last executing test programs: 3m48.142322774s ago: executing program 1 (id=821): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x6}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 3m48.141327954s ago: executing program 1 (id=822): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'pim6reg\x00'}) sigaltstack(&(0x7f0000000340)={0x0, 0x80000002, 0xffffffffffffff52}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1447], 0x5a7) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x7}, 0x18, 0x2) landlock_restrict_self(r2, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x7fffffffffffffff, 0x2001) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) syz_usb_connect(0x6, 0x24, &(0x7f0000000940)=ANY=[@ANYRES64=r0], 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000200)) truncate(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x2) ioperm(0x3, 0x7, 0x7) ioperm(0x80, 0x9, 0x7) ptrace(0x10, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x880) creat(&(0x7f0000000100)='./bus\x00', 0x0) socketpair(0x6, 0x0, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x581002, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x64, 0x0, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x640, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @mcast1, 0xffffffff, 0x79d, 0x2, 0x200, 0xffffffff80000000, 0x100020}) splice(r5, 0x0, r4, 0x0, 0x10000000000015, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)={0x3, 0x0, [{0xf, 0x7, 0x6, 0x90000000, 0xfffff001}, {0x2, 0x0, 0x401, 0x8, 0x1}, {0x7, 0x8, 0x6, 0xc, 0x10001}]}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201009d65890703cf7abb3cc91e9f0900a6ff1540cdabeecdb9050000000109022b0001000000000300000402010a00"], 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x3}}, 0x10) 3m47.621239045s ago: executing program 1 (id=824): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x40) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008821}, 0x6000801) (async) fsmount(r2, 0x0, 0x7c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) (async) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000780)={{0x12, 0x1, 0x350, 0x2, 0x0, 0x0, 0xb9bd65a2e9a4dcd4, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf7, 0x0, 0xcf, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x401, 0x3, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3e7, 0x80, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x6, 0xd}}}}}]}}]}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000240)=[{r5, 0x10}], 0x1, 0x1) 3m47.065946338s ago: executing program 1 (id=829): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000580)="2e26460fe3574445df28f2406e66ba210066ed4a0fc7ad03000000b9800000c00f3235008000000f30b9800000c00f3235001000000f300f20c035080000000f22c064666764640f08b9e20900000f32", 0x50}], 0x1, 0x48, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="0fbaf523f26c360f01d10f22600f01cb3e0f090fa90f01d166b9310800000f320fc799f156", 0x25}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m47.053520399s ago: executing program 1 (id=830): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x24}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae2600000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4a}], 0x1, 0x19, 0x0, 0x0) read(r3, &(0x7f0000000040)=""/5, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0xe5a7, 0x4, 0xfd30, 0x80000001, 0x8, 0x10000001}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') getdents64(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r0, 0x8, r5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083040000002a90a0751bb3"], 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r7, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3m43.833285847s ago: executing program 1 (id=870): socket(0x10, 0x803, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 3m27.748916731s ago: executing program 32 (id=870): socket(0x10, 0x803, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m52.014168188s ago: executing program 3 (id=1237): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r5 = socket$inet6(0x10, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {0x8, 0x8, 0x8, 0x6}, 0x4c, [0xffffffff, 0x7, 0xa6, 0x884, 0x0, 0x7, 0xffff, 0x0, 0xffffffff, 0x7, 0x2, 0x3, 0x1, 0xb, 0x1, 0x5, 0x7, 0xc, 0x200, 0x8, 0x0, 0x2, 0x7f, 0x7, 0x80000001, 0x7, 0x6, 0xc3b, 0x6237, 0x4, 0x400, 0xffffffff, 0x9, 0x0, 0x0, 0xc3, 0xef, 0x3, 0x6, 0xc568, 0xf5, 0x1, 0x7, 0x8, 0x3, 0x1, 0x0, 0x7, 0x1, 0x1, 0x4, 0x2, 0x9, 0x2, 0xb2, 0x4, 0x7, 0x9af1, 0x319b3bdf, 0x9, 0xb, 0x3, 0x8, 0x4], [0xffff, 0x40b, 0xeeb, 0x4, 0x9, 0xba, 0x4, 0x6, 0x5855, 0x9, 0x1, 0xffff, 0x40, 0x8001, 0x7, 0x9, 0x4, 0xfffff800, 0x4, 0x5, 0x2, 0xfffffffd, 0x7, 0x12a, 0xfffffff7, 0x5, 0x8, 0x2, 0xb, 0x0, 0xe, 0x80000000, 0xffffffff, 0x6, 0x4f3c, 0x9, 0x1, 0x2, 0xffffffff, 0x40, 0x7, 0x9, 0x3, 0xdfd, 0xfff, 0x7fff, 0xf, 0x8, 0x6, 0x8, 0x6, 0xc, 0x4a6b2b1a, 0x3, 0x7, 0x1, 0x801a, 0x272, 0x6, 0x3, 0x2, 0x4, 0x3], [0x3, 0x7fff, 0x8000000, 0x7, 0x24, 0x9, 0x3, 0x2, 0x3ff, 0x5ece72f3, 0x2, 0x10000, 0x7, 0xffffff81, 0x7, 0x6, 0x5, 0xffff, 0x9, 0x200, 0x204, 0x1, 0x6, 0x6, 0x80000001, 0x5, 0x9, 0x2, 0x6, 0x8000, 0x2, 0x6, 0x8000, 0x1cc7d794, 0x7, 0xe1, 0x6, 0x8, 0x7, 0x1ff, 0xffffff81, 0x4, 0x9, 0x401, 0xf516, 0x1, 0x9, 0x340, 0x3, 0x3, 0x9, 0x7fff, 0xe70, 0x8000, 0x6, 0x8000, 0x2, 0x0, 0x7, 0x7ff, 0x6, 0xf, 0x116f16f5, 0x3], [0xb753, 0x2, 0x49, 0x3800, 0x9, 0x401, 0x98, 0x1ff, 0x6, 0x10, 0x5, 0x7, 0x8, 0xa, 0x7, 0x1, 0x800, 0x9, 0x7, 0x1f7b, 0x1, 0xf1, 0x8, 0x5, 0x9, 0x1f, 0x57c, 0xfffffffd, 0x6, 0xba37, 0xfffffffd, 0x1, 0x9, 0x3, 0x2, 0xbe09, 0x3, 0x3, 0x7fff, 0x6, 0x81, 0xfdb, 0x10, 0x4, 0xa00, 0x9f, 0x80, 0x0, 0x101, 0x81, 0x8, 0x36a, 0x6, 0x87, 0x8, 0x2, 0x0, 0x2a17367f, 0x0, 0x1, 0x4, 0x0, 0x2, 0x7f]}, 0x45c) sendto$inet6(r5, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)='q', 0x1, 0x40000, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 2m51.154470858s ago: executing program 3 (id=1246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000000180)) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000240), 0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x642) socket(0x1, 0x2, 0x0) select(0x52, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) read$hidraw(r4, 0x0, 0x1b) syz_usb_ep_write(r2, 0x81, 0xf, &(0x7f00000002c0)="b9425b44651dd23241963599000000") syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@global=@item_012={0x1, 0x1, 0x3, "e0"}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x2, 0x1, 0x1, "2390"}]}}, 0x0}, 0x0) 2m50.570646933s ago: executing program 3 (id=1253): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) (async) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x600840) (async) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x600840) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@loopback}, &(0x7f0000000200)=0x14) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@loopback, 0x0}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000003c0)={'ip_vti0\x00', r2, 0xa7, 0x8, 0x8, 0x7ff, {{0x40, 0x4, 0x2, 0x2f, 0x100, 0x64, 0x0, 0x4c, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xa2, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xc2cb}, {@empty, 0x4}, {@private=0xa010102, 0x5}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x4}]}, @rr={0x7, 0x23, 0x59, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0xfffffffb}, {@local, 0xc0e}, {@local, 0x8000}, {@loopback, 0x6}, {@private=0xa010102, 0x7}, {@multicast2, 0x70f4400a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0xb, 0x3, 0x6, [{@broadcast, 0x3ff}, {@broadcast, 0xbd64cf1}, {@rand_addr=0x64010102, 0x7}]}, @cipso={0x86, 0x42, 0xffffffffffffffff, [{0x0, 0xa, "f687e889969d99b3"}, {0x2, 0xe, "3c7b28f30c05b82927e116b6"}, {0x6, 0x2}, {0x6, 0x4, "a3c7"}, {0x6, 0x10, "af04a9596c98966bede144523fdf"}, {0xd, 0x6, "24f94402"}, {0x5, 0x8, "f7bd71a91383"}]}]}}}}}) r4 = accept$inet(r1, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000680)={0x1398, 0x15, 0x10, 0x4, 0x25dfdbfb, {0x0, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "2f38ecd1c8c04045482dbd0a686010ce"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "d267794e28962cfdcd5e2efdb922d6b187d6e1c164d484c047335fae8338776ce8f3ba0d3113aa8993763aa85f96caa39b3653426e8fab96fefd975e4d1d1d7cd35fd1d46afdecf8beb181e753fa6c3d93102b8cf4bae2d9708a4cb172df287a91e44899010fe9aea450a86e9cbf8919cde89a41b02660ae62429014ea82216b08a8910e5b5160a8117a128750cd7988ad3dd02463424f45c1cbab30c466b91e78ca2470407b7477d782b0b2a2936c50e6cc6f6c5d1c86ee8d41275f65989ea6088463076440109b749b8a3e79254e02bb49d3fe2abf4c96f9905e1c1933c8426cb95f8683d99bf67d7cab383256b26464963ecf2547d10c4bc63a8e77bdc89d7522ddd8a315591f476cfa67be4cc9dc1adfa04a53c491b91325d83220ba8c415ae5a488943b759ea027c6df2581fff7c8b638d84ce06bc2bdd4104046a1e70408211b11f84026f6695f1f053fe242ceeadda13b1f5a8c7ef89aa4ba8e3b5e36d6e333a5bf2c2f9b7ab9e71f23c47d5f2883d84c8a0cc3df04aec882748161a24d88b2c6c7dd2b15b4aa08a7d38807e4618f911aa5f8ea13da42ad53f8a1feb503d531dc2a1c6b7726d7822f632d9d3e68c3a0d1e23a5ae61f7b4a069589998b135e7c7316b7891e85f82f09a4b8d77df51c4f96a97c00e84fbcbe435bc5df66b0e0431800c9a2c139a9ac175d5d03bf00de6372098900f1ca22519d77e6496126f19648ac10f7b3a7d22d3b552fb668213d3c9aacf26107a45df86033ba1a3027e15734cf37340baf93cfd71ac9753b6ba3aa10b0bfe62e4fbbebd6e782249d2a6f7a440c658f5bd2ec0cfd110e622849514fd81c60a036c47de1e66f13951536642bcad14c5759dd27975edd64ece60cb7a4977943ed77ceda676a589a306553e3900a5f359656563e5727183f25fdd8a1cb215672742a124b0855c5f004da443364fb1891f1a9c55b2a014d64df91c62f6225970df6dc027389f40e8ca72f23b15ca1e0cce9fe36c7eae6c51ea36773ad9f2c9a7665eb61150c198bc523df26862baae80925126362440f10d44e8ca38005a75a500e638ce5d9717e167c7c89254fa3ee7d00d7747ad5f430e336302e965df46532fe84f4cf3193d3f4d5bfed8544a1dbbd8dd5a22f9c718681bdd57afadf81f31bce2e9b0eafe90ae20ce2f4ca292ee94bb563abfaf31e2c99e78933683fa08cdd71db210d7b84badaabd74a2729f3ee7580e8a2bfe5a03239efaff4d6af7f8f63066a7fb559b7186aa547cbb14039d2efe28d9e95ba8cec5792f81c8cbcddeacbf8532b677e9dc900432e1ef4b2c3627c69dd8a3151483808bfefb7e66e8355a410ea436916b83dab9ab575f9d52152c6a97195e992acb88bebd0b2fcfde7aea3acedadfe495f6827c1f0ef26746709c68b1a9569bddfa192aa856fb8a1d0a3d31dff5411b53cb10f8a5262d55d2fc3c6c7353b0f143d9e1b54e53f2af631de48632053be806a7dca6f498eaa0973acee51837d24d8d54caa71cadb3c1cee1ddca5dc916172f73765e86db5bd13df4b96dd08d748260c460ea20dc0573d32b8ea3d7f86fd986b0476fb0e7acab1ebb0839019ad4f48d0b37143cd1587c1d5e54f7d24459b20185b4c6917904b0b7eb6c36eb5fd4e8d74818ea511ea76c2f1f8b91e31498a6ba10f10f5bc6897d0c8437a27ca40386590ac2b288c7f6ecdcf2303b22e5a6c17c05bcd1df553e3b040cfadfeee11dbc7f31c2992a76d1a904e653f3e784bfd54eb47e8f13fb343065d1c44fa022b0426629e8e249a91ba48cada7df19d659ebf82d0a66defb9d3b3b962957ce25a7e1202a090a05081c5faf43db9a2c9a8c50323c9464a78969cccd6fec8479ae73da546892132e3f72dd6a4ea12d9b2998a3e649b708a985106e704f743ee093ed57083cc85f28beeba646e2f5afa69edb1b9a423c38b2c320ffb2bb0b9c2b1fa5bf1c94f3ba629a4d7bf171dae0885e8dfe31bc5893031525a299d9372251f53e20ca69a1822e4116fcdff9a84f10ac4ad3798568d709adb13a4ac3cae1cc92c3da8983bf6992925a7375ca6b55548d7bbbc206a580373b4a862bb44a3eb55ed400d49f94b7c11cc03623fa4d5177da36b93e05ec2715e59ad53633e47cddc0d05894042dae10dcb7021f0281498256aaaa2f062e1bc438f447daa46435b7bcfb6e6f78a8f9525d52856095e737fc04c71364fae3b46164956e64dbbe72a38b23b72bcafb416fd7493837a7aaab5f499309d0e6d4b11210a6b94e06a752c6f1b566ae0f746f5f950f2d78ad81542421af312219356d854604bea2834f78f367902ee57bf78a8ca562841da7314d915707ac66f93be8435d3ad4b6b056e3286aac1b42fc637540c6d6e484779394eb680c6da440c8286d8a2244e1895778cc952eaba7ea6f99a31f118465c967a2da3c6c4a8ad0f360414f3d693e7e037ce0297208c7091ae2518fb767e470bc2c830f00e58689663620c5cd8811903138b15cc31df146f03d35bd41b9f4c1c5c78176779a6995038974aa49b39646a4fdfd85dcf3a4e1c8b6e3bb15c13a1adf971b6e8e77742c4a785e808856926b65c61919b1464537941e3b331daa54c8df95f76350626b9a4a0f3ca417af09fbf74ade1f9bf923b9c91e6a3dc52356e5e5b13910ddbd83a866435afcc04ab3a2054f79dc02cf6b2b233a659195b4028e2d7c038fb7c25b79d0af03e6622fe3fa2bbaec05315c14f90c6a17b62aa52357ddf20cb10e826509f50cfa5135573408a67428d8cf14aa6cafe0e749307927e728fe17a7a0b8ede413125cd41ed44f716582c28feb78df7e8b660a8ecb3eeb096e8bdb7e17b3c51fac2df7873241311ba30e11b13fdb4f381b948747b2ad71b9ef51d4fc303c936a2df9daf6f79c7dcfa3925a4541012e190ea61bcf2dcf8df19bf98b7931aefa5a720fe22e414185845994e5ff6f530718e40b952ec6bc50dfbcdda05fc2ff5c215ea9f3c61843ee3935bd66d7bbf47699386adbf3a626b19b4589a188b9bb0f51c58d475e85afd7cb2b9d7e348f4d263ca1b890ad7230d0aaea015440ef77ca5edf84aefb000a9fc0f0d1073746d38d46cb30865d2e99d78ea58b047f1f0232e9ba1e7abe7f78abcaba94f3c227ac81d9695492098ebe04b55ccaa5c819e13ddfca2536fc07e30c77502c55a7c68624e56e9fc7cf582c7b70bef6e9ca3c52721b66deb3456371ef31fc96e677996aa02884ecf4de6bb6b8d4b09e762e2ed41c1760892ea99ca426c922abe6f397d816f2f3d118fc8b6d65e5628dcec69fdbd211895ff559385c3d917e8c230d71f8b8154cc39f998625b241a0dca3e6d4f5ec7d5f14d162a6d84c82087e3a637dc4364c6e946735700d15b400c723ee7225898a12bd0525a73c6d5699330f8e7c6eacd808b9386d2fbfbab75236fbfcac037970b5004928f4049c4671031b058734af5e6d1ab7bca564d37f66f83457a9a27dd75607e49dfc2895ded9839a907842cc0c08145c3fe1c66e918be3b5c17fab54e82cb4416244325009f4d6a6b897851c511a3fc6dca01a6129f363bc0d6a22000584727639ef4c26a73bab0c2b16414b7e758e94edea86d9cd340957f4f9fe6495357f4e2a25afbf5f48d9674532c940cc0847c25f22c49b5fc74a5387ac85bc2a1540a527d0cadecb78250dba4f6f5a6d7783deb0881365ac1d59fa4ab137085433345ac1dac741554fc29dd3b2242e0811d66c840028922be3ed6a6aa0012e6446498b5ec1fdccc9465b1c64ef904e98302e7c32f5353e095014bc412d76b91ed7eae779aeb544044c38365b5fb31c6d8c4a2f0fd554d459241162edf4d3660e0850d0d00083ae092cddcfe05c104ba64221fb8ab4bdc3eb587b0c545b879491894f62d1dfc9819a2f0a28451ea5e806a0bd51b39324dd4a0b4917862061d3fbd5c92ad6e74fdb61fafa9af2e0f768db460acfa4d3c6dadc22302a1b3d593af59cf04d04669651846227cb7fa18bd7ddf9c788ccd83a551c29fea1712660a91ae13f33da322f4bfb7c2ce21a1dd16b2ac9dd000d545c4b8db261ff3a0cb17ab14c2ac942226755523303c193b5516f8d413812b678839bf1e3c5e0bcb7de3b8e81308ff93836f1c4d7cae10232b70412455f3606bc27d33f471521ac40c1b1c7e82587b48f22c6bc8583223e39d58bf5e267846daf60f6e4e0e02f0b513c206b725dacd5e821e6ecc75e84d0b23b2fd4926f9650dd2637aed040bc3205e59a6e535757a2c722046d2e57f988b2f85fad4ac1bc92919a70e3c11b06c45898169d06e9e655b83f6b4e4d265e9ecadfc041069d75d03bbabf425a2f5244a55edebed32a98cbdd6995a46fccd0925df9553319e9303edac527ed7827f94b2b0673f4823b39cd0f383459e2c0a748f642c1b34ab81be3e4a3493f5f283a5c3c2de6ef9d4006ff497af37738be8d058b583ff04fd118a3d90c34895b8b08cb9219f6950c8f52486637e2e4db5b0b2385f89a33d6538fa2cdd386b90f3b529d87fee11952fa7706d18af35b5454cf711b9b3f294bc6d60fc7f4cee4068fcdd3754239cf3a3d296f24f0c646a78ec3e13f7f344241dee1bcfe7a5dcada21b924d1d0af661e2dce684ea9ef8e09ecb5abd2547dca8cdf8a4cd8053b6481da9926ff7c173798224b6b47d5aecd2c0776567764f5a2d735e9cbaa9c989f6fb014537220edc891d76d8653d9c3dc101a1fae54e10510e0dea55d799144ee1f6c212c29f29aee827ccb1ff86c6f46e7906d17f1030d14b1e3fedcf1ec823fa30a56d7aada3e977c758f0323b0054439fa2b1b43a4f92cfa5ce4dab6145725b752d9ca6eb65dcce08ce57f4a3a8096b126faaa4769f7f06c855c3a72bb440cd37cdc31942f038b730a2dc1d209cef2d5e145707ee319aaf662f7cb631d18b5bd439ecc32864c7b54151908772d4701f7d8137334d4df7af75cf3a1f2c0e2ba0c983b7bbf6b0dc572c1d819e3e03f3585bb33fbebd5e2e4b554248a9021d926933b88f66d841c55f00484197faeb1b0e7a408d30c7b61f99f1c9ffadc4eca8fbd4b02c792a7d077f0840bc1ed81895fedf480c68e91f5803838284aac9b88942ccc5c2583ff4f686848717c8f8dfe634618e4d424799fd5b04f0f5caa79402061ee64b5a0179013fe9839b70c6d3adf65f1a911b76b1b3534f245bacdd3026f638c3ec06a2263dc479318b2444bb8b6e287f527b3c3f967a610bbb044721808beaa7215b0bb6e7a2b96526b72b70536cd7ac5c27455e25e339eee02752b492e2b103d819e55d2a6fb0d523146568441643a591a2462868c4c7cc8e204abb6a28cf093b59d3b79ec0a599559d9d5a5ce0517cbc17459aed419027495ed6aa94e60e858bbeadcff45df3c6af605837d2d7b52ac9481acbd681cc6145c0e4e82c840b5877e25363aac36c88bc4eb9285720e712c3246d6ea2246d2310a4c4b4c6381972952973e0813ae069076f48c198270e2782e79f1c9dc47e2855971bae2704ddf3fe4504ba13807fbaa572249366c37e844dc2aa5ba7749e853d45394fcaa8f7a551b429533bd0ca278999481bf1279832a93b17f3354aafce092439929d81303b41f2a5eb27bd47120b41ca3c90fa92bc27328bdc0105e2a635457f4e6a831245270aca2fd5ec3b2a211c27a6f7328462b81369772cd03dfe818559d7c3ba44df4c7d0722f671931ec031c954267d987aaeb2f852bd661668418052de2894ae1495fe087d521ee36c4469fbc6d8f2fb658c79f0487e5b8c707ce132e392a711a2edf2ade18117d25ce8"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "438cc52f4b13"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "e5c920a49fcebad549c5ce42efc24ea8b80d21eb58305388a12bd67d2812098cdb2acce09d8d5b28657b9e0cc0c04f8236bda2456b23c5fc2354044a7f67695ecd8f3b73abfd7740b1dbb0b55ba4165dcf4da9f0030e3bd48257be534e"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "ed5a8ae82f0d79bad2c697010420c7ff107e7d898ca3462bae3cdcb2d6cd42aee0de1628ac8d1ceb887d17fb192c45ca9da3609dbb7d82241097d6ff4c4d9d2ff670695b3aa63ba601c822c641e546ec39975b88bc9d9d587d4e22075349df1124b9d5ba68e0f577cc3d1f6cf1a54b00400a3cdb5c2d618c0dc493971d8da889f6d47e71d61bb72f31b084e14977fad64da245341a16a648e3617c3372ff7dd7b2419c5f7dcd0bb8b9e8444543b9c61b9c61b61355c38a55f68b4e98f83c"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "237cff1f9c2c886a405fb2e0f6aae6a726ffe647005280a437aebbc9fabd4d7629a6e7c18d06cd2191b5ee764e37cf6ae5e2d649d4c5ff69cb2307671b862c811b55bc37285abe1a14ebf96be56f412a05cdd1f8e3275db2b02c24a4f20ec481449f23c6e653af01463d90c1322da0c1845302ba70c6c2514ae3d43c6fee578af1f74e4d4c9a311e1a3e7535629fab804e70f0ea750aed5c59de6677277a890173e45be46a8890ec43e34472cd4bec61966ae5d71e01829fbb5c295d456715060a32199cb62fe0bb3d15c02debafe8e8e803ebf42db235deb90d313eb699"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "67a4934687997c155160f395b23a342221fa6997236b4d742f3260bf91a8e16ec23bf44a5fd12f9b8133f00826a2d88c8f180ebb4ed207c383"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "b9a4e80a15f93f58c10c86827dc23dc67a6834ef2a06"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "a4b4aab118389614a721d845f3c04cdab522472c395f3a634af53fb7d90973cb6a8f806cdeb8a377e0e96ecf691015d4c0a598a46d454ebc0dcfd578046c30a5e1725f03b71515dd2020988dc53f7d2a2c0c49b6a29b1eed83f077fc6290ed88db8ec82ac3b10c0cf27c20dd77f6a50415a4ba0f0921473a67b986922550e47498eeb3556e5535fd9bcb0026c600a605d0848d5729348c2e2c09db44b69e550a238e24a9edbd507876c300fa6ad51222dce9f469058889ace69067aaa0cf271a5c75a7b2015f41675a3c6e6c8e7f6c0dbdecf234ef3256d212d8085a266f00a4c623ddd1093c13fa583248a95466c818b7ab"}]}, 0x1398}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0xb0, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x24000030) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000001c40)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001cc0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c815}, 0x4084) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000001dc0)=0x5, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000001dc0)=0x5, 0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e40), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc9}]}, 0x68}, 0x1, 0x0, 0x0, 0x9}, 0x8041) unshare(0x10000800) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000001f80)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x8000, 0xc, 0xffffffff, 0x9, 0x1]}, &(0x7f0000002000)=0x78) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x80, r10, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x0) pread64(r0, &(0x7f00000021c0)=""/4096, 0x1000, 0x5) (async) pread64(r0, &(0x7f00000021c0)=""/4096, 