last executing test programs: 3m29.124038037s ago: executing program 2 (id=644): r0 = socket(0x10, 0x3, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x140100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300120018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 3m28.339063728s ago: executing program 2 (id=650): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) (async) 3m27.623177325s ago: executing program 2 (id=662): sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x20000008) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffffffff}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m27.594625757s ago: executing program 2 (id=663): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) flistxattr(r0, &(0x7f0000000100)=""/46, 0x2e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$unix(r2, &(0x7f000000d140)=[{{&(0x7f000000a2c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f000000bc40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f000000c540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28, 0x4000804}}], 0x2, 0x80) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x4) 3m27.551402659s ago: executing program 2 (id=664): sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x20000008) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f00004b2000/0x4000)=nil}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m27.375147599s ago: executing program 2 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0xd7ffffff, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/175, 0xaf, 0x2, 0x31}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 3m27.310647732s ago: executing program 32 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0xd7ffffff, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/175, 0xaf, 0x2, 0x31}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 3m5.502112683s ago: executing program 0 (id=867): syz_usb_connect$uac3(0x5, 0xfffffffffffffedb, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 3m4.922586843s ago: executing program 0 (id=870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000403512168040000102030109026e0003017f2011080b0003010130010904000000010230000a2401090a00bfc9d1d86821731600010230000904010101010230000905010900000401290a2525040004000515000904020000010230000904020101010230000905820900020880030a2525010000000b0000bb04c948e475049cf34de6a4bce59ec39c963c964d39cd2cbaeb5e160e28a04308d38a69f82a85e1da687b26c0a3884f7d6b7a17d3a838b29dc1cfff6fe6767ec68498458d782befd0673348"], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x2, 0x3c4210}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="f36b4e96df5d3a7c5469b7868c00000080000000007a2db044da73248f00000000000000000049", 0x27}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000e40)={0x30, 0x5, 0x0, {0x0, 0x5, 0xfff}}, 0x30) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000180)={0x8000, 0xa96}) 3m3.638544281s ago: executing program 0 (id=875): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20b, 0x2b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000480)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x10004000) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0x12, 0x0, 0x1000, 0x7, 0x40, 0x10, 0xffff, 0x5, 0x2, 0xfffff800, 0x8001, 0x9, 0x81, 0x12804b33, 0x7, 0x4d22, 0x80000000, 0xdb7, 0xffffffc0, 0xd527, 0x6, 0xb, 0x4}}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async, rerun: 64) setresuid(0x0, 0xee01, 0x0) (async, rerun: 64) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 3m3.527101547s ago: executing program 0 (id=876): r0 = syz_clone(0x1038080, &(0x7f0000000000)="02cd3c2fb41ac48f1eec35f22a20b206906f2c69283994fd39c1b576ae68b8124b3997e5690ef60179a245c6bf1c764e7b434841fce86aa184c8d2e6b93996acdee6b5e21c1d612d48cc14f82609bd79f676e1df0063faeeeb01350283be1efded145d08e77c53a269d04cf5d2c332935870942c3ed36fcb2a8472cec36dbf47716e27390e94308cc7836cf4a83509db03ae2e68e5ee47d4d4bfbc2f89d9627067e3c49450cb20533d32", 0xaa, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000140)="c5d1bd258c") getpgid(r0) 3m3.526431156s ago: executing program 0 (id=877): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x9, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000001600)=0xffffffff, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x1, 0x2, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103", @ANYBLOB="951167a95257942e3a369c4be3eb30a44157996a083f01cd8dac3e4548"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) readv(r4, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x80, 0x1}, {0x400000, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000f3, 0x0, 0x80000006}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1d) fchdir(r10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000), 0x4) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r12, 0xae03, 0xeb) 3m0.40344993s ago: executing program 0 (id=899): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400180, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x701200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/255, 0xff}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000500)={0x3, 'macvlan0\x00', {0xa6e}, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000200)=@req={0x401, 0x1, 0x2, 0x4}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/174, 0xae}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000300)=""/74, 0xfffffffffffffe09}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000640)=""/2, 0x2}], 0x5}}], 0x1, 0x10000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r5, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/87}) 2m45.254671622s ago: executing program 33 (id=899): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400180, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x701200, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/255, 0xff}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000500)={0x3, 'macvlan0\x00', {0xa6e}, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000200)=@req={0x401, 0x1, 0x2, 0x4}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r7, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/174, 0xae}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000300)=""/74, 0xfffffffffffffe09}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000640)=""/2, 0x2}], 0x5}}], 0x1, 0x10000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r5, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/87}) 39.328158892s ago: executing program 5 (id=1946): r0 = syz_open_procfs(0x0, 0x0) r1 = timerfd_create(0x3, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000700)={{r1}, 0x0, 0x12, @inherit={0x68, &(0x7f00000005c0)={0x0, 0x4, 0x10000, 0x8b, {0x10, 0xb75, 0xfffffffffffffffc, 0x0, 0x75e6}, [0x4, 0x10, 0x2, 0xd]}}, @name="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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0xffff, 0x0, 0x0, 0x5}, 0x10) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xba, &(0x7f0000000040)) read$FUSE(r2, &(0x7f00000043c0)={0x2020}, 0x2020) syz_usb_connect$uac3(0x5, 0xc7, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x5057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x7f, 0x10, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x42, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0x9}}}}}}}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0xc2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0xc, 0x20, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x0, 0x20, 0x3}, [@multiply_unit={0x7, 0x24, 0xc, 0x7f, 0x1, 0x9}, @processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x0, 0x3]}, @feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xf7, 0x0, 0x1, 0x3, 0xfb, 0x50000000, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x5bf, 0x3, 0x6, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x9, 0xa1, "a3ee0bfa2bade0ec"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5, 0xc, "", "d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x8, 0x4, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x8, 0x50a1}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x42, 0x7, 0x2, 0x8, 0xff}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x8, [{0x2e, &(0x7f0000000200)=@string={0x2e, 0x3, "e2f29a32b0a17fe31ff6bdfcc8610eca585d92bbee187b9765da91be34d11dda0677c9799cc792607bfdcfa1"}}, {0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "4018277b8d78a97a667f5aac9c4a2ac48aa09ea6342fc0f69c6c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x3e, &(0x7f00000002c0)=@string={0x3e, 0x3, "bee5f4ac5001415852fd05f750feeb8cc61e34b06a23e85132812adae3fe83288f1c98b0ffd8ae77ca2e5f4bd38301dace4954b73b4cf2ada56baa73"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42b}}, {0xf, &(0x7f00000003c0)=@string={0xf, 0x3, "f8cec780eebcc92ea466751b29"}}]}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff1e, 0x6, 0x1, {0x22, 0xb3a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7e, 0xb0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf6, 0x5, 0xce}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xdb, 0xcd, 0x8, 0x30, 0x4}, 0x51, &(0x7f0000000500)={0x5, 0xf, 0x51, 0x4, [@generic={0x23, 0x10, 0x2, "8b2c1cc261b9a6eb8b67078cbaa2f178ca988fd1a30c4791318ef95c9bc78621"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x5, 0xf00, 0x6, [0xbe0f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x7, 0x8, 0x400, 0xe5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x1, 0x1}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2001}}, {0x48, &(0x7f0000000680)=@string={0x48, 0x3, "28019bd633dcd579ba444c2c78d07ef10c4c38b3ed5662570318b3b2ad2bbff11425810438c510f2d766d112656c7670b2685757d369389c0e0ae1edc0653e720bcbd9d530fc"}}]}) syz_open_procfs(0x0, 0x0) (async) timerfd_create(0x3, 0x800) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000700)={{r1}, 0x0, 0x12, @inherit={0x68, &(0x7f00000005c0)={0x0, 0x4, 0x10000, 0x8b, {0x10, 0xb75, 0xfffffffffffffffc, 0x0, 0x75e6}, [0x4, 0x10, 0x2, 0xd]}}, @name="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"}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0xffff, 0x0, 0x0, 0x5}, 0x10) (async) ptrace(0x10, r3) (async) ptrace$setregs(0x1a, r3, 0xba, &(0x7f0000000040)) (async) read$FUSE(r2, &(0x7f00000043c0)={0x2020}, 0x2020) (async) syz_usb_connect$uac3(0x5, 0xc7, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x5057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x7f, 0x10, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x42, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0xff, 0x9}}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac2(0x1, 0xc2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0xc, 0x20, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x0, 0x20, 0x3}, [@multiply_unit={0x7, 0x24, 0xc, 0x7f, 0x1, 0x9}, @processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x0, 0x3]}, @feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xf7, 0x0, 0x1, 0x3, 0xfb, 0x50000000, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x5bf, 0x3, 0x6, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x9, 0xa1, "a3ee0bfa2bade0ec"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5, 0xc, "", "d6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x8, 0x4, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x8, 0x50a1}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x42, 0x7, 0x2, 0x8, 0xff}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x8, [{0x2e, &(0x7f0000000200)=@string={0x2e, 0x3, "e2f29a32b0a17fe31ff6bdfcc8610eca585d92bbee187b9765da91be34d11dda0677c9799cc792607bfdcfa1"}}, {0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "4018277b8d78a97a667f5aac9c4a2ac48aa09ea6342fc0f69c6c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x3e, &(0x7f00000002c0)=@string={0x3e, 0x3, "bee5f4ac5001415852fd05f750feeb8cc61e34b06a23e85132812adae3fe83288f1c98b0ffd8ae77ca2e5f4bd38301dace4954b73b4cf2ada56baa73"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42b}}, {0xf, &(0x7f00000003c0)=@string={0xf, 0x3, "f8cec780eebcc92ea466751b29"}}]}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff1e, 0x6, 0x1, {0x22, 0xb3a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7e, 0xb0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf6, 0x5, 0xce}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xdb, 0xcd, 0x8, 0x30, 0x4}, 0x51, &(0x7f0000000500)={0x5, 0xf, 0x51, 0x4, [@generic={0x23, 0x10, 0x2, "8b2c1cc261b9a6eb8b67078cbaa2f178ca988fd1a30c4791318ef95c9bc78621"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x5, 0xf00, 0x6, [0xbe0f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x7, 0x8, 0x400, 0xe5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x1, 0x1}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2001}}, {0x48, &(0x7f0000000680)=@string={0x48, 0x3, "28019bd633dcd579ba444c2c78d07ef10c4c38b3ed5662570318b3b2ad2bbff11425810438c510f2d766d112656c7670b2685757d369389c0e0ae1edc0653e720bcbd9d530fc"}}]}) (async) 38.688840006s ago: executing program 5 (id=1952): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff3b, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @private0, 0x9}, 0x1c) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'none\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 32) flistxattr(0xffffffffffffffff, &(0x7f00000002c0)=""/232, 0xe8) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async, rerun: 64) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000084c050200000000000001190224000100000000090400000903000100092104000c01622800090581031100f70afe"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="40082a0000002a31f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f5596a0e294d686f4df41289d62b9faa584df30d9b8c5f01c0d870cf90cbca4deff442771486779519b0abc855e89fdff53322c1ee865837075df02d62f3a090e4dff7623deb7aa3496bdc34ca63a9824d7a900012341ff57622df1355db9dbd829a3773f18a1d7958957e9c3986a82611de027ad1bc7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000008100000008004597d2c09d7f41384801907864010101ac1414aa05039078ffffffff4510000600650001086c000f7f000001e00000025fdb391ba1e9eb0900000017c03578a03340266c0b67441541cce0f873f5d067e046e4"], 0x42) 38.624000789s ago: executing program 5 (id=1953): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r2, 0x400, 0x2) 38.510601615s ago: executing program 5 (id=1956): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'team0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x26, 0x400, 0x5, 0xf, 0x40, 0x88, 0x81, 0x4, 0x5e, 0x40, 0x3aa, 0x3, 0x0, 0x1, 0x4, 0xdc3, [0x7, 0x5]}}) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x0, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0xb, 0x11}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0x0, 0x38}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x228, 0x6, 0x2, 0x8, {0x8, 0x25, 0x1, 0x83, 0x0, 0xe2, 0xe3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xed, 0x1, 0xea, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x2, 0x6}}}}}}}}]}}, 0x0) 37.08398047s ago: executing program 5 (id=1975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) poll(&(0x7f0000000000)=[{r1, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) (async) poll(&(0x7f0000000000)=[{r1, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000180)=""/237, 0xed, 0x10003, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000180)=""/237, 0xed, 0x10003, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) fcntl$dupfd(r4, 0x406, r4) (async) r5 = fcntl$dupfd(r4, 0x406, r4) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) setns(r5, 0x4000000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) pwritev(r6, &(0x7f00000022c0)=[{&(0x7f0000002300)="6726a6978cfa59efde1b2acee4cc84c868d4e21d24c77cf24e1aa7420703c9090d420f269382847b99cbe134093cf48f3a1463def773e9f575b6bb3dec193dcf8c7bf8c5b2e33ecf02ef7577122274de1dca548e94ba3b59cc8a5cccb3ee474c657d58f556aa3991e173c988eb2a2978ce49e3f3136d3ef0a09123bc2970f818363ab5416ba28cf874eb0399eb4dd59c248b99e40cccb9f1d69b7fc77efe3ae5b47b72520e65a22e2386f24b7e0cf833867dd3ff3a00ed0191f63b8c72e83bc0f7f783d45b43e06f6f6b6eadd22ec1ea23cc185ffd2baa43a84a8a2838a054d94b2d2b358e8c0ca620bc74a2c7c7e8409f8093c4ead217820b8a6276805c3ab1c0fc0b9f0f735a06aee0d6d35dcbd101b655e37a05398d3ed01630bd70cf472996139768af75a757e98d40c6ab8eaa926f2c6ef571efd725ac050eaf2e0522a121441c2ce9705932a0e2da3a13f9752ae7187c0877bf3e3a8a70e675f952c51358452e46e9236351b6f0e00d4756fd7a81be5e8de0be7ce533394d0a7b30ba3df2b4c7118c1d4737e862fedad2242fe6d046ec11e85cdcc99d141bf1dfcafe2b1075aa190dc21a59904e888d5c441acd05fe9c39d369c7ccfd231e46ddf2cf1e8e303d715d465e660e6a29c76e92d67037d49631c71cbfd4f059a87a7b241711c7c1ab8a0208a75e9ba6661e7ce805ba3eac95bcb070e14e235caadfadb83ddfd0125b27eddf3f7d68409245a33f77f8691c1a5c9b1036ae201379a7cf349fa4f5ffae764d6b6395f0c269810c98524a997bc699be850a558f50e2e62f48176b0a05ef40341102fedea137d19c2aa61f9250608a60901233c6e4191f270e84dc508eaf0902d1ae1c55b43eca417e1b2ee83a63520e6615b26c5e32e711105f0abc90e5f110643a16b0146d564770bff5515692be847512bdeda4a0ebf310f4bb62c90c9ef4272cdfb8138c2e1454a81cf564043ed3481ce6e4ed1b3b7ba4917f4a5ef4f2e40cfba940c6ab0971076b9e68712451de9b37fff73227523766ab0dabec1501d4541433c0f3f293c851c13c9c60a6b856bcfa7ef91a6ee51db7ceba35b0ffa322539f05d416a729eca6ecc45ca4129628dae0d174a3cd042ddeff6eefedf076a07b80a6198fc14bd6901ec3710d5faba2f8ae0cdf7beaa12261719d77c5b05426cb2b2b1103f2a9ad1789b7ec9dcad9134b930d894117b72ed6db671b9ef070fdba96c0149db876eaf80f3b323408b5438f107e338671af9a89a7b24280a312c8b6bdff3fac25de76bba3cf372b8656f0e789e71bbfc49b5c6911e1396e827c2edda8b39fc8deb3e5693adbd3dfd2845d3361b64f9f888680d967006123abed62379ad3d7c4fa6392781e123ea8ebd4b160f12ee28dd127392c445d532f83b06e25d22062f60cf977664d7b5497fdfe5eb01db147dce4d15dc77cd2b14779b37b70158acd82a7ca2a3884d4b8d2ead20de9209d28f25d841bbcc47bf599156fdc8641ef3b9e6a3b97034f3643851eb7935f5070ffc2093d70eda2e5851c9862b3495749b24699668a271baf4a0d8260c508194f87bce39f62ebf75aca48c5b8b853c9fb4e1b86baf6a5ce458336fa8c803468b6d48d4587aa8a9d043be0ab5620a62400419d077e47edd3412d081a6297d20b4d4f229255278d27aed5266cba67f3e56889539160c50289a4319af8e20c41106f97b9e805c26a458b6a83e8d4550c50b76b8d6aca049c084f3bc476ba5378e906320aac0b74f283dba3249afb38ec76a2434fe41897f92296b4e5ee082681e2c0c403e200096b22af456035f2258b90d6c5d40af92506e37136b6854dfb9757fa77e8be226ebbb8cf32acc4cede09926063d4fcce8b865a2ded1aebf40b1386392262f0a2a24211fa235886f20ba8921064f155d28e32293e452bd5ee1eaec85164212bb71e58e1516049b0a4b4650dee652fe6cf454eb053fedcdeed9399253e9f1b20b499f614bd3273ad9a0801da824595d81b18c94e0f129a8b4d4fcfb2047c2b3e29e0b98a4b07dd5d402dc3fe1d5042cb406cb144144b9fff8006fb016eaaa00abf36a06aa442220af69da202240d5030d3fed1a577bf72392b64658b843ddc3d0553ac4e4acfded73e70117729b358e822c717c1bb06297b8be3c2d3926108eb4082a9da5c0536621de5cf348289a3b7c7694447f58f17e493268742df764d5a8ad38c074595e2a3e884956a2fbf724b509b8dcdf7781d81762ed03774ee34fb35fbd0e4ad5c70cb5919de33e8302f5c6808f0be65922056e5a32959daec49c3b3990a04db85bfde505f343895d30beb55efa22d9a234a1bbe8dd40235e0c3b3028b0acaa5ed134bba74d48960dc0956b8b8e82d5743512b40fa5871da444fd24909baaed32caafc3f97a619654a1692c951fc69d558893e2248461285da33e22e2c630b0e5c1158b8d3cff74f8a315b016505e5eddb3dae8a2a0659d6b252d8db5d9cd6e0586ac95ad28966cc21445b84f227ed7b52e9406e117b5ec74b46ad10b0eec596e172e4e37ec82a5ce5f269b0430b4e0cf6fe196e5ef63ecc3b71a97932afcfb17977eb39a0763ead6de0185f27dbdc420a0b9cf7606e9c9d396b7dbf421f68701b1219b962a5737bc4d34d922e1d6798934b78f1dbfc9ff8ec123066d42aa003c5c8137c7033001eaef642e8ba7d7c3a910b0cdae7b72eb07d912e5a10a8725f47e818fac720346509dc923f89e637b7bfd80857cefa0eacc3cdabf9fbc9e350b0c94437e88c68d5cb9a21617b32f9f4ff01991aed5ff87e8675cdb021334dc91e092ef287563478b4c003287ddcb709ea3bfeeb52f80e966aabe5f5f879c3186188d8b68c05889f6c8b6ef0a4acabe97be3b71829858de2f7606e3b3e7c72f459af2a6d320f99af0a178619c1f5031136e1f3eade7f37d4fdf0b2a051aeb0902e00f4b711601b4b1c6c44a84ad7278f24b2a3509f2bfb7b8aaae66c0b7525ab20e14a0d08d8984ff5228e44d704da6e9a969dfc7b3537d484af13cf3c09796ccff5685ec10f7f289ba3da9aaa1c202f1aa95c3904b213766c09811575c1c2111d34f4916f52e6ed22c9e2cae7de9fea7dc85e47cbff95239a05128d106d9394278b32213501e33edb2036b4e9b92e767107aee7604267551e8e4ebb6b7f0e7fb3de51f94e26f4cc8972cbbd534ecd71143ac7bbc78a8b153b68c28e324781a51d36f572bfdb59ea9fc1639dde25d1066a8cc9d20ffddfcdef3fd477ab5280d89477234fbf43ebd8f88a29c037a751ca7e97d273b3459473e3ec46b27dcd045f228e99c6bad5cfc20559f217a5379b8bcedd8b1fbd6b37ce9ef547a24420b87ff9ed0c76d905f71cc0e52fd893f9f1789560505b8967a0e395a2333f339d9bbce17e791cc5a6921dc7ed6057db8a156f6be964c755ffdcbb9a441c0c497acd99a706e3fcb0425f80578569a8f05104cd1dba2c54ff0cef2059a08924ea4f4fbafd9782c0ec3e7b59f6e89741aa780627dfa07d0d1ed5facf500c860ade89bdf33e84831e1b6061154b61770838e7ba9f8bc0b839b07dd7725eb8ccdc65c6ae145a2d358edcfbf095f2cea84b746afe417d258dc46dce881db84bba5f66c17681d0aec3b25f78d3ab6810a04faaa5477fd92d9210aeb8c1714dc63b4bf3857170d3ac8a5ac9e8bd4933e614c38e34d7ee9a2179ebbfc86b3a6dea4eea906850fc14a6941724450aa3590ce6eb4ff0093362b10636fc67e8ef7d2e216d5505ee4a28bfce826a2217aafb1cbcf43436afd19dd569579cfd7b8f0e798db1058b1b446f5fa07627704bf827dfec66e37109f24c4b578227abbee92b3df2751e16fd24ae67c7342c975ce542e8e46129c5bee9509a93fef62413ff080ab7d44a24e5d61d48fe3e1d9dfe95722ba63126ffb8d79d9abe88d12ed7ce1fcd76eccafbf9d8d47f51288c976bf93b4082b3ba05b02bddb974018e711f8a9a045bb9b908fe26ccb047c3c6510c643dee00a4189538e8887e9524f4c6cdf23ab6cc0ccfb824fa5d2b26e137a2844be319838f99c0f785ab9b6851e454fdf9b1f675460a10d9f425909439c719b30bfbd1882c10626eba89de78a3150313f9e32d84913ecfc89eab8600c679e73fe07aa6ee5814a7d06ce2fa3281c7ff95fa9641ce39c23895d260369b242d6bbf80e8009132e9a117e921fa7e5de15e3ee9ee6e8231879cf003e058c131871fc87ecf5a15856e0f8e9285ffc2519ccc7bf187752717ffc481a068cab759a48842daec6862935e609350bf810f533df95998da8f37f0abf49960de80966ecb30af2f548976673dcec8169200d351347cb7c499c5656d0309bfadc25f7a613f09ca157232450631c02fdec649be6698c0205d70c4f8df2dd588766c0c9db18556dc1954b1bf04f38a57afbb1565d75e0e15e203b0f5e95548d551b2e12a444dd4eaefc75a42e9b10952571ab35401074f366c57b630efee86e33f684d90d71ce9ae7c0a837d2f36854ea2cb3e96af7e3b588da6b5f1e2de8517a4186d54fb6a8548c9e1aa055d6d992730f4da225bed98a52d6b36ea229b399e2c90b512a2a3eb0298f6d459d12191cf53b4e68fbd986f0f46adf0c76b8b5c5ab65253822c73b377770e446a5b4eae961e75d12153561f185054791a671f79a403af5ff737c488f28078c7f51b61b5e6e5ab3502be1a891ada6c46fe947d3af3777d5a3500e99061f9ad7e268e32c2f31048565d70855208d31f2a06902a16964d27c587db049655938817f51fdee6ad26112a946fdf5d25fbe7cb9e8affed622c2e0d3df16ec90850228664afef0574b20a27e2b8b56c5f84f42313fbf2b02f1f0762761b5314b4745a575a4984266e6cbefe72859eeadce933d68f4de75b80accdf21fce5102863ca62a458ba3d50bc33f81be3850677ffabf56f1106e468e4cc18814ea74a0a4a0fff363fa840af4280a095927a6b6e5e6c57a6598a0ea2f7bd9b5ac08a4d85089ec9c49db125cc93db084d54a2b09ae0db9dc7d2c94e481f65511f54fbe15a00150e5ab04093763c5fe2ebdd9960371e0effaf87db751b8c63e6c668adde308e93482cc6da40ccd787640acd1cd6482e96fd4962552b3625bdaffaf01f9c72df43c81be64f0be6656ce3719c5d45d2f3022c007a01377468ca6a899609f8e8c79855d32db58c804f52c025e726d258ea21688f467b9aeb33711848822c18082d1b73a2944bc218ef569c5c80fdb747224385336881f0d9ddb785baff8db7a04309af2db83d73f0a3bc232c97edc66e58aec9c149ad37827bea469c50c0d3b5747540140a219c09da800168a1c3aab0cfb5730e2518167495c759be175105533f06943aa9c1def8cfbb970642b44fd66f73fde7e27612a00e2aa05803fcf74d390b8be3aeac6bb1475d17833e2e863420b383b07463ea763f37b10d160c4999b67b449cc1a0f87a56dadcd2afff9ed29b6d9fbed58cafec21fccf86c208544dc902dda2fe4d4e9d2d82cfc5305211218816d57e9ddde94c116b5c66fde4dc7dea7f718dc6955fa5df2c1a967b3e9ba69f9bf83f1b0164c3f824f61024702ce1f3b213d162629acbffc8d6ff50e74c954a2fcbdca535b536fb6bbf1a0cda63107fb3b2d72156fcd33ae060dcb8e550076ebfb387ddb71396c394800243747e5b70811514b03a0482b32e686217b796cc04b6a67fd325248dfa50b7731dd30ee1f6753b1796777f0d3075ae8207f5fec3e66c6f99191f79d9b5aedd83eb62eca390d21846a21fd6ded3f63693ed1a74f6e93e7a9cea8315408d6", 0x1000}], 0x1, 0xa8000, 0x9) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000)) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xb, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x21ff, 0x8000, 0x0, 0x3, 0x7, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x73, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xdffffffd, 0x3, 0x3, 0x26, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x0, 0x0, 0x981, 0x4, 0x9, 0x3ff, 0x10000, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0x399, 0x7, 0x1, 0x7fffffff, 0x6, 0x2000008, 0x800, 0x7d63, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1000009, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xfc5, 0x80040101, 0x5, 0x3, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0xb, 0x100003, 0x7ff, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x9, 0x4, 0x2003, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x40, 0x5], [0x1090, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x0, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x2007f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x3, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x7f, 0x4, 0x20008, 0x7f, 0x8a, 0x44, 0x405, 0x6, 0x7, 0x4, 0xe, 0x4, 0xffffffff, 0x8001, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xfff, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r8, 0xd1d19000) 36.839027322s ago: executing program 5 (id=1978): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x49, &(0x7f0000000100)=0x9, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1442000000000000"], 0x14}}, 0x4) (async) recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f00000003c0)=""/4100, 0x1004}, {&(0x7f0000001640)=""/88, 0x58}], 0x5}, 0x9a}], 0x4, 0x2, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000001140), 0x2, 0x89c1) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000001280)={0xa, 0x2, 0xa5, 0x4, "8100000000000000464302a146c6c4689a386c11b7233fe9f73500"}) (async) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x3b, @private=0xa010102, 0x4e24, 0x4, 'lblc\x00', 0x10, 0xd, 0xa}, 0x2c) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) (async) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0xd, 0x0, &(0x7f0000000140)) (async) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000d50f0000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1) 36.784906645s ago: executing program 34 (id=1978): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x49, &(0x7f0000000100)=0x9, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1442000000000000"], 0x14}}, 0x4) (async) recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f00000003c0)=""/4100, 0x1004}, {&(0x7f0000001640)=""/88, 0x58}], 0x5}, 0x9a}], 0x4, 0x2, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000001140), 0x2, 0x89c1) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000001280)={0xa, 0x2, 0xa5, 0x4, "8100000000000000464302a146c6c4689a386c11b7233fe9f73500"}) (async) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x3b, @private=0xa010102, 0x4e24, 0x4, 'lblc\x00', 0x10, 0xd, 0xa}, 0x2c) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) (async) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0xd, 0x0, &(0x7f0000000140)) (async) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000d50f0000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1) 26.548876871s ago: executing program 3 (id=2052): setresgid(0xffffffffffffffff, 0xee01, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000006000/0x4000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socketpair$tipc(0x1e, 0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = getegid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000021c0)={0xa0, 0x0, r1, {{0x2, 0x3, 0x2, 0x5, 0x3, 0x7, {0x0, 0xcff, 0x400, 0xd25, 0x10001, 0x3, 0xc, 0x6, 0x800, 0x6000, 0x71, r2, r3, 0x8, 0xa}}, {0x0, 0x8}}}, 0xa0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) futex(&(0x7f000000cffc)=0x2, 0xc, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000)=0x1, 0x2) (async) futex(&(0x7f000000cffc)=0x2, 0xc, 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000)=0x1, 0x2) 26.473923545s ago: executing program 3 (id=2053): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x655, @empty, 0xff}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='lock '], 0xa) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1254, 0x4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa7) write$cgroup_pid(r2, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x196, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x24001) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8003, 0x0) readahead(r4, 0x2, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020c0072511000000000001090224000100008000090400800903000000092100000001222500090581031000100aff876c4e6c5764774c397462c5c1f9d0ef2e5a42050b8c5fdd7c61cfed5bd3cfaa76091ccd698a12e18408e2d40da0c937c3de06ab4826391e42c899fd4a7a9d9e2ce6cd2c2d9821dccf1109d0f49a8cc2a60746302f3725bd44b84bb8e5cff9e4ad1401c1acaa29c855d51cd0d1f413998d472cbb894cfe89d15b047aed26cb45a422fcbe989ff42be4d24ad82cc4c45224a87a"], 0x0) 26.250944656s ago: executing program 1 (id=2054): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'team0\x00', {0x4}}) userfaultfd(0x0) (async) userfaultfd(0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000}) 26.250613816s ago: executing program 1 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000100)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 26.199022109s ago: executing program 1 (id=2056): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f00000001c0)) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x4, &(0x7f0000000080)) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 25.320006255s ago: executing program 1 (id=2060): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="cfd934be81b103c2a226f8699e320616daa230dec9c3925135dceaa185cae18f9872cb9b2bd22cb3715f291c9a21f47d5e68c911af6d98c0c45d7a8370c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10f, 0x10, 0x10010, 0x0, 0x10, 0x10, 0x10, 0x410, 0x40d, 0xe, 0x10, 0x113}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = epoll_create(0xb013) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00059e0000009e21baed0c1984a18d4a0f02c87d5cdb706f1a5769228282c78960891783d31d2d7cb5840600000000000000db8e78dad0f3490ef1c848e00d5be44a80eaac4a0767b065b4f055da7dfdaadfdcb7ccdaa4abe5e5df28ef3a5ebb7c5270a293365a7a089819056775d07ff612fe2fb280dab96905f3e1b545e63500fb6f92a6773b55e03c81c2061b6ed4b9994529"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0x11, 0x55, "b9df29da95f45b53b80dbbeb0a51ecda4908f5652a254181ebf61089c2a98d92f81d49cc01eaacb16415500cc0d062a795dfa000cdddc05cb9c15fc84ae2ebfe7fc277ebadaf2926af9c21dde93dda8e7ef25fa541"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0xe44d, 0x3, 0x7d1, 0x7fff, 0xd, 0xb, 0xb, 0x9, 0x0, 0x3, 0x83c, 0x8}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0xffffff80}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xc}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) 25.246621869s ago: executing program 3 (id=2061): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0xa0cc2, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000380)='!\xbb\xf6\xf3\xfc\xb9K\xe3\x12L\x99J+') writev(r0, &(0x7f0000000900)=[{&(0x7f0000000540)='k', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r5 = syz_usb_connect(0x5, 0xe00, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x10, 0xe5, 0x21, 0x10, 0x7ca, 0x815a, 0x3f42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdee, 0x4, 0x3, 0x7, 0x70, 0x74, "", [{{0x9, 0x4, 0x77, 0x1, 0x9, 0x17, 0x88, 0xe3, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x1, 0x80, 0x0, 0x4, 0x2}]}, @hid_hid={0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0xb54}}], [{{0x9, 0x5, 0xa, 0x8, 0x20, 0x5, 0xe7, 0x0, [@generic={0x1b, 0x2f, "369ce18b3d32c8d32552c0187744069a96e6d8b3df13c46c0d"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4c, 0x2}]}}, {{0x9, 0x5, 0x22316508c688a055, 0x2, 0x200, 0x8b, 0x1, 0x9, [@generic={0x42, 0x14, "5863d6067abde8e22186d926c07dd21283c7f4b443da0b0518dcb7ac37c8675516539d7a768fd72c76b2a5b95eacf412b192f79a7db39527e647eba01158c714"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x9, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x1d, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbe, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x3, 0x8, 0x0, [@generic={0x62, 0x23, "fab8c0bf469cd33cf605151be569edc4934a3c1b92feac5cdfb55f6a566014f003b2afd2e62ae21ec32e3e03fe15c6260fbfe6e2564dcfe3d94d060b15b80bcc7a0cee400ab09398bb527a7ebe62a16f520ad6c42fcfdd96a1bf8b5ddf2813df"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0xab}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x9, 0x8b, 0x0, [@generic={0x69, 0x21, "7d19fda0c5e11730f2f95f6dba04df0bc6d7189423051d7c074446e06e14b997defa2591a0bb0de55c24a7b1a1e30d8a67f17e688c89b26c75d4c0815ca91007d0d1b405441c84e7f1548af522af9c10b060c072ec31ddf6fdec01e1fe08d8b0d2175776127803"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1e, 0x5}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x400, 0x2, 0x40, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x26}]}}]}}, {{0x9, 0x4, 0xff, 0xe, 0x3, 0x41, 0x48, 0xee, 0x4, [@generic={0x3c, 0x7, "d52504731e1a71679c3693d510fd5fb4f95475ebf9cebbc0e414a92eb39fb985f7d7e582e667f056b277327f3dcbd3bf0ab2239a3ce2d4293e0c"}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x1, 0xa, [@generic={0xb5, 0x30, "04b64ab6f48d1cfe1d088cd5b278f832838dccd919b5278c60702e74debca88cc11c5e74a35d22f178364af12d016fa83224bfb369edb9b1a513dde954ec8c8e533762d5b473f8169e1d641a6fb3f3222f00080d3c03708fbc8918ca3a712ebe30075b4a48f558880f1ccf925f2e48a21bc4111e830dec173d5e767fa2b6b9516c6e1cd90d4e42e927606d79ed6779018ae075f0d52e729fbd24fa785b533202ae03176dbe6d8466703824b36da7df935c6d34"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0x8, 0x2, [@generic={0x40, 0x6, "6292435ee14092b8db489a6e0aa74c0e5b5b617af88ed2ee2c7a244221ec0c8a6735d9af7bf1bbde44770b578174053d7caa39fff47f88c37841f91db3eb"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x5, 0x3, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @generic={0xaf, 0x22, "3ff3a025277ad45e46fefd935f24eb6819d0f8df08f2a7593d1e4f04d290c17bf96de1668ca98bfac94349de91485fd15cc0f9d29b40e0020e488692cff89f7a9a3c48b869ccd8591ba37fc64bd8b7d8907cadb603dc69140aa1edf0ad8b72ce384d78ff84fa12ff27585ba387f5ba5e726eca914de3fe1ace27843c68e58e7310fb94dd4e60668a23418ec6cd447e93350df47e9ebf814031065d4560f8bafd599b04d7b9d68f5254d1389f5c"}]}}]}}, {{0x9, 0x4, 0x85, 0x8, 0x10, 0x25, 0x75, 0xc9, 0x6a, [@uac_control={{0xa, 0x24, 0x1, 0xc, 0x55}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, 0x3, [0x2, 0x6, 0x1], 0x49}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0x40, 0xbb18, 0x8, 0x3}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x0, 0x3, "5ad236"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x400, 0x3, 0x7f, 0x0, 0x5, 0x4}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x3, 0x6, [0x9, 0x7, 0x4, 0x6, 0x3, 0x3], 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x401, 0x6, 0x2, 0x5}]}], [{{0x9, 0x5, 0x88, 0x0, 0x200, 0x2, 0x93, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x9, 0x6, 0x8, [@generic={0x51, 0xa, "ff3d272e30206c4a741ffd9456b69b82c02d518f5710293a492d360166fa03c58ee68ecb015c2db13ac63edfd1629887000ee6e1c31e127700dd59b6ebfd08791567a1a6fb2b433a90f6e916c73c45"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xb, 0x4, 0x2, [@generic={0x50, 0x9, "8e1f84a6cfa89898a0f49e4fc9b57c9e141efbabc0a3ded3ecc2af09902dfbf847204410959cb47397a421dda4cbbfbb0fb37643002a5bdb5dd2e843e91b5612e4db3f30fda68a3f8f4cf541c97d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x80, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x4}]}}, {{0x9, 0x5, 0x8, 0x38, 0x10, 0x40, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x10, 0xb5, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xbd7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x5, 0xf, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5f, 0x5a6f}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x81, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x101}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x8, 0x5, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}, @generic={0xeb, 0xa, "831be537b8504aec4efd4515bb2f0a29d3ab7325a948dd3f5e39b0eeccf794d756345ecb59c21c46844c360876a55d49a15fd6815104a5b7a5053892365e7605a3fbc184d3f23f1f074f1a6382cf2780a77fca89a3c15de6bea59117cb387d886578a4db74f0fddb7ab19a8b6f79626e7ba476ce8b5b0fbb35799865b9de2fa7646b521e2369506ca7dd6d898ba3489454a1391a7d262417ff456b61419b9e622ad924b86bf20fedde010260dff1b8227450cddd58920ce7f3fe923548f8e1f196a8d03acef40855d0c180911d0f3e92649764175f1722cb6dacbade756dc49e77bb8b14b3151bb17b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0xb1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x700}, @generic={0xc1, 0x5, "c17a59caa97f81cfcb54abd69e4ca7906d5b677f87efac2e988ad3b0800eb0dab8905df33482c599ec4d8dcfaace27450610c4dfd59aceaba2a561807819d2df73d8a42f458fcb817a14a3de52cb361c840f0b06736702669374b59497ed06609e30d2804bebfcb8615c0f8d0cca4dce6aab18162e22045512ec62a85b55af469fb0f36b2153bc8f5fe9d9a278d0fc51781fbf49b4ea400f4da2319bf2ecd4d49834f54629f5b50e7f7b5eba7af254d32e4e2a948f0f58aa3263620d13751e"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x2, 0x4d, 0x8d, [@generic={0xea, 0x30, "5f10f327efa9a1c22e397a465433e2277472209632e9223c62adaab156c8d4fe693dc0c54edbe4b8a206364167191fba7018fa42953ded917222eae09632465a114dfe00624392330e3edb5b19f3b89f2bb4e9bb254d7473242675ab61eb477c3020871ca9e7ba1daf8243a58be7fe4d7822cf2abb2b0270d6e6a28c51e2db64c890ae86b3c97d2b39f536a8bf75b12384f1a2a2be99ef46ec83d0f1c92b2fec086d410ba52d50e57883d556c66a39962c7f3a7b34f101a4daf55962c91dfb343ab2c6bbc1e82ea014555b4f780e0381a238b0eb8817e11798a99ab93f816c4efddf7b0088a0edee"}, @generic={0x2, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x60, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x90b}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x6, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x7, 0x7, 0x81, [@generic={0x8a, 0x21, "6876ca65e568f72399e60080021d0420e4b2a7cdfaf29a7e6701a0bc7d770fe7b861625475be46118679fd3aeacfee381d68e6a6498b8ff04b69991514c8d6018e0a0586d719e3b007aec8fe4a62492e6a997f26f801b48fd8cf536f1012dd71d5236f9b3d195930767cc58e1bb5fa804b8e4f6c9ff1114897a5eee2e677046457979b7002358eec"}, @generic={0xb4, 0x23, "0cd47c6aacbbf7e883aefb4dbcd9962d28c7be661bb44bba1aaa5b8c25f510887e16526d187a7762843c59dc10e3585f19b9fdbf7526f954bac08eb56b18704fe284e6b315f0a850ad2da41609f6fdff0ddac2e20974d57eed16f338282fecbd53c368261c0a31b39ce35d625ba992a56691cef3d13b76fdcf518346f41d6ae73b66df0725abb7d308518907b743851d3f9f22bfc83c87d86bf874c3a75e0e412e1372af5376208aa3ba883c1646e8e2f0bd"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x81, 0x3, 0xb1, [@generic={0x6, 0x30, "df9149a6"}]}}]}}, {{0x9, 0x4, 0xfe, 0x8, 0xd, 0x19, 0xb8, 0x67, 0xb9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "756f326f12"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x0, 0xffff, 0xb4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xf, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x8, 0x7, 0x4, 0x3ff, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x2b}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x2}]}], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xf, 0x5, 0xeb, [@generic={0xec, 0x23, "693d634e416cae1993014b443c55f25e7140b9cd9beb7a89ca523d716e39dfa4b1c4fdfe08f9d4aa279138136f208e05175cb26ca560684710d2e2d4860b9490a023e1320524b022841c22af8f60bd90d5539dabdca08ab4fb93d718155ccc9e32fb14d1f4a63a88d9cf3a99ca772295bee16a05ce0b2e62e5d3aedcc9f9fd59b6c9b83d989a04859079d698f73e898707ecafae49da66e1f5baaddb6b587c2f4c9a34337fba7a7a2e7a7167d9b911ca6199e38becd08c6a003dae276420cd42fe1f63cf78a907ca448642c6f0d01b2bdc788e42198d0ac00435d337383f4d9766b5f0eb62af50e5ccb2"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x1, 0x6, 0x2, [@generic={0x44, 0xb, "0ef479245ebd565357876a9b9bd6e7c5b36b596024110e24162ff7950c2f31e30c653f7556a180168144fc163f9163f8171b95cb45d820ae3c745da4ee6550720593"}, @generic={0xb2, 0x11, "ad82be64b32f955fe2d6de1b790e26e7f3e77296ec506cb3a5607c7c98b9a1917f66634a22da75bfd86be6612a06c85011fb1d93128cc07ebf1bb93948125e76aa376845dcb3c297410255aab58f66680f9ddb502729c01c7b992bda8478c6a43192bca9c2be12708ac6ec869e69a4570586f57f5de1af230947be2ae847edc11fc8aa7e6de243371ea8915ec4344ef3000279df90358cc256445026aa52c5eed87872bf991a27ed1197214e5af75af1"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x2b, 0x48, 0x9, [@generic={0x1c, 0xd, "1a8fb3a6caff7c6558d274832be9e8056582252c20c1e467b062"}, @generic={0x4, 0x2, "5dc2"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x2d, 0x6, [@generic={0x16, 0xe, "364a954ddd83421397ac28b9580cf076e612cc13"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x4, 