last executing test programs: 1m59.057680484s ago: executing program 1 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0x400007f) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x515401, 0x40a) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) inotify_init() ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000200)=""/44) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="52f9d895aa8219151ce5f67fda92ad9655fc270360d735def5c36d795e46c8bb14d55cc2cb04224df6f98e31beeebea064f54975c4b149705f5466eb5168007debfd53ff7b287504ff5c66d6c0d9dfc1f6398434ff99491fc1879684dc80c9bb2fbfc0cbbcf27f429ac524534785c973383da6b0c11f161a3ca7a58b91876c3741f97233a54c55e93dfd40b99cc219d67fddc5cc07f2c6061bd4956e6b63172060bdef5fe7ddb27b424fc82c673eb32c52c7a08d995c4b038c6d40b1c9f371802862db94c85abe0999097dd8a0c658eb92e3eb26d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000100)={r2, 0x0, 0xfffffffffffffffb, 0x7, 0x885a, 0x1, [0xfffffffffffffff7, 0xffff, 0x8000000000000000, 0x5, 0x100, 0x8]}) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'batadv_slave_0\x00', {0x2, 0x0, @initdev}}) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000180)=""/76) 1m57.464435032s ago: executing program 1 (id=233): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x201) r1 = signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x40}) ftruncate(r0, 0xfffffffffffffffe) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x884062, &(0x7f0000000100)={@_ha_fsid={[0x5f9, 0x6]}, {0x0, 0x9, 0xffff, 0x2}}, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x80000001}) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={r2, 0x1, 0x1000000, 0x8000}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x1090c3, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f00000002c0)={'\x00', 0x80000000, 0x3, 0x4}) read$watch_queue(r1, &(0x7f0000000340)=""/137, 0x89) r5 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x40000) ioctl$XFS_IOC_FSCOUNTS(r5, 0x80205871, &(0x7f0000000440)) r6 = open(&(0x7f0000000480)='./file0\x00', 0x20901, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000004c0)) fdatasync(r2) r7 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x1, 0x0, 0x80bc002, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000540)="31e21edeb074e2cf9e3db39d32ccdd5724badb6bb808a6ed4c736c5fa1", 0x1d}, {&(0x7f0000000580)="cebc5eebf7189f08e7ea778519a79c97ace586d600d7b6ea1369485106bec07916a0bcb3d888585b95cb0d0a0b9e9a9fa18af4daf50f67f858e1cdb25d35bcefcd591fdf8c49aac55dc18dc7ab1179248f86cf89e332be4beeecf9c30058fe6c2a74ba8b655262aec58f7e0ee174ae4b89b36cd6d579dcb9", 0x78}], 0x2, 0xe77, 0x40) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) gettid() ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000640)={0x3, 0x4, 0x58000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$LOOP_SET_FD(r7, 0x4c00, r2) readv(r7, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/124, 0x7c}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f0000000b40)=""/125, 0x7d}], 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000c40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000cc0)=[@textreal={0x8, &(0x7f0000000c80)="1c06f30f5eeedbc70f08650f01c50f01cb0f01cf0fc77a4d0f4d4b0a2e0f08", 0x1f}], 0x1, 0x1, &(0x7f0000000d00), 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000d80)='cgroup.events\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000dc0)) 1m57.450448923s ago: executing program 1 (id=234): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000014c0)={@local, 0x0}, &(0x7f0000001500)=0x14) sendto$packet(r1, &(0x7f0000001480)="8723", 0x2, 0x4000000, &(0x7f0000001540)={0x11, 0x11, r2, 0x1, 0xd, 0x6, @remote}, 0x14) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000500)=@req3={0x9, 0x400, 0x7, 0x79007a92, 0x6bb05257, 0x4, 0x6}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) execve(0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000001580)={0x14, &(0x7f0000000600)={0x0, 0xd, 0xa5, {0xa5, 0x24, "5e6d05af6f7c5ccded3f8aef24d0924a7706699e28e1a6d90ee11c3d4489a70cb5ffb7f282e2ffaa00a52321bee4b887e962a05559ac884aa2ce9693f85367597b663c2bf75da338edd58c855857d7f3e41cee1266e69d9dec4c42fe598e48eedff05da0a4e24b929d74f0c74ec8535f73e9022077d48b0fd52342e207c94423ce2dadf05c995fa01c4dbf1bc906d2fe85b709e72e302d40d1992e7369bc0a026932e3"}}, &(0x7f00000015c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x16, 0x27, "96cc18b27ebc5d7579a4344ec7b8295d37862cc14a817cf537df80c212ab57fd8b289ae9740436"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x81, 0x2, "ee3d"}, &(0x7f00000002c0)=ANY=[@ANYBLOB="2082030000009c1eed"], &(0x7f0000000480)={0x20, 0x83, 0x3, "004010"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "6415"}, &(0x7f0000000000)={0x20, 0x85, 0x3, "ca0205"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200f06"], 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001e7ffffff0000000000100000000000000000000000000000000d0035"], 0x30}], 0x1}, 0x0) r6 = syz_usb_connect(0x5, 0x63b, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xe4, 0x9a, 0xb, 0x20, 0x10b5, 0xac70, 0x9cd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x629, 0x3, 0x1, 0x5, 0xe0, 0x3, "", [{{0x9, 0x4, 0xae, 0x8, 0x2, 0x44, 0xb9, 0x1d, 0x73, [@hid_hid={0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x65}}, @generic={0xa4, 0xc, "37fb2db1ccec77398fc626f31aadea38e7a3a472979540b994093c94a4b1b0a80271b0a9ebf45c457239e0f4d0e43196245f9e6e201dff797ab5c609831950cd7ab0e53588cb793fbf87d8a62f89d3690fc822869d8291878192888fb718ea086170900ccea53cd16813980252990f2431b79748b2354a73f8400ab6ad2773169098194265d136d96230e8f0dc2fd36f34bb1944257b2bf581e6fdc7e335a0a44574"}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x16, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xc5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x5, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x82}]}}]}}, {{0x9, 0x4, 0xc0, 0xd, 0x5, 0x69, 0xab, 0xd1, 0x5, [@generic={0xe3, 0xf, "6c341b85964731bc36a827f51757fef52c936bfde12f111fad2eaa241643b73ccbbdcacd8599feeb7eb46a1fbd9d52105c9c7bde6eb95a2751615667d2215de54adf4cc496bbb1805297b98e602e4e2bd1560a4b4ab3efc7419b1c00bcacaefc1a1520954323433455c3ccf43b222efd692a38ade3117284ddf0381bfea8156d121222e1baf9f34ecf0833aed1f2594f7fccc3b8317d9dfdb485eeef5320c3047dea096b05ac31448daeefbdb3dc52a5ebe440202b2cfdbbab072ad7977024987d1024be48c31fa858f3c64fee4fe2c557389f346da0fdbce001bcb0067490b6d2"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xb65}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xc41, 0xa8, 0xc}, {0x6, 0x24, 0x1a, 0x1, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb8}]}], [{{0x9, 0x5, 0xd, 0xc, 0x20, 0x7, 0x5, 0x1, [@generic={0x2c, 0x23, "e889593a6c6228550969374b23aa71438fea3f1b97215e66fbba6edccaae7694cae79fc73c9401d074b1"}, @generic={0x5c, 0x3, "53129b46edecb95ba29b2aa7f494a5ab717212dd563079c3ba9f989621e7e05cbb8316ad21e53d863806550e77762a1421b3d3a55b1d4708ff18ad897f4e142811075bd02adfc3431bbdeb508dfff621852cf8bf4c9d67f344a6"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x0, 0x8, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x4, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x8, 0x7, 0x50, [@generic={0xc2, 0x5, "af38b2357d24d1ba647ed08af6a30b504a20c036414f3edc41701a513b4450088a11fe2619956c406250809db2bb496cf0324f7cd44a44b70720caae3aeca743548b7cff81748640583b6623f264750fbfd9f208cb69ec2b332a0fab4a58493ee5fa33e6037023980b6e3765e729692712832a2e1517b3b7fbf73a848c38c163fbc1ec302afe62b0e1b11b787ac8c8804b38e59ef66f1287c4deb78d9c0273cc4aa338c67fc4608320c4256b3ea30bfbe3e15a241b0dd11ba19789d48a3e328a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x8, 0xf, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2fbc}]}}]}}, {{0x9, 0x4, 0x37, 0x1, 0x9, 0xaa, 0x0, 0x2, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x1d}, [@processing_unit={0x7, 0x24, 0x7, 0x1, 0x1, 0xd}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x400, 0x1, 0x4, 0x8, 0x5, 0x4}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c1bcda461e37"}, {0x5, 0x24, 0x0, 0xbb7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x9, 0xd3}, {0x6, 0x24, 0x1a, 0x4, 0x22}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xc, 0xfc, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0xf, 0x5, 0xe0, 0xccd, 0x40}, @dmm={0x7, 0x24, 0x14, 0x200, 0x1}]}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x7, 0x8, 0xd9, [@generic={0x94, 0x5, "19451cb1d3092521f6f10dba4d1455eab7d2eaf14a08d27a776a04b03cf6a6ec2b227d65ce32f7e3bd2baee90821421ac2e524419cb49a0af3998f8a1dc0af148da554bdeb4533d3c065306b9f58f8d8c8da102c8b1f4205ffe07f5f21d4e4f06373576fdab8ed9a3b6c77916b039f3a2d6565f119efed31c581eb1cb24956f77af09301ba673e0048e82f4455ea0f29b81b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x6, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1}, @generic={0x28, 0x7, "69adfef88f46facfa85f237bc1d3d52e110f1e615257dd7e362b1d661819b6bb4fc999a19912"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0x0, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x2, 0x7, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x7, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xd52}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x34, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1}, @generic={0xc6, 0xd, "a2481d589a0f1c48e7625fc61aa5e75401a542e1d6b714d227e82ca9f565e4ad3acfab5cd6d5ed7b28f51e3cbfb9ede4c0bd4f034d862c1a52da64d7f0852148a3e92d2c084324b0dfcfaed3102740949b364d351370949f17fb360e989de0ae614fd557eca41f6518110228eace5972b23d431e7b736cc57bf075311aafe0154bf96cf3a9647d195f15ccfbac576383c4d4d510d7ab04e9a68d4713a20bf1888c02971a95ea5f1523a93b66e8ada0c66a8d7bd96ebbe5cfb0afe0eca1349397530685f6"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x6, 0x6, 0x4, [@generic={0x16, 0x2, "4fea95dca4b1b4fa848a8ac3e48414082e1fed9d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xfb, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x10, 0x7f, 0x6, 0x10, 0x8}, 0x50, &(0x7f00000000c0)={0x5, 0xf, 0x50, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x5, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x87, 0x7f, 0x9, 0x2, 0x4}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x6, 0xff0f, 0x2, [0x30, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3522f1716b683efef1f5924fdcfa99a4"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x7, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0xa, 0x8}]}, 0x5, [{0xb, &(0x7f0000000340)=@string={0xb, 0x3, "2d82f6cccfc015060a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}, {0x64, &(0x7f0000000d00)=@string={0x64, 0x3, "0db03f3256ef001c30789c0104d0c8897745101f7f3c962e063cab98e35f11f5e3251e00a1e74565628aafb2c5bcad0cd9b87a5a66c0f24b9facf7a0e61416280884cfce234329549d393efcb2e51aae520710410274811a20f268ddf0e81b00392d"}}, {0x38, &(0x7f00000004c0)=@string={0x38, 0x3, "1225b65a1652157b7dae5dc48a7108e22da5c81fe0b76935ec95c72fab4f94c6f2982ebb189a04fc7cf3f00b41d898a0a403363f4773"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000f00)={0x14, &(0x7f0000000e40)={0x40, 0x1, 0x51, {0x51, 0x2, "510bb6f8186082521a1ceb0b139f26fa57a3d1fac9d55d57b61fa146d3b1bbeef8f82bf9fe16057505615ddcdd0d5b2b27dcddf33702c939e68cb6e30abc924a6f514638cbd60d388fcb5d65cbdb3b"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000001140)={0x44, &(0x7f0000000f40)=ANY=[@ANYBLOB="4017260000006cefe1905586d51a78b76690e00ad7572b3f02d552ea4ec4fbd274b1ca3673f3fe6d8e7d4e43"], &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001000)={0x20, 0x81, 0x3, "db3af1"}, &(0x7f0000001040)={0x20, 0x82, 0x3, "57bfa8"}, &(0x7f0000001080)={0x20, 0x83, 0x1, 'o'}, &(0x7f00000010c0)={0x20, 0x84, 0x2, "04c5"}, &(0x7f0000001100)={0x20, 0x85, 0x3, "75d1b5"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x7, 0xffffffffffff8000}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000011c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xff, 0x60, 0x89, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2001}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x358, 0x81}, {0x6, 0x24, 0x1a, 0x8, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb2, 0xc, 0x55}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ef, 0x7f, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x1}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x250, 0x80, 0x5, 0x2, 0x20, 0x9}, 0xb8, &(0x7f0000001280)={0x5, 0xf, 0xb8, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xa0, "6982071c055dc2efbd9bb5a9b62ae167"}, @ptm_cap={0x3}, @generic={0x9c, 0x10, 0xa, "9c70fd3b45a77b0bbf73bea20b00bcdf321e373755dd83d217cd2415e26180e4c6d91b0748276b42a9ac375adfc8d82b828f06d73fe6347482d14f604c0c1f0e68adaf8b7d73666de36cedb53e754bf4b97bf875e209b6035ceef5d28a0d4b5efc574b2a5005b69a8fb4f2e5d3d02d339dcb0700e60f69e8e5c56e9fdfb0d56b318ff15e96a8ccfca2f500"/153}]}, 0x3, [{0x10, &(0x7f0000001380)=@string={0x10, 0x3, "a254c16b80a51776c44505a5b393"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x80a}}, {0xb8, &(0x7f0000000540)=@string={0xb8, 0x3, "35d0d7966cb21a2c17e5786ca46d41e8e56f60cd9535ed3ad6c0473a4cfe7961ce4056c0f090c0ab9b7349f7096c0e124fd61d90f7b1009bed73eee0a4a372ac8290adb936db5333e8e2667dfa442b3e0c1f6330f4cf2114e6b1b960cea9a6177759df5945b24704a70eec7b9e2d79fbf52cbd79371dd002cf0b7b71e736945de5e071dd27fbfc5b5ba360467bfcfed96acecaf9070cc0cd2ca5762af7316da1db4a1093ce6c81da097837e2ae1a88f02a66740b6a36"}}]}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m54.429672892s ago: executing program 1 (id=273): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000004240)=@ethtool_channels={0x3d, 0x80000001, 0x7, 0x6, 0x3, 0xf44, 0x9, 0x1, 0x4a}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403"], 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)) (async) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000004240)=@ethtool_channels={0x3d, 0x80000001, 0x7, 0x6, 0x3, 0xf44, 0x9, 0x1, 0x4a}}) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403"], 0x0) (async) 1m53.45585566s ago: executing program 1 (id=277): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m53.45459441s ago: executing program 1 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') (rerun: 32) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00f702"], 0x10}}, 0x10000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x40, r8, 0x800, 0x70bd27, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x29, 0xe, [@peer_mgmt={0x75, 0x18, {0x1, 0x6, @val, @val=0x40, @val="644dfc0e7dbbc750cc015c527b581d19"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000015c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000300)={0x3c, r8, 0x57d60f449e473bf8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="0f30c402fd3eecae66baf80cb81c679789ef66bafc0ced66100c010f00d0662e3646d87213460f09b98c0900004a323e360f01cb0f01c166ba430066ed", 0x3d}], 0x1, 0x68, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f00000004c0)={[0x9, 0x6, 0x0, 0x2d6c00000000000, 0x61e3b6b6, 0xfffffffffffffffc, 0xb3, 0x4, 0x3, 0x5, 0x8, 0x81, 0x3, 0x10000000007, 0xe5, 0x3], 0x3000, 0x3877c4}) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) openat$cgroup_int(r10, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) (async) ioctl$KVM_NMI(r10, 0xae9a) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="6766c7442400009000006766c7442402e60000006766c744240600000000670f0114240f134e00b8d8008ec8c194a541c426a40f448a3a30f3900f017f80dd230f09"}], 0x0, 0x43, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1m38.228628848s ago: executing program 32 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') (rerun: 32) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00f702"], 0x10}}, 0x10000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x40, r8, 0x800, 0x70bd27, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x29, 0xe, [@peer_mgmt={0x75, 0x18, {0x1, 0x6, @val, @val=0x40, @val="644dfc0e7dbbc750cc015c527b581d19"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000015c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000300)={0x3c, r8, 0x57d60f449e473bf8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="0f30c402fd3eecae66baf80cb81c679789ef66bafc0ced66100c010f00d0662e3646d87213460f09b98c0900004a323e360f01cb0f01c166ba430066ed", 0x3d}], 0x1, 0x68, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f00000004c0)={[0x9, 0x6, 0x0, 0x2d6c00000000000, 0x61e3b6b6, 0xfffffffffffffffc, 0xb3, 0x4, 0x3, 0x5, 0x8, 0x81, 0x3, 0x10000000007, 0xe5, 0x3], 0x3000, 0x3877c4}) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) openat$cgroup_int(r10, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) (async) ioctl$KVM_NMI(r10, 0xae9a) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="6766c7442400009000006766c7442402e60000006766c744240600000000670f0114240f134e00b8d8008ec8c194a541c426a40f448a3a30f3900f017f80dd230f09"}], 0x0, 0x43, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.597952551s ago: executing program 3 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x40}], 0x1, 0x0, 0x0, 0x4004800}, 0x0) 1.592055231s ago: executing program 3 (id=1228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x24ab03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0xfff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) 1.547408723s ago: executing program 3 (id=1229): sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@code={0xa, 0x45, {"0f01b425ac8500006726285d41c442519ae08f49a892db0f01cfc4c30579f400f27f74c4a36d022f67b8010000000f01c10f011e"}}], 0x45}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x4307}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x200000, 0x5000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff, 0x1}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0xfc, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x0, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0x1, 0x0, 0x0, 0x78, 0xc, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xa0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@code={0xa, 0x45, {"0f01b425ac8500006726285d41c442519ae08f49a892db0f01cfc4c30579f400f27f74c4a36d022f67b8010000000f01c10f011e"}}], 0x45}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x4307}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x200000, 0x5000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff, 0x1}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0xfc, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x0, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0x1, 0x0, 0x0, 0x78, 0xc, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xa0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) socket(0x10, 0x803, 0x0) (async) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) syz_pidfd_open(0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0x119}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) 1.327109925s ago: executing program 3 (id=1230): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) openat$urandom(0xffffffffffffff9c, &(0x7f0000005180), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x9d8, &(0x7f0000000d80)={{0x12, 0x1, 0x310, 0x3, 0x15, 0xbb, 0x8, 0x2013, 0x258, 0x5ea2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c6, 0x3, 0xf, 0x5, 0x80, 0x0, "", [{{0x9, 0x4, 0xd4, 0x8, 0x10, 0x7e, 0xb6, 0x60, 0x3, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0xa1, "0ef5", "96"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x3, 0x1, 0x5}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x800, 0x4, "a5a8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0xa, "b3b7", "82e2"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x7ff, 0x4, 0xf}]}, @hid_hid={0x9, 0x21, 0xfff9, 0x7, 0x1, {0x22, 0xfb6}}], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0xaa, 0xa, 0x79, [@generic={0xda, 0x23, "ff06e05c4d0b2bf3102efe83b91f9371a515a3b94818d91dfe179ddc81e545cbb7fd9b96d9da70ae21f0ba9ddc6ae0e3770f3b3bb59b526b81fc9953324d25483828599a8e4d25376b11e39fe0f0a5ce1beac8c117d9ed5e315d4a544a4687510712cc924745b8f6198b28aab75fdbfc17e85797f8f6f8682150591ea4b0837d4179fffccd275a2852b8e9d1063698b85d263ea0a0906aa6bae14db75d1af139c347a4b9bc6c360eed4a6e47c6fb0156b0d0fe997d55b068a0ddd17d9300506a2b3875b978a5e4be16546a2b4c71d515549be0f45a0ab86c"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x3}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3f7, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xc0, 