0x1000, 0x5) unshare(0x2000380) socketpair(0x1e, 0x2, 0x2, &(0x7f00000031c0)) (async) socketpair(0x1e, 0x2, 0x2, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003240), r1) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) (async) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) 2m50.504750726s ago: executing program 3 (id=1254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000014c0)=0x1b) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') bind$bt_hci(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x3, "0100"}, @local=@item_4={0x3, 0x2, 0x1, "5a732cf7"}, @global=@item_4={0x3, 0x1, 0x2, "c6dc64b9"}, @main=@item_4={0x3, 0x0, 0xa, "8e892b89"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e0503"}, @local=@item_012={0x2, 0x2, 0x5, "90c2"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @local=@item_4={0x3, 0x2, 0x5, 'c^,-'}]}}, 0x0}, 0x0) 2m49.975709007s ago: executing program 3 (id=1261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x33c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x152}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe6a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffc00}]}, @TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbf5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf9e0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3e35}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x534}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf9a3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1fef}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfd71}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7f, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf04}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4e9566e9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbc9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd7a2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x36}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) 2m49.657782456s ago: executing program 3 (id=1262): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x14) 2m49.59302451s ago: executing program 33 (id=1262): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x14) 34.822119908s ago: executing program 2 (id=1915): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900150000000000fcffffff0a00000000090002"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900150000000000fcffffff0a00000000090002"], 0x1c}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) wait4(0x0, 0x0, 0x40000000, 0x0) (async) wait4(0x0, 0x0, 0x40000000, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) (async) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) getpgid(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) listen(r5, 0x0) (async) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2711}, 0x10) (async) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2711}, 0x10) accept(r5, 0x0, 0x0) (async) r8 = accept(r5, 0x0, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvmsg$unix(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) 34.642206797s ago: executing program 2 (id=1917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0x4, 0xf000, 0xb, 0xad, 0x3, 0x4, 0x7f, 0x7, 0x0, 0x2b, 0x9}, {0x1, 0xf000, 0x10, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x3}, {0x2, 0x100000, 0x8, 0x5, 0x1, 0x2, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x3, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0x6, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x3000, 0x6000, 0xb, 0x7c, 0xb1, 0x8, 0x7f, 0xaf, 0x80, 0xc, 0x4, 0x3d}, {0xd000, 0x100002, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x2, 0x3000, 0x5, 0x5, 0x5, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0, 0x10}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0x4, 0x2, 0x7, 0x3]}) (async) socket(0x2b, 0x3, 0xfff) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.42430905s ago: executing program 2 (id=1918): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0xe4}}, 0x4000885) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d3030a81ba2864479303030303030303030303030302c94757365725f6964", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r1]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)) (async) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) sendmsg$tipc(r6, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r6, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x1}}, 0x10) dup3(r2, r6, 0x80000) (async) dup3(r2, r6, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) fcntl$setstatus(r7, 0x4, 0x2000) socket(0x80000000000000a, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYRESDEC=r10], 0x38}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYRESDEC=r10], 0x38}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) pipe2(&(0x7f0000000080), 0x80000) 34.346967535s ago: executing program 2 (id=1919): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4001af83, &(0x7f00000001c0)={0xfdfdffff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000100)) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000100)={0x0, 0x0, 0x6, "f08039ad6674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x201e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x80, 0xdf, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0xf, {0x9, 0x21, 0xb, 0xd4, 0x1, {0x22, 0xf7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x71, 0xf4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x2}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x5, 0x5, 0x7, 0x40, 0x7c}, 0x1e, &(0x7f00000001c0)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0x9, 0xa9, 0x758e, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x38, 0xfe, 0x4, 0x3, 0x10}, @ptm_cap={0x3}]}, 0x1, [{0xac, &(0x7f0000000200)=ANY=[@ANYBLOB="ac036e6ecfa36719da91bbbc2b34e6c40af8462f3d6dee1cc1e81bdf18afa5c2a586eddfc9cea733811a7fe0a89c72e8e000a65c600b24a9bee97469ddf1607c32bbfa404e5bc95a1f4126e4be0eb2e285312f392744131060c9b48e99f9f79f37f5f02aee4fa098d79460e83f1e985c9729215fbcb4145ba8e89da9cbf16c2b9f4436dd889021745bff9607be8d52ed55d1d590f7fa1a4cbcf813f0"]}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000380)={0x14, &(0x7f0000000300)={0x20, 0x6, 0x1b, {0x1b, 0x6, "24bbbcb0622294450c466142a259cc7c5bc37bf0a1716f7281"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x40, 0x16, 0x96, "244e5ed543c136a65de7ce3f4c0cac53e71766e14802acf742b517b80e851ecc31bc5dfa0f0625967a66a3a85c5095d6f7a8109eaaa80fbaab9da412b2eba86eae8d004979f6d9a3ec0814b8a38b600815a628d8b70f0f035da293613e765cce475f95b64da88c197a4114835f50f82574575b259880b44b9ee9830d4e87f8e283eed15624a54aa6c87c7db85876f689759f9b9b6306"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x34}}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) 31.079554886s ago: executing program 2 (id=1936): r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write(r1, &(0x7f0000000040), 0xffffff4a) creat(&(0x7f0000000000)='./file0\x00', 0x28) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) rmdir(&(0x7f000001f940)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x30, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) pipe(0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0xfffffffffffffffc, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xc7}) mount$9p_unix(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x2, &(0x7f0000000740)) 30.022159489s ago: executing program 2 (id=1946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@broadcast, 0x4}]}]}}}], 0x28}, 0x4000810) r2 = socket(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x14, 0x9, 0x3, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.012658198s ago: executing program 34 (id=1946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@broadcast, 0x4}]}]}}}], 0x28}, 0x4000810) r2 = socket(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x14, 0x9, 0x3, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.770222864s ago: executing program 6 (id=2033): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x450e82, 0xc) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"11dc5221a20abf7f36dda51acc8f0583", 0x0, 0x0, {0x0, 0xffffa3b5}, {0x7, 0xffffffff}, 0x9, [0x21, 0x1d, 0x28, 0x6, 0x2, 0x44, 0x3, 0x7, 0xfffffffffffffe01, 0x1, 0x7fff, 0x587a, 0x4, 0x3, 0xfffffffffffffffc, 0x3ff]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000880)={{r2}, r4, 0x0, @inherit={0x98, &(0x7f00000004c0)={0x0, 0xa, 0x3, 0xd, {0x11, 0x1, 0xffffffffffffffff, 0xf, 0x40}, [0x3, 0x3, 0x40, 0x7, 0x2, 0xffffffffffff8eeb, 0x2, 0x9, 0x7ff, 0x39b]}}, @name="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"}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) close_range(r2, r5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.850520177s ago: executing program 6 (id=2040): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@userxattr}, {@redirect_dir_nofollow}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2281, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r6, 0x1000006, 0x13, r5, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x1ce8efd2816baabc, 0x8, 0x6000, 0x1000, &(0x7f00000e2000/0x1000)=nil, 0x12000000, r2}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403655959861eb0570531955bafc4410920e1e29d194b62168955056203c53eb909b8d9fe48eadf19e0a2e5809b44b29a58"], 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x8, 0x0, 0x2080, {0x60000, 0x1}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.138090539s ago: executing program 4 (id=2042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0x59, {0x59, 0xb, "fd51e4271c60b7d56fe19fd6c71463fdccb918b60bdc76ee29e71f8d367dc708b3b1303cf79f9c9b37f58d04c4db290270c6ab889094a0dfceb24c7ac4f78cf4951737a5f707bc2d1ed29c3456190ea040dfc8cd5cfb52"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000140)={0x0, 0xf, 0x8b, {0x5, 0xf, 0x8b, 0x6, [@generic={0x42, 0x10, 0x4, "f66eb8e788264af06487b84c988b200c49b84f87c0e04cde593c8cde7282ae6633e68c115f4007ac2eb095d04641064930e626baac28e3e525b19d6833dbe4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x58, 0x1, 0x22d}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "830b50c6763fc7144a1aed46bb702206"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4784661cfe920e66d39ad57bc2837a81"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xdd, 0x9, 0x6, 0x9}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x80, 0x6, 0x12, "6eb39c24", "5562dce3"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x4, 0xff, 0xfc, 0x2, 0x4}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x8a3dd6e91099cc08, 0x14, 0xcd, "95684f33bfe8e17ca63dd668a201238c242c12c83f8c1e81d8dcd0a1e57c951fc941c86fc21146b026179cb1197ec5cbd45f642e511c300f92835de7f6dcf8e12d244dd16a593f3551621cb857e4b2acb7abc4abdfc1aa6fa96e59052aaeca16a568fe8cb39b2c114c1424cd1b76c41d6f487a3d3dc3f0d092e58e9d3b25c9f63debe11b4f91c43222935a018569c78672e187d5b686c896da2472dbf5c7bc78f3edd1cf701ece8eb8aa111b04210cfb4e701161c4d7c012b0e98dacf8ea6da02fc2100c818afcd32fff9d1e2b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x0, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x40, [0x0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, 'Wq'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, '\aH'}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x4}}) 3.292567607s ago: executing program 0 (id=2043): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 2.651166865s ago: executing program 4 (id=2044): r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="14fb1a800c0002000300000000000000c3fecbc004003780ddddece68ca1062a09330489a2380dd1e8f5d5ddd2cca042c6554f300e32339630613fde"], 0x38}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="040f190001140000ff00"]}) 2.496881824s ago: executing program 6 (id=2046): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) socket$inet_icmp(0x2, 0x2, 0x1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0xe, 0x55, 0x81, 0x6, 0xfff}) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0xd5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0xff, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1c, 0x11, 0xd}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\"\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0x5) openat$cgroup_ro(r2, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) io_setup(0x201, &(0x7f0000000200)=0x0) r10 = dup(r8) io_submit(r9, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x7, 0x0, r10, 0x0, 0x0, 0x2000}]) syz_clone3(&(0x7f0000000280)={0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x7}, &(0x7f0000000140)=""/38, 0x26, &(0x7f0000000200)=""/101, &(0x7f0000000180)=[0xffffffffffffffff, r7, 0x0, r7, r7, r7], 0x6, {r10}}, 0x58) sched_setscheduler(r11, 0x3, &(0x7f0000000300)=0x5) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000340)=0x7) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) sendfile(r3, r3, 0x0, 0x1000000201005) 2.347982423s ago: executing program 0 (id=2048): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) r7 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x1, @host}, 0x10, 0x80800) r8 = socket(0x1e, 0x4, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x20000000000000d5, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) close_range(r7, r7, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r12, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="2c0000a1", @ANYRES16=r13, @ANYBLOB="01002bbd7000fcdbdf2518000000180001801400020076657468315f746f5f62617461647600"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0xc0) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x80, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0x4, 0x4, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7c, 0x6, 0x200008, 0xce1, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2.197787931s ago: executing program 5 (id=2049): ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0xf9}) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/84) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1c) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/raw6\x00') ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000180)) (async) r3 = syz_open_pts(r0, 0x20400) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000001c0)={0x75, 0x7, 0x9}) mmap$xdp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r2, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="400f18865432ffff3e3e263e67360fc7ad64000000640f07b8010000000f01d936d8cf66420f38043c850080000066410f0050af0f22068fa878c22e07666665f3e100", 0x43}], 0x1, 0x0, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @cr0={0x0, 0x80000000}], 0x2) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000300)=[@rdmsr={0x66, 0x18, {0x810}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x98, {0x1, 0x200, [@out_dx={0x6a, 0x28, {0x6082, 0x0, 0x8}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x26, 0x1}}]}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x4b564d01}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0x2407}}], 0x120}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x3, 0x3, 0xc, 0xe592}, {0xfff, 0x4, 0xf6, 0x6}, {0x3, 0xd, 0x10, 0xffffffff}, {0x80, 0xb0, 0x2, 0x5}, {0xe7e, 0x0, 0x8e, 0x2}, {0x10, 0x6, 0x0, 0x7}, {0x365, 0x0, 0x2, 0xfff}, {0xfff8, 0x4, 0xe, 0x10000}, {0x44, 0x1, 0xfb, 0x9}, {0x6, 0xc, 0x8, 0x1000}]}) (async) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000540)) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000580)) (async) mmap$usbfs(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x7) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x93, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x2, 0xb, 0x1, {0x22, 0x34b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x72, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x7f, 0x2e}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x87, 0x7, 0xfe, 0x8, 0x3}, 0xc0, &(0x7f0000000640)={0x5, 0xf, 0xc0, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x7, 0xff00, 0x2, [0xff00c0]}, @generic={0x8f, 0x10, 0x0, "320601de6f4b3524f164fa1c00a2c3ba1f379771375b31266c987c70579363861846e7869114f5d44c9e3d1eeb0affe9ebe04c2ed724ae0a2585cba075c549a698b45d2a4821ba2b23f484d7b480d132c4e7ff634686f6923de6e698de1f868a812312d6a911b72de36004e0c24e53a7ef44724cab6bc972a0beafb784b4473c20dc894cfc1d31be7bd28bda"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa, 0x81, 0x0, 0x1, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x0, 0x8}]}, 0x3, [{0x75, &(0x7f0000000700)=@string={0x75, 0x3, "2c4c802edc0402e1c40477c8db3fd685b47483c0a034c260a0d6cfc2bb57eced72baf402b990c926ddba07b94522e8727f45810551c1d563cd0f5e48e6100def0bb10357e1632af0ec03173657713946aaf13e70648f35f7a3d76cfe4dacc561d6b1f18015122e40f452322e7d474ebf7878f3"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44f}}, {0xab, &(0x7f00000007c0)=@string={0xab, 0x3, "c64521bf815e7559cbf2e69b98087c4528f77d986e121693398d55f6f9a3057f6c2926c33455a606da645b314747b63d3f8ede57648977578c3e9f97bc7297e8ea25828d53c400b5e0308d87b736191f64d36b68a6d450f9c5af1dbed388504ec27275070cf6227ee5d9f7f3a33283a817a52d7e5f9e64a35f828a95ce9643528503659d12fd975e3de2a856bfbed03f5d5ff09df8a73e605784848d846ce9f908163f87f23dec1b88"}}]}) syz_usb_control_io$hid(r5, &(0x7f00000009c0)={0x24, &(0x7f00000008c0)={0x60, 0x6, 0x37, {0x37, 0x23, "92249f4977802e4fff38cc4e2618117b419b287077666ea543d9fb5e6247c8c503996c11b8ad83659c25799ec7f9b7a653dbfe0c82"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, &(0x7f0000000940)={0x0, 0x22, 0x4, {[@main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_012={0x1, 0x0, 0x0, '{'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x42f}}}}, &(0x7f0000000b80)={0x2c, &(0x7f0000000a00)={0x0, 0xd, 0xf, "dc0447cc204d4d482b1faecadd5a21"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x82}, &(0x7f0000000ac0)={0x20, 0x1, 0x3d, "0c28be9ff5b5e5d4ef4b16a84461b076e71ea79e1d4b4a995644f18ce4973486f051abd1196b3a31ff47d1ad73d985e6a6c76e8f854add73915b48723c"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x5}}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) read$hidraw(r0, &(0x7f0000000bc0)=""/4096, 0x1000) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x17c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6a13033941e49c281d3e7d8e5b7585b2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "869e7c1c1abcf4ea"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "23e2b06fc467c06b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ee15416fc6d1b15bacf90233814bfe2b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="10819dd126892f398b682ffe70dd93201c4307406b532e09"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="423899ef00f6d9d1e968ad013e0c7188b4f16ea63eb73c0156070e41a06d448e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd28192a708635b2c93c11f5ffa7f5c6aec8d5f0a5fb7cb2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "04b63b5af27e8255"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ffd207e65f3d6f09"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d83dfe7dbae281d82ad2f83492847fa4"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9a86945e1751aaf1b407468e26a382247f7bdd0c0d9f83ac22d23470e315649e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="82b6e16d893350f319397a3377a99ba39ebba4ec83b46b24"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9eae5b541191c4494e0bb1bbe2c9e2b6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f6225487263c1463"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "03bbde932e1b38e7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="98ccbd1dde04defa4a560adce956bb1c20fc78d1de801614"}]}]}, 