last executing test programs: 15.759282957s ago: executing program 3 (id=383): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000240)={&(0x7f0000000040)=[{0x3, 0x0, 0xfffffffffffffffc, 0x8, 0x9, 0xfffffffffffffff9, 0x9, 0x6}, {0x1, 0x0, 0x10001, 0x6, 0x10, 0x0, 0xf, 0x3}, {0x3, 0x0, 0x100000000, 0x9, 0x3, 0x4, 0x1ca9, 0x8}, {0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0x6, 0x1}, {0x3, 0x0, 0x3, 0x3, 0x9, 0xc, 0x7f, 0x2}, {0x3, 0x0, 0x3, 0xffffffffffffff58, 0x4, 0x6c6, 0xffffffffffffffe6, 0x6}, {0x1, 0x0, 0xb, 0x6, 0x9, 0x100000001, 0x7bc, 0x80}], 0x7, 0x38, 0x1, 0xe9c}) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xa) 15.188440421s ago: executing program 0 (id=399): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x90) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x5382, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c06, 0x3) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c06, 0x3) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c00000031"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf252c00000031"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x0) 15.117203353s ago: executing program 0 (id=401): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) (async, rerun: 32) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) syz_usb_connect$uac2(0x2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6b, &(0x7f0000000180)=ANY=[@ANYBLOB="6b032a9dfe22aa724c432975adf11eee96a755449770e3d4d13b95a61d4187965dd17a2f384c27db1a3c87d7c5eb1a96357570b4b620d2d5e12d4cc17e5b2e7a45d9972ed727f5ef488ff4d526a160d0fd3d93ab8d12aa375e56100def3300ca4c88d6eca1888f14a700"]}]}) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'macvlan0\x00', {0x2, 0x4e22, @multicast2}}) (async) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) (async) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x1e, 0xda, 0x5, 0x7, {0x4e21, 0x4e22, [0x1000, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xfffffffb, 0x7f]}, 0x8, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) (rerun: 32) syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) (async) ioctl$TCSBRKP(r7, 0x5425, 0xe146) r8 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 15.116343413s ago: executing program 0 (id=402): r0 = socket(0x10, 0x802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2e, 0x0, 0x0) setsockopt(r0, 0x5, 0x40, &(0x7f0000000000)="a8f4f7ec73ef3acba9434a1266e6d010fd1235d2a2e0e5ec249aca346e21b93eaef5faa92afb0e60a3c513958f2db54be90384722b78836966c97df09eb1443487ee9641b38197fb00ebc7a3f1f514b6c0deea3b33d13895db4609bbd953088ca724d932928f756e085f649dae96880d1edbcc3b376da5d9974f0c9b08208767b2dc6ce2f8bbec7abcc986429b0e6303d6e2c513327e29a55bdd1f77f397fddb4572d68b70bdc4aa1191b48f927f71b4d30d4812f2c6c15b3657b550afe7ddc5bcfed67a74", 0xc5) write(r0, &(0x7f0000000100)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) 15.112342573s ago: executing program 0 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x190, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xbe}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="13000000", @ANYRES16=r2, @ANYBLOB="0100"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x11c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) (async) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103"], 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) fchown(r4, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r8 = dup(r7) read(r8, &(0x7f0000000140)=""/113, 0x71) (async) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x26, 0x1, 0x7, 0x1, 0x2, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xb, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xff, 0x8, 0x4, 0x10, 0x4}, 0x10, &(0x7f0000000800)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7f, 0x8, 0x0, 0x4}]}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x427}}, {0xe2, &(0x7f0000000880)=@string={0xe2, 0x3, "400e3978642a346a31e00945494e79b331ffd0535111e8a90e4a58d54adb747adadf681b771562fc114563123722edbbe43fbcd9f115e3f2298c4c5a4bc94c3045a4ec9b8aed74cd5be613ca40c044f75fa738ce088aca16a2f670319e1c3dbc6bc6e92b41a601664c5d2202c0e530bce23a946a2a042977d71be0d5c483bb36e479a9e25ce84d274db3e13b1eadf5a94500fbd0138c10ab01c15bdfcdb7f6981df9ce9852a94f919f720e0d88b0cc7a600c21d00d097c7a2fd6729235406003b53f278d54bcb46df9d3a51c20366ea6dd87ad713486f3ccd243694222e11a6a"}}, {0xa5, &(0x7f0000000980)=@string={0xa5, 0x3, "ee498a4bffd8ae78f42358264d49ac248680a6f0c8ec17626d39fea88db3ea87e86f87b2a8371d54285ff30103e18620057ccd2fa6fc94727d999fb9fd83d344e62902fef4caa8a4e097989c9361fa8d3fde9aa7ef68ddd79f9e4457309e9c347ed8bfffa3c4671e2fdd5dc7af8940ee79f4f27f357e4140d88314d6ff7898d10fa3e45d33dcc4d1252eb81e71a776d1ebc3a6578c397e7e1b5d9cdc51d40c89aac0d4"}}, {0xc, &(0x7f0000000a40)=@string={0xc, 0x3, "0a8fdfbb646d3b710592"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x809}}, {0xdc, &(0x7f0000000ac0)=@string={0xdc, 0x3, "e57b1c8067da0f16ada30c30d853101f2acb8512e3e4624a0e410c8903c02031e654f111010c9274b033a87ef3963fefe495719a2f8514b1f3d578c26ee0ef3b86df63e49b42747e563cf2a542e32c245a86cd168b77451581d3db4b1b4ed03828b5ff358697002b03d1252b063e90f5586f50bab7feb1b560e87665cda5e02f3476fd86cc12c30ee298d01dcd01c7c71afabc1f85235faa5dc3515bce622f4614e07a04cba483178adda5d8db6af886a124f4ce5de3b6a595182882091e6b0027ed6b22e425d3897ac890ba8bb514a752caaabab8b22eb50827"}}]}) syz_usb_connect(0x1, 0x5c0, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x69, 0x2e, 0xc0, 0xff, 0x2cb7, 0x10b, 0x1f57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ae, 0x3, 0x10, 0x5, 0x20, 0x1, "", [{{0x9, 0x4, 0x18, 0x5, 0x1, 0xff, 0xff, 0x30, 0x6, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "16fd9a91b8"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x6, 0xd1, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x1ff, 0xfff8}, @mbim={0xc, 0x24, 0x1b, 0x10ed, 0x5, 0x1, 0x6, 0x9, 0x9}, @mdlm_detail={0xf3, 0x24, 0x13, 0x1, "eaf6a00cde33907f120303081fe76bdbc8f129a1467741674d79c2f819e576c25971e9b31717b5f7cf8c6bdcd48b6322a9cf777479da364f8ca3fc43706f21f437974c49f5a69ba2db1e50c6cc6fbfbdf8dc78a8b3781badbe0e8650c647f320a41f10583f89d57fed5116749273a147498ec8e7c750881f73c6879418e8a3d2571b5ac16d1480f8450ed7faf1c6aefa3c9b131125dc755f53d0705fe303dcf21bfd3ce0a40154ece25738e57a231287e1967db6e84f624cc00b430dcf6ed768257124d0ebe375e81b6f1ac1d2c5bd9ef822fb4a83b1012295ffd2c13be788bd478dfd7623e759349ac75e0accb08d"}, @country_functional={0x12, 0x24, 0x7, 0xfc, 0x5, [0x0, 0x1, 0x3, 0x8, 0xff, 0xfff7]}, @ncm={0x6, 0x24, 0x1a, 0x3}]}], [{{0x9, 0x5, 0xa, 0xc, 0x40, 0x6, 0x7, 0x9, [@generic={0x52, 0x3, "925b6fbfeeb07d8a69334e922822461e5b7553b93fca66fb3697adb1d6113f921cd9968026a802c6336ab0886e5148a2e4234e75bdd3aa81e6f9cb685e68fdfca1db4409a729ecf1112da8e5aa0803dc"}, @generic={0xac, 0x23, "0a31729f8e2a540e59c87099a8f7dcab159b25f2739cbf848ea4a1aefb60a82cc72a94bdff10d3c1b2d3979da67cbd6de34546d77734af08c06bd75a987aa690f6f3f02a427def9487ddd4e4a571154baa4588935e1caf595837294052d46b71d4bfcbe1eb3cdc528b13d77792932aab08966398635faa14fd679fe989ca81e43e808029104efde3b804368e31d8ff34d61ddad9583ff7ff4b884b77e46641df3e1f05a732f3f9ae60a1"}]}}]}}, {{0x9, 0x4, 0x40, 0x6, 0x4, 0x1c, 0x3a, 0x95, 0xff, [@uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x80, 0x6, 0xb7, "7376a3ffb2860a5e"}, @as_header={0x7, 0x24, 0x1, 0x8}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0xe2, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x5, 0xff, "1ead"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xb1, 0x1001}]}], [{{0x9, 0x5, 0xf, 0xc, 0x20, 0xf9, 0x8c, 0x10}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x7, 0x9, [@generic={0x15, 0x22, "8638a3919bfd545aac230b978bb9e594e746ad"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x7, 0x7}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0xc, 0x78, 0x0, [@generic={0xbe, 0x23, "e06eba3c8bddf8cba1c3d7443e2bde4dcd107859eaa02bcabd230f7019f38197b9fb46037b55bcbfb3ccf3ab859e56437d58447c36ab8f19f8e47ad793ef040036329184f8fb6fd3469719812a2dd690afc54a03c315ad6ed6d7ec7f2203c8a4d17cc67bbc99f0e11df59dd7aaf57a0da392291b5b27d9235bd8e062aa92bb356cd2d0464ac4997656449933501f2203fe6cc3a7f6ad7828f6de1ae9aa247fcaca447c581963e8dee096e51f92c0e6947379ac3f501f8bf9fc5b1f6c"}, @generic={0xa4, 0x24, "4b2aa598398b06144043843f60b776beb88fef01cfcde735003482479a2561f63ba0205e6a9dcc3da34f4480a3f3393f16ae0e5310e40eb9aab446cd5cadcdd375c2f1f2f0025848a7a281241878d219e79fdb5f6a8b4ca2c622695ecef620c756ce582f004c55e7704dc99e72935486fb7aa0440a2bb059ec65dd7548248a3775e40c31d4e4d9e2d8fb36a9ed81c279eb367ba7005f7e45a41ebfcc3ce94e1332e8"}]}}]}}, {{0x9, 0x4, 0x19, 0x8, 0x6, 0x2a, 0x43, 0x7a, 0x0, [], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0x4, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xb8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x283}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x18, 0x20, 0x5, 0x31, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x10, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x3}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7b, 0x9, 0x7, [@generic={0x96, 0xe, "54fe97f78961d15c66af1618a8be4d56e3021d6ad8a3bd71826c8cdcb54239b45db225be72adad23d341a0655e4b9b1beb02571b15ac7524ce0a1e7c7e29c32cb0d5d958b9506ef8162ad638e26602a19394e009bbaa1c6b773d301a70e2add0a75d066ec129bd25435c1ac67fb07d1b1c020852f1e7e80ae14256827959e6570e7289c8feee05c4fcb1c5bc524d3cd24f5d9224"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x0, 0xe, 0x5, [@generic={0x87, 0x7, "d39c6a589dc5736ee11c199b603aea397f671b975be525b162668ae03e7ecd8136cdaf230a7ea8c62c0c1bb2d410584a69712910a914a711c8525624b231bc8f46ef9950d10973de8bc78febc2a5ed32436ca8b77a69e0dbe13a83fd7d99070c8db37213591efbec72b333b9e44716bc2f0c82cc6f99da0144534206b59fa739e1a9be329c"}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x4, 0x7, 0x8, 0x8, 0xd}, 0x5b, &(0x7f00000006c0)={0x5, 0xf, 0x5b, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xfa, 0xf000, 0x9, [0x3f00, 0xc0cf, 0xc00f, 0x0, 0x3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "227ac4687c579c4c5fe05a8cc2dc0c79"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x56, 0xcc, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7, 0x1e00, 0x2, [0xff0030, 0x3f00, 0xc030]}]}, 0x2, [{0x0, 0xfffffffffffffffc}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}]}) 15.081743134s ago: executing program 0 (id=404): unshare(0x60000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffc, 0x7, 0x8000, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @empty, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x20010, r1, 0x42ef1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f00008c1000/0x4000)=nil, 0x4000, 0x8, 0x10010, 0xffffffffffffffff, 0xb2993000) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0xfffdffff, 0x80}, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006ac0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x205d) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x4, r7, &(0x7f0000000140), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x40000, 0xd5) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4001) setresuid(r8, r8, 0x0) 15.042448965s ago: executing program 0 (id=405): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_complete(0x0, 0x0) (async) r1 = syz_io_uring_complete(0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x42100) (async) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x42100) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80c00) ppoll(&(0x7f00000000c0)=[{r0, 0x208}, {0xffffffffffffffff, 0x404}, {r1, 0xa4b0}, {r2, 0x2180}, {r3, 0x80}, {r4, 0x1f0b89f90b693ffd}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x399d]}, 0x8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14c00, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14c00, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0xc1da470000000000) (async) ioctl$KDADDIO(r5, 0x4b34, 0xc1da470000000000) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000001c0)=""/86) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "073e87247c55ae5ebadb5140a9219c6c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c18d3d996e5463fd3aadc65771daf23"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "1fb238f56472133d06ee415d5c354891"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "073e87247c55ae5ebadb5140a9219c6c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c18d3d996e5463fd3aadc65771daf23"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "1fb238f56472133d06ee415d5c354891"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7b}}}}, [@NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xbc, 0xd, 0x0, 0x1, [{0xb8, 0x0, "d8a26a01c8836ec8a8e0927e577b32718d31e520994e64b4bca2e09fea7c1c0266b86d21b95c7dfad7a65a00c664741538929b3bb2d732611ae3dd7374f7985826c79552651dd7da6d893bfba1187e5becf225e56230a56d292238137feaec4d515440f8b8612be8f23c10541b81eba01dd4cd439cebcb315ac082afdb9a4fd53fc50a17ba81b6d37a9e6f306812ffe066487bebce77a8b07a5c03862c958222173244353ef7554f91c606ad02514ae7f18173e9"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xc}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4801}, 0x40041) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7b}}}}, [@NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xbc, 0xd, 0x0, 0x1, [{0xb8, 0x0, "d8a26a01c8836ec8a8e0927e577b32718d31e520994e64b4bca2e09fea7c1c0266b86d21b95c7dfad7a65a00c664741538929b3bb2d732611ae3dd7374f7985826c79552651dd7da6d893bfba1187e5becf225e56230a56d292238137feaec4d515440f8b8612be8f23c10541b81eba01dd4cd439cebcb315ac082afdb9a4fd53fc50a17ba81b6d37a9e6f306812ffe066487bebce77a8b07a5c03862c958222173244353ef7554f91c606ad02514ae7f18173e9"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xc}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4801}, 0x40041) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r1) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x8804) (async) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x8804) r9 = accept4$nfc_llcp(r1, &(0x7f0000000780), &(0x7f0000000800)=0x60, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000000840)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000880)=0x28) r10 = dup3(r4, r2, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x48}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3800}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x4c001) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000a40)) fchmod(r3, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000a80)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x2e, 0x8, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x84f8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@new_dev={0x3, 0xd83, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000bc0)=0x0) syz_ublk_setup_queues(r2, r12, &(0x7f0000000c00)={0x0, 0x2311, 0x800, 0x0, 0x15c, 0x0, r1}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf3dc, 0x20000, 0x2, 0x20c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60a6, 0xfb291fd7c7d14dbb, 0x2, 0x2a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6358, 0x8, 0x3, 0xe5, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb83c, 0x200, 0x2, 0xdb, 0x0, r10}}], 0x4, &(0x7f0000001f00)={0x2e, 0x10, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc28}, 0x0, 0x0, '\x00', {0x3, 0xb4, 0x0, &(0x7f0000000f00)=@buf_max_buf="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"}}, &(0x7f0000001f80)) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2000, 0x0) sendmsg$can_raw(r13, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)=@can={{0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "8c791e7e8e59afd6"}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x48000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x13, 0x94bda5f18f10d2f3, 0x301, 0x70bd25, 0x25dfdbfd, {0x5, 0x0, 0x4}, [@typed={0x14, 0x155, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x42041) 12.807251922s ago: executing program 3 (id=421): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x20009800) (async) sendmsg$key(r1, &(0x7f0000000200)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x20009800) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc70e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0xb, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}}}}]}}]}}, 0x0) pipe2$9p(&(0x7f0000000080), 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008890}, 0x8e34acd4ef9f59b5) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000002c0)=0xf) (async) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000002c0)=0xf) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="06002c0000002c23e7e6d86e41eaddfb08000000dd23ee248c2e7bdb90575e215769688a105a7e740d2c80"], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.731528964s ago: executing program 3 (id=422): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8001}, 0x1c) recvfrom$inet(r0, &(0x7f0000000640)=""/216, 0xd8, 0x0, &(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1f1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000140)="58dd", 0x2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fadvise64(r2, 0x10001, 0x10000, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'pim6reg1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "78f3ff5e406d04f4117f6a8c2746134cd90b95c24752c62592a8fd6384c78388", "3f7c97a985ae8030f0e1f254f8961ecf593270539813c721c8a176bf5b9ae4a5", "b4cc49abd0764cf33a8350d87e649eb9a4247f8fd271e832367948a6ab5ef961", "68f0b15befa41144317ece5147f1e6728316039eab4012baa910053350d51fcb", "bda7a27b5cb110e59be555256ebba1f3a5db2ab24fb0ee4a4a4b01f095f86a64", "33086e7b3ac4b5b7f0c5ce67", 0x81, 0x5, 0x9, 0x2, 0x5}}) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "e587ac4e7ef559be", "e85b433b3ca358df7c89494af074327b", "de10ffa2", "c7a6c2ab359656ab"}, 