last executing test programs: 5.538864733s ago: executing program 3 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0xa0, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100b, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/114, 0x72, 0x0, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @dead_binder_done, @acquire, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x9bf7e3bbf4a98fe9, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/175, 0xaf, 0x2, 0x1b}, @fda={0x66646185, 0x7, 0x2, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/86, 0x56, 0x0, 0x36}}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}}, @register_looper], 0x3d, 0x0, &(0x7f00000004c0)="cea75525756d1ddec71ee436614fd043162b8865b97fc92ef6011168a23713d06d24b0568deba9ca2d8aef3bd270da29a439fe69deb5d53377e180a995"}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 5.456582935s ago: executing program 3 (id=100): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0xea, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x26, 0xc5}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x1, [0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000580)={0x40, 0x16, 0x4, "f8ff6000"}, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002011, r3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x3a, 0x1, 0x0, 0x0) cachestat(r4, &(0x7f0000000000)={0x9, 0x7}, &(0x7f0000000040), 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x2e7e90150a1c5c1e, 0x7, 0x4, "2eeded6d"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x93}, 0x0, 0x0, 0x0}) 5.442025266s ago: executing program 2 (id=103): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8003, 0x16, "b0bf2e7475d8f7ac000000000000000c6dff40"}) r2 = syz_open_pts(r1, 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffc}, 0x1c) dup3(r3, r2, 0x80000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x15) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, r7, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x5, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) 5.320324078s ago: executing program 2 (id=104): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kheaders.tar.xz', 0x141000, 0x14) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x25dfdbfd, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x4, 0x7}, {}, 0x70bd2a, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 5.26463965s ago: executing program 2 (id=105): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x18, 0x58, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xa, 0x20, 0xe, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 4.02902094s ago: executing program 2 (id=109): rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000008c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x39) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000001500)=""/198, 0xc6}], 0x8}, 0x1012}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan1\x00', 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 3.470485504s ago: executing program 3 (id=112): syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e293610ef171c7206de90f60070090212000100000000090400000002"], 0x0) 2.946231307s ago: executing program 3 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) stat(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffffffffff00"/144], 0x90) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000280)="7d2135192ac17e5b59e2f537b2e5ed000024b5a9d45677c19f4fb484a2e18a60e5af6cb6607ba574fd5cfd69dcb9606008ba17f0ef34dd3ca86d1ae1f23d6225bcf696267a656e7b419296799ddf19f8ec03ec62db222e67b95a0c1473a1f236b7bbc692393ad1fa7f9fdb4c6160d7b5a09fc3c46975a8527f81bb768fb47848848804ffe4b198728665f13b4ca236d7bc8c3b04d48f34483d91381ce6dc5a17b0e3cdc53fc3124bf6ac181889c95eef518f36a8694e048da7dc8ce8ff3b78e0edfd9d4f5cff3582f3f1d7781e214573", 0xd0, 0x6, 0x0, 0x0, r1}]) 2.703267133s ago: executing program 0 (id=120): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfef9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x6, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x2, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x103, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x408, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x5, 0x489, 0x50e, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x2, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x588180, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0xfffff075, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x8, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x808, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140fd, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdad, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0090000180c285000300000000000086dd694fd2cd00383afffe8000000000000000237838ab000000000000bbff0200000000000000000000000000010200907800000500670d98c510002f00000000fe8000040000000000000000000000392b009249"], 0x72) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r2) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) 2.267093384s ago: executing program 0 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) (async, rerun: 64) r0 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) (async) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) (async, rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffffe, 0xa, {0x5, 0x3, 0xfffffffffffffffe, 0x8, 0x3, 0x33e, {0x6, 0x4000000000000638, 0x80, 0x8, 0xc7de, 0x7, 0x14f5a307, 0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) (async, rerun: 32) r4 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) open(0x0, 0x1a1342, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = dup3(r7, r6, 0x0) (async, rerun: 64) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="2da9d6694038063816405219e788b8362588ec39c00c003564f64be7a9c3e3ed91eef522eb42a7a9b25881f235323bb09a6f420011fdc00d8cf03513b7bab1a6031f09fbbfd31089ec79191182a6d3ef"}) syz_genetlink_get_family_id$wireguard(0x0, r5) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 2.064708219s ago: executing program 0 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503000000580001800d0001007564703a73797a310000000044000400200001000a124e26000000445f3a00400000002d000000000000002d2a7f0000200002"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x220440, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000040)=""/23) 2.011654631s ago: executing program 0 (id=123): r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = getpgrp(0xffffffffffffffff) (rerun: 64) setpgid(r0, r1) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0xc, 0x102001) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) 1.744131727s ago: executing program 2 (id=124): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x1, 0xb4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)={0x6, 0x39, "2722377fbdb51fac76ed131fb85108461c7091fd4675e99ac57c33593f3342aac2cc20aa876213837781b870a67af8ef2e033f668b111664eb"}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x1, r0}) fsetxattr$security_evm(r0, &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "85f22b09311a25b442d05611411e57f5"}, 0x11, 0x3) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x3, 0x80, 0xa, 0x3, 0x6, 0x5, 0x203, 0x40, 0x3c0, 0x10001, 0x0, 0x38, 0x1, 0xe, 0x5, 0x770}, [{0x1, 0x4, 0x4, 0x8f6, 0x2, 0x1, 0x0, 0x4}], "df8037f69f6f0671c2f3d731387259414121b76491bcee2b2c54feb326976ee55ed186f85ba4111c325362819deeb50b6752955c107d983a67e3069c94ede0b69070d6e35809b3acdf66231a3b03c9fc847d7df62f5170517714fa934ef726975f3c63cb4a00f159fe50a9f060e3eb53d183e402be47dc3d05f867a10c82224808fd4be8e4fe8931f8d941883155eb232e5e1a88ae2eb28ae85e650da7", ['\x00', '\x00', '\x00', '\x00']}, 0x515) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000900)) r1 = accept4$unix(r0, &(0x7f0000000940), &(0x7f00000009c0)=0x6e, 0x1800) r2 = userfaultfd(0x800) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, r3, &(0x7f0000000ac0)='./file0\x00') r4 = syz_open_procfs$userns(0x0, &(0x7f0000000b00)) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000b80)={&(0x7f0000000b40)=[{0x101, 0x4, 0x4, 0x5}, {0x12, 0x9, 0x8, 0x200}], 0x2, 0x20, 0x9, 0x5ea0000000000000}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x72, 0xad87, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @loopback, 0x1, 0x8, 0x5, 0x200}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xbc, 0x12, 0x800, 0x70bd2d, 0x25dfdbff, {0x1e, 0xff, 0x5, 0x7, {0x4e20, 0x4e24, [0x5, 0xf6, 0x3c, 0x3], [0x1ac3, 0x0, 0x9, 0x80000000], r5, [0x4, 0x644]}, 0x15, 0xd5}, [@INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "a79f3c90a19fa0594bab353f5f7d1cae47a7963daee236bddcf4fe12d35128852d59144ca715b5b834bedf93fc29bffa294437cc0476407535baec6cd74a9b3f358524498398d80a0dcca74c580fa1d513e5a8f5c95a5e8e28378da0c134f5a80fcf2529015e95"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000e40)={0xf97cff8c, 0x8, 'SE Linux', "977ed14cb1fc6fe634842c662547dd8890e289762bca1edf65917a9feee2f8afb35d53c1566a42167cf73d79e15dc97c00b6818123295f0b2860b91426d34f7443758d2bbebea53af4c7c6e87e7ff86080adb10c95466673f527246a82ddac6ff100dd4c4d5d58d965f0ad2e"}, 0x7c) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xec, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x83}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x4c850}, 0x41) renameat(r0, &(0x7f00000010c0)='./file0\x00', r0, &(0x7f0000001100)='./file0\x00') mount$binder(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x1, &(0x7f00000011c0)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@stats}, {}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) getsockopt(r1, 0x3, 0x5, &(0x7f0000001240)=""/235, &(0x7f0000001340)=0xeb) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xcc, 0x0, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfb7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8b1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xcc}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ed5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r8 = socket$packet(0x11, 0x3, 0x300) tee(r8, 0xffffffffffffffff, 0x100000000, 0x0) chroot(&(0x7f0000001540)='./file0\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001600)={r8, r8, 0x6, 0x74, &(0x7f0000001580)="86eb9a814e575c629b483dc68e39da04df7092576dfbc77b23b77abba29394b27cdc5849f60543bfb435385784a5071a294adc67190e2d1daa6947c7d75cf3e91833a849048149017ef345380725ea42d553795da9f13ee43c628e6a9a7e282cbe5be83ecca32341e88c19dc965e9cf8d9a2dfa3", 0xf, 0x3, 0x7ff, 0x3, 0x9, 0x3, 0x6, 'syz1\x00'}) openat$cgroup_ro(r0, &(0x7f00000016c0)='pids.current\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0xc9b82afcad71b154, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x24040040) 1.694650498s ago: executing program 2 (id=125): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x12}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x8001) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2bc, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x982}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d90}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf94}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe62}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeeff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x24}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xec4b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x805a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xef98495}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x87a}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1677}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff030d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb5a1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x208, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x30}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xb0}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x837}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x3c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x7}}]}, 0x208}}, 0x4048081) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = fsmount(r2, 0x1, 0x6) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r3) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0010}, 0x0) fchmod(r6, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x566}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10f0}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa73}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe39}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116a}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x41) r9 = syz_usb_connect$uac3(0x1, 0x12a, &(0x7f0000000c40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x763, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x3, 0x1, 0x4, 0x50, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x33, 0x7}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x405, 0x2, 0x9, 0x4, 0x0, 0x6, 0x3, 0x400}, @source_unit={0xc, 0x24, 0xb, 0xa, 0x0, 0x0, 0x5, 0x3}, @selector_unit={0x9, 0x24, 0xc, 0x71, 0x4, "57edf927"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x9, 0xb777, 0x0, 0x8, 0x2, 0x60a, 0x8}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x58, 0x6, 0x0, "b49daba8a8ee"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0xff}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x2, 0x5, 0x80, 0x3, 0x401, 0x50}, @as_header={0x17, 0x24, 0x1, 0x5d, 0x1, 0x101, 0x0, 0x7, 0xf5, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x430, 0x5, 0x1, 0xfd, {0xa, 0x25, 0x25, 0x81, 0xe5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x96, "0a03a18f2e55a6"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2e}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x400, 0x80, "fde1ae72c968"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xa, 0x3, 0xf5, {0xa, 0x25, 0x25, 0x40, 0x2, 0xff7b}}}}}}}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0x1, 0x92, 0x3, 0x10}, 0xe2, &(0x7f0000000dc0)={0x5, 0xf, 0xe2, 0x6, [@generic={0x88, 0x10, 0x3, "bb3b7a1f60e3ddff572f7db147d225168536c0ef14ce92267d4caff52201ea7e801570d663f13986df0778da726ef263ce9cba817981918aca3aab779e20d3d2f4a4656dd9ddc4ed204756e6400caea16b3ca3c3aef1a7d857ec6f99d7e8609dd049d9583a847d30d2d86069eec37aa8a8f2f7aa2ae5364ad5ee318086d5a897e51ceda424"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x9, 0x0, 0x0, [0x0, 0x30, 0xff3f00, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "c4c808957a063a4f48884d8ef1ed6dd2"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0xd, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x1, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0xd7, 0x2, 0x9, 0xf00f, 0xff80, [0x3fc0, 0x0]}]}, 0x3, [{0xd1, &(0x7f0000000ec0)=@string={0xd1, 0x3, "63cc69e1a29a8a2eb9ad65e32ef5d159907844c2f14833efe596ebae75df86b19b859efb23ecb96645c2b52b3e1f04b20572ce7b16959336a91514c0b080edd02dbd0b5acebb63459c8766601d415e5ea8fcfbafe67cc4382548660a17c4a9c5807e79904b0527fbb23add0d5479689ac4dd554ee41726168ba5b33cbf0bfe37a2e0fd610cb702c491a7c76998c3d0acb6f2a3e3d54fed15db2fa4d19b7700579d0e491bfac3668be47c496f6a130694911130d95d40f7ea0f77c8c05f8b5a01e1cf76aac02f2d98669766f6dcb2b8"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x94f3}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x3813}}]}) syz_usb_control_io$uac3(r9, &(0x7f0000001180)={0x14, &(0x7f0000001080)={0x40, 0x11, 0xb1, {0xb1, 0xf, "ffe0362ce1824559f0fdd2d08b7781cd90202b2635f28067d95a7a43883f8b617ba5c77c9262c34307b90a52d7d0728d7d5760240a7702cac0a73adfc7533ff578ca7c512646a16fbafa000f87d901e0f7d7d3113a6bacc50b5f27f48d2f3eb80ab0f735915c99802f551c73a9c697ddf02413b444f921393dfdd125977028e342aae8209985ec340104ca3a480c9f42e0377ae036513ba08d250c3d613901ee1fdda2dde4274948f35009ccc11373"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @string={0x4, 0x3, "1861"}}}, &(0x7f0000001400)={0x44, &(0x7f00000011c0)={0x40, 0x7, 0x64, "bcf575ef3debb3c04539e4a3e92cb5c914236b7773d035cb5c2f9ffb71e2ec07ad8d6caa052ce2b22f811fc59ef3a324a69cc4271eb1c40b7a2db6ef915a28a590bfa53c1693487329fa74dac070cae32be87a2d757f470afa3a5a16803a37223333d297"}, &(0x7f0000001240)={0x0, 0xa, 0x1}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000012c0)={0x20, 0x81, 0x1, '+'}, &(0x7f0000001300)={0x20, 0x82, 0x1, "fe"}, &(0x7f0000001340)={0x20, 0x83, 0x1, '?'}, &(0x7f0000001380)={0x20, 0x84, 0x1, "82"}, &(0x7f00000013c0)={0x20, 0x85, 0x3, "41ca95"}}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) write$cgroup_subtree(r2, &(0x7f00000014c0)={[{0x2d, 'perf_event'}, {0x2d, 'cpu'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x2b, 'cpu'}, {0x2d, 'io'}]}, 0x24) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000001600)={&(0x7f0000001500)="08bd1f2fb16538ec9120f604d3c293a3c256424c7d859fd9940dc50c2c755232cb2b373381f8feaba9ac85ea39ba20f99763c56b441f4d12445a0763013f65f876a4afe86458a91284772f7695c77224", 0x50, &(0x7f0000001580)=""/67, 0x43}) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x6c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, r11, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x70}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_usb_control_io$uac3(r9, &(0x7f0000001a00)={0x14, &(0x7f0000001940)={0x0, 0x5, 0x41, {0x41, 0xd, "936e74dd405ca218b5404ccaadf94c3fef13e91392a87e7a7b5a018be62c0601c9b6c80de8b823fc7622846517298142a601b1fa2350991f5b5b66fdc1097c"}}, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200d}}}, &(0x7f0000001c40)={0x44, &(0x7f0000001a40)={0x20, 0xe, 0x1d, "bd9dbb5bfffaf4a8b49a72553e30107c984940496673c48e1e7fc1f737"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001b00)={0x20, 0x81, 0x2, "f3f5"}, &(0x7f0000001b40)={0x20, 0x82, 0x3, "3ebcb2"}, &(0x7f0000001b80)={0x20, 0x83, 0x2, "ff20"}, &(0x7f0000001bc0)={0x20, 0x84, 0x1, "c4"}, &(0x7f0000001c00)={0x20, 0x85, 0x3, "4a54ca"}}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r13, 0x6, 0x15, &(0x7f0000001cc0)=0x9, 0x4) 1.21548949s ago: executing program 3 (id=127): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5ab, 0x4c, 0x80, 0x7fff}]}) syz_usb_connect$uac2(0x3, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0xf0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x1a, 0x3}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x6, [0x0, 0x0, 0x0, 0x2, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x3, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.21525701s ago: executing program 1 (id=128): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) (async, rerun: 32) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (rerun: 32) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x50, 0x4f, 0x43, 0x50, 0x4f]}, 0x3a) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) (async, rerun: 32) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) close(0x3) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0x6, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfa, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x47cb, 0x80000001]}}) (async) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000380)=0xc, 0x4) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) 1.19258578s ago: executing program 1 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x797) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x313000, 0x0) r5 = epoll_create(0x8) preadv(r5, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/13, 0xd}], 0x3, 0xfffffff9, 0x7) (async) preadv(r5, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/13, 0xd}], 0x3, 0xfffffff9, 0x7) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="02002bbd7000fcdbdf250bc6c59e578c932440b67d9ae334aff8b1000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="02002bbd7000fcdbdf250bc6c59e578c932440b67d9ae334aff8b1000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0x4, 0x58000, 0x0, 0x4, 0x7f, 0xe7, 0x81, 0x8, 0x0, 0x84, 0x4, 0xb}, {0xd000, 0x30000, 0xb, 0x3, 0xfe, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0xe}, {0xe000, 0x8000000, 0x9, 0x4, 0x11, 0x81, 0xfc, 0x5, 0x1, 0x4, 0x92, 0xc1}, {0x40000, 0xe6e75000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xb, 0x29, 0x9, 0x9}, {0x6000, 0x7000, 0xe, 0x9, 0x1, 0x2, 0x7, 0xd, 0x2, 0x48, 0x1, 0x8}, {0x4000, 0x3000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x1, 0x1, 0xe, 0x9, 0xa}, {0x10000, 0x4000, 0x10, 0x0, 0x41, 0x4, 0x5, 0x26, 0xfe, 0xa0, 0x5, 0x6}, {0x1, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x5, 0x7, 0x2, 0x8}, {0x58000, 0x405}, {0xdddd1000, 0xff7e}, 0xe0000031, 0x0, 0x6000, 0x40165, 0x5, 0xa800, 0x800f900, 0x1, [0x6257, 0x0, 0x8000000000000003, 0x9]}) 1.035862374s ago: executing program 0 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000080)={0xa4, 0x0, 0x1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000280000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = geteuid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x14, 0x10, 0x0, 0x0, {0x1d, 0x3}, [@typed={0x8, 0x5, 0x0, 0x0, @uid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004091) 940.590947ms ago: executing program 1 (id=131): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) write(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) (async) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) write(r1, 0x0, 0x0) (async) 934.339357ms ago: executing program 1 (id=132): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff5, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x2003ff, 0x1ff, 0x1, 0x7ffe, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140ed, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4040) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x6, 