0x4, 0x0, [@generic={0x46, 0x30, "6c6cdeba6b8ce45c898a932085cef0a438af86686bc82e39aaa92063fe87e225df87c5a458235406da82c0a5af7d0e727d2959e2f8338c6ca1e43f8691ea5addd1806852"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x28, 0xd, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x93, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x0, 0x8, 0x7e, [@generic={0x7, 0xb, "eb76a1a76e"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x1b, 0x9, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x81, 0xfe, 0x3, [@generic={0x38, 0x7, "591b61f67981afd5b8f549aba3fb7d55efb86ac4d99c4699419b8abe2eea35d7179e1c851650650c74db8dc73533205c4d891c7e6a61"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x5175db72ef1bf9ec, 0x8, 0x8, 0x8, 0x81, [@generic={0x5a, 0x3, "dbfd4bf0d87bbeb7b7427025486d988d7ed0ea4660cafa5c412e4be922744ec411d7a453914e0830c563add75205a9ccf7a83d59ef920ac4342cf75bbeefea68901aaeb19859af72e9ed22db4ef7eb056e3205d432ee2b3a"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x7, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x4}, @generic={0x5f, 0x3, "80abdba02b2de37d3a852c90a810faa22c4c15603887c4b1ef693f7abc954682e1aea2b893716367bccbba80b6b7c0b1c3c3577ab352c1193af3ee5dbf98c6787bce5060a45c609b6972364b91506bcf8d61bd7db1e0c535cd059e2dba"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xa95f}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x11, 0x9}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x5, 0x3c, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfb, 0x200}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x201, 0x2, 0x2, 0x3, 0xff, 0xf5}, 0x1f, &(0x7f0000001780)={0x5, 0xf, 0x1f, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x800, 0xf00, 0x2, [0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7f, 0x40, 0xc}]}, 0x6, [{0x1a, &(0x7f00000017c0)=@string={0x1a, 0x3, "d9cdaf72e052ba60a4c20b183ae196c47f20dc8f0b32a730"}}, {0x70, &(0x7f0000001800)=@string={0x70, 0x3, "8d37a39b41b1cc6cff4ec905fc1cd90c61eea6b341dc98ade18a39106a136481b2717b1a61291871c4ce6c200d1ffbdfd53e6ce42d6bdec929951b9f0236d28e3eb961f89ff0e04ce353a49d6f1564d50230b820e78aab84b1b2e5fcf8eb14f87b04dd0fe35853baa506b3628935"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x3009}}, {0xd, &(0x7f0000001900)=@string={0xd, 0x3, "d8f75ffd4bdf1c15d5b35c"}}, {0x3b, &(0x7f0000001940)=@string={0x3b, 0x3, "f8eae684ef8e61449865d226b79e391fcc44ee82c79e2cb8080e01b1849b1c4108fd4d74af0f44887c79d81c450bad79200efde4148741925b"}}]}) syz_usb_control_io(r5, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a00)={0x0, 0x6, 0xb8, {0xb8, 0x8, "f96c055c4802e35068528937e9a576799e47d888bbb30a60d8c9e12bd9ac7781ddaa150d9fd0c1dc4acfc9294ad63e3bb52311ede049e8f9bffdf849035d1cf7688d1ec2112080b06e9a259be2941101755e265d598a710e6fc51c1ce4b265f27983405130299ebe00c115a2430b12e8be1b26af576dbb3ed452c81521757f72ae928b2a21d641a45fb45f305b445387f75a31fbe7c4401c51fb5717fba612f3fc9f23b3eed6f4bdc7ce9d00c4817f8e2de7fb85c715"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x3, @string={0x3, 0x3, "bc"}}, &(0x7f0000001b00)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xb, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x80, 0x1}]}}, &(0x7f0000001b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x6, 0x3, "ecdb2889", "a27124ee"}}, &(0x7f0000001b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x14, 0xff, 0x40, 0x5, 0xff81, 0x1}}}, &(0x7f0000002040)={0x84, &(0x7f0000001c00)={0x40, 0x13, 0x4a, "66a791bf948bbba96a18be4764cf0970c0787d6efdc78e34577160199c03bd7f15645ad5fbb2d4eca9d63aa2ac66c32bee77c94dcddfbdba55ce618a6bb162264bdfade154301ef21bb0"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001d40)={0x20, 0x0, 0x8, {0xa0, 0x80, [0xff1e]}}, &(0x7f0000001d80)={0x40, 0x7, 0x2, 0x356a}, &(0x7f0000001dc0)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000001e00)={0x40, 0xb, 0x2, 'AL'}, &(0x7f0000001e40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f0000001ec0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001f00)={0x40, 0x19, 0x2, "d690"}, &(0x7f0000001f40)={0x40, 0x1a, 0x2}, &(0x7f0000001f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001fc0)={0x40, 0x1e, 0x1, 0xc0}, &(0x7f0000002000)={0x40, 0x21, 0x1, 0x4d}}) r6 = gettid() r7 = fcntl$getown(r2, 0x9) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r2, &(0x7f00000003c0)={r3, r0, 0x9}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x1d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sigaltstack(&(0x7f0000000180)={&(0x7f0000000140)=""/60, 0x2, 0x3c}, &(0x7f0000000340)={&(0x7f0000000240)=""/78, 0x0, 0x4e}) 23.572866657s ago: executing program 4 (id=2069): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4c, 0x2565}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010000000000000000000a00002c"], 0x20}}, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000000)={0x1000, 0x6, 0xd, 0x4, 0x3, 0x0, [{0xf, 0x6, 0xe, '\x00', 0x102}, {0x9, 0x1, 0x7fff, '\x00', 0x801}, {0xfff, 0x2c02, 0x5f, '\x00', 0x1086}]}) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000740)={0x14, &(0x7f0000000300)={0x20, 0xf, 0x6, {0x6, 0x6, "fd3119c9"}}, 0x0}, &(0x7f00000009c0)={0x44, &(0x7f0000000640)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, 0x0, 0x26000}) timerfd_create(0x4, 0x0) 22.865765384s ago: executing program 4 (id=2070): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4, 0x2, 0x9}, 0x1c) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x9, 0x180, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0x6, 0x20, 0xca}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x0, 0x15, 0xfe}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x306, 0x7, 0x4, 0x90, 0x4af6, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x8, 0xf0, {0x8, 0x25, 0x1, 0x85, 0x27, 0x2d, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xde, 0x0, 0x1, {0x8, 0x25, 0x1, 0x80, 0x3, 0x8, 0x10ef}}}}}}}}]}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 22.506961013s ago: executing program 6 (id=2072): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='fuseblk\x00\xa1\xaf\x13\xc0\x1el\xbe}0x\xdf\xe0\xff\x96\x98M\xe5=\xca|\x83fc\x8a\xbc`\xad\n_\xcaL\xea+\xcfK^\xb1Ok\xc9z\xa9\x18NP\xa1/[\xaeX\xcf-\xee\xc0\xb7\x98l\x9a\xd88j', &(0x7f0000000200)='fuseblk\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x3) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r0}, r3, 0x4, @unused=[0xea, 0x7, 0xb, 0x5], @name="c47b78db4dbd73dddb9f773694e34c8c9fdc61c9612f5ce3c4e943b5f557bbf89fc4a36a75cb1d409dd5624a245132579c0bf317e2ffce51e0da393640e4ce8bd94002702ff5814ed3f111430eb08c4e46f81bdc28c65d1b3319f07df5f677adb41cab326806005eeae8e7d66db1dee0793ab91e12c2da6be8d1b0e7e068cef1f66ccae047322cbf989f1fe43b0439b6ff682dac8a9305a6cdc45868eab7888929029a9993047b4d200da9de56c8285a1f6458ca9710c15817e15f28e1578dc87d09f693c962ebd21f58f820217ff3ab3ded13af313e8574a4d2454d3324f2cc041315b48e74d988246666535d20e4906f5ec573cf8880b081db4ab36d5150869aca6c4865c25309c42ca3a2924345b15e81a77a60736248d94833a2a2f368deb69caa49d96f4fa89f7289f0a749f1da9bf9a4a058e1e6cdc7b8e3e4e28fc361cf17ccec770ed45f66d357264915277cc51b3768cf382d135064f186c84e2a63c96b42cede821d6f9024ad75c50c4212b383fcb6d25dcd21a0f1f5832b5a2bad7f13c20210231c5d2a99132a80f72c66df2819982933c6fe21a58330ac1b7c48c19b6bed6494c78fd4cf1d4d58b28f5a1c8de9f9a5aaf21dfc33cec84b144658d2fe44efd4f7da0d4242b0bad73a26bab73ec0d62c36fcc30b8981e768588c86aad48660956e0901f70a36cf0993ddd88374d37da52cdf7a224ad2712f8f6b4242bfc98eed78a0cf00220b6c1e0d757ebf7a0c6d4f45288cb7edc86fc3537c1c5d3aeb56739166487e7345d03c629c4808a0e80ac8a0a03149658844d94d9fab26759e5c042e3dfe2ee605c62aaddf51d261423f9d4589e5b1b9087d99e993ecf73df68426421508b2c79a866a14dac93f2b34a4fd3a66e158d4d9a3cc8005e1d756ed7282ef9d6af6023b1ad55eb1c7b9722aa402de74fc3763d0540f4e8205a6e199488dab8299ef33e892e03869c340dc7894b4c1b0faa9c44c1243cf5f4476c7bf51ffa608dd05e40a3b7a2af5bf938b1d57b2ae62c3dff22a9023a62b1d26811e080858f595632a6ebdeca20f8beed88011f39b15d6c650732187911c06da1e0e6782207aff88cc29293a57e98aa69b89619eaed0b7b05f4becc3abd6f288b50ed6cf3b1747e5af0ee9eeb6ffb90a71ea1d94f8050a1bc4c178f52e2ea05c1d54767ea129c597afb8e565bdde0f0aece86de485debed9799a72187b337a1c3eaaa702f14f4d11545b9bc1df9af16d9fb856f7888bef51e66a3d79d2f39166e9740e144de30653e1c580ecbe5ba1da7bf7465468bd6423d9e61ea998bf81df855fa2b2d63ddbcf8e8a1a6a37cb4720dd4a6881babed2fee1bab1e00a9b332f83aa5716d130411e563a111f86e213c7737e92aeccc7a9cefb683695a5d775d2558e2d7ace0b8c5cf31daa874f0c0a453f1a483bcf57173ae65a1ad868ead0275ac6e4a5ba2be9a5e49ecbd317ec3994c417b312753e77325695743e80b0bb88eb8a5e5879bb13fa611a2327ea668d31498c3a0cccfe23d1669776427b3daa8d90d17f8b9dfafd145194ca0bd306b215309bfaa35d1c4c106920e774d00021ced37bd6e68554dfe1e4e5b8808dfaf3f428acf9ed2b7d073bd9c31eef3dfcf72b59f62be85dd00a6296b7a69f161bfb314ef43caeb47e2c6bdc269fce8c6a821678d8fc749167eb4b28a011cb89ea92e222c5fde83cbbee94d80c2403fd23c385166270ab97c37099996724c6bad4db5e6428a8927db38915f8fa06922467b969b4e601814c37bdac09153d94476c90e7fdfa900befca43f02d472df90a55b3ecde88a8f3be69464b23783b52422c2aada0ee7ba655b5d4aef2f6e19b335b6201541617591b52435b3d920f9e34404347a5423d0cba3c9b0624f13dc953078c0e4f5194930261624d3f23831951072c820da1c51ba174c14d88731b5c28d9e1d023971d1b1d5da41939935b3f5d5ba6bc58341a84b63d043f2cd1a864567f83a803ff7b34057262b749c3b2d5eef7066815768b24ed68ecce230facd5ceb7781986c572ded87915dc24c28b5cac9b746efee6bd81534f4064e59bb88dff0306d18dcac7ee388acd42f073ce039dee91633e6d59f93687155704d7e1f7ba4c3bc5d2723cf67583066adb79e6c5eec5423561fa3a6a3fb15a979328bfd654c84c1647a0ad6749ca9ad27b47b164c452769037470a62b190682705d45946ee765bae57f7054cd696d42be80416687d4722d680e6c5e321c4213fc37327b476a91398d5d3bd0c1847998e23ce798dd65e4dcb29988d64ea199c49a859fcec03222f8649f24780468b1aa5eb54463348616ea6e8d7a993599590fbaeadd1dbef19e49247b68d9340ca37655950f893cae3b1cc343d0b48332844c94ec0052e139884973a9502291eeb7c3e62ee1b7fdb80cda8b58069d0fa24897ffc0c365c5ccd6a48e9d4cc43d53230254a9d1b4587f2f82f7d86b7f36c3fc6a7060f620cff9519eb596955b7ca41e9ac0eaa77f813b57d89b90f21f175a2efe3907a47732f71dcbb0e5d6fcbd12bfc8337a5f448c0e6ab6edb4488e923375f72de9f4aaf8888d78df2a8f2a126222a018f2a9b131acad4bfd6008982ff5faccc25ef963bcf37b1d7bc8168111adf702a5400076e210791109366deacd65c38c7d650c783e2894a2c54d18b4bcd3064bfc2e3ac3f182ecfcf74c4989c351b390d9ccdef7a8eab63c2bcff31c4e59df0cd8dbe4c061b32608ad484c348d0dbd05b5797194b9b57f2011dc9d10eaa967584edd2da57363f1b923900b0a49de03905b17e4b4459bd51f040d29c872d9f3dc312584b94b7038ac27d04598380da725df6f30271c50a9bfb2ff9bbbc65cff6106ab9e5510306fe2f61e48e431fb60f0dbbbb8045b08bcf044f2ceef96b8b7e14a51cd6f40ea4dfdba1cbdec21a1290e11fef32f34cc7b73838a333c073f07a4fe6ada3e89d19eb16fa4ca129283c7a2ed9712255605590a73113f7ff0606ca87450cb48501126c12d1f6eca7c27576045313d65c376d1dd9b140ce2777702eb30e88b58cd5581982735e343ddb35586a941b299bb573dc27c679116e330a472111b2356dc1b182e3a982e3528906dcb340b572c3af2fcb365d9290dc8f696af32ad024efa9e8221b99ab2ebb2747df1edeeabfdd7a65c565858080f72fb8852559f7b193a6c76339c7ea66f51cbd9bec71e4333bad9c95d1790a979a4db840ccadef86cc5576d6d0393b42efe4aa9945d070e7f8ea889d38c5640dad2f9cf472fbd73a5cc57d338485b8fce81df50a7b20dc7833c178ecc9af6e0fb4f54b37da7f3a35b9e644f735bfef96a0003a97805e48b9a37db704448050036b6a12e888d85069350bdddf49b752046ca1f5ea5b018d7fe3f6ddcd7a6f41c2bed3bef9aea9475c9742e2dcf81d3929f15fd6e30d5359373d14ade60c2a65005b600537e7952f2e44658a33b3284ffc10cee0d76d10a7ed05a572883e641193fe32fa3130b4482394ca413f5e9d3c3f6738c8304044f1540778f41477ed24f6fbec8c06a1018a29d70c49343a291d1db61368c522f34972403f098a2039f8ae4b920c8a28aabdea4f6d0e266a553d5267761d139863c73b21234777f49a0a49ec855a2f8617aac81d37061bd6387608ab8d68a1a5f0471b9419176d7357213f29885bb81dd36c7130374c3b69ce09f18f8f68a92dcd81acfac48240262e7bacfc70f64a0239449abca97be666290e942221791fa444599619c0dae22e76a54c6ff71f0a9077d8818e87d6b86f464e03ddd063a0189edb3aa85ffa1a149c51fa9de1d925c9baf741d457ffc4e058cb8f2997da331058b7848f9af53165c61f4f021799671c7ac52dee1811855a3551b95674a9fe84448ba45b02e81af19e6b64b6d8677c3fc8f97d2a60927787d52162d13045f79abc2b26de4be970fab43a8c51c05a8ad6d429b733f1c1ec33a21d4b38526ec0cbdd1d809a7e394584fce619e2d1e0113e6988b6e50a4663109fc8c6713464780d70d7884282fd6ba057b96d3863128dfa9da2dac25c7d50355dbd175be72347290207a71fcccd1db57465a43f48d034571d544e01719b537961706a90a6093b1a73213c854547b4abca37bbc3bf15eb1b7b7eb55c96f35f67e6738e6a64029b2a6cef0c430674a068de5502f928073d1f53d39521ed562fda0432f2fad7795a8412739abf8b5b4444315c36f93c7f630c61c2ed8f6d7a3fe8b8ca8bf0f802f469a9f9a923cce68cf49bf70f8c156d57a7cca023e73ddee1382ac85cc38dbb74cf99ff3791d8469fa1edd67cc3d7682d8dcaeb6f8b697e9c984ab04b5b3197c79b7ec22e5ca679005145361b7d32849f751301b14adbbe98e2c03c4d52aa0220552fbe902fd91ebe503596c4b2fd3a06799899ae958cb63895be756f80a1293481440fe21acbe69e8a2d0c09a968714bf2e6ed57152ef33773f2c7cd1a5c5b68981e58767249e990ed84ab5df0ead58f53c53b3e748b601eec21d3e2482b60bbdc629713ce730467b688269c16c51d206e96de20448f42de6e72cfe59261d2350ba100ce59a42d7d5d55b02e62f0217b94c9ac30443a71c26d52c57f58735b23a865f8dbad694fa9b68d043a831002926c422b8830f98455d2439ed5e0efb585f582074982e158f37d8925663e9db3842fc6dad38e919c27f86d7cff139e0b7985454e7a0a819ae362b899b263f499b44161abb1476e2cd336a2fe8c90263009e301b85cb333f6af364d25f226b92641e94fade8f1c251a694719867f4f8f5d5c2a5be78fa7efcb1eccf4ac630db2bff09aafb43d3dbb71a41a779445c18283c290f6788d64e737734590ca99efb6d99d221d53d80b9acfa30b64a1c915562e3002a4e7ec172f70175a68f0b465bb95b587e3d596f4cc439c5749f81843a0d4622763dfdec11acf752d3160f2d629629535fef0140f4f7a7dfcec041d56b2c3cefb50532768bee1d8da50e883e6e5f779e261a5472a1c9b690291b6e9f85ab2cff5c4f6e8fa599ed34274698fde82dd5d8c9172836d91032f7af7b203db7f73796a361995fead5e05854a4753b920117db4832dee784c1839c2d4389ab65e8035e3b0ace7d2dfa216e2eb28ba2fd7dd8d584249f9a92142edaffa9e87fe12ef6dae8863ec13761f3946aed5b3f5d25829fae144ae2791a95fb9c1aa6f8c8a3c77dccd957ea4ddc095f77c3f677e0b89e502bc0b26394e6553870a75f54a01cc3c990b104179f77fc30c67afd1acc5bdc7b9ad9e30a78aa8cbfeb1610ac6f903a9f6761572456ea4f67d17d49e9f586ff2d10cd522bdf481fea19a1316b89cb2e47abd5624b2985e52b8a2bb02baafb7f022af47abdd7a9db3f608756b49f293bda363ae9c877097f3fb6c63234bca51ac3dd7c93fed183075f040dd8fad01e3976d89871cd64576e87a8ddde105f338c0043d3a5d4d1ac42331dd4fde997b6a97dd324e047362d7711a067c79aaef7554689c33ac80283cc640d03927b5782735adccda780f28591b70065e78532665dbdb5bc15d05d5f5960106a01f94ad6aac7ee281fcc7c5d7c4d944f7d9a917ce428297d20c5162112ab5e04531ca7ea9c9f088774e559441da25d63cd187ae205127679a2c668450b6ec82d6ff50fa11e813a12d3620629965b0ab146ebd86f99e49aaa3433dc702bf6e016d9621232af0e9498a3a09f577d79f6c3402cd9239d"}) modify_ldt$write2(0x11, &(0x7f0000000640)={0x7ec935bf, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)=';0\x93xl\xf2l2', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) getpgid(r4) close(r0) 22.471991755s ago: executing program 6 (id=2073): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}, 0x4000014) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)=0x123) 22.330276692s ago: executing program 6 (id=2074): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717", 0x4}], 0x1, 0x3, 0x7) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717", 0x4}], 0x1, 0x3, 0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000058c0)={0x4, 0x0, [{0x80a0000, 0x43, &(0x7f0000000080)=""/67}, {0xeeef0000, 0xf2, &(0x7f0000000880)=""/242}, {0xeeee8000, 0x8b, &(0x7f0000002700)=""/139}, {0xc000, 0x1000, &(0x7f00000037c0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) 22.127301342s ago: executing program 1 (id=2075): syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020392ad47104000002030109028a000301062005080b0001010130c60904000000010130000a2401051d000600000013240305ff010604ff0c000000030000080009040100000102300009040101010102300009240201400d07fa0a0905010940000403ff0a2525ea000000050700090402000001023000090402010101023000090582094000ba020c0a252500000000060300"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) (async) syz_usb_connect$midi(0x5, 0xd6, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x1, 0x80, 0xb0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x10, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x40, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xfb}, {0x4, 0x1}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x25a7, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x5, 0x34, {0x13, 0x25, 0x1, 0xf, "d32a6b52348d4a073be4ab47cb5fb7"}}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x1, 0x5, 0x1, {0x14, 0x25, 0x1, 0x10, "c7a45526e8cf7ebb2d17d995b5b9d275"}}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x2, 0x4, {0x4}}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x1, 0x6, 0xff, {0x9, 0x25, 0x1, 0x5, "8522726dc2"}}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x4, 0xb9, {0x12, 0x25, 0x1, 0xe, "39ec3fdd24250d4e7d075ee8f78e"}}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x4, 0xa, 0x80, {0xa, 0x25, 0x1, 0x6, "57e71f57a70a"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x0, 0x40, 0xff, 0x40, 0x7}, 0xcd, &(0x7f0000000200)={0x5, 0xf, 0xcd, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "0d01d58cc8bf2408b1d9c186cd6f6edb"}, @generic={0x86, 0x10, 0x3, "f3d90fc316b458f61b7847381d5df59e5fafc33179c46dbf2b03d54a22fecbad75ab0aba2accec012aa948ae3f9f8c5c8f25877fee8fb7d59bd30ff6ee5bbf3ca212faa76e674f97ba39a89d0e669ce4da3bd6f213228bffdaf65c9cc35118b398c709679b65054eaf7204f09cd09d170b2f4ee6c097bc99b45f04e3e0b5375f48bc66"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x9, 0xc}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x70, 0x7, 0x81, [0xff0000, 0xcf, 0x0, 0xf, 0xffc000]}]}, 0x4, [{0x34, &(0x7f0000000300)=@string={0x34, 0x3, "76fce7080c115da1cd6cb88f1b8c055a6660693052b29fe9b79ec6452138c6e8ca836a03c34f709d912d130ef8f05a0165ee"}}, {0x61, &(0x7f0000000340)=@string={0x61, 0x3, "3883790aa5f1380c2172b89653e12b3c2fad864ceed9115f9020515ee276f5400ac198f2ca14f187a9461e8f5da5783dff0eed2bb1538f7cdb0bf66df501924fee796f13bc758089b764cb253f319a930e4cb597b89b0820646b19a30d4d36"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x404}}, {0x5c, &(0x7f0000000440)=@string={0x5c, 0x3, "b99b976e35fbfced529d05927c5f4eb0fcb8214689b0454565878e4e22dc6ef4fdb05f8039c8e13b61958edd5d264de1ef4e316a09193e9774565fe9142c2c38c7cfd7cccd669afc1fedcc4269951f60d1f63164546e30d8924e"}}]}) 22.126669273s ago: executing program 4 (id=2076): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x2, 0x22010}) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000e40)={0x30, 0x5, 0x0, {0x0, 0x5, 0xfff}}, 0x30) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 22.124178893s ago: executing program 3 (id=2077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0xf0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x3, 0x0, 0x0, 0x2, 0x1c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x17}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x31}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 22.095919914s ago: executing program 6 (id=2078): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0x89c630fdeaa36c4, 0x0, 0x1}}, 0x14}}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x25dfdbfb, {{{@in6=@empty, @in=@multicast2}, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x300, 0x5}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0x0, 0xfffffffa}}]}, 0xd8}}, 0x0) 21.973636841s ago: executing program 4 (id=2079): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40001, 0x128, 0x20}, 0x18) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0x1ff, 0x1}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='@\x00', 0x11540, &(0x7f0000000100)={@align=0x7, {0xb, 0x5, 0x4, 0xd7}}, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x1}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x1e7}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000002c0)={{r2}, "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"}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000012c0), 0x80, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x101102, 0x0) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f00000014c0)={0x1, 0x0, &(0x7f0000001340)={0x20, 0x0, [0x7, 0xffff, 0xf, 0x9, 0x1, 0x6], [0x22d, 0x1, 0xe8, 0x80, 0x5e, 0x6], [0x8, 0x8, 0x1000, 0xab8f, 0x800, 0x4], '\x00', {0x2, 0x0, [{0xc0000000, 0x2, 0x1, 0x3ff, 0x2, 0x2, 0x1}, {0x80000001, 0x3, 0x4, 0x7, 0xef, 0x9, 0x7}]}}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001500)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x5}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) r4 = syz_open_dev$hiddev(&(0x7f0000001540), 0xfffffffffffffffb, 0x400000) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000001580)={0x3, 0xffffffff, 0xffff7fff, 0xfffffff5, 0x7f, 0x5}) kcmp(0x0, 0xffffffffffffffff, 0x6, r4, r4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000019c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001a00)={0x0, 0x0}) kcmp(r6, r7, 0x0, 0xffffffffffffffff, r0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001a80)={r5, 0x8, 0x4}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x40, r8, 0xe02, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000002000)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002040)) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000002580)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002540)={&(0x7f00000020c0)={0x470, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfc, {0x5, 0x1, 0x39, [0x5, 0xfffffff7, 0x3, 0x1ff, 0x4, 0x5, 0x3, 0xf, 0x3, 0x81, 0x4, 0x7ff, 0x58000, 0x1000, 0x5, 0x5, 0x1, 0xffffd56d, 0x3ff, 0xdc, 0x2, 0x7ff, 0x0, 0x5, 0x45088373, 0x8, 0x7, 0x3, 0x7, 0x0, 0x4, 0xffffffff, 0x1, 0x4, 0x4, 0x1, 0x8, 0x7, 0x0, 0x7fffffff, 0x7, 0x2, 0xd3d, 0x60, 0x8, 0x6, 0x28, 0x1, 0xff, 0xffffffff, 0x0, 0xf, 0x6, 0x9, 0xffff436b, 0x4, 0xffffff1d, 0xe12e, 0x4, 0x468d8752, 0x6, 0x4, 0x4e2, 0x4], [0x1, 0xee19, 0x81, 0x8, 0xfffffffa, 0x3ff, 0x0, 0xa844, 0x7, 0x3e, 0x6, 0xfdbb, 0x7, 0x1, 0xd0, 0x5, 0x14000000, 0xb, 0x4, 0x6, 0x200, 0x5, 0x81, 0x8, 0x2, 0x7, 0x0, 0x67a, 0x1, 0x6, 0x8f4, 0x9000, 0xd9c, 0x5, 0x6, 0x10000, 0x500000, 0xfffffff9, 0x80, 0x254, 0x200, 0xe799, 0x6, 0x4, 0x3, 0xeb83, 0x4, 0x4, 0x5, 0x7, 0x80, 0x7, 0x5, 0x4, 0xb, 0x40, 0x9, 0x5, 0x10, 0x40, 0x0, 0x4, 0xff, 0x1e3], [0x9, 0x8, 0x1a97, 0x5, 0x5, 0x7, 0x6, 0x7e2e3672, 0x0, 0x704, 0x9840, 0x9, 0x2, 0x7, 0x1, 0x8000, 0x1, 0xd, 0x800, 0x3, 0x3, 0x42b, 0x2, 0x5, 0x3, 0xe, 0x7, 0x1, 0x3, 0x1, 0x6, 0x0, 0x31a, 0x5, 0x4, 0x100, 0x80000001, 0x8000, 0x8, 0xa, 0x7, 0x80000001, 0x6, 0xd6, 0x7, 0x3ff, 0x1d, 0x9, 0x0, 0x0, 0x1, 0x10, 0x9, 0xc4, 0xfffffff9, 0x8, 0xac93, 0x0, 0x2, 0xfffffff7, 0xf, 0x80, 0xe5], [0x5, 0x7d, 0x2, 0x0, 0x4, 0xbfd, 0x2, 0x3385d5de, 0xffffff00, 0xf, 0x5, 0x9, 0x6, 0x8, 0x8, 0xf, 0x0, 0xd8, 0xf22, 0x1, 0x7, 0x5ec1, 0x0, 0xf, 0x562, 0x4, 0x5, 0x6, 0x1, 0x5, 0x0, 0xe, 0x6, 0x9, 0x3ff, 0x4, 0x0, 0x4, 0x1, 0x0, 0xb, 0x100, 0x400, 0x6, 0xb8, 0x800, 0x6, 0xef6, 0x8, 0x6, 0x7fffffff, 0x9, 0xffffffff, 0x10, 0x2, 0x2, 0x4, 0x3, 0x8e23, 0x1, 0x9, 0x9, 0x7e, 0xffff], 0x4d, [',}]\x00', '/proc/self/net/pfkey\x00', '\x00', '/proc/self/net/pfkey\x00', '/dev/kvm\x00', '$-$\x00', '@\x00', 'wlan0\x00', '\x00', 'nl80211\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x470}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), r1) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000002640)={@private1, 0x0}, &(0x7f0000002680)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002740)={'ip6gre0\x00', &(0x7f00000026c0)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x5, 0x7, 0x10, @local, @local, 0x700, 0x10, 0xb, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000002bc0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b80)={&(0x7f00000029c0)={0x1ac, r10, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1000}, 0x11) 21.973394441s ago: executing program 3 (id=2080): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) futex(0x0, 0x84, 0x2, 0x0, &(0x7f00000001c0), 0x22) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000000), 0x14) sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 21.928747963s ago: executing program 6 (id=2081): syz_usb_connect$uac1(0x5, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 21.923936573s ago: executing program 4 (id=2082): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200", 0x55}], 0x1) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000069001500"], 0x18}], 0x1}, 0x8000) (async) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 17.875863495s ago: executing program 6 (id=2083): syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) 17.180839891s ago: executing program 1 (id=2084): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002180)={&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/23, 0x17}], 0x1, &(0x7f0000001180)=""/4096, 0x1000}, 0x40000100) 16.257052s ago: executing program 4 (id=2085): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x1, 0xfffffffe, 0xb, 0xa9, 0x5, 0xffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x4cb8d6d46cf08447, 0x7, 0x7, 0x10000, 0x3, 0x1, 0x18, 0xffff62d8, 0x2}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 16.129419986s ago: executing program 3 (id=2086): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) 0s ago: executing program 35 (id=2083): syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) kernel console output (not intermixed with test programs): .0026: failed retrieving pen parameters: -71 [ 224.400049][ T36] audit: type=1400 audit(1776805851.105:43890): avc: denied { ioctl } for pid=5395 comm="syz.1.1727" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.406884][ T9] uclogic 0003:28BD:0094.0026: pen probing failed: -71 [ 224.432517][ T36] audit: type=1400 audit(1776805851.105:43891): avc: denied { ioctl } for pid=5395 comm="syz.1.1727" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.439861][ T9] uclogic 0003:28BD:0094.0026: failed probing parameters: -71 [ 224.463818][ T36] audit: type=1400 audit(1776805851.105:43892): avc: denied { ioctl } for pid=5395 comm="syz.1.1727" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.471244][ T5292] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 224.497546][ T36] audit: type=1400 audit(1776805851.105:43893): avc: denied { ioctl } for pid=5395 comm="syz.1.1727" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.508608][ T838] logitech-djreceiver 0003:046D:C52B.0027: unknown main item tag 0x5 [ 224.538288][ T9] uclogic 0003:28BD:0094.0026: probe with driver uclogic failed with error -71 [ 224.545167][ T36] audit: type=1400 audit(1776805851.105:43894): avc: denied { ioctl } for pid=5399 comm="syz.4.1729" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.548280][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.572223][ T36] audit: type=1400 audit(1776805851.135:43895): avc: denied { ioctl } for pid=5399 comm="syz.4.1729" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.583655][ T9] usb 4-1: USB disconnect, device number 14 [ 224.611132][ T838] logitech-djreceiver 0003:046D:C52B.0027: item fetching failed at offset 3/5 [ 224.624494][ T5396] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.632240][ T36] audit: type=1400 audit(1776805851.145:43896): avc: denied { ioctl } for pid=5399 comm="syz.4.1729" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.632483][ T838] logitech-djreceiver 0003:046D:C52B.0027: logi_dj_probe: parse failed [ 224.657216][ T36] audit: type=1400 audit(1776805851.175:43897): avc: denied { ioctl } for pid=5399 comm="syz.4.1729" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.678701][ T5292] usb 5-1: Product: syz [ 224.695414][ T5292] usb 5-1: Manufacturer: syz [ 224.700024][ T5292] usb 5-1: SerialNumber: syz [ 224.706426][ T838] logitech-djreceiver 0003:046D:C52B.0027: probe with driver logitech-djreceiver failed with error -22 [ 224.742457][ T838] usb 6-1: USB disconnect, device number 45 [ 225.052395][ T5292] usb 5-1: Can't get UAC3 power state for id 10 [ 225.059608][ T5292] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 225.069128][ T5292] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.095035][ T5292] usb 5-1: USB disconnect, device number 63 [ 225.159565][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.175361][ T31] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 225.331761][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.340049][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 225.349718][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.359837][ T31] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 225.371314][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 225.384523][ T31] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 225.393615][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.401673][ T31] usb 4-1: Product: syz [ 225.405838][ T31] usb 4-1: Manufacturer: syz [ 225.410431][ T31] usb 4-1: SerialNumber: syz [ 225.418378][ T5402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.500155][ T3912] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 225.512746][ T3912] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 225.523207][ T3912] asix 2-1:0.188: probe with driver asix failed with error -71 [ 225.532573][ T3912] usb 2-1: USB disconnect, device number 125 [ 225.597439][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.604867][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.634963][ T5402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.635005][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.649534][ T5402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.662421][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.670456][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.675007][ T31] usb 4-1: USB disconnect, device number 15 [ 225.694980][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.702370][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.713863][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.723265][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.734694][ T487] udevd[487]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.740655][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.757736][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.765140][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.772530][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.779945][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.787412][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.794798][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.802205][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.809603][ T838] hid-generic 0003:0003:0000.0028: unknown main item tag 0x0 [ 225.818223][ T838] hid-generic 0003:0003:0000.0028: hidraw0: USB HID vffffff.fe Device [syz0] on syz1 [ 225.881954][ T5411] fido_id[5411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.158129][ T838] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 226.214947][ T31] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 226.298813][ T5431] netlink: 'syz.3.1741': attribute type 9 has an invalid length. [ 226.306687][ T5431] netlink: 'syz.3.1741': attribute type 2 has an invalid length. [ 226.327602][ T838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.345955][ T838] usb 5-1: not running at top speed; connect to a high speed hub [ 226.366348][ T838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 226.379154][ T838] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 226.396800][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.397382][ T838] usb 5-1: string descriptor 0 read error: -22 [ 226.412887][ T838] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 226.415991][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 226.428510][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.448007][ T31] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 226.459492][ T31] usb 6-1: can't read configurations, error -22 [ 226.605022][ T31] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 226.759897][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.775327][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 226.794735][ T31] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 226.807783][ T31] usb 6-1: can't read configurations, error -22 [ 226.816945][ T31] usb usb6-port1: attempt power cycle [ 226.876182][ T5444] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1745'. [ 226.888389][ T838] usb 5-1: USB disconnect, device number 64 [ 227.164960][ T31] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 227.212094][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.224611][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 227.234955][ T362] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 227.256849][ T31] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 227.264929][ T31] usb 6-1: can't read configurations, error -22 [ 227.395179][ T31] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 227.414957][ T362] usb 4-1: Using ep0 maxpacket: 16 [ 227.422206][ T362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.432410][ T362] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.443618][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.452084][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 227.459879][ T362] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 227.468964][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.476976][ T362] usb 4-1: Product: syz [ 227.481194][ T362] usb 4-1: Manufacturer: syz [ 227.485826][ T362] usb 4-1: SerialNumber: syz [ 227.491304][ T31] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 227.499542][ T31] usb 6-1: can't read configurations, error -22 [ 227.505926][ T31] usb usb6-port1: unable to enumerate USB device [ 227.514956][ T838] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 227.664981][ T838] usb 2-1: Using ep0 maxpacket: 32 [ 227.673476][ T838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.682833][ T838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.692946][ T838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 227.702607][ T838] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 227.712260][ T838] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.729923][ T362] usb 4-1: 0:1 : does not exist [ 227.734254][ T838] usb 2-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40 [ 227.734804][ T362] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 227.752688][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.762140][ T838] usb 2-1: Product: syz [ 227.767577][ T362] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 227.769355][ T838] usb 2-1: Manufacturer: syz [ 227.778993][ T362] usb 4-1: USB disconnect, device number 16 [ 227.788808][ T838] usb 2-1: SerialNumber: syz [ 227.831189][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.006545][ T838] usb 2-1: MIDIStreaming interface descriptor not found [ 228.027684][ T838] usb 2-1: USB disconnect, device number 126 [ 228.067298][ T487] udevd[487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.494975][ T362] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 228.650177][ T362] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.659009][ T362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.669760][ T362] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.679170][ T362] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 228.690510][ T362] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 228.704057][ T362] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 228.715293][ T362] usb 4-1: config 1 interface 1 has no altsetting 0 [ 228.727671][ T362] usb 4-1: string descriptor 0 read error: -22 [ 228.733895][ T362] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 228.744178][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.034973][ T31] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 229.174949][ T31] usb 2-1: device descriptor read/64, error -71 [ 229.305362][ T36] kauditd_printk_skb: 672 callbacks suppressed [ 229.305378][ T36] audit: type=1400 audit(1776805856.045:44570): avc: denied { ioctl } for pid=5478 comm="syz.5.1755" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.341829][ T5292] usb 4-1: USB disconnect, device number 17 [ 229.356098][ T36] audit: type=1400 audit(1776805856.045:44571): avc: denied { ioctl } for pid=5465 comm="syz.3.1752" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.359107][ T341] udevd[341]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 229.382895][ T36] audit: type=1400 audit(1776805856.045:44572): avc: denied { ioctl } for pid=5465 comm="syz.3.1752" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.414951][ T31] usb 2-1: device descriptor read/64, error -71 [ 229.434947][ T838] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 229.448477][ T36] audit: type=1400 audit(1776805856.135:44573): avc: denied { ioctl } for pid=5472 comm="syz.1.1754" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.474543][ T36] audit: type=1400 audit(1776805856.155:44574): avc: denied { read write } for pid=5049 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.498813][ T36] audit: type=1400 audit(1776805856.155:44575): avc: denied { read write open } for pid=5049 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.523986][ T36] audit: type=1400 audit(1776805856.155:44576): avc: denied { ioctl } for pid=5049 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.550261][ T36] audit: type=1400 audit(1776805856.185:44577): avc: denied { ioctl } for pid=5478 comm="syz.5.1755" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.575355][ T36] audit: type=1400 audit(1776805856.205:44578): avc: denied { ioctl } for pid=5478 comm="syz.5.1755" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.600339][ T36] audit: type=1400 audit(1776805856.205:44579): avc: denied { ioctl } for pid=5478 comm="syz.5.1755" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.623513][ T5490] can0: slcan on pts1. [ 229.644964][ T838] usb 6-1: Using ep0 maxpacket: 16 [ 229.652292][ T838] usb 6-1: config 0 has no interfaces? [ 229.660847][ T838] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.669940][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.679908][ T838] usb 6-1: Product: syz [ 229.679920][ T5489] can0 (unregistered): slcan off pts1. [ 229.684959][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 229.689577][ T838] usb 6-1: Manufacturer: syz [ 229.701626][ T838] usb 6-1: SerialNumber: syz [ 229.708720][ T838] usb 6-1: config 0 descriptor?? [ 229.844979][ T31] usb 2-1: device descriptor read/64, error -71 [ 229.916407][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.925086][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.937345][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.945870][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.954825][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.963616][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.973442][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.983014][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.992795][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.001274][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.043348][ T838] usb 6-1: USB disconnect, device number 50 [ 230.085226][ T31] usb 2-1: device descriptor read/64, error -71 [ 230.156796][ T362] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.195163][ T31] usb usb2-port1: attempt power cycle [ 230.324954][ T362] usb 4-1: Using ep0 maxpacket: 16 [ 230.331900][ T362] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.339915][ T362] usb 4-1: config 0 has no interface number 0 [ 230.346016][ T362] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.356876][ T362] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.366730][ T362] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 230.375784][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.384866][ T362] usb 4-1: config 0 descriptor?? [ 230.534943][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 230.557713][ T31] usb 2-1: device descriptor read/8, error -71 [ 230.707086][ T31] usb 2-1: device descriptor read/8, error -71 [ 230.944991][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 230.966633][ T31] usb 2-1: device descriptor read/8, error -71 [ 231.011574][ T362] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0029/input/input40 [ 231.025155][ T362] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0029/input/input41 [ 231.058318][ T362] uclogic 0003:28BD:0071.0029: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 231.097265][ T31] usb 2-1: device descriptor read/8, error -71 [ 231.213592][ T362] usb 4-1: USB disconnect, device number 18 [ 231.219721][ T31] usb usb2-port1: unable to enumerate USB device [ 231.236057][ T5514] fuse: Bad value for 'group_id' [ 