0x28) write$P9_RMKDIR(r3, &(0x7f0000000600)={0x14, 0x49, 0x1, {0x10, 0x1, 0x5}}, 0x14) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xe76, &(0x7f0000000040)="876c87f1d88702e17a1836c6dd3297ebdbbeaf5d0fd0f69d138982aa7b0a", &(0x7f00000000c0)="1232ad3d59831375892a5c11a8d303dc4cbe70696d2d6d3ac6ad2df98d500f612dae395183580c401f5968dbaa921edd5e9079f84c78f5a7520d6031df79c9de4759ac443e9c2a5ec53ca0995c4bb77cbea5ef2c13601d5079192bc01eec2cc8c9054c23e90fbcc43a7909cbdf03a6e098b1b7c8d7c016b7544e59", 0x1e, 0x7b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000380)="baf80c66b8203b438f66efbafc0c66b8ee00000066ef66b80500000066b9020000000f01c10f01c866b80500000066b95d9d4f4c0f01d9ba2100ed66b8000000000f23c80f21f866350000e0000f23f83ed20b660f3880206766c7442400bf6f9ab36766c74424026627896b6766c744240600000000670f01142466b94d0600000f32", 0x83}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000340)={r6, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x3636c1, &(0x7f0000000280)={@align=0x80, {0x5, 0xfffe, 0x8, 0xffffffff80000000}}, 0x7f, &(0x7f00000002c0), &(0x7f0000000300)=0x3ff}) 11.799755098s ago: executing program 3 (id=424): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xee47, @empty}, 0x10) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f00000000c0)) 11.7325632s ago: executing program 3 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 11.582519784s ago: executing program 3 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 11.581798593s ago: executing program 32 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 10.226510568s ago: executing program 4 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x78, 0x65, 0xe000, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x1a, 0x0, @wg=@response={0x2, 0x1, 0x3, "c4a1b8e01ba9a62c1c2e3cf577a8d851045ef41945f383ccf137201eb4dd7df2", "98994d19627a481b27e612cf41970f3f", {"00855f5dc8025460287d5461246a68a5", "ad0103ce305267f066ea89cf5fc12804"}}}}}}}}, 0x8a) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x30, 0xe, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x19a7, 0x2, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x11, 0x0, 0x6, {0x8, 0x25, 0x1, 0x82, 0xc, 0xfc, 0x60d2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x7, 0xfe, {0x8, 0x25, 0x1, 0x2, 0xc, 0xf8, 0x81}}}}}}}}]}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000180)={0x0, 0xea60}, 0x10) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000080)={r3, r4+10000000}, &(0x7f00000000c0), 0x2) 7.085172269s ago: executing program 4 (id=445): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/netfilter\x00') r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="409e59"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000180)={0x20, 0x2, 0xd0, {0xd0, 0x6, "e2abbe0b6c4c2ccf7db72f0c6ba1dcc7adb4365556385b7f006ae9f1e3b7e91e1aa7401936e2b954928b5da2e37450a6205ed0f3b8bb045cbffbcd9f765dd477a43253422523be763b19e8b6511a77695a5260f01bad20250dba1535eb01a300de32fd5d9ba86500ff5c4a6a668643952a8b4d90e85c6243994347d1e8e37ceafb78b8fabb25230aff90f24cf7ef5372ff8fcea03e44c77a4b29ab35ead142b759edcf5402d083c0939532ae346ca6a95b2a863df11d6c718527c7f362601900c30b8a6467baac7335759293a0b0"}}, &(0x7f0000000280)={0x0, 0x3, 0x102, @string={0x102, 0x3, "68bd0e26bfe57d635826366b25785b83a5f532fb22d7ae0d5510c68d38cfed3c99cdd2b38b4a85038f26734cd1ce01ec004273682cefea77670bbbaa32d5d7a539eeb8ccb787ff3c00ca43108fd61c4ad1a62c82d9c46d3c31bdb0d5521b8bc1f6a2030c3be78ab47ef409974fda6ece86e750d65de47ec81a0e936b2ff30f1068941b069eccfd9fa201c54f5723867d3701c3e37d51277d76ea6ae8489eab45d160a0b71fdc6ad7504a552f6ba05f99b7d6fb114e69411d91ffccbedb9ecfe6786839032f384088acc06fbd964878470b10da3616d32e2de3350fe46f8760ed52d71ff40b54c5ea00a41ed7fd4a72f4e8e4efbf101eb8c952e7d561cd283c42"}}, &(0x7f00000003c0)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x2, [@ptm_cap={0x3}, @generic={0x91, 0x10, 0x4, "7fc4e8a5f34429bd0907eee77e3f41ce841d843170d28fb3d027d418a2f0cbe5dff0445f319dd49f3efbbfe61b8090f92b9c21c593a985bdd20327314587a3cbb935e9d1dd0bc73b30c6042c8c78679c21f837fc4d7f3b069aec965e246d82483217835393a8c61abed339b30e98e7c6c7f1a3b6b6e6943dd121fcd206d210402b4ddab21b7db4c1eb8455fb090b"}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x1, 0x3, "c57bb41a", "390cbac4"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x3, 0xfd, 0x8, 0x81, 0x8001, 0x9}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000540)={0x40, 0xe, 0x95, "c2a285bd88fa3d20f4679f2f5087e8b302899802dd4546335954668ab23564bf5c46e037fe35a38061cd7fbb2045c4e37f54b6453288f0375530991d68118485dd0a538572a2127363bd06c6d65c728f3a1bca9d23bb4110c32286d97ee1a9faefa7ac29fa6431310879b9c5e6383b810d2c43399a19eefa15446784b2aed2c19a54bba242b13729729ba3b3343310810204c0ec60"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x40, 0x40}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0xb, 0x2, "f73a"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xa5c}, &(0x7f0000000800)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x19, 0x2, "c57c"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x9}}) 4.093908665s ago: executing program 4 (id=456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fd}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x1, 0x33000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000240)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x8006, @empty}}, 0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.14034083s ago: executing program 4 (id=458): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 2.417289489s ago: executing program 1 (id=460): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r0, &(0x7f0000000140)=""/229, 0xe5, 0x18af89d8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r5, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x5, @l2={'eth', 0x3a, 'veth1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000840)={@val={0x0, 0x22f0}, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x0, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x6}]}}}}}}, 0x42) 2.339357521s ago: executing program 1 (id=461): mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 2.311337111s ago: executing program 1 (id=462): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) timerfd_create(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x14, 0x0, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0xe5ef}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x3}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) 2.086017617s ago: executing program 1 (id=463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x11, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xffffffff, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r5 = socket(0x10, 0x800, 0x2) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x1, 0x2, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @loopback, 0xfffffffa}, 0x1c) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write(r1, &(0x7f0000000000)="1c0000001a00590214f9f407000904101f0000000000000000020000", 0x1c) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r8, 0x3) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x5e) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.082841827s ago: executing program 1 (id=464): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x80000) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x1f) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000013740)={0x0, 0x10, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x0, 0x5, 0x1, 0x0, 0xcf}]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4040801) 2.056965348s ago: executing program 1 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @generic="c3fecbc0"]}]}, 0x34}], 0x1}, 0x0) (async) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="b8afda9225a222d27c8efd41b7e4cc0f6cd720c3d4edb4462ead3045382902b9b0454c95b52beb2b72cc7db08233e2cd7218f951adbc39d69c0102a133b0318c9fee7864"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x1, "ec"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, 0x0, 0x0, 0x4045010}}], 0x1, 0x4) (async) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[], 0x78) (async, rerun: 64) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) (rerun: 64) close_range(r3, r4, 0x2) 1.871880342s ago: executing program 4 (id=466): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 1.793275785s ago: executing program 4 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082cbd7200fedbdf250c00000018000580756470000c000280080008000180ff00"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x11, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f00000004c0)={0x14, &(0x7f0000000080)={0x40, 0x22, 0xe4, {0xe4, 0x7, "5d4f6829f7f0d1543332e23a08fac42457be9540605412acc76d60871d6e6dd48ca161a802ebe5cc3076ce9e194b44b9a4f82e7c4210575638ffc496dcbabddb18e5f246956ea9ae36e45d558890fae2fda936000eace9a0444f70be208430af5ee31e223699c1e3209b5d60603d676651d82d861bcbd0dc4cdfd0be6915f36e90995f9730aef037ebc064608e8b2dc9785c1331bd96ad7fd3c03ef7f1cc9228cb349ea2e504ec02dd5390cc22b821ebc3f829134d6f92c8bf59ec811495bd8791ffcd68e201436559826f35830acbdd76b5e38f04ae9028cd0ff09ed04a378f647e"}}, &(0x7f00000003c0)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "597566e000bf7439f4b430f60dd2c3479c6fa8d41d31f2fd0821fa1ce067f72e835a349c627376e93b0031a2aca3d25b5fe23260148505d931f8d58fbad5ac671fd55e911b462a5e8158f27d9d1aec245219a856028d3f854da8e06b4e5cffc8517feeea8dd7eae2feaa8b3fae72384fd16ca573488a2f2aec36247ddc708cbf5c2792a3858ee3721de19b59b340feb62788c6952fada86a93209000f7a13edd8ab0da185a519025f85f482beeb2669a5bab2bddc3b8fdf7e1c0a813a97d59f15fe456b277cd8877ba09392eaa"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x40, 0x8, 0x8f, "a253fb1e94e1f9c6cb522c2c1531be7bf3daed4a347ae70b90fb3ba5fe39498f4ce18fc786529cb264f1b7d5f4632566651d2bf9e9ddf7369d0f4df791e95296bdfaef758e06587f1df1585af6459136c0ae77ade9fcaf4ec021edd63e59c8bf7e51a233a0a61af1c4812fb5c76691e727aed327a332255d701096777709e00a6ad220c0ef2a54befa974c9da020dc"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x81, 0x1, 'x'}, &(0x7f0000000740)={0x20, 0x82, 0x3, "369e44"}, &(0x7f0000000780)={0x20, 0x83, 0x2, "e07b"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, "abcb"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "3886c9"}}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 1.711381967s ago: executing program 2 (id=469): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@local}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) r5 = openat$cgroup_int(r3, &(0x7f0000000500)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x1000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0x1) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close(0x3) 1.631063939s ago: executing program 2 (id=470): mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) 1.630556609s ago: executing program 2 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x4006) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x28010b3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 1.481205693s ago: executing program 2 (id=472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) dup2(r1, r2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x38}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000487000/0x14000)=nil, 0x14000}, 0x2}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x48}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mremap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000aca000/0x4000)=nil) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, 0x0) syz_usb_connect$hid(0x0, 0x75, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086d0425c1e7000000000109022400010000f035090400ff01030001000921810003012228000905810340"], 0x0) 706.189472ms ago: executing program 2 (id=473): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c00, 0x2, 0x4, 0x94e0}}, @out_dx={0x6a, 0x28, {0x6a92, 0x0, 0x8}}, @code={0xa, 0x5a, {"f2afe17866b843000f00d0c442699e96f3240000f4b9800000c00f3235000800000f3026420f2263c4a1fc50f1f30f2de348b8bc540135000000000f23d80f21f835c00000500f23f8"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x4, 0x2}}], 0x10a}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000001c0)={'binder0\x00'}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/216, 0xd8}], 0x3) fsetxattr$security_ima(r1, &(0x7f0000000580), &(0x7f00000005c0)=@md5={0x1, "c0e68b439fdafdab919ace7d8d2ac170"}, 0x11, 0x1) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000600)) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000a00)=0x3) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x20040, 0x0) vmsplice(r2, &(0x7f0000000d80)=[{&(0x7f0000000a80)="600bfa2c6f19d68e18f5569a8d90ff1df3b7760fb8c7493ed85ad480e5fb7f90854426dce9162e86d5dd1429702d107258b2fa1065fcddc30c9b99269a79e44f28f5c62e1d082f9f4883a18b2e9f10e064421ba96411b318d6c05c792e57078b6c5c1ab51ac5210246f8054d2ab40e97b471b08e1d9b400d1fcf733dec70b7b28ae521e68a7f676406c3aa7036f01246bfe318fb6b93af4549585350556c6fff12af12d9ca8db763360b521921e62b6d0d777156a219f06fcbe3b7bd3259b56719f2c87fcc39fe4e949a96a83c2fbf64caef6fa7a9abe566c034443c0fbcf3bcb14b81e8fd", 0xe5}, {&(0x7f0000000b80)="32147b07489f4c108f685dfe45257c0397fd659873b3d1ff2d2608446d", 0x1d}, {&(0x7f0000000bc0)="8f63afb743b8a3e4bde8616b0ef16db31ddcec1a9d84eea425920a2b9cd80d7f4809a3c4e58d89c07882bfaca948d4c055d9cf68f63125f1f347ffd7761a3fa7fe91b7", 0x43}, {&(0x7f0000000c40)="5f174306ea553cff600b1fbad46caa3096fd23cc6636112e9f2255ab510b3abc207eccfc2f214dd4b8fcf97128a605e93ba9f13f3e3b886c14cf3d8aa7", 0x3d}, {&(0x7f0000000c80)="7611874d583bc664e985165981c363b320bbe2a51f69433684b299c9a7b4ca9fd7422df2d89636b16e13910874b74c28129fe830abd57a7890b597be77ea03e0f96417124896de1b2a3a9c49874870e6da3a365962ef4ce778c0164ddbd74abaf7c64fd592879be344971550f3b2995f032cb6d3beb36afb544adc756782c9e6353d8a494dd1322d4c28862f3eac62d45372624b1323db474ba449565f343789f56b97b504fb49d9a5528c4b145598acc86ca07708412224c15d26e76c29424126658f055deb514a9d9b18240d515fd222bf233d335a6e128e7800755561fcaa4d", 0xe1}], 0x5, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000e00)=@arm64={0xac, 0x2, 0x80, '\x00', 0x6}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x4a200, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000e80)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x8) splice(r4, &(0x7f0000000f00)=0x5, r4, &(0x7f0000000f40)=0xff, 0x2, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000f80)) r5 = syz_open_dev$usbfs(&(0x7f0000000fc0), 0x16, 0x800) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000001000)=0x7) r6 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x11, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x400, 0x5, 0x0, 0x6d}, {0x9, 0x5, 0x8, 0x3, 0x40, 0xee, 0xc5, 0x1}}}}}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000001280)={0x2c, &(0x7f0000001080)={0x20, 0x7, 0x33, {0x33, 0xa, "2eb323f1e47f5e8073a5f1a3b876a40022ecdd248ee1f971b750633360b21a19a405c4017e922c50f641ce6af6c71354ad"}}, &(0x7f00000010c0)={0x0, 0x3, 0xce, @string={0xce, 0x3, "a705b1064fd44735868ac33b2d8f8045d1cb1ad1a273bf37ffcb96897f0b1c71593e0f403db8980408aec78cc01d69d01bfce7fd4ef7e50f8366d883171fb63dab64b5414ffda4d95d1102dda57e367bd5e3666177e9a635346b182a49654861b75c6f76c4c140a44780c459b464dd28e8f1957c499f38e44ceb0b275abaecbcf912732b94b1e049bbea05cec20f48c71251ca9dd9687cf89e16135c3d743e245c75192cbba8858997800f02b321c77cdb56e62821b90e519b5d6701967586be8dfd1b3c30c3c2a7236a6297"}}, &(0x7f00000011c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x1, 0xf0f, 0x6, [0x0, 0xff0000, 0x0, 0xff30]}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0xf, 0x1, "8ee97570", "18b7b53a"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x35, 0x4, 0xb, 0x8, 0x8, 0x5, 0x4}}}, &(0x7f0000001700)={0x84, &(0x7f00000012c0)={0x20, 0x10, 0x51, "0d970ed80ad9f10e582d9e5a4bffecb465695fe3089ecb8e517abecc92453cd10a992ef8e6a897e2f267f62ba7b58b2bc78f73916e54b1890ab69b54f67d3cb4da1899015cebc71660801d66f373ad747f"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001400)={0x20, 0x0, 0x8, {0x148, 0x40, [0xf00]}}, &(0x7f0000001440)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001480)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000014c0)={0x40, 0xb, 0x2, "0c88"}, &(0x7f0000001500)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, &(0x7f0000001580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f00000015c0)={0x40, 0x19, 0x2, "970c"}, &(0x7f0000001600)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001680)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000016c0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$sierra_net(r6, &(0x7f0000001880)={0x14, &(0x7f00000017c0)={0x20, 0x21, 0x41, {0x41, 0x6, "9a9b096791705ea5ad343e3217ae79c423484ff5ea2248c49e584fabbd2829d0121a82ffb74befe86a0079f7099e92b77664974deb9896594c61b7c493c9ef"}}, &(0x7f0000001840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}}, &(0x7f0000001e40)={0x1c, &(0x7f00000018c0)={0x20, 0xe, 0xf0, "a7198ca922967d1808bdcdf09bac5f1cc0c6fcfd0e01724afbe557fe579eff080d4e539a1e2941af647dee1067ca93c8e54dd54a87fe5f7cc11fdde2c4971bfc3819b2e74e626c36dbca86af82d2e0a42f6f9fb22510f0b100626fcbc29d25f61499fdd8a92c42014c94cee22c5b4c446c1b1069dba8ea25876b118b4f04752f0f96e0e71c8edd87900a0e9bee101ecf9378b8f560f1933540ec260e5b2171aa94df3fc79ae0c6860728a0dcbb523d0d2b08be2b2072bfa6236d784bd0b82ff6b49de0bd35332c42c51b8f9077e8c9cfbc308c995c18d9907fd644ab2178a9f3ebaf0d5565ef759cb2242ff995f8414d"}, &(0x7f00000019c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001e00)={0x21, 0x0, 0x4, "e60ca74c"}}) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000001e80)={0x7, 0x7, 0x3}, &(0x7f0000001ec0)=0x28) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f00), 0x101000, 0x0) read$snapshot(r7, &(0x7f0000001f40)=""/199, 