][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.928077][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.935846][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.943086][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.957678][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.964757][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.984327][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.991414][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.010061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.017161][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.029036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.036116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.062757][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.069800][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.077821][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.084894][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.092474][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.099496][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.107397][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.114452][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.160316][ T298] veth0_vlan: entered promiscuous mode [ 24.172415][ T294] veth0_vlan: entered promiscuous mode [ 24.191921][ T293] veth0_vlan: entered promiscuous mode [ 24.201801][ T296] veth0_vlan: entered promiscuous mode [ 24.210030][ T298] veth1_macvtap: entered promiscuous mode [ 24.220069][ T294] veth1_macvtap: entered promiscuous mode [ 24.237643][ T296] veth1_macvtap: entered promiscuous mode [ 24.254030][ T293] veth1_macvtap: entered promiscuous mode [ 24.291802][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.325900][ T314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 24.412031][ T332] virtio-fs: tag not found [ 24.434554][ T337] ======================================================= [ 24.434554][ T337] WARNING: The mand mount option has been deprecated and [ 24.434554][ T337] and is ignored by this kernel. Remove the mand [ 24.434554][ T337] option from the mount to silence this warning. [ 24.434554][ T337] ======================================================= [ 24.481223][ T337] overlayfs: overlapping lowerdir path [ 24.508357][ T351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.597194][ T375] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11'. [ 24.666226][ T384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 24.782566][ T402] fuse: Unknown parameter '' [ 24.784142][ T403] fuse: Unknown parameter '' [ 24.900609][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.960295][ T371] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.008362][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.012541][ T428] mtrr: base(0x10000000) is not aligned on a size(0x64010000000) boundary [ 25.025254][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 25.028939][ T428] random: crng reseeded on system resumption [ 25.051569][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.059979][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.070430][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.081450][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 25.085514][ T434] tipc: Started in network mode [ 25.096265][ T434] tipc: Node identity 062ef0cea6e9, cluster identity 4711 [ 25.100556][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.103746][ T434] tipc: Enabled bearer , priority 0 [ 25.117310][ T432] fido_id[432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 25.120226][ T371] usb 2-1: Using ep0 maxpacket: 32 [ 25.133353][ T45] usb 3-1: Product: syz [ 25.141567][ T45] usb 3-1: Manufacturer: syz [ 25.146204][ T45] usb 3-1: SerialNumber: syz [ 25.147819][ T371] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.163407][ T45] usb 3-1: selecting invalid altsetting 1 [ 25.169435][ T45] usb 3-1: unit 6 not found! [ 25.179404][ T434] syzkaller0: entered promiscuous mode [ 25.185065][ T371] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 25.194939][ T371] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 25.200242][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.205606][ T371] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 25.212880][ T434] syzkaller0: entered allmulticast mode [ 25.226580][ T371] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.231599][ T434] tipc: Resetting bearer [ 25.240021][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.253997][ T371] usb 2-1: SerialNumber: syz [ 25.258930][ T433] tipc: Resetting bearer [ 25.261895][ T389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.272038][ T389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.281153][ T371] hub 2-1:1.0: bad descriptor, ignoring hub [ 25.286327][ T433] tipc: Disabling bearer [ 25.288914][ T371] hub 2-1:1.0: probe with driver hub failed with error -5 [ 25.300247][ T371] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 25.346659][ T437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 25.382186][ T310] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 25.391397][ T310] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 25.399511][ T310] usb 1-1: Product: syz [ 25.407659][ T310] ftdi_sio 1-1:5.0: FTDI USB Serial Device converter detected [ 25.420060][ T310] usb 1-1: Detected FT4233HP [ 25.458233][ T448] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure [ 25.481517][ T371] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 25.502519][ T371] usb 2-1: USB disconnect, device number 2 [ 25.720245][ T431] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.768704][ T45] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 25.779518][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.790005][ T45] usb 3-1: USB disconnect, device number 2 [ 25.801781][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.820483][ T310] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 25.872736][ T431] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 25.881891][ T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.890084][ T431] usb 4-1: Product: syz [ 25.895101][ T431] usb 4-1: Manufacturer: 멥쵍ⵝ⩨ஊ縋㎛辏愛㐜뺙譐̍ᦄ襵㞺凾蛙쐢뷹큩⌹荃ፎᆲ싂뗲깈퓲㲕虙鵅쥲巓軗셙搆빩暮︦㙅缛祘䒷湖픶ඒ㠬췡襰澍⍨Ӫт诬ۮ棗☧嫝维⅀∠᜔᳑놗렙ﳦ㣜䟱ǵ䐖䊒뒺ﾵ즥띍큊ಕቋ亘㎷읕Ꞇ㔥Іㅾ萋 [ 25.924790][ T431] usb 4-1: SerialNumber: syz [ 26.023141][ T45] usb 1-1: USB disconnect, device number 2 [ 26.029626][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 26.039234][ T45] ftdi_sio 1-1:5.0: device disconnected [ 26.131421][ T448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.139941][ T448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.151815][ T431] usb 4-1: MIDIStreaming interface descriptor not found [ 26.160951][ T431] usb 4-1: USB disconnect, device number 2 [ 26.260222][ T371] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.420232][ T371] usb 2-1: Using ep0 maxpacket: 8 [ 26.426355][ T371] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.436637][ T371] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.446045][ T371] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.457293][ T371] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 26.466379][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.474412][ T371] usb 2-1: Product: syz [ 26.478552][ T371] usb 2-1: Manufacturer: syz [ 26.483165][ T371] usb 2-1: SerialNumber: syz [ 26.648756][ T474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 26.689727][ T454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=454 comm=syz.1.32 [ 26.733473][ T485] No source specified [ 26.738042][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 26.738056][ T36] audit: type=1400 audit(1785633373.229:187): avc: denied { nlmsg_write } for pid=484 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.766368][ T36] audit: type=1400 audit(1785633373.239:188): avc: denied { name_bind } for pid=484 comm="syz.0.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 26.894791][ T36] audit: type=1400 audit(1785633373.389:189): avc: denied { write } for pid=486 comm="syz.2.42" path="socket:[4422]" dev="sockfs" ino=4422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.920202][ T64] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.980203][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.071136][ T64] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 27.082092][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 27.093303][ T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 27.106372][ T64] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 27.115461][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.125813][ T371] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 27.134581][ T64] usb 4-1: config 0 descriptor?? [ 27.139785][ T478] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.141143][ T371] usb 2-1: clock source 0 is not valid, cannot use [ 27.148330][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.156164][ T371] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 27.164807][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 27.178678][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.186706][ T45] usb 1-1: Product: syz [ 27.190890][ T45] usb 1-1: Manufacturer: syz [ 27.195499][ T45] usb 1-1: SerialNumber: syz [ 27.357596][ T36] audit: type=1400 audit(1785633373.849:190): avc: denied { mount } for pid=477 comm="syz.3.40" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.404509][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.414977][ T45] usb 1-1: USB disconnect, device number 3 [ 27.426025][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 27.580581][ T64] hid (null): global environment stack underflow [ 27.587759][ T64] uclogic 0003:28BD:0075.0002: interface is invalid, ignoring [ 27.685403][ T36] audit: type=1400 audit(1785633374.179:191): avc: denied { append } for pid=489 comm="syz.2.43" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.780621][ T495] netlink: 'syz.2.45': attribute type 27 has an invalid length. [ 27.783736][ T45] usb 4-1: USB disconnect, device number 3 [ 27.809092][ T36] audit: type=1400 audit(1785633374.299:192): avc: denied { cmd } for pid=494 comm="iou-wrk-495" path="socket:[4511]" dev="sockfs" ino=4511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 27.896798][ T36] audit: type=1400 audit(1785633374.389:193): avc: denied { read } for pid=510 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.943066][ T310] usb 2-1: USB disconnect, device number 3 [ 27.963741][ T513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 28.260210][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.300380][ T36] audit: type=1400 audit(1785633374.799:194): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.300419][ T431] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 28.430209][ T431] usb 1-1: device descriptor read/64, error -71 [ 28.436504][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 28.443092][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.452061][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 28.464495][ T310] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 28.473570][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.481642][ T310] usb 2-1: Product: syz [ 28.485801][ T310] usb 2-1: Manufacturer: syz [ 28.490521][ T310] usb 2-1: SerialNumber: syz [ 28.660199][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.690238][ T431] usb 1-1: device descriptor read/64, error -71 [ 28.699863][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.706806][ T310] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.716102][ T310] usb 2-1: USB disconnect, device number 4 [ 28.727489][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.810258][ T45] usb 4-1: device descriptor read/64, error -71 [ 28.920616][ T534] Zero length message leads to an empty skb [ 28.940207][ T431] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 29.060269][ T45] usb 4-1: device descriptor read/64, error -71 [ 29.070207][ T431] usb 1-1: device descriptor read/64, error -71 [ 29.160255][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.214973][ T538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.223626][ T538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.300249][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.307778][ T310] usb 3-1: device descriptor read/64, error -71 [ 29.314076][ T431] usb 1-1: device descriptor read/64, error -71 [ 29.430393][ T431] usb usb1-port1: attempt power cycle [ 29.450250][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.457808][ T45] usb 4-1: device descriptor read/64, error -71 [ 29.550233][ T310] usb 3-1: device descriptor read/64, error -71 [ 29.700232][ T45] usb 4-1: device descriptor read/64, error -71 [ 29.780211][ T431] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 29.800243][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.808655][ T431] usb 1-1: device descriptor read/8, error -71 [ 29.815364][ T45] usb usb4-port1: attempt power cycle [ 29.950225][ T310] usb 3-1: device descriptor read/64, error -71 [ 29.957486][ T431] usb 1-1: device descriptor read/8, error -71 [ 30.056895][ T312] tipc: Subscription rejected, illegal request [ 30.058718][ T36] audit: type=1400 audit(1785633376.549:195): avc: denied { read } for pid=543 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.102756][ T36] audit: type=1400 audit(1785633376.599:196): avc: denied { setopt } for pid=545 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.170259][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.200212][ T310] usb 3-1: device descriptor read/64, error -71 [ 30.207580][ T45] usb 4-1: device descriptor read/8, error -71 [ 30.240693][ T431] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 30.261280][ T431] usb 1-1: device descriptor read/8, error -71 [ 30.310342][ T310] usb usb3-port1: attempt power cycle [ 30.341275][ T45] usb 4-1: device descriptor read/8, error -71 [ 30.391281][ T431] usb 1-1: device descriptor read/8, error -71 [ 30.500312][ T431] usb usb1-port1: unable to enumerate USB device [ 30.580214][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.601292][ T45] usb 4-1: device descriptor read/8, error -71 [ 30.650201][ T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.671225][ T310] usb 3-1: device descriptor read/8, error -71 [ 30.731269][ T45] usb 4-1: device descriptor read/8, error -71 [ 30.801338][ T310] usb 3-1: device descriptor read/8, error -71 [ 30.840308][ T45] usb usb4-port1: unable to enumerate USB device [ 30.940231][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 31.040241][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.061314][ T310] usb 3-1: device descriptor read/8, error -71 [ 31.074073][ T551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.59'. [ 31.091266][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.093459][ T553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 31.102358][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.122937][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 31.132981][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.141123][ T31] usb 2-1: SerialNumber: syz [ 31.148940][ T31] usb 2-1: bad CDC descriptors [ 31.154196][ T31] usb-storage 2-1:1.0: USB Mass Storage device detected [ 31.162684][ T31] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 31.170976][ T31] scsi host1: usb-storage 2-1:1.0 [ 31.201211][ T310] usb 3-1: device descriptor read/8, error -71 [ 31.310295][ T310] usb usb3-port1: unable to enumerate USB device [ 31.351450][ T549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.360013][ T549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.389750][ T566] process 'syz.3.63' launched './file0' with NULL argv: empty string added [ 31.770231][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 31.889234][ T569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=569 comm=syz.2.64 [ 31.912333][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 31.912349][ T36] audit: type=1400 audit(1785633378.409:200): avc: denied { bind } for pid=570 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.937361][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 31.943889][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.952234][ T310] usb 4-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 31.962425][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.971326][ T310] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.985532][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.994666][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.002709][ T310] usb 4-1: Product: syz [ 32.006865][ T310] usb 4-1: Manufacturer: syz [ 32.011471][ T310] usb 4-1: SerialNumber: syz [ 32.219054][ T310] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 32.225913][ T310] cdc_ncm 4-1:1.0: bind() failure [ 32.232220][ T310] usb 4-1: USB disconnect, device number 8 [ 32.270202][ T64] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.412533][ T310] usb 2-1: USB disconnect, device number 6 [ 32.420194][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 32.426146][ T36] audit: type=1400 audit(1785633378.919:201): avc: denied { append } for pid=570 