0x17c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x78, r6, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x33}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000041) sendfile(r3, r4, &(0x7f0000001f80)=0x191, 0x2) r7 = socket$nl_audit(0x10, 0x3, 0x9) fchmod(r7, 0x102) (async) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000feb000/0x3000)=nil) capset(&(0x7f0000001fc0)={0x19980330, r1}, &(0x7f0000002000)={0x0, 0x0, 0xffff, 0x9, 0x58, 0x8a}) 1.983335074s ago: executing program 0 (id=2050): r0 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) r1 = syz_io_uring_setup(0x368c, &(0x7f0000000000)={0x0, 0x8ab2, 0x10000, 0x2, 0x27b}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3535, &(0x7f0000000100)={0x0, 0xd4cb, 0x1, 0x0, 0x336, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) 1.870489661s ago: executing program 0 (id=2051): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) clock_settime(0xa, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xd) 1.760222717s ago: executing program 0 (id=2052): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @loopback}}) 1.730398759s ago: executing program 0 (id=2053): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x33, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x10, 0xf8, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xff, 0x1, 0xd}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x10, 0x80, 0x8, 0x99}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x7, 0xff, 0xfd, 0x5f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xa, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0xf, 0x0, 0x9, [0x0, 0xffdf80]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc41f10fea8494d4, 0x6, 0xe}]}, 0x5, [{0xb4, &(0x7f0000000140)=@string={0xb4, 0x3, "b407f9c9745ddd1ca6f5b0c2d97b4de2066e0ba4bf5191dc06c4fdd8052f1c578f5e8526b08ed01241df2f71fe823ef3bff0f81751fa279e5fc5356e72660b88c262114903fdbc70645877c274355b989dba0eef043beace6092dc73e042ac42405e2af3efe6163cbaebbbeb339ebae5affa9e5df410f6ab75b3f090ff96c17ffffeed5b93e10a0a3443fd88332f22cfa7ee0190cc54413aa926625d78425c1309e48f94a8facac60fda898b1475b38f8954"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x809}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r1) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0x4, {0x4, 0x21, "ccc0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.230580118s ago: executing program 4 (id=2054): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060210020d0006090582020002000110"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="abe763a4ca94f5ed73e01ec65176a338a8d12a5eb6b85ccb1eb6c51737db28807547ea3c3b1643b7f36856400fc2757d5bab115671e329522a657171f676d9c80ac7e15ea91de996f63f1b57accc9c7e91b306ed3ec9c884971f50165aed2e627634ec5ad3400202a0922771dfe951d92787d90fea1e3713aded60d7e3abd1439deeeba78d5183eb68c8ad6239a202409331d62aecf5e4563d87b2c30dd83a92853f52e4988deb30bbecf6a532cc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100010000000000000000000700000a298406e948b89b"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x80ab, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) write(r4, &(0x7f0000000200)="89", 0xffe3) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], 0x0, 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r7, @ANYRES16, @ANYBLOB="09deff1b38148797"], 0x20}}, 0x24044885) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000340)=ANY=[@ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000009c0)={0x40, 0x11, 0x4, "923ac1a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x100) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="443b5c68e72d774ad73d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa10b7, 0x0) 881.897818ms ago: executing program 6 (id=2055): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x20, 0x2, 0x7, {0x7, 0x30, "4061165830"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 608.796735ms ago: executing program 5 (id=2056): open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x0) mount$9p_unix(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000000), 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="0f6f38f27bbfbfbd69782c00"]) (async) mount$9p_unix(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000000), 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="0f6f38f27bbfbfbd69782c00"]) select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, &(0x7f0000000040)={0x3, 0x1, 0xffff, 0x5, 0x1000, 0x7, 0x10, 0xcc}, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 505.407961ms ago: executing program 5 (id=2057): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e27, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa5732221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695e85000000a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="159dd55ab4e3c40d72b76166dc204f603dc8fb00371672ca2dc755f90560d9a6541a1b0963d978b21b1797", 0x2b}], 0x1}}], 0x3, 0x8008800) (async) sendto$inet6(r0, &(0x7f0000000140)="2435afc7ea55", 0x6, 0x20000804, 0x0, 0x0) 393.965277ms ago: executing program 5 (id=2058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xe, r1, 0x45, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x12, 0x6b) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x1}, {}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 382.300108ms ago: executing program 5 (id=2059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae2600000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4a}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x3, 0x4, 0xfd30, 0x80000001, 0x7, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 325.107261ms ago: executing program 4 (id=2060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000000000) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000040)) getsockname(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setpriority(0x2, 0xff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x9, 0x0, 0xde, 0x4c, 0x8, 0x5, 0x0, 0xfe, 0xf1, 0x5, 0x5, 0x3, 0xfb, 0x1, 0x3}}) setresgid(0x0, 0x0, 0xee01) (async) setresgid(0x0, 0x0, 0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x11}) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x114) (async) r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x114) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000004c0)=""/4096, &(0x7f0000000180)=0x1000) faccessat2(r8, &(0x7f0000000040)='./file0\x00', 0x20, 0x200) (async) faccessat2(r8, &(0x7f0000000040)='./file0\x00', 0x20, 0x200) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000140)=0x2c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 249.641035ms ago: executing program 6 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4008010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x3d}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xd}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffbd8a}, {0x6, 0x16, 0xe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x70}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000c}, 0x80016) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48084}, 0x4040) (async) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r7) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2063}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20000001) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r9, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80000}, 0x20044043) readv(r7, &(0x7f0000001a00)=[{&(0x7f0000000900)=""/234, 0xea}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a80), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004020}, 0x20004090) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40d0) (async) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001c80), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r11, &(0x7f0000001cc0)={0xa, {0x1, 0x0, 0xff}}, 0xa) (async) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r12, 0x54a6) (async) close_range(r12, r6, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001e40)={'sit0\x00', &(0x7f0000001d80)={'gretap0\x00', 0x0, 0x1, 0x700, 0x1, 0x9, {{0x22, 0x4, 0x3, 0x1, 0x88, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @timestamp={0x44, 0x20, 0x1e, 0x0, 0x5, [0x1db7, 0x7, 0x3, 0x5, 0x1ff, 0x0, 0x8]}, @timestamp_addr={0x44, 0xc, 0x1b, 0x1, 0xb, [{@private=0xa010100, 0x40}]}, @rr={0x7, 0x2b, 0x35, [@empty, @remote, @empty, @multicast1, @multicast2, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, @broadcast]}, @generic={0x82, 0xb, "2635b1b36e8383ba2e"}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0xb, 0x24, [@broadcast, @broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080d1}, 0x4040044) (async) socket$netlink(0x10, 0x3, 0xa) fchmod(r11, 0x6) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000002200)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x1d8, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x1, 0x3, 0x0, 0x6]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0xc4, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff2}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2004c884}, 0x24004010) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r12, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x6f57ec585b08153b) 160.335511ms ago: executing program 6 (id=2062): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r0, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=5']) 129.408892ms ago: executing program 4 (id=2063): socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x5d6}) (async) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 18.118549ms ago: executing program 4 (id=2064): r0 = userfaultfd(0x80801) (async, rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async, rerun: 64) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) (async, rerun: 32) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) (async) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x7ffffffffe}, @flat=@binder={0x73622a85, 0x100, 0x3, 0xf0}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, &(0x7f0000000540)=0x147b, 0x4) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 0s ago: executing program 5 (id=2065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x81, @any, 0x0, 0x1}, 0xe) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x19e) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844674432,\x00'/33]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0x284a, 0x200}}, 0x28) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c4a702fffd01"], 0x0) kernel console output (not intermixed with test programs): draw0: USB HID v0.04 Device [HID 06a3:0cd7] on usb-dummy_hcd.5-1/input0 [ 306.048537][ T10] usb 6-1: USB disconnect, device number 57 [ 306.074154][ T330] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 306.186823][ T6152] __vm_enough_memory: pid: 6152, comm: syz.0.1785, bytes: 18014402804453376 not enough memory for the allocation [ 306.245101][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 306.265334][ T330] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 306.274143][ T330] usb 3-1: config 0 has no interface number 0 [ 306.280362][ T330] usb 3-1: config 0 interface 184 has no altsetting 0 [ 306.299937][ T330] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 306.309741][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.317786][ T330] usb 3-1: Product: syz [ 306.322083][ T330] usb 3-1: Manufacturer: syz [ 306.326936][ T330] usb 3-1: SerialNumber: syz [ 306.334858][ T330] usb 3-1: config 0 descriptor?? [ 306.352594][ T330] smsc75xx v1.0.0 [ 306.469888][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.477260][ T347] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 306.499760][ T347] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 306.511950][ T347] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 306.532822][ T347] usb 5-1: USB disconnect, device number 81 [ 306.641204][ T46] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 306.825565][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.836610][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.846474][ T46] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 306.855612][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.866866][ T46] usb 1-1: config 0 descriptor?? [ 306.930109][ T1280] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 307.004993][ T347] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 307.080088][ T1280] usb 6-1: device descriptor read/64, error -71 [ 307.169370][ T347] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.181190][ T347] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.192486][ T347] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 307.204014][ T347] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 307.213197][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.226778][ T6156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.314969][ T46] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 307.324597][ T46] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 307.358105][ T1280] usb 6-1: device descriptor read/64, error -71 [ 307.447039][ T330] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 307.464495][ T330] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 307.475851][ T330] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 307.488389][ T330] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 307.489466][ T347] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 307.508605][ T347] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input50 [ 307.520896][ T330] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 307.535132][ T46] cp2112 0003:10C4:EA90.004D: Part Number: 0x82 Device Version: 0xFE [ 307.539905][ T347] usb 5-1: USB disconnect, device number 82 [ 307.540102][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 307.563098][ T330] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 307.590551][ T330] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 307.601097][ T330] usb 3-1: USB disconnect, device number 46 [ 307.614894][ T1280] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 307.747966][ T46] cp2112 0003:10C4:EA90.004D: error requesting SMBus config [ 307.763891][ T46] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -32 [ 307.775431][ T1280] usb 6-1: device descriptor read/64, error -71 [ 307.783044][ T46] usb 1-1: USB disconnect, device number 86 [ 308.044352][ T1280] usb 6-1: device descriptor read/64, error -71 [ 308.093704][ T6167] fuse: Unknown parameter 'fq0xffffffffffffffff' [ 308.103526][ T6167] fuse: Unknown parameter 'fq0xffffffffffffffff' [ 308.117939][ T6167] fuse: Unknown parameter 'fq0xffffffffffffffff' [ 308.125186][ T6167] fuse: Unknown parameter 'fq0xffffffffffffffff' [ 308.137601][ T6167] fuse: Unknown parameter 'fq0xffffffffffffffff' [ 308.155043][ T6167] fuse: Unknown parameter 'fq0xffffffffffffffff' [ 308.171833][ T1280] usb usb6-port1: attempt power cycle [ 308.207265][ T6170] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1791'. [ 308.470955][ T347] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 308.546044][ T1280] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 308.569881][ T1280] usb 6-1: device descriptor read/8, error -71 [ 308.577971][ T46] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 308.631481][ T347] usb 3-1: Using ep0 maxpacket: 16 [ 308.639448][ T347] usb 3-1: config 0 has an invalid interface number: 213 but max is 2 [ 308.648704][ T347] usb 3-1: config 0 has an invalid interface number: 59 but max is 2 [ 308.657440][ T347] usb 3-1: config 0 has an invalid interface number: 18 but max is 2 [ 308.666158][ T347] usb 3-1: config 0 has no interface number 0 [ 308.672332][ T347] usb 3-1: config 0 has no interface number 1 [ 308.678541][ T347] usb 3-1: config 0 has no interface number 2 [ 308.684742][ T347] usb 3-1: config 0 interface 213 altsetting 84 endpoint 0x5 has invalid maxpacket 1600, setting to 64 [ 308.695969][ T347] usb 3-1: config 0 interface 213 altsetting 84 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 308.707066][ T347] usb 3-1: config 0 interface 213 altsetting 84 has an invalid descriptor for endpoint zero, skipping [ 308.718263][ T347] usb 3-1: config 0 interface 59 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 308.729503][ T347] usb 3-1: config 0 interface 59 altsetting 255 has an endpoint descriptor with address 0x18, changing to 0x8 [ 308.741270][ T347] usb 3-1: config 0 interface 59 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 308.752155][ T347] usb 3-1: config 0 interface 59 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 308.759918][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 308.763171][ T347] usb 3-1: config 0 interface 59 altsetting 255 endpoint 0x4 has an invalid bInterval 186, changing to 7 [ 308.775958][ T46] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 308.781315][ T347] usb 3-1: config 0 interface 59 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 308.797887][ T1280] usb 6-1: device descriptor read/8, error -71 [ 308.804498][ T347] usb 3-1: config 0 interface 59 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 308.815343][ T347] usb 3-1: config 0 interface 59 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 308.826268][ T347] usb 3-1: config 0 interface 59 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 308.837450][ T347] usb 3-1: config 0 interface 59 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 308.848393][ T347] usb 3-1: config 0 interface 18 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 308.859090][ T347] usb 3-1: config 0 interface 18 altsetting 2 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 308.870758][ T347] usb 3-1: config 0 interface 18 altsetting 2 endpoint 0x81 has an invalid bInterval 201, changing to 7 [ 308.882289][ T347] usb 3-1: config 0 interface 18 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 308.892990][ T347] usb 3-1: config 0 interface 18 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 308.903847][ T347] usb 3-1: config 0 interface 18 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 308.914793][ T347] usb 3-1: config 0 interface 18 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 308.926545][ T347] usb 3-1: config 0 interface 18 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 308.937411][ T347] usb 3-1: config 0 interface 18 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 308.948081][ T347] usb 3-1: config 0 interface 18 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 308.959376][ T347] usb 3-1: config 0 interface 18 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 308.970813][ T347] usb 3-1: config 0 interface 18 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 308.984627][ T347] usb 3-1: config 0 interface 213 has no altsetting 0 [ 308.991453][ T347] usb 3-1: config 0 interface 59 has no altsetting 0 [ 308.996211][ T46] usb 5-1: string descriptor 0 read error: -71 [ 309.005165][ T46] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 309.014309][ T347] usb 3-1: config 0 interface 18 has no altsetting 0 [ 309.022703][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.034930][ T46] r8152-cfgselector 5-1: Unknown version 0x0000 [ 309.044287][ T46] r8152-cfgselector 5-1: rejected 8 configurations due to insufficient available bus power [ 309.044318][ T347] usb 3-1: New USB device