0xc7) close_range(r3, r0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000002180)={&(0x7f0000002140)=[{&(0x7f0000002040)="92d80930f58315bbc9ab36a96d42169e69ac68803adbd3788e42b95ccbb4e1ade585db5255e229da0530bd64ad9f3c8b2be296f19b29ecc620bda188e920e0d00950c3e84f3a24473ca71555709b0addcafd11189b3ae23de86afcb26811d5e92ca65d13d66fabe97805a81a2d8e288202052ef346beb5291519af705ab0ad5786d81eeb1c996f555aa5dfda8b1ae4b89c4486461b8b6c373a6641ea63bca706cfa1c70208ee45b65f1fa22c55410a22febf08569c425eb0c0f4a59fb0cb27ec50f7027a2e66373bb2cf", 0xca}], 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x1, 0x1, 0xe}) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000002200)={0x2, 0x0, @remote}, &(0x7f0000002240)=0x10) shutdown(r8, 0x0) sendto$inet(r8, &(0x7f0000002280)="bd851b333ebc306443aed77cefad9063592e1bca1f46d8bf415f7349d00429aec6e56db6db13db549c38a420e95ac055cf4c3340673065595c3f150d8791f86ebad48bfaf26cc6c1cdb775c802e24c6be544da306c3eec7944715b7674212dd943922a0110ffd7c5b661d24796f8cf655deabecbbc70ba", 0x77, 0x801, &(0x7f0000002300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 99.564328ms ago: executing program 2 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x8, &(0x7f0000000340)={0x0, 0x778f, 0x80, 0x3, 0x330}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001b80)={0x3203000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x6}, &(0x7f0000000a80)=""/4096, 0x1000, &(0x7f0000001a80)=""/173, &(0x7f0000001b40)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x9}, 0x58) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x4dd, 0x0, 0x0, 0x1000, 0x2, r2, 0x0, 0x102}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 0s ago: executing program 33 (id=405): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_complete(0x0, 0x0) (async) r1 = syz_io_uring_complete(0x0, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x42100) (async) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x42100) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80c00) ppoll(&(0x7f00000000c0)=[{r0, 0x208}, {0xffffffffffffffff, 0x404}, {r1, 0xa4b0}, {r2, 0x2180}, {r3, 0x80}, {r4, 0x1f0b89f90b693ffd}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x399d]}, 0x8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14c00, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14c00, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0xc1da470000000000) (async) ioctl$KDADDIO(r5, 0x4b34, 0xc1da470000000000) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000001c0)=""/86) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "073e87247c55ae5ebadb5140a9219c6c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c18d3d996e5463fd3aadc65771daf23"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "1fb238f56472133d06ee415d5c354891"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "073e87247c55ae5ebadb5140a9219c6c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c18d3d996e5463fd3aadc65771daf23"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "1fb238f56472133d06ee415d5c354891"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7b}}}}, [@NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xbc, 0xd, 0x0, 0x1, [{0xb8, 0x0, "d8a26a01c8836ec8a8e0927e577b32718d31e520994e64b4bca2e09fea7c1c0266b86d21b95c7dfad7a65a00c664741538929b3bb2d732611ae3dd7374f7985826c79552651dd7da6d893bfba1187e5becf225e56230a56d292238137feaec4d515440f8b8612be8f23c10541b81eba01dd4cd439cebcb315ac082afdb9a4fd53fc50a17ba81b6d37a9e6f306812ffe066487bebce77a8b07a5c03862c958222173244353ef7554f91c606ad02514ae7f18173e9"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xc}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4801}, 0x40041) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7b}}}}, [@NL80211_ATTR_NAN_FUNC={0xe0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xbc, 0xd, 0x0, 0x1, [{0xb8, 0x0, "d8a26a01c8836ec8a8e0927e577b32718d31e520994e64b4bca2e09fea7c1c0266b86d21b95c7dfad7a65a00c664741538929b3bb2d732611ae3dd7374f7985826c79552651dd7da6d893bfba1187e5becf225e56230a56d292238137feaec4d515440f8b8612be8f23c10541b81eba01dd4cd439cebcb315ac082afdb9a4fd53fc50a17ba81b6d37a9e6f306812ffe066487bebce77a8b07a5c03862c958222173244353ef7554f91c606ad02514ae7f18173e9"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xc}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4801}, 0x40041) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r1) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x8804) (async) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x8804) r9 = accept4$nfc_llcp(r1, &(0x7f0000000780), &(0x7f0000000800)=0x60, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000000840)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000880)=0x28) r10 = dup3(r4, r2, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x48}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3800}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x4c001) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000a40)) fchmod(r3, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000a80)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x2e, 0x8, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x84f8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b00)=@new_dev={0x3, 0xd83, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000bc0)=0x0) syz_ublk_setup_queues(r2, r12, &(0x7f0000000c00)={0x0, 0x2311, 0x800, 0x0, 0x15c, 0x0, r1}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf3dc, 0x20000, 0x2, 0x20c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60a6, 0xfb291fd7c7d14dbb, 0x2, 0x2a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6358, 0x8, 0x3, 0xe5, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb83c, 0x200, 0x2, 0xdb, 0x0, r10}}], 0x4, &(0x7f0000001f00)={0x2e, 0x10, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc28}, 0x0, 0x0, '\x00', {0x3, 0xb4, 0x0, &(0x7f0000000f00)=@buf_max_buf="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"}}, &(0x7f0000001f80)) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2000, 0x0) sendmsg$can_raw(r13, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)=@can={{0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "8c791e7e8e59afd6"}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x48000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x13, 0x94bda5f18f10d2f3, 0x301, 0x70bd25, 0x25dfdbfd, {0x5, 0x0, 0x4}, [@typed={0x14, 0x155, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x42041) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 22.883353][ T36] audit: type=1400 audit(1785775444.020:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.886951][ T287] cgroup: Unknown subsys name 'net' [ 22.906375][ T36] audit: type=1400 audit(1785775444.020:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.934067][ T36] audit: type=1400 audit(1785775444.050:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.934561][ T287] cgroup: Unknown subsys name 'devices' [ 23.057774][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.063440][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.178959][ T36] audit: type=1400 audit(1785775444.320:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.202243][ T36] audit: type=1400 audit(1785775444.320:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.227058][ T36] audit: type=1400 audit(1785775444.320:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.257309][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.266246][ T36] audit: type=1400 audit(1785775444.410:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.291656][ T36] audit: type=1400 audit(1785775444.410:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.303973][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.317368][ T36] audit: type=1400 audit(1785775444.430:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.351604][ T36] audit: type=1400 audit(1785775444.430:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.116816][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.123922][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.134944][ T294] bridge_slave_0: entered allmulticast mode [ 24.141848][ T294] bridge_slave_0: entered promiscuous mode [ 24.148466][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.155548][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.162625][ T294] bridge_slave_1: entered allmulticast mode [ 24.169449][ T294] bridge_slave_1: entered promiscuous mode [ 24.303480][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.310580][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.317748][ T300] bridge_slave_0: entered allmulticast mode [ 24.323999][ T300] bridge_slave_0: entered promiscuous mode [ 24.330464][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.337552][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.344630][ T298] bridge_slave_0: entered allmulticast mode [ 24.351060][ T298] bridge_slave_0: entered promiscuous mode [ 24.357946][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.365000][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.372293][ T298] bridge_slave_1: entered allmulticast mode [ 24.378773][ T298] bridge_slave_1: entered promiscuous mode [ 24.384869][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.392026][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.399245][ T300] bridge_slave_1: entered allmulticast mode [ 24.405613][ T300] bridge_slave_1: entered promiscuous mode [ 24.489728][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.496952][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.504039][ T299] bridge_slave_0: entered allmulticast mode [ 24.510477][ T299] bridge_slave_0: entered promiscuous mode [ 24.517102][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.524158][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.531505][ T299] bridge_slave_1: entered allmulticast mode [ 24.537819][ T299] bridge_slave_1: entered promiscuous mode [ 24.553324][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.560396][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.567749][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.574786][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.663451][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.670540][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.677896][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.684954][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.694974][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.702060][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.709413][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.716468][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.743495][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.751029][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.759056][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.766629][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.773851][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.781571][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.797916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.804979][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.814016][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.821096][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.846143][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.853221][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.885075][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.892153][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.900268][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.907325][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.916473][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923538][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.948387][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.955459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.963480][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.970586][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.999577][ T298] veth0_vlan: entered promiscuous mode [ 25.013884][ T294] veth0_vlan: entered promiscuous mode [ 25.033633][ T294] veth1_macvtap: entered promiscuous mode [ 25.043281][ T298] veth1_macvtap: entered promiscuous mode [ 25.054775][ T300] veth0_vlan: entered promiscuous mode [ 25.092483][ T300] veth1_macvtap: entered promiscuous mode [ 25.106710][ T299] veth0_vlan: entered promiscuous mode [ 25.114814][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.144427][ T299] veth1_macvtap: entered promiscuous mode [ 25.222463][ T318] UDC core: g1: couldn't find an available UDC or it's busy [ 25.245198][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.288604][ T333] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 25.441312][ T346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 25.481783][ T349] UDC core: g1: couldn't find an available UDC or it's busy [ 25.496473][ T63] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.675667][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 25.683242][ T63] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 25.705556][ T63] usb 3-1: config 1 has no interface number 0 [ 25.711698][ T63] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 25.723660][ T63] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 25.733970][ T63] usb 3-1: config 1 interface 105 has no altsetting 0 [ 25.742883][ T63] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 25.761092][ T63] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 25.769758][ T63] usb 3-1: Product: syz [ 25.773968][ T63] usb 3-1: Manufacturer: syz [ 25.779191][ T63] usb 3-1: SerialNumber: syz [ 25.786376][ T320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 25.793828][ T320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 25.805584][ T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.853277][ T362] UDC core: g1: couldn't find an available UDC or it's busy [ 25.956800][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.967948][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.977778][ T67] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 25.995572][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.010401][ T67] usb 2-1: config 0 descriptor?? [ 26.145620][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.210329][ T320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.218201][ T320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.296725][ T45] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.308345][ T45] usb 4-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 26.317487][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.325507][ T45] usb 4-1: Product: syz [ 26.329759][ T45] usb 4-1: Manufacturer: syz [ 26.334386][ T45] usb 4-1: SerialNumber: syz [ 26.426786][ T63] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 26.439427][ T63] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 26.450438][ T63] usb 3-1: USB disconnect, device number 2 [ 26.535694][ T369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.543816][ T365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.552752][ T365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.563871][ T45] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.574523][ T45] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 26.584799][ T45] usb 4-1: 4:0: failed to get current value for ch 1 (-22) [ 26.597229][ T45] usb 4-1: USB disconnect, device number 2 [ 26.610909][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.715581][ T369] usb 1-1: Using ep0 maxpacket: 8 [ 26.722617][ T369] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 26.732913][ T369] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16 [ 26.743084][ T369] usb 1-1: config 1 interface 0 has no altsetting 0 [ 26.751620][ T369] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.760782][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.769193][ T369] usb 1-1: Product: 歟탫㙝ꌕ먍₎樮騮ᙸଌ暂㽃䨘屮㥥᤮哬帥겕Ƒ鄸䜜鏲Ɉࠪ邦譞ᩦ폡斂ス㽞磄⠂ﵳ뙣ና룷쌾冽唼볂炁阄莧衹佡昌쑔숣攢ᅦœ肏⦉竪碾䢰䫷銘癿졵з퉍蓼汰∓ሾ䣓竊䯽∼ꚃ᫣羺ꤪﴹ錅햡蹐ጭࠐ꒾猒づ٫ᔳ쨨㣛ꬉ閾湦膙⨛롔鄉⻨ี뷊↭じꑶ [ 26.802868][ T369] usb 1-1: Manufacturer: 韝ꯡ῝䅑콼ݼ╎瓩⋟듯䒰鄕䡒⤚ [ 26.811821][ T369] usb 1-1: SerialNumber: syz [ 26.817669][ T377] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 26.824979][ T377] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 26.997991][ T382] UDC core: g1: couldn't find an available UDC or it's busy [ 27.032772][ T369] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 27.042730][ T384] Zero length message leads to an empty skb [ 27.054121][ T369] usb 1-1: USB disconnect, device number 2 [ 27.148043][ T67] hid-led 0003:1D34:000A.0001: probe with driver hid-led failed with error -71 [ 27.161387][ T67] usb 2-1: USB disconnect, device number 2 [ 27.179224][ T392] UDC core: g1: couldn't find an available UDC or it's busy [ 27.316417][ T407] UDC core: g1: couldn't find an available UDC or it's busy [ 27.331246][ T63] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.331394][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.421900][ T412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=412 comm=syz.1.30 [ 27.476565][ T45] usb 4-1: device descriptor read/64, error -71 [ 27.478345][ T63] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.492865][ T63] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.505839][ T63] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.523594][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 27.535888][ T414] UDC core: g1: couldn't find an available UDC or it's busy [ 27.544290][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 27.557635][ T63] usb 3-1: Product: syz [ 27.561848][ T63] usb 3-1: Manufacturer: syz [ 27.566527][ T63] usb 3-1: SerialNumber: syz [ 27.709288][ T45] usb 4-1: device descriptor read/64, error -71 [ 27.769949][ T63] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 27.816074][ T369] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 27.825631][ T67] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 27.942153][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.963059][ T369] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 27.971173][ T369] usb 1-1: config 0 has no interface number 0 [ 27.977394][ T369] usb 1-1: config 0 interface 15 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.983006][ T67] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.988795][ T369] usb 1-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.997439][ T67] usb 2-1: not running at top speed; connect to a high speed hub [ 28.006189][ T369] usb 1-1: config 0 interface 15 has no altsetting 0 [ 28.016068][ T67] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 28.020712][ T369] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 28.035400][ T67] usb 2-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 28.040662][ T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.051586][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.065933][ T67] usb 2-1: Product: syz [ 28.066693][ T369] usb 1-1: config 0 descriptor?? [ 28.070890][ T67] usb 2-1: Manufacturer: syz [ 28.079764][ T45] usb 4-1: device descriptor read/64, error -71 [ 28.080611][ T369] usbhid 1-1:0.15: fixing wrong optional hid class descriptors count [ 28.086809][ T67] usb 2-1: SerialNumber: syz [ 28.298930][ T67] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.306054][ T67] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 28.314584][ T45] usb 4-1: device descriptor read/64, error -71 [ 28.320913][ T67] usb 2-1: 2:1: All rates were zero [ 28.329672][ T67] usb 2-1: USB disconnect, device number 3 [ 28.344030][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.428104][ T45] usb usb4-port1: attempt power cycle [ 28.469078][ T369] hid (null): unknown global tag 0xc [ 28.476929][ T369] kye 0003:0458:501B.