comm="syz.2.65" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.451139][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.459874][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.512760][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.525184][ T36] audit: type=1400 audit(1785633379.009:202): avc: denied { mount } for pid=575 comm="syz.2.66" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.547264][ T36] audit: type=1400 audit(1785633379.009:203): avc: denied { search } for pid=575 comm="syz.2.66" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 32.568809][ T36] audit: type=1400 audit(1785633379.009:204): avc: denied { write } for pid=575 comm="syz.2.66" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.591316][ T36] audit: type=1400 audit(1785633379.009:205): avc: denied { open } for pid=575 comm="syz.2.66" path="/15/tracing/events/msr/read_msr/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 32.616638][ T64] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 32.624593][ T64] usb 3-1: can't read configurations, error -71 [ 32.642228][ T36] audit: type=1400 audit(1785633379.139:206): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.673179][ T36] audit: type=1400 audit(1785633379.169:207): avc: denied { ioctl } for pid=582 comm="syz.2.68" path="socket:[4632]" dev="sockfs" ino=4632 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.736427][ T590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 32.780792][ T598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=598 comm=syz.2.73 [ 32.926398][ T36] audit: type=1400 audit(1785633379.419:208): avc: granted { setsecparam } for pid=611 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 33.090227][ T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.240193][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 33.246434][ T310] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 33.254565][ T310] usb 4-1: config 2 has no interface number 0 [ 33.260201][ T64] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 33.260660][ T310] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 33.278077][ T310] usb 4-1: config 2 interface 88 has no altsetting 0 [ 33.286146][ T310] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 33.295229][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 33.303262][ T310] usb 4-1: Product: syz [ 33.307488][ T310] usb 4-1: Manufacturer: syz [ 33.312079][ T310] usb 4-1: SerialNumber: syz [ 33.318461][ T610] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.325643][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.411357][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 33.422297][ T64] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 33.434746][ T64] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 33.443817][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.451829][ T64] usb 3-1: Product: syz [ 33.455990][ T64] usb 3-1: Manufacturer: syz [ 33.460662][ T64] usb 3-1: SerialNumber: syz [ 33.480180][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 33.486016][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.494517][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.505994][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 33.515084][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.523173][ T9] usb 2-1: Product: syz [ 33.527339][ T9] usb 2-1: Manufacturer: syz [ 33.531338][ T610] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.531933][ T9] usb 2-1: SerialNumber: syz [ 33.547719][ T310] asix 4-1:2.88: probe with driver asix failed with error -71 [ 33.560881][ T310] usb 4-1: USB disconnect, device number 9 [ 33.600557][ T625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 33.622729][ T36] audit: type=1400 audit(1785633380.119:209): avc: denied { create } for pid=626 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 33.670462][ T64] usb 3-1: Can't get UAC3 power state for id 10 [ 33.677604][ T64] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 33.686144][ T64] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.697580][ T64] usb 3-1: USB disconnect, device number 8 [ 33.708800][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.757908][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 33.767082][ T9] usb 2-1: USB disconnect, device number 7 [ 34.010201][ T310] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 34.161539][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.169613][ T310] usb 4-1: not running at top speed; connect to a high speed hub [ 34.179510][ T310] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 34.192009][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.203053][ T310] usb 4-1: Product: syz [ 34.207230][ T310] usb 4-1: Manufacturer: syz [ 34.211871][ T310] usb 4-1: SerialNumber: syz [ 34.274167][ T638] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 34.281846][ T638] SELinux: failed to load policy [ 34.426690][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.430199][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 34.435596][ T310] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.454885][ T310] usb 4-1: USB disconnect, device number 10 [ 34.460896][ T31] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 34.590193][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 34.596384][ T9] usb 3-1: config 2 has an invalid interface number: 32 but max is 0 [ 34.604653][ T9] usb 3-1: config 2 has no interface number 0 [ 34.611035][ T9] usb 3-1: config 2 interface 32 has no altsetting 0 [ 34.617850][ T64] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.620960][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 34.627242][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=6b.27 [ 34.633952][ T31] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 