found, idVendor=0812, idProduct=3101, bcdDevice=d6.2a [ 309.054789][ T46] r8152-cfgselector 5-1: no configuration chosen from 8 choices [ 309.071882][ T1280] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 309.081765][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.091298][ T347] usb 3-1: Product: syz [ 309.092363][ T46] r8152-cfgselector 5-1: USB disconnect, device number 83 [ 309.098607][ T347] usb 3-1: Manufacturer: syz [ 309.108149][ T347] usb 3-1: SerialNumber: syz [ 309.115983][ T1280] usb 6-1: device descriptor read/8, error -71 [ 309.131461][ T347] usb 3-1: config 0 descriptor?? [ 309.137711][ T347] usb 3-1: Interface #213 referenced by multiple IADs [ 309.254801][ T1280] usb 6-1: device descriptor read/8, error -71 [ 309.382286][ T1280] usb usb6-port1: unable to enumerate USB device [ 309.392551][ T347] usb 3-1: USB disconnect, device number 47 [ 309.637301][ T330] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 309.797770][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 309.805337][ T330] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 309.814415][ T330] usb 1-1: config 0 has no interface number 0 [ 309.820675][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 309.830716][ T330] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 309.844163][ T330] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 309.853309][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.861344][ T330] usb 1-1: Product: syz [ 309.865698][ T330] usb 1-1: Manufacturer: syz [ 309.870326][ T330] usb 1-1: SerialNumber: syz [ 309.876799][ T330] usb 1-1: config 0 descriptor?? [ 309.883882][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.891458][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.993366][ T6186] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 310.125415][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.133468][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.461738][ T36] kauditd_printk_skb: 519 callbacks suppressed [ 310.461761][ T36] audit: type=1400 audit(2000004445.440:11925): avc: denied { ioctl } for pid=6193 comm="syz.4.1800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.507860][ T36] audit: type=1400 audit(2000004445.478:11926): avc: denied { create } for pid=6179 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.537947][ T36] audit: type=1400 audit(2000004445.506:11927): avc: denied { ioctl } for pid=6193 comm="syz.4.1800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.600260][ T383] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 310.612694][ T36] audit: type=1400 audit(2000004445.581:11928): avc: denied { ioctl } for pid=6193 comm="syz.4.1800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.670275][ T36] audit: type=1400 audit(2000004445.581:11929): avc: denied { ioctl } for pid=6193 comm="syz.4.1800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.726291][ T36] audit: type=1400 audit(2000004445.609:11930): avc: denied { ioctl } for pid=6193 comm="syz.4.1800" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.752399][ T36] audit: type=1400 audit(2000004445.609:11931): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.755286][ T6201] netlink: 'syz.2.1802': attribute type 4 has an invalid length. [ 310.782137][ T36] audit: type=1400 audit(2000004445.609:11932): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.809559][ T383] usb 5-1: Using ep0 maxpacket: 8 [ 310.816855][ T36] audit: type=1400 audit(2000004445.609:11933): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.845656][ T383] usb 5-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 310.856472][ T383] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.867419][ T383] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 310.893029][ T383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.910547][ T36] audit: type=1400 audit(2000004445.627:11934): avc: denied { create } for pid=6198 comm="syz.2.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 310.935085][ T383] usb 5-1: config 0 descriptor?? [ 311.235999][ T330] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 311.250347][ T330] asix 1-1:0.34: probe with driver asix failed with error -71 [ 311.263594][ T798] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 311.281733][ T330] usb 1-1: USB disconnect, device number 87 [ 311.307026][ T5941] udevd[5941]: setting mode of /dev/bus/usb/001/087 to 020664 failed: No such file or directory [ 311.326357][ T5941] udevd[5941]: setting owner of /dev/bus/usb/001/087 to uid=0, gid=0 failed: No such file or directory [ 311.396496][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.411629][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.424073][ T798] usb 3-1: device descriptor read/64, error -71 [ 311.469658][ T383] usb 5-1: string descriptor 0 read error: -71 [ 311.490426][ T383] usb 5-1: USB disconnect, device number 84 [ 311.680795][ T798] usb 3-1: device descriptor read/64, error -71 [ 311.948419][ T798] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 312.098092][ T798] usb 3-1: device descriptor read/64, error -71 [ 312.162244][ T573] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 312.325529][ T573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.336650][ T573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.346464][ T573] usb 1-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 312.355622][ T573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.365517][ T798] usb 3-1: device descriptor read/64, error -71 [ 312.372190][ T573] usb 1-1: config 0 descriptor?? [ 312.494086][ T798] usb usb3-port1: attempt power cycle [ 312.534723][ T6239] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 312.728088][ T6241] netlink: 'syz.5.1815': attribute type 11 has an invalid length. [ 312.830473][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.840375][ T573] ntrig 0003:1B96:0012.004E: unknown main item tag 0x2 [ 312.842318][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.847408][ T573] ntrig 0003:1B96:0012.004E: item fetching failed at offset 6/7 [ 312.865431][ T573] ntrig 0003:1B96:0012.004E: parse failed [ 312.871989][ T573] ntrig 0003:1B96:0012.004E: probe with driver ntrig failed with error -22 [ 312.889713][ T798] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 312.890125][ T1280] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 312.929650][ T798] usb 3-1: device descriptor read/8, error -71 [ 313.046976][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.055842][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.070433][ T573] usb 1-1: USB disconnect, device number 88 [ 313.078049][ T1280] usb 5-1: Using ep0 maxpacket: 16 [ 313.083343][ T798] usb 3-1: device descriptor read/8, error -71 [ 313.097854][ T1245] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 313.103157][ T1280] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.125114][ T1280] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.145860][ T1280] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.165608][ T1280] usb 5-1: config 1 interface 0 has no altsetting 0 [ 313.185967][ T1280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 313.209076][ T1280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.233976][ T1280] usb 5-1: Product: syz [ 313.238207][ T1280] usb 5-1: Manufacturer: syz [ 313.254753][ T1280] usb 5-1: SerialNumber: syz [ 313.285362][ T1245] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.297508][ T1245] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.308361][ T1245] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 313.324439][ T1245] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.333639][ T1245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.341738][ T798] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 313.349369][ T1245] usb 6-1: Product: syz [ 313.353589][ T1245] usb 6-1: Manufacturer: syz [ 313.358204][ T1245] usb 6-1: SerialNumber: syz [ 313.384621][ T798] usb 3-1: device descriptor read/8, error -71 [ 313.495121][ T1280] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 313.540299][ T798] usb 3-1: device descriptor read/8, error -71 [ 313.588565][ T1245] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 313.606482][ T1245] usb 6-1: 2:1 : unsupported format bits 0x100 [ 313.644614][ T1245] usb 6-1: USB disconnect, device number 62 [ 313.663331][ T798] usb usb3-port1: unable to enumerate USB device [ 313.744628][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 313.895288][ T1280] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 314.055741][ T1280] usb 1-1: Using ep0 maxpacket: 16 [ 314.063867][ T1280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.074835][ T1280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.084686][ T1280] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 314.093859][ T1280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.103983][ T1280] usb 1-1: config 0 descriptor?? [ 314.214285][ T6262] : renamed from bond_slave_1 [ 314.265575][ T6264] syz.2.1821(6264): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 314.517332][ T6270] kvm: kvm [6269]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 314.526420][ T6270] kvm: kvm [6269]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 314.550914][ T1280] apple 0003:05AC:024B.004F: unknown global tag 0xe [ 314.557655][ T1280] apple 0003:05AC:024B.004F: item 0 1 1 14 parsing failed [ 314.565698][ T1280] apple 0003:05AC:024B.004F: parse failed [ 314.579824][ T1280] apple 0003:05AC:024B.004F: probe with driver apple failed with error -22 [ 314.611821][ T573] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 314.764293][ T1245] usb 1-1: USB disconnect, device number 89 [ 314.777800][ T573] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 314.790837][ T573] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.802247][ T573] usb 3-1: config 0 has no interface number 0 [ 314.809213][ T573] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 314.821025][ T573] usb 3-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.839528][ T573] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 314.849227][ T573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.858500][ T573] usb 3-1: Product: syz [ 314.862897][ T573] usb 3-1: Manufacturer: syz [ 314.868691][ T573] usb 3-1: SerialNumber: syz [ 314.875242][ T573] usb 3-1: config 0 descriptor?? [ 314.882489][ T6268] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 314.892473][ T573] usb-storage 3-1:0.20: USB Mass Storage device detected [ 314.902270][ T573] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 314.920951][ T798] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 315.070087][ T798] usb 6-1: device descriptor read/64, error -71 [ 315.118532][ T1280] usb 3-1: USB disconnect, device number 52 [ 315.325897][ T798] usb 6-1: device descriptor read/64, error -71 [ 315.387305][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.394558][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.402120][ T6279] bridge0: entered promiscuous mode [ 315.407616][ T6279] bridge0: entered allmulticast mode [ 315.592360][ T798] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 315.689425][ T6284] incfs: Can't find or create .index dir in ./file0 [ 315.696177][ T6284] incfs: mount failed -1 [ 315.730913][ T798] usb 6-1: device descriptor read/64, error -71 [ 315.801190][ T573] usb 5-1: USB disconnect, device number 85 [ 315.811922][ T573] usblp0: removed [ 315.848804][ T36] kauditd_printk_skb: 619 callbacks suppressed [ 315.848825][ T36] audit: type=1400 audit(2000004451.480:12554): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.926286][ T36] audit: type=1400 audit(2000004451.480:12555): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.977392][ T36] audit: type=1400 audit(2000004451.480:12556): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.001633][ T36] audit: type=1400 audit(2000004451.480:12557): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.040014][ T798] usb 6-1: device descriptor read/64, error -71 [ 316.050974][ T36] audit: type=1400 audit(2000004451.480:12558): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.077256][ T36] audit: type=1400 audit(2000004451.509:12559): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.103460][ T36] audit: type=1400 audit(2000004451.509:12560): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.129515][ T36] audit: type=1400 audit(2000004451.518:12561): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.155265][ T36] audit: type=1400 audit(2000004451.518:12562): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.180943][ T798] usb usb6-port1: attempt power cycle [ 316.186911][ T36] audit: type=1400 audit(2000004451.518:12563): avc: denied { ioctl } for pid=6272 comm="syz.5.1825" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.212432][ T1245] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 316.359804][ T573] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 316.381136][ T1245] usb 3-1: Invalid ep0 maxpacket: 9 [ 316.509007][ T573] usb 5-1: device descriptor read/64, error -71 [ 316.530548][ T1245] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 316.594303][ T798] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 316.618494][ T798] usb 6-1: device descriptor read/8, error -71 [ 316.690212][ T1245] usb 3-1: Invalid ep0 maxpacket: 9 [ 316.695747][ T1245] usb usb3-port1: attempt power cycle [ 316.757217][ T798] usb 6-1: device descriptor read/8, error -71 [ 316.775505][ T573] usb 5-1: device descriptor read/64, error -71 [ 317.010017][ T798] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 317.031303][ T573] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 317.038727][ T798] usb 6-1: device descriptor read/8, error -71 [ 317.063350][ T1245] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 317.085588][ T1245] usb 3-1: Invalid ep0 maxpacket: 9 [ 317.105899][ T347] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 317.180524][ T573] usb 5-1: device descriptor read/64, error -71 [ 317.187433][ T798] usb 6-1: device descriptor read/8, error -71 [ 317.223340][ T1245] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 317.245308][ T1245] usb 3-1: Invalid ep0 maxpacket: 9 [ 317.251614][ T1245] usb usb3-port1: unable to enumerate USB device [ 317.279672][ T347] usb 1-1: not running at top speed; connect to a high speed hub [ 317.289289][ T347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 317.300377][ T347] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 317.315057][ T347] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.320806][ T798] usb usb6-port1: unable to enumerate USB device [ 317.325519][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.338747][ T347] usb 1-1: Product: и [ 317.342896][ T347] usb 1-1: Manufacturer: ъ [ 317.347418][ T347] usb 1-1: SerialNumber: syz [ 317.355706][ T6302] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 317.446983][ T573] usb 5-1: device descriptor read/64, error -71 [ 317.564452][ T573] usb usb5-port1: attempt power cycle [ 317.796569][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.805309][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.820903][ T347] cdc_ncm 1-1:1.0: bind() failure [ 317.827222][ T347] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 317.834585][ T347] cdc_ncm 1-1:1.1: bind() failure [ 317.842227][ T347] usb 1-1: USB disconnect, device number 91 [ 317.857528][ T5941] udevd[5941]: setting owner of /dev/bus/usb/001/091 to uid=0, gid=0 failed: No such file or directory [ 317.938584][ T573] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 317.947075][ T6306] fuse: Unknown parameter '' [ 317.991025][ T573] usb 5-1: device descriptor read/8, error -71 [ 318.132170][ T573] usb 5-1: device descriptor read/8, error -71 [ 318.268675][ T1280] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 318.384933][ T573] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 318.419247][ T573] usb 5-1: device descriptor read/8, error -71 [ 318.427666][ T1280] usb 6-1: Using ep0 maxpacket: 16 [ 318.441278][ T1280] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 318.459527][ T1280] usb 6-1: config 1 has no interface number 0 [ 318.465674][ T1280] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 318.480843][ T1280] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 318.490904][ T1280] usb 6-1: config 1 interface 105 has no altsetting 0 [ 318.515144][ T1280] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 318.534947][ T1280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.552612][ T1280] usb 6-1: Product: syz [ 318.557887][ T1280] usb 6-1: Manufacturer: syz [ 318.562556][ T1280] usb 6-1: SerialNumber: syz [ 318.572054][ T6308] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.579615][ T573] usb 5-1: device descriptor read/8, error -71 [ 318.587834][ T6308] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.612693][ T6315] syz.0.1841 (6315): attempted to duplicate a private mapping with mremap. This is not supported. [ 318.694314][ T573] usb usb5-port1: unable to enumerate USB device [ 318.819082][ T6322] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.836528][ T6323] netlink: 'syz.0.1843': attribute type 27 has an invalid length. [ 318.844304][ T6322] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.856754][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.863851][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.871291][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.878414][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.888785][ T6323] bridge0: left promiscuous mode [ 318.894930][ T6323] bridge0: left allmulticast mode [ 319.109280][ T1280] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 319.121307][ T1280] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 319.139648][ T1280] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 319.169594][ T1280] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7a:8c:60:30:3b:7f [ 319.207228][ T1280] usb 6-1: USB disconnect, device number 67 [ 319.232548][ T1280] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 319.320831][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1845'. [ 319.335858][ T1280] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 319.355597][ T1280] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 319.367929][ T1280] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 319.717341][ T1280] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 319.804987][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 319.911338][ T1280] usb 6-1: Using ep0 maxpacket: 32 [ 319.943199][ T1280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.962409][ T1280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.972234][ T1280] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.988656][ T1280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.010641][ T1280] usb 6-1: config 0 descriptor?? [ 320.029614][ T1280] hub 6-1:0.0: USB hub found [ 320.249560][ T1280] hub 6-1:0.0: 6 ports detected [ 320.267484][ T1280] hub 6-1:0.0: insufficient power available to use all downstream ports [ 320.474061][ T573] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 320.644754][ T573] usb 5-1: Using ep0 maxpacket: 32 [ 320.652768][ T573] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 320.662095][ T573] usb 5-1: config 0 has no interface number 0 [ 320.668401][ T573] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 320.678667][ T573] usb 5-1: config 0 interface 196 has no altsetting 0 [ 320.689631][ T1280] usb 6-1: USB disconnect, device number 68 [ 320.719185][ T573] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 320.755730][ T573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.763862][ T573] usb 5-1: Product: syz [ 320.768134][ T573] usb 5-1: Manufacturer: syz [ 320.772891][ T573] usb 5-1: SerialNumber: syz [ 320.783430][ T573] usb 5-1: config 0 descriptor?? [ 320.792265][ T6358] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.204958][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 321.204978][ T36] audit: type=1400 audit(2000004456.500:13230): avc: denied { read write } for pid=6367 comm="syz.2.1859" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.234743][ T36] audit: type=1400 audit(2000004456.500:13231): avc: denied { read write open } for pid=6367 comm="syz.2.1859" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.259038][ T573] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 321.268161][ T36] audit: type=1400 audit(2000004456.519:13232): avc: denied { read write } for pid=6367 comm="syz.2.1859" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.303772][ T573] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 321.316111][ T36] audit: type=1400 audit(2000004456.519:13233): avc: denied { read write open } for pid=6367 comm="syz.2.1859" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.370270][ T36] audit: type=1400 audit(2000004456.519:13234): avc: denied { ioctl } for pid=6367 comm="syz.2.1859" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.413222][ T36] audit: type=1400 audit(2000004456.519:13235): avc: denied { ioctl } for pid=6367 comm="syz.2.1859" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.440279][ T36] audit: type=1400 audit(2000004456.519:13236): avc: denied { ioctl } for pid=6367 comm="syz.2.1859" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.475956][ T1280] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 321.481136][ T36] audit: type=1400 audit(2000004456.528:13237): avc: denied { ioctl } for pid=6367 comm="syz.2.1859" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.510301][ T573] usb 5-1: USB disconnect, device number 90 [ 321.547019][ T36] audit: type=1400 audit(2000004456.528:13238): avc: denied { ioctl } for pid=6357 comm="syz.4.1854" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.576129][ T36] audit: type=1400 audit(2000004456.528:13239): avc: denied { ioctl } for pid=6357 comm="syz.4.1854" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.660262][ T1280] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 321.668810][ T1280] usb 3-1: config 1 has no interface number 0 [ 321.674945][ T1280] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 321.699702][ T1280] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 321.733575][ T1280] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 321.743209][ T1280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.751264][ T1280] usb 3-1: Product: syz [ 321.756760][ T1280] usb 3-1: Manufacturer: syz [ 321.761404][ T1280] usb 3-1: SerialNumber: syz [ 321.776617][ T6368] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.786960][ T6368] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 322.025528][ T1280] usb 3-1: USB disconnect, device number 57 [ 322.232772][ T383] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 322.417651][ T383] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.428162][ T383] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 322.448115][ T383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.462698][ T383] usb 6-1: config 0 descriptor?? [ 322.528730][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 322.541121][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 322.989764][ T573] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 323.064104][ T1280] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 323.165256][ T573] usb 5-1: unable to get BOS descriptor or descriptor too short [ 323.174259][ T573] usb 5-1: not running at top speed; connect to a high speed hub [ 323.184175][ T573] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 323.192535][ T573] usb 5-1: config 0 has no interface number 0 [ 323.199625][ T573] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 323.211167][ T573] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 178, setting to 64 [ 323.222273][ T573] usb 5-1: config 0 interface 88 has no altsetting 0 [ 323.234726][ T1280] usb 3-1: Using ep0 maxpacket: 8 [ 323.239970][ T573] usb 5-1: string descriptor 0 read error: -22 [ 323.246314][ T573] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 323.255433][ T573] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 323.265889][ T1280] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.272896][ T573] usb 5-1: config 0 descriptor?? [ 323.287967][ T1280] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 323.297249][ T1280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.309964][ T6412] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.317916][ T1280] usb 3-1: config 0 descriptor?? [ 323.324489][ T573] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input51 [ 323.546594][ T573] usb 5-1: USB disconnect, device number 91 [ 323.570572][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.583580][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.609483][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.618188][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.635123][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.643756][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.872721][ T1280] petalynx 0003:18B1:0037.0050: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 324.087571][ T798] usb 3-1: USB disconnect, device number 58 [ 325.110817][ T383] usbhid 6-1:0.0: can't add hid device: -71 [ 325.119675][ T383] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 325.135778][ T383] usb 6-1: USB disconnect, device number 69 [ 332.188211][ T36] kauditd_printk_skb: 327 callbacks suppressed [ 332.188232][ T36] audit: type=1400 audit(2000004466.811:13567): avc: denied { read } for pid=6425 comm="syz.0.1877" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 332.271953][ T36] audit: type=1400 audit(2000004466.829:13568): avc: denied { read open } for pid=6425 comm="syz.0.1877" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 332.334119][ T36] audit: type=1400 audit(2000004466.829:13569): avc: denied { read append } for pid=6425 comm="syz.0.1877" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.381165][ T36] audit: type=1400 audit(2000004466.829:13570): avc: denied { read append open } for pid=6425 comm="syz.0.1877" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.448310][ T36] audit: type=1400 audit(2000004466.829:13571): avc: denied { ioctl } for pid=6425 comm="syz.0.1877" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.474933][ T36] audit: type=1400 audit(2000004466.839:13572): avc: denied { create } for pid=6426 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.496647][ T36] audit: type=1400 audit(2000004466.839:13573): avc: denied { write } for pid=6426 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.519086][ T383] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 332.527917][ T36] audit: type=1400 audit(2000004466.839:13574): avc: denied { read } for pid=6426 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.535042][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.558221][ T36] audit: type=1400 audit(2000004466.839:13575): avc: denied { read } for pid=6426 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.564839][ T6444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.582891][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.692990][ T383] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 332.720890][ T383] usb 6-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.738240][ T383] usb 6-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.750254][ T383] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 332.764898][ T383] usb 6-1: config 0 interface 0 has no altsetting 0 [ 332.771940][ T383] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 332.782362][ T383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.795759][ T383] usb 6-1: config 0 descriptor?? [ 332.806163][ T1280] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 332.923449][ T573] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 332.986161][ T1280] usb 1-1: Using ep0 maxpacket: 32 [ 333.024628][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.051983][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.061615][ T6481] fuse: Unknown parameter 'gryyupid!P' [ 333.095647][ T1280] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.095740][ T383] usbhid 6-1:0.0: can't add hid device: -71 [ 333.128676][ T383] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 333.132923][ T1280] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 333.154077][ T383] usb 6-1: USB disconnect, device number 70 [ 333.158002][ T573] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 333.178270][ T1280] usb 1-1: can't read configurations, error -71 [ 333.184622][ T573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.200034][ T573] usb 3-1: Product: syz [ 333.215273][ T573] usb 3-1: Manufacturer: syz [ 333.219942][ T573] usb 3-1: SerialNumber: syz [ 333.563024][ T383] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 333.690340][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.726552][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.749411][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.758195][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.777073][ T383] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.786278][ T383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.816742][ T383] usb 6-1: Product: syz [ 333.829451][ T383] usb 6-1: Manufacturer: syz [ 333.834191][ T383] usb 6-1: SerialNumber: syz [ 333.855734][ T573] (unnamed net_device) (uninitialized): Assigned a random MAC address: ea:3c:65:c8:f5:05 [ 333.896534][ T573] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 333.913176][ T573] usb 3-1: USB disconnect, device number 59 [ 334.098434][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.127908][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.511542][ T1280] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 334.691948][ T1280] usb 1-1: config 0 interface 0 has no altsetting 0 [ 334.703965][ T1245] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 334.711068][ T1280] usb 1-1: New USB device found, idVendor=06a1, idProduct=0cd7, bcdDevice= 0.00 [ 334.724640][ T1280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.739056][ T1280] usb 1-1: config 0 descriptor?? [ 334.873955][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 334.901303][ T1245] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 334.916572][ T1245] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 334.925349][ T1245] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 334.942320][ T1245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 334.954545][ T1245] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 334.965682][ T1245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.988077][ T1245] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 335.000430][ T1245] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 335.014969][ T1245] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 335.025312][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.036941][ T1245] usb 3-1: config 0 descriptor?? [ 335.043754][ T6511] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 335.077845][ T1245] usblp0: Disabling reads from problematic bidirectional printer [ 335.238839][ T383] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 335.258082][ T383] cdc_ncm 6-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 335.265548][ T383] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 335.428265][ T46] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 335.460302][ T383] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 335.478203][ T1280] usbhid 1-1:0.0: can't add hid device: -71 [ 335.479254][ T383] usb 6-1: USB disconnect, device number 71 [ 335.492677][ T383] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 335.502262][ T1280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 335.518574][ T1280] usb 1-1: USB disconnect, device number 94 [ 335.603237][ T46] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 335.614432][ T46] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.630762][ T46] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 335.646526][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.655811][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.664699][ T46] usb 5-1: SerialNumber: syz [ 336.018033][ T46] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 336.027067][ T46] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 336.050834][ T46] usb 5-1: USB disconnect, device number 92 [ 336.589990][ T347] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 336.760628][ T347] usb 6-1: Using ep0 maxpacket: 32 [ 336.769454][ T347] usb 6-1: config index 0 descriptor too short (expected 15396, got 36) [ 336.777985][ T347] usb 6-1: config 98 has an invalid interface number: 196 but max is 11 [ 336.786452][ T347] usb 6-1: config 98 has an invalid descriptor of length 218, skipping remainder of the config [ 336.796876][ T347] usb 6-1: config 98 has 1 interface, different from the descriptor's value: 12 [ 336.806000][ T347] usb 6-1: config 98 has no interface number 0 [ 336.812317][ T347] usb 6-1: config 98 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.825648][ T347] usb 6-1: config 98 interface 196 has no altsetting 0 [ 336.838444][ T347] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 336.847724][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.855758][ T347] usb 6-1: Product: syz [ 336.861249][ T347] usb 6-1: Manufacturer: syz [ 336.865893][ T347] usb 6-1: SerialNumber: syz [ 336.995492][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 337.400074][ T1280] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 337.519965][ T10] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 337.526781][ T1245] usblp 3-1:0.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 337.542086][ T36] kauditd_printk_skb: 764 callbacks suppressed [ 337.542107][ T36] audit: type=1400 audit(2000004471.830:14323): avc: denied { ioctl } for pid=6561 comm="syz.4.1907" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.568097][ T1245] usb 3-1: USB disconnect, device number 60 [ 337.590731][ T1245] usblp0: removed [ 337.599131][ T1280] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.610817][ T1280] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.651010][ T36] audit: type=1400 audit(2000004471.830:14324): avc: denied { ioctl } for pid=6561 comm="syz.4.1907" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.676213][ T1280] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.682938][ T1280] usb 1-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 337.693365][ T1280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.701623][ T36] audit: type=1400 audit(2000004471.830:14325): avc: denied { ioctl } for pid=6561 comm="syz.4.1907" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.732635][ T36] audit: type=1400 audit(2000004471.858:14326): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 337.733273][ T1280] usb 1-1: config 0 descriptor?? [ 337.775672][ T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 337.777480][ T36] audit: type=1400 audit(2000004471.868:14327): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 337.794603][ T10] usb 5-1: config 0 has no interface number 0 [ 337.836303][ T10] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 337.854537][ T10] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 337.878458][ T10] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 337.879614][ T36] audit: type=1400 audit(2000004471.868:14328): avc: denied { ioctl } for pid=6559 comm="syz.0.1906" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.911921][ T10] usb 5-1: config 0 interface 2 has no altsetting 0 [ 337.936225][ T36] audit: type=1400 audit(2000004471.868:14329): avc: denied { ioctl } for pid=6559 comm="syz.0.1906" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.956763][ T10] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 337.965890][ T36] audit: type=1400 audit(2000004471.868:14330): avc: denied { ioctl } for pid=6559 comm="syz.0.1906" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.994558][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.002357][ T36] audit: type=1400 audit(2000004471.868:14331): avc: denied { ioctl } for pid=6559 comm="syz.0.1906" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.029170][ T10] usb 5-1: Product: syz [ 338.035482][ T36] audit: type=1400 audit(2000004471.877:14332): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.038496][ T10] usb 5-1: Manufacturer: syz [ 338.075825][ T10] usb 5-1: SerialNumber: syz [ 338.083694][ T10] usb 5-1: config 0 descriptor?? [ 338.090436][ T6562] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 338.099324][ T6562] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 338.287607][ T1280] betop 0003:8380:1850.0051: item fetching failed at offset 0/2 [ 338.295710][ T1280] betop 0003:8380:1850.0051: parse failed [ 338.301543][ T1280] betop 0003:8380:1850.0051: probe with driver betop failed with error -22 [ 338.345615][ T10] usb 5-1: USB disconnect, device number 93 [ 338.369399][ T6435] udevd[6435]: setting owner of /dev/bus/usb/005/093 to uid=0, gid=0 failed: No such file or directory [ 338.370182][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 338.424406][ T6436] udevd[6436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.504552][ T798] usb 1-1: USB disconnect, device number 95 [ 338.551201][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 338.559921][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.571743][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.581618][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.594683][ T9] usb 3-1: New USB device found, idVendor=56f8, idProduct=07da, bcdDevice= 0.00 [ 338.603961][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.614457][ T9] usb 3-1: config 0 descriptor?? [ 339.054489][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.073609][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.086724][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.096934][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.104730][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.113794][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.122341][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.131153][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.146863][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.156003][ T9] hid-multitouch 0003:56F8:07DA.0052: unknown main item tag 0x0 [ 339.169431][ T798] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 339.179975][ T9] hid-multitouch 0003:56F8:07DA.0052: hidraw0: USB HID v0.00 Device [HID 56f8:07da] on usb-dummy_hcd.2-1/input0 [ 