0x40, 0x80}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x1, 0x72, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x40}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x91, 0x89, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0x5, 0xa7}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x3, 0x9, 0x24, [@generic={0x9c, 0x21, "98a3530bcb5b2788bf20d47f44051b32fa5e7ca99ec68e0a1969c1ab8f9d41c42522bde6b964552caae7bc656f6ab78de8a65749265d6795fa3e9c7fe33c7efe2f9cd1dbbdfb8497ef08d5af3c13b4e25aa6694d1dc388cbccc008d5c8b7ec1575b03dbe0dd73e333d2ec3d4f6263e6b412d1708cbbd2bbe685a123e4c694a1fed1fb719bbc0ad1967476b7c4f8beb1dca788393949e258ecedb"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x6a, 0x2, 0x8}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xf, 0x6, 0xa7}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0x1, 0x7, [@generic={0x7d, 0xd, "16b1e1075284a0c2287519c28267783901715241e8a9ebf064c18f61c939bf440cf3f22cc5008e634d65a697d51f321ee70f9c4bfffac17472cf3daa4fd97c743e46366abef5b05d9ee377c46d6192ed6cf1d047ae692fc22ee1c494d61078163d149f7e4db6ebfd1b87a30de8109acad12009167db98b47568075"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x4, 0x9, [@generic={0x2a, 0x6, "396d62842f42834088ed85507c6a02505ecf0d51d6d58dc6a03f3cdb320229a7a4740f71b95a1816"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x14, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x9e8}, @generic={0x32, 0x21, "1f736cb26b90a0a1a766183463abbaa1c25302b3dcae0a6b108b4fd3eacf8a15c5a05963ed961808cedc6ddf1c5c4a55"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x260, 0x4f, 0x7, 0x1, [@generic={0x81, 0x5, "2d55829f16570139c23b336f505247328bc94d7f04825e09af6dc6dfe9afeb7bb481967254b7574c07a0716451fc0151565ff8317f8b39d4945dcc78308153b0b1d278dc7d78efaf1da0433d19c273c51b4924729040bb9ffd2459a292b885089a4e197e6b73c69293c78a751ac630224eaa9f79e8770c0c38778336c84979"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xe0, 0x1, 0xcd}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x5, 0xb, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xf7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x0, 0x4}}]}}, {{0x9, 0x4, 0xd2, 0x0, 0x8, 0xf7, 0x36, 0xa7, 0xe8, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xff, 0x93}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0xef, 0x7, "cf"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfb, 0x7, 0x5, 0x1, 0x8}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x82, 0x1, 0x6, 0x8, ')fR', "95283a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1b, 0x2, 0x1, 0x1, "87ac", "5ea9"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x20, 0x0, "0866b61852ce"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0xa, 0x1, 0x3}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0xa6, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x2, 0x6, 0x10, 0x4, 0x1a, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x46, 0x83bf}, @generic={0x7d, 0x23, "9cbb0a2fd5e6369a9f6effe0ce6b1a647594010936fa5d570b15fc125dec165afc1348bd37c9c7b00b776bb8ba33a98ae4ea41ebc20b0c18841d0a379e9a281afba02b332d363b909f232ce63ba1789a2c614da903b5621f308ef1a9c3b19fd8772cd39bbae1f48d583e7f876b3f07d4fdd75a08fbb5fedccedbf9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0xf3, 0x60, 0x6, [@generic={0x8, 0x24, "1a27d7adb745"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x4, 0x91, 0x10, [@generic={0x9f, 0x3, "6aa5e3fe819c42ebc2f8ad27de62a5dff114fd0c6ed50592491c3162f323703cbe7bcfdb52d00e6b3049c89d73c7ff928b7fdb9d466912fc8f4dc2a26d1ee9523c7a5a70eac14d57f9f1e1e28869a2a473a58e220c4913055d89b9f7ebe5b22642fae5ae62e916a4602a339d53f06419d139695f8c79299b8bbcdfc2bdba7c3138a2bec38f6dd3290ac9567058937ea041a1a6e48e10fcc3b2aa8d4946"}, @generic={0xcc, 0x32, "ba97892d8071f94d13aaadd75867998a6949016e6351d1fd75ba17a8ef25239e600bbe7248a1de6a45c078b7f1fa1a861e9a713b876f0f3b55edba4d0205d6cf4ce250dd46bf65461f0bb7ede07a4d83f2fad4fd30653dec2e87786d5b5aa61e3f822ea307c2c53ab8c4cfd2ff60775307714b2ebcb0df6ea1a90807f01f621090cf2f1acc9b64e0a83ab927b054ed42cd5d50a5089594e183a54e86b79fd2c270b79fe6bdcd7c80033b8096384f62e7cd93fc6fc49332b537ef10c4d0326e3bd463e0308304edc38365"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x0, 0x8, 0xfc}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x4, 0x10, 0x5, [@generic={0x72, 0xd, "ca905b944a1618bc72fcd21ca738b81093752da54d038c95cfc6f9e8249b4a8c727610e778f59828d800803b4d64f264900a1d37a58b8cb5fc7aabf3afba0fda4e4229eb92a70b008cce29b12cd7bad092bf3ff784e3f6dd6d7cfba70d7c5fdf458b01daa7150f1fb8170a9a4adda371"}]}}]}}, {{0x9, 0x4, 0x5b, 0x7f, 0x6, 0x9d, 0x70, 0xbc, 0xfd, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "8035775362"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7c, 0x2c8b, 0x3, 0xc}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x4, 0x884}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x17, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x4}, @mdlm_detail={0x3b, 0x24, 0x13, 0x2, "6b0703fdcec8546c296f8eb2a4f3ca0782d9fb7ec667e9e6ed512d1fe7dcc820e4748e56291dd4bee6a1d59c34b98c99d8715ace57049b"}]}, @generic={0x6b, 0xa, "67c4dceb33570421e33ca842b621471a2a8890e00a623fc57c5a0b4eddadcde290e251f7abffa2fe188c0ffbbb245757329dd007e33d6c174fec7d8046b67d690b5f4e5d5500a2aac9cc38ad80c3d67de3ebbb0db6c34d94d0f1c5323657642ad3d3041b849bd01f7e"}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x2f, 0x8, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x0, 0x10, [@generic={0x9b, 0x10, "3e92110c060861f77b27f02b031af17f715fbde876770ee9d83e285ec1dbffed4d74336497736e187fe78706394f5f8dbc8b575c46a1628e9ab58f336ed62bb9185b8c0182c70c4c25d13712bc3493bf8a3c25d15f8d1197fa9a8ce843b74f137b75fe55dc50e621c53388a73eb12834e835554a9b76a3b12b21a8e50a3288b67f4655d8b5699784e6cf1c880694ed15314981f78d40ff8fea"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x58d}]}}, {{0x9, 0x5, 0xe, 0x19809361e4dad994, 0x8, 0xf, 0x5, 0xe, [@generic={0x8e, 0x11, "c689869814c9f7f7e9419393d2874dfc9f42be81e87a7b1d127f58e7ea6cdaff86ad0bd2afe09d62d0c4798ebe771c52eebdfd5dc86250fae5534e380781281ac82891f58c42470cfdc3a472b1fa6d81b767fe39f881668a735c13b60862046c7266e4f51eb4b1b834c7626014784ad5880e291ea21efe0f0d11a9b720be2ef55bb994936549ada6cf5ca89a"}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x3ff, 0xd8, 0x7, 0xe7}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x55, 0x4, 0x0, [@generic={0x72, 0x22, "ba81ad5b3128326c8d65ce0666e2411f18d887ca5748a4ab33f51a29ac71b65aae579a774e2bac846f7ac4dbf736da595201ac9feed58541bd6c202995ba4977d13e9f9de81dc2043866e4867c60dcaee78d16a3cbbf5b8b96855d804d8cd230520c0bec44b3f034b42d8c23cde96fd3"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x33, 0x6, 0x8}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x10, 0x4, 0x8, 0x10, 0x7f}, 0xc, &(0x7f0000000380)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x7, 0xaf}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x35, 0x3, 0x3001}}, {0xee, &(0x7f0000000280)=@string={0xee, 0x3, "4e6e75bac3aa18b986ac007432f4c57cd00ada8ad41809c5e458e3e17ba968c669fdcf0c348671c19eef0f334ebb86bcaf0f957b61d3cd975ad788a0fd8116e49ac548b57c572f04fb9df32daaad06c2923a183d3ad466c665f9f896ab912658e7c9646dcb3ed58267281285147e91a927a68f38d7c14546fdfa6680e09e1895ccc25af1e8525f2a75982dad28be577c6e89e858fa5758a4f9be39b7638d4236ed98083b39c378d91d0e2eead743b059bfd848360f2ae2abd6f86f12de6fcc1d883a889b99ffffa96c05fea6be55b10df886429fc44d56f770e517dadb39a8e1d48fce2efb283db5682aef1b"}}, {0x9, &(0x7f00000000c0)=@string={0x9, 0x3, "63e712b40f73be"}}, {0x9e, &(0x7f0000000840)=ANY=[@ANYRESHEX=r2]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x455}}, {0xcb, &(0x7f0000000440)=@string={0xcb, 0x3, "042b29ec53e2c2fa8112da73bdd01241d616d455b16252f29dacb53d877e4a18f6e7d20a3320d6bb02ab093707e60589564c8c9d99b3af96731323cba95d6722f0bbe2d77caabe29249d01fb443476bdf0cd60953238285bcb702816206317e1cc2d79dec86a5d2cc7ed0bad921eb3dcb739ebecb47b88dc396d84dc536ded7aacf1f3d4a5033a1bff9f7a1b03d0001ae3629a5bfbf1510076bfad3ae825494edbc1b7a00338361d51bfadcde824f6cec46e1dbb7aeee7a7a709f58e3558f2f8ae29f006bfa19308f6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_usb_connect$uac2(0x3, 0x104, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x3, 0x1, 0x8, 0x60, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x0, "2e2b07d59aa3bcf471"}, @as_header={0x10, 0x24, 0x1, 0x5e, 0x5, 0x0, 0x1002, 0xc1, 0x8, 0x7}, @as_header={0x10, 0x24, 0x1, 0x9, 0x10, 0x1, 0x4, 0xc, 0xffffff00}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xaa, 0x4, 0x8, 0xc}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0xf0, 0x5, "be58b0e33491da"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xfc, 0xb, {0x8, 0x25, 0x1, 0x2, 0xc, 0x0, 0x1870}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe, 0x3, 0x1, 0x8, "e4cbce8937"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x92, 0xcb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfc, 0x5, 0x73, 0xf, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x3, 0x8, "09ef"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x81, 0x3, 0x4, 0x4d, "d0068a95da6d0d9d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x628, 0x7, 0x9a, 0x2, {0x8, 0x25, 0x1, 0x1, 0x30, 0x5, 0x3e32}}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x3, 0xa, 0x6, 0xef, 0x4}, 0x37, &(0x7f0000000200)={0x5, 0xf, 0x37, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0xb, 0xf00, 0x2, [0xff00ff]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x10, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x30, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x9, 0x6}, @ptm_cap={0x3}]}, 0x9, [{0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="e6038752a44ba0d6666227005f343b162c231732b519cc4e54e80df8301b434e9e8383d033eef74056f6be487af60389513604f7670e82e47ed75eec03d05d3e3c86b0a4a721c3d9c06aefea0250a5399cd306b1f133690601a73a607fadb436ac1d6f70075c"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3c01}}, {0x7d, &(0x7f0000000ac0)=@string={0x7d, 0x3, "ce30451805dea238966618c80350011f5a390c385bad2216ea9b6e1296b07243a8953c51da60f5a0493de6c2485ecb40da13c30b6ab513d83c9e62da67127cc44562791154bdff6482f62c7717fece02e32fefa24e844ca8991adae02356acbda25efeb9c9ca73d913c24d906ac5ea6c242caf421a4ebee1c3b24e"}}, {0x4b, &(0x7f0000000b40)=@string={0x4b, 0x3, "d460b20f2551c9dc667c153cf37e9e21503b6407829b09754cb6c5ff187abaa4da6acfa2262368247807cda9a2128139516af9e60beff3641f761798ef5cad4ac30fa82354ddee8ba5"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1404}}]}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xfffffffffffffeee, &(0x7f0000000cc0)={&(0x7f0000000600)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="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", @ANYRES8=r4], 0x22c}}, 0x4015) 1.326974294s ago: executing program 4 (id=1231): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x0, 0x0, 0x0, 0x100007, 0x4, 0x1ffffff}}) 1.326770224s ago: executing program 4 (id=1232): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2597a68523040001800800028004000180"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.322729425s ago: executing program 4 (id=1233): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) 1.311866685s ago: executing program 4 (id=1234): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') pread64(r2, &(0x7f00000000c0)=""/21, 0x15, 0x7fff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) mprotect(&(0x7f0000662000/0x3000)=nil, 0x3000, 0x2000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.22346583s ago: executing program 4 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) request_key(0x0, 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x24, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x8, 0x16, 0x0, 0x1, [@nested={0x4, 0x42}]}]}, 0x24}], 0x1}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02c000000", @ANYRES32=0x0, @ANYBLOB="1fed06e2a3ed61c809d3849961b4ed2e2d81777f60489ca62e432417943461534f4713", @ANYBLOB="000000000000000080001100fc00000003ee000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.186698951s ago: executing program 4 (id=1236): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x81) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84000) close(0x3) (async) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r3, 0x2) (async) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fowner=', @ANYRESDEC=r4, @ANYBLOB="2c61707072616973652c007c9dde23f5a52e2361d984f08c38d59960c81c73cd8b4f276702c6a9438aa0e3005b565fa7c68b7b10a3fcc98fb858781093df75ca89755159239a314a09d0278771cff749435a68755efaeef4054a4b405dd87d27e400fe900a649c1c9532e1386e97efa638ae874f1803858bc06b3577f5faa0108d52b4f658735b1bcbfd0c08bd5a5dc151460d3edf75af9443dc3a1cabdced68b3be7d97e9231d5df06ce305c7a1187eb800a0e74f50e2d4d91641634cc1104e27133593f2dbe037bf311ce6f7ab39a696fcc3bf1905f63db4fbabad54715c53124c35383da8f92571c5590c8b428df2"]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x20, 0x24, 0x16, {0x16, 0x0, "fcedfa253d8043e925819d25a1c63ac62b23c698"}}, 0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000280)={0x1, 0x200, 0x0, 0x2, 0x80000}) (async) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000b4bffc)=0xfffffffe, 0x4) (async) write(r0, &(0x7f0000000980)="a9", 0x1) mount(0x0, 0x0, 0x0, 0x208080, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r7 = socket(0x2, 0x2, 0x0) sendto$packet(r7, 0x0, 0x0, 0x8804, &(0x7f00000001c0)={0x11, 0x5, 0x0, 0x1, 0xa2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 1.076071276s ago: executing program 0 (id=1240): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x7ff, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x70bd29, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0xd2, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xb99, 0xfffd, 0x7ff, 0x3, 0x5, 0x195, 0x9]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040000}, 0x24040854) 1.075863876s ago: executing program 0 (id=1241): r0 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x7) accept4$unix(r0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e20, @remote}, {0x6, @multicast}, 0x38, {0x2, 0xe25, @broadcast}, 'veth1_to_hsr\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x0, 0x20, 0x3, 0x1, 0x106e, 0x3, 0x8000000000000, 0x80000004000080, 0xf, 0xfffffffffffffff9, 0x4, 0x4, 0x6, 0x7ffd], 0x41000, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.00335225s ago: executing program 2 (id=1243): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) capset(&(0x7f0000000580)={0x19980330}, &(0x7f00000005c0)={0x6, 0x7, 0x1, 0x8001, 0xb, 0x9}) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socket$inet6(0xa, 0x80000, 0x5) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000001c0)=0x410e, 0x4) sendmsg$can_raw(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r9}, 0x10, &(0x7f0000000380)={&(0x7f00000012c0)=@can={{0x4}, 0x5, 0x2, 0x0, 0x0, "3e21f5eb3f27061e"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000019840)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e3e41d185da721b7c8790521f4ba8540696a7fc3bb97162888c73af961c5aca", 0x20}, {&(0x7f0000000080)="4c002c992449575b3788e2fc41664e7e53e2b328f5622eb978907c40ddb0ed9399e880033eba77", 0x27}], 0x2, &(0x7f0000019200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8fee}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0xc, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0x7fffffff}]}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0x1, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8}]}, @timestamp={0x44, 0x20, 0xaa, 0x0, 0x6, [0x8, 0x0, 0x100, 0x963, 0x8, 0xe, 0x8]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xc7, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x27}, @local, @empty]}, @generic={0x9e, 0xb, "6d239568bd9ac01603"}, @timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x7, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0xc54}, {@private=0xa010101, 0x8001}, {@local, 0x400000}, {@private=0xc0, 0x6}, {@multicast1, 0xd}]}, @noop, @end, @lsrr={0x83, 0x7, 0xc, [@local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x148}}, {{&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000019540)=[{&(0x7f0000000180)="8c34b58b6227cb661001b07f73b655306de0482fcaea095fe9174f", 0x1b}, {&(0x7f0000019380)="7394e16e2882a4dd811e5d2b82484d2ac3a58d216490fd2501255e4c1fd67d6622125dee69485238de5a13aca8a25e69fd1253b4c6d6327f4e17ef06b6073f9afd41db4e304243bce069b804e3471fd24f93c900f9933a1eb325ffb93ad31f39f5017c92445ab10aefe52a38f83e67b9422a25d5d1df4e3ecea2539648744fc83c5346233ac76c193f6c998f7458470313a9fe401cc4ba21a9e243be67e9465cb13980a675e5e86beb98336165bddf2c363fa83633d40fe4d091c6cf12a48c16b6b9ef9dd70fb324f56b95c25fa19107882e7067b55581e82fe752cbc16ee62b8e155c36", 0xe4}, {&(0x7f0000019480)="39007bb923382f25ea85f792935f2e58313ee936fdf769f334914ba10c205c9ec18693ab4e9a63eac688f7998423d7c0585a24553bc7c2899b090cae12dc28a8324d1c9a2ae1eda98219ce0557c0e0a858267661b4c4f885a2f730093c73f5f3640e82f20ad0dd5733c5595716792234c60070557c8f845feac1fd98316267132e6473a2a12b9bf48e9be8cab57cb42daf3d7aea810d8150d085f97e665000c50058370d03fbcd1b51eb57f6", 0xac}], 0x3, &(0x7f0000019580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @empty}}}], 0x20}}, {{&(0x7f00000195c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000019780)=[{&(0x7f0000019600)="cb0732fbe92cbfe54c5f5a4edf95764303c1cdfba096dc6dc251c219d5a185be0f015b896e04db8dbc5bc2f633695f624d84b90ef93ac8881f825ba49cb7c7c0327c46f5d842919dd746897b8e76ac964e3ea047d74c498443a041e393e2dc4bdf2e05caa69edf45eb891571b5", 0x6d}, {&(0x7f0000019680)="d7a41ba98063ec38419f4438570e9e4daef01753b09d8c5b589da603bbe3230774bf3677113338afdbd26511516c3de0fcc4f79a42218dc1cbc8a6c77f991d00b5e45d9bd7c4dcae23904e1ffdc260", 0x4f}, {&(0x7f0000019700)="c3c0c277a90117a1f9d734fdcfed0b0a512793246cea4ee3d9ae453d82801418483dc40a3b681993c7a62776457265f5d8b71a17779721e7b1f47e546f1d35006aafe158dc70d33716a4120be5df5db1326bf3", 0x53}], 0x3, &(0x7f00000197c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x80}}], 0x3, 0x20000800) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 829.403549ms ago: executing program 2 (id=1244): socket(0x10, 0x803, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="450f01c9b9800000c00f3235000100000f30b9d5080000b800000080ba000000000f30410f2312b9800000c00f3235000800000f3066baf80cb8d0d34c84ef66bafc0cecf14a0fc7ae113e0000c4037905814b34000000440f20c03506000000440f22c0", 0x64}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0x38, 0x0, 0x6, 0x1}]}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x6, 0x40000) ioctl$IOC_PR_CLEAR(r9, 0x401070cd, 0x0) syz_open_pts(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r10, &(0x7f0000000040)={0x18, 0x0, r11, {0x7}}, 0x18) lstat(&(0x7f0000000100)='./file0\x00', 0x0) 783.678171ms ago: executing program 3 (id=1245): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x800001, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x5}, 0x18, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="60020000100007000000000000000000ac1e0101000000000000000000000000ff0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001fffffffd3c0000002001000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a0000000000000000000002000200340000000000000014000e00"], 0x260}}, 0x0) 746.719202ms ago: executing program 3 (id=1246): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e800000000020103000000000000000007000002bc000a800800014000000000980002800c000280050001003a0000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb060003400004000014000180080001000000000008000200ac1e00012c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000aa06000340000200000c00028005000100210000000800014000000000080001400000000108000140000000010e0006007369702d32303030300000000600074000030000624e65c21c4e9d3a8006fe5aec13a389cb44191499c5bb390210c6abff2989bdecaa2314e07dab0283b9201df11f0dc7e46665fa45ddfc6cd2a0480b5a8f4bffc7dda41992b75fc52a99feb0ee781d006071c07ef2231a5befc7b5904f3993215e26db1bc98b6fbd0c6debef91848ffac429af0eb769821867d3502270e6b29fd1f00a84648b10baaa0cdabb1e3086b052b92ab700dfb2c74c0f15378c61df8db1282038438f246d733bbbbc29e3fb1bd52a9575c9a24fb7bd28"], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_disconnect(r2) (async) syz_usb_disconnect(r2) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="120101020000004082058271ca000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002503050a2525010400000500000904020000010230000904020101010230000905820900027409c00a2525ffffff7f01e10b"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20200600003b4f000df3562e9dad5b4300f32754e353e3a81b3e0096088bb5c304c420659bd692343008e4da7bebe912d1c29b49c2e0d43582ee48aebd7f4c0b3559cdbb8485e82d2b77ae1e27464d3f081757"], 