last executing test programs: 1m52.550327879s ago: executing program 1 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000008000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300"], 0x0) (async, rerun: 32) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x40, 0x940, 0x1001, 0xe, 0x1043, 0x200000000006, 0x0, 0x71e, 0xf7fffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m52.415088274s ago: executing program 1 (id=142): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/212, 0xd4, 0x1, 0x17}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) (async) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r4, {0x7, 0x2d, 0x3ff, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000002dc0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ftruncate(r5, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) symlink(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='./file0\x00') (async) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg(r6, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002440)="c7eb96270291b11e", 0x8}], 0x1}}], 0x1, 0x8031) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) accept$inet6(r1, 0x0, &(0x7f0000000080)) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xb, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x182, 0x3f, 0x2, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x1, 0xf, {0x8, 0x25, 0x1, 0x0, 0xf, 0x3, 0x9}}}}}}}}]}}, 0x0) 1m52.405986984s ago: executing program 1 (id=143): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x44080) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x44080) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x80}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4baf}]}]}, 0x54}}, 0x80) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) 1m52.384583185s ago: executing program 1 (id=145): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_connect$uac2(0x4, 0xc9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1035, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x5, 0x30, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x3, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x4, 0x3b, 0x3}, [@processing_unit={0xf, 0x24, 0x8, 0x4, 0x4, [0x1, 0x3, 0x3, 0x1, 0x3]}, @source_unit={0x8, 0x24, 0xa, 0x5, 0x4, 0x1, 0x9}, @effect_unit={0xf, 0x24, 0x7, 0x5, 0x1, 0x3, [0x2, 0x3, 0x3, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x401, 0x5, 0x1, 0x1, 0x3, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @as_header={0x10, 0x24, 0x1, 0x1, 0x29, 0x2, 0x3, 0xd6, 0x5, 0xc}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xd, 0x4, {0x8, 0x25, 0x1, 0x2, 0x0, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x81, 0x87, {0x8, 0x25, 0x1, 0x1, 0x3f, 0xe}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x140, 0x2, 0x1, 0x3, 0x10, 0x2}, 0x28, &(0x7f0000000140)={0x5, 0xf, 0x28, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xf, 0x8, 0x8, 0x7c8}, @ssp_cap={0x1c, 0x10, 0xa, 0xd0, 0x4, 0xd, 0xf00, 0x9, [0xff0000, 0xc0c0, 0xffc03f, 0xc0]}]}, 0xa, [{0xee, &(0x7f0000000240)=@string={0xee, 0x3, "0b6bfe20ee2d1d3a1a319efaaba03d126d0f9eef69ad5ad8cce4da3f9a5611742eb272d203afc3f3d0a9638034ae72130892b45cfc9a9dd0711e68293345c7bed132cece7f9432bb40667d050aabebeac02d9f38fdf118126fa22690f099fa30f3a2540423d4b0a4a789ff27804e56214040ca14e99da59373de68757ff0b186d2ed41fb68a2ce7e9a47a8782c2683c51684cc5bace72c2c7ce3fc648c8d08c3964dfafa3aba00665dbee9d61cec152e7c648f924a76d3dc9370545a50d7d2d3e1ebcbe00331b594d2911811ae43e1d61624077471166fc8b8a3b9d9bd5f446e41bb366338798e3f3673ae58"}}, {0x22, &(0x7f0000000340)=@string={0x22, 0x3, "ea17d58f88f8ef3ca80610d8acac4ae9d2fe2f4795c7f5cc5a874bb6064a354a"}}, {0xbc, &(0x7f0000000440)=@string={0xbc, 0x3, "6823257661429c04c99510b352d0b73549d36be788bc2aafef07a03a56ee9d1595ecc727694a00a959318022f0a47088f4684c603b060c2a1814fdd6fff05b71289bc476270ef744ba0a4810f7355e69dc5076fa9aebfbdef8a004759622d3c49f97971042deae2bf9bcf2bbeb4a32b29e8de412751ca6de30fd6985bd2c2e151750695bcc2b4d0614c65eba66671ffd48cd95e2de0dffb070c88edbc52a80d7634ab7dc201bba84f5317ce1bbf972c125ed317124870d9989db"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2401}}, {0x63, &(0x7f0000000580)=@string={0x63, 0x3, "dfd078017676d17ba9a60651e1be6dcb658ce888592e96915edaa43bc7d225994ea4593138c6487c4c69e87e4d1bf140fb9959ae68d5409c785654620f47340b0bea282a283c93888b23366f9465935ebeee2f490c6619a6060ff834156b6deaab"}}, {0x86, &(0x7f0000000600)=@string={0x86, 0x3, "7bcb9065325183882a42664df031c0b3739a03481568c83b237ffcf6ed1e79ac43cc6370d3af3557271ae60061e2b842a935503a35410c532752764899d197b76f40fb90778d203f014fa718e7e4cf8310ac4d3ca9626d9d012f37543cc061d157b7e660d7d639f0d5f3fef36358370fb86fbc73cfa6fae0636ae3e0e9ff307b0ad4b704"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x827}}]}) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x6e, 