339.340810][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 339.356386][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.382580][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.392390][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.405358][ T798] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 339.414458][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.424752][ T798] usb 5-1: config 0 descriptor?? [ 339.457197][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 339.482600][ T1280] usb 3-1: USB disconnect, device number 61 [ 339.546568][ T347] ipheth 6-1:98.196: Unable to find endpoints [ 339.565854][ T347] usb 6-1: USB disconnect, device number 72 [ 339.606403][ T9] usb 1-1: device descriptor read/64, error -71 [ 339.669217][ T6586] netlink: 'syz.2.1914': attribute type 4 has an invalid length. [ 339.872879][ T9] usb 1-1: device descriptor read/64, error -71 [ 339.892370][ T798] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0053/input/input52 [ 339.914274][ T798] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0053/input/input53 [ 339.935054][ T798] kye 0003:0458:5011.0053: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 340.118042][ T347] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 340.139349][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 340.288560][ T9] usb 1-1: device descriptor read/64, error -71 [ 340.303335][ T347] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 340.312080][ T347] usb 6-1: config 0 has no interface number 0 [ 340.318220][ T347] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 340.329820][ T347] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.346465][ T347] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 340.356245][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.365317][ T347] usb 6-1: Product: syz [ 340.369610][ T347] usb 6-1: Manufacturer: syz [ 340.374424][ T347] usb 6-1: SerialNumber: syz [ 340.380807][ T347] usb 6-1: config 0 descriptor?? [ 340.388521][ T6591] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 340.402053][ T347] usb-storage 6-1:0.20: USB Mass Storage device detected [ 340.411464][ T347] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 340.423867][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.432541][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.480449][ T1280] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 340.555328][ T9] usb 1-1: device descriptor read/64, error -71 [ 340.617376][ T798] usb 6-1: USB disconnect, device number 73 [ 340.654399][ T1280] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 340.664161][ T1280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.673504][ T9] usb usb1-port1: attempt power cycle [ 340.681535][ T1280] usb 3-1: config 0 descriptor?? [ 341.002834][ C0] kye 0003:0458:5011.0053: usb_submit_urb(ctrl) failed: -1 [ 341.035112][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 341.058767][ T9] usb 1-1: device descriptor read/8, error -71 [ 341.208443][ T9] usb 1-1: device descriptor read/8, error -71 [ 341.471743][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 341.503407][ T9] usb 1-1: device descriptor read/8, error -71 [ 341.571368][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.589277][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.655788][ T9] usb 1-1: device descriptor read/8, error -71 [ 341.757822][ T6619] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 341.766250][ T6619] overlayfs: missing 'lowerdir' [ 341.780913][ T9] usb usb1-port1: unable to enumerate USB device [ 341.825135][ T46] usb 5-1: USB disconnect, device number 94 [ 341.827768][ T573] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 342.047531][ T573] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 342.064393][ T573] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 342.076863][ T573] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 342.100794][ T573] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.120894][ T573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.130418][ T573] usb 6-1: Product: syz [ 342.135887][ T573] usb 6-1: Manufacturer: syz [ 342.140631][ T573] usb 6-1: SerialNumber: syz [ 342.154426][ T573] cdc_mbim 6-1:1.0: skipping garbage [ 342.178121][ T6632] fuse: Bad value for 'user_id' [ 342.183202][ T6632] fuse: Bad value for 'user_id' [ 342.190044][ T6632] overlay: Unknown parameter 'appraise_type' [ 342.379931][ T6617] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.387885][ T6617] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.422130][ T573] cdc_mbim 6-1:1.0: bind() failure [ 342.447014][ T573] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 342.475863][ T573] cdc_ncm 6-1:1.1: bind() failure [ 342.493131][ T573] usb 6-1: USB disconnect, device number 74 [ 342.548226][ T1245] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 342.726551][ T1245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 342.742614][ T1245] usb 5-1: not running at top speed; connect to a high speed hub [ 342.760817][ T1245] usb 5-1: config 4 has an invalid interface number: 32 but max is 0 [ 342.782702][ T1245] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 342.794094][ T1245] usb 5-1: config 4 has no interface number 0 [ 342.805332][ T1245] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 342.825400][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.841820][ T1245] usb 5-1: Product: syz [ 342.850656][ T1245] usb 5-1: Manufacturer: syz [ 342.859853][ T1245] usb 5-1: SerialNumber: syz [ 342.911314][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 342.911333][ T36] audit: type=1400 audit(2000004476.868:14999): avc: denied { ioctl } for pid=6652 comm="syz.0.1933" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.961409][ T36] audit: type=1400 audit(2000004476.906:15000): avc: denied { read write } for pid=4333 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.014563][ T36] audit: type=1400 audit(2000004476.906:15001): avc: denied { read write open } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.042807][ T36] audit: type=1400 audit(2000004476.906:15002): avc: denied { ioctl } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.091720][ T36] audit: type=1400 audit(2000004476.953:15003): avc: denied { read write } for pid=6659 comm="syz.5.1935" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.116705][ T36] audit: type=1400 audit(2000004476.990:15004): avc: denied { read write open } for pid=6659 comm="syz.5.1935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.123940][ T46] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 343.151743][ T36] audit: type=1400 audit(2000004476.990:15005): avc: denied { ioctl } for pid=6652 comm="syz.0.1933" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.170373][ T1245] usb 5-1: USB disconnect, device number 95 [ 343.190259][ T36] audit: type=1400 audit(2000004476.990:15006): avc: denied { ioctl } for pid=6659 comm="syz.5.1935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.220284][ T36] audit: type=1400 audit(2000004476.990:15007): avc: denied { ioctl } for pid=6659 comm="syz.5.1935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.245660][ T36] audit: type=1400 audit(2000004476.990:15008): avc: denied { ioctl } for pid=6659 comm="syz.5.1935" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.337115][ T347] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 343.352520][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.363685][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 343.377700][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 343.386977][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.397857][ T46] usb 1-1: config 0 descriptor?? [ 343.427626][ T1280] usb 3-1: Cannot set autoneg [ 343.444765][ T1280] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 343.484235][ T1280] usb 3-1: USB disconnect, device number 62 [ 343.507536][ T347] usb 6-1: Using ep0 maxpacket: 32 [ 343.515976][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.529170][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.540802][ T347] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.551413][ T347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.562234][ T347] usb 6-1: config 0 descriptor?? [ 343.576660][ T347] hub 6-1:0.0: USB hub found [ 343.584041][ T6663] incfs: Error accessing: ./file0. [ 343.589574][ T6663] incfs: mount failed -20 [ 343.599980][ T6663] 9pnet_fd: p9_fd_create_unix (6663): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 343.764620][ T6671] rust_binder: inc_ref_done called when no active inc_refs [ 343.816528][ T347] hub 6-1:0.0: 1 port detected [ 343.853380][ T46] ryos 0003:1E7D:31CE.0054: hidraw0: USB HID v0.06 Device [HID 1e7d:31ce] on usb-dummy_hcd.0-1/input0 [ 344.231848][ T1280] usb 1-1: USB disconnect, device number 100 [ 344.554592][ T573] hub 6-1:0.0: activate --> -90 [ 345.213831][ T573] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 345.215198][ T1245] usb 6-1: USB disconnect, device number 75 [ 345.221046][ T573] usb 6-1-port1: attempt power cycle [ 345.500707][ T1280] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 345.596634][ T347] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 345.660567][ T1280] usb 1-1: Using ep0 maxpacket: 16 [ 345.674921][ T1280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.702935][ T1280] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 345.715658][ T1280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.735420][ T1280] usb 1-1: config 0 descriptor?? [ 345.767129][ T347] usb 5-1: Using ep0 maxpacket: 8 [ 345.782023][ T347] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 345.799108][ T347] usb 5-1: config 0 has no interface number 0 [ 345.831840][ T347] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 345.840987][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.864804][ T6726] netlink: 'syz.5.1955': attribute type 6 has an invalid length. [ 345.873726][ T347] usb 5-1: Product: syz [ 345.877970][ T347] usb 5-1: Manufacturer: syz [ 345.882615][ T347] usb 5-1: SerialNumber: syz [ 345.901005][ T6726] netlink: 'syz.5.1955': attribute type 6 has an invalid length. [ 345.918640][ T347] usb 5-1: config 0 descriptor?? [ 346.170242][ T347] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 346.189187][ T347] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 346.200504][ T1280] hkems 0003:2006:0118.0055: unbalanced delimiter at end of report description [ 346.210485][ T1280] hkems 0003:2006:0118.0055: parse failed [ 346.218045][ T347] usb 5-1: USB disconnect, device number 96 [ 346.236160][ T1280] hkems 0003:2006:0118.0055: probe with driver hkems failed with error -22 [ 346.246783][ T46] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 346.406677][ T46] usb 6-1: device descriptor read/64, error -71 [ 346.429860][ T1245] usb 1-1: USB disconnect, device number 101 [ 346.683827][ T46] usb 6-1: device descriptor read/64, error -71 [ 346.961060][ T46] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 347.003554][ T1280] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 347.110217][ T46] usb 6-1: device descriptor read/64, error -71 [ 347.187350][ T1280] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 347.198325][ T1280] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.204974][ T1280] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 347.214363][ T1280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.227649][ T1280] usb 5-1: config 0 descriptor?? [ 347.236889][ T6734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 347.302013][ T1245] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 347.387277][ T46] usb 6-1: device descriptor read/64, error -71 [ 347.486465][ T1245] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 347.496077][ T1245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.504121][ T1245] usb 1-1: Product: syz [ 347.509026][ T46] usb usb6-port1: attempt power cycle [ 347.515544][ T1245] usb 1-1: Manufacturer: syz [ 347.522259][ T1245] usb 1-1: SerialNumber: syz [ 347.707111][ T1280] lenovo 0003:17EF:6062.0056: ignoring exceeding usage max [ 347.728504][ T1280] lenovo 0003:17EF:6062.0056: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 347.888236][ T46] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 347.933094][ T46] usb 6-1: device descriptor read/8, error -71 [ 348.072714][ T46] usb 6-1: device descriptor read/8, error -71 [ 348.185744][ T1245] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:6a:92:cb:e8:87 [ 348.203313][ T1245] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 348.272467][ T36] kauditd_printk_skb: 514 callbacks suppressed [ 348.272487][ T36] audit: type=1400 audit(2000004481.897:15523): avc: denied { ioctl } for pid=6730 comm="syz.5.1956" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 348.335887][ T46] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 348.348489][ T36] audit: type=1400 audit(2000004481.925:15524): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 348.394864][ T46] usb 6-1: device descriptor read/8, error -71 [ 348.410615][ T36] audit: type=1400 audit(2000004481.934:15525): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.453169][ T36] audit: type=1400 audit(2000004481.934:15526): avc: denied { search } for pid=149 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.459371][ T347] usb 5-1: USB disconnect, device number 97 [ 348.507892][ T36] audit: type=1400 audit(2000004481.934:15527): avc: denied { search } for pid=149 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.561142][ T46] usb 6-1: device descriptor read/8, error -71 [ 348.581031][ T36] audit: type=1400 audit(2000004481.934:15528): avc: denied { read } for pid=149 comm="dhcpcd" name="n26" dev="tmpfs" ino=7636 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.666301][ T36] audit: type=1400 audit(2000004481.934:15529): avc: denied { read open } for pid=149 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=7636 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.696429][ T6743] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.697271][ T6745] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.709725][ T6732] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.716363][ T46] usb usb6-port1: unable to enumerate USB device [ 348.986119][ T347] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 349.156602][ T347] usb 5-1: Using ep0 maxpacket: 8 [ 349.178761][ T347] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 349.190839][ T347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.197642][ T347] usb 5-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 349.206837][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.217815][ T347] usb 5-1: config 0 descriptor?? [ 349.407521][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.416733][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.433622][ C1] usb 1-1: eth1: intr status -71 [ 349.438851][ C1] usb 1-1: eth1: intr status -71 [ 349.443889][ C1] usb 1-1: eth1: intr status -71 [ 349.451234][ C1] usb 1-1: eth1: intr status -71 [ 349.456357][ C1] usb 1-1: eth1: intr status -71 [ 349.461573][ C1] usb 1-1: eth1: intr status -71 [ 349.466873][ C1] usb 1-1: eth1: intr status -71 [ 349.471920][ C1] usb 1-1: eth1: intr status -71 [ 349.477001][ T46] usb 1-1: USB disconnect, device number 102 [ 349.486364][ C1] usb 1-1: eth1: intr status -71 [ 349.756095][ T347] wacom 0003:056A:4004.0057: hidraw0: USB HID v0.02 Device [HID 056a:4004] on usb-dummy_hcd.4-1/input0 [ 350.147874][ T330] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 350.169205][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 350.322281][ T330] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 350.341267][ T330] usb 6-1: config 0 has no interface number 0 [ 350.344818][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 350.347570][ T330] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 350.368452][ T9] usb 1-1: config 0 has no interface number 0 [ 350.388725][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 350.406641][ T330] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.426038][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.435651][ T9] usb 1-1: Product: syz [ 350.444501][ T9] usb 1-1: Manufacturer: syz [ 350.448060][ T330] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 350.456355][ T9] usb 1-1: SerialNumber: syz [ 350.467045][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.468350][ T9] usb 1-1: config 0 descriptor?? [ 350.481505][ T330] usb 6-1: Product: syz [ 350.485726][ T330] usb 6-1: Manufacturer: syz [ 350.510272][ T330] usb 6-1: SerialNumber: syz [ 350.520167][ T330] usb 6-1: config 0 descriptor?? [ 350.533367][ T6773] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 350.555432][ T330] usb-storage 6-1:0.20: USB Mass Storage device detected [ 350.595279][ T330] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 350.755448][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.780224][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.798574][ T330] scsi host1: usb-storage 6-1:0.20 [ 350.818948][ T330] usb 6-1: USB disconnect, device number 84 [ 351.347503][ T9] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 351.364817][ T9] usb 1-1: No valid video chain found. [ 351.388608][ T9] usb 1-1: USB disconnect, device number 103 [ 351.861873][ T6803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.862816][ T6803] netlink: 'syz.0.1970': attribute type 4 has an invalid length. [ 351.909367][ T46] usb 5-1: USB disconnect, device number 98 [ 352.407517][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 352.503445][ T347] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 352.570330][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.577184][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 352.610015][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.620934][ T9] usb 5-1: config 0 descriptor?? [ 352.687770][ T347] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2632, setting to 64 [ 352.716792][ T347] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 352.749282][ T347] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.758408][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.780569][ T347] usb 1-1: Product: syz [ 352.784820][ T347] usb 1-1: Manufacturer: syz [ 352.789461][ T347] usb 1-1: SerialNumber: syz [ 353.037307][ T6817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 353.068232][ T9] wacom 0003:056A:0028.0058: unknown main item tag 0x0 [ 353.089685][ T9] wacom 0003:056A:0028.0058: unknown main item tag 0x0 [ 353.096693][ T9] wacom 0003:056A:0028.0058: unknown main item tag 0x0 [ 353.111350][ T9] wacom 0003:056A:0028.0058: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 353.144682][ T9] wacom 0003:056A:0028.0058: hidraw0: USB HID v0.02 Device [HID 056a:0028] on usb-dummy_hcd.4-1/input0 [ 353.165238][ T9] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0028.0058/input/input57 [ 353.284965][ T1245] usb 5-1: USB disconnect, device number 99 [ 353.620751][ T36] kauditd_printk_skb: 709 callbacks suppressed [ 353.620784][ T36] audit: type=1400 audit(2000004486.907:16210): avc: denied { create } for pid=6819 comm="syz.5.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.667859][ T36] audit: type=1400 audit(2000004486.907:16211): avc: denied { write } for pid=6819 comm="syz.5.