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="400501000000d7109dcf21c92eb27c143e3da424478bf7bca9ef8e1f260b51cabdeeefbca3cd144d2bee21d8a8dfabb36a883a444f67ff5f14930155011400e4723d9994701d88f36915d284ecf229f33d20"]}) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20200600003b4f000df3562e9dad5b4300f32754e353e3a81b3e0096088bb5c304c420659bd692343008e4da7bebe912d1c29b49c2e0d43582ee48aebd7f4c0b3559cdbb8485e82d2b77ae1e27464d3f081757"], 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="400501000000d7109dcf21c92eb27c143e3da424478bf7bca9ef8e1f260b51cabdeeefbca3cd144d2bee21d8a8dfabb36a883a444f67ff5f14930155011400e4723d9994701d88f36915d284ecf229f33d20"]}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="20161d000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200f06"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200f06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$netlink(0x10, 0x3, 0x0) 655.719607ms ago: executing program 2 (id=1247): ioperm(0x1, 0x3, 0x163f) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioperm(0x7, 0x8000000000000000, 0xf701) ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000001c0)={0x0, 0x300}) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0x0, 0x200, 0xffffffff, 0x0, 0x0, 0x0}, 0x0, 0x0) 465.223487ms ago: executing program 2 (id=1248): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400002e}, 0x40080) 234.644578ms ago: executing program 0 (id=1249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc48985800000f01c835200000000f22d80f01c566baf80cb864c95782ebededbafc0cec67670f1b010fc7689f8ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x54}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x18}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb0}}, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 175.529811ms ago: executing program 0 (id=1250): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000180), &(0x7f0000000000)=0x6e) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x110}) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)=@llc={0x1a, 0x30a, 0xf6, 0x2, 0x0, 0x6, @random="0e306e490607"}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=[{0xd8, 0x80, 0x8, "0bc6af0b4097127a3e78d3ac3a71a8e05060f44e84777065d05f9ec61fe87713be7be7cd2cce834bc4defdcdc4cd7e184c13b9c2c5dffe635972a6ff7e038bdf812102fe2fe5fdbdccbc80fe111c7f68d7c4153e0e45cf9dcb62fb54b439bce929ac026d4c4159326fd40b2d1dffd425d91fd16ebadf0cc9639adda7bb2bd983ff8b4ab53c288583a8d4b322ef62f68f156e629196dfee6dc3ed57ffad82c1d1e4425dbde89f55d56b56e42bb51300ba1e23ce6ad95d241df7b4f17d396d469cff997a2f2ade"}, {0xc0, 0x88, 0x8, "723f88110960dfa1cc59947723824df49e8d9bab0480203e4619fabbd8edffb784c3a4d1131e74b4df3c44d98d3a918117ceb23b3d05c7896bcc2198321288238f12e18c4be03d96d91fb17bd909f311c33540ebeefc4a992106ac3db701c0cbdbb40430a8af9cba394a0b0e964c82965ea7428d81e1c0152b9c1882217c7ecf0f6766559548df0c4d4c57a473dab4d9baf9491235b8d4836441ee47f635488bc0e45d3a935ccabb4b2420b59026f6ad"}, {0xf8, 0x112, 0xfffffffa, "c55c731e4d826a33644967119c8b488d14ffcb44c4634e76c955c1078a19337529127beca1db30bf8721c98397e0cedfdc1989d3f89c306eb35f0d86169ca0ca1cc0d401368e9f0b52c37f3194885ef3153100af073f211b1f40d3d4bd778fa7a9cec033fce8d855a293dcb797d17cf80edc13a90e71815fe51e197db554bfc4d86a14986fa16aa6dc6fd0726989a0f79cb4d7104ddf6eb017a28fe060595c7d07e7b3d334d3840c3e4a2451ab0df3eda08b06adec0612492d39bc4e54731e5fb39b634ca01f4b0f3fbae5f9c8820f54a9dd5c428995be72a6eca8c21e8420f89115"}], 0x290}, 0x4000) 175.273901ms ago: executing program 0 (id=1251): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) 174.996321ms ago: executing program 0 (id=1252): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000300)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 9.942239ms ago: executing program 2 (id=1248): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400002e}, 0x40080) 0s ago: executing program 2 (id=1253): syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000640)=ANY=[@ANYBLOB="12010102020000402505a1a040000102030109028600020103c0070904000001020d00000524060800052400acac0d240f01070000000100"], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x4, 0xf5, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0xd8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x4, 0x10, 0xda, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc9, 0x4c}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x3, 0x5, [0xa, 0x3, 0x2, 0x5, 0xa], 0xd}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x5, 0x1, [0x1], 0xd8}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x2, 0x2, '\v'}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x6, 0x0, "8506"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x4, "f2b3e4277149"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x2, 0x2, 0x7, 0x4, 0x8d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x9, 0x25, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xd7, 0x8f, 0x8, 0x80}, @as_header={0x7, 0x24, 0x1, 0x0, 0x81, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe1, 0x8, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7d7d, 0x8, 0xf, "1895577196"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xcf, 0x7f, 0x7f, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x86, 0x4, 0x4, "78b76fde3fe9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x5, 0x7}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x210, 0x40, 0x9, 0x2, 0xff, 0x5}, 0xdc, &(0x7f0000000140)={0x5, 0xf, 0xdc, 0x3, [@generic={0xb9, 0x10, 0x1, "493c760b342eb2716751070adab75f0b66dcd6498a7be7ca65e7d1fed6d3f2b71b131a616a2a00ed7fbee3b68fd70a7e6f95af9585fc2e4b4b1dbe1783081b11198f73bf4fe16f632a342534b40e26e9d0d78843d89761b01245d7dc7439a366725d7785bce67053e28934850f3feff6abf953a1344d10f031b945336b8bef22aded887f819df9137059c9f06582b4069a204d283a85d54b5d13572cf808682a3d860bbffd6d38919ae5783b04cb8258378b633d83e8"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d36177e3c165c833e684b8ad60cf0947"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xa3, 0xb, 0x7}]}, 0x3, [{0x90, &(0x7f0000000240)=@string={0x90, 0x3, "418180033f5f42aa5dce35bccd50e62625747a0f70f434115271aebf0162f831491a0a2c7b167bcfa390e4d215bebbee2561ac87f400919edf00c04d451e4fb3f43f07d972ffabceebb4ccccc00c4054c2812555355401f7b602adf6694c1dc063e176f2d9574d14bd6d06f0bb71da53692d9af6933283e52e9b8a36a15990bac4101245cd8e9a18d00119aa4506"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x27}}, {0x13, &(0x7f0000000340)=@string={0x13, 0x3, "7f6905b783b6e9cbf7263fe0a1d3256304"}}]}) kernel console output (not intermixed with test programs): new high-speed USB device number 54 using dummy_hcd [ 98.232789][ T308] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 98.253209][ T308] usb 5-1: Invalid ep0 maxpacket: 32 [ 98.258912][ T308] usb usb5-port1: unable to enumerate USB device [ 98.282750][ T66] usb 3-1: device descriptor read/64, error -71 [ 98.522806][ T66] usb 3-1: device descriptor read/64, error -71 [ 98.561216][ T36] audit: type=1400 audit(1774515269.806:101568): avc: denied { mount } for pid=2229 comm="syz.3.615" name="/" dev="pstore" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 98.639769][ T2237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 98.880490][ T66] usb usb3-port1: attempt power cycle [ 99.222776][ T66] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 99.230477][ T564] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 99.253920][ T66] usb 3-1: device descriptor read/8, error -71 [ 99.382768][ T564] usb 4-1: Using ep0 maxpacket: 16 [ 99.389168][ T66] usb 3-1: device descriptor read/8, error -71 [ 99.395968][ T564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.407313][ T564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.417367][ T564] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.430612][ T564] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.440027][ T564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.448972][ T564] usb 4-1: config 0 descriptor?? [ 99.537867][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 99.537883][ T36] audit: type=1326 audit(1774515270.786:101572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.0.632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2ed9c799 code=0x0 [ 99.642765][ T66] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 99.663839][ T66] usb 3-1: device descriptor read/8, error -71 [ 99.793747][ T66] usb 3-1: device descriptor read/8, error -71 [ 99.857219][ T564] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 99.865855][ T564] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 99.902837][ T66] usb usb3-port1: unable to enumerate USB device [ 100.058294][ T564] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 100.066463][ T564] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 100.078383][ T564] microsoft 0003:045E:07DA.000D: no inputs found [ 100.084765][ T564] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 100.095878][ T564] usb 4-1: USB disconnect, device number 53 [ 100.325653][ T2284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.634'. [ 100.377409][ T2287] sit0: entered promiscuous mode [ 100.385979][ T2287] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 100.393801][ T2287] netlink: 1 bytes leftover after parsing attributes in process `syz.0.635'. [ 100.452779][ T66] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 100.474960][ T2291] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.494279][ T2293] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 100.574312][ T2296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.639'. [ 100.595920][ T2298] rust_binder: Error while translating object. [ 100.595949][ T2298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 100.602311][ T2298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:373 [ 100.612614][ T66] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 100.623115][ T2298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.633191][ T66] usb 5-1: New USB device strings: Mfr=23, Product=206, SerialNumber=3 [ 100.648539][ T66] usb 5-1: Product: syz [ 100.653186][ T66] usb 5-1: Manufacturer: syz [ 100.658578][ T66] usb 5-1: SerialNumber: syz [ 100.751551][ T2305] batadv_slave_0: entered promiscuous mode [ 100.758711][ T2304] batadv_slave_0: left promiscuous mode [ 100.870316][ T2281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.878920][ T2281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.888725][ T2281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.898451][ T2281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.913246][ T66] usb 5-1: MIDIStreaming interface descriptor not found [ 100.926927][ T36] audit: type=1400 audit(1774515272.176:101573): avc: denied { mount } for pid=2316 comm="syz.4.647" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 100.930263][ T66] usb 5-1: USB disconnect, device number 21 [ 100.974969][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.003507][ T2317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.012999][ T2321] netlink: 'syz.2.648': attribute type 29 has an invalid length. [ 101.021199][ T2321] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.648'. [ 101.024151][ T2317] IPv6: Can't replace route, no match found [ 101.038464][ T36] audit: type=1400 audit(1774515272.286:101574): avc: denied { mounton } for pid=2316 comm="syz.4.647" path="/47/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 101.038639][ T2317] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.104676][ T36] audit: type=1400 audit(1774515272.356:101575): avc: denied { create } for pid=2323 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 101.125670][ T308] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 101.134138][ T36] audit: type=1400 audit(1774515272.396:101576): avc: denied { unmount } for pid=1528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 101.215906][ T13] bridge_slave_1: left allmulticast mode [ 101.222305][ T13] bridge_slave_1: left promiscuous mode [ 101.232591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.244221][ T13] bridge_slave_0: left allmulticast mode [ 101.250500][ T13] bridge_slave_0: left promiscuous mode [ 101.256623][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.284430][ T308] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 101.293152][ T308] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 101.314550][ T308] usb 4-1: config 0 has no interface number 0 [ 101.324091][ T308] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 101.333967][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.342529][ T308] usb 4-1: Product: syz [ 101.342765][ T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 101.347292][ T308] usb 4-1: Manufacturer: syz [ 101.363186][ T308] usb 4-1: SerialNumber: syz [ 101.371757][ T308] usb 4-1: config 0 descriptor?? [ 101.405562][ T13] veth1_macvtap: left promiscuous mode [ 101.411252][ T13] veth0_vlan: left promiscuous mode [ 101.455288][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.462784][ T2333] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.470183][ T2333] bridge_slave_0: entered allmulticast mode [ 101.477172][ T2333] bridge_slave_0: entered promiscuous mode [ 101.484470][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.491626][ T2333] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.499995][ T2333] bridge_slave_1: entered allmulticast mode [ 101.502777][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 101.506989][ T2333] bridge_slave_1: entered promiscuous mode [ 101.514017][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.527247][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.539018][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.548680][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 101.565235][ T45] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 101.573540][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.582139][ T2333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.582732][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.589710][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.598148][ T45] usb 3-1: Product: syz [ 101.605450][ T2333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.609973][ T45] usb 3-1: Manufacturer: syz [ 101.622776][ T45] usb 3-1: SerialNumber: syz [ 101.637971][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.646448][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.658139][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.665977][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.675231][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.682550][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.715274][ T2333] veth0_vlan: entered promiscuous mode [ 101.730516][ T2333] veth1_macvtap: entered promiscuous mode [ 101.794336][ T2344] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 101.822749][ T308] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 101.829500][ T308] usb 4-1: No valid video chain found. [ 101.845228][ T2350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.854754][ T2350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.895184][ T45] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.902240][ T45] usb 3-1: unit 2 not found! [ 101.907095][ T45] usb 3-1: unit 1 not found! [ 101.918380][ T36] audit: type=1400 audit(1774515273.166:101577): avc: denied { wake_alarm } for pid=2356 comm="syz.0.659" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.941165][ T45] usb 3-1: USB disconnect, device number 57 [ 102.033203][ T66] usb 4-1: USB disconnect, device number 54 [ 102.092772][ T308] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 102.252781][ T308] usb 5-1: Using ep0 maxpacket: 32 [ 102.259699][ T308] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.268555][ T308] usb 5-1: config 0 has no interface number 0 [ 102.274875][ T308] usb 5-1: config 0 interface 184 has no altsetting 0 [ 102.283759][ T308] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 102.293380][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.301563][ T308] usb 5-1: Product: syz [ 102.305975][ T308] usb 5-1: Manufacturer: syz [ 102.310787][ T308] usb 5-1: SerialNumber: syz [ 102.316388][ T308] usb 5-1: config 0 descriptor?? [ 102.322314][ T308] smsc75xx v1.0.0 [ 102.435897][ T36] audit: type=1400 audit(1774515273.686:101578): avc: denied { ioctl } for pid=2362 comm="syz.2.661" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.437233][ T2363] syz.2.661 (2363) used obsolete PPPIOCDETACH ioctl [ 102.518488][ T36] audit: type=1400 audit(1774515273.766:101579): avc: denied { map } for pid=2375 comm="syz.0.665" path="socket:[16062]" dev="sockfs" ino=16062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.543572][ T36] audit: type=1400 audit(1774515273.766:101580): avc: denied { read } for pid=2375 comm="syz.0.665" path="socket:[16062]" dev="sockfs" ino=16062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.629262][ T2394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 102.639322][ T2395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 102.642334][ T2390] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 102.649264][ T2393] fuse: Unknown parameter 'f' [ 102.661958][ T2393] fuse: Unknown parameter '1844674407370955161500000000000000000008' [ 102.677187][ T308] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 102.687690][ T308] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 102.701670][ T308] usb 5-1: USB disconnect, device number 22 [ 102.716315][ T36] audit: type=1400 audit(1774515273.966:101581): avc: denied { getopt } for pid=2404 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.197024][ T2412] netlink: 164 bytes leftover after parsing attributes in process `syz.4.679'. [ 103.360822][ T2425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.683'. [ 103.381522][ T2433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 103.414750][ T2433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.502798][ T45] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 103.652731][ T45] usb 5-1: device descriptor read/64, error -71 [ 103.852719][ T308] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 103.892789][ T45] usb 5-1: device descriptor read/64, error -71 [ 104.003956][ T308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.015812][ T308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 15730, setting to 64 [ 104.027947][ T308] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 104.037041][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.045505][ T308] usb 4-1: SerialNumber: syz [ 104.051163][ T2471] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.132746][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 104.259424][ T2471] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.266853][ T45] usb 5-1: device descriptor read/64, error -71 [ 104.470824][ T308] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 104.479590][ T308] usb-storage 4-1:1.0: USB Mass Storage device detected [ 104.489378][ T308] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 104.504368][ T308] scsi host1: usb-storage 4-1:1.0 [ 104.511197][ T308] usb 4-1: USB disconnect, device number 55 [ 104.522762][ T45] usb 5-1: device descriptor read/64, error -71 [ 104.568629][ T2485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'. [ 104.632914][ T45] usb usb5-port1: attempt power cycle [ 104.659953][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 