231.251217][ T5514] fuse: Bad value for 'group_id' [ 231.331167][ T5518] netlink: 'syz.5.1768': attribute type 22 has an invalid length. [ 231.384501][ T5522] FAULT_INJECTION: forcing a failure. [ 231.384501][ T5522] name failslab, interval 1, probability 0, space 0, times 0 [ 231.397270][ T5522] CPU: 0 UID: 0 PID: 5522 Comm: syz.5.1769 Not tainted syzkaller #0 1a36ed5f0b44f46e7eaed3953ba11d0fea6dce7e [ 231.397300][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 231.397313][ T5522] Call Trace: [ 231.397319][ T5522] [ 231.397327][ T5522] __dump_stack+0x21/0x30 [ 231.397357][ T5522] dump_stack_lvl+0x140/0x1c0 [ 231.397379][ T5522] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.397403][ T5522] ? __cfi_selinux_ip_postroute+0x10/0x10 [ 231.397428][ T5522] dump_stack+0x19/0x20 [ 231.397449][ T5522] should_fail_ex+0x3d7/0x530 [ 231.397473][ T5522] should_failslab+0xac/0x100 [ 231.397491][ T5522] kmem_cache_alloc_noprof+0x42/0x410 [ 231.397515][ T5522] ? dst_alloc+0x13c/0x250 [ 231.397534][ T5522] dst_alloc+0x13c/0x250 [ 231.397551][ T5522] ? iptable_mangle_hook+0x1a8/0x500 [ 231.397571][ T5522] rt_dst_clone+0x56/0x660 [ 231.397597][ T5522] ip_mc_finish_output+0x9a/0x540 [ 231.397620][ T5522] ? nf_hook_slow+0x196/0x240 [ 231.397646][ T5522] ip_mc_output+0x341/0x840 [ 231.397668][ T5522] ? nf_nat_ipv4_local_fn+0x1c9/0x520 [ 231.397689][ T5522] ? __cfi_ipt_do_table+0x10/0x10 [ 231.397706][ T5522] ? __cfi_ip_mc_output+0x10/0x10 [ 231.397729][ T5522] ? nf_hook_slow+0x196/0x240 [ 231.397755][ T5522] ? __cfi_ip_mc_finish_output+0x10/0x10 [ 231.397778][ T5522] ? __cfi___ip_local_out+0x10/0x10 [ 231.397801][ T5522] ? __cfi_dst_output+0x10/0x10 [ 231.397823][ T5522] ? csum_tcpudp_nofold+0x24/0x60 [ 231.397845][ T5522] ip_send_skb+0x1ee/0x200 [ 231.397877][ T5522] udp_send_skb+0xa1b/0x1340 [ 231.397904][ T5522] udp_sendmsg+0x1836/0x23f0 [ 231.397927][ T5522] ? avc_has_perm_noaudit+0x26c/0x360 [ 231.397955][ T5522] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 231.397980][ T5522] ? __cfi_udp_sendmsg+0x10/0x10 [ 231.398005][ T5522] ? selinux_socket_sendmsg+0x281/0x380 [ 231.398027][ T5522] ? inet_send_prepare+0x64/0x4e0 [ 231.398047][ T5522] ? __cfi_udp_sendmsg+0x10/0x10 [ 231.398069][ T5522] inet_sendmsg+0xef/0x120 [ 231.398087][ T5522] ____sys_sendmsg+0x8ac/0xae0 [ 231.398115][ T5522] ? __import_iovec+0x3ef/0x7c0 [ 231.398133][ T5522] ? __sys_sendmsg_sock+0x50/0x50 [ 231.398158][ T5522] ? unwind_get_return_address+0x51/0x90 [ 231.398180][ T5522] ? import_iovec+0x80/0xb0 [ 231.398199][ T5522] ___sys_sendmsg+0x2a6/0x370 [ 231.398225][ T5522] ? __sys_sendmsg+0x2a0/0x2a0 [ 231.398250][ T5522] ? kstrtouint+0x78/0xf0 [ 231.398274][ T5522] __sys_sendmmsg+0x2b4/0x4e0 [ 231.398291][ T5522] ? __cfi___sys_sendmmsg+0x10/0x10 [ 231.398312][ T5522] ? __cfi_ksys_write+0x10/0x10 [ 231.398337][ T5522] __x64_sys_sendmmsg+0xa4/0xc0 [ 231.398355][ T5522] x64_sys_call+0xfec/0x2ee0 [ 231.398380][ T5522] do_syscall_64+0x57/0xf0 [ 231.398397][ T5522] ? clear_bhb_loop+0x50/0xa0 [ 231.398417][ T5522] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.398437][ T5522] RIP: 0033:0x7f972579c819 [ 231.398453][ T5522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.398470][ T5522] RSP: 002b:00007f97241f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 231.398491][ T5522] RAX: ffffffffffffffda RBX: 00007f9725a15fa0 RCX: 00007f972579c819 [ 231.398507][ T5522] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000003 [ 231.398521][ T5522] RBP: 00007f97241f7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.398535][ T5522] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000002 [ 231.398547][ T5522] R13: 00007f9725a16038 R14: 00007f9725a15fa0 R15: 00007ffc32a604d8 [ 231.398565][ T5522] [ 232.144960][ T362] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 232.164955][ T31] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 232.294995][ T362] usb 2-1: Using ep0 maxpacket: 32 [ 232.302021][ T362] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 232.310141][ T362] usb 2-1: config 2 has no interface number 0 [ 232.316243][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 232.321577][ T362] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 232.331633][ T362] usb 2-1: config 2 interface 88 has no altsetting 0 [ 232.340794][ T362] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 232.349866][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.357857][ T362] usb 2-1: Product: syz [ 232.361992][ T362] usb 2-1: Manufacturer: syz [ 232.366581][ T362] usb 2-1: SerialNumber: syz [ 232.373491][ T5529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.454946][ T31] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 232.584960][ T5529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.604935][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 232.610311][ T31] usb usb6-port1: attempt power cycle [ 232.954967][ T31] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 232.975587][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 233.004980][ T3912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 233.104985][ T31] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 233.125581][ T31] usb 6-1: Invalid ep0 maxpacket: 64 [ 233.131076][ T31] usb usb6-port1: unable to enumerate USB device [ 233.157994][ T3912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 233.169235][ T3912] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 233.190412][ T3912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.220864][ T362] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 233.231109][ T3912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.241759][ T3912] usb 4-1: Product: syz [ 233.256503][ T362] asix 2-1:2.88: probe with driver asix failed with error -71 [ 233.272170][ T3912] usb 4-1: Manufacturer: syz [ 233.285093][ T3912] usb 4-1: SerialNumber: syz [ 233.291082][ T362] usb 2-1: USB disconnect, device number 5 [ 233.390891][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1778'. [ 233.508198][ T3912] cdc_ncm 4-1:1.0: bind() failure [ 233.514385][ T3912] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 233.521633][ T3912] cdc_ncm 4-1:1.1: bind() failure [ 233.535081][ T3912] usb 4-1: USB disconnect, device number 19 [ 233.729772][ T5557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1782'. [ 233.778852][ T5562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5562 comm=syz.4.1783 [ 234.034993][ T838] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 234.216440][ T838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.238928][ T838] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 234.264980][ T838] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 234.289539][ T838] usb 2-1: string descriptor 0 read error: -22 [ 234.296139][ T838] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 234.302959][ T5581] overlayfs: missing 'lowerdir' [ 234.324942][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.327280][ T36] kauditd_printk_skb: 776 callbacks suppressed [ 234.327294][ T36] audit: type=1400 audit(1776805861.065:45356): avc: denied { read write } for pid=2309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.377542][ T36] audit: type=1400 audit(1776805861.095:45357): avc: denied { read write open } for pid=2309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.403917][ T36] audit: type=1400 audit(1776805861.095:45358): avc: denied { ioctl } for pid=2309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.433322][ T36] audit: type=1400 audit(1776805861.135:45359): avc: denied { ioctl } for pid=5563 comm="syz.1.1784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.434657][ T5583] tc_dump_action: action bad kind [ 234.458344][ T36] audit: type=1400 audit(1776805861.135:45360): avc: denied { ioctl } for pid=5563 comm="syz.1.1784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.489751][ T36] audit: type=1400 audit(1776805861.135:45361): avc: denied { ioctl } for pid=5563 comm="syz.1.1784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.515048][ T36] audit: type=1400 audit(1776805861.235:45362): avc: denied { read write } for pid=5582 comm="syz.4.1792" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.538769][ T36] audit: type=1400 audit(1776805861.235:45363): avc: denied { read write open } for pid=5582 comm="syz.4.1792" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.563317][ T36] audit: type=1400 audit(1776805861.235:45364): avc: denied { ioctl } for pid=5582 comm="syz.4.1792" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.588435][ T36] audit: type=1400 audit(1776805861.235:45365): avc: denied { ioctl } for pid=5582 comm="syz.4.1792" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.682330][ T5587] 9pnet: p9_errstr2errno: server reported unknown error [ 234.683020][ T5588] tipc: Started in network mode [ 234.694335][ T5588] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 234.703328][ T5588] tipc: Enabling of bearer rejected, failed to enable media [ 234.734966][ T5292] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 234.812875][ T5564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.823779][ T5564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.900683][ T5292] usb 5-1: Using ep0 maxpacket: 32 [ 234.908669][ T5292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.918277][ T5292] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 234.932516][ T5292] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 234.945385][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.954948][ T5292] usb 5-1: Product: syz [ 234.959148][ T5292] usb 5-1: Manufacturer: syz [ 234.963763][ T5292] usb 5-1: SerialNumber: syz [ 235.194680][ T5583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.218360][ T5583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.545228][ T307] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 235.694980][ T307] usb 6-1: Using ep0 maxpacket: 32 [ 235.702150][ T307] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 235.711201][ T307] usb 6-1: config 2 has no interface number 0 [ 235.717877][ T307] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 235.728430][ T307] usb 6-1: config 2 interface 88 has no altsetting 0 [ 235.742134][ T307] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 235.764933][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.772951][ T307] usb 6-1: Product: syz [ 235.794242][ T307] usb 6-1: Manufacturer: syz [ 235.806360][ T307] usb 6-1: SerialNumber: syz [ 235.817123][ T5612] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 236.031929][ T5612] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 236.154979][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 236.306841][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.317807][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.327569][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.340384][ T31] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 236.349454][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.358815][ T31] usb 4-1: config 0 descriptor?? [ 236.781219][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.788793][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.796251][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.803696][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.810937][ T838] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 236.811138][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.826389][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.839015][ T838] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 236.840022][ T31] steelseries 0003:1038:1410.002A: unknown main item tag 0x0 [ 236.856050][ T31] steelseries 0003:1038:1410.002A: missing HID_OUTPUT_REPORT 0 [ 236.882884][ T838] usb 2-1: USB disconnect, device number 6 [ 236.981510][ T5292] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 237.004670][ T10] usb 4-1: USB disconnect, device number 20 [ 237.035126][ T5292] usb 5-1: USB disconnect, device number 65 [ 237.095148][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 237.305086][ T838] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 237.334949][ T5292] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 237.454975][ T838] usb 2-1: Using ep0 maxpacket: 32 [ 237.461871][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.472844][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.482678][ T838] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.491781][ T838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.499827][ T5292] usb 5-1: Using ep0 maxpacket: 32 [ 237.506562][ T838] usb 2-1: config 0 descriptor?? [ 237.513208][ T5292] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 237.535929][ T838] hub 2-1:0.0: USB hub found [ 237.540687][ T5292] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 237.558977][ T5292] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.581500][ T5292] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 237.600910][ T5292] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.618428][ T5292] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 237.637211][ T5292] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 237.648498][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.666503][ T5292] usb 5-1: Product: syz [ 237.671713][ T5292] usb 5-1: Manufacturer: 됸䞿Ⰰ摶ꛭ씋戸珆踟哼㗒囅괚ᱚ䐘鯛ᄷ鵵ںᖀ圣蓤ꝭ䄇ᅟ롖̓퐠詪狇 [ 237.684576][ T5292] usb 5-1: SerialNumber: syz [ 237.726234][ T838] hub 2-1:0.0: 1 port detected [ 237.928991][ T838] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 237.936118][ T838] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 237.945950][ T838] usbhid 2-1:0.0: can't add hid device: -71 [ 237.951896][ T838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.986638][ T838] usb 2-1: USB disconnect, device number 7 [ 237.994945][ T66] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 238.102381][ T5292] usb 5-1: MIDIStreaming interface descriptor not found [ 238.122824][ T5292] usb 5-1: USB disconnect, device number 66 [ 238.158101][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.158328][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.168695][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 238.190844][ T66] usb 4-1: config 1 has an invalid interface number: 8 but max is 2 [ 238.199814][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.210552][ T66] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.220176][ T66] usb 4-1: config 1 has no interface number 0 [ 238.226881][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.240738][ T66] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 238.250757][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.259254][ T66] usb 4-1: Product: syz [ 238.263485][ T66] usb 4-1: Manufacturer: syz [ 238.268132][ T66] usb 4-1: SerialNumber: syz [ 238.277124][ T66] usb 4-1: unknown sample rate [ 238.283285][ T66] usb 4-1: unknown sample rate [ 238.306625][ T307] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 238.326760][ T307] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 238.338709][ T307] asix 6-1:2.88: probe with driver asix failed with error -71 [ 238.352671][ T307] usb 6-1: USB disconnect, device number 55 [ 238.412735][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.518220][ T5643] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1811'. [ 238.538359][ T5646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5646 comm=syz.5.1812 [ 238.573856][ T5648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5648 comm=syz.5.1812 [ 238.814954][ T307] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 238.944975][ T66] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 238.984951][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 238.992003][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.002932][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.012686][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.025506][ T307] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.034543][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.044460][ T307] usb 2-1: config 0 descriptor?? [ 239.044971][ T31] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 239.060911][ T3912] usb 4-1: USB disconnect, device number 21 [ 239.114953][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 239.133582][ T66] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.141904][ T66] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.152062][ T66] usb 6-1: config 0 has no interface number 0 [ 239.158978][ T66] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.169257][ T66] usb 6-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.179049][ T66] usb 6-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.194861][ T66] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.204068][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.212160][ T66] usb 6-1: Product: syz [ 239.216354][ T66] usb 6-1: Manufacturer: syz [ 239.220943][ T66] usb 6-1: SerialNumber: syz [ 239.228351][ T66] usb 6-1: config 0 descriptor?? [ 239.237521][ T31] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 239.246615][ T31] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 239.254777][ T31] usb 5-1: Product: syz [ 239.259435][ T66] smsc95xx v2.0.0 [ 239.263101][ T66] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 239.273134][ T31] usb 5-1: Manufacturer: syz [ 239.278027][ T66] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 239.288051][ T31] usb 5-1: config 0 descriptor?? [ 239.304746][ T31] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 239.312679][ T31] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 239.345407][ T36] kauditd_printk_skb: 536 callbacks suppressed [ 239.345424][ T36] audit: type=1400 audit(1776805866.085:45902): avc: denied { ioctl } for pid=5663 comm="syz.3.1818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.405003][ T3912] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 239.413132][ T36] audit: type=1400 audit(1776805866.145:45903): avc: denied { ioctl } for pid=5663 comm="syz.3.1818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.438237][ T36] audit: type=1400 audit(1776805866.145:45904): avc: denied { ioctl } for pid=5663 comm="syz.3.1818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.463218][ T36] audit: type=1400 audit(1776805866.145:45905): avc: denied { ioctl } for pid=5663 comm="syz.3.1818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.474398][ T5651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.488695][ T36] audit: type=1400 audit(1776805866.185:45906): avc: denied { ioctl } for pid=5658 comm="syz.5.1816" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.520339][ T5651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.522365][ T36] audit: type=1400 audit(1776805866.205:45907): avc: denied { read write } for pid=5647 comm="syz.1.1813" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.548745][ T307] usbhid 2-1:0.0: can't add hid device: -71 [ 239.553507][ T36] audit: type=1400 audit(1776805866.205:45908): avc: denied { read write open } for pid=5647 comm="syz.1.1813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.568597][ T307] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 239.586341][ T36] audit: type=1400 audit(1776805866.205:45909): avc: denied { ioctl } for pid=5647 comm="syz.1.1813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.616226][ T36] audit: type=1400 audit(1776805866.205:45910): avc: denied { ioctl } for pid=5647 comm="syz.1.1813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.624775][ T307] usb 2-1: USB disconnect, device number 8 [ 239.643285][ T36] audit: type=1400 audit(1776805866.225:45911): avc: denied { ioctl } for pid=5663 comm="syz.3.1818" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.673449][ T3912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.683648][ T3912] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 239.695615][ T3912] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 239.704687][ T3912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.712776][ T3912] usb 4-1: Product: syz [ 239.716966][ T3912] usb 4-1: Manufacturer: syz [ 239.721579][ T3912] usb 4-1: SerialNumber: syz [ 239.809688][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.818279][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.933450][ T5664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.942069][ T5664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.004224][ T3912] usb 4-1: USB disconnect, device number 22 [ 240.045855][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.356746][ T5679] netlink: 'syz.4.1822': attribute type 16 has an invalid length. [ 240.364686][ T5679] netlink: 'syz.4.1822': attribute type 2 has an invalid length. [ 240.373418][ T5679] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.1822'. [ 240.442194][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 240.868217][ T5700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.876840][ T5700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.374983][ T66] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.417634][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.426268][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.534950][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 241.542208][ T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 241.550419][ T66] usb 4-1: config 0 has no interface number 0 [ 241.559227][ T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 241.568404][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.576411][ T66] usb 4-1: Product: syz [ 241.580626][ T66] usb 4-1: Manufacturer: syz [ 241.585241][ T66] usb 4-1: SerialNumber: syz [ 241.591121][ T66] usb 4-1: config 0 descriptor?? [ 241.598662][ T66] smsc95xx v2.0.0 [ 241.700710][ T5292] usb 6-1: USB disconnect, device number 56 [ 241.734963][ T307] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.899368][ T307] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 241.908501][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.916581][ T307] usb 2-1: Product: syz [ 241.920841][ T307] usb 2-1: Manufacturer: syz [ 241.925496][ T307] usb 2-1: SerialNumber: syz [ 241.987963][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.999276][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.008964][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 242.019722][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 242.054953][ T5292] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 242.138796][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.147390][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.180870][ T307] rtl8150 2-1:1.0: couldn't reset the device [ 242.187354][ T307] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 242.195239][ T5292] usb 6-1: device descriptor read/64, error -71 [ 242.205443][ T307] usb 2-1: USB disconnect, device number 9 [ 242.230283][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 242.241492][ T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 242.251707][ T66] usb 4-1: USB disconnect, device number 23 [ 242.434957][ T5292] usb 6-1: device descriptor read/64, error -71 [ 242.678331][ T5292] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 242.834951][ T5292] usb 6-1: device descriptor read/64, error -71 [ 242.905706][ T5736] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1843'. [ 243.064988][ T66] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.084957][ T5292] usb 6-1: device descriptor read/64, error -71 [ 243.195334][ T5292] usb usb6-port1: attempt power cycle [ 243.227385][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.241895][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.253722][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.267395][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.276899][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.279750][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.295061][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.305514][ T66] usb 2-1: config 0 descriptor?? [ 243.307640][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.335097][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.544954][ T5292] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 243.557851][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.567270][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.576525][ T5292] usb 6-1: device descriptor read/8, error -71 [ 243.707692][ T5292] usb 6-1: device descriptor read/8, error -71 [ 243.924944][ T3912] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 243.944951][ T5292] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 243.966795][ T5292] usb 6-1: device descriptor read/8, error -71 [ 244.040713][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 244.051360][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 244.060463][ T66] usb 2-1: USB disconnect, device number 10 [ 244.077409][ T3912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 244.091376][ T3912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 102, changing to 7 [ 244.102403][ T3912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 34661, setting to 1024 [ 244.125616][ T5292] usb 6-1: device descriptor read/8, error -71 [ 244.126335][ T3912] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.145286][ T3912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.153364][ T3912] usb 4-1: Product: syz [ 244.157682][ T3912] usb 4-1: Manufacturer: syz [ 244.163909][ T3912] usb 4-1: SerialNumber: syz [ 244.171953][ T3912] usb 4-1: config 0 descriptor?? [ 244.185514][ T3912] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 4d, bLength 9, bSynchAddress 1b [ 244.244833][ T5292] usb usb6-port1: unable to enumerate USB device [ 244.374928][ T36] kauditd_printk_skb: 507 callbacks suppressed [ 244.374946][ T36] audit: type=1400 audit(1776805871.105:46419): avc: denied { read } for pid=5764 comm="syz.4.1851" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.425774][ T5748] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1847'. [ 244.446653][ T36] audit: type=1400 audit(1776805871.105:46420): avc: denied { read open } for pid=5764 comm="syz.4.1851" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.470301][ T36] audit: type=1400 audit(1776805871.105:46421): avc: denied { ioctl } for pid=5764 comm="syz.4.1851" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.495961][ T36] audit: type=1400 audit(1776805871.145:46422): avc: denied { read write } for pid=5764 comm="syz.4.1851" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.519370][ T36] audit: type=1400 audit(1776805871.145:46423): avc: denied { read write open } for pid=5764 comm="syz.4.1851" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.543600][ T36] audit: type=1400 audit(1776805871.145:46424): avc: denied { ioctl } for pid=5764 comm="syz.4.1851" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.568308][ T36] audit: type=1400 audit(1776805871.145:46425): avc: denied { read } for pid=5764 comm="syz.4.1851" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.602404][ T36] audit: type=1400 audit(1776805871.145:46426): avc: denied { read open } for pid=5764 comm="syz.4.1851" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.631339][ T36] audit: type=1400 audit(1776805871.145:46427): avc: denied { ioctl } for pid=5764 comm="syz.4.1851" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.663077][ T36] audit: type=1400 audit(1776805871.155:46428): avc: denied { create } for pid=5747 comm="syz.3.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.685055][ T3912] usb 4-1: USB disconnect, device number 24 [ 244.865312][ T487] udevd[487]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 245.613613][ T5815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.851278][ T5823] kvm: user requested TSC rate below hardware speed [ 245.875808][ T5823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 248.122881][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.165051][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.274958][ T5292] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 248.389626][ T5906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 248.389673][ T5906] rust_binder: Read failure Err(EFAULT) in pid:227 [ 248.419682][ T5909] random: crng reseeded on system resumption [ 248.437857][ T5292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 248.453746][ T5292] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.466697][ T5292] usb 6-1: config 0 interface 0 has no altsetting 0 [ 248.473351][ T5292] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 248.482487][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.502759][ T5292] usb 6-1: config 0 descriptor?? [ 248.719877][ T5890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.735690][ T5890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.754978][ T3912] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 248.766378][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.780423][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.905035][ T3912] usb 4-1: Using ep0 maxpacket: 32 [ 248.912304][ T3912] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.925884][ T3912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 248.932494][ T3912] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 248.941539][ T3912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.965077][ T3912] usb 4-1: config 0 descriptor?? [ 248.971942][ T5292] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.002B/input/input44 [ 249.007947][ T5292] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.002B/input/input45 [ 249.050692][ T5292] kye 0003:0458:5012.002B: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 249.156471][ T5292] usb 6-1: USB disconnect, device number 61 [ 249.224841][ T5917] fido_id[5917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 249.386064][ T36] kauditd_printk_skb: 526 callbacks suppressed [ 249.386081][ T36] audit: type=1400 audit(1776805876.125:46955): avc: denied { ioctl } for pid=5910 comm="syz.3.1905" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.418456][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.426374][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.433327][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.442450][ T36] audit: type=1400 audit(1776805876.135:46956): avc: denied { read } for pid=5920 comm="syz.1.1908" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 249.464355][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.473640][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.491130][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.499509][ T36] audit: type=1400 audit(1776805876.135:46957): avc: denied { read open } for pid=5920 comm="syz.1.1908" path="net:[4026532389]" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 249.523343][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.524585][ T36] audit: type=1400 audit(1776805876.145:46958): avc: denied { create } for pid=5920 comm="syz.1.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.530593][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.550624][ T36] audit: type=1400 audit(1776805876.145:46959): avc: denied { ioctl } for pid=5910 comm="syz.3.1905" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.556761][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.581581][ T36] audit: type=1400 audit(1776805876.145:46960): avc: denied { setopt } for pid=5920 comm="syz.1.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.590068][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.607925][ T36] audit: type=1400 audit(1776805876.205:46961): avc: denied { bind } for pid=5920 comm="syz.1.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.615699][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.635158][ T36] audit: type=1400 audit(1776805876.215:46962): avc: denied { setopt } for pid=5920 comm="syz.1.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.642308][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.661416][ T36] audit: type=1400 audit(1776805876.215:46963): avc: denied { read write } for pid=5920 comm="syz.1.1908" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.669458][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.692253][ T36] audit: type=1400 audit(1776805876.215:46964): avc: denied { read write open } for pid=5920 comm="syz.1.1908" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.698747][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.730743][ T778] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.738407][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.747577][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.754454][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.769371][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.776992][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.784038][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.792035][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.799540][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.807027][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.813905][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.822217][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.834584][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.843455][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.851353][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.858843][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.866328][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.873418][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.881726][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.889251][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.898751][ T778] usb 2-1: Using ep0 maxpacket: 32 [ 249.908510][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.918888][ T778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.932005][ T778] usb 2-1: config 0 has no interfaces? [ 249.937545][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.944434][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.955658][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.963111][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.970861][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 249.978292][ T778] usb 2-1: string descriptor 0 read error: -71 [ 249.984489][ T778] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 249.993578][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 250.001331][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.009909][ T3912] ntrig 0003:1B96:0009.002C: unknown main item tag 0x0 [ 250.021567][ T778] usb 2-1: config 0 descriptor?? [ 250.030976][ T3912] ntrig 0003:1B96:0009.002C: hidraw0: USB HID v0.04 Device [HID 1b96:0009] on usb-dummy_hcd.3-1/input0 [ 250.044951][ T778] usb 2-1: can't set config #0, error -71 [ 250.053604][ T778] usb 2-1: USB disconnect, device number 11 [ 250.068519][ T3912] ntrig 0003:1B96:0009.002C: Firmware version: 6.12.24.14.6 (336c c609) [ 250.295699][ T838] usb 4-1: USB disconnect, device number 25 [ 250.391119][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.423854][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.428068][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.494969][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.656385][ T3912] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 250.802181][ T5955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=5955 comm=syz.1.1920 [ 250.841179][ T3912] usb 6-1: Using ep0 maxpacket: 32 [ 250.867727][ T3912] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 250.902035][ T3912] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 250.917603][ T3912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.927863][ T3912] usb 6-1: Product: syz [ 250.932134][ T3912] usb 6-1: Manufacturer: syz [ 250.936814][ T3912] usb 6-1: SerialNumber: syz [ 250.953260][ T5948] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 251.250625][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.262639][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.294969][ T66] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 251.374936][ T778] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 251.447421][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 251.456395][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.466540][ T66] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.475517][ T66] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 251.486381][ T66] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 251.499508][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 251.510363][ T66] usb 4-1: config 1 interface 1 has no altsetting 0 [ 251.519910][ T66] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 251.528986][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.537081][ T66] usb 4-1: Product: syz [ 251.541267][ T66] usb 4-1: Manufacturer: syz [ 251.546253][ T66] usb 4-1: SerialNumber: syz [ 251.563358][ T778] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 251.572509][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.580515][ T778] usb 2-1: Product: syz [ 251.584717][ T778] usb 2-1: Manufacturer: syz [ 251.589334][ T778] usb 2-1: SerialNumber: syz [ 251.855692][ T5978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.875102][ T5978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.215758][ T778] (unnamed net_device) (uninitialized): Assigned a random MAC address: 32:80:cd:d7:36:21 [ 252.233801][ T778] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 252.241387][ T778] usb 2-1: USB disconnect, device number 12 [ 252.428928][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1933'. [ 252.440789][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.449311][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.694946][ T778] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.844948][ T778] usb 2-1: Using ep0 maxpacket: 32 [ 252.851976][ T778] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 252.860247][ T778] usb 2-1: config 0 has no interface number 0 [ 252.866416][ T778] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 252.876453][ T778] usb 2-1: config 0 interface 196 has no altsetting 0 [ 252.885899][ T778] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 252.895018][ T778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.903009][ T778] usb 2-1: Product: syz [ 252.907236][ T778] usb 2-1: Manufacturer: syz [ 252.911829][ T778] usb 2-1: SerialNumber: syz [ 252.918074][ T778] usb 2-1: config 0 descriptor?? [ 252.924366][ T5988] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 253.175289][ T3912] usb 6-1: USB disconnect, device number 62 [ 253.251457][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.339455][ T778] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 253.348578][ T778] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 253.541753][ T3912] usb 2-1: USB disconnect, device number 13 [ 253.837559][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.849775][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.138599][ T6013] overlayfs: maximum fs stacking depth exceeded [ 254.189112][ T66] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 254.204669][ T66] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 254.237488][ T66] usb 4-1: USB disconnect, device number 26 [ 254.265655][ T2456] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.272272][ T6017] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 254.402116][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.434770][ T36] kauditd_printk_skb: 620 callbacks suppressed [ 254.434785][ T36] audit: type=1400 audit(1776805881.165:47581): avc: denied { read write } for pid=6022 comm="syz.5.1946" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.495480][ T36] audit: type=1400 audit(1776805881.195:47582): avc: denied { read write open } for pid=6022 comm="syz.5.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.531186][ T36] audit: type=1400 audit(1776805881.205:47583): avc: denied { ioctl } for pid=6022 comm="syz.5.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.567725][ T36] audit: type=1400 audit(1776805881.215:47584): avc: denied { ioctl } for pid=6022 comm="syz.5.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.603788][ T36] audit: type=1400 audit(1776805881.215:47585): avc: denied { ioctl } for pid=6022 comm="syz.5.