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.689861][ T36] audit: type=1400 audit(2000004486.916:16212): avc: denied { read write } for pid=6819 comm="syz.5.1976" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.714788][ T6817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 353.722943][ T36] audit: type=1400 audit(2000004486.916:16213): avc: denied { read write open } for pid=6819 comm="syz.5.1976" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.749640][ T36] audit: type=1400 audit(2000004486.916:16214): avc: denied { ioctl } for pid=6819 comm="syz.5.1976" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.774886][ T36] audit: type=1400 audit(2000004486.916:16215): avc: denied { ioctl } for pid=6819 comm="syz.5.1976" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.801438][ T36] audit: type=1400 audit(2000004486.916:16216): avc: denied { ioctl } for pid=6819 comm="syz.5.1976" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.827504][ T36] audit: type=1400 audit(2000004486.916:16217): avc: denied { ioctl } for pid=6819 comm="syz.5.1976" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.853334][ T36] audit: type=1400 audit(2000004487.001:16218): avc: denied { ioctl } for pid=6816 comm="syz.0.1975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.889109][ T573] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 353.899801][ T36] audit: type=1400 audit(2000004487.001:16219): avc: denied { ioctl } for pid=6816 comm="syz.0.1975" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.965233][ T347] cdc_ncm 1-1:1.0: bind() failure [ 353.971673][ T347] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 353.981300][ T347] cdc_ncm 1-1:1.1: bind() failure [ 353.994317][ T6822] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1977'. [ 354.059608][ T573] usb 6-1: device descriptor read/64, error -71 [ 354.115990][ T6824] tipc: Enabled bearer , priority 0 [ 354.148714][ T6825] tipc: Resetting bearer [ 354.193322][ T347] usb 1-1: USB disconnect, device number 104 [ 354.256578][ T6823] tipc: Disabling bearer [ 354.337646][ T573] usb 6-1: device descriptor read/64, error -71 [ 354.593045][ T573] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 354.773749][ T573] usb 6-1: device descriptor read/64, error -71 [ 355.029565][ T1245] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 355.029565][ T573] usb 6-1: device descriptor read/64, error -71 [ 355.061582][ T46] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 355.168143][ T573] usb usb6-port1: attempt power cycle [ 355.203337][ T1245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.214064][ T1245] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 355.223989][ T1245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.233491][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 355.244041][ T1245] usb 5-1: config 0 descriptor?? [ 355.264052][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 355.275321][ T1245] usb 5-1: bad CDC descriptors [ 355.285357][ T46] usb 1-1: config 34 has an invalid interface number: 50 but max is 0 [ 355.304506][ T46] usb 1-1: config 34 has an invalid descriptor of length 0, skipping remainder of the config [ 355.315753][ T46] usb 1-1: config 34 has no interface number 0 [ 355.322875][ T46] usb 1-1: config 34 interface 50 altsetting 167 endpoint 0x8 has invalid wMaxPacketSize 0 [ 355.333794][ T46] usb 1-1: config 34 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.347927][ T46] usb 1-1: config 34 interface 50 has no altsetting 0 [ 355.358954][ T46] usb 1-1: New USB device found, idVendor=00ca, idProduct=0000, bcdDevice= 0.00 [ 355.375354][ T46] usb 1-1: New USB device strings: Mfr=0, Product=15, SerialNumber=54 [ 355.392719][ T46] usb 1-1: Product: syz [ 355.403353][ T46] usb 1-1: SerialNumber: syz [ 355.530580][ T573] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 355.555087][ T573] usb 6-1: device descriptor read/8, error -71 [ 355.637987][ T46] usb 1-1: MIDIStreaming interface descriptor not found [ 355.665602][ T46] usb 1-1: USB disconnect, device number 105 [ 355.693491][ T573] usb 6-1: device descriptor read/8, error -71 [ 355.755971][ T6435] udevd[6435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:34.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.956945][ T573] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 355.988006][ T573] usb 6-1: device descriptor read/8, error -71 [ 356.130056][ T573] usb 6-1: device descriptor read/8, error -71 [ 356.255308][ T573] usb usb6-port1: unable to enumerate USB device [ 356.660362][ T1245] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 356.855634][ T1245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.887803][ T1245] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.907878][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.942343][ T1245] usb 1-1: config 0 descriptor?? [ 357.310542][ T573] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 357.393044][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.411203][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.434039][ T1245] keytouch 0003:0926:3333.0059: fixing up Keytouch IEC report descriptor [ 357.444387][ T1245] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0059/input/input60 [ 357.487302][ T573] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.503625][ T573] usb 6-1: not running at top speed; connect to a high speed hub [ 357.524357][ T573] usb 6-1: config 2 has an invalid interface number: 212 but max is 1 [ 357.536087][ T1245] keytouch 0003:0926:3333.0059: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 357.550319][ T573] usb 6-1: config 2 has an invalid interface number: 226 but max is 1 [ 357.572881][ T573] usb 6-1: config 2 has no interface number 0 [ 357.598295][ T573] usb 6-1: config 2 has no interface number 1 [ 357.609614][ T573] usb 6-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 357.636917][ T573] usb 6-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 357.659386][ T9] usb 1-1: USB disconnect, device number 106 [ 357.693849][ T573] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 357.736866][ T573] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 357.739484][ T6854] fido_id[6854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 357.758270][ T573] usb 6-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 357.790138][ T573] usb 6-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.811778][ T573] usb 6-1: config 2 interface 212 has no altsetting 0 [ 357.822904][ T573] usb 6-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 357.832031][ T573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.854092][ T573] usb 6-1: Product: syz [ 357.858327][ T573] usb 6-1: Manufacturer: syz [ 357.862955][ T573] usb 6-1: SerialNumber: syz [ 357.938281][ T1245] usb 5-1: USB disconnect, device number 100 [ 358.120883][ T573] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.226/input/input61 [ 358.162407][ T573] usb 6-1: USB disconnect, device number 89 [ 358.162438][ C1] xpad 6-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 358.856069][ T798] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 358.965279][ T36] kauditd_printk_skb: 437 callbacks suppressed [ 358.965300][ T36] audit: type=1400 audit(2000004491.926:16657): avc: denied { mounton } for pid=6887 comm="syz.5.1998" path="/syzcgroup/cpu/syz5/syz1/file0" dev="cgroup" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 358.974147][ T6888] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 359.020205][ T36] audit: type=1400 audit(2000004491.973:16658): avc: denied { mount } for pid=6887 comm="syz.5.1998" name="/" dev="overlay" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 359.037393][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 359.057528][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.076113][ T36] audit: type=1400 audit(2000004492.011:16659): avc: denied { ioctl } for pid=6875 comm="syz.4.1993" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.079035][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.141851][ T36] audit: type=1400 audit(2000004492.011:16660): avc: denied { ioctl } for pid=6875 comm="syz.4.1993" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.147202][ T798] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 359.183725][ T6890] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1999'. [ 359.192923][ T6890] tc_dump_action: action bad kind [ 359.207771][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.228717][ T798] usb 5-1: config 0 descriptor?? [ 359.232219][ T36] audit: type=1400 audit(2000004492.011:16661): avc: denied { ioctl } for pid=6875 comm="syz.4.1993" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.306031][ T36] audit: type=1400 audit(2000004492.011:16662): avc: denied { ioctl } for pid=6875 comm="syz.4.1993" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.333569][ T36] audit: type=1400 audit(2000004492.011:16663): avc: denied { ioctl } for pid=6875 comm="syz.4.1993" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.360278][ T36] audit: type=1400 audit(2000004492.029:16664): avc: denied { ioctl } for pid=6875 comm="syz.4.1993" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.386876][ T36] audit: type=1400 audit(2000004492.067:16665): avc: denied { read write } for pid=4333 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.413562][ T36] audit: type=1400 audit(2000004492.067:16666): avc: denied { read write open } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 359.695407][ T798] wacom 0003:056A:00F8.005A: unknown main item tag 0x2 [ 359.706134][ T798] wacom 0003:056A:00F8.005A: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 360.593421][ T573] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 360.666472][ T329] bridge_slave_1: left allmulticast mode [ 360.672876][ T329] bridge_slave_1: left promiscuous mode [ 360.679403][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.687177][ T329] bridge_slave_0: left allmulticast mode [ 360.693285][ T329] bridge_slave_0: left promiscuous mode [ 360.698986][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.764001][ T573] usb 6-1: Using ep0 maxpacket: 32 [ 360.772908][ T573] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.784036][ T573] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.794245][ T573] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.803460][ T573] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.814560][ T573] usb 6-1: config 0 descriptor?? [ 360.820721][ T329] tipc: Left network mode [ 360.829260][ T573] hub 6-1:0.0: USB hub found [ 360.835024][ T329] veth1_macvtap: left promiscuous mode [ 360.841685][ T329] veth0_vlan: left promiscuous mode [ 360.972737][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.980084][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.987319][ T6911] bridge_slave_0: entered allmulticast mode [ 360.995828][ T6911] bridge_slave_0: entered promiscuous mode [ 361.005975][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.013244][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.021030][ T6911] bridge_slave_1: entered allmulticast mode [ 361.029110][ T6911] bridge_slave_1: entered promiscuous mode [ 361.052545][ T573] hub 6-1:0.0: 1 port detected [ 361.179936][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.187242][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.195049][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.202432][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.280050][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.288342][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.307585][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.314746][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.327530][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.335125][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.443119][ T6911] veth0_vlan: entered promiscuous mode [ 361.489394][ T6911] veth1_macvtap: entered promiscuous mode [ 361.729240][ T9] hub 6-1:0.0: activate --> -90 [ 361.754369][ T46] usb 5-1: USB disconnect, device number 101 [ 361.865610][ T6927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 361.883379][ T798] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 362.064358][ T798] usb 7-1: Using ep0 maxpacket: 8 [ 362.074732][ T798] usb 7-1: config 8 has an invalid interface number: 198 but max is 2 [ 362.083141][ T798] usb 7-1: config 8 has an invalid interface number: 234 but max is 2 [ 362.091650][ T798] usb 7-1: config 8 has an invalid interface number: 3 but max is 2 [ 362.099811][ T798] usb 7-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 362.110524][ T798] usb 7-1: config 8 has no interface number 0 [ 362.116637][ T798] usb 7-1: config 8 has no interface number 1 [ 362.122769][ T798] usb 7-1: config 8 has no interface number 2 [ 362.128939][ T798] usb 7-1: config 8 interface 198 altsetting 250 has a duplicate endpoint with address 0x7, skipping [ 362.139999][ T798] usb 7-1: config 8 interface 198 altsetting 250 bulk endpoint 0x5 has invalid maxpacket 64 [ 362.150319][ T798] usb 7-1: config 8 interface 198 altsetting 250 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 362.161771][ T798] usb 7-1: config 8 interface 198 altsetting 250 endpoint 0x4 has invalid wMaxPacketSize 0 [ 362.166181][ T9] usb 6-1-port1: cannot reset (err = -71) [ 362.166581][ T573] usb 6-1: USB disconnect, device number 90 [ 362.171926][ T798] usb 7-1: config 8 interface 198 altsetting 250 has a duplicate endpoint with address 0x5, skipping [ 362.184191][ T798] usb 7-1: config 8 interface 234 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.202948][ T9] usb 6-1-port1: attempt power cycle [ 362.220555][ T798] usb 7-1: too many endpoints for config 8 interface 3 altsetting 6: 237, using maximum allowed: 30 [ 362.232581][ T798] usb 7-1: config 8 interface 3 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 237 [ 362.245854][ T798] usb 7-1: config 8 interface 198 has no altsetting 0 [ 362.252698][ T798] usb 7-1: config 8 interface 234 has no altsetting 0 [ 362.259619][ T798] usb 7-1: config 8 interface 3 has no altsetting 0 [ 362.270583][ T798] usb 7-1: New USB device found, idVendor=0738, idProduct=479e, bcdDevice=fb.ed [ 362.279762][ T798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.287802][ T798] usb 7-1: Product: 、 [ 362.292070][ T798] usb 7-1: Manufacturer: ᱐蓼⵽ [ 362.297229][ T798] usb 7-1: SerialNumber: syz [ 362.306085][ T6922] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 362.550613][ T798] usb 7-1: USB disconnect, device number 2 [ 363.034308][ T573] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 363.066664][ T798] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 363.196997][ T573] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 363.205823][ T573] usb 6-1: config 0 has no interface number 0 [ 363.215050][ T573] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 363.226770][ T573] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.243073][ T798] usb 5-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 363.243104][ T573] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 363.254968][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.269313][ T573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.269344][ T573] usb 6-1: Product: syz [ 363.269361][ T573] usb 6-1: Manufacturer: syz [ 363.283769][ T798] usb 5-1: config 0 descriptor?? [ 363.322015][ T573] usb 6-1: SerialNumber: syz [ 363.332284][ T573] usb 6-1: config 0 descriptor?? [ 363.355962][ T6932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 363.369560][ T573] usb-storage 6-1:0.20: USB Mass Storage device detected [ 363.418413][ T573] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 363.461466][ T6951] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 363.595623][ T6932] can0: slcan on ptm0. [ 363.620801][ T6954] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2015'. [ 363.630049][ T6954] netlink: 'syz.6.2015': attribute type 6 has an invalid length. [ 363.645787][ T6954] netlink: 'syz.6.2015': attribute type 5 has an invalid length. [ 363.653648][ T6954] netlink: 'syz.6.2015': attribute type 4 has an invalid length. [ 363.695167][ T6931] can0 (unregistered): slcan off ptm0. [ 363.717577][ T573] scsi host1: usb-storage 6-1:0.20 [ 363.729308][ T573] usb 6-1: USB disconnect, device number 95 [ 363.959365][ T798] usbhid 5-1:0.0: can't add hid device: -71 [ 363.968093][ T798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.977846][ T798] usb 5-1: USB disconnect, device number 102 [ 364.322352][ T36] kauditd_printk_skb: 433 callbacks suppressed [ 364.322372][ T36] audit: type=1400 audit(2000004496.946:17100): avc: denied { read write } for pid=4333 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.353190][ T36] audit: type=1400 audit(2000004496.964:17101): avc: denied { read write open } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.380270][ T36] audit: type=1400 audit(2000004496.964:17102): avc: denied { ioctl } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.419698][ T6969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6969 comm=syz.5.2019 [ 364.450358][ T36] audit: type=1400 audit(2000004497.068:17103): avc: denied { read write } for pid=4333 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.525578][ T36] audit: type=1400 audit(2000004497.096:17104): avc: denied { read write open } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.552607][ T36] audit: type=1400 audit(2000004497.096:17105): avc: denied { ioctl } for pid=4333 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.580126][ T36] audit: type=1400 audit(2000004497.124:17106): avc: denied { read write } for pid=3411 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.605893][ T36] audit: type=1400 audit(2000004497.124:17107): avc: denied { read write open } for pid=3411 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.706222][ T36] audit: type=1400 audit(2000004497.124:17108): avc: denied { ioctl } for pid=3411 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.780737][ T36] audit: type=1400 audit(2000004497.133:17109): avc: denied { unmount } for pid=6911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 365.155332][ T573] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 365.325891][ T573] usb 7-1: Using ep0 maxpacket: 8 [ 365.341745][ T573] usb 7-1: unable to get BOS descriptor or descriptor too short [ 365.360095][ T573] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.378696][ T573] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.400487][ T573] usb 7-1: config 1 has no interface number 1 [ 365.406705][ T573] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 365.424221][ T573] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.452157][ T573] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.469005][ T573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.485374][ T573] usb 7-1: Product: ࠔ [ 365.491974][ T573] usb 7-1: Manufacturer: 薪琱겙⴩ꊿ쒊쑔ﲛ鶩퓯䗉슽쫋Ѷ筪셌攭㬥賮社缗畗뭂耭簶窚嵁驸쒺旿ﰦ㏟驪뛴ᇉᛧ誽ບ♎陖ỗሦ倝ኵ牀㞃䏵慃쎟퀐ၳ௞녭璊䑈攣㥿㺏訹攛覃쟗鴏ⰱ쉨ꓛ筃涐皅塉ө [ 365.518357][ T573] usb 7-1: SerialNumber: syz [ 365.698920][ T9] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 365.756034][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.773786][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.794712][ T573] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 365.816152][ T573] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 365.827335][ T573] usb 7-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 365.834808][ T573] usb 7-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 365.853393][ T573] usb 7-1: USB disconnect, device number 3 [ 365.864032][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.885855][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.905159][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.929030][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.940295][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.956590][ T9] usb 6-1: config 0 descriptor?? [ 366.008579][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 366.398340][ T9] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving [ 366.426300][ T9] plantronics 0003:047F:FFFF.005B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 366.942460][ T798] usb 6-1: USB disconnect, device number 96 [ 367.031296][ T573] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 367.204494][ T573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.215521][ T573] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.225626][ T573] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 367.235016][ T573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.244994][ T573] usb 7-1: config 0 descriptor?? [ 367.654499][ T7030] syzkaller0: entered allmulticast mode [ 367.663420][ T7030] syzkaller0: entered promiscuous mode [ 367.672885][ T7030] syzkaller0 (unregistering): left promiscuous mode [ 367.679583][ T7030] syzkaller0 (unregistering): left allmulticast mode [ 367.689882][ T573] cp2112 0003:10C4:EA90.005C: unknown main item tag 0x0 [ 367.699699][ T573] cp2112 0003:10C4:EA90.005C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 367.809348][ T798] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 367.903548][ T573] cp2112 0003:10C4:EA90.005C: Part Number: 0x82 Device Version: 0xFE [ 368.000917][ T798] usb 5-1: config 24 has 1 interface, different from the descriptor's value: 2 [ 368.013964][ T798] usb 5-1: config 24 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 368.025263][ T798] usb 5-1: config 24 interface 0 has no altsetting 0 [ 368.032502][ T798] usb 5-1: config 24 interface 0 has no altsetting 1 [ 368.050259][ T798] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 368.062402][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.070747][ T798] usb 5-1: Product: syz [ 368.075024][ T798] usb 5-1: Manufacturer: syz [ 368.080173][ T798] usb 5-1: SerialNumber: syz [ 368.119276][ T573] cp2112 0003:10C4:EA90.005C: error requesting SMBus config [ 368.130006][ T573] cp2112 0003:10C4:EA90.005C: probe with driver cp2112 failed with error -32 [ 368.145929][ T573] usb 7-1: USB disconnect, device number 4 [ 368.310450][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.319086][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.557328][ T7028] sit0: entered promiscuous mode [ 368.562564][ T7028] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 368.570564][ T7028] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2036'. [ 368.729238][ T7039] overlayfs: missing 'lowerdir' [ 368.822286][ T798] usb 5-1: selecting invalid altsetting 0 [ 368.828135][ T798] usb 5-1: selecting invalid altsetting 0 [ 368.849987][ T798] usb 5-1: selecting invalid altsetting 0 [ 368.856968][ T798] usb 5-1: selecting invalid altsetting 0 [ 368.862932][ T798] usb 5-1: selecting invalid altsetting 0 [ 368.868839][ T798] usb 5-1: selecting invalid altsetting 0 [ 368.881370][ T798] usb 5-1: USB disconnect, device number 103 [ 368.931066][ T6436] udevd[6436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 369.013786][ T1245] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 369.035120][ T573] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 369.163024][ T1245] usb 6-1: device descriptor read/64, error -71 [ 369.184481][ T573] usb 7-1: device descriptor read/64, error -71 [ 369.418874][ T1245] usb 6-1: device descriptor read/64, error -71 [ 369.440176][ T573] usb 7-1: device descriptor read/64, error -71 [ 369.621376][ T798] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 369.674630][ T1245] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 369.683058][ T36] kauditd_printk_skb: 471 callbacks suppressed [ 369.683077][ T36] audit: type=1400 audit(2000004501.974:17581): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.714721][ T573] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 369.720007][ T36] audit: type=1400 audit(2000004501.974:17582): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.747592][ T36] audit: type=1400 audit(2000004501.984:17583): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.773114][ T36] audit: type=1400 audit(2000004501.984:17584): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.781317][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 369.798555][ T36] audit: type=1400 audit(2000004501.984:17585): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.798612][ T36] audit: type=1400 audit(2000004501.984:17586): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.815953][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.830467][ T36] audit: type=1400 audit(2000004501.984:17587): avc: denied { ioctl } for pid=7040 comm="syz.5.2041" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.854306][ T1245] usb 6-1: device descriptor read/64, error -71 [ 369.870212][ T36] audit: type=1400 audit(2000004501.993:17588): avc: denied { ioctl } for pid=7043 comm="syz.4.2042" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.891241][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.896871][ T573] usb 7-1: device descriptor read/64, error -71 [ 369.921961][ T798] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 369.935699][ T36] audit: type=1400 audit(2000004502.021:17589): avc: denied { ioctl } for pid=7038 comm="syz.6.2040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.938647][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.950327][ T36] audit: type=1400 audit(2000004502.021:17590): avc: denied { ioctl } for pid=7038 comm="syz.6.2040" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.980141][ T798] usb 5-1: config 0 descriptor?? [ 370.014836][ T798] hub 5-1:0.0: USB hub found [ 370.175636][ T1245] usb 6-1: device descriptor read/64, error -71 [ 370.228513][ T798] hub 5-1:0.0: 1 port detected [ 370.260966][ T573] usb 7-1: device descriptor read/64, error -71 [ 370.293019][ T1245] usb usb6-port1: attempt power cycle [ 370.378904][ T573] usb usb7-port1: attempt power cycle [ 370.655276][ T1245] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 370.679454][ T1245] usb 6-1: device descriptor read/8, error -71 [ 370.740518][ T573] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 370.764124][ T573] usb 7-1: device descriptor read/8, error -71 [ 370.818460][ T1245] usb 6-1: device descriptor read/8, error -71 [ 370.889326][ T798] hub 5-1:0.0: activate --> -90 [ 370.903891][ T573] usb 7-1: device descriptor read/8, error -71 [ 371.070925][ T1245] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 371.094611][ T1245] usb 6-1: device descriptor read/8, error -71 [ 371.156206][ T573] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 371.181159][ T573] usb 7-1: device descriptor read/8, error -71 [ 371.241467][ T1245] usb 6-1: device descriptor read/8, error -71 [ 371.318940][ T573] usb 7-1: device descriptor read/8, error -71 [ 371.325888][ T347] usb 5-1: USB disconnect, device number 104 [ 371.327044][ T798] usb 5-1: Failed to suspend device, error -19 [ 371.359377][ T1245] usb usb6-port1: unable to enumerate USB device [ 371.433406][ T573] usb usb7-port1: unable to enumerate USB device [ 371.959104][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 372.243393][ T798] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 372.314970][ T7060] kvm: kvm [7059]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 372.339289][ T1245] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 372.376140][ T7060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 372.396402][ T7060] netlink: 'syz.0.2048': attribute type 4 has an invalid length. [ 372.424562][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 372.435010][ T798] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.445237][ T798] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.459275][ T798] usb 5-1: config 1 interface 0 has no altsetting 0 [ 372.473994][ T798] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 372.484488][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.492778][ T798] usb 5-1: Product: syz [ 372.497111][ T798] usb 5-1: Manufacturer: syz [ 372.501786][ T798] usb 5-1: SerialNumber: syz [ 372.514377][ T1245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.526698][ T1245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.536853][ T1245] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.550690][ T1245] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 372.560499][ T1245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.570916][ T1245] usb 7-1: config 0 descriptor?? [ 372.616437][ T330] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 372.689544][ T7069] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 372.744716][ T798] usbhid 5-1:1.0: can't add hid device: -71 [ 372.751785][ T798] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 372.765853][ T798] usb 5-1: USB disconnect, device number 105 [ 372.791099][ T330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 372.824184][ T330] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.862189][ T330] usb 6-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.40 [ 372.884885][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.896478][ T330] usb 6-1: Product: 䗆뼡庁奵鯦࢘䕼顽ቮ錖费ꏹ缅⥬쌦唴ڦ據ㅛ䝇㶶踿埞襤坷㺌鞟犼◪趂쑓딀ム融㚷Ἑ퍤桫풦縷꿅븝裓乐狂ݵ縢㊣ꢃꔗ縭鹟ꍤ艟閊雎剃΅鵥ﴒ店嚨뺿㿐彝鷰ꟸ怾著趄沄里ᘈ蜿㷲ᯬ [ 372.922768][ T330] usb 6-1: Manufacturer: я [ 372.928051][ T330] usb 6-1: SerialNumber: syz [ 373.375080][ T330] usbhid 6-1:1.0: can't add hid device: -71 [ 373.381223][ T330] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 373.396988][ T330] usb 6-1: USB disconnect, device number 101 [ 373.407241][ T6435] udevd[6435]: setting mode of /dev/bus/usb/006/101 to 020664 failed: No such file or directory [ 373.418843][ T6435] udevd[6435]: setting owner of /dev/bus/usb/006/101 to uid=0, gid=0 failed: No such file or directory [ 373.575737][ T798] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 373.627662][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.636371][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.735628][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 373.744735][ T798] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 373.753055][ T798] usb 5-1: config 0 has no interface number 0 [ 373.759253][ T798] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 528 [ 373.769340][ T798] usb 5-1: config 0 interface 184 has no altsetting 0 [ 373.779732][ T798] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 373.789011][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.797141][ T798] usb 5-1: Product: syz [ 373.801411][ T798] usb 5-1: Manufacturer: syz [ 373.806110][ T798] usb 5-1: SerialNumber: syz [ 373.812532][ T798] usb 5-1: config 0 descriptor?? [ 373.819504][ T7076] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 373.832019][ T798] smsc75xx v1.0.0 [ 373.942981][ T7081] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 373.972424][ T7080] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 374.045068][ T7084] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 374.120118][ T7090] netlink: 'syz.5.2058': attribute type 32 has an invalid length. [ 374.195117][ T798] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 374.223588][ T7093] kvm: kvm [7092]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x6405 [ 374.232565][ T798] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 374.263121][ T7093] kvm: kvm [7092]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x4c05 [ 374.273540][ T798] usb 5-1: USB disconnect, device number 106 [ 374.300574][ T7093] kvm: kvm [7092]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xdd05 [ 374.346472][ T7093] kvm_intel: kvm [7092]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x4f05 [ 374.488676][ T7110] tmpfs: Cannot retroactively limit inodes [ 374.616537][ T7116] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2065'. [ 374.627331][ T7116] gretap0: entered promiscuous mode [ 374.643077][ T7116] ------------[ cut here ]------------ [ 374.648626][ T7116] WARNING: CPU: 0 PID: 7116 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 374.658405][ T7116] Modules linked in: [ 374.662368][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.5.2065 Not tainted syzkaller #0 79a81a3ed2cf63e2a306eb4bbf59144c10c9503d [ 374.674110][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 374.684262][ T7116] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 374.690307][ T7116] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a b4 0b 06 00 0f 85 c2 00 00 00 c6 05 fd b3 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 374.710110][ T7116] RSP: 0018:ffffc9000e3df860 EFLAGS: 00010246 [ 374.716746][ T7116] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 374.724771][ T7116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e3df918 [ 374.733060][ T7116] RBP: ffffc9000e3df988 R08: ffffc9000e3df917 R09: 0000000000000000 [ 374.741134][ T7116] R10: ffffc9000e3df900 R11: fffff52001c7bf23 R12: ffffc9000e3df8a0 [ 374.749183][ T7116] R13: dffffc0000000000 R14: 1ffff92001c7bf10 R15: 0000000000000000 [ 374.757211][ T7116] FS: 00007fecc1df76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 374.766594][ T7116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.773395][ T7116] CR2: 0000200000001000 CR3: 000000011eae2000 CR4: 00000000003526b0 [ 374.781502][ T7116] Call Trace: [ 374.784882][ T7116] [ 374.787858][ T7116] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 374.794033][ T7116] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 374.799816][ T7116] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 374.805790][ T7116] ___kmalloc_large_node+0x81/0x210 [ 374.811059][ T7116] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 374.816793][ T7116] __kmalloc_large_node_noprof+0x1e/0xd0 [ 374.822494][ T7116] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 374.828580][ T7116] __kmalloc_noprof+0x326/0x500 [ 374.833603][ T7116] ? __cfi_lockref_get+0x10/0x10 [ 374.838988][ T7116] incfs_realloc_mount_info+0xa7/0x4d0 [ 374.844547][ T7116] ? incfs_add_sysfs_node+0x118/0x230 [ 374.849983][ T7116] incfs_alloc_mount_info+0x478/0x5f0 [ 374.855470][ T7116] incfs_mount_fs+0x3ca/0x970 [ 374.860229][ T7116] ? __cfi_incfs_mount_fs+0x10/0x10 [ 374.865541][ T7116] ? vfs_parse_fs_string+0x10f/0x180 [ 374.870892][ T7116] ? selinux_capable+0x38/0x50 [ 374.875735][ T7116] legacy_get_tree+0x106/0x1b0 [ 374.880688][ T7116] ? __cfi_incfs_mount_fs+0x10/0x10 [ 374.885943][ T7116] vfs_get_tree+0xa1/0x290 [ 374.890518][ T7116] do_new_mount+0x251/0xb30 [ 374.895115][ T7116] ? security_capable+0x44/0x130 [ 374.900292][ T7116] path_mount+0x682/0x1010 [ 374.904863][ T7116] __se_sys_mount+0x2bf/0x480 [ 374.909635][ T7116] ? __x64_sys_mount+0xf0/0xf0 [ 374.914460][ T7116] ? __kasan_check_write+0x18/0x20 [ 374.919668][ T7116] ? fpregs_restore_userregs+0x11c/0x260 [ 374.925366][ T7116] __x64_sys_mount+0xc3/0xf0 [ 374.930068][ T7116] x64_sys_call+0x2021/0x2ee0 [ 374.934893][ T7116] do_syscall_64+0x57/0xf0 [ 374.939377][ T7116] ? clear_bhb_loop+0x50/0xa0 [ 374.944322][ T7116] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 374.950285][ T7116] RIP: 0033:0x7fecc339af79 [ 374.954839][ T7116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.974629][ T7116] RSP: 002b:00007fecc1df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.983124][ T7116] RAX: ffffffffffffffda RBX: 00007fecc3615fa0 RCX: 00007fecc339af79 [ 374.991239][ T7116] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 374.999321][ T7116] RBP: 00007fecc34316e0 R08: 0000200000000280 R09: 0000000000000000 [ 375.007554][ T7116] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 375.015686][ T7116] R13: 00007fecc3616038 R14: 00007fecc3615fa0 R15: 00007ffd1aedaa78 [ 375.023884][ T7116] [ 375.026973][ T7116] ---[ end trace 0000000000000000 ]--- [ 375.046749][ T36] kauditd_printk_skb: 517 callbacks suppressed [ 375.046769][ T36] audit: type=1400 audit(2000004507.003:18108): avc: denied { read write } for pid=3411 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.106188][ T36] audit: type=1400 audit(2000004507.003:18109): avc: denied { read write open } for pid=3411 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.131449][ T36] audit: type=1400 audit(2000004507.003:18110): avc: denied { ioctl } for pid=3411 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.158702][ T36] audit: type=1400 audit(2000004507.116:18111): avc: denied { read write } for pid=7114 comm="syz.5.2065" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 375.194304][ T7116] incfs: Error allocating mount info. -12 [ 375.209768][ T7116] incfs: mount failed -12 [ 375.214218][ T36] audit: type=1400 audit(2000004507.144:18112): avc: denied { read write open } for pid=7114 comm="syz.5.2065" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 375.244688][ T36] audit: type=1400 audit(2000004507.144:18113): avc: denied { mounton } for pid=7114 comm="syz.5.2065" path="/179/file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 375.268079][ T36] audit: type=1400 audit(2000004507.144:18114): avc: denied { mount } for pid=7114 comm="syz.5.2065" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 375.290966][ T36] audit: type=1400 audit(2000004507.144:18115): avc: denied { read write } for pid=7114 comm="syz.5.2065" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.325920][ T36] audit: type=1400 audit(2000004507.144:18116): avc: denied { read write open } for pid=7114 comm="syz.5.2065" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.351495][ T36] audit: type=1400 audit(2000004507.144:18117): avc: denied { ioctl } for pid=7114 comm="syz.5.2065" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.451763][ T347] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 375.611567][ T347] usb 6-1: Using ep0 maxpacket: 32 [ 375.619787][ T347] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 375.628415][ T347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.638679][ T347] usb 6-1: config 0 has no interface number 0 [ 375.644857][ T347] usb 6-1: config 0 interface 196 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.658142][ T347] usb 6-1: config 0 interface 196 has no altsetting 0 [ 375.669143][ T347] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 375.678327][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.686545][ T347] usb 6-1: Product: syz [ 375.690739][ T347] usb 6-1: Manufacturer: syz [ 375.695361][ T347] usb 6-1: SerialNumber: syz [ 375.702329][ T347] usb 6-1: config 0 descriptor?? [ 375.720512][ T347] ipheth 6-1:0.196: Unable to find alternate settings interface [ 375.940223][ T347] usb 6-1: USB disconnect, device number 102 [ 378.212922][ T1245] usb 7-1: string descriptor 0 read error: -32 [ 378.224884][ T1245] usbhid 7-1:0.0: can't add hid device: -32 [ 378.230903][ T1245] usbhid 7-1:0.0: probe with driver usbhid failed with error -32