104.659973][ T36] audit: type=1400 audit(1774515275.906:101584): avc: denied { create } for pid=2486 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.686690][ T36] audit: type=1400 audit(1774515275.906:101585): avc: denied { ioctl } for pid=2486 comm="syz.2.703" path="socket:[17460]" dev="sockfs" ino=17460 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.002754][ T45] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 105.023925][ T45] usb 5-1: device descriptor read/8, error -71 [ 105.154336][ T45] usb 5-1: device descriptor read/8, error -71 [ 105.392752][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 105.413925][ T45] usb 5-1: device descriptor read/8, error -71 [ 105.502742][ T308] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 105.544955][ T45] usb 5-1: device descriptor read/8, error -71 [ 105.652853][ T45] usb usb5-port1: unable to enumerate USB device [ 105.653074][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 105.792828][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 105.800641][ T308] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 105.952804][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 105.958347][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 105.963761][ T308] usb usb4-port1: attempt power cycle [ 105.970896][ T9] usb 3-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 105.982287][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 105.993989][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.009598][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 106.019970][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.028815][ T9] usb 3-1: Product: syz [ 106.033889][ T9] usb 3-1: Manufacturer: syz [ 106.038959][ T9] usb 3-1: SerialNumber: syz [ 106.300752][ T9] usb 3-1: USB disconnect, device number 58 [ 106.312866][ T308] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 106.333342][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 106.362692][ T36] audit: type=1400 audit(1774515277.606:101586): avc: denied { read } for pid=2541 comm="syz.2.724" name="/" dev="configfs" ino=2464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.385820][ T36] audit: type=1400 audit(1774515277.606:101587): avc: denied { open } for pid=2541 comm="syz.2.724" path="/" dev="configfs" ino=2464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.482835][ T308] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 106.503215][ T308] usb 4-1: Invalid ep0 maxpacket: 32 [ 106.508759][ T308] usb usb4-port1: unable to enumerate USB device [ 106.672836][ T359] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 106.722803][ T45] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 106.822707][ T359] usb 5-1: Using ep0 maxpacket: 8 [ 106.829139][ T359] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 106.837692][ T359] usb 5-1: config 0 has no interface number 1 [ 106.843818][ T359] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.855648][ T359] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 106.867782][ T359] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 106.879489][ T359] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 106.890086][ T359] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.892733][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 106.903349][ T359] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 106.903383][ T359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 106.910490][ T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.920968][ T359] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 106.922391][ T359] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 106.932482][ T45] usb 3-1: config 0 has no interface number 0 [ 106.940996][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.951898][ T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.961249][ T359] usb 5-1: Product: syz [ 106.967978][ T45] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.977351][ T359] usb 5-1: Manufacturer: syz [ 106.989457][ T45] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 106.994301][ T359] usb 5-1: SerialNumber: syz [ 107.004944][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.011102][ T359] usb 5-1: config 0 descriptor?? [ 107.023415][ T45] usb 3-1: config 0 descriptor?? [ 107.025685][ T2540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.265868][ T66] usb 5-1: USB disconnect, device number 27 [ 107.438338][ T45] uclogic 0003:28BD:0094.000E: pen parameters not found [ 107.445729][ T45] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 107.784274][ T36] audit: type=1400 audit(1774515279.036:101588): avc: denied { setopt } for pid=2571 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.022839][ T359] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 108.152912][ T359] usb 5-1: device descriptor read/64, error -71 [ 108.236745][ T36] audit: type=1400 audit(1774515279.486:101589): avc: denied { create } for pid=2579 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.274474][ T2582] __vm_enough_memory: pid: 2582, comm: syz.3.737, bytes: 11727330934784 not enough memory for the allocation [ 108.392750][ T359] usb 5-1: device descriptor read/64, error -71 [ 108.632754][ T359] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 108.662745][ T360] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 108.759077][ T2586] fuse: Unknown parameter 'fsuuid' [ 108.762788][ T359] usb 5-1: device descriptor read/64, error -71 [ 108.792737][ T360] usb 4-1: device descriptor read/64, error -71 [ 109.002703][ T359] usb 5-1: device descriptor read/64, error -71 [ 109.032764][ T360] usb 4-1: device descriptor read/64, error -71 [ 109.112853][ T359] usb usb5-port1: attempt power cycle [ 109.272729][ T360] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 109.274880][ T2588] netlink: 'syz.0.739': attribute type 28 has an invalid length. [ 109.297951][ T2590] netlink: 340 bytes leftover after parsing attributes in process `syz.0.740'. [ 109.402823][ T360] usb 4-1: device descriptor read/64, error -71 [ 109.452743][ T359] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 109.473951][ T359] usb 5-1: device descriptor read/8, error -71 [ 109.483558][ T45] usb 3-1: USB disconnect, device number 59 [ 109.499739][ T36] audit: type=1400 audit(1774515280.746:101590): avc: denied { lock } for pid=2593 comm="syz.2.742" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.527542][ T36] audit: type=1400 audit(1774515280.746:101591): avc: granted { setsecparam } for pid=2593 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 109.603707][ T359] usb 5-1: device descriptor read/8, error -71 [ 109.682747][ T360] usb 4-1: device descriptor read/64, error -71 [ 109.802784][ T360] usb usb4-port1: attempt power cycle [ 109.842716][ T359] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 109.864951][ T2609] tmpfs: Unknown parameter 'no' [ 109.873948][ T359] usb 5-1: device descriptor read/8, error -71 [ 110.004502][ T359] usb 5-1: device descriptor read/8, error -71 [ 110.094015][ T2629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 110.112936][ T359] usb usb5-port1: unable to enumerate USB device [ 110.142840][ T360] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 110.170039][ T36] audit: type=1400 audit(1774515281.416:101592): avc: denied { mount } for pid=2635 comm="syz.2.753" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.171100][ T2636] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.204357][ T360] usb 4-1: device descriptor read/8, error -71 [ 110.215179][ T2636] overlayfs: failed to look up (tracing) for ino (-66) [ 110.229401][ T36] audit: type=1400 audit(1774515281.486:101593): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.235278][ T2638] netlink: 'syz.2.754': attribute type 16 has an invalid length. [ 110.258842][ T2638] netlink: 'syz.2.754': attribute type 2 has an invalid length. [ 110.267435][ T2638] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 110.276186][ T2638] netlink: 51790 bytes leftover after parsing attributes in process `syz.2.754'. [ 110.286661][ T2639] netlink: 'syz.2.754': attribute type 16 has an invalid length. [ 110.296535][ T2639] netlink: 'syz.2.754': attribute type 2 has an invalid length. [ 110.304939][ T2639] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 110.313069][ T2639] netlink: 51790 bytes leftover after parsing attributes in process `syz.2.754'. [ 110.334342][ T360] usb 4-1: device descriptor read/8, error -71 [ 110.572834][ T360] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 110.593904][ T360] usb 4-1: device descriptor read/8, error -71 [ 110.724156][ T360] usb 4-1: device descriptor read/8, error -71 [ 110.796961][ T2644] netlink: 48 bytes leftover after parsing attributes in process `syz.4.756'. [ 110.803145][ T36] audit: type=1400 audit(1774515282.046:101594): avc: denied { nlmsg_read } for pid=2643 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.836884][ T360] usb usb4-port1: unable to enumerate USB device [ 110.845942][ T2651] netlink: 'syz.2.758': attribute type 4 has an invalid length. [ 110.855058][ T2651] netlink: 'syz.2.758': attribute type 27 has an invalid length. [ 110.863424][ T2651] netlink: 3609 bytes leftover after parsing attributes in process `syz.2.758'. [ 110.873727][ T2651] netlink: 8732 bytes leftover after parsing attributes in process `syz.2.758'. [ 110.912981][ T2659] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 110.924223][ T2659] SELinux: failed to load policy [ 111.314479][ T36] audit: type=1400 audit(1774515282.556:101595): avc: denied { append } for pid=2669 comm="syz.3.765" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.340912][ T2672] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 111.351145][ T2672] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 111.408950][ T36] audit: type=1400 audit(1774515282.656:101596): avc: denied { setattr } for pid=2679 comm="syz.2.767" name="NETLINK" dev="sockfs" ino=18048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.435778][ T36] audit: type=1400 audit(1774515282.666:101597): avc: denied { bind } for pid=2683 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.488380][ T36] audit: type=1400 audit(1774515282.736:101598): avc: denied { read append } for pid=2669 comm="syz.3.765" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 111.489058][ T2674] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 111.512334][ T36] audit: type=1400 audit(1774515282.766:101599): avc: denied { open } for pid=2669 comm="syz.3.765" path="/148/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 111.523271][ T2674] SELinux: failed to load policy [ 111.682845][ T63] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 111.691523][ T36] audit: type=1326 audit(1774515282.936:101600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2690 comm="syz.4.770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x0 [ 111.701805][ T2695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.723987][ T2695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.852757][ T360] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 111.872741][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 111.879545][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.888753][ T63] usb 3-1: config 4 has an invalid interface number: 103 but max is 0 [ 111.897801][ T63] usb 3-1: config 4 has no interface number 0 [ 111.906219][ T63] usb 3-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=46.e1 [ 111.916094][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.924809][ T63] usb 3-1: Product: syz [ 111.929152][ T63] usb 3-1: Manufacturer: syz [ 111.934286][ T63] usb 3-1: SerialNumber: syz [ 111.942842][ T66] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 112.002701][ T360] usb 4-1: Using ep0 maxpacket: 32 [ 112.009797][ T360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.023407][ T360] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 35, changing to 9 [ 112.042687][ T360] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.057853][ T360] usb 4-1: config 1 interface 0 has no altsetting 0 [ 112.074417][ T360] usb 4-1: string descriptor 0 read error: -22 [ 112.080861][ T360] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.40 [ 112.090723][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.106562][ T66] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.115117][ T66] usb 5-1: not running at top speed; connect to a high speed hub [ 112.124222][ T66] usb 5-1: config 0 has no interfaces? [ 112.131948][ T66] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 112.142580][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.149340][ T2684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.152759][ T66] usb 5-1: Product: syz [ 112.161121][ T2684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.165721][ T66] usb 5-1: Manufacturer: syz [ 112.179326][ T66] usb 5-1: SerialNumber: syz [ 112.183577][ T63] usb 3-1: bad CDC descriptors [ 112.185490][ T66] usb 5-1: config 0 descriptor?? [ 112.192801][ T63] usb 3-1: USB disconnect, device number 60 [ 112.304480][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.314058][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.322965][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.332012][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.341434][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.350832][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.359879][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.369295][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.377927][ T2689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.388693][ T2689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.397953][ T66] usb 5-1: USB disconnect, device number 32 [ 112.408804][ T360] usbhid 4-1:1.0: can't add hid device: -71 [ 112.415827][ T360] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 112.425584][ T360] usb 4-1: USB disconnect, device number 64 [ 112.458408][ T2710] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.467809][ T2710] bridge_slave_0 (unregistering): left allmulticast mode [ 112.475664][ T2710] bridge_slave_0 (unregistering): left promiscuous mode [ 112.483523][ T2710] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.510040][ T36] audit: type=1400 audit(1774515283.756:101601): avc: denied { link } for pid=2709 comm="syz.3.775" name="#11" dev="tmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.892740][ T360] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 112.952710][ T63] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 113.022785][ T360] usb 4-1: device descriptor read/64, error -71 [ 113.104534][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.114756][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 86, changing to 7 [ 113.127785][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9231, setting to 1024 [ 113.140929][ T63] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.151108][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.159503][ T63] usb 3-1: Product: syz [ 113.164002][ T63] usb 3-1: Manufacturer: syz [ 113.168855][ T63] usb 3-1: SerialNumber: syz [ 113.174166][ T63] usb 3-1: config 0 descriptor?? [ 113.180458][ T63] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 41, bLength 9, bSynchAddress c3 [ 113.192767][ T66] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 113.272701][ T360] usb 4-1: device descriptor read/64, error -71 [ 113.344004][ T66] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.352756][ T66] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.363398][ T66] usb 5-1: config 220 has no interface number 2 [ 113.369862][ T66] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.383396][ T66] usb 5-1: config 220 interface 0 has no altsetting 0 [ 113.384403][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.390390][ T66] usb 5-1: config 220 interface 76 has no altsetting 0 [ 113.408133][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.412563][ T66] usb 5-1: config 220 interface 1 has no altsetting 0 [ 113.424276][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.433656][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.442478][ T66] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.445933][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.452299][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.470253][ T66] usb 5-1: Product: syz [ 113.474743][ T66] usb 5-1: Manufacturer: syz [ 113.479435][ T66] usb 5-1: SerialNumber: syz [ 113.486185][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.495577][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.506171][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.515466][ T2724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.524569][ T2724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.532766][ T360] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 113.545916][ T63] usb 3-1: USB disconnect, device number 61 [ 113.672790][ T360] usb 4-1: device descriptor read/64, error -71 [ 113.688489][ T66] usb 5-1: selecting invalid altsetting 0 [ 113.694730][ T66] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 113.701295][ T66] usb 5-1: No valid video chain found. [ 113.710391][ T66] usb 5-1: USB disconnect, device number 33 [ 113.912746][ T360] usb 4-1: device descriptor read/64, error -71 [ 114.023485][ T360] usb usb4-port1: attempt power cycle [ 114.151051][ T2778] tmpfs: Bad value for 'nr_inodes' [ 114.196714][ T2789] netlink: 240 bytes leftover after parsing attributes in process `syz.4.801'. [ 114.312810][ T63] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 114.362761][ T360] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 114.384077][ T360] usb 4-1: device descriptor read/8, error -71 [ 114.442794][ T66] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 114.462753][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 114.469411][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.480198][ T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.490855][ T63] usb 3-1: New USB device found, idVendor=154e, idProduct=700e, bcdDevice=10.40 [ 114.500122][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.508328][ T63] usb 3-1: Product: syz [ 114.512818][ T63] usb 3-1: Manufacturer: syz [ 114.517442][ T63] usb 3-1: SerialNumber: syz [ 114.522724][ T360] usb 4-1: device descriptor read/8, error -71 [ 114.603902][ T66] usb 5-1: config 0 has no interfaces? [ 114.609527][ T66] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.619024][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.627843][ T66] usb 5-1: config 0 descriptor?? [ 114.685243][ T2791] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 114.712127][ T2797] netlink: 204 bytes leftover after parsing attributes in process `syz.0.804'. [ 114.732405][ T63] usb 3-1: unknown interface protocol 0x32, assuming v1 [ 114.733636][ T2801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 114.740530][ T63] usb 3-1: skipping empty audio interface (v1) [ 114.758072][ T63] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.767506][ T360] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 114.778936][ T63] usb 3-1: USB disconnect, device number 62 [ 114.789574][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.824303][ T360] usb 4-1: device descriptor read/8, error -71 [ 114.835150][ T308] usb 5-1: USB disconnect, device number 34 [ 114.953870][ T360] usb 4-1: device descriptor read/8, error -71 [ 115.062986][ T360] usb usb4-port1: unable to enumerate USB device [ 115.272779][ T45] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 115.325432][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 115.325448][ T36] audit: type=1400 audit(1774515286.576:101605): avc: denied { bind } for pid=2814 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.434745][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.443593][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 115.455057][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 115.468994][ T45] usb 5-1: string descriptor 0 read error: -22 [ 115.476034][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 115.485600][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.562742][ T66] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 115.695575][ T45] usb 5-1: Can't get UAC3 power state for id 10 [ 115.712705][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 115.718941][ T66] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.727627][ T66] usb 3-1: config 0 has no interface number 0 [ 115.734032][ T66] usb 3-1: config 0 interface 184 has no altsetting 0 [ 115.742475][ T66] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.751692][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.760349][ T66] usb 3-1: Product: syz [ 115.764662][ T66] usb 3-1: Manufacturer: syz [ 115.769458][ T66] usb 3-1: SerialNumber: syz [ 115.775256][ T66] usb 3-1: config 0 descriptor?? [ 115.781122][ T66] smsc75xx v1.0.0 [ 116.202774][ T31] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 116.304119][ T45] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 116.332718][ T31] usb 4-1: device descriptor read/64, error -71 [ 116.383922][ T66] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 116.395068][ T66] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 116.404972][ T66] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 116.415471][ T66] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 116.573223][ T31] usb 4-1: device descriptor read/64, error -71 [ 116.812777][ T31] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 116.942696][ T31] usb 4-1: device descriptor read/64, error -71 [ 117.182709][ T31] usb 4-1: device descriptor read/64, error -71 [ 117.292866][ T31] usb usb4-port1: attempt power cycle [ 117.533835][ T360] usb 5-1: USB disconnect, device number 35 [ 117.632846][ T31] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 117.653970][ T31] usb 4-1: device descriptor read/8, error -71 [ 117.663385][ T2877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2877 comm=syz.0.832 [ 117.757472][ T2892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.765371][ T2892] IPv6: NLM_F_CREATE should be set when creating new route [ 117.772816][ T2892] IPv6: NLM_F_CREATE should be set when creating new route [ 117.783836][ T31] usb 4-1: device descriptor read/8, error -71 [ 118.022735][ T31] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 118.055086][ T31] usb 4-1: device descriptor read/8, error -71 [ 118.059527][ T36] audit: type=1400 audit(1774515289.306:101606): avc: denied { read } for pid=2909 comm="syz.4.844" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.086194][ T36] audit: type=1400 audit(1774515289.306:101607): avc: denied { open } for pid=2909 comm="syz.4.844" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.110727][ T36] audit: type=1400 audit(1774515289.316:101608): avc: denied { ioctl } for pid=2909 comm="syz.4.844" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.183651][ T31] usb 4-1: device descriptor read/8, error -71 [ 118.191352][ T2921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.238187][ T2921] kvm: pic: non byte write [ 118.302846][ T31] usb usb4-port1: unable to enumerate USB device [ 118.337059][ T360] usb 3-1: USB disconnect, device number 63 [ 118.393227][ T2930] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.850'. [ 118.403523][ T2933] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.850'. [ 118.652732][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 118.732719][ T360] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 118.814374][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.823027][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.833524][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.844585][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.854501][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.862987][ T31] usb 5-1: Product: syz [ 118.867256][ T31] usb 5-1: Manufacturer: syz [ 118.871963][ T31] usb 5-1: SerialNumber: syz [ 118.892747][ T360] usb 3-1: device descriptor read/64, error -71 [ 119.082622][ T2934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.091457][ T2934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.103409][ T31] usb 5-1: 0:1 : does not exist [ 119.108400][ T31] usb 5-1: 0:2 : does not exist [ 119.116176][ T31] usb 5-1: 2:0: failed to get current value for ch 1 (-22) [ 119.129174][ T31] usb 5-1: 2:0: failed to get current value for ch 0 (-22) [ 119.132748][ T360] usb 3-1: device descriptor read/64, error -71 [ 119.142041][ T31] usb 5-1: 2:0: cannot get min/max values for control 3 (id 2) [ 119.156327][ T31] usb 5-1: 2:0: cannot get min/max values for control 4 (id 2) [ 119.166674][ T31] usb 5-1: 2:0: failed to get current value for ch 1 (-22) [ 119.177961][ T31] usb 5-1: 2:0: cannot get min/max values for control 8 (id 2) [ 119.187785][ T31] usb 5-1: 2:0: failed to get current value for ch 1 (-22) [ 119.199442][ T31] usb 5-1: USB disconnect, device number 36 [ 119.402766][ T360] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 119.483706][ T2946] cgroup: fork rejected by pids controller in /syz0 [ 119.542717][ T360] usb 3-1: device descriptor read/64, error -71 [ 119.785922][ T360] usb 3-1: device descriptor read/64, error -71 [ 119.838643][ T3004] rust_binder: 78: no such ref 3 [ 119.843857][ T3004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 119.844278][ T3004] rust_binder: Write failure EINVAL in pid:78 [ 119.893234][ T360] usb usb3-port1: attempt power cycle [ 120.172770][ T31] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 120.252812][ T360] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 120.273901][ T360] usb 3-1: device descriptor read/8, error -71 [ 120.322769][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 120.332238][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.343322][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.355152][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.364695][ T31] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 120.373842][ T31] usb 5-1: Product: syz [ 120.378295][ T31] usb 5-1: Manufacturer: syz [ 120.386782][ T31] hub 5-1:4.0: USB hub found [ 120.586644][ T31] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 120.623948][ T360] usb 3-1: device descriptor read/8, error -71 [ 120.711917][ T3036] netlink: 56 bytes leftover after parsing attributes in process `syz.3.864'. [ 120.872785][ T360] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 120.893809][ T360] usb 3-1: device descriptor read/8, error -71 [ 120.972753][ T31] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 121.023991][ T360] usb 3-1: device descriptor read/8, error -71 [ 121.042945][ T564] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 121.051442][ T564] usb 5-1: device reset changed ep0 maxpacket size! [ 121.059127][ T564] usb 5-1: USB disconnect, device number 37 [ 121.124133][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.132522][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 121.134187][ T360] usb usb3-port1: unable to enumerate USB device [ 121.141794][ T31] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 121.159410][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 121.170654][ T31] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 121.180453][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.188722][ T31] usb 4-1: Product: syz [ 121.193059][ T31] usb 4-1: Manufacturer: syz [ 121.197829][ T31] usb 4-1: SerialNumber: syz [ 121.203584][ T3040] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 121.231025][ T3052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 121.250293][ T36] audit: type=1400 audit(1774515292.496:101609): avc: denied { setopt } for pid=3054 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.369247][ T564] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 121.432982][ T3040] netlink: 'syz.3.865': attribute type 153 has an invalid length. [ 121.454064][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 121.460177][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 121.476024][ T31] usb 4-1: USB disconnect, device number 73 [ 121.505048][ T36] audit: type=1400 audit(1774515292.756:101610): avc: denied { ioctl } for pid=3067 comm="syz.2.874" path="socket:[19375]" dev="sockfs" ino=19375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.552780][ T564] usb 5-1: Using ep0 maxpacket: 8 [ 121.559638][ T564] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.569339][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 121.580632][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.590316][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 121.602144][ T564] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 121.612372][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 121.622246][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.632963][ T564] usb 5-1: language id specifier not provided by device, defaulting to English [ 121.643608][ T564] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 121.653070][ T564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.661416][ T564] usb 5-1: Product: syz [ 121.665914][ T564] usb 5-1: Manufacturer: syz [ 121.670605][ T564] usb 5-1: SerialNumber: syz [ 121.676564][ T564] usb 5-1: config 0 descriptor?? [ 121.682120][ T3049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.698802][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.782779][ T360] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 121.880617][ T36] audit: type=1400 audit(1774515293.126:101611): avc: denied { read } for pid=3073 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.902962][ T63] usb 5-1: USB disconnect, device number 38 [ 121.934036][ T360] usb 3-1: config 0 has no interfaces? [ 121.939716][ T360] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.949239][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.957903][ T360] usb 3-1: config 0 descriptor?? [ 122.164824][ T31] usb 3-1: USB disconnect, device number 68 [ 122.202735][ T63] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 122.272745][ T564] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 122.332757][ T63] usb 5-1: device descriptor read/64, error -71 [ 122.422766][ T564] usb 4-1: Using ep0 maxpacket: 32 [ 122.429235][ T564] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 122.437590][ T564] usb 4-1: config 0 has no interface number 0 [ 122.443826][ T564] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 122.456266][ T564] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 122.465578][ T564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.474002][ T564] usb 4-1: Product: syz [ 122.478297][ T564] usb 4-1: Manufacturer: syz [ 122.483026][ T564] usb 4-1: SerialNumber: syz [ 122.488303][ T564] usb 4-1: config 0 descriptor?? [ 122.493861][ T3082] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 122.582730][ T63] usb 5-1: device descriptor read/64, error -71 [ 122.613008][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 122.702607][ T3082] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 122.763991][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.773493][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 122.784816][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 122.798578][ T31] usb 3-1: string descriptor 0 read error: -22 [ 122.805081][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 122.814553][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.832756][ T63] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 122.962722][ T63] usb 5-1: device descriptor read/64, error -71 [ 123.024841][ T31] usb 3-1: Can't get UAC3 power state for id 10 [ 123.036983][ T31] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 123.054035][ T31] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 123.072805][ T31] usb 3-1: USB disconnect, device number 69 [ 123.202722][ T63] usb 5-1: device descriptor read/64, error -71 [ 123.312837][ T63] usb usb5-port1: attempt power cycle [ 123.372781][ T31] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 123.524042][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.533413][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.543801][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.554684][ T31] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 123.565329][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.574223][ T31] usb 3-1: Product: syz [ 123.578406][ T31] usb 3-1: Manufacturer: syz [ 123.583144][ T31] usb 3-1: SerialNumber: syz [ 123.652757][ T63] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 123.673917][ T63] usb 5-1: device descriptor read/8, error -71 [ 123.797780][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.803733][ T63] usb 5-1: device descriptor read/8, error -71 [ 123.810814][ T31] usb 3-1: USB disconnect, device number 70 [ 123.832084][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.119083][ T3082] syzkaller1: entered promiscuous mode [ 124.125006][ T3082] syzkaller1: entered allmulticast mode [ 124.183601][ T564] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 124.195246][ T564] asix 4-1:0.188: probe with driver asix failed with error -71 [ 124.203889][ T564] usb 4-1: USB disconnect, device number 74 [ 124.312404][ T3097] tipc: Enabling of bearer rejected, failed to enable media [ 124.312720][ T36] audit: type=1400 audit(1774515295.566:101612): avc: denied { create } for pid=3096 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.342172][ T3099] overlayfs: overlapping lowerdir path [ 124.622764][ T564] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 124.716486][ T36] audit: type=1400 audit(1774515295.966:101613): avc: denied { setopt } for pid=3111 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.772931][ T564] usb 3-1: Using ep0 maxpacket: 16 [ 124.780910][ T564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.793586][ T564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.806781][ T36] audit: type=1326 audit(1774515296.056:101614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3111 comm="syz.4.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7fc00000 [ 124.830972][ T564] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.844051][ T36] audit: type=1400 audit(1774515296.066:101615): avc: denied { append } for pid=3115 comm="syz.4.892" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.868894][ T564] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 124.878180][ T564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.887020][ T564] usb 3-1: config 0 descriptor?? [ 124.923437][ T36] audit: type=1400 audit(1774515296.176:101616): avc: denied { mounton } for pid=3127 comm="syz.0.898" path="/398/file0" dev="tmpfs" ino=2154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 124.971357][ T36] audit: type=1400 audit(1774515296.216:101617): avc: denied { read } for pid=3133 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.991628][ T31] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 125.000161][ T36] audit: type=1400 audit(1774515296.236:101618): avc: denied { create } for pid=3133 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 125.093371][ T3106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.102157][ T3106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.111260][ T564] usbhid 3-1:0.0: can't add hid device: -71 [ 125.118230][ T564] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 125.128465][ T564] usb 3-1: USB disconnect, device number 71 [ 125.144438][ T31] usb 4-1: config 7 has an invalid interface number: 130 but max is 2 [ 125.152836][ T63] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 125.153836][ T31] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 125.171032][ T31] usb 4-1: config 7 has an invalid interface number: 11 but max is 2 [ 125.180235][ T31] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 125.189560][ T31] usb 4-1: config 7 has an invalid interface number: 239 but max is 2 [ 125.198297][ T31] usb 4-1: config 7 has an invalid interface number: 170 but max is 2 [ 125.207232][ T31] usb 4-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 125.217192][ T31] usb 4-1: config 7 has no interface number 0 [ 125.223649][ T31] usb 4-1: config 7 has no interface number 1 [ 125.229980][ T31] usb 4-1: config 7 has no interface number 2 [ 125.236338][ T31] usb 4-1: config 7 has no interface number 3 [ 125.242528][ T31] usb 4-1: config 7 interface 130 altsetting 14 endpoint 0x2 has invalid maxpacket 943, setting to 64 [ 125.254242][ T31] usb 4-1: config 7 interface 130 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 125.265387][ T31] usb 4-1: config 7 interface 130 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 125.276537][ T31] usb 4-1: config 7 interface 130 altsetting 14 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 125.287702][ T31] usb 4-1: config 7 interface 130 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 125.299317][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 125.310280][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 125.321296][ T31] usb 4-1: config 7 interface 11 altsetting 3 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 125.332798][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 125.343863][ T63] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 125.343976][ T31] usb 4-1: config 7 interface 11 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 125.352556][ T63] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 125.363953][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 125.373427][ T63] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 125.383714][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 125.383741][ T31] usb 4-1: config 7 interface 11 altsetting 3 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 125.394757][ T63] usb 5-1: config 220 has no interface number 2 [ 125.406077][ T31] usb 4-1: config 7 interface 11 altsetting 3 endpoint 0x82 has an invalid bInterval 84, changing to 4 [ 125.417968][ T63] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 125.424495][ T31] usb 4-1: config 7 interface 11 altsetting 3 endpoint 0x82 has invalid maxpacket 48726, setting to 1023 [ 125.435826][ T63] usb 5-1: config 220 interface 0 has no altsetting 0 [ 125.449152][ T31] usb 4-1: config 7 interface 11 altsetting 3 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 125.461434][ T63] usb 5-1: config 220 interface 76 has no altsetting 0 [ 125.468388][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0x86, skipping [ 125.481564][ T63] usb 5-1: config 220 interface 1 has no altsetting 0 [ 125.487660][ T31] usb 4-1: config 7 interface 11 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 125.500410][ T63] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 125.505734][ T31] usb 4-1: config 7 interface 11 altsetting 3 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 125.516511][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.526283][ T31] usb 4-1: config 7 interface 239 altsetting 91 has a duplicate endpoint with address 0x4, skipping [ 125.539627][ T63] usb 5-1: Product: syz [ 125.547831][ T31] usb 4-1: config 7 interface 239 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 125.559558][ T63] usb 5-1: Manufacturer: syz [ 125.563907][ T31] usb 4-1: config 7 interface 239 altsetting 91 has a duplicate endpoint with address 0xD, skipping [ 125.582587][ T63] usb 5-1: SerialNumber: syz [ 125.592014][ T31] usb 4-1: config 7 interface 239 altsetting 91 has a duplicate endpoint with address 0xD, skipping [ 125.609698][ T31] usb 4-1: config 7 interface 239 altsetting 91 has a duplicate endpoint with address 0xD, skipping [ 125.621575][ T31] usb 4-1: config 7 interface 239 altsetting 91 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 125.635615][ T31] usb 4-1: too many endpoints for config 7 interface 170 altsetting 241: 80, using maximum allowed: 30 [ 125.651659][ T31] usb 4-1: config 7 interface 170 altsetting 241 has a duplicate endpoint with