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 28.487827][ T369] kye 0003:0458:501B.0002: unknown main item tag 0x0 [ 28.494560][ T369] kye 0003:0458:501B.0002: unknown main item tag 0x3 [ 28.501347][ T369] kye 0003:0458:501B.0002: unknown global tag 0xc [ 28.507826][ T369] kye 0003:0458:501B.0002: item 0 0 1 12 parsing failed [ 28.514940][ T369] kye 0003:0458:501B.0002: parse failed [ 28.520731][ T369] kye 0003:0458:501B.0002: probe with driver kye failed with error -22 [ 28.669640][ T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.679118][ T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.692035][ T369] usb 1-1: USB disconnect, device number 3 [ 28.723436][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 28.723454][ T36] audit: type=1400 audit(1785775449.918:160): avc: denied { write } for pid=430 comm="syz.0.35" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.725482][ T431] devpts: called with bogus options [ 28.758252][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.778728][ T45] usb 4-1: device descriptor read/8, error -71 [ 28.793925][ T36] audit: type=1400 audit(1785775449.990:161): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.819461][ T36] audit: type=1400 audit(1785775450.021:162): avc: denied { execute } for pid=432 comm="syz.1.36" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.821204][ T433] syz.1.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 28.905662][ T45] usb 4-1: device descriptor read/8, error -71 [ 28.912979][ T36] audit: type=1400 audit(1785775450.103:163): avc: denied { ioctl } for pid=434 comm="syz.1.37" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4270 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.090563][ T440] UDC core: g1: couldn't find an available UDC or it's busy [ 29.111473][ T36] audit: type=1400 audit(1785775450.319:164): avc: denied { create } for pid=441 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.132019][ T36] audit: type=1400 audit(1785775450.319:165): avc: denied { write } for pid=441 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.152449][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.160480][ T36] audit: type=1400 audit(1785775450.319:166): avc: denied { create } for pid=441 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.186401][ T36] audit: type=1400 audit(1785775450.319:167): avc: denied { getopt } for pid=441 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.211097][ T45] usb 4-1: device descriptor read/8, error -71 [ 29.275634][ T36] audit: type=1400 audit(1785775450.483:168): avc: denied { unlink } for pid=448 comm="syz.1.40" name="#1" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 29.312337][ T36] audit: type=1400 audit(1785775450.504:169): avc: denied { mount } for pid=448 comm="syz.1.40" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.363807][ T45] usb 4-1: device descriptor read/8, error -71 [ 29.386354][ T453] UDC core: g1: couldn't find an available UDC or it's busy [ 29.422127][ T455] Unsupported ieee802154 address type: 0 [ 29.478469][ T45] usb usb4-port1: unable to enumerate USB device [ 29.544120][ T463] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 29.560487][ T463] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 29.573100][ T463] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 29.635599][ T471] UDC core: g1: couldn't find an available UDC or it's busy [ 29.723731][ T479] UDC core: g1: couldn't find an available UDC or it's busy [ 29.772847][ T483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.792228][ T483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.900236][ T493] capability: warning: `syz.0.54' uses 32-bit capabilities (legacy support in use) [ 29.948099][ T495] netlink: 104 bytes leftover after parsing attributes in process `syz.1.55'. [ 30.017515][ T502] UDC core: g1: couldn't find an available UDC or it's busy [ 30.025381][ T390] usb 3-1: USB disconnect, device number 3 [ 30.032532][ T390] usblp0: removed [ 30.071038][ T504] UDC core: g1: couldn't find an available UDC or it's busy [ 30.160558][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.184595][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.193655][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.308209][ T45] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 30.316400][ T45] usb 1-1: config 0 has no interface number 0 [ 30.323949][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 30.333129][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.341179][ T45] usb 1-1: Product: syz [ 30.345369][ T45] usb 1-1: Manufacturer: syz [ 30.350046][ T45] usb 1-1: SerialNumber: syz [ 30.356683][ T45] usb 1-1: config 0 descriptor?? [ 30.374778][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.397736][ T519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.406516][ T519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.413893][ T67] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.416477][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.423192][ T390] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.430628][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.501645][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.559776][ T45] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 30.566334][ T45] usb 1-1: No valid video chain found. [ 30.572771][ T45] usb 1-1: USB disconnect, device number 4 [ 30.579681][ T390] usb 3-1: device descriptor read/64, error -71 [ 30.735559][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.813627][ T390] usb 3-1: device descriptor read/64, error -71 [ 30.979588][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.047909][ T390] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 31.106694][ T9] usb 2-1: device descriptor read/64, error -71 [ 31.174928][ T390] usb 3-1: device descriptor read/64, error -71 [ 31.311775][ T369] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 31.350626][ T9] usb 2-1: device descriptor read/64, error -71 [ 31.389916][ T67] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 31.409406][ T390] usb 3-1: device descriptor read/64, error -71 [ 31.458090][ T9] usb usb2-port1: attempt power cycle [ 31.469316][ T369] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.477391][ T369] usb 1-1: not running at top speed; connect to a high speed hub [ 31.486097][ T369] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 31.494423][ T369] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 31.502626][ T369] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 31.511886][ T369] usb 1-1: config 129 has no interface number 0 [ 31.518183][ T369] usb 1-1: config 129 has no interface number 1 [ 31.524514][ T369] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 31.527077][ T390] usb usb3-port1: attempt power cycle [ 31.538012][ T369] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 31.554334][ T369] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 31.567498][ T369] usb 1-1: config 129 interface 80 has no altsetting 0 [ 31.574441][ T369] usb 1-1: config 129 interface 5 has no altsetting 0 [ 31.576822][ T67] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 31.584830][ T369] usb 1-1: string descriptor 0 read error: -22 [ 31.592398][ T67] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.598878][ T369] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 31.610210][ T67] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 31.618698][ T369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.629377][ T67] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 31.644552][ T369] usb 1-1: MIDIStreaming interface descriptor not found [ 31.651472][ T67] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.666249][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.674387][ T67] usb 4-1: SerialNumber: syz [ 31.692798][ T521] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.809623][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.830589][ T9] usb 2-1: device descriptor read/8, error -71 [ 31.844228][ T523] can0: slcan on ptm0. [ 31.850730][ T523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.878085][ T390] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 31.913194][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.922779][ T390] usb 3-1: device descriptor read/8, error -71 [ 31.929269][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.942046][ T67] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 31.950854][ T67] usb 4-1: USB disconnect, device number 8 [ 31.969876][ T9] usb 2-1: device descriptor read/8, error -71 [ 32.074761][ T390] usb 3-1: device descriptor read/8, error -71 [ 32.210794][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.231580][ T9] usb 2-1: device descriptor read/8, error -71 [ 32.310855][ T390] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 32.339092][ T526] can0 (unregistered): slcan off ptm0. [ 32.346347][ T421] usb 1-1: USB disconnect, device number 5 [ 32.351610][ T390] usb 3-1: device descriptor read/8, error -71 [ 32.366479][ T9] usb 2-1: device descriptor read/8, error -71 [ 32.465232][ T558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32798 sclass=netlink_route_socket pid=558 comm=syz.3.68 [ 32.484657][ T9] usb usb2-port1: unable to enumerate USB device [ 32.504340][ T390] usb 3-1: device descriptor read/8, error -71 [ 32.523474][ T564] UDC core: g1: couldn't find an available UDC or it's busy [ 32.558761][ T567] UDC core: g1: couldn't find an available UDC or it's busy [ 32.626011][ T390] usb usb3-port1: unable to enumerate USB device [ 32.817038][ T368] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 32.865999][ T421] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.965352][ T368] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 32.973385][ T368] usb 4-1: config 0 has no interface number 0 [ 32.979615][ T368] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.990601][ T368] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.000391][ T368] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.013277][ T421] usb 1-1: Using ep0 maxpacket: 16 [ 33.013283][ T368] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 33.020111][ T421] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.027486][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.038779][ T421] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.056280][ T421] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.061274][ T368] usb 4-1: config 0 descriptor?? [ 33.066202][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.086004][ T421] usb 1-1: Product: syz [ 33.090299][ T421] usb 1-1: Manufacturer: syz [ 33.101462][ T421] usb 1-1: SerialNumber: syz [ 33.141733][ T580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.443712][ T390] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 33.492741][ T368] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0003/input/input4 [ 33.504172][ T67] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.513519][ T368] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 33.591835][ T390] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 33.600209][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.611227][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.621023][ T390] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 33.630105][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.638892][ T390] usb 3-1: config 0 descriptor?? [ 33.660497][ T67] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.669064][ T67] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.681294][ T67] usb 2-1: string descriptor 0 read error: -22 [ 33.687544][ T67] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 33.696666][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.911622][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.920225][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.983202][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 33.983237][ T36] audit: type=1400 audit(1785775455.304:222): avc: denied { listen } for pid=592 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 34.022146][ T36] audit: type=1400 audit(1785775455.345:223): avc: denied { setopt } for pid=598 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.037997][ T572] .N$: renamed from veth0_to_bond (while UP) [ 34.042223][ T36] audit: type=1400 audit(1785775455.345:224): avc: denied { accept } for pid=598 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.070751][ T390] logitech 0003:046D:C29C.0004: hidraw1: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 34.134112][ T603] UDC core: g1: couldn't find an available UDC or it's busy [ 34.162252][ T605] UDC core: g1: couldn't find an available UDC or it's busy [ 34.233092][ T607] ip6gretap0: entered promiscuous mode [ 34.238948][ T607] ip6gretap0: entered allmulticast mode [ 34.290533][ T615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.300856][ T615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.757109][ T390] logitech 0003:046D:C29C.0004: no inputs found [ 34.771214][ T390] usb 3-1: USB disconnect, device number 8 [ 34.799962][ T618] netlink: 'syz.2.83': attribute type 11 has an invalid length. [ 34.824929][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.833628][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.842720][ T36] audit: type=1400 audit(1785775456.171:225): avc: denied { ioctl } for pid=620 comm="syz.0.84" path="socket:[5465]" dev="sockfs" ino=5465 ioctlcmd=0x54a6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.868696][ T36] audit: type=1400 audit(1785775456.171:226): avc: denied { bind } for pid=620 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.887901][ T36] audit: type=1400 audit(1785775456.171:227): avc: denied { node_bind } for pid=620 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 34.916514][ T36] audit: type=1400 audit(1785775456.253:228): avc: denied { shutdown } for pid=622 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.228626][ T390] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 35.376404][ T36] audit: type=1400 audit(1785775456.721:229): avc: denied { sqpoll } for pid=624 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.378354][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.406702][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.410008][ T36] audit: type=1400 audit(1785775456.752:230): avc: denied { read write } for pid=624 comm="syz.0.86" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 35.417375][ T390] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.441153][ T625] zero sized request [ 35.452915][ T390] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.467696][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.468687][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.478812][ T36] audit: type=1400 audit(1785775456.793:231): avc: denied { open } for pid=624 comm="syz.0.86" path="/25/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 35.484816][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.516389][ T390] usb 3-1: config 0 descriptor?? [ 35.525515][ T625] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.551094][ T9] usb 4-1: USB disconnect, device number 9 [ 35.575004][ T629] UDC core: g1: couldn't find an available UDC or it's busy [ 35.604264][ T631] UDC core: g1: couldn't find an available UDC or it's busy [ 35.826679][ T639] Dead loop on virtual device ip6_vti0, fix it urgently! [ 35.918855][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.926419][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.933837][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.941443][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.948898][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.956420][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.963890][ T390] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 35.971737][ T390] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 35.981033][ T390] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 36.075884][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 36.098370][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.105716][ T645] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.114950][ T645] bridge0: entered allmulticast mode [ 36.208801][ T650] UDC core: g1: couldn't find an available UDC or it's busy [ 36.240130][ T652] UDC core: g1: couldn't find an available UDC or it's busy [ 36.261300][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.273986][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.284175][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 36.298734][ T656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 36.299811][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.322960][ T9] usb 4-1: config 0 descriptor?? [ 36.446681][ T671] UDC core: g1: couldn't find an available UDC or it's busy [ 36.480009][ T673] UDC core: g1: couldn't find an available UDC or it's busy [ 36.508935][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.518871][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.570501][ T676] process 'syz.2.85' launched '/dev/fd/4' with NULL argv: empty string added [ 36.924897][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 36.931905][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 36.940968][ T9] usb 4-1: USB disconnect, device number 10 [ 37.531336][ T681] netlink: 9 bytes leftover after parsing attributes in process `syz.3.109'. [ 37.540508][ T681] gretap0: entered promiscuous mode [ 37.546184][ T681] netlink: 21 bytes leftover after parsing attributes in process `syz.3.109'. [ 37.555235][ T681] gretap0: left promiscuous mode [ 37.560337][ T681] gretap0: entered allmulticast mode [ 37.583454][ T683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 37.811296][ T700] UDC core: g1: couldn't find an available UDC or it's busy [ 37.834150][ T368] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.851491][ T702] UDC core: g1: couldn't find an available UDC or it's busy [ 38.012722][ T368] usb 4-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 38.027448][ T368] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 38.036935][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.045216][ T368] usb 4-1: Product: syz [ 38.049504][ T368] usb 4-1: Manufacturer: syz [ 38.054447][ T368] usb 4-1: SerialNumber: syz [ 38.061941][ T368] usb-storage 4-1:1.0: USB Mass Storage device detected [ 38.082111][ T368] scsi host1: usb-storage 4-1:1.0 [ 38.082516][ T421] usb 1-1: 0:2 : does not exist [ 38.096545][ T67] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 38.114238][ T67] usb 2-1: USB disconnect, device number 8 [ 38.257590][ T9] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 38.405468][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.464383][ T67] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.641708][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 38.642006][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.651406][ T67] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.664128][ T67] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 38.674045][ T67] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 38.683979][ T67] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 38.697787][ T67] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.706997][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.718591][ T67] usb 2-1: SerialNumber: syz [ 38.725080][ T645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 38.732483][ T645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 38.740561][ T67] hub 2-1:1.0: bad descriptor, ignoring hub [ 38.746827][ T67] hub 2-1:1.0: probe with driver hub failed with error -5 [ 38.756640][ T67] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 38.782764][ T718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.791418][ T718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.859610][ T719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.868200][ T719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.888255][ T9] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 39.010017][ T67] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 39.018165][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.031588][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 39.031604][ T36] audit: type=1400 audit(1785775460.441:248): avc: denied { create } for pid=723 comm="syz.1.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.061607][ T67] usb 2-1: USB disconnect, device number 9 [ 39.070417][ T36] audit: type=1400 audit(1785775460.472:249): avc: denied { mounton } for pid=723 comm="syz.1.120" path="/34/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.095672][ T368] usb-storage 4-1:1.0: Max LUN 117 is not valid, using 0 instead [ 39.252888][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.294977][ T421] usb 4-1: USB disconnect, device number 11 [ 39.489504][ T9] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 39.510326][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.638558][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.838019][ T36] audit: type=1400 audit(1785775461.252:250): avc: denied { create } for pid=728 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.869005][ T36] audit: type=1400 audit(1785775461.252:251): avc: denied { connect } for pid=728 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.888747][ T36] audit: type=1400 audit(1785775461.283:252): avc: denied { bind } for pid=728 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.894169][ T9] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 39.917605][ T36] audit: type=1400 audit(1785775461.283:253): avc: denied { setopt } for pid=728 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.943989][ T36] audit: type=1400 audit(1785775461.283:254): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.966657][ T36] audit: type=1400 audit(1785775461.384:255): avc: denied { bind } for pid=733 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.987680][ T36] audit: type=1400 audit(1785775461.384:256): avc: denied { map } for pid=733 comm="syz.1.123" path="socket:[6145]" dev="sockfs" ino=6145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.011285][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.025294][ T736] UDC core: g1: couldn't find an available UDC or it's busy [ 40.054406][ T739] UDC core: g1: couldn't find an available UDC or it's busy [ 40.141703][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.204486][ T36] audit: type=1400 audit(1785775461.627:257): avc: denied { read } for pid=760 comm="syz.3.130" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.232116][ T761] tipc: Started in network mode [ 40.237059][ T761] tipc: Node identity a6bb5145dbe8, cluster identity 4711 [ 40.246700][ T761] tipc: Enabled bearer , priority 0 [ 40.253887][ T63] usb 3-1: USB disconnect, device number 9 [ 40.280112][ T760] tipc: Disabling bearer [ 40.377251][ T771] UDC core: g1: couldn't find an available UDC or it's busy [ 40.397215][ T63] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.411178][ T773] UDC core: g1: couldn't find an available UDC or it's busy [ 40.545150][ T63] usb 3-1: device descriptor read/64, error -71 [ 40.663641][ T67] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 40.673606][ T368] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.782109][ T63] usb 3-1: device descriptor read/64, error -71 [ 40.822970][ T67] usb 4-1: config 154 has an invalid interface number: 128 but max is 0 [ 40.831384][ T67] usb 4-1: config 154 has no interface number 0 [ 40.837771][ T368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.847936][ T67] usb 4-1: config 154 interface 128 has no altsetting 0 [ 40.855634][ T368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.866635][ T368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.876839][ T368] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 40.886020][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.895418][ T67] usb 4-1: string descriptor 0 read error: -22 [ 40.901922][ T368] usb 2-1: config 0 descriptor?? [ 40.906992][ T67] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 40.919047][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.927837][ T368] rndis_host 2-1:0.0: skipping garbage [ 40.933771][ T368] usb 2-1: bad CDC descriptors [ 40.941095][ T67] ums-datafab 4-1:154.128: USB Mass Storage device detected [ 40.974488][ T67] ums-sddr55 4-1:154.128: USB Mass Storage device detected [ 41.132651][ T421] usb 2-1: USB disconnect, device number 10 [ 41.142363][ T692] usb 4-1: USB disconnect, device number 12 [ 41.512865][ T63] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 41.647922][ T793] dummy_hcd dummy_hcd.0: remove, state 1 [ 41.653678][ T793] usb usb1: USB disconnect, device number 1 [ 41.659716][ T793] usb 1-1: USB disconnect, device number 6 [ 41.667001][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.683380][ T793] dummy_hcd dummy_hcd.0: stopped [ 41.690462][ T793] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 41.697046][ T63] usb 3-1: not running at top speed; connect to a high speed hub [ 41.707055][ T63] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 41.717659][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.725884][ T63] usb 3-1: Product: syz [ 41.730148][ T63] usb 3-1: Manufacturer: syz [ 41.734844][ T63] usb 3-1: SerialNumber: syz [ 41.763121][ T801] UDC core: g1: couldn't find an available UDC or it's busy [ 41.844494][ T811] UDC core: g1: couldn't find an available UDC or it's busy [ 41.872221][ T813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 41.927658][ T817] capability: warning: `syz.0.149' uses deprecated v2 capabilities in a way that may be insecure [ 41.951365][ T63] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.959426][ T63] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 41.968140][ T63] usb 3-1: USB disconnect, device number 11 [ 41.982906][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.016990][ T421] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 42.139189][ T822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.148415][ T822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.166331][ T421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.177302][ T421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.187124][ T421] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.200026][ T421] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 42.209140][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.217867][ T421] usb 2-1: config 0 descriptor?? [ 42.462003][ T826] UDC core: g1: couldn't find an available UDC or it's busy [ 42.621592][ T421] thrustmaster 0003:044F:B324.0006: invalid report_count -1661174935 [ 42.629815][ T421] thrustmaster 0003:044F:B324.0006: item 0 4 1 9 parsing failed [ 42.637615][ T421] thrustmaster 0003:044F:B324.0006: parse failed [ 42.644064][ T63] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.651874][ T421] thrustmaster 0003:044F:B324.0006: probe with driver thrustmaster failed with error -22 [ 42.677484][ T833] UDC core: g1: couldn't find an available UDC or it's busy [ 42.770088][ T840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.778755][ T840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.791894][ T840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.807745][ T63] usb 4-1: Using ep0 maxpacket: 8 [ 42.814222][ T63] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 42.822530][ T63] usb 4-1: config 0 has no interface number 1 [ 42.829472][ T63] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 42.833574][ T368] usb 2-1: USB disconnect, device number 11 [ 42.840704][ T63] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 42.861790][ T63] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 42.873255][ T63] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 42.883517][ T63] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.896636][ T63] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 42.908163][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 42.919342][ T63] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 42.930912][ T63] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 42.940017][ T63] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.948064][ T63] usb 4-1: Product: syz [ 42.952258][ T63] usb 4-1: Manufacturer: syz [ 42.956895][ T63] usb 4-1: SerialNumber: syz [ 42.962300][ T63] usb 4-1: config 0 descriptor?? [ 42.967711][ T824] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 43.175267][ T67] usb 4-1: USB disconnect, device number 13 [ 43.351733][ T368] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.377664][ T852] UDC core: g1: couldn't find an available UDC or it's busy [ 43.407067][ T856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.415827][ T856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.511302][ T368] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.520050][ T368] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 43.532586][ T368] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 43.541732][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.549766][ T368] usb 3-1: Product: syz [ 43.553930][ T368] usb 3-1: Manufacturer: syz [ 43.558519][ T368] usb 3-1: SerialNumber: syz [ 43.628610][ T67] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 43.698319][ T859] UDC core: g1: couldn't find an available UDC or it's busy [ 43.768010][ T368] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 43.775001][ T368] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 43.783528][ T368] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 43.791598][ T368] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 43.807458][ T368] usb 3-1: USB disconnect, device number 12 [ 43.831989][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.897277][ T67] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.905757][ T67] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 43.913388][ T67] usb 2-1: can't read configurations, error -71 [ 43.938874][ T865] fuse: Unknown parameter '#]0x0000000000000003' [ 43.963788][ T868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.972412][ T868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.975174][ T45] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 44.113545][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.293527][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 44.293545][ T36] audit: type=1326 audit(1785775465.766:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=872 comm="syz.2.170" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3ca59e019 code=0x0 [ 44.351088][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.363512][ T36] audit: type=1400 audit(1785775465.836:274): avc: denied { bind } for pid=872 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.382836][ T36] audit: type=1400 audit(1785775465.846:275): avc: denied { listen } for pid=872 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.402597][ T36] audit: type=1400 audit(1785775465.846:276): avc: denied { connect } for pid=872 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.439368][ T877] netlink: 84 bytes leftover after parsing attributes in process `syz.1.171'. [ 44.459583][ T36] audit: type=1400 audit(1785775465.927:277): avc: denied { accept } for pid=872 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.487999][ T36] audit: type=1400 audit(1785775465.958:278): avc: denied { write } for pid=879 comm="syz.1.172" path="socket:[6469]" dev="sockfs" ino=6469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.556733][ T890] UDC core: g1: couldn't find an available UDC or it's busy [ 44.608414][ T45] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 44.636483][ T894] UDC core: g1: couldn't find an available UDC or it's busy [ 44.722671][ T908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.733036][ T908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.747024][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.769604][ T36] audit: type=1400 audit(1785775466.250:279): avc: denied { setopt } for pid=913 comm="syz.0.179" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.835568][ T916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.845967][ T916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.994612][ T45] usb 4-1: device descriptor read/64, error -71 [ 45.103692][ T45] usb usb4-port1: attempt power cycle [ 45.162044][ T918] fuse: Unknown parameter 'Yd' [ 45.211796][ T918] kvm: MWAIT instruction emulated as NOP! [ 45.391544][ T930] overlayfs: failed to resolve './file2': -2 [ 45.443843][ T935] UDC core: g1: couldn't find an available UDC or it's busy [ 45.460194][ T45] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 45.489588][ T937] netlink: 'syz.0.187': attribute type 46 has an invalid length. [ 45.499132][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.520835][ T939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.537376][ T939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.547383][ T939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.557519][ T939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.596686][ T36] audit: type=1400 audit(1785775467.078:280): avc: denied { create } for pid=949 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.626745][ T36] audit: type=1400 audit(1785775467.099:281): avc: denied { write } for pid=949 