34.642360][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.650648][ T31] usb 1-1: config 3 has no interface number 0 [ 34.658513][ T9] usb 3-1: Product: syz [ 34.664408][ T31] usb 1-1: config 3 interface 106 has no altsetting 0 [ 34.668753][ T9] usb 3-1: Manufacturer: syz [ 34.677533][ T31] usb 1-1: string descriptor 0 read error: -22 [ 34.680205][ T9] usb 3-1: SerialNumber: syz [ 34.686170][ T31] usb 1-1: New USB device found, idVendor=152d, idProduct=0583, bcdDevice= 4.81 [ 34.700726][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.712355][ T31] usb-storage 1-1:3.106: USB Mass Storage device detected [ 34.720659][ T31] usb-storage 1-1:3.106: Quirks match for vid 152d pid 0583: 4000000 [ 34.770282][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 34.776520][ T64] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 34.786927][ T64] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 34.796638][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 34.807568][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 34.821702][ T64] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 34.830808][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.838803][ T64] usb 2-1: Product: syz [ 34.843013][ T64] usb 2-1: Manufacturer: syz [ 34.847612][ T64] usb 2-1: SerialNumber: syz [ 34.854056][ T642] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 34.896705][ T632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.905260][ T632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.913473][ T10] usb 1-1: USB disconnect, device number 8 [ 34.921002][ T9] ums-cypress 3-1:2.32: USB Mass Storage device detected [ 34.973363][ T9] usb 3-1: USB disconnect, device number 9 [ 35.033829][ T658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 35.060003][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 35.092919][ T64] usb 2-1: MIDIStreaming interface descriptor not found [ 35.103695][ T64] usb 2-1: USB disconnect, device number 8 [ 35.115198][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.462993][ T674] netlink: 148 bytes leftover after parsing attributes in process `syz.0.96'. [ 35.633756][ T690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 35.690215][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 35.841518][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.850041][ T31] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 35.859647][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.872024][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.896366][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.905564][ T431] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.913080][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.922593][ T31] usb 3-1: Product: syz [ 35.926768][ T31] usb 3-1: Manufacturer: syz [ 35.940213][ T31] usb 3-1: SerialNumber: syz [ 36.071222][ T431] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 36.090180][ T431] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 36.100584][ T431] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice=d7.40 [ 36.109762][ T431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.130231][ T431] usb 2-1: Product: syz [ 36.134426][ T431] usb 2-1: Manufacturer: syz [ 36.139031][ T431] usb 2-1: SerialNumber: syz [ 36.148030][ T672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.157082][ T672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.167382][ T31] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 36.174850][ T31] cdc_ncm 3-1:1.0: bind() failure [ 36.183655][ T31] usb 3-1: USB disconnect, device number 10 [ 36.240226][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 36.354045][ T431] usb 2-1: USB disconnect, device number 9 [ 36.390204][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 36.396363][ T9] usb 4-1: config 9 has an invalid interface number: 226 but max is 0 [ 36.420180][ T9] usb 4-1: config 9 has no interface number 0 [ 36.426280][ T9] usb 4-1: config 9 interface 226 has no altsetting 0 [ 36.434532][ T9] usb 4-1: New USB device found, idVendor=5fa2, idProduct=bb1a, bcdDevice=82.9d [ 36.443641][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.451784][ T9] usb 4-1: Product: syz [ 36.455950][ T9] usb 4-1: Manufacturer: syz [ 36.460765][ T9] usb 4-1: SerialNumber: syz [ 36.677554][ T697] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.726502][ T9] cdc_eem 4-1:9.226: probe with driver cdc_eem failed with error -22 [ 36.887617][ T710] netlink: 108 bytes leftover after parsing attributes in process `syz.1.109'. [ 36.926426][ T431] usb 4-1: USB disconnect, device number 11 [ 36.990216][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 37.150194][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 37.172905][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 37.190187][ T9] usb 3-1: config 0 has no interface number 0 [ 37.197766][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 37.206950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.215176][ T9] usb 3-1: Product: syz [ 37.219391][ T9] usb 3-1: Manufacturer: syz [ 37.224050][ T9] usb 3-1: SerialNumber: syz [ 37.230206][ T64] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.239022][ T9] usb 3-1: config 0 descriptor?? [ 37.400188][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 37.406407][ T64] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 37.414621][ T64] usb 2-1: config 0 has no interface number 0 [ 37.422117][ T64] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.438724][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.449870][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 37.449885][ T36] audit: type=1400 audit(1785633383.939:229): avc: denied { name_bind } for pid=713 comm="syz.3.111" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.460189][ T64] usb 2-1: Product: syz [ 37.491563][ T36] audit: type=1400 audit(1785633383.979:230): avc: denied { getopt } for pid=713 comm="syz.3.111" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.500461][ T9] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 37.518045][ T64] usb 2-1: Manufacturer: syz [ 37.530182][ T64] usb 2-1: SerialNumber: syz [ 37.531301][ T718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 37.543866][ T9] usb 3-1: No valid video chain found. [ 37.549596][ T64] usb 2-1: config 0 descriptor?? [ 37.567509][ T64] smsc95xx v2.0.0 [ 37.572522][ T9] usb 3-1: USB disconnect, device number 11 [ 37.648786][ T36] audit: type=1400 audit(1785633384.139:231): avc: denied { read } for pid=726 comm="syz.3.116" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.673845][ T727] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 37.683959][ T36] audit: type=1400 audit(1785633384.139:232): avc: denied { open } for pid=726 comm="syz.3.116" path="/33/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.028793][ T729] SELinux: policydb string ,/.SE does not match my string SE Linux [ 38.037329][ T729] SELinux: failed to load policy [ 38.042616][ T730] SELinux: policydb string ,/.SE does not match my string SE Linux [ 38.051235][ T730] SELinux: failed to load policy [ 38.112542][ T36] audit: type=1400 audit(1785633384.609:233): avc: denied { accept } for pid=731 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.145531][ T735] mtrr: base(0x37067c77000) is not aligned on a size(0xba9e796f000) boundary [ 38.192091][ T36] audit: type=1400 audit(1785633384.689:234): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.238904][ T744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 38.247894][ T36] audit: type=1400 audit(1785633384.739:235): avc: denied { map } for pid=741 comm="syz.3.121" path="socket:[4934]" dev="sockfs" ino=4934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.341451][ T36] audit: type=1400 audit(1785633384.839:236): avc: denied { read } for pid=746 comm="syz.2.123" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.373312][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 38.384102][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.406616][ T36] audit: type=1400 audit(1785633384.899:237): avc: denied { mounton } for pid=746 comm="syz.2.123" path="/34/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 38.521104][ T36] audit: type=1400 audit(1785633385.019:238): avc: denied { ioctl } for pid=746 comm="syz.2.123" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.546429][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 38.573782][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.589189][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.606978][ T64] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 38.629360][ T64] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 38.652485][ T64] usb 2-1: USB disconnect, device number 10 [ 38.701274][ T9] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.722707][ T763] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 38.732487][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 38.749996][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.771679][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.779698][ T9] usb 4-1: Product: syz [ 38.790286][ T9] usb 4-1: Manufacturer: syz [ 38.794901][ T9] usb 4-1: SerialNumber: syz [ 39.012129][ T9] usb 4-1: bad CDC descriptors [ 39.030331][ T9] usb 4-1: USB disconnect, device number 12 [ 39.140871][ T773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 39.533898][ T808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 39.800203][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 39.970188][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 39.990549][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 40.011210][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40 [ 40.020302][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.028302][ T9] usb 4-1: Product: syz [ 40.032513][ T9] usb 4-1: Manufacturer: syz [ 40.037112][ T9] usb 4-1: SerialNumber: syz [ 40.092794][ T812] mmap: syz.1.142 (812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.255698][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 40.268826][ T9] usb 4-1: USB disconnect, device number 13 [ 40.272679][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.350231][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.490238][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.570224][ T64] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 40.721296][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.732284][ T64] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.740201][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.741512][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.763663][ T64] usb 3-1: config 0 descriptor?? [ 40.972970][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 40.978937][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 40.990225][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.001367][ T64] usb 3-1: USB disconnect, device number 12 [ 41.020823][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 41.120293][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.170223][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 41.179892][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.189152][ T9] usb 4-1: config 0 has no interface number 0 [ 41.201191][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.210303][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.218451][ T9] usb 4-1: Product: syz [ 41.222743][ T9] usb 4-1: Manufacturer: syz [ 41.227343][ T9] usb 4-1: SerialNumber: syz [ 41.240414][ T9] usb 4-1: config 0 descriptor?? [ 41.246081][ T9] smsc95xx v2.0.0 [ 41.370236][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.470236][ T64] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 41.480415][ T31] usb usb2-port1: attempt power cycle [ 41.642435][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.653390][ T64] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.662501][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 41.673716][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.681935][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 41.691985][ T64] usb 3-1: config 0 descriptor?? [ 41.820215][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 41.843052][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.895090][ T818] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.960950][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 41.973086][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 41.983623][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.984694][ T9] usb 4-1: USB disconnect, device number 14 [ 42.107824][ T814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.122355][ T814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.220223][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 42.241269][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.371275][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.481142][ T31] usb usb2-port1: unable to enumerate USB device [ 42.550377][ T64] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 42.570252][ T64] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4 [ 42.583665][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 42.583722][ T36] audit: type=1400 audit(1785633389.079:266): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=533 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.617691][ C0] ------------[ cut here ]------------ [ 42.623197][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 42.631787][ C0] index 19229 is out of range for type 'const int[34]' [ 42.638642][ C0] CPU: 0 UID: 0 PID: 328 Comm: udevd Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 42.638677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.638701][ C0] Call Trace: [ 42.638709][ C0] [ 42.638718][ C0] __dump_stack+0x21/0x30 [ 42.638768][ C0] dump_stack_lvl+0x140/0x1c0 [ 42.638801][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.638832][ C0] ? do_readlinkat+0xe7/0x520 [ 42.638863][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.638895][ C0] dump_stack+0x19/0x20 [ 42.638924][ C0] ubsan_epilogue+0xe/0x40 [ 42.638944][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 42.638973][ C0] aiptek_irq+0x208d/0x2a00 [ 42.639003][ C0] ? _raw_spin_unlock+0x45/0x60 [ 42.639027][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 42.639051][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 42.639087][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 42.639119][ C0] dummy_timer+0xa3f/0x4900 [ 42.639148][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 42.639169][ C0] ? timerqueue_del+0xd7/0x130 [ 42.639190][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 42.639221][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 42.639240][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 42.639274][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 42.639305][ C0] ? read_tsc+0xd/0x20 [ 42.639334][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 42.639362][ C0] hrtimer_run_softirq+0x159/0x560 [ 42.639382][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 42.639414][ C0] handle_softirqs+0x1aa/0x620 [ 42.639438][ C0] __irq_exit_rcu+0x47/0xb0 [ 42.639459][ C0] irq_exit_rcu+0xd/0x30 [ 42.639480][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 42.639512][ C0] [ 42.639519][ C0] [ 42.639526][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 42.639555][ C0] RIP: 0010:__kasan_check_write+0x0/0x20 [ 42.639581][ C0] Code: 89 e5 89 f6 48 8b 4d 08 31 d2 e8 bb e4 ff ff 5d e9 45 d7 c5 03 cc 0f 1f 40 00 b8 80 46 20 ac 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 88 e4 [ 42.639600][ C0] RSP: 0018:ffffc9000b827978 EFLAGS: 00000282 [ 42.639629][ C0] RAX: 0000000000000000 RBX: 1ffff110202ca50d RCX: ffffffff81663545 [ 42.639647][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888101652868 [ 42.639662][ C0] RBP: ffffc9000b827a30 R08: ffff88810165286f R09: 1ffff110202ca50d [ 42.639680][ C0] R10: dffffc0000000000 R11: ffffed10202ca50e R12: 1ffff92001704f34 [ 42.639697][ C0] R13: dffffc0000000000 R14: ffff888101652868 R15: ffff88810a71b901 [ 42.639717][ C0] ? rwsem_read_trylock+0x245/0x5a0 [ 42.639761][ C0] ? rwsem_read_trylock+0x275/0x5a0 [ 42.639794][ C0] ? downgrade_write+0x470/0x470 [ 42.639826][ C0] ? __kasan_check_write+0x18/0x20 [ 42.639848][ C0] ? _raw_spin_lock+0x92/0x120 [ 42.639872][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.639899][ C0] down_read+0x7f/0xe0 [ 42.639931][ C0] ? __cfi_down_read+0x10/0x10 [ 42.639963][ C0] ? __d_lookup+0x4e8/0x550 [ 42.639987][ C0] kernfs_dop_revalidate+0xcf/0x4e0 [ 42.640018][ C0] lookup_fast+0x211/0x540 [ 42.640040][ C0] walk_component+0x5d/0x450 [ 42.640062][ C0] path_lookupat+0x155/0x440 [ 42.640088][ C0] filename_lookup+0x22d/0x5a0 [ 42.640113][ C0] ? __cfi_filename_lookup+0x10/0x10 [ 42.640140][ C0] ? strncpy_from_user+0x14f/0x280 [ 42.640163][ C0] ? __kasan_check_write+0x18/0x20 [ 42.640184][ C0] ? getname_flags+0x203/0x6b0 [ 42.640209][ C0] do_readlinkat+0xe7/0x520 [ 42.640237][ C0] ? cp_old_stat+0x4d0/0x4d0 [ 42.640263][ C0] ? __kasan_check_read+0x15/0x20 [ 42.640282][ C0] __x64_sys_readlink+0x83/0xa0 [ 42.640311][ C0] x64_sys_call+0x155b/0x2ee0 [ 42.640330][ C0] do_syscall_64+0x57/0xf0 [ 42.640354][ C0] ? clear_bhb_loop+0x50/0xa0 [ 