address 0xA, skipping [ 125.667889][ T31] usb 4-1: config 7 interface 170 altsetting 241 has an invalid descriptor for endpoint zero, skipping [ 125.680720][ T31] usb 4-1: config 7 interface 170 altsetting 241 has a duplicate endpoint with address 0xF, skipping [ 125.683398][ T3140] netlink: 165 bytes leftover after parsing attributes in process `syz.0.903'. [ 125.699572][ T31] usb 4-1: config 7 interface 170 altsetting 241 has an invalid descriptor for endpoint zero, skipping [ 125.714659][ T31] usb 4-1: config 7 interface 170 altsetting 241 has 6 endpoint descriptors, different from the interface descriptor's value: 80 [ 125.728722][ T31] usb 4-1: config 7 interface 130 has no altsetting 0 [ 125.736344][ T31] usb 4-1: config 7 interface 11 has no altsetting 0 [ 125.743533][ T31] usb 4-1: config 7 interface 239 has no altsetting 0 [ 125.754721][ T31] usb 4-1: config 7 interface 170 has no altsetting 0 [ 125.763739][ T31] usb 4-1: New USB device found, idVendor=0af0, idProduct=7501, bcdDevice=6f.1a [ 125.774648][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.783371][ T31] usb 4-1: Product: 蜀釈䎜䯵溷縹阼⣣㬌టʌ붿ڒ㸴礻§嫹ꛪ럨멓ꝑ놗貜웲蚷藅Ꙏ딬稧ଝ恚௳瘝㸤桑痵༠棲鯎畤텮 [ 125.799346][ T31] usb 4-1: Manufacturer: Н [ 125.804178][ T31] usb 4-1: SerialNumber: syz [ 125.811213][ T3110] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.822205][ T63] usb 5-1: selecting invalid altsetting 0 [ 125.828344][ T63] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 125.835044][ T63] usb 5-1: No valid video chain found. [ 125.845286][ T63] usb 5-1: USB disconnect, device number 43 [ 126.052725][ T66] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 126.202715][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 126.211641][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.224217][ T66] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 126.233671][ T66] usb 3-1: can't read configurations, error -71 [ 126.251529][ T31] usb 4-1: USB disconnect, device number 75 [ 126.451528][ T3153] netlink: 108 bytes leftover after parsing attributes in process `syz.4.908'. [ 126.462290][ T3153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 126.572164][ T3156] veth1_to_bond: entered allmulticast mode [ 126.578328][ T3156] veth1_to_bond: left allmulticast mode [ 126.606971][ T36] audit: type=1400 audit(1774515297.856:101619): avc: denied { read write } for pid=3159 comm="syz.4.911" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.633229][ T36] audit: type=1400 audit(1774515297.856:101620): avc: denied { open } for pid=3159 comm="syz.4.911" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.659066][ T36] audit: type=1400 audit(1774515297.916:101621): avc: denied { ioctl } for pid=3159 comm="syz.4.911" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.022883][ T63] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 127.052759][ T45] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 127.172699][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 127.178984][ T63] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.189511][ T63] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.199685][ T63] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.208966][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.217252][ T63] usb 4-1: Product: syz [ 127.221621][ T63] usb 4-1: Manufacturer: syz [ 127.224222][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.226457][ T63] usb 4-1: SerialNumber: syz [ 127.235652][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 127.250858][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 127.263918][ T45] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 127.273479][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.282263][ T45] usb 5-1: Product: syz [ 127.286904][ T45] usb 5-1: Manufacturer: syz [ 127.291601][ T45] usb 5-1: SerialNumber: syz [ 127.296570][ T66] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 127.452710][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 127.459977][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.470304][ T66] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 127.480082][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.488299][ T66] usb 3-1: Product: syz [ 127.492562][ T66] usb 3-1: Manufacturer: syz [ 127.497333][ T66] usb 3-1: SerialNumber: syz [ 127.509515][ T3173] 9pnet_fd: Insufficient options for proto=fd [ 127.537622][ T36] audit: type=1400 audit(1774515298.786:101622): avc: denied { ioctl } for pid=3194 comm="syz.4.925" path="socket:[20097]" dev="sockfs" ino=20097 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.653216][ T63] usb 4-1: cannot find UAC_HEADER [ 127.660661][ T63] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.677153][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.682751][ T45] usb 5-1: Can't get UAC3 power state for id 10 [ 127.702405][ T45] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 127.714229][ T45] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 127.736941][ T66] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.752411][ T45] usb 5-1: USB disconnect, device number 44 [ 127.767544][ T66] usb 3-1: unit 7 not found! [ 127.782574][ T66] usb 3-1: USB disconnect, device number 73 [ 127.858425][ T3169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.867740][ T3169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.879607][ T3169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.890666][ T3169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.946070][ T360] usb 4-1: USB disconnect, device number 76 [ 128.206448][ T3212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3212 comm=syz.4.930 [ 128.281227][ T36] audit: type=1400 audit(1774515299.526:101623): avc: denied { write } for pid=3222 comm="syz.2.934" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.282607][ T360] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 128.314114][ T360] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.667068][ T3258] netlink: 'syz.4.947': attribute type 4 has an invalid length. [ 138.674989][ T3258] netlink: 'syz.4.947': attribute type 2 has an invalid length. [ 138.704176][ T36] audit: type=1400 audit(1774515309.956:101624): avc: denied { getopt } for pid=3262 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.725478][ T36] audit: type=1400 audit(1774515309.966:101625): avc: denied { audit_write } for pid=3262 comm="syz.4.949" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.862764][ T45] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 138.972781][ T31] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 139.012756][ T359] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 139.014256][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.029228][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 139.038235][ T45] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 139.049742][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 139.058378][ T45] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 139.068023][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.076322][ T45] usb 3-1: Product: syz [ 139.080493][ T45] usb 3-1: Manufacturer: syz [ 139.085329][ T45] usb 3-1: SerialNumber: syz [ 139.090931][ T3244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.135042][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.144239][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 139.157200][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 139.170763][ T31] usb 5-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 139.178201][ T3272] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 139.180601][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.189116][ T359] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.196835][ T31] usb 5-1: Product: syz [ 139.209942][ T359] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 139.213272][ T31] usb 5-1: Manufacturer: syz [ 139.225403][ T359] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.231151][ T31] usb 5-1: SerialNumber: syz [ 139.241173][ T3273] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 139.254130][ T359] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 139.264894][ T359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.293770][ T3275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 139.311594][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 139.322984][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 139.341107][ T45] usb 3-1: USB disconnect, device number 74 [ 139.450402][ T31] usb 5-1: Can't get UAC3 power state for id 10 [ 139.463193][ T31] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 139.474400][ T31] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 139.477451][ T3268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.486154][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 139.491200][ T3268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.514802][ T31] usb 5-1: USB disconnect, device number 45 [ 139.520322][ T3268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.530697][ T3251] udevd[3251]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.531733][ T3268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.561268][ T3268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.570411][ T3268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.579249][ T359] usb 4-1: string descriptor 0 read error: -71 [ 139.585919][ T359] hub 4-1:32.0: USB hub found [ 139.592301][ T359] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 139.623826][ T359] usb 4-1: USB disconnect, device number 77 [ 139.868887][ T3283] netlink: 'syz.0.957': attribute type 21 has an invalid length. [ 139.876683][ T3283] netlink: 388 bytes leftover after parsing attributes in process `syz.0.957'. [ 139.950260][ T3296] netlink: 'syz.0.962': attribute type 27 has an invalid length. [ 139.962309][ T3296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=3296 comm=syz.0.962 [ 140.017368][ T3303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 140.026990][ T36] audit: type=1400 audit(1774515311.266:101626): avc: denied { name_bind } for pid=3307 comm="syz.0.965" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 140.068299][ T3312] binder: Bad value for 'stats' [ 140.130038][ T36] audit: type=1400 audit(1774515311.376:101627): avc: denied { setcheckreqprot } for pid=3319 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.158007][ T36] audit: type=1400 audit(1774515311.376:101628): avc: denied { write } for pid=3322 comm="syz.3.972" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.184378][ T36] audit: type=1326 audit(1774515311.376:101629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3323 comm="syz.2.973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe58379c799 code=0x0 [ 140.383052][ T36] audit: type=1326 audit(1774515311.636:101630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 140.409011][ T36] audit: type=1326 audit(1774515311.636:101631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 140.434143][ T36] audit: type=1326 audit(1774515311.636:101632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 140.458921][ T36] audit: type=1326 audit(1774515311.636:101633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 140.498517][ T66] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 140.622756][ T359] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 140.662720][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 140.669260][ T66] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.679953][ T66] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.691243][ T66] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.702063][ T66] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.716001][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.724415][ T66] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 140.733756][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.742301][ T66] usb 4-1: config 0 descriptor?? [ 140.752744][ T359] usb 5-1: device descriptor read/64, error -71 [ 140.954398][ T3358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 140.966890][ T3358] netlink: 84 bytes leftover after parsing attributes in process `syz.2.982'. [ 140.992962][ T359] usb 5-1: device descriptor read/64, error -71 [ 141.152526][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 141.159761][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.170072][ T66] usb 4-1: USB disconnect, device number 78 [ 141.242742][ T359] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 141.272728][ T308] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 141.372744][ T359] usb 5-1: device descriptor read/64, error -71 [ 141.422774][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 141.429842][ T308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.438468][ T308] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 141.448501][ T308] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.461967][ T308] usb 3-1: config 1 interface 0 has no altsetting 0 [ 141.470657][ T308] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 141.479854][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.488666][ T308] usb 3-1: Product: syz [ 141.493513][ T308] usb 3-1: Manufacturer: syz [ 141.498465][ T308] usb 3-1: SerialNumber: syz [ 141.504698][ T3361] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 141.621299][ T3369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.987'. [ 141.632712][ T359] usb 5-1: device descriptor read/64, error -71 [ 141.717422][ T308] usblp0: Disabling reads from problematic bidirectional printer [ 141.737004][ T308] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 3 proto 1 vid 0x03F0 pid 0x0004 [ 141.748789][ T359] usb usb5-port1: attempt power cycle [ 141.756469][ T3391] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 141.772577][ T308] usb 3-1: USB disconnect, device number 75 [ 141.786377][ T308] usblp0: removed [ 142.092764][ T66] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 142.112732][ T359] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 142.133948][ T359] usb 5-1: device descriptor read/8, error -71 [ 142.227119][ T3405] support for the xor transformation has been removed. [ 142.242786][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 142.249533][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.258294][ T66] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.267953][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.278291][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.287874][ T359] usb 5-1: device descriptor read/8, error -71 [ 142.289395][ T66] usb 4-1: string descriptor 0 read error: -22 [ 142.301137][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.310762][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.323518][ T66] usb 4-1: 0:2 : does not exist [ 142.492726][ T308] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 142.523648][ T66] usb 4-1: USB disconnect, device number 79 [ 142.532720][ T359] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 142.553878][ T359] usb 5-1: device descriptor read/8, error -71 [ 142.644053][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.655716][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.667257][ T308] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 142.677090][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.685149][ T308] usb 3-1: Product: syz [ 142.689497][ T308] usb 3-1: Manufacturer: syz [ 142.694300][ T308] usb 3-1: SerialNumber: syz [ 142.699852][ T308] usb 3-1: config 0 descriptor?? [ 142.705060][ T359] usb 5-1: device descriptor read/8, error -71 [ 142.712217][ T308] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 142.719256][ T308] usb 3-1: No valid video chain found. [ 142.822831][ T359] usb usb5-port1: unable to enumerate USB device [ 143.034339][ T3411] syzkaller1: entered promiscuous mode [ 143.040533][ T3411] syzkaller1: entered allmulticast mode [ 143.103717][ T66] usb 3-1: USB disconnect, device number 76 [ 143.496999][ T3428] netlink: 'syz.2.1007': attribute type 11 has an invalid length. [ 143.505479][ T3428] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 143.512736][ T359] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 143.513982][ T3428] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.1007'. [ 143.662697][ T359] usb 4-1: Using ep0 maxpacket: 16 [ 143.670038][ T359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.680027][ T359] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.694309][ T359] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 210, changing to 7 [ 143.707536][ T359] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 143.717886][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.726413][ T359] usb 4-1: Product: syz [ 143.730791][ T359] usb 4-1: Manufacturer: syz [ 143.736211][ T359] usb 4-1: SerialNumber: syz [ 143.802684][ T308] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 143.972735][ T308] usb 5-1: Using ep0 maxpacket: 32 [ 143.980290][ T308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.992421][ T308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.003393][ T308] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.013993][ T308] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.024876][ T308] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.035239][ T308] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.051430][ T308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.061043][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.069442][ T308] usb 5-1: Manufacturer: 騍檷咦ᬁ腶赳處㧷莵ખꆪ￰鵖绗פֿ璏㨜㆟േ陼⻒鑡༼渤蘍ꝿ欴꧓䖖ﮣ攎徼稐㰠왽율잋Ȅ问繱暈尩㐢堦ඎ뒇뎫蒘ﰺ䃃끩䠤撕瑸㝩鐹鍒䘸㍬呔ʹ춤뺲৭뛂ᬝ⍌레ম宫י녣㥟ἃ样᷾ﶕ铉褛 [ 144.303189][ T308] cdc_ncm 5-1:1.0: bind() failure [ 144.310989][ T308] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 144.318725][ T308] cdc_ncm 5-1:1.1: bind() failure [ 144.334906][ T308] usb 5-1: USB disconnect, device number 50 [ 144.449328][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 144.449358][ T36] audit: type=1400 audit(1774515315.696:101642): avc: denied { relabelfrom } for pid=3434 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.478141][ T36] audit: type=1400 audit(1774515315.696:101643): avc: denied { relabelto } for pid=3434 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.663715][ T36] audit: type=1400 audit(1774515315.916:101644): avc: denied { create } for pid=3441 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 144.891560][ T36] audit: type=1400 audit(1774515316.136:101645): avc: denied { write } for pid=3455 comm="syz.4.1018" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.943687][ T3458] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1019'. [ 145.126987][ T36] audit: type=1400 audit(1774515316.376:101646): avc: denied { execute_no_trans } for pid=3466 comm="syz.4.1023" path="/73/file0" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.341014][ T3469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3469 comm=syz.2.1024 [ 145.373517][ T63] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 145.394041][ T3474] incfs: Options parsing error. -22 [ 145.399929][ T3474] incfs: mount failed -22 [ 145.400043][ T3471] netlink: 'syz.0.1025': attribute type 3 has an invalid length. [ 145.405652][ T36] audit: type=1400 audit(1774515316.666:101647): avc: denied { accept } for pid=3473 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.412216][ T3471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 145.455439][ T3476] syz.2.1027 (3476): /proc/3475/oom_adj is deprecated, please use /proc/3475/oom_score_adj instead. [ 145.553350][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.561666][ T63] usb 5-1: not running at top speed; connect to a high speed hub [ 145.582910][ T63] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 145.592370][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.600749][ T63] usb 5-1: Product: syz [ 145.612693][ T63] usb 5-1: Manufacturer: syz [ 145.617582][ T63] usb 5-1: SerialNumber: syz [ 145.748665][ T36] audit: type=1400 audit(1774515316.986:101648): avc: denied { ioctl } for