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.650027][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.716294][ T961] netlink: 'syz.1.190': attribute type 4 has an invalid length. [ 45.724031][ T961] netlink: 17 bytes leftover after parsing attributes in process `syz.1.190'. [ 45.736419][ T36] audit: type=1400 audit(1785775467.220:282): avc: denied { mount } for pid=960 comm="syz.1.190" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.896077][ T45] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 45.920415][ T968] syzkaller1: entered promiscuous mode [ 45.926021][ T968] syzkaller1: entered allmulticast mode [ 45.933390][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.995183][ T63] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.065526][ T45] usb 4-1: device descriptor read/8, error -71 [ 46.084681][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.093289][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.102781][ T970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.111464][ T970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.144974][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.156023][ T63] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.167771][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.176946][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.183779][ T45] usb usb4-port1: unable to enumerate USB device [ 46.185005][ T63] usb 2-1: Product: syz [ 46.195602][ T63] usb 2-1: Manufacturer: syz [ 46.200205][ T63] usb 2-1: SerialNumber: syz [ 46.207488][ T63] cdc_mbim 2-1:1.0: skipping garbage [ 46.405291][ T963] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 46.973399][ T1006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1006 comm=syz.0.206 [ 47.021858][ T1008] fuse: Unknown parameter 'fsname' [ 47.233292][ T1030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.241942][ T1030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.333338][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.404325][ T63] cdc_mbim 2-1:1.0: bind() failure [ 47.410580][ T63] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 47.417573][ T63] cdc_ncm 2-1:1.1: bind() failure [ 47.425313][ T63] usb 2-1: USB disconnect, device number 14 [ 47.482043][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 47.488344][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.496581][ T9] usb 3-1: config 0 has no interface number 0 [ 47.502698][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 47.510926][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.520172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.528244][ T9] usb 3-1: Product: syz [ 47.532468][ T9] usb 3-1: Manufacturer: syz [ 47.537084][ T9] usb 3-1: SerialNumber: syz [ 47.542551][ T9] usb 3-1: config 0 descriptor?? [ 47.549023][ T9] smsc75xx v1.0.0 [ 47.786939][ T1035] netlink: 84 bytes leftover after parsing attributes in process `syz.0.214'. [ 48.097103][ T63] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 48.145008][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 48.156095][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 48.186426][ T67] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 48.226033][ T63] usb 4-1: device descriptor read/64, error -71 [ 48.335159][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 48.342917][ T67] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 48.352056][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.360117][ T67] usb 2-1: Product: syz [ 48.364350][ T67] usb 2-1: Manufacturer: syz [ 48.368999][ T67] usb 2-1: SerialNumber: syz [ 48.374209][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.383545][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.392349][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 48.403678][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 48.413425][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 48.424731][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 48.436210][ T9] usb 3-1: USB disconnect, device number 13 [ 48.484053][ T63] usb 4-1: device descriptor read/64, error -71 [ 48.722155][ T63] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 48.851203][ T63] usb 4-1: device descriptor read/64, error -71 [ 48.870435][ T1058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.879051][ T1058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.934269][ T1062] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 49.089375][ T63] usb 4-1: device descriptor read/64, error -71 [ 49.198759][ T63] usb usb4-port1: attempt power cycle [ 49.422626][ T1072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.431536][ T1072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.440680][ T1072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.449501][ T1072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.536094][ T63] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 49.576845][ T63] usb 4-1: device descriptor read/8, error -71 [ 49.706822][ T63] usb 4-1: device descriptor read/8, error -71 [ 49.943230][ T63] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 49.974082][ T63] usb 4-1: device descriptor read/8, error -71 [ 50.103171][ T63] usb 4-1: device descriptor read/8, error -71 [ 50.211391][ T63] usb usb4-port1: unable to enumerate USB device [ 50.943042][ T67] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 50.953006][ T67] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.963979][ T67] usb 2-1: USB disconnect, device number 15 [ 50.973491][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.565245][ T1097] syzkaller1: entered promiscuous mode [ 57.570811][ T1097] syzkaller1: entered allmulticast mode [ 57.584461][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 57.584483][ T36] audit: type=1400 audit(1785775479.147:301): avc: denied { read append } for pid=1098 comm="syz.2.237" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.616498][ T1099] 9pnet_fd: Insufficient options for proto=fd [ 57.618974][ T36] audit: type=1400 audit(1785775479.147:302): avc: denied { open } for pid=1098 comm="syz.2.237" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.645681][ T36] audit: type=1400 audit(1785775479.157:303): avc: denied { map } for pid=1098 comm="syz.2.237" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.678714][ T36] audit: type=1400 audit(1785775479.157:304): avc: denied { execute } for pid=1098 comm="syz.2.237" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.702590][ T36] audit: type=1400 audit(1785775479.177:305): avc: denied { read write } for pid=1098 comm="syz.2.237" dev="sockfs" ino=12891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.733647][ T1104] UDC core: g1: couldn't find an available UDC or it's busy [ 57.759549][ T63] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.900668][ T36] audit: type=1400 audit(1785775479.468:306): avc: denied { block_suspend } for pid=1127 comm="syz.3.246" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.927742][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 57.938510][ T63] usb 2-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 57.949929][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.960473][ T63] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.969812][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.977911][ T63] usb 2-1: Product: syz [ 57.982966][ T63] usb 2-1: Manufacturer: syz [ 57.987606][ T63] usb 2-1: SerialNumber: syz [ 57.988902][ T67] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 58.020900][ T1138] UDC core: g1: couldn't find an available UDC or it's busy [ 58.149005][ T67] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 58.160136][ T67] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 58.173066][ T67] usb 3-1: config 0 interface 0 has no altsetting 0 [ 58.179744][ T67] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 58.188833][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.197637][ T67] usb 3-1: config 0 descriptor?? [ 58.203008][ T1106] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 58.210958][ T63] usb 2-1: 0:2 : does not exist [ 58.223114][ T63] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 58.235030][ T63] usb 2-1: USB disconnect, device number 16 [ 58.249603][ T1088] udevd[1088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.317200][ T421] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 58.400884][ T1150] UDC core: g1: couldn't find an available UDC or it's busy [ 58.412271][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.420787][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.428123][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.435528][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.447608][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.454693][ T36] audit: type=1400 audit(1785775480.021:307): avc: denied { setopt } for pid=1152 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.474059][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.476665][ T421] usb 4-1: Using ep0 maxpacket: 16 [ 58.481263][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.488483][ T421] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 58.493675][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.511641][ T421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.520963][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.523068][ T421] usb 4-1: config 0 has no interface number 0 [ 58.529766][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.538367][ T421] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 58.542098][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.551733][ T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.560000][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.567164][ T421] usb 4-1: Product: syz [ 58.577760][ T421] usb 4-1: Manufacturer: syz [ 58.582380][ T421] usb 4-1: SerialNumber: syz [ 58.584979][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.590912][ T421] usb 4-1: config 0 descriptor?? [ 58.599122][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.602000][ T421] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 58.612817][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.620493][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.622030][ T421] usb 4-1: No valid video chain found. [ 58.635962][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.643059][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.650292][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.657628][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.664999][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.672130][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.679234][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.687578][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.694726][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.702126][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.709412][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.719523][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.730003][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.738024][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.745281][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.752549][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.753160][ T1168] ======================================================= [ 58.753160][ T1168] WARNING: The mand mount option has been deprecated and [ 58.753160][ T1168] and is ignored by this kernel. Remove the mand [ 58.753160][ T1168] option from the mount to silence this warning. [ 58.753160][ T1168] ======================================================= [ 58.775511][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.794537][ T36] audit: type=1400 audit(1785775480.322:308): avc: denied { remount } for pid=1167 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.806349][ T1170] UDC core: g1: couldn't find an available UDC or it's busy [ 58.835556][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.842884][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.850132][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.857453][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.864765][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.872205][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.884894][ T67] hid-led 0003:1294:1320.0007: unknown main item tag 0x0 [ 58.904933][ T67] hid-led 0003:1294:1320.0007: hidraw0: USB HID v0.0c Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 58.933870][ T67] hid-led 0003:1294:1320.0007: Riso Kagaku Webmail Notifier initialized [ 58.949645][ T67] usb 3-1: USB disconnect, device number 14 [ 58.961091][ T31] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 58.974167][ T31] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 58.983445][ T31] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 59.343622][ T67] usb 4-1: USB disconnect, device number 22 [ 59.392988][ T421] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 59.552294][ T421] usb 3-1: Using ep0 maxpacket: 8 [ 59.557835][ T421] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 59.572031][ T421] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 59.581275][ T421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.590236][ T421] usb 3-1: config 0 descriptor?? [ 59.596443][ T421] hub 3-1:0.0: Invalid hub with more than one config or interface [ 59.605994][ T421] hub 3-1:0.0: probe with driver hub failed with error -22 [ 59.691782][ T67] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 59.717893][ T1198] UDC core: g1: couldn't find an available UDC or it's busy [ 59.755051][ T1205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.763590][ T1205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.784116][ T1205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.792716][ T1205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.802366][ T421] usb 3-1: USB disconnect, device number 15 [ 59.809133][ T36] audit: type=1400 audit(1785775481.376:309): avc: denied { create } for pid=1204 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 59.851194][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 59.857977][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.867469][ T67] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 59.882476][ T67] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 59.901026][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.909107][ T67] usb 4-1: Product: syz [ 59.913332][ T67] usb 4-1: Manufacturer: syz [ 59.917957][ T67] usb 4-1: SerialNumber: syz [ 59.983476][ T36] audit: type=1400 audit(1785775481.557:310): avc: denied { ioctl } for pid=1212 comm="syz.1.265" path="socket:[13106]" dev="sockfs" ino=13106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.061211][ T1217] UDC core: g1: couldn't find an available UDC or it's busy [ 60.150830][ T1196] syzkaller1: entered promiscuous mode [ 60.156443][ T1196] syzkaller1: entered allmulticast mode [ 60.319474][ T421] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 60.342918][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.351552][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.468927][ T421] usb 2-1: Using ep0 maxpacket: 32 [ 60.479248][ T421] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 60.487357][ T421] usb 2-1: config 2 has no interface number 0 [ 60.493681][ T421] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 60.503814][ T421] usb 2-1: config 2 interface 88 has no altsetting 0 [ 60.519858][ T421] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 60.529052][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 60.537288][ T421] usb 2-1: Product: syz [ 60.541531][ T421] usb 2-1: Manufacturer: syz [ 60.546264][ T421] usb 2-1: SerialNumber: syz [ 60.554580][ T1219] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.608118][ T1232] UDC core: g1: couldn't find an available UDC or it's busy [ 60.631903][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.631953][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.638750][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.645228][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.651945][ T1234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.698658][ T67] usb 4-1: cannot find UAC_HEADER [ 60.727347][ T67] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.739945][ T67] usb 4-1: USB disconnect, device number 23 [ 60.751122][ T1088] udevd[1088]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.769574][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.778996][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.789576][ T1219] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.885244][ T1250] UDC core: g1: couldn't find an available UDC or it's busy [ 60.926139][ T1255] Unsupported ieee802154 address type: 0 [ 60.946615][ T1255] kvm: kvm [1254]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 60.955261][ T1255] kvm: kvm [1254]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 61.000147][ T63] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.040167][ T1261] UDC core: g1: couldn't find an available UDC or it's busy [ 61.146584][ T67] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 61.156522][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 61.163224][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.171839][ T63] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 218, changing to 7 [ 61.184523][ T63] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 61.193677][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.198305][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.205028][ T63] usb 3-1: Product: syz [ 61.211228][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.216552][ T63] usb 