0x100001, 0x14}, @fd, @fd}, &(0x7f0000000700)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x7}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000340)="0f060f076511c066baf80cb8169e4d88ef66bafc0cec0f01790fc4c1fe1230b9800000c00f3235000800000f30b900090000b801000000ba000000000f30b8010000000f01d9c4c19d145a1b", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r10 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 436.178099ms ago: executing program 1 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000000003000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0xffffff2d) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r6, 0x0, &(0x7f0000000080)) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@remote, 0x45}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01fd1f008008000100", @ANYRES32=r9, @ANYBLOB="0c0003800400050004000380"], 0x2c}}, 0x80) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r10, &(0x7f00000003c0)={0x2c, 0x0, r12, 0x0, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x0, 0x5, {{0x1b, 0x4, 0x0, 0xa, 0x6c, 0x67, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x10, "574225d1b7fbd151f588e2932df3"}, @timestamp_prespec={0x44, 0x44, 0xa4, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0xc2c8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6}, {@loopback}, {@rand_addr=0xffff8000, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x9900}, {@rand_addr=0x64010102}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x7, 0xccf, 0x7, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x64, 0x0, 0xd, 0x29, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x46, 0x3, 0x3, [{@local, 0x7}]}]}}}}}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000540)={@empty, 0x0}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc010000", @ANYBLOB="710c2d78c53712308aeecd4a85e763ce23e762f52ec45bf51831bace7763b251d7a1745900084f473d7a50765ab1b857461a2f4955548a3d845b4ef64c6e17270090a98a3c0b55ee771a3c43ca615d56621522690ca18cb448ed188f5d1a33cf32868a269f2ee0e35a7f24836491afd089aa55b396f19a5f1e49f1e449aaec3dbe12a4bba763408a728644764f104401d8c0c8e0c8353b908d6a3d453c9effa9469d199158a1ba91ebfcb0456b572f6692283138073ae40a37354e4fec7553ffa5176ab93d54897e514ec6361be215a4bcff3c72d6818d0588d17706c6ee7cf7c0eab7d049c2e44ba6640403752015b631c0c5839369", @ANYBLOB="00012cbd00200001800800030000000000140002007663616e30000000000000200000000020000180140002006361696630000000000000000000000008000300010000001800018014000200687372300000000000000000000000004c00018008000100", @ANYRESOCT=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e7230000000000000000000000000001400020077673000000000000000000000000000080003000200000008000300020000004800018008000300030000000800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300030000011400020076657468305f6d6163767461700000003c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES64=r3, @ANYBLOB="1400020065727370616e30000000000000000000140002007465616d5f736c6176655f31000000003c00018008000100", @ANYRES32=r12, @ANYBLOB="1400020076657468305f746f5f687372000000001400020064766d7270310000000000000000000008000300000000008400018008000100", @ANYRES32=r13, @ANYRES64=r11, @ANYRES32=r14, @ANYBLOB="1400020076657468305f6d61637674617000000008000100", @ANYRES32=r15, @ANYBLOB="08000300010000001400020077673000000000000000000000000000140002006c6f0000000000000000000000000000140002006d6163766c616e30cf7200000000000008000300010000000800030001000000"], 0x1fc}}, 0x40) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000080)=0x3fd, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00@\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000240009800800010004000000080001000101000008000200400000000800010001f8ffff"], 0x38}}, 0x0) 124.571457ms ago: executing program 1 (id=134): syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000004ff0000000705030200020007058402000200"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000100)="0000000c0000000100070001") (async) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0x0, &(0x7f0000000700)) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000740)={0x14, &(0x7f00000005c0)={0x0, 0x30, 0xff, {0xff, 0xa, "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"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000000940)={0x34, &(0x7f0000000780)={0x40, 0x5, 0x14, "ec57d9af156970650baf1092ac60ce0dcfffcf09"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0xe7}, &(0x7f00000008c0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000900)={0xc0, 0xa2, 0x2f, "b0a48a030e37760ce8ea7874b8e2efdce062078bbe4cb6dd6b36f5772c2994e9abb0a2d341089dda9d02f2874477df"}}) (async, rerun: 64) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) (async, rerun: 64) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) (async) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x71c}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)={0xac, 0x2f, 0x10, 0x0, 0x0, {0xa}, [@generic="024b5a3f70edb2f35e30337e28d76a5d72d9fc30191847789b4bfaeaac2e50fb61f1c26d6085d0a01b1d6fd7ca245138c3cd2f18e47de7a5b99184b52f0b3fe1d04648a3881f652e8981e7794df6b893cfcc54e4c79bf47493e0c94e1af077d21bfa72bb5e6930cc2f39ae86c5fd64c6f1bbe5a954e07468577031dc8b6aab2b9ef3d75a942c1987536d68e7827ab3fc8c93e597a0"]}, 0xac}}, 0x0) (async) r3 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x10, 0xf0, {0xf0, 0x30, "ee2f99e485eaa9382954a263db91d5ca37ed980d10a5320a9d1458b50401dd86b895657840a5c5a91a87a4088c890650776a97e13eaa89119ced7a2e65ec26492679326238bec11f83d259dfc1038b7354c90f05e9435ca7026c0dcfb6e0260dbddb30127b7189a84364b5389efe8bbf9f4a1ab77ecf2e151cd3440190bbe65976e8f120505fd22962b5f2cf87fb8f2fa9d6866a5d97902fdd385537bedbae73e27b0f7387a32823def089bbf11f5796351468575f92fed0fbb6d7f0692a80b9045d26d42be0a7c0aec4a73c33fa087bd21cdfe7bd8d4d9a6bf02c7b343ad34adba33b4fb89c9b02071d7177dfbd"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8b7}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x40, 0x0, 0xd5, "f121876739ca7c20e238c647e219f5490f891b913d55b77b7336ddc883c1c53f82f303ea6a35992c7e651dde5d9bcc8a3af2f4d7abce57c5ec723bba675bd7b9640748f301472fdc646f8d2e8f30b497f4fb58d3283ffd9bf1be05e709ff8b324a5be8fbe027ebf2d08c9fcf5db04928e4cdee9576101518befd201f5e3e82ab8d61a7f26fc1ce1bf3e4b0bb3b319998760df2e9c2dab97aa2129f2acc40cda01e9e03371e0e9a3a1b1a11b860953b20d406b7fb6db26975f14dc3e5db4f2dc2fd88cc90da4c5b371ccdecae1a5735e3fd38bee26e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x400}, &(0x7f0000000400)={0x40, 0xa0, 0x4}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "bc5f7af70badf320896cff44f7178bf4c4cbfa3f1251819d34fccffe2802eb54051d028024ddfc9d63baddde32ccbd"}}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 35.469299ms ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) stat(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000280)="7d2135192ac17e5b59e2f537b2e5ed000024b5a9d45677c19f4fb484a2e18a60e5af6cb6607ba574fd5cfd69dcb9606008ba17f0ef34dd3ca86d1ae1f23d6225bcf696267a656e7b419296799ddf19f8ec03ec62db222e67b95a0c1473a1f236b7bbc692393ad1fa7f9fdb4c6160d7b5a09fc3c46975a8527f81bb768fb47848848804ffe4b198728665f13b4ca236d7bc8c3b04d48f34483d91381ce6dc5a17b0e3cdc53fc3124bf6ac181889c95eef518f36a8694e048da7dc8ce8ff3b78e0edfd9d4f5cff3582f3f1d7781e214573", 0xd0, 0x6, 0x0, 0x0, r1}]) 0s ago: executing program 3 (id=136): syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) fallocate(r0, 0x53, 0x3, 0x952f) syz_usb_connect$uac2(0x5, 0xb5, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000008410e50414000010203010902a300030180a007080b0001010a2000090400000001012000092401330e002600c511240806010000010000000200feff03000c2403fd0004a80306f9ff0a09040100000102200009040101010106000000050109400005040008250181090902000904020000010220000904020101010220000a240202000008000ee20a24020207005bae004a09240201e73909288109058209ff0305041008250183000a02004038ba1b7cdcdfe935d3312b1d09"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 28.828200][ T36] audit: type=1400 audit(1786240840.710:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.831956][ T287] cgroup: Unknown subsys name 'net' [ 28.850980][ T36] audit: type=1400 audit(1786240840.710:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.878771][ T36] audit: type=1400 audit(1786240840.750:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.879402][ T287] cgroup: Unknown subsys name 'devices' [ 29.004077][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.009734][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.126111][ T36] audit: type=1400 audit(1786240841.010:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.149561][ T36] audit: type=1400 audit(1786240841.010:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.174940][ T36] audit: type=1400 audit(1786240841.010:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.200363][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.209361][ T36] audit: type=1400 audit(1786240841.090:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.234859][ T36] audit: type=1400 audit(1786240841.090:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.240052][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.260497][ T36] audit: type=1400 audit(1786240841.120:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.294781][ T36] audit: type=1400 audit(1786240841.120:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.201184][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.208344][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.215573][ T295] bridge_slave_0: entered allmulticast mode [ 30.222001][ T295] bridge_slave_0: entered promiscuous mode [ 30.239716][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.246818][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.253962][ T294] bridge_slave_0: entered allmulticast mode [ 30.260335][ T294] bridge_slave_0: entered promiscuous mode [ 30.266740][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.273838][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.280934][ T295] bridge_slave_1: entered allmulticast mode [ 30.287416][ T295] bridge_slave_1: entered promiscuous mode [ 30.297525][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.304762][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.312298][ T294] bridge_slave_1: entered allmulticast mode [ 30.319119][ T294] bridge_slave_1: entered promiscuous mode [ 30.351290][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.358684][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.366053][ T297] bridge_slave_0: entered allmulticast mode [ 30.372413][ T297] bridge_slave_0: entered promiscuous mode [ 30.384939][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.392062][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.399157][ T296] bridge_slave_0: entered allmulticast mode [ 30.405630][ T296] bridge_slave_0: entered promiscuous mode [ 30.412058][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.419229][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.426418][ T297] bridge_slave_1: entered allmulticast mode [ 30.432754][ T297] bridge_slave_1: entered promiscuous mode [ 30.445242][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.452347][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.459436][ T296] bridge_slave_1: entered allmulticast mode [ 30.465855][ T296] bridge_slave_1: entered promiscuous mode [ 30.624711][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.631805][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.639129][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.646202][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.664956][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.672175][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.679494][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.686608][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.695278][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.702373][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.709756][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.716889][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.742617][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.750379][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.757939][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.765030][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.813488][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.821134][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.828854][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.836399][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.844471][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.852441][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.860459][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.868773][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.880826][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888247][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.897525][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.904667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.917719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.925530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.935185][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.944955][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.966134][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.974104][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.982822][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.990005][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.998189][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005299][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.013045][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.020405][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.072293][ T294] veth0_vlan: entered promiscuous mode [ 31.087648][ T295] veth0_vlan: entered promiscuous mode [ 31.119833][ T294] veth1_macvtap: entered promiscuous mode [ 31.128966][ T295] veth1_macvtap: entered promiscuous mode [ 31.136243][ T297] veth0_vlan: entered promiscuous mode [ 31.149161][ T296] veth0_vlan: entered promiscuous mode [ 31.176985][ T297] veth1_macvtap: entered promiscuous mode [ 31.191004][ T296] veth1_macvtap: entered promiscuous mode [ 31.225727][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.340933][ T318] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 31.384260][ T333] ======================================================= [ 31.384260][ T333] WARNING: The mand mount option has been deprecated and [ 31.384260][ T333] and is ignored by this kernel. Remove the mand [ 31.384260][ T333] option from the mount to silence this warning. [ 31.384260][ T333] ======================================================= [ 31.561901][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.582026][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.601737][ T46] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 31.647503][ T340] overlay: ./file1 is not a directory [ 31.731573][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 31.740167][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 31.752240][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 31.753254][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.757544][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.779268][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.796250][ T66] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 31.805813][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.810053][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 31.822428][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 31.842190][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 31.851811][ T66] usb 4-1: config 0 descriptor?? [ 31.856982][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.865689][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.868230][ T66] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 31.883540][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.884105][ T10] usb 2-1: config 0 descriptor?? [ 31.902131][ T46] usb 1-1: SerialNumber: syz [ 31.920711][ T46] cdc_ether 1-1:1.0: skipping garbage [ 31.927734][ T46] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 32.067866][ T66] usb 4-1: Detected FT232B [ 32.281632][ T66] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 32.292198][ T66] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 32.306822][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0001/input/input4 [ 32.322819][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0001/input/input5 [ 32.354318][ T10] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 32.491692][ T46] usb 4-1: USB disconnect, device number 2 [ 32.508969][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 32.529545][ T46] ftdi_sio 4-1:0.0: device disconnected [ 32.552924][ T310] usb 2-1: USB disconnect, device number 2 [ 32.801663][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.953107][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 32.964193][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 32.977327][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 32.986880][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.995706][ T10] usb 3-1: config 0 descriptor?? [ 33.000979][ T348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 33.096165][ T355] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.118994][ T355] netlink: 'syz.3.11': attribute type 12 has an invalid length. [ 33.371633][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.412149][ T10] kone 0003:1E7D:2CED.0002: unknown main item tag 0x1 [ 33.418982][ T10] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 33.426773][ T10] kone 0003:1E7D:2CED.0002: unknown main item tag 0x6 [ 33.433777][ T10] kone 0003:1E7D:2CED.0002: global environment stack underflow [ 33.441365][ T10] kone 0003:1E7D:2CED.0002: item 0 2 1 11 parsing failed [ 33.448877][ T10] kone 0003:1E7D:2CED.0002: parse failed [ 33.454710][ T10] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -22 [ 33.511641][ T66] usb 4-1: device descriptor read/64, error -71 [ 33.616682][ T310] usb 3-1: USB disconnect, device number 2 [ 33.761603][ T66] usb 4-1: device descriptor read/64, error -71 [ 34.001664][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.133388][ T66] usb 4-1: device descriptor read/64, error -71 [ 34.338244][ T359] usb 1-1: USB disconnect, device number 2 [ 34.354935][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 34.354966][ T36] audit: type=1400 audit(1786240846.240:137): avc: denied { write } for pid=362 comm="syz.0.14" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.370271][ T363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 34.398740][ T66] usb 4-1: device descriptor read/64, error -71 [ 34.405374][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 34.413309][ T36] audit: type=1400 audit(1786240846.250:138): avc: denied { write } for pid=362 comm="syz.0.14" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.435104][ T36] audit: type=1400 audit(1786240846.250:139): avc: denied { write } for pid=362 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.457286][ T36] audit: type=1400 audit(1786240846.250:140): avc: denied { read } for pid=362 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.477850][ T36] audit: type=1400 audit(1786240846.290:141): avc: denied { create } for pid=362 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.497848][ T36] audit: type=1400 audit(1786240846.290:142): avc: denied { connect } for pid=362 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.517755][ T36] audit: type=1400 audit(1786240846.290:143): avc: denied { getopt } for pid=362 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.541668][ T66] usb usb4-port1: attempt power cycle [ 34.551615][ T36] audit: type=1400 audit(1786240846.430:144): avc: denied { accept } for pid=364 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 34.574693][ T36] audit: type=1400 audit(1786240846.430:145): avc: denied { block_suspend } for pid=364 comm="syz.0.15" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.605150][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.613574][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 34.622343][ T10] usb 3-1: config 129 has an invalid interface number: 80 but max is 0 [ 34.631374][ T10] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 34.639950][ T10] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 34.649896][ T10] usb 3-1: config 129 has no interface number 0 [ 34.656367][ T10] usb 3-1: config 129 has no interface number 1 [ 34.663021][ T10] usb 3-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 34.677512][ T10] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 34.688650][ T10] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 34.702019][ T10] usb 3-1: config 129 interface 80 has no altsetting 0 [ 34.708912][ T10] usb 3-1: config 129 interface 5 has no altsetting 0 [ 34.718226][ T10] usb 3-1: string descriptor 0 read error: -22 [ 34.724603][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 34.733786][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.745722][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 34.911691][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.932820][ T66] usb 4-1: device descriptor read/8, error -71 [ 34.945778][ T10] usb 3-1: USB disconnect, device number 3 [ 35.063359][ T66] usb 