pid=3493 comm="syz.2.1032" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.837089][ T63] usb 5-1: USB disconnect, device number 51 [ 145.847809][ T3251] udevd[3251]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.105534][ T359] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 146.118946][ T359] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.135703][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 146.149701][ T359] usb 4-1: USB disconnect, device number 80 [ 146.163800][ T3248] udevd[3248]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.165183][ T3511] fuse: Bad value for 'fd' [ 146.206954][ T3511] overlayfs: failed to clone upperpath [ 146.570462][ T3526] kvm: kvm [3525]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 146.579810][ T3526] kvm: kvm [3525]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 146.758117][ T3540] x_tables: duplicate underflow at hook 1 [ 146.764878][ T3540] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1047'. [ 146.932787][ T359] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 146.952836][ T66] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 147.082765][ T359] usb 5-1: Using ep0 maxpacket: 32 [ 147.089714][ T359] usb 5-1: config 0 has no interfaces? [ 147.097057][ T359] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 147.102740][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 147.106266][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.113063][ T66] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 147.119758][ T359] usb 5-1: Product: syz [ 147.128475][ T66] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.132752][ T359] usb 5-1: Manufacturer: syz [ 147.143612][ T66] usb 3-1: config 0 has no interface number 0 [ 147.148180][ T359] usb 5-1: SerialNumber: syz [ 147.156408][ T66] usb 3-1: New USB device found, idVendor=2f33, idProduct=92f7, bcdDevice=7f.1c [ 147.170153][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.170381][ T359] usb 5-1: config 0 descriptor?? [ 147.178685][ T66] usb 3-1: Product: syz [ 147.188279][ T66] usb 3-1: Manufacturer: syz [ 147.192931][ T66] usb 3-1: SerialNumber: syz [ 147.198085][ T66] usb 3-1: config 0 descriptor?? [ 147.394604][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.403530][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.413477][ T359] usb 5-1: USB disconnect, device number 52 [ 147.414040][ T66] cdc_acm 3-1:0.6: More than one union descriptor, skipping ... [ 147.427850][ T66] cdc_acm 3-1:0.6: skipping garbage [ 147.973128][ T3554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.981734][ T3554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.720620][ T66] usb 3-1: USB disconnect, device number 77 [ 156.120661][ T3557] netlink: 'syz.0.1051': attribute type 9 has an invalid length. [ 156.130873][ T3557] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 156.144179][ T3564] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1055'. [ 156.197301][ T3578] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1055'. [ 156.442708][ T31] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 156.482740][ T359] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 156.542795][ T63] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 156.592747][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 156.599141][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 156.608249][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 156.618056][ T31] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 156.628345][ T31] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 156.638209][ T31] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 156.644080][ T359] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.648065][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 156.656908][ T359] usb 4-1: not running at top speed; connect to a high speed hub [ 156.662750][ T31] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 156.671653][ T359] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 156.679792][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.690665][ T359] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 156.712356][ T31] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 156.718418][ T359] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.733187][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 156.741197][ T359] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.750553][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.759707][ T359] usb 4-1: Product: syz [ 156.764165][ T359] usb 4-1: Manufacturer: syz [ 156.768916][ T359] usb 4-1: SerialNumber: syz [ 156.862751][ T63] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 156.913039][ T31] scsi host1: usb-storage 3-1:1.0 [ 156.978716][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.988220][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.007355][ T359] usb 4-1: USB disconnect, device number 81 [ 157.014957][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 157.020864][ T63] usb usb5-port1: attempt power cycle [ 157.278038][ T36] audit: type=1400 audit(1774515328.528:101649): avc: denied { associate } for pid=3602 comm="syz.0.1067" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 157.363000][ T63] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 157.403114][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 157.542696][ T63] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 157.553543][ T3614] random: crng reseeded on system resumption [ 157.559746][ T36] audit: type=1400 audit(1774515328.808:101650): avc: denied { append } for pid=3612 comm="syz.3.1070" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.601415][ T63] usb 5-1: Invalid ep0 maxpacket: 64 [ 157.611273][ T63] usb usb5-port1: unable to enumerate USB device [ 157.699273][ T3619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 157.973098][ T294] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 158.042700][ T564] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 158.125980][ T3624] netlink: 'syz.0.1074': attribute type 13 has an invalid length. [ 158.134838][ T3624] erspan0: refused to change device tx_queue_len [ 158.187959][ T63] usb 3-1: USB disconnect, device number 78 [ 158.187970][ T3599] sddr09: could not read card info [ 158.202798][ T564] usb 4-1: Using ep0 maxpacket: 8 [ 158.202840][ T46] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 158.209360][ T564] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.215170][ T46] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 158.215261][ T46] sd 1:0:0:0: [sdb] Write Protect is off [ 158.226303][ T564] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 158.238123][ T564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.247380][ T46] sd 1:0:0:0: [sdb] Asking for cache data failed [ 158.256717][ T564] usb 4-1: config 0 descriptor?? [ 158.265309][ T46] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 158.268960][ T564] usb 4-1: bad CDC descriptors [ 158.280572][ T564] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 158.283442][ T46] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 158.293401][ T564] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 158.301867][ T564] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 158.317842][ T3580] udevd[3580]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 158.344061][ T3581] udevd[3581]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 158.476752][ T308] usb 4-1: USB disconnect, device number 82 [ 158.737549][ T3655] fuse: Invalid rootmode [ 158.831004][ T3664] futex_wake_op: syz.0.1086 tries to shift op by 32; fix this program [ 158.942736][ T564] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 159.094386][ T564] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.103177][ T564] usb 3-1: not running at top speed; connect to a high speed hub [ 159.112207][ T564] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 4 [ 159.126025][ T564] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 159.136082][ T564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.144707][ T564] usb 3-1: Product: syz [ 159.149971][ T564] usb 3-1: Manufacturer: syz [ 159.154987][ T564] usb 3-1: SerialNumber: syz [ 159.262914][ T31] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 159.364547][ T564] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.371451][ T564] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 159.382515][ T564] usb 3-1: USB disconnect, device number 79 [ 159.396397][ T3581] udevd[3581]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.413384][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 159.421624][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 159.431189][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.439549][ T31] usb 4-1: Product: syz [ 159.443747][ T31] usb 4-1: Manufacturer: syz [ 159.448780][ T31] usb 4-1: SerialNumber: syz [ 159.652356][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 159.668187][ T31] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 159.675224][ T31] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 159.685389][ T31] usb 4-1: USB disconnect, device number 83 [ 159.702432][ T3686] udevd[3686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.837082][ T36] audit: type=1400 audit(1774515331.088:101651): avc: denied { getopt } for pid=3687 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.858702][ T36] audit: type=1400 audit(1774515331.088:101652): avc: denied { setcurrent } for pid=3687 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.879306][ T36] audit: type=1326 audit(1774515331.088:101653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.4.1094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f478579c799 code=0x0 [ 159.903705][ T36] audit: type=1326 audit(1774515331.158:101654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 159.930107][ T36] audit: type=1326 audit(1774515331.178:101655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 159.955241][ T36] audit: type=1326 audit(1774515331.178:101656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 159.982479][ T36] audit: type=1326 audit(1774515331.178:101657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 160.007899][ T36] audit: type=1326 audit(1774515331.178:101658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.4.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478579c799 code=0x7ffc0000 [ 160.256738][ T3716] netlink: 'syz.3.1102': attribute type 46 has an invalid length. [ 160.500301][ T3725] overlayfs: failed to clone upperpath [ 160.792735][ T564] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 160.871521][ T3744] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 160.962688][ T564] usb 3-1: Using ep0 maxpacket: 16 [ 160.975033][ T564] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.984638][ T564] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.995139][ T564] usb 3-1: config 0 has no interface number 0 [ 161.003172][ T564] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 161.013853][ T564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.030666][ T564] usb 3-1: Product: syz [ 161.035442][ T564] usb 3-1: Manufacturer: syz [ 161.040280][ T564] usb 3-1: SerialNumber: syz [ 161.049917][ T564] usb 3-1: config 0 descriptor?? [ 161.223660][ T3762] netlink: 'syz.4.1121': attribute type 11 has an invalid length. [ 161.282697][ T63] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 161.357373][ T3768] kvm: kvm [3726]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 161.366501][ T3768] kvm: kvm [3726]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 161.380862][ T3768] kvm_intel: kvm [3726]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 161.391675][ T3768] kvm: kvm [3726]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 161.400639][ T3768] kvm: kvm [3726]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 161.432676][ T63] usb 4-1: Using ep0 maxpacket: 16 [ 161.440385][ T63] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.442154][ T3774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.449360][ T63] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 161.468803][ T63] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 161.478514][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.487244][ T63] usb 4-1: Product: syz [ 161.491708][ T63] usb 4-1: Manufacturer: syz [ 161.496615][ T63] usb 4-1: SerialNumber: syz [ 161.692730][ T564] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 161.711232][ T63] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 161.720016][ T63] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.842703][ T564] usb 5-1: Using ep0 maxpacket: 32 [ 161.849116][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.861085][ T564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.870877][ T564] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.880381][ T564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.889255][ T564] usb 5-1: config 0 descriptor?? [ 162.103997][ T63] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 162.292897][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 162.304550][ T564] savu 0003:1E7D:2D5A.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 162.327283][ T31] usb 4-1: USB disconnect, device number 84 [ 162.599677][ T63] usb 5-1: USB disconnect, device number 57 [ 163.144489][ T36] kauditd_printk_skb: 591 callbacks suppressed [ 163.144506][ T36] audit: type=1400 audit(1774515334.398:102250): avc: denied { unmount } for pid=2333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 163.512738][ T308] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 163.584838][ T63] usb 3-1: USB disconnect, device number 80 [ 163.624952][ T36] audit: type=1400 audit(1774515334.878:102251): avc: granted { setsecparam } for pid=3838 comm="syz.2.1143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 163.653621][ T3845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 163.672276][ T3850] can0: slcan on ttyS3. [ 163.676767][ T308] usb 5-1: Using ep0 maxpacket: 32 [ 163.686587][ T308] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.695470][ T308] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.704799][ T308] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.714312][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.724810][ T308] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.735430][ T3850] can0 (unregistered): slcan off ttyS3. [ 163.743961][ T3858] can0: slcan on ttyS3. [ 163.756782][ T308] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.770546][ T308] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.780380][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.789587][ T308] usb 5-1: config 0 descriptor?? [ 163.831649][ T3849] can0 (unregistered): slcan off ttyS3. [ 163.857666][ T3872] netlink: 'syz.2.1146': attribute type 3 has an invalid length. [ 163.868141][ T3872] netlink: 'syz.2.1146': attribute type 3 has an invalid length. [ 163.880029][ T3875] overlayfs: missing 'workdir' [ 163.981750][ T3894] input: syz0 as /devices/virtual/input/input20 [ 164.001148][ T308] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.034894][ T3903] overlay: ./file0 is not a directory [ 164.202857][ T308] usb 5-1: USB disconnect, device number 58 [ 164.210032][ T308] usblp0: removed [ 164.601227][ T3934] overlay: filesystem on ./bus not supported as upperdir [ 164.882751][ T31] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 165.092869][ T564] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 165.234642][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.243866][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.251887][ T564] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.262796][ T564] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.275675][ T564] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.285595][ T564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.293849][ T564] usb 5-1: Product: syz [ 165.298219][ T564] usb 5-1: Manufacturer: syz [ 165.303043][ T45] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 165.311192][ T564] usb 5-1: SerialNumber: syz [ 165.318334][ T564] cdc_mbim 5-1:1.0: skipping garbage [ 165.382442][ T3963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3963 comm=syz.0.1175 [ 165.396027][ T3963] overlayfs: missing 'lowerdir' [ 165.403239][ T3963] fuseblk: Bad value for 'fd' [ 165.452809][ T45] usb 3-1: device descriptor read/64, error -71 [ 165.702690][ T45] usb 3-1: device descriptor read/64, error -71 [ 165.824741][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.836650][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 165.844997][ T31] usb 4-1: can't read configurations, error -71 [ 165.942767][ T45] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 166.082724][ T45] usb 3-1: device descriptor read/64, error -71 [ 166.172933][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.181708][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.190455][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.199757][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.293682][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 166.303674][ T3982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3982 comm=syz.0.1183 [ 166.332745][ T45] usb 3-1: device descriptor read/64, error -71 [ 166.409483][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.418239][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.442801][ T45] usb usb3-port1: attempt power cycle [ 166.472719][ T31] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 166.622673][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 166.628990][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.637389][ T31] usb 4-1: config 0 has no interface number 0 [ 166.643710][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.655560][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.666138][ T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 166.675802][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.684466][ T31] usb 4-1: config 0 descriptor?? [ 166.782691][ T45] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 166.803732][ T45] usb 3-1: device descriptor read/8, error -71 [ 166.933735][ T45] usb 3-1: device descriptor read/8, error -71 [ 167.172983][ T45] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 167.194378][ T45] usb 3-1: device descriptor read/8, error -71 [ 167.333347][ T45] usb 3-1: device descriptor read/8, error -71 [ 167.404597][ T31] uclogic 0003:28BD:0094.0011: failed retrieving string descriptor #100: -71 [ 167.414361][ T31] uclogic 0003:28BD:0094.0011: failed retrieving pen parameters: -71 [ 167.422498][ T31] uclogic 0003:28BD:0094.0011: pen probing failed: -71 [ 167.430488][ T31] uclogic 0003:28BD:0094.0011: failed probing parameters: -71 [ 167.438818][ T31] uclogic 0003:28BD:0094.0011: probe with driver uclogic failed with error -71 [ 167.450101][ T45] usb usb3-port1: unable to enumerate USB device [ 167.457007][ T31] usb 4-1: USB disconnect, device number 86 [ 167.813645][ T564] cdc_mbim 5-1:1.0: bind() failure [ 167.826458][ T564] usb 5-1: USB disconnect, device number 59 [ 168.192822][ T63] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 168.222913][ T564] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 168.344031][ T63] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.357781][ T63] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.367342][ T63] usb 4-1: string descriptor 0 read error: -22 [ 168.373681][ T63] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.40 [ 168.374130][ T564] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.383065][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.393666][ T564] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 168.409186][ T564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.417564][ T564] usb 5-1: Product: syz [ 168.422006][ T564] usb 5-1: Manufacturer: syz [ 168.426665][ T564] usb 5-1: SerialNumber: syz [ 168.433019][ T308] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 