3-1: Manufacturer: syz [ 61.227173][ T63] usb 3-1: SerialNumber: syz [ 61.297527][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.305594][ T67] usb 4-1: not running at top speed; connect to a high speed hub [ 61.315689][ T67] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 61.324809][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.332899][ T67] usb 4-1: Product: syz [ 61.337135][ T67] usb 4-1: Manufacturer: syz [ 61.341751][ T67] usb 4-1: SerialNumber: syz [ 61.426729][ T1219] fuse: Bad value for 'fd' [ 61.432796][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.441398][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.677171][ T1269] random: crng reseeded on system resumption [ 61.849400][ T421] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 61.860100][ T421] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 61.871687][ T421] asix 2-1:2.88: probe with driver asix failed with error -71 [ 61.880441][ T421] usb 2-1: USB disconnect, device number 17 [ 62.408347][ T1303] UDC core: g1: couldn't find an available UDC or it's busy [ 62.478598][ T1305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.487259][ T1305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.613813][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 62.613831][ T36] audit: type=1400 audit(1785775484.195:318): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.652240][ T1317] UDC core: g1: couldn't find an available UDC or it's busy [ 63.018590][ T1326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.027393][ T1326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.040410][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 63.199912][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 63.206260][ T31] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 63.214456][ T31] usb 2-1: config 0 has no interface number 0 [ 63.220606][ T31] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 63.231543][ T31] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 63.244752][ T31] usb 2-1: config 0 interface 48 has no altsetting 0 [ 63.253141][ T31] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 63.262366][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.270446][ T31] usb 2-1: Product: syz [ 63.274645][ T31] usb 2-1: Manufacturer: syz [ 63.279291][ T31] usb 2-1: SerialNumber: syz [ 63.285263][ T31] usb 2-1: config 0 descriptor?? [ 63.494758][ T36] audit: type=1400 audit(1785775485.078:319): avc: denied { read } for pid=1323 comm="syz.1.291" name="c_mute_present" dev="configfs" ino=13730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 63.498231][ T31] ftdi_sio 2-1:0.48: FTDI USB Serial Device converter detected [ 63.535633][ T31] usb 2-1: Detected SIO [ 63.540650][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 63.552315][ T31] usb 2-1: USB disconnect, device number 18 [ 63.560727][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 63.570375][ T31] ftdi_sio 2-1:0.48: device disconnected [ 63.612957][ T36] audit: type=1400 audit(1785775485.199:320): avc: denied { mounton } for pid=1329 comm="syz.0.293" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 63.613282][ T1330] overlay: Unknown parameter 'hash' [ 63.659448][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.668164][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.677990][ T36] audit: type=1400 audit(1785775485.259:321): avc: denied { bind } for pid=1331 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.697365][ T36] audit: type=1400 audit(1785775485.259:322): avc: denied { getopt } for pid=1331 comm="syz.0.294" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.720906][ T36] audit: type=1400 audit(1785775485.259:323): avc: denied { read } for pid=1331 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.761944][ T63] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 63.781492][ T1334] UDC core: g1: couldn't find an available UDC or it's busy [ 63.791782][ T63] usb 3-1: USB disconnect, device number 16 [ 63.809115][ T1146] udevd[1146]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.839932][ T67] usb 4-1: invalid MIDI in EP 0 [ 63.854693][ T67] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.867001][ T1338] UDC core: g1: couldn't find an available UDC or it's busy [ 63.867206][ T67] usb 4-1: USB disconnect, device number 24 [ 63.895577][ T1088] udevd[1088]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.127266][ T63] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 64.202154][ T1344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.202745][ T36] audit: type=1326 audit(1785775485.790:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.0.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f239839e019 code=0x0 [ 64.213635][ T1344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.243270][ T67] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 64.276838][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 64.283397][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.292111][ T63] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 64.300748][ T63] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 64.309873][ T369] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 64.317509][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.325542][ T63] usb 3-1: Product: syz [ 64.329935][ T63] usb 3-1: Manufacturer: syz [ 64.334612][ T63] usb 3-1: SerialNumber: syz [ 64.397770][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.408792][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.418614][ T67] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 64.427754][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.436775][ T67] usb 4-1: config 0 descriptor?? [ 64.466308][ T369] usb 2-1: device descriptor read/64, error -71 [ 64.548083][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.556779][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.566752][ T36] audit: type=1400 audit(1785775486.151:325): avc: denied { create } for pid=1335 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.715610][ T369] usb 2-1: device descriptor read/64, error -71 [ 64.858287][ T36] audit: type=1400 audit(1785775486.442:326): avc: denied { write } for pid=1339 comm="syz.3.298" path="socket:[14542]" dev="sockfs" ino=14542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.883778][ T36] audit: type=1400 audit(1785775486.472:327): avc: denied { read write } for pid=1354 comm="syz.0.303" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 64.887032][ T1340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.918240][ T1340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.974942][ T369] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 64.987891][ T1357] UDC core: g1: couldn't find an available UDC or it's busy [ 65.040542][ T1361] UDC core: g1: couldn't find an available UDC or it's busy [ 65.104718][ T369] usb 2-1: device descriptor read/64, error -71 [ 65.285280][ T1379] UDC core: g1: couldn't find an available UDC or it's busy [ 65.320522][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.330742][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.343907][ T369] usb 2-1: device descriptor read/64, error -71 [ 65.368357][ T1386] UDC core: g1: couldn't find an available UDC or it's busy [ 65.427115][ T1388] kvm: kvm [1387]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xbe702111 [ 65.453438][ T1388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.462215][ T1388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.470059][ T369] usb usb2-port1: attempt power cycle [ 65.475874][ T1388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.484745][ T1388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.493330][ T1388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.502219][ T1388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.812729][ T369] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 65.833702][ T369] usb 2-1: device descriptor read/8, error -71 [ 65.860091][ T1392] futex_wake_op: syz.0.318 tries to shift op by 144; fix this program [ 65.914056][ T1397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.923899][ T1397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.983401][ T369] usb 2-1: device descriptor read/8, error -71 [ 66.180299][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.189001][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.231659][ T369] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 66.252674][ T369] usb 2-1: device descriptor read/8, error -71 [ 66.382383][ T369] usb 2-1: device descriptor read/8, error -71 [ 66.452932][ T1405] UDC core: g1: couldn't find an available UDC or it's busy [ 66.478962][ T1407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 66.508538][ T369] usb usb2-port1: unable to enumerate USB device [ 66.522734][ T1408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 66.594600][ T1410] UDC core: g1: couldn't find an available UDC or it's busy [ 66.635755][ T1412] incfs: Options parsing error. -22 [ 66.641124][ T1412] incfs: mount failed -22 [ 66.670373][ T1416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.689450][ T1416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.752639][ T1422] input: syz1 as /devices/virtual/input/input6 [ 66.983277][ T67] usbhid 4-1:0.0: can't add hid device: -71 [ 66.997353][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 67.009096][ T67] usb 4-1: USB disconnect, device number 25 [ 67.030790][ T1433] UDC core: g1: couldn't find an available UDC or it's busy [ 67.108069][ T1438] UDC core: g1: couldn't find an available UDC or it's busy [ 67.201888][ T1447] sock: sock_timestamping_bind_phc: sock not bind to device [ 67.263107][ T1451] incfs: Error accessing: ./file0. [ 67.268456][ T1451] incfs: mount failed -20 [ 67.642807][ T1462] UDC core: g1: couldn't find an available UDC or it's busy [ 67.721980][ T1464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.730645][ T1464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.967401][ T1489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 67.977454][ T1489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 68.025672][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 68.025692][ T36] audit: type=1400 audit(1785775489.620:342): avc: denied { bind } for pid=1502 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.051818][ T36] audit: type=1400 audit(1785775489.650:343): avc: denied { map } for pid=1502 comm="syz.0.345" path="socket:[14214]" dev="sockfs" ino=14214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.083803][ T36] audit: type=1400 audit(1785775489.670:344): avc: denied { read write } for pid=1502 comm="syz.0.345" path="socket:[14214]" dev="sockfs" ino=14214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.113871][ T1505] UDC core: g1: couldn't find an available UDC or it's busy [ 68.122569][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.132013][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.154818][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 68.164176][ T36] audit: type=1400 audit(1785775489.760:345): avc: denied { getopt } for pid=1508 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.186275][ T1509] fuse: Bad value for 'rootmode' [ 68.225279][ T1515] UDC core: g1: couldn't find an available UDC or it's busy [ 68.262278][ T1517] overlayfs: missing 'workdir' [ 68.295389][ T1521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.354'. [ 68.299686][ T36] audit: type=1400 audit(1785775489.890:346): avc: denied { nlmsg_read } for pid=1520 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.340991][ T36] audit: type=1400 audit(1785775489.940:347): avc: denied { ioctl } for pid=1520 comm="syz.1.354" path="socket:[14256]" dev="sockfs" ino=14256 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.422853][ T1532] UDC core: g1: couldn't find an available UDC or it's busy [ 68.427890][ T36] audit: type=1400 audit(1785775490.031:348): avc: denied { create } for pid=1533 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 68.476756][ T1537] UDC core: g1: couldn't find an available UDC or it's busy [ 68.502146][ T1541] syzkaller1: entered allmulticast mode [ 68.587662][ T1549] rust_binder: 1548:1549 no such ref 2 [ 68.609504][ T36] audit: type=1400 audit(1785775490.211:349): avc: denied { validate_trans } for pid=1550 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.610034][ T1551] rust_binder: 1550:1551 got transaction to invalid handle 1 [ 68.637819][ T1551] rust_binder: 1550:1551 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 68.654789][ T368] rust_binder: 1550: undelivered TRANSACTION_ERROR: 29201 [ 68.677626][ T1553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1553 comm=syz.2.366 [ 68.695309][ T1553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=1553 comm=syz.2.366 [ 68.705616][ T1554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=1554 comm=syz.2.366 [ 68.752591][ T1559] UDC core: g1: couldn't find an available UDC or it's busy [ 68.775893][ T421] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 68.807029][ T36] audit: type=1326 audit(1785775490.401:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1562 comm="syz.2.370" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3ca59e019 code=0x0 [ 68.833888][ T1565] UDC core: g1: couldn't find an available UDC or it's busy [ 68.857025][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.865889][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.875023][ T36] audit: type=1400 audit(1785775490.462:351): avc: denied { append } for pid=1566 comm="syz.0.372" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.926304][ T421] usb 2-1: not running at top speed; connect to a high speed hub [ 68.934837][ T421] usb 2-1: config 0 has no interfaces? [ 68.941543][ T421] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 68.950664][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 68.958934][ T421] usb 2-1: Product: syz [ 68.963150][ T421] usb 2-1: Manufacturer: syz [ 68.985564][ T421] usb 2-1: config 0 descriptor?? [ 69.115002][ T1585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.126051][ T1585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.243450][ T369] usb 2-1: USB disconnect, device number 23 [ 69.284923][ T1592] UDC core: g1: couldn't find an available UDC or it's busy [ 69.313896][ T1594] UDC core: g1: couldn't find an available UDC or it's busy [ 69.365279][ T1598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 69.387378][ T63] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 69.398770][ T63] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 69.424575][ T63] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 69.508376][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 69.517421][ T1602] bridge_slave_1: left allmulticast mode [ 69.523170][ T1602] bridge_slave_1: left promiscuous mode [ 69.529089][ T1602] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.537040][ T1602] bridge_slave_0: left allmulticast mode [ 69.542822][ T1602] bridge_slave_0: left promiscuous mode [ 69.548788][ T1602] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.635111][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 69.644080][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 69.763641][ T1614] UDC core: g1: couldn't find an available UDC or it's busy [ 69.797150][ T1616] UDC core: g1: couldn't find an available UDC or it's busy [ 69.865656][ T1623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.876271][ T1623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.891910][ T1625] wg0: entered promiscuous mode [ 69.892092][ T1623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.896969][ T1625] wg0: entered allmulticast mode [ 69.908824][ T1623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.999644][ T1639] UDC core: g1: couldn't find an available UDC or it's busy [ 70.024267][ T1641] UDC core: g1: couldn't find an available UDC or it's busy [ 70.080670][ T1654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.087954][ T1654] IPv6: NLM_F_CREATE should be set when creating new route [ 70.095227][ T1654] IPv6: NLM_F_CREATE should be set when creating new route [ 70.119556][ T1658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.128153][ T1658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.579167][ T1668] UDC core: g1: couldn't find an available UDC or it's busy [ 70.617814][ T1670] UDC core: g1: couldn't find an available UDC or it's busy [ 70.652306][ T1672] rust_binder: 1671:1672 inc_ref_done called when no active inc_refs [ 70.676264][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.685708][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.119324][ T1698] UDC core: g1: couldn't find an available UDC or it's busy [ 71.175560][ T1700] UDC core: g1: couldn't find an available UDC or it's busy [ 71.228178][ T1702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.654588][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 71.814580][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 71.821044][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.831561][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.842171][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.851514][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.859783][ T45] usb 2-1: Product: syz [ 71.864090][ T45] usb 2-1: Manufacturer: syz [ 71.868962][ T45] usb 2-1: SerialNumber: syz [ 72.661365][ T1716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=329 sclass=netlink_route_socket pid=1716 comm=syz.3.422 [ 73.385187][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 73.385207][ T36] audit: type=1400 audit(1802552939.982:364): avc: denied { connect } for pid=1718 