4-1: device descriptor read/8, error -71 [ 35.280518][ T36] audit: type=1400 audit(1786240847.160:146): avc: denied { name_bind } for pid=370 comm="syz.0.17" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.303021][ T66] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.332550][ T376] capability: warning: `syz.0.19' uses deprecated v2 capabilities in a way that may be insecure [ 35.332819][ T66] usb 4-1: device descriptor read/8, error -71 [ 35.484399][ T66] usb 4-1: device descriptor read/8, error -71 [ 35.591793][ T66] usb usb4-port1: unable to enumerate USB device [ 35.751747][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.901644][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 35.911305][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.922181][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.932765][ T46] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 35.942444][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.951135][ T46] usb 1-1: Product: syz [ 35.955393][ T46] usb 1-1: Manufacturer: syz [ 35.960110][ T46] usb 1-1: SerialNumber: syz [ 36.400372][ T409] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 36.418540][ T406] netlink: 9 bytes leftover after parsing attributes in process `syz.3.28'. [ 36.428522][ T409] 9pnet_fd: Insufficient options for proto=fd [ 36.436845][ T406] gretap0: entered promiscuous mode [ 36.571627][ T66] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 36.722675][ T66] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 36.731190][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.743250][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.756397][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.771641][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.782456][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 36.792548][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.802476][ T66] usb 2-1: config 0 descriptor?? [ 36.815796][ T415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.826816][ T415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.921657][ T10] usb 4-1: device descriptor read/64, error -71 [ 36.941655][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 36.948410][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 36.960144][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.971556][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.983024][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 36.999553][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 37.012845][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.023437][ T9] usb 3-1: config 0 descriptor?? [ 37.161776][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.177246][ T46] usb 1-1: USB disconnect, device number 3 [ 37.214208][ T66] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 37.222126][ T66] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 37.229353][ T66] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 37.238507][ T66] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 37.247844][ T66] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 37.259847][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.281911][ T66] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 37.421757][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.454046][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0004/input/input6 [ 37.496772][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0004/input/input7 [ 37.521291][ T9] kye 0003:0458:5013.0004: input,hiddev96,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 37.561577][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.658709][ T66] logitech 0003:046D:C29C.0003: no inputs found [ 37.669152][ T381] usb 3-1: USB disconnect, device number 4 [ 37.679535][ T66] usb 2-1: USB disconnect, device number 3 [ 37.796807][ T442] Bluetooth: ISO socket layer initialized [ 37.812018][ T10] usb 4-1: device descriptor read/64, error -71 [ 37.921776][ T10] usb usb4-port1: attempt power cycle [ 38.091634][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.252742][ T478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40'. [ 38.271663][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.279279][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 38.289645][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.301020][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.315345][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.325163][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.333045][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 38.343695][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.354035][ T9] usb 1-1: config 0 descriptor?? [ 38.426995][ T491] tipc: Trying to set illegal importance in message [ 38.462971][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.492379][ T501] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 38.506779][ T501] process 'syz.2.45' launched '/dev/fd/3' with NULL argv: empty string added [ 38.531600][ T381] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.681604][ T381] usb 2-1: Using ep0 maxpacket: 32 [ 38.688266][ T381] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 38.696777][ T381] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.707033][ T381] usb 2-1: config 0 has no interface number 0 [ 38.711767][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.713308][ T381] usb 2-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 38.734327][ T381] usb 2-1: config 0 interface 196 has no altsetting 0 [ 38.742916][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.743462][ T381] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 38.760254][ T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.770140][ T381] usb 2-1: Product: syz [ 38.772286][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.774397][ T381] usb 2-1: Manufacturer: syz [ 38.783553][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.786150][ T381] usb 2-1: SerialNumber: syz [ 38.793995][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.805294][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.813186][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.815792][ T381] usb 2-1: config 0 descriptor?? [ 38.822523][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.833124][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.834554][ T381] ipheth 2-1:0.196: Unable to find endpoints [ 38.840151][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.853389][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.860541][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.867786][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.874965][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.882361][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.889638][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.896846][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.904835][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.912134][ T10] usb 4-1: device descriptor read/8, error -71 [ 38.918463][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.925673][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.932687][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.939666][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.946953][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.954629][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.961954][ T9] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 38.973211][ T9] elecom 0003:056E:00E6.0005: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 38.985578][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.997773][ T9] usb 1-1: USB disconnect, device number 4 [ 39.003727][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.017417][ T66] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.027988][ T10] usb usb4-port1: unable to enumerate USB device [ 39.029729][ T508] fido_id[508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 39.035716][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.058765][ T66] usb 3-1: config 0 descriptor?? [ 39.065882][ T66] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 39.266527][ T381] usb 3-1: USB disconnect, device number 5 [ 39.731701][ T381] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.831426][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 39.831445][ T36] audit: type=1400 audit(1786240851.710:211): avc: denied { write } for pid=518 comm="syz.2.50" name="raw6" dev="proc" ino=4026532432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.882993][ T381] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.895219][ T381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.908736][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.917048][ T381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.927434][ T381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.941252][ T381] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.952352][ T381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.961560][ T381] usb 1-1: config 0 descriptor?? [ 40.091602][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 40.098035][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 40.109090][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.120065][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.121737][ T66] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.130060][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 40.150795][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 40.159961][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.169277][ T46] usb 4-1: config 0 descriptor?? [ 40.174831][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.183580][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.193703][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.204025][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.281581][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 40.289617][ T66] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 40.298800][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.307046][ T66] usb 3-1: Product: syz [ 40.311278][ T66] usb 3-1: Manufacturer: syz [ 40.315942][ T66] usb 3-1: SerialNumber: syz [ 40.420377][ T381] usbhid 1-1:0.0: can't add hid device: -71 [ 40.426458][ T381] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 40.435577][ T381] usb 1-1: USB disconnect, device number 5 [ 40.600105][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0006/input/input8 [ 40.615519][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0006/input/input9 [ 40.641812][ T46] kye 0003:0458:5013.0006: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 40.802449][ T9] usb 4-1: USB disconnect, device