168.582732][ T308] usb 3-1: Using ep0 maxpacket: 16 [ 168.589171][ T308] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 168.602204][ T308] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 168.612332][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.623290][ T308] usb 3-1: Product: syz [ 168.627505][ T308] usb 3-1: Manufacturer: syz [ 168.632256][ T308] usb 3-1: SerialNumber: syz [ 168.827084][ T63] usbhid 4-1:1.0: can't add hid device: -71 [ 168.836653][ T63] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 168.848633][ T63] usb 4-1: USB disconnect, device number 87 [ 168.884119][ T4064] netlink: 'syz.2.1213': attribute type 30 has an invalid length. [ 168.939024][ T564] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.958581][ T308] usb 3-1: USB disconnect, device number 85 [ 168.963651][ T564] usb 5-1: USB disconnect, device number 60 [ 168.991412][ T3580] udevd[3580]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.282709][ T308] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 169.437282][ T308] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 169.446912][ T308] usb 3-1: config 0 has no interface number 0 [ 169.453782][ T308] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 169.479942][ T308] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 169.491399][ T308] usb 3-1: config 0 interface 96 has no altsetting 0 [ 169.501206][ T308] usb 3-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 169.509678][ T4088] syz.4.1221: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 169.513315][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.543797][ T308] usb 3-1: Product: syz [ 169.548766][ T308] usb 3-1: Manufacturer: syz [ 169.556798][ T308] usb 3-1: SerialNumber: syz [ 169.565513][ T308] usb 3-1: config 0 descriptor?? [ 169.568144][ T4088] CPU: 1 UID: 0 PID: 4088 Comm: syz.4.1221 Not tainted syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 169.568175][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.568191][ T4088] Call Trace: [ 169.568197][ T4088] [ 169.568204][ T4088] __dump_stack+0x21/0x30 [ 169.568236][ T4088] dump_stack_lvl+0x140/0x1c0 [ 169.568255][ T4088] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.568276][ T4088] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 169.568299][ T4088] dump_stack+0x19/0x20 [ 169.568318][ T4088] warn_alloc+0x1e7/0x2c0 [ 169.568338][ T4088] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.568361][ T4088] ? __cfi_warn_alloc+0x10/0x10 [ 169.568380][ T4088] ? __get_vm_area_node+0x201/0x3d0 [ 169.568401][ T4088] ? __vcalloc_noprof+0x3a/0x50 [ 169.568424][ T4088] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 169.568445][ T4088] ? stack_depot_save_flags+0x38/0x800 [ 169.568468][ T4088] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.568491][ T4088] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 169.568519][ T4088] ? __vcalloc_noprof+0x3a/0x50 [ 169.568541][ T4088] __vmalloc_noprof+0x104/0x1d0 [ 169.568560][ T4088] ? __vcalloc_noprof+0x3a/0x50 [ 169.568580][ T4088] ? __cfi___vmalloc_noprof+0x10/0x10 [ 169.568599][ T4088] ? mutex_lock+0x97/0x1d0 [ 169.568615][ T4088] ? __cfi_mutex_lock+0x10/0x10 [ 169.568631][ T4088] __vcalloc_noprof+0x3a/0x50 [ 169.568652][ T4088] kvm_set_memslot+0x4c6/0x13f0 [ 169.568675][ T4088] ? __kmalloc_cache_noprof+0x23c/0x470 [ 169.568699][ T4088] __kvm_set_memory_region+0x825/0xb80 [ 169.568724][ T4088] kvm_set_memory_region+0x2f/0x50 [ 169.568747][ T4088] kvm_vm_ioctl+0xb1b/0xc60 [ 169.568767][ T4088] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 169.568789][ T4088] ? ioctl_has_perm+0x1bc/0x500 [ 169.568810][ T4088] ? __asan_memcpy+0x5a/0x80 [ 169.568831][ T4088] ? ioctl_has_perm+0x408/0x500 [ 169.568852][ T4088] ? __cfi_futex_wait+0x10/0x10 [ 169.568875][ T4088] ? selinux_file_ioctl+0x732/0x1480 [ 169.568895][ T4088] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 169.568915][ T4088] ? do_futex+0x32a/0x510 [ 169.568934][ T4088] ? errseq_sample+0x48/0x70 [ 169.568957][ T4088] ? __cfi_do_futex+0x10/0x10 [ 169.568976][ T4088] ? alloc_file_pseudo+0x191/0x1f0 [ 169.568995][ T4088] ? __fget_files+0x2c5/0x340 [ 169.569011][ T4088] ? bpf_lsm_file_ioctl+0xd/0x20 [ 169.569029][ T4088] ? security_file_ioctl+0x3e/0x110 [ 169.569048][ T4088] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 169.569068][ T4088] __se_sys_ioctl+0x132/0x1b0 [ 169.569085][ T4088] __x64_sys_ioctl+0x7f/0xa0 [ 169.569101][ T4088] x64_sys_call+0x1878/0x2ee0 [ 169.569123][ T4088] do_syscall_64+0x57/0xf0 [ 169.569144][ T4088] ? clear_bhb_loop+0x50/0xa0 [ 169.569166][ T4088] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.569187][ T4088] RIP: 0033:0x7f478579c799 [ 169.569211][ T4088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.569225][ T4088] RSP: 002b:00007f47866d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.569244][ T4088] RAX: ffffffffffffffda RBX: 00007f4785a16090 RCX: 00007f478579c799 [ 169.569258][ T4088] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 00000000000000a6 [ 169.569270][ T4088] RBP: 00007f4785832c99 R08: 0000000000000000 R09: 0000000000000000 [ 169.569282][ T4088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.569293][ T4088] R13: 00007f4785a16128 R14: 00007f4785a16090 R15: 00007fff09de2348 [ 169.569309][ T4088] [ 169.569320][ T4088] Mem-Info: [ 169.819438][ T308] usb 3-1: USB disconnect, device number 86 [ 169.822171][ T4088] active_anon:58842 inactive_anon:3 isolated_anon:0 [ 169.822171][ T4088] active_file:20787 inactive_file:2620 isolated_file:0 [ 169.822171][ T4088] unevictable:19314 dirty:81 writeback:0 [ 169.822171][ T4088] slab_reclaimable:5374 slab_unreclaimable:73524 [ 169.822171][ T4088] mapped:29679 shmem:50452 pagetables:1129 [ 169.822171][ T4088] sec_pagetables:0 bounce:0 [ 169.822171][ T4088] kernel_misc_reclaimable:0 [ 169.822171][ T4088] free:1434213 free_pcp:5039 free_cma:0 [ 169.975838][ T4088] Node 0 active_anon:235352kB inactive_anon:12kB active_file:83148kB inactive_file:10480kB unevictable:77256kB isolated(anon):0kB isolated(file):0kB mapped:118736kB dirty:324kB writeback:0kB shmem:201736kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4960kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no [ 170.010838][ T4088] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5144kB free_cma:0kB [ 170.042071][ T4088] lowmem_reserve[]: 0 3921 3921 [ 170.047153][ T4088] Normal free:2778720kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:235352kB inactive_anon:12kB active_file:83148kB inactive_file:10480kB unevictable:77256kB writepending:324kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:15124kB local_pcp:14876kB free_cma:0kB [ 170.080355][ T4088] lowmem_reserve[]: 0 0 0 [ 170.084954][ T4088] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 170.102876][ T4088] Normal: 34*4kB (UE) 46*8kB (UE) 9*16kB (E) 22*32kB (UE) 27*64kB (UE) 15*128kB (UME) 6*256kB (UME) 3*512kB (UME) 13*1024kB (UME) 6*2048kB (UME) 670*4096kB (M) = 2777992kB [ 170.121023][ T4088] 93156 total pagecache pages [ 170.125972][ T4088] 5 pages in swap cache [ 170.130842][ T4088] Free swap = 124404kB [ 170.135381][ T4088] Total swap = 124996kB [ 170.136087][ T4108] netlink: 'syz.3.1228': attribute type 6 has an invalid length. [ 170.139813][ T4088] 2097051 pages RAM [ 170.152182][ T4088] 0 pages HighMem/MovableOnly [ 170.157276][ T4088] 352241 pages reserved [ 170.161468][ T4088] 0 pages cma reserved [ 170.168070][ T4088] Memory allocations: [ 170.174705][ T4088] 0 B 0 init/main.c:1477 func:do_initcalls [ 170.182329][ T4088] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 170.190706][ T4088] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 170.198739][ T4088] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 170.206970][ T4088] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 170.215226][ T4088] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 170.217021][ T4111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.224219][ T4088] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 170.242046][ T4088] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 170.250654][ T4088] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 170.259220][ T4088] 0 B 0 init/initramfs.c:101 func:find_link [ 170.373776][ T4121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 170.455760][ T4127] netlink: 'syz.4.1235': attribute type 22 has an invalid length. [ 170.469631][ T4127] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1235'. [ 170.812073][ T4151] capability: warning: `syz.2.1243' uses 32-bit capabilities (legacy support in use) [ 170.840489][ T4153] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=4153 comm=syz.2.1244 [ 170.854382][ T36] audit: type=1400 audit(1774515342.108:102252): avc: denied { read } for pid=4152 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.863430][ T4153] cgroup: fork rejected by pids controller in /syz2 [ 170.947958][ T4156] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1245'. [ 171.212677][ T308] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 171.274969][ T294] bridge_slave_1: left allmulticast mode [ 171.280740][ T294] bridge_slave_1: left promiscuous mode [ 171.286740][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.294438][ T294] bridge_slave_0: left allmulticast mode [ 171.300174][ T294] bridge_slave_0: left promiscuous mode [ 171.305991][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.363929][ T308] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 171.372200][ T308] usb 4-1: config 0 has no interface number 0 [ 171.378542][ T308] usb 4-1: config 0 interface 41 has no altsetting 0 [ 171.387468][ T308] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 171.396951][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.405351][ T308] usb 4-1: Product: syz [ 171.409758][ T308] usb 4-1: Manufacturer: syz [ 171.414532][ T308] usb 4-1: SerialNumber: syz [ 171.421941][ T308] usb 4-1: config 0 descriptor?? [ 171.449128][ T4162] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.456610][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.463863][ T4162] bridge_slave_0: entered allmulticast mode [ 171.470283][ T4162] bridge_slave_0: entered promiscuous mode [ 171.477325][ T4162] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.484625][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.491881][ T4162] bridge_slave_1: entered allmulticast mode [ 171.498610][ T4162] bridge_slave_1: entered promiscuous mode [ 171.505639][ T294] veth1_macvtap: left promiscuous mode [ 171.519949][ T294] veth0_vlan: left promiscuous mode [ 171.611608][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.618857][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.628785][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.636268][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.663907][ T4162] veth0_vlan: entered promiscuous mode [ 171.676459][ T4162] veth1_macvtap: entered promiscuous mode [ 171.724076][ T294] ------------[ cut here ]------------ [ 171.731184][ T294] WARNING: CPU: 0 PID: 294 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 171.741442][ T294] Modules linked in: [ 171.745511][ T294] CPU: 0 UID: 0 PID: 294 Comm: kworker/u8:3 Not tainted syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 171.757666][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.768655][ T294] Workqueue: netns cleanup_net [ 171.773830][ T294] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 171.780403][ T294] Code: e8 a1 7e d9 fc 4b 83 3c 3e 00 75 19 e8 c5 51 81 fc 49 81 ff f8 07 00 00 74 1b e8 b7 51 81 fc 49 83 c7 08 eb c9 e8 ac 51 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 171.801032][ T294] RSP: 0018:ffffc9000b6bfb90 EFLAGS: 00010293 [ 171.807493][ T294] RAX: ffffffff85065904 RBX: ffff888128294700 RCX: ffff88812f4fdf00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.807849][ T36] audit: type=1400 audit(1774515343.068:102253): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2661]" dev="pipefs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 171.815887][ T294] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881037600b8 [ 171.815910][ T294] RBP: ffffc9000b6bfbb0 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 171.815923][ T294] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: dffffc0000000000 [ 171.864511][ T294] R13: dffffc0000000000 R14: ffff888103760000 R15: 00000000000000b8 [ 171.871046][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.873002][ T294] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 171.891266][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.898232][ T294] CR2: 00007f3b4ad85900 CR3: 000000010277a000 CR4: 00000000003526b0 [ 171.903746][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.906626][ T294] DR0: 0000000100000000 DR1: 8000000000000000 DR2: fffffffffffffffd [ 171.922665][ T294] DR3: 000000000000019c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 171.930827][ T294] Call Trace: [ 171.934416][ T294] [ 171.937445][ T294] cleanup_net+0x6c0/0xc90 [ 171.942138][ T294] ? __cfi_cleanup_net+0x10/0x10 [ 171.947587][ T294] ? kick_pool+0xb9/0x550 [ 171.952034][ T294] process_scheduled_works+0x7d1/0x1020 [ 171.958006][ T294] worker_thread+0xc70/0x10b0 [ 171.963156][ T294] ? __cfi_try_to_wake_up+0x10/0x10 [ 171.968461][ T294] kthread+0x2c9/0x370 [ 171.972757][ T294] ? __cfi_worker_thread+0x10/0x10 [ 171.978328][ T294] ? __cfi_kthread+0x10/0x10 [ 171.983054][ T294] ret_from_fork+0x67/0xa0 [ 171.987511][ T294] ? __cfi_kthread+0x10/0x10 [ 171.992556][ T294] ret_from_fork_asm+0x1a/0x30 [ 171.997816][ T294] [ 172.000932][ T294] ---[ end trace 0000000000000000 ]--- [ 172.007952][ T308] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 172.018766][ T294] ------------[ cut here ]------------ [ 172.024736][ T294] WARNING: CPU: 0 PID: 294 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 172.035035][ T294] Modules linked in: [ 172.039035][ T294] CPU: 0 UID: 0 PID: 294 Comm: kworker/u8:3 Tainted: G W syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 172.052308][ T294] Tainted: [W]=WARN [ 172.056262][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.066607][ T294] Workqueue: netns cleanup_net [ 172.071512][ T294] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 172.077838][ T294] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 70 51 81 fc 49 81 ff f8 07 00 00 74 1b e8 62 51 81 fc 49 83 c7 08 eb c5 e8 57 51 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 47 51 81 fc 5b 41 5c 41 5e 41 [ 172.098613][ T294] RSP: 0018:ffffc9000b6bfb90 EFLAGS: 00010293 [ 172.105008][ T294] RAX: ffffffff85065959 RBX: ffff888103760800 RCX: ffff88812f4fdf00 [ 172.113024][ T294] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888103760808 [ 172.121318][ T294] RBP: ffffc9000b6bfbb0 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 172.129578][ T294] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: dffffc0000000000 [ 172.138445][ T294] R13: dffffc0000000000 R14: ffff888103760000 R15: 0000000000000008 [ 172.147707][ T294] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 172.157322][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.164298][ T294] CR2: 00007f3b4ad85900 CR3: 0000000109328000 CR4: 00000000003526b0 [ 172.172467][ T294] DR0: 0000000100000000 DR1: 8000000000000000 DR2: fffffffffffffffd [ 172.180857][ T294] DR3: 000000000000019c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 172.188973][ T294] Call Trace: [ 172.192397][ T294] [ 172.195488][ T294] cleanup_net+0x6c0/0xc90 [ 172.200097][ T294] ? __cfi_cleanup_net+0x10/0x10 [ 172.205280][ T294] ? kick_pool+0xb9/0x550 [ 172.209803][ T294] process_scheduled_works+0x7d1/0x1020 [ 172.215627][ T294] worker_thread+0xc70/0x10b0 [ 172.220322][ T294] ? __cfi_try_to_wake_up+0x10/0x10 [ 172.225853][ T294] kthread+0x2c9/0x370 [ 172.230107][ T294] ? __cfi_worker_thread+0x10/0x10 [ 172.235387][ T294] ? __cfi_kthread+0x10/0x10 [ 172.240318][ T294] ret_from_fork+0x67/0xa0 [ 172.244827][ T294] ? __cfi_kthread+0x10/0x10 [ 172.249616][ T294] ret_from_fork_asm+0x1a/0x30 [ 172.254816][ T294] [ 172.257959][ T294] ---[ end trace 0000000000000000 ]--- [ 172.283917][ T294] ------------[ cut here ]------------ [ 172.289391][ T294] WARNING: CPU: 1 PID: 294 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 172.299579][ T294] Modules linked in: [ 172.303687][ T294] CPU: 1 UID: 0 PID: 294 Comm: kworker/u8:3 Tainted: G W syzkaller #0 3b62e6afc526b595ceee21a395d0bcf22df4c572 [ 172.317389][ T294] Tainted: [W]=WARN [ 172.321194][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.322769][ T360] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 172.331596][ T294] Workqueue: netns cleanup_net [ 172.344409][ T294] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 172.350434][ T294] Code: 3c 20 00 74 08 48 89 df e8 9f 48 f4 fc 48 8b 3b e8 07 71 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 1b 9c fc <0f> 0b e9 b0 fd ff ff e8 a6 1b 9c fc 0f 0b e9 18 fe ff ff e8 9a 1b [ 172.371527][ T294] RSP: 0018:ffffc9000b6bfb70 EFLAGS: 00010293 [ 172.377898][ T294] RAX: ffffffff84eb8efe RBX: ffff888128294700 RCX: ffff88812f4fdf00 [ 172.386437][ T294] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88812f4fdf00 [ 172.394561][ T294] RBP: ffffc9000b6bfb98 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 172.402760][ T294] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: 1ffffffff0fa6d68 [ 172.410941][ T294] R13: dffffc0000000000 R14: ffff888128295300 R15: dffffc0000000000 [ 172.419238][ T294] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 172.428592][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.435507][ T294] CR2: 00005642e0e33af8 CR3: 000000010c34e000 CR4: 00000000003526b0 [ 172.443910][ T294] DR0: 0000000100000000 DR1: 8000000000000000 DR2: fffffffffffffffd [ 172.452351][ T294] DR3: 000000000000019c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 172.460711][ T294] Call Trace: [ 172.464055][ T294] [ 172.467006][ T294] xfrm_net_exit+0x31/0x80 [ 172.471900][ T294] cleanup_net+0x6c0/0xc90 [ 172.476966][ T294] ? __cfi_cleanup_net+0x10/0x10 [ 172.482023][ T294] ? kick_pool+0xb9/0x550 [ 172.486664][ T294] process_scheduled_works+0x7d1/0x1020 [ 172.492400][ T294] worker_thread+0xc70/0x10b0 [ 172.497249][ T294] ? __cfi_try_to_wake_up+0x10/0x10 [ 172.502685][ T294] kthread+0x2c9/0x370 [ 172.506959][ T294] ? __cfi_worker_thread+0x10/0x10 [ 172.512278][ T294] ? __cfi_kthread+0x10/0x10 [ 172.517186][ T294] ret_from_fork+0x67/0xa0 [ 172.521713][ T294] ? __cfi_kthread+0x10/0x10 [ 172.526983][ T294] ret_from_fork_asm+0x1a/0x30 [ 172.532207][ T294] [ 172.535546][ T294] ---[ end trace 0000000000000000 ]--- [ 172.604659][ T45] usb 4-1: USB disconnect, device number 88 [ 172.612976][ T294] bridge_slave_1: left allmulticast mode [ 172.619356][ T294] bridge_slave_1: left promiscuous mode [ 172.625281][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.632709][ T294] bridge_slave_0: left allmulticast mode [ 172.638703][ T294] bridge_slave_0: left promiscuous mode [ 172.644473][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.824618][ T294] veth1_macvtap: left promiscuous mode [ 172.830324][ T294] veth0_vlan: left promiscuous mode [ 173.094081][ T294] bridge_slave_1: left allmulticast mode [ 173.099748][ T294] bridge_slave_1: left promiscuous mode [ 173.105646][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.274881][ T294] veth1_macvtap: left promiscuous mode [ 173.280497][ T294] veth0_vlan: left promiscuous mode [ 175.134532][ T12] bridge_slave_1: left allmulticast mode [ 175.140538][ T12] bridge_slave_1: left promiscuous mode [ 175.146620][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.154347][ T12] bridge_slave_0: left allmulticast mode [ 175.160179][ T12] bridge_slave_0: left promiscuous mode [ 175.166362][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.284311][ T12] tipc: Disabling bearer [ 175.289803][ T12] tipc: Left network mode [ 175.295162][ T12] veth1_macvtap: left promiscuous mode [ 175.300768][ T12] veth0_vlan: left promiscuous mode