42.640383][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.640411][ C0] RIP: 0033:0x7f3e959153a7 [ 42.640429][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 42.640448][ C0] RSP: 002b:00007ffd71460e78 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 42.640467][ C0] RAX: ffffffffffffffda RBX: 00007ffd714616c0 RCX: 00007f3e959153a7 [ 42.640485][ C0] RDX: 0000000000000400 RSI: 00007ffd71461280 RDI: 00007ffd71460e80 [ 42.640500][ C0] RBP: 0000000000000200 R08: 000056055ed65c29 R09: 0000000000000000 [ 42.640515][ C0] R10: 000056056f2de010 R11: 0000000000000202 R12: 00007ffd71460e80 [ 42.640531][ C0] R13: 00007ffd71461280 R14: 000056055ed68ca4 R15: 000056055ed68bcc [ 42.640550][ C0] [ 42.640559][ C0] ---[ end trace ]--- [ 42.820260][ T36] audit: type=1400 audit(1785633389.079:267): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=533 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.823461][ C0] ------------[ cut here ]------------ [ 42.853433][ T36] audit: type=1400 audit(1785633389.079:268): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=533 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.857033][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 43.155932][ C0] index 19230 is out of range for type 'const int[34]' [ 43.162763][ C0] CPU: 0 UID: 0 PID: 328 Comm: udevd Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 43.162782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.162790][ C0] Call Trace: [ 43.162796][ C0] [ 43.162801][ C0] __dump_stack+0x21/0x30 [ 43.162822][ C0] dump_stack_lvl+0x140/0x1c0 [ 43.162838][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.162863][ C0] ? input_event_dispose+0x2f5/0x6d0 [ 43.162898][ C0] dump_stack+0x19/0x20 [ 43.162922][ C0] ubsan_epilogue+0xe/0x40 [ 43.162933][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 43.162949][ C0] aiptek_irq+0x1f3c/0x2a00 [ 43.162965][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 43.162979][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 43.162997][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 43.163013][ C0] dummy_timer+0xa3f/0x4900 [ 43.163029][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 43.163040][ C0] ? timerqueue_del+0xd7/0x130 [ 43.163052][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 43.163069][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 43.163079][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 43.163096][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 43.163112][ C0] ? read_tsc+0xd/0x20 [ 43.163127][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 43.163141][ C0] hrtimer_run_softirq+0x159/0x560 [ 43.163152][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 43.163169][ C0] handle_softirqs+0x1aa/0x620 [ 43.163182][ C0] __irq_exit_rcu+0x47/0xb0 [ 43.163214][ C0] irq_exit_rcu+0xd/0x30 [ 43.163225][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 43.163248][ C0] [ 43.163252][ C0] [ 43.163256][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 43.163272][ C0] RIP: 0010:__kasan_check_write+0x0/0x20 [ 43.163287][ C0] Code: 89 e5 89 f6 48 8b 4d 08 31 d2 e8 bb e4 ff ff 5d e9 45 d7 c5 03 cc 0f 1f 40 00 b8 80 46 20 ac 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 88 e4 [ 43.163297][ C0] RSP: 0018:ffffc9000b827978 EFLAGS: 00000282 [ 43.163320][ C0] RAX: 0000000000000000 RBX: 1ffff110202ca50d RCX: ffffffff81663545 [ 43.163329][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888101652868 [ 43.163337][ C0] RBP: ffffc9000b827a30 R08: ffff88810165286f R09: 1ffff110202ca50d [ 43.163346][ C0] R10: dffffc0000000000 R11: ffffed10202ca50e R12: 1ffff92001704f34 [ 43.163354][ C0] R13: dffffc0000000000 R14: ffff888101652868 R15: ffff88810a71b901 [ 43.163364][ C0] ? rwsem_read_trylock+0x245/0x5a0 [ 43.163383][ C0] ? rwsem_read_trylock+0x275/0x5a0 [ 43.163399][ C0] ? downgrade_write+0x470/0x470 [ 43.163415][ C0] ? __kasan_check_write+0x18/0x20 [ 43.163425][ C0] ? _raw_spin_lock+0x92/0x120 [ 43.163438][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.163450][ C0] down_read+0x7f/0xe0 [ 43.163466][ C0] ? __cfi_down_read+0x10/0x10 [ 43.163481][ C0] ? __d_lookup+0x4e8/0x550 [ 43.163494][ C0] kernfs_dop_revalidate+0xcf/0x4e0 [ 43.163510][ C0] lookup_fast+0x211/0x540 [ 43.163522][ C0] walk_component+0x5d/0x450 [ 43.163534][ C0] path_lookupat+0x155/0x440 [ 43.163547][ C0] filename_lookup+0x22d/0x5a0 [ 43.163561][ C0] ? __cfi_filename_lookup+0x10/0x10 [ 43.163575][ C0] ? strncpy_from_user+0x14f/0x280 [ 43.163588][ C0] ? __kasan_check_write+0x18/0x20 [ 43.163599][ C0] ? getname_flags+0x203/0x6b0 [ 43.163612][ C0] do_readlinkat+0xe7/0x520 [ 43.163627][ C0] ? cp_old_stat+0x4d0/0x4d0 [ 43.163642][ C0] ? __kasan_check_read+0x15/0x20 [ 43.163653][ C0] __x64_sys_readlink+0x83/0xa0 [ 43.163667][ C0] x64_sys_call+0x155b/0x2ee0 [ 43.163678][ C0] do_syscall_64+0x57/0xf0 [ 43.163690][ C0] ? clear_bhb_loop+0x50/0xa0 [ 43.163705][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.163719][ C0] RIP: 0033:0x7f3e959153a7 [ 43.163730][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 43.163740][ C0] RSP: 002b:00007ffd71460e78 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 43.163753][ C0] RAX: ffffffffffffffda RBX: 00007ffd714616c0 RCX: 00007f3e959153a7 [ 43.163761][ C0] RDX: 0000000000000400 RSI: 00007ffd71461280 RDI: 00007ffd71460e80 [ 43.163775][ C0] RBP: 0000000000000200 R08: 000056055ed65c29 R09: 0000000000000000 [ 43.163788][ C0] R10: 000056056f2de010 R11: 0000000000000202 R12: 00007ffd71460e80 [ 43.163802][ C0] R13: 00007ffd71461280 R14: 000056055ed68ca4 R15: 000056055ed68bcc [ 43.163819][ C0] [ 43.163823][ C0] ---[ end trace ]--- [ 43.610534][ T31] usb 3-1: USB disconnect, device number 13 [ 43.610600][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19