number 11 [ 41.181589][ T46] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 41.254438][ T381] usb 2-1: USB disconnect, device number 4 [ 41.311645][ T46] usb 1-1: device descriptor read/64, error -71 [ 41.326721][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 41.337455][ T66] usb 3-1: USB disconnect, device number 6 [ 41.362026][ T36] audit: type=1400 audit(1786240853.250:212): avc: denied { read } for pid=530 comm="syz.3.54" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.367952][ T531] input: syz0 as /devices/virtual/input/input10 [ 41.387073][ T36] audit: type=1400 audit(1786240853.250:213): avc: denied { open } for pid=530 comm="syz.3.54" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.420581][ T36] audit: type=1400 audit(1786240853.250:214): avc: denied { ioctl } for pid=530 comm="syz.3.54" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.490843][ T36] audit: type=1400 audit(1786240853.370:215): avc: denied { write } for pid=533 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.581678][ T46] usb 1-1: device descriptor read/64, error -71 [ 41.631663][ T381] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.791591][ T381] usb 2-1: Using ep0 maxpacket: 16 [ 41.798192][ T381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.809734][ T381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 41.821009][ T381] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 41.834554][ T46] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 41.850917][ T381] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 41.870161][ T381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.884189][ T381] usb 2-1: config 0 descriptor?? [ 41.898040][ T36] audit: type=1400 audit(1786240853.780:216): avc: denied { audit_control } for pid=546 comm="syz.2.59" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 42.001645][ T46] usb 1-1: device descriptor read/64, error -71 [ 42.094218][ T36] audit: type=1400 audit(1786240853.980:217): avc: denied { write } for pid=527 comm="syz.1.53" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.122712][ T36] audit: type=1400 audit(1786240853.980:218): avc: denied { open } for pid=527 comm="syz.1.53" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.191917][ T66] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 42.241652][ T46] usb 1-1: device descriptor read/64, error -71 [ 42.311182][ T381] nintendo 0003:057E:2019.0007: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 42.331605][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.351759][ T46] usb usb1-port1: attempt power cycle [ 42.353463][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.369067][ T66] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 42.384090][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.393507][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.402506][ T66] usb 4-1: SerialNumber: syz [ 42.408860][ T66] cdc_ether 4-1:1.0: skipping garbage [ 42.414647][ T66] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 42.481623][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 42.488968][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.498772][ T10] usb 3-1: config 0 has no interface number 0 [ 42.507635][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 42.512763][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.520638][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.536010][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.536607][ T10] usb 3-1: Product: syz [ 42.548958][ T10] usb 3-1: Manufacturer: syz [ 42.554706][ T10] usb 3-1: SerialNumber: syz [ 42.562265][ T10] usb 3-1: config 0 descriptor?? [ 42.569583][ T10] smsc95xx v2.0.0 [ 42.701598][ T46] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 42.722699][ T46] usb 1-1: device descriptor read/8, error -71 [ 42.749638][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.758664][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.767370][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.776634][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.785130][ T36] audit: type=1400 audit(1786240854.670:219): avc: denied { append } for pid=527 comm="syz.1.53" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.852631][ T46] usb 1-1: device descriptor read/8, error -71 [ 42.953277][ T381] nintendo 0003:057E:2019.0007: Failed to get joycon info; ret=-71 [ 42.961889][ T381] nintendo 0003:057E:2019.0007: Failed to retrieve controller info; ret=-71 [ 42.970738][ T381] nintendo 0003:057E:2019.0007: Failed to initialize controller; ret=-71 [ 42.981825][ T381] nintendo 0003:057E:2019.0007: probe - fail = -71 [ 42.988950][ T381] nintendo 0003:057E:2019.0007: probe with driver nintendo failed with error -71 [ 43.000396][ T381] usb 2-1: USB disconnect, device number 5 [ 43.091589][ T46] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 43.112774][ T46] usb 1-1: device descriptor read/8, error -71 [ 43.243596][ T46] usb 1-1: device descriptor read/8, error -71 [ 43.351764][ T46] usb usb1-port1: unable to enumerate USB device [ 43.382672][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 43.393557][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.402914][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 43.414133][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 43.424610][ T10] usb 3-1: USB disconnect, device number 7 [ 43.903829][ T557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.916914][ T557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.927127][ T36] audit: type=1400 audit(1786240855.820:220): avc: denied { read } for pid=555 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.978699][ T560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.987977][ T560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.061673][ T567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=567 comm=syz.0.65 [ 44.341624][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 44.506979][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.518309][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 44.526822][ T10] usb 3-1: can't read configurations, error -71 [ 44.601619][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 44.751645][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 44.758481][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.770863][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.780849][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.790106][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.799001][ T310] usb 2-1: config 0 descriptor?? [ 44.805954][ T310] hub 2-1:0.0: USB hub found [ 44.879772][ T9] usb 4-1: USB disconnect, device number 12 [ 44.960610][ T585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.969600][ T585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.981588][ T66] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.007559][ T310] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 45.131610][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 45.138456][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.150157][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.160409][ T66] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 45.170376][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.180431][ T66] usb 1-1: config 0 descriptor?? [ 45.188755][ T66] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 45.196388][ T66] usb 1-1: No valid video chain found. [ 45.208476][ T578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.219099][ T578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.229655][ T578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.239468][ T578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.262516][ T9] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 45.265803][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 45.265853][ T36] audit: type=1400 audit(1786240857.150:225): avc: denied { nlmsg_read } for pid=577 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 45.300922][ T36] audit: type=1400 audit(1786240857.160:226): avc: denied { map } for pid=577 comm="syz.1.70" path="socket:[5024]" dev="sockfs" ino=5024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 45.362070][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.371347][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 45.377560][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.388747][ T580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.397531][ T580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.405839][ T310] usb 2-1: USB disconnect, device number 6 [ 45.409201][ T580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.420687][ T580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.430021][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 45.440946][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 45.452192][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 45.458957][ T381] usb 1-1: USB disconnect, device number 10 [ 45.512636][ T10] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 45.529391][ T10] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 45.539111][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.547585][ T10] usb 3-1: Product: syz [ 45.552440][ T10] usb 3-1: Manufacturer: syz [ 45.557177][ T10] usb 3-1: SerialNumber: syz [ 45.770040][ T10] scsi host1: uas [ 45.776268][ T471] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 45.785924][ T471] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 45.851644][ T62] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 45.861205][ T62] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 45.888564][ T36] audit: type=1400 audit(1786240857.770:227): avc: denied { map } for pid=598 comm="syz.1.77" path="socket:[4071]" dev="sockfs" ino=4071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 45.913029][ T381] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.921620][ T62] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 45.931692][ T62] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 45.991672][ T62] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 46.002293][ T62] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 46.057098][ T587] UHID_CREATE from different security context by process 75 (syz.2.74), this is not allowed. [ 46.061952][ T62] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 46.076286][ T36] audit: type=1400 audit(1786240857.950:228): avc: denied { mounton } for pid=586 comm="syz.2.74" path="/file0" dev="ramfs" ino=5063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 46.077034][ T62] scsi 1:0:0:0: tag#4 CDB: opcode=0x12 12 00 00 00 24 00 [ 46.108935][ T587] overlay: ./cgroup is not a directory [ 46.114491][ T381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.125945][ T381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.126926][ T310] usb 3-1: USB disconnect, device number 9 [ 46.142865][ T381] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.157041][ T381] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.166899][ T381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.175753][ T381] usb 1-1: config 0 descriptor?? [ 46.533105][ T36] audit: type=1400 audit(1786240858.420:229): avc: denied { write } for pid=606 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.584271][ T381] usbhid 1-1:0.0: can't add hid device: -71 [ 46.590838][ T381] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 46.600352][ T381] usb 1-1: USB disconnect, device number 11 [ 46.681182][ T36] audit: type=1400 audit(1786240858.560:230): avc: denied { write } for pid=618 comm="syz.2.82" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.706840][ T36] audit: type=1400 audit(1786240858.600:231): avc: denied { ioctl } for pid=618 comm="syz.2.82" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 46.731846][ T36] audit: type=1400 audit(1786240858.610:232): avc: denied { sqpoll } for pid=618 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.773809][ T623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.83'. [ 46.779159][ T36] audit: type=1400 audit(1786240858.660:233): avc: denied { write } for pid=622 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.061626][ T381] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 47.081689][ T507] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.191582][ T381] usb 3-1: device descriptor read/64, error -71 [ 47.211955][ T507] usb 2-1: device descriptor read/64, error -71 [ 47.343539][ T36] audit: type=1400 audit(1786240859.230:234): avc: denied { mount } for pid=638 comm="syz.0.89" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.431624][ T381] usb 3-1: device descriptor read/64, error -71 [ 47.461611][ T507] usb 2-1: device descriptor read/64, error -71 [ 47.671590][ T381] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.711647][ T507] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.801619][ T381] usb 3-1: device descriptor read/64, error -71 [ 47.841593][ T507] usb 2-1: device descriptor read/64, error -71 [ 47.971977][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 47.985744][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.002215][ T9] usb 4-1: can't set config #1, error -71 [ 48.012293][ T9] usb 4-1: USB disconnect, device number 13 [ 48.041649][ T381] usb 3-1: device descriptor read/64, error -71 [ 48.081586][ T507] usb 2-1: device descriptor read/64, error -71 [ 48.141660][ T310] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 48.151700][ T381] usb usb3-port1: attempt power cycle [ 48.191699][ T507] usb usb2-port1: attempt power cycle [ 48.301647][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 48.308064][ T310] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 48.319051][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.330178][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.340180][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 48.353365][ T310] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 48.362642][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.371683][ T310] usb 1-1: config 0 descriptor?? [ 48.431600][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 48.491648][ T381] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.512571][ T381] usb 3-1: device descriptor read/8, error -71 [ 48.531668][ T507] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.553085][ T507] usb 2-1: device descriptor read/8, error -71 [ 48.581580][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 48.587865][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.601100][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.607768][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 48.617045][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.625957][ T9] usb 4-1: config 0 descriptor?? [ 48.662700][ T381] usb 3-1: device descriptor read/8, error -71 [ 48.682677][ T507] usb 2-1: device descriptor read/8, error -71 [ 48.784772][ T310] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0008/input/input11 [ 48.799427][ T310] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0008/input/input12 [ 48.824944][ T310] kye 0003:0458:5013.0008: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 48.901654][ T381] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.921677][ T507] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.923375][ T381] usb 3-1: device descriptor read/8, error -71 [ 48.952986][ T507] usb 2-1: device descriptor read/8, error -71 [ 48.988691][ T529] usb 1-1: USB disconnect, device number 12 [ 49.039222][ T9] logitech 0003:046D:C20E.0009: rdesc size test failed for formula gp [ 49.047907][ T9] logitech 0003:046D:C20E.0009: unknown global tag 0xd [ 49.054997][ T9] logitech 0003:046D:C20E.0009: item 0 2 1 13 parsing failed [ 49.062684][ T9] logitech 0003:046D:C20E.0009: parse failed [ 49.068887][ T9] logitech 0003:046D:C20E.0009: probe with driver logitech failed with error -22 [ 49.076097][ T381] usb 3-1: device descriptor read/8, error -71 [ 49.085242][ T507] usb 2-1: device descriptor read/8, error -71 [ 49.191766][ T381] usb usb3-port1: unable to enumerate USB device [ 49.201794][ T507] usb usb2-port1: unable to enumerate USB device [ 49.240633][ T507] usb 4-1: USB disconnect, device number 14 [ 49.544033][ T657] loop5: detected capacity change from 0 to 8388607 [ 49.554441][ T343] Buffer I/O error on dev loop5, logical block 1048575, async page read [ 49.626308][ T661] fuse: Bad value for 'group_id' [ 49.631293][ T661] fuse: Bad value for 'group_id' [ 49.934688][ T679] Zero length message leads to an empty skb [ 50.051672][ T381] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 50.201616][ T381] usb 4-1: Using ep0 maxpacket: 32 [ 50.208706][ T381] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 50.217083][ T381] usb 4-1: config 0 has no interface number 0 [ 50.224751][ T381] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 50.233897][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.241954][ T381] usb 4-1: Product: syz [ 50.246132][ T381] usb 4-1: Manufacturer: syz [ 50.250750][ T381] usb 4-1: SerialNumber: syz [ 50.255477][ T529] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 50.261695][ T507] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.271438][ T381] usb 4-1: config 0 descriptor?? [ 50.277460][ T381] smsc95xx v2.0.0 [ 50.411588][ T507] usb 2-1: Using ep0 maxpacket: 16 [ 50.418567][ T507] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 50.433443][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.438017][ T529] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.445616][ T507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.462597][ T507] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 50.476101][ T507] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 50.477181][ T529] usb 3-1: not running at top speed; connect to a high speed hub [ 50.486261][ T507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.505185][ T507] usb 2-1: config 0 descriptor?? [ 50.511261][ T529] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 50.522212][ T529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.530555][ T529] usb 3-1: Product: syz [ 50.535957][ T529] usb 3-1: Manufacturer: syz [ 50.540720][ T529] usb 3-1: SerialNumber: syz [ 50.706228][ T672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.721801][ T672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.726380][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 50.726397][ T36] audit: type=1400 audit(1786240862.610:247): avc: denied { bind } for pid=689 comm="syz.0.107" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.760855][ T672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 50.775736][ T36] audit: type=1400 audit(1786240862.650:248): avc: denied { name_bind } for pid=689 comm="syz.0.107" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.797589][ T36] audit: type=1400 audit(1786240862.650:249): avc: denied { node_bind } for pid=689 comm="syz.0.107" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.799554][ T672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.836336][ T529] usb 3-1: USB disconnect, device number 14 [ 50.843981][ T672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.852005][ T692] netlink: 'syz.0.108': attribute type 46 has an invalid length. [ 50.866086][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.923684][ T507] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.000A/input/input13 [ 50.956207][ T507] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.000A/input/input14 [ 50.989226][ T507] kye 0003:0458:5013.000A: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 51.088661][ T36] audit: type=1400 audit(1786240862.970:250): avc: denied { getopt } for pid=671 comm="syz.3.100" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.126433][ T529] usb 2-1: USB disconnect, device number 11 [ 51.298494][ T696] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.305068][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.312312][ T381] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 51.334145][ T381] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.351615][ T381] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 51.371626][ T381] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 51.381273][ T381] usb 4-1: USB disconnect, device number 15 [ 51.547021][ T702] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.850913][ T702] mmap: syz.0.110 (702) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.968420][ T36] audit: type=1400 audit(1786240863.850:251): avc: granted { setsecparam } for pid=703 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.126049][ T723] kvm: MWAIT instruction emulated as NOP! [ 52.301565][ T66] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.452823][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.464489][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.474455][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 52.489684][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.499743][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.516662][ T66] usb 2-1: config 0 descriptor?? [ 52.611591][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.632098][ T734] syzkaller1: entered promiscuous mode [ 52.638313][ T734] syzkaller1: entered allmulticast mode [ 52.771578][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 52.778025][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 