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.646697][ T6036] audit: audit_lost=158 audit_rate_limit=0 audit_backlog_limit=64 [ 254.659317][ T36] audit: type=1400 audit(1776805881.215:47586): avc: denied { ioctl } for pid=6022 comm="syz.5.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.662739][ T6036] audit: out of memory in audit_log_start [ 254.684869][ T36] audit: type=1400 audit(1776805881.225:47587): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.724934][ T66] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 254.786396][ T36] audit: type=1400 audit(1776805881.225:47588): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.873526][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 254.882510][ T6038] bridge_slave_1: left allmulticast mode [ 254.888170][ T6038] bridge_slave_1: left promiscuous mode [ 254.893765][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.897956][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.909517][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.915599][ T6038] bridge_slave_0: left allmulticast mode [ 254.919201][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.930584][ T6038] bridge_slave_0: left promiscuous mode [ 254.932183][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.942072][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.965868][ T66] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.977356][ T66] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 254.995454][ T66] usb 6-1: can't read configurations, error -71 [ 255.054944][ T3912] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.204934][ T3912] usb 2-1: Using ep0 maxpacket: 16 [ 255.223630][ T3912] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 255.232112][ T3912] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 255.248947][ T3912] usb 2-1: config 0 has no interface number 0 [ 255.264935][ T3912] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 255.283187][ T3912] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 255.299556][ T3912] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 255.309011][ T3912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.317596][ T6062] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1957'. [ 255.317868][ T3912] usb 2-1: Product: syz [ 255.330930][ T3912] usb 2-1: Manufacturer: syz [ 255.335663][ T3912] usb 2-1: SerialNumber: syz [ 255.342603][ T3912] usb 2-1: config 0 descriptor?? [ 255.348766][ T6040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.361562][ T6040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.474363][ T6070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=6070 comm=syz.4.1960 [ 255.488206][ T6070] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1960'. [ 255.578326][ T6040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.588629][ T6040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.634960][ T66] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 255.785133][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 255.796632][ T66] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 237, changing to 7 [ 255.819043][ T66] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 255.828770][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.848430][ T66] usb 6-1: Product: syz [ 255.852647][ T66] usb 6-1: Manufacturer: syz [ 255.857334][ T66] usb 6-1: SerialNumber: syz [ 256.031845][ T6083] 9pnet_fd: Insufficient options for proto=fd [ 256.068088][ T66] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 256.079355][ T66] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 256.081307][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 256.103928][ T66] usb 6-1: USB disconnect, device number 64 [ 256.150244][ T6085] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 256.175879][ T574] udevd[574]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 256.265349][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 256.271560][ T1433] Bluetooth: hci0: command 0x1003 tx timeout [ 256.285759][ T3912] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 256.297151][ T3912] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 256.307714][ T3912] asix 2-1:0.251: probe with driver asix failed with error -71 [ 256.325019][ T3912] usb 2-1: USB disconnect, device number 14 [ 256.415518][ T6089] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1967'. [ 256.452285][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.470850][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.601947][ T6114] netlink: 'syz.3.1974': attribute type 4 has an invalid length. [ 256.617019][ T6114] netlink: 'syz.3.1974': attribute type 4 has an invalid length. [ 256.684196][ T6115] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1974'. [ 256.693423][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 256.702479][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 256.738359][ T6117] rust_binder: Error while translating object. [ 256.738385][ T6117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.744632][ T6117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 256.768292][ T2448] bridge_slave_1: left allmulticast mode [ 256.784681][ T2448] bridge_slave_1: left promiscuous mode [ 256.792433][ T2448] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.800545][ T2448] bridge_slave_0: left allmulticast mode [ 256.807124][ T2448] bridge_slave_0: left promiscuous mode [ 256.812802][ T2448] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.953021][ T2448] tipc: Left network mode [ 256.963962][ T2448] veth1_macvtap: left promiscuous mode [ 256.977137][ T2448] veth0_vlan: left promiscuous mode [ 257.294262][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.310894][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.318838][ T6129] bridge_slave_0: entered allmulticast mode [ 257.325747][ T6129] bridge_slave_0: entered promiscuous mode [ 257.333918][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.341185][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.348324][ T6129] bridge_slave_1: entered allmulticast mode [ 257.354847][ T6129] bridge_slave_1: entered promiscuous mode [ 257.449500][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.456617][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.463908][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.470969][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.505074][ T3912] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 257.538351][ T2448] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.547379][ T2448] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.563622][ T2448] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.570706][ T2448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.588258][ T2448] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.595322][ T2448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.667765][ T3912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.695399][ T3912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.709918][ T6129] veth0_vlan: entered promiscuous mode [ 257.716957][ T3912] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.731524][ T3912] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 257.754148][ T3912] usb 2-1: Manufacturer: syz [ 257.758394][ T6129] veth1_macvtap: entered promiscuous mode [ 257.760375][ T3912] usb 2-1: config 0 descriptor?? [ 258.043559][ T6147] rust_binder: Error while translating object. [ 258.043635][ T6147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.049966][ T6147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 258.245026][ T362] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 258.405719][ T362] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 258.415735][ T362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 258.423301][ T362] usb 7-1: can't read configurations, error -61 [ 258.554971][ T362] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 258.640822][ T3912] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002D/input/input47 [ 258.653226][ T3912] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002D/input/input48 [ 258.666595][ T3912] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002D/input/input49 [ 258.679848][ T3912] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002D/input/input50 [ 258.693811][ T3912] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 258.709093][ T362] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 258.719977][ T362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 258.728101][ T362] usb 7-1: can't read configurations, error -61 [ 258.734817][ T362] usb usb7-port1: attempt power cycle [ 258.899350][ T3912] usb 2-1: USB disconnect, device number 15 [ 259.077830][ T362] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 259.080027][ T6154] rust_binder: Write failure EINVAL in pid:288 [ 259.117074][ T362] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 259.132947][ T362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 259.140551][ T362] usb 7-1: can't read configurations, error -61 [ 259.274997][ T362] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 259.296206][ T362] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 259.306393][ T362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 259.313984][ T362] usb 7-1: can't read configurations, error -61 [ 259.320372][ T362] usb usb7-port1: unable to enumerate USB device [ 259.334973][ T307] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 259.442553][ T36] kauditd_printk_skb: 727 callbacks suppressed [ 259.442571][ T36] audit: type=1400 audit(1776805886.175:48316): avc: denied { read write } for pid=6158 comm="syz.4.1991" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.443696][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.464366][ T36] audit: type=1400 audit(1776805886.175:48317): avc: denied { read write open } for pid=6158 comm="syz.4.1991" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.478092][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.494935][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 259.515786][ T36] audit: type=1400 audit(1776805886.175:48318): avc: denied { ioctl } for pid=6158 comm="syz.4.1991" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.565637][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.569094][ T36] audit: type=1400 audit(1776805886.175:48319): avc: denied { ioctl } for pid=6158 comm="syz.4.1991" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.580700][ T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.601810][ T36] audit: type=1400 audit(1776805886.185:48320): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.635141][ T36] audit: type=1400 audit(1776805886.185:48321): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.670065][ T36] audit: type=1400 audit(1776805886.265:48322): avc: denied { create } for pid=6160 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.671121][ T307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.690488][ T36] audit: type=1400 audit(1776805886.265:48323): avc: denied { setopt } for pid=6160 comm="syz.1.1992" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.720095][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.728522][ T307] usb 4-1: Product: syz [ 259.733147][ T307] usb 4-1: Manufacturer: syz [ 259.738818][ T36] audit: type=1400 audit(1776805886.285:48324): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.739246][ T307] usb 4-1: SerialNumber: syz [ 259.765258][ T36] audit: type=1400 audit(1776805886.285:48325): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.839587][ T6169] rust_binder: Error while translating object. [ 259.839618][ T6169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.846343][ T6169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1101 [ 259.995434][ T307] usb 4-1: 0:2 : does not exist [ 260.011627][ T307] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 260.029876][ T307] usb 4-1: USB disconnect, device number 27 [ 260.069684][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.124975][ T362] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 260.281333][ T362] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 260.291045][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.299779][ T362] usb 2-1: Product: syz [ 260.305502][ T362] usb 2-1: Manufacturer: syz [ 260.310116][ T362] usb 2-1: SerialNumber: syz [ 260.326362][ T362] r8152-cfgselector 2-1: Unknown version 0x0000 [ 260.332629][ T362] r8152-cfgselector 2-1: config 0 descriptor?? [ 260.340790][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.354852][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.536886][ T6183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.538784][ T6183] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 260.545729][ T6183] rust_binder: Read failure Err(EFAULT) in pid:291 [ 260.617980][ T6187] overlayfs: missing 'lowerdir' [ 260.630290][ T6187] syzkaller1: entered promiscuous mode [ 260.635786][ T6187] syzkaller1: entered allmulticast mode [ 260.668398][ T6189] netlink: 'syz.3.2003': attribute type 3 has an invalid length. [ 260.906332][ T6192] rust_binder: Error while translating object. [ 260.906363][ T6192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.912618][ T6192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1004 [ 260.925038][ T307] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 261.124934][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 261.138633][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.158395][ T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.169209][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.181637][ T307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.198785][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.207578][ T307] usb 4-1: Product: syz [ 261.211792][ T307] usb 4-1: Manufacturer: syz [ 261.212303][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.218441][ T307] usb 4-1: SerialNumber: syz [ 261.454688][ T307] usb 4-1: 0:2 : does not exist [ 261.474966][ T307] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 261.487173][ T307] usb 4-1: USB disconnect, device number 28 [ 261.554077][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.194624][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.224960][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.545014][ T362] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 262.613926][ T6231] overlay: Unknown parameter 'smackfsroot' [ 262.695315][ T362] usb 7-1: Using ep0 maxpacket: 32 [ 262.702591][ T362] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.713123][ T362] usb 7-1: config 0 has no interfaces? [ 262.731582][ T362] usb 7-1: string descriptor 0 read error: -71 [ 262.749139][ T362] usb 7-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 262.764928][ T362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.782590][ T362] usb 7-1: config 0 descriptor?? [ 262.792318][ T362] usb 7-1: can't set config #0, error -71 [ 262.817819][ T362] usb 7-1: USB disconnect, device number 6 [ 262.887490][ T66] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 262.898912][ T6254] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2026'. [ 262.995581][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.013346][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.364980][ T66] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 263.504950][ T66] usb 2-1: device descriptor read/64, error -71 [ 263.524985][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 263.594129][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.602619][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.674955][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 263.681911][ T10] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 263.690771][ T10] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 263.699001][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.707875][ T10] usb 7-1: config 0 has no interface number 0 [ 263.713958][ T10] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 263.723798][ T10] usb 7-1: config 0 interface 104 has no altsetting 1 [ 263.733130][ T10] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 263.742220][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.750229][ T10] usb 7-1: Product: syz [ 263.754368][ T10] usb 7-1: Manufacturer: syz [ 263.754946][ T66] usb 2-1: device descriptor read/64, error -71 [ 263.758969][ T10] usb 7-1: SerialNumber: syz [ 263.772359][ T10] usb 7-1: config 0 descriptor?? [ 263.780084][ T10] asix 7-1:0.104: probe with driver asix failed with error -22 [ 263.990803][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.000196][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.008053][ T66] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 264.015406][ T10] usb 7-1: USB disconnect, device number 7 [ 264.144961][ T66] usb 2-1: device descriptor read/64, error -71 [ 264.214947][ T307] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 264.216372][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.238214][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.384955][ T66] usb 2-1: device descriptor read/64, error -71 [ 264.387046][ T307] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 264.402020][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.412965][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 264.423827][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.438283][ T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.447332][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.455326][ T307] usb 4-1: SerialNumber: syz [ 264.462999][ T36] kauditd_printk_skb: 1430 callbacks suppressed [ 264.463014][ T36] audit: type=1400 audit(1776805891.195:49756): avc: denied { ioctl } for pid=6285 comm="syz.3.2039" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.464589][ T6286] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 264.479277][ T36] audit: type=1400 audit(1776805891.195:49757): avc: denied { ioctl } for pid=6285 comm="syz.3.2039" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.526547][ T66] usb usb2-port1: attempt power cycle [ 264.528305][ T36] audit: type=1400 audit(1776805891.195:49758): avc: denied { ioctl } for pid=6285 comm="syz.3.2039" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.574928][ T36] audit: type=1400 audit(1776805891.195:49759): avc: denied { ioctl } for pid=6285 comm="syz.3.2039" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.621603][ T36] audit: type=1400 audit(1776805891.195:49760): avc: denied { ioctl } for pid=6285 comm="syz.3.2039" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.646721][ T36] audit: type=1400 audit(1776805891.235:49761): avc: denied { ioctl } for pid=6285 comm="syz.3.2039" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.672693][ T36] audit: type=1400 audit(1776805891.265:49762): avc: denied { ioctl } for pid=6262 comm="syz.1.2030" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.702600][ T36] audit: type=1400 audit(1776805891.265:49763): avc: denied { ioctl } for pid=6262 comm="syz.1.2030" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.727929][ T36] audit: type=1400 audit(1776805891.265:49764): avc: denied { ioctl } for pid=6262 comm="syz.1.2030" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.753006][ T36] audit: type=1400 audit(1776805891.285:49765): avc: denied { read write } for pid=6129 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.822924][ T307] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 264.831696][ T307] usb 4-1: USB disconnect, device number 29 [ 264.864943][ T66] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 264.887367][ T66] usb 2-1: device descriptor read/8, error -71 [ 264.904982][ T362] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 265.018516][ T66] usb 2-1: device descriptor read/8, error -71 [ 265.035393][ T362] usb 7-1: device descriptor read/64, error -71 [ 265.264959][ T66] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 265.275414][ T362] usb 7-1: device descriptor read/64, error -71 [ 265.287496][ T66] usb 2-1: device descriptor read/8, error -71 [ 265.381833][ T6306] macsec0: entered promiscuous mode [ 265.390041][ T6305] macsec0: left promiscuous mode [ 265.416971][ T66] usb 2-1: device descriptor read/8, error -71 [ 265.524945][ T362] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 265.532549][ T66] usb