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.412298][ T1719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.430148][ T1719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.448811][ T36] audit: type=1400 audit(1802552940.042:365): avc: denied { mounton } for pid=1721 comm="syz.3.424" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 73.473101][ T36] audit: type=1400 audit(1802552940.042:366): avc: denied { getopt } for pid=1721 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.744496][ T36] audit: type=1400 audit(1802552940.332:367): avc: denied { mounton } for pid=1724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.818816][ T1473] bridge_slave_1: left allmulticast mode [ 73.834567][ T1473] bridge_slave_1: left promiscuous mode [ 73.840296][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.855505][ T1473] bridge_slave_0: left allmulticast mode [ 73.862257][ T1473] bridge_slave_0: left promiscuous mode [ 73.868258][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.995253][ T1724] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.002490][ T1724] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.009948][ T1724] bridge_slave_0: entered allmulticast mode [ 74.020609][ T1724] bridge_slave_0: entered promiscuous mode [ 74.028004][ T1473] tipc: Left network mode [ 74.032792][ T1724] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.040407][ T1724] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.047761][ T1724] bridge_slave_1: entered allmulticast mode [ 74.054372][ T1724] bridge_slave_1: entered promiscuous mode [ 74.061953][ T1473] veth1_macvtap: left promiscuous mode [ 74.067789][ T1473] veth0_vlan: left promiscuous mode [ 74.252062][ T1724] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.259290][ T1724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.266657][ T1724] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.273715][ T1724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.313797][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.327333][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.348062][ T36] audit: type=1400 audit(1802552940.942:368): avc: denied { getopt } for pid=1732 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.382603][ T1501] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.389722][ T1501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.430814][ T45] usb 2-1: 0:2 : does not exist [ 74.436742][ T36] audit: type=1400 audit(1802552940.962:369): avc: denied { write } for pid=1732 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.458546][ T1501] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.465655][ T1501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.475293][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 74.488083][ T45] usb 2-1: USB disconnect, device number 24 [ 74.502616][ T36] audit: type=1400 audit(1802552941.042:370): avc: denied { bind } for pid=1738 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.533484][ T1328] udevd[1328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 74.562894][ T1724] veth0_vlan: entered promiscuous mode [ 74.563645][ T1742] rust_binder: 1736:1742 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 74.594181][ T1724] veth1_macvtap: entered promiscuous mode [ 74.625352][ T1746] fuse: Bad value for 'user_id' [ 74.630280][ T1746] fuse: Bad value for 'user_id' [ 74.643542][ T36] audit: type=1400 audit(1802552941.232:371): avc: denied { mounton } for pid=1724 comm="syz-executor" path="/root/syzkaller.csapkG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.704840][ T36] audit: type=1400 audit(1802552941.292:372): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 74.752403][ T36] audit: type=1400 audit(1802552941.322:373): avc: denied { ioctl } for pid=1748 comm="syz.4.427" path="socket:[17143]" dev="sockfs" ino=17143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.791324][ T1753] UDC core: g1: couldn't find an available UDC or it's busy [ 74.834289][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.864936][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.878163][ T1760] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 75.144859][ T45] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 75.254599][ T67] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.284595][ T45] usb 2-1: device descriptor read/64, error -71 [ 75.410115][ T67] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 4 [ 75.423037][ T67] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 75.432582][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.440817][ T67] usb 5-1: Product: syz [ 75.445272][ T67] usb 5-1: Manufacturer: syz [ 75.449947][ T67] usb 5-1: SerialNumber: syz [ 75.567472][ T45] usb 2-1: device descriptor read/64, error -71 [ 75.824672][ T45] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 75.974873][ T45] usb 2-1: device descriptor read/64, error -71 [ 76.234605][ T45] usb 2-1: device descriptor read/64, error -71 [ 76.345061][ T45] usb usb2-port1: attempt power cycle [ 76.694628][ T45] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 76.725679][ T45] usb 2-1: device descriptor read/8, error -71 [ 76.865696][ T45] usb 2-1: device descriptor read/8, error -71 [ 77.124568][ T45] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 77.155856][ T45] usb 2-1: device descriptor read/8, error -71 [ 77.295662][ T45] usb 2-1: device descriptor read/8, error -71 [ 77.414776][ T45] usb usb2-port1: unable to enumerate USB device [ 78.005997][ T1777] UDC core: g1: couldn't find an available UDC or it's busy [ 78.040320][ T67] usb 5-1: USB disconnect, device number 2 [ 78.066666][ T1328] udevd[1328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 78.394608][ T369] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 78.434593][ T67] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 78.564580][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 78.571028][ T369] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 78.585657][ T369] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.604625][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.612024][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.612749][ T369] usb 2-1: Product: syz [ 78.624345][ T67] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 78.636105][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.644542][ T369] usb 2-1: Manufacturer: syz [ 78.649602][ T67] usb 5-1: config 0 descriptor?? [ 78.654642][ T369] usb 2-1: SerialNumber: syz [ 78.661375][ T369] r8152-cfgselector 2-1: Unknown version 0x0000 [ 78.676416][ T369] r8152-cfgselector 2-1: config 0 descriptor?? [ 78.708202][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 78.708230][ T36] audit: type=1400 audit(1802552945.302:377): avc: denied { setattr } for pid=1786 comm="syz.2.448" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.065919][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.073960][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.081736][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.091316][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.099082][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.106919][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.114771][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.122595][ T67] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0 [ 79.135121][ T67] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID vef.fd Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 79.739457][ T1800] UDC core: g1: couldn't find an available UDC or it's busy [ 79.909058][ T1804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.918717][ T1804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.927341][ T1804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.937720][ T1804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.539569][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.548288][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.120643][ T368] usb 5-1: USB disconnect, device number 3 [ 81.166821][ T67] r8152-cfgselector 2-1: USB disconnect, device number 29 [ 81.221575][ T36] audit: type=1326 audit(1802552947.812:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1812 comm="syz.4.456" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511c19e019 code=0x0 [ 81.351977][ T36] audit: type=1400 audit(1802552947.942:379): avc: denied { bind } for pid=1812 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.614581][ T67] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 81.774576][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 81.781034][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 193, changing to 11 [ 81.792508][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 8971, setting to 1024 [ 81.803864][ T67] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.813169][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.822315][ T67] usb 2-1: config 0 descriptor?? [ 81.832199][ T67] hub 2-1:0.0: bad descriptor, ignoring hub [ 81.842944][ T67] hub 2-1:0.0: probe with driver hub failed with error -5 [ 81.850799][ T67] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 82.149705][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.161257][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.394595][ T67] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.545385][ T67] usb 5-1: Using ep0 maxpacket: 16 [ 82.557222][ T67] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 82.575148][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.592648][ T67] usb 5-1: config 0 descriptor?? [ 82.605136][ T67] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 82.654721][ T390] usb 2-1: USB disconnect, device number 30 [ 82.814687][ T67] usb 5-1: Detected FT232A [ 82.823726][ T67] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 82.845799][ T67] usb 5-1: USB disconnect, device number 4 [ 82.857992][ T67] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 82.869435][ T67] ftdi_sio 5-1:0.0: device disconnected [ 82.896806][ T1825] UDC core: g1: couldn't find an available UDC or it's busy [ 82.942674][ T1827] netlink: 'syz.1.462': attribute type 6 has an invalid length. [ 83.117879][ T36] audit: type=1400 audit(1802552949.712:380): avc: denied { setopt } for pid=1829 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.186385][ T1834] __nla_validate_parse: 62 callbacks suppressed [ 83.186405][ T1834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 83.205877][ T1834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 83.404832][ T1839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.467'. [ 83.434584][ T67] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 83.564593][ T67] usb 2-1: device descriptor read/64, error -71 [ 83.577676][ T1845] UDC core: g1: couldn't find an available UDC or it's busy [ 83.644635][ T63] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.804574][ T67] usb 2-1: device descriptor read/64, error -71 [ 83.816233][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.824932][ T63] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 83.837420][ T63] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 83.846595][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.864586][ T63] usb 5-1: Product: syz [ 83.868852][ T63] usb 5-1: Manufacturer: syz [ 83.873473][ T63] usb 5-1: SerialNumber: syz [ 83.941006][ T1849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.950403][ T1849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.044595][ T67] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 84.174581][ T67] usb 2-1: device descriptor read/64, error -71 [ 84.414604][ T67] usb 2-1: device descriptor read/64, error -71 [ 84.529592][ T67] usb usb2-port1: attempt power cycle [ 84.540487][ T1852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.549963][ T1852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.558502][ T36] audit: type=1400 audit(1802552951.152:381): avc: denied { read } for pid=1851 comm="syz.2.473" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.874611][ T67] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 84.895718][ T67] usb 2-1: device descriptor read/8, error -71 [ 85.025717][ T67] usb 2-1: device descriptor read/8, error -71 [ 85.090563][ T63] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 85.101474][ T63] usb 5-1: USB disconnect, device number 5 [ 85.244201][ T585] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 85.256891][ T585] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 85.265445][ T585] CPU: 1 UID: 0 PID: 585 Comm: syz.0.67 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 85.276770][ T585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.286867][ T585] RIP: 0010:set_link_state+0x2a/0x1240 [ 85.292401][ T585] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 00 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 78 c3 26 fe 4d 8b 75 00 49 8d 95 93 [ 85.312048][ T585] RSP: 0018:ffffc9000df77718 EFLAGS: 00010046 [ 85.318179][ T585] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888138714c00 [ 85.326228][ T585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.334232][ T585] RBP: ffffc9000df777a0 R08: 0000000000000003 R09: 0000000000000004 [ 85.342239][ T585] R10: dffffc0000000000 R11: fffff52001beeee0 R12: 0000000000000000 [ 85.350239][ T585] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810430c000 [ 85.358245][ T585] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 85.367213][ T585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.373885][ T585] CR2: 00007fffb62820f8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 85.381898][ T585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 08c5d32ffc85c5bc [ 85.389918][ T585] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 85.397937][ T585] Call Trace: [ 85.401255][ T585] [ 85.404220][ T585] ? __kasan_check_write+0x18/0x20 [ 85.409370][ T585] dummy_pullup+0xd1/0x130 [ 85.413837][ T585] ? __cfi_dummy_pullup+0x10/0x10 [ 85.418913][ T585] usb_gadget_disconnect_locked+0x151/0x400 [ 85.424890][ T585] gadget_unbind_driver+0xaf/0x3f0 [ 85.430048][ T585] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 85.435812][ T585] device_release_driver_internal+0x4ad/0x830 [ 85.441932][ T585] driver_detach+0x1f5/0x2d0 [ 85.446569][ T585] bus_remove_driver+0x254/0x2b0 [ 85.451557][ T585] driver_unregister+0x79/0xb0 [ 85.456364][ T585] usb_gadget_unregister_driver+0x52/0x80 [ 85.462215][ T585] raw_release+0xdb/0x280 [ 85.466603][ T585] ? __cfi_raw_release+0x10/0x10 [ 85.471585][ T585] __fput+0x208/0xa30 [ 85.476052][ T585] ____fput+0x20/0x30 [ 85.480084][ T585] task_work_run+0x1e8/0x260 [ 85.484723][ T585] ? __cfi_task_work_run+0x10/0x10 [ 85.489981][ T585] ? __kasan_check_write+0x18/0x20 [ 85.495159][ T585] do_exit+0xa46/0x2850 [ 85.499370][ T585] ? __cfi_do_exit+0x10/0x10 [ 85.504006][ T585] ? __kasan_check_write+0x18/0x20 [ 85.509159][ T585] ? _raw_spin_lock_irq+0x93/0x120 [ 85.514321][ T585] ? __kasan_check_read+0x15/0x20 [ 85.519395][ T585] do_group_exit+0x21f/0x2f0 [ 85.524034][ T585] ? cgroup_leave_frozen+0x16a/0x2a0 [ 85.529502][ T585] get_signal+0x134c/0x1490 [ 85.534088][ T585] arch_do_signal_or_restart+0xbc/0x700 [ 85.539672][ T585] ? common_nsleep+0x93/0xb0 [ 85.544302][ T585] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 85.550577][ T585] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 85.556376][ T585] ? __kasan_check_read+0x15/0x20 [ 85.561448][ T585] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 85.567559][ T585] syscall_exit_to_user_mode+0x57/0xb0 [ 85.573084][ T585] do_syscall_64+0x63/0xf0 [ 85.577549][ T585] ? clear_bhb_loop+0x50/0xa0 [ 85.582271][ T585] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.588234][ T585] RIP: 0033:0x7f239835e84e [ 85.592722][ T585] Code: Unable to access opcode bytes at 0x7f239835e824. [ 85.599783][ T585] RSP: 002b:00007f23991b7f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 85.608271][ T585] RAX: fffffffffffffdfc RBX: 00007f23991b86c0 RCX: 00007f239835e84e [ 85.616368][ T585] RDX: 00007f23991b7fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.624371][ T585] RBP: 00007f239843500c R08: 0000000000000000 R09: 0000000000000000 [ 85.632377][ T585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.640372][ T585] R13: 00007f2398626038 R14: 00007f2398625fa0 R15: 00007ffeaa949c58 [ 85.648373][ T585] [ 85.651411][ T585] Modules linked in: [ 85.655341][ T585] ---[ end trace 0000000000000000 ]--- [ 85.660817][ T585] RIP: 0010:set_link_state+0x2a/0x1240 [ 85.666312][ T585] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 00 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 78 c3 26 fe 4d 8b 75 00 49 8d 95 93 [ 85.685948][ T585] RSP: 0018:ffffc9000df77718 EFLAGS: 00010046 [ 85.692042][ T585] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888138714c00 [ 85.700037][ T585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.708022][ T585] RBP: ffffc9000df777a0 R08: 0000000000000003 R09: 0000000000000004 [ 85.716013][ T585] R10: dffffc0000000000 R11: fffff52001beeee0 R12: 0000000000000000 [ 85.724026][ T585] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810430c000 [ 85.732017][ T585] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 85.740968][ T585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.747567][ T585] CR2: 00007fffb62820f8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 85.755648][ T585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 08c5d32ffc85c5bc [ 85.763755][ T585] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 85.771747][ T585] Kernel panic - not syncing: Fatal exception [ 85.777992][ T585] Kernel Offset: disabled [ 85.782319][ T585] Rebooting in 86400 seconds..