52.790429][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.801816][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.813285][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 52.827768][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 52.841548][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.852455][ T46] usb 4-1: config 0 descriptor?? [ 52.927699][ T66] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 52.940858][ T66] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 53.010371][ T36] audit: type=1400 audit(1786240864.890:252): avc: denied { mount } for pid=738 comm="syz.0.121" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.012620][ T739] dummy_hcd dummy_hcd.0: remove, state 4 [ 53.048769][ T740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.048957][ T741] rust_binder: 738:741 got transaction to invalid handle 1 [ 53.061690][ T36] audit: type=1400 audit(1786240864.930:253): avc: denied { ioctl } for pid=738 comm="syz.0.121" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.067193][ T740] rust_binder: 738:740 no such ref 0 [ 53.095434][ T741] rust_binder: 738:741 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 53.106536][ T739] usb usb1: USB disconnect, device number 1 [ 53.111695][ T36] audit: type=1400 audit(1786240864.930:254): avc: denied { set_context_mgr } for pid=738 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.134199][ T739] dummy_hcd dummy_hcd.0: stopped [ 53.141831][ T739] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 53.153734][ T36] audit: type=1400 audit(1786240864.930:255): avc: denied { map } for pid=738 comm="syz.0.121" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.202264][ T717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.211114][ T717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.248546][ T36] audit: type=1400 audit(1786240865.130:256): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.273397][ T744] tipc: Enabling of bearer rejected, failed to enable media [ 53.292134][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.000C/input/input16 [ 53.304301][ T698] Bluetooth: hci0: command 0x1003 tx timeout [ 53.310384][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.331964][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.000C/input/input17 [ 53.391229][ T46] kye 0003:0458:5013.000C: input,hiddev97,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 53.427463][ T747] usb 2-1: USB disconnect, device number 12 [ 53.507779][ T381] usb 4-1: USB disconnect, device number 16 [ 53.555415][ T768] SELinux: policydb version 1288797847 does not match my version range 15-33 [ 53.571600][ T768] SELinux: failed to load policy [ 53.810124][ T746] cgroup: fork rejected by pids controller in /syz0 [ 53.871583][ T46] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 54.031584][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 54.171587][ T46] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 54.311628][ T381] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.341761][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 54.348140][ T46] usb usb3-port1: attempt power cycle [ 54.393149][ T808] rust_binder: 807:808 got transaction to invalid handle 2 [ 54.432032][ T808] rust_binder: 807:808 transaction async to 0:0 failed ENOENT, code 0 size 80-24 [ 54.492952][ T381] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.504113][ T381] usb 4-1: string descriptor 0 read error: -22 [ 54.510554][ T381] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 54.530416][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.551576][ T381] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.691630][ T46] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 54.721959][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 54.742396][ T381] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 54.770539][ T381] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 54.782728][ T381] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.803212][ T763] udevd[763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.805638][ T381] usb 4-1: USB disconnect, device number 17 [ 54.861609][ T46] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 54.873548][ T507] rust_binder: 807: undelivered TRANSACTION_ERROR: 29201 [ 54.882117][ T46] usb 3-1: Invalid ep0 maxpacket: 16 [ 54.888335][ T46] usb usb3-port1: unable to enumerate USB device [ 55.432191][ T824] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 55.445222][ T824] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 55.454051][ T824] CPU: 1 UID: 0 PID: 824 Comm: syz.0.135 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 55.468034][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.480340][ T824] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 55.486850][ T824] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 14 01 ce fd eb 0c e8 0d 01 ce fd eb 05 e8 06 01 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 60 c5 26 fe 4d 8b 36 4c 89 f7 e8 [ 55.509844][ T824] RSP: 0018:ffffc90010d8f818 EFLAGS: 00010246 [ 55.517071][ T824] RAX: 0000000000000000 RBX: ffff888135214010 RCX: 0000000000080000 [ 55.528117][ T824] RDX: ffffc90001a12000 RSI: 000000000000092b RDI: 000000000000092c [ 55.538424][ T824] RBP: ffffc90010d8f840 R08: ffff888119215f00 R09: 0000000000000004 [ 55.550029][ T824] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 55.560793][ T824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 55.571260][ T824] FS: 00007f37ed1366c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 55.582265][ T824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.591488][ T824] CR2: 00007f37ec187240 CR3: 000000011a64e000 CR4: 00000000003526b0 [ 55.604250][ T824] Call Trace: [ 55.609560][ T824] [ 55.613350][ T824] ? __cfi_dummy_udc_start+0x10/0x10 [ 55.620023][ T824] gadget_bind_driver+0x3e4/0x9c0 [ 55.626978][ T824] ? __cfi_gadget_bind_driver+0x10/0x10 [ 55.633654][ T824] really_probe+0x2e1/0x8b0 [ 55.638981][ T824] __driver_probe_device+0x193/0x280 [ 55.641809][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 55.646016][ T824] driver_probe_device+0x54/0x3f0 [ 55.659972][ T824] __driver_attach+0x422/0x5e0 [ 55.664920][ T824] bus_for_each_dev+0x249/0x2d0 [ 55.671351][ T824] ? __cfi___driver_attach+0x10/0x10 [ 55.676908][ T824] ? __cfi_bus_for_each_dev+0x10/0x10 [ 55.682874][ T824] ? __kasan_kmalloc+0x96/0xb0 [ 55.688467][ T824] ? _raw_spin_unlock+0x45/0x60 [ 55.693378][ T824] ? klist_add_tail+0x1dd/0x220 [ 55.698670][ T824] driver_attach+0x46/0x50 [ 55.703337][ T824] bus_add_driver+0x393/0x730 [ 55.708290][ T824] driver_register+0x2b7/0x3c0 [ 55.713328][ T824] usb_gadget_register_driver_owner+0xfc/0x270 [ 55.720599][ T824] raw_ioctl+0x144c/0x37a0 [ 55.725499][ T824] ? __cfi_raw_ioctl+0x10/0x10 [ 55.731304][ T824] ? selinux_file_ioctl+0x732/0x1480 [ 55.736929][ T824] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 55.742647][ T824] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.747666][ T824] ? security_file_ioctl+0x3e/0x110 [ 55.753582][ T824] ? __cfi_raw_ioctl+0x10/0x10 [ 55.759740][ T824] __se_sys_ioctl+0x135/0x1b0 [ 55.764850][ T824] __x64_sys_ioctl+0x7f/0xa0 [ 55.771011][ T824] x64_sys_call+0x1878/0x2ee0 [ 55.776219][ T824] do_syscall_64+0x57/0xf0 [ 55.780901][ T824] ? clear_bhb_loop+0x50/0xa0 [ 55.788735][ T824] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.796033][ T824] RIP: 0033:0x7f37ec19dd6b [ 55.800829][ T824] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 55.825545][ T824] RSP: 002b:00007f37ed133f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.837326][ T824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f37ec19dd6b [ 55.841956][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 55.842018][ T36] audit: type=1400 audit(1786240867.530:262): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 55.845516][ T824] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 55.855556][ T36] audit: type=1400 audit(1786240867.530:263): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.875184][ T824] RBP: 00007f37ed134fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 55.875214][ T824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.875230][ T824] R13: 0000200000000b40 R14: 0000000000000003 R15: 0000000000000000 [ 55.875252][ T824] [ 55.894929][ T36] audit: type=1400 audit(1786240867.530:264): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.905172][ T824] Modules linked in: [ 55.905908][ T824] ---[ end trace 0000000000000000 ]--- [ 55.913683][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 55.922122][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.922156][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 55.923546][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 55.923581][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.923606][ T9] usb 4-1: Product: syz [ 55.923624][ T9] usb 4-1: Manufacturer: syz [ 55.923642][ T9] usb 4-1: SerialNumber: syz [ 55.945373][ T36] audit: type=1400 audit(1786240867.530:265): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.998053][ T824] RIP: 0010:dummy_udc_start+0xd1/0x1f0 [ 56.042633][ T36] audit: type=1400 audit(1786240867.530:266): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.065212][ T824] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 94 00 00 00 e8 14 01 ce fd eb 0c e8 0d 01 ce fd eb 05 e8 06 01 ce fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 60 c5 26 fe 4d 8b 36 4c 89 f7 e8 [ 56.091466][ T36] audit: type=1400 audit(1786240867.530:267): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.143313][ T824] RSP: 0018:ffffc90010d8f818 EFLAGS: 00010246 [ 56.155030][ T822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.161743][ T36] audit: type=1400 audit(1786240867.530:268): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.171526][ T822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.225010][ T824] RAX: 0000000000000000 RBX: ffff888135214010 RCX: 0000000000080000 [ 56.231134][ T381] usb 4-1: USB disconnect, device number 18 [ 56.234220][ T824] RDX: ffffc90001a12000 RSI: 000000000000092b RDI: 000000000000092c [ 56.234246][ T824] RBP: ffffc90010d8f840 R08: ffff888119215f00 R09: 0000000000000004 [ 56.256883][ T824] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 56.267204][ T824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 56.281066][ T824] FS: 00007f37ed1366c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.291470][ T824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.300215][ T824] CR2: 00007f81a84fe0a6 CR3: 000000011a64e000 CR4: 00000000003526b0 [ 56.308696][ T824] Kernel panic - not syncing: Fatal exception [ 56.316138][ T824] Kernel Offset: disabled [ 56.321117][ T824] Rebooting in 86400 seconds..