usb2-port1: unable to enumerate USB device [ 265.664971][ T362] usb 7-1: device descriptor read/64, error -71 [ 265.904975][ T362] usb 7-1: device descriptor read/64, error -71 [ 266.015051][ T362] usb usb7-port1: attempt power cycle [ 266.355000][ T362] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 266.376819][ T362] usb 7-1: device descriptor read/8, error -71 [ 266.444990][ T3912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 266.507020][ T362] usb 7-1: device descriptor read/8, error -71 [ 266.594951][ T3912] usb 2-1: Using ep0 maxpacket: 16 [ 266.602000][ T3912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.612172][ T3912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.623932][ T3912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.633088][ T3912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.641100][ T3912] usb 2-1: Product: syz [ 266.645267][ T3912] usb 2-1: Manufacturer: syz [ 266.649853][ T3912] usb 2-1: SerialNumber: syz [ 266.745236][ T362] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 266.767436][ T362] usb 7-1: device descriptor read/8, error -71 [ 266.865057][ T3912] usb 2-1: 0:2 : does not exist [ 266.871839][ T3912] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 266.883212][ T3912] usb 2-1: USB disconnect, device number 21 [ 266.897815][ T362] usb 7-1: device descriptor read/8, error -71 [ 266.923764][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.005098][ T362] usb usb7-port1: unable to enumerate USB device [ 267.053236][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.061890][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.129151][ T6323] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.136356][ T6323] bridge0: port 3(veth0_to_bridge) entered disabled state [ 267.143488][ T6323] veth0_to_bridge: entered allmulticast mode [ 267.150245][ T6323] veth0_to_bridge: entered promiscuous mode [ 267.156328][ T6323] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.168615][ T6323] bridge0: port 3(veth0_to_bridge) entered blocking state [ 267.175758][ T6323] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 267.209698][ T6327] overlayfs: failed to resolve './file0': -2 [ 267.445997][ T6332] 9pnet_fd: Insufficient options for proto=fd [ 267.455446][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 267.488974][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 267.501048][ T6336] bridge_slave_1: left allmulticast mode [ 267.507407][ T6336] bridge_slave_1: left promiscuous mode [ 267.513070][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.521364][ T6336] (: left allmulticast mode [ 267.526408][ T6336] (: left promiscuous mode [ 267.531298][ T6336] bridge0: port 1(() entered disabled state [ 267.614988][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 267.622033][ T10] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.637060][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.643979][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 267.653992][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.671718][ T10] usb 4-1: config 0 descriptor?? [ 267.714821][ T6339] x_tables: duplicate underflow at hook 1 [ 267.772329][ T6341] random: crng reseeded on system resumption [ 267.798801][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.808388][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.821997][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.835055][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.892853][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 267.901397][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 267.910646][ T10] usb 4-1: USB disconnect, device number 30 [ 268.025101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.037164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.049178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.061157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.073165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.085152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.097149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.104935][ T307] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 268.109162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.128678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.140685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.264933][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 268.273688][ T307] usb 7-1: unable to get BOS descriptor or descriptor too short [ 268.284611][ T307] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7 [ 268.300529][ T307] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.310672][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.324938][ T307] usb 7-1: Product: 秐鲜ꋡ둝Ⲅ⦗날巷嶮ꡒル趩꡼๔۰䡎봫䭢체뫆輝ꭖ呮崷ޡ㓹쥒쀤ᅪᘐ쮼䓛㲒攁 [ 268.342994][ T307] usb 7-1: Manufacturer: Ј [ 268.348679][ T307] usb 7-1: SerialNumber: syz [ 268.595537][ T307] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 268.609779][ T307] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 268.656475][ T307] usb 7-1: USB disconnect, device number 12 [ 268.665169][ T561] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 268.699883][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.728807][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.748776][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 268.797808][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.844941][ T561] usb 2-1: device descriptor read/64, error -71 [ 268.904948][ T10] usb 4-1: device descriptor read/64, error -71 [ 269.094940][ T561] usb 2-1: device descriptor read/64, error -71 [ 269.144941][ T10] usb 4-1: device descriptor read/64, error -71 [ 269.207921][ T6352] netlink: 'syz.6.2063': attribute type 1 has an invalid length. [ 269.335911][ T561] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 269.370159][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.400726][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.408548][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 269.470661][ T36] kauditd_printk_skb: 548 callbacks suppressed [ 269.470678][ T36] audit: type=1400 audit(1776805896.205:50314): avc: denied { read } for pid=6360 comm="syz.4.2066" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 269.499730][ T561] usb 2-1: device descriptor read/64, error -71 [ 269.519555][ T36] audit: type=1400 audit(1776805896.235:50315): avc: denied { ioctl } for pid=6353 comm="syz.6.2064" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.544864][ T36] audit: type=1400 audit(1776805896.245:50316): avc: denied { ioctl } for pid=6347 comm="syz.3.2061" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.569947][ T10] usb 4-1: device descriptor read/64, error -71 [ 269.576592][ T307] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 269.585323][ T36] audit: type=1400 audit(1776805896.245:50317): avc: denied { read open } for pid=6360 comm="syz.4.2066" path="net:[4026532495]" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 269.610275][ T36] audit: type=1400 audit(1776805896.285:50318): avc: denied { create } for pid=6360 comm="syz.4.2066" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.633094][ T36] audit: type=1400 audit(1776805896.285:50319): avc: denied { map } for pid=6360 comm="syz.4.2066" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.661382][ T36] audit: type=1400 audit(1776805896.285:50320): avc: denied { read write } for pid=6360 comm="syz.4.2066" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.708652][ T36] audit: type=1400 audit(1776805896.285:50321): avc: denied { map } for pid=6360 comm="syz.4.2066" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.754974][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 269.769555][ T307] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 269.784984][ T561] usb 2-1: device descriptor read/64, error -71 [ 269.791460][ T307] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 269.803415][ T36] audit: type=1400 audit(1776805896.285:50322): avc: denied { read write } for pid=6360 comm="syz.4.2066" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.828353][ T10] usb 4-1: device descriptor read/64, error -71 [ 269.844804][ T307] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 269.884250][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.895564][ T307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 269.905731][ T561] usb usb2-port1: attempt power cycle [ 269.913477][ T36] audit: type=1400 audit(1776805896.325:50323): avc: denied { ioctl } for pid=6353 comm="syz.6.2064" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.938549][ T10] usb usb4-port1: attempt power cycle [ 269.944653][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.957823][ T307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.969161][ T307] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 269.985632][ T307] usb 7-1: New USB device found, idVendor=40f0, idProduct=6c17, bcdDevice= 0.40 [ 269.994738][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.013018][ T307] usb 7-1: config 0 descriptor?? [ 270.063632][ T6368] rust_binder: Error while translating object. [ 270.063670][ T6368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.071032][ T6368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1064 [ 270.164946][ T6370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.198299][ T6370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.242022][ T307] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x40F0 pid 0x6C17 [ 270.265184][ T561] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 270.287276][ T561] usb 2-1: device descriptor read/8, error -71 [ 270.304930][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 270.329114][ T10] usb 4-1: device descriptor read/8, error -71 [ 270.428780][ T561] usb 2-1: device descriptor read/8, error -71 [ 270.445405][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2064'. [ 270.457773][ T307] usb 7-1: USB disconnect, device number 13 [ 270.466009][ T307] usblp0: removed [ 270.477009][ T10] usb 4-1: device descriptor read/8, error -71 [ 270.674943][ T561] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 270.697500][ T561] usb 2-1: device descriptor read/8, error -71 [ 270.714942][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 270.757562][ T10] usb 4-1: device descriptor read/8, error -71 [ 270.816357][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.827650][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.837727][ T561] usb 2-1: device descriptor read/8, error -71 [ 270.897807][ T10] usb 4-1: device descriptor read/8, error -71 [ 270.946045][ T561] usb usb2-port1: unable to enumerate USB device [ 271.013245][ T10] usb usb4-port1: unable to enumerate USB device [ 271.246800][ T6380] netlink: 37 bytes leftover after parsing attributes in process `syz.6.2073'. [ 271.599091][ T6390] rust_binder: Error while translating object. [ 271.599123][ T6390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 271.627757][ T6390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 271.824930][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 272.075974][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 272.275350][ T5292] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 272.646236][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.958039][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 273.034932][ C0] net_ratelimit: 98541 callbacks suppressed [ 273.034953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 273.034969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.040945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 273.052930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.064816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 273.076787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.088647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 273.100617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.112919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 273.124905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.171617][ T5292] usb 7-1: Using ep0 maxpacket: 32 [ 275.695344][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 276.533376][ T36] kauditd_printk_skb: 316 callbacks suppressed [ 276.533394][ T36] audit: type=1400 audit(1776805903.265:50640): avc: denied { read write } for pid=2309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.334913][ C0] sched: DL replenish lagged too much [ 277.404961][ T5292] usb 7-1: device descriptor read/all, error -71 [ 278.044920][ C0] net_ratelimit: 137762 callbacks suppressed [ 278.044942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 278.044948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.045017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.051027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 278.063013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.074914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 278.086758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.098710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 278.110593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.122549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 279.875112][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.077610][ T36] audit: type=1400 audit(1776805904.025:50641): avc: denied { read write open } for pid=2309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.369773][ T10] usb 2-1: string descriptor 0 read error: -71 [ 280.552426][ T10] usb 2-1: New USB device found, idVendor=2a39, idProduct=71d4, bcdDevice= 0.04 [ 280.666424][ T36] audit: type=1400 audit(1776805904.025:50642): avc: denied { ioctl } for pid=2309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.807111][ T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 283.054955][ C1] net_ratelimit: 92788 callbacks suppressed [ 283.054978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.054983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 283.055202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 283.060981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.073062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 283.084868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.096995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 283.108692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.120813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 283.132537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.546117][ T36] audit: type=1400 audit(1776805904.125:50643): avc: denied { read write } for pid=6129 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.064899][ C1] net_ratelimit: 91478 callbacks suppressed [ 288.064920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.065060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 288.070922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.082985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 288.094788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.106840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 288.118610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.130645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 288.142436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.154546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 288.638234][ T36] audit: type=1400 audit(1776805904.125:50644): avc: denied { read write open } for pid=6129 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.768299][ T36] audit: type=1400 audit(1776805904.125:50645): avc: denied { ioctl } for pid=6129 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.942542][ T10] usb 2-1: can't set config #1, error -71 [ 291.770624][ T36] audit: type=1400 audit(1776805907.055:50646): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.074958][ C1] net_ratelimit: 89931 callbacks suppressed [ 293.074981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.075008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 293.080981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.093028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 293.104839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.116870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 293.128719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.140754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 293.152544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.164588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 294.055603][ T36] audit: type=1400 audit(1776805907.055:50647): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.104950][ T36] audit: type=1400 audit(1776805907.055:50648): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.536541][ T36] audit: type=1400 audit(1776805907.065:50649): avc: denied { read write } for pid=5049 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.906376][ T10] usb 2-1: USB disconnect, device number 26 [ 297.647573][ T36] audit: type=1400 audit(1776805907.065:50650): avc: denied { read write open } for pid=5049 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.084904][ C1] net_ratelimit: 88886 callbacks suppressed [ 298.084926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.085038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 298.090919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.102978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 298.114814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.126832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 298.138622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.150657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 298.162525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.174575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 299.033196][ T36] audit: type=1400 audit(1776805907.065:50651): avc: denied { ioctl } for pid=5049 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.197520][ T36] audit: type=1400 audit(1776805925.705:50652): avc: denied { execmem } for pid=6405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 299.298590][ T6408] /dev/rnullb0: Can't open blockdev [ 299.605570][ T36] audit: type=1400 audit(1776805925.955:50653): avc: denied { read write } for pid=6406 comm="syz.1.2084" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.747317][ T36] audit: type=1400 audit(1776805925.955:50654): avc: denied { read write open } for pid=6406 comm="syz.1.2084" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 SYZFAIL: failed to send rpc fd=3 want=408 sent=0 n=-1 (errno 32: Broken pipe) [ 301.857119][ T36] audit: type=1400 audit(1776805926.035:50655): avc: denied { create } for pid=6406 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.094910][ C1] net_ratelimit: 82084 callbacks suppressed [ 303.094932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.095122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 303.100948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.113013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 303.124834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.136933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 303.148738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.160773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 303.172582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.184630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 308.105006][ C1] net_ratelimit: 90704 callbacks suppressed [ 308.105042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.105189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 308.111058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.123115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 308.134934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.146955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 308.158796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.170818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 308.182686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.194736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:3c:23:c2:5e:1a, vlan:0) [ 310.549298][ T36] audit: type=1400 audit(1776805926.035:50656): avc: denied { read } for pid=6406 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.825688][ T778] usb 5-1: USB disconnect, device number 67