0xf0, 0x6a, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "64e195b402"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xcfc5, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0xec, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x5, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x180, 0x4, 0x10, 0x8, 0x40, 0x10}, 0x40, &(0x7f0000000880)={0x5, 0xf, 0x40, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5a7aa9fb38d594850de20322343080f1"}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x7, 0xf008, 0xeb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x81}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x8e, &(0x7f0000000900)=@string={0x8e, 0x3, "1f8bfaef0f6e959a44fd5b3952f82575b10e63e70992c85d75d2a61a255cde6415a13d0c2927c99c00c4fc4633b4a0b7417a509efe9f6b5e47ba31e34e10fddc9714a910952671307d49244cd2d3b8fdbc10109d0097ce1d45295a2cc9f93eb2a48d74b85f1fe64b150a0fdebed6ed3fea7b01c6ec5a2199d74b650f080eab8e23d40c651c400a4576f8db46"}}, {0xee, &(0x7f00000009c0)=@string={0xee, 0x3, "fa20aaecc035c21fc3318935244beceb36ac8f2d93575f1d928a616af449642b07c2678c171169f0101a0fa72f6d17000021bef5bb26eabb6a058ebee1b382d07373a4f5446a089f68c610ac288c10daeeaed2ead478a6ebaf75a821e3ab0fdb1068a9dc946ba31f324063c358305e8beb02d74fcafeec2bb6e75fdd10b2477970acf7cb1b4a3225a7f9030c07822b0cf5f4c1401d12249c0ec29a5267c1bffac9a4e45cbe49f045d80f9ad38813e46de1811ff6001f049c227df00620b23bba95e31b0cd6bc05b67600a51bf422b7196f0e967b35e27887ccc62ce7f89f4c8b1d58dd92ccd69ee24296bd6f"}}, {0xbc, &(0x7f0000000ac0)=@string={0xbc, 0x3, "8ff52895bf07483ecee5a6b2543cae0a26cc895c8b94b64f31aab73ada2fc0937bbc831ce7e57107c0c7561419a3097c7ae57517c7a82c521a1014749db712caa2a6418d1dc51690d92d2abec621e564cebab0524c4f41f1103e39019940057930fc857ba4cc68d0e603fbc13d89cb94284336e699d32194aaad7eb568b9f1df329cda5c854b412405b8cb39ee20da136e760794ed519c20a92e2bbb68669bc29cbe2d899f8524a50c38e2673afca2364a6bff69a893f7527a2e"}}, {0x2f, &(0x7f0000000b80)=@string={0x2f, 0x3, "4feb72f0383af3711c46ed953b83adeff6a6213cf35cd1d6a145bdfb94dad2c7b484f28aa270000312b0529e41"}}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x1, 0x1, 0x4, '@'}, @main=@item_012={0x1, 0x0, 0x9, "e5"}]}}, 0x0}, 0x0) 1m49.978385427s ago: executing program 1 (id=156): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000080)=0xfdffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x0, 0x48, 0x2}, {0xfffffffffffffffd, 0x0, 0x3, 0x2, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0x7fffffffffffffff, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb2408c4, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 1m49.28180172s ago: executing program 1 (id=159): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$sock(r4, &(0x7f00000010c0)=[{{&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="b3083a0c990390e2e1e11a208be7197360c9a9eb070d2a928003452cab744314e0abed8d41de455cf31a462d010c3391a7304d8edf9e6dd588f21e7b7421c289d43f3366f1fef5025da9217c111ff4c23b3ee9a0666bca03844b586caeb13c690829ea6dd36399e023fd05a84da5919d87e8c22805e8e308799a69f54a0cb0e335b8ac4d48252654b82b4dedc1662648437e8884d7a54ae592c36ea97aca5277b8901f2b", 0xa4}, {&(0x7f0000000540)="cf2d196b445219d3e01f192655c39282117843b5baf71e0449a254c0214079af0ec70abdaa6827f27b09984bacb26007cac3cd7a4d4afec90cafe0cc6ac1fed0f6899adcb5a4105d6ea652b8ff84a71a651ac5dd049e13c1ac9d0a651b6834f5fe6030f5ca57ecb16dec81d51a2ce7509e874aa22ee461b2cfa319b2b9fe0ecbbe2c0c", 0x83}, {&(0x7f0000000640)="105c5fed483e1d97", 0x8}, {&(0x7f0000000680)="82d03492fa3994e9bbbe166cc27b82ff57752b237a483e9583dda4e162731880805bffc49b2d5683f71ff33d8921398e1afd1a588312ac6bb24daf765cbf00eec52fcebdd28072e6d7878682ab5e395a3e9c9f352a4537882a7f73bab37ef3e8323a9fe690927ef41680d8771187bdbb4b8658d369a0eb2b27d06851cca097663d952cafc0fc904c9031551e7d0e9edcc9058af33cf848b3440d6289d1d10d", 0x9f}, {&(0x7f0000000740)="532a3b228abf0b9679151d24c6a6a8ed9a34163f573ab83701096a006b93505c875bdfe7753c1570b300f932cffe34d94e09b2f011e5c7f39349034f89ce4d07ad6407a844d180199768626803bf84917ceb030456c2fd6bd433cb67ccc10086ccbea359940234b3541d739ddcf3cbd7d8fdc3cb157fa71350c10e1175d22b18e88662b7ecf19dbdea3ee4f356f9629a7c8bacb4a0b74ca10afb4ab4b3b9915f2ac5cdc6268c179fdbf055a11cf3090c5dcfc905111917251565201834c24c5c181457edce0cc75de665b9a981509254b7b0068555b93300203fe3db8a4207a3f30684", 0xe3}, {&(0x7f0000000840)="55123e3bb46580bb63423d7a55529a183452595b066017177632fad5ffeddc7e6cf15babaff726c53707d11591616ace3d941b51ba670a596a179615fe69b710cad8633644eecf98adbba1da75b3c795563cc676927c444842e9944527b739b4398714d3c3b35d51d90bb1158bf9244d6acbc549c86933c68cffdec7e9cc1005a3c9d596329c5d555bdd3b71ce01c83a55ecb3d9c58e03f7b9a8db77118577b28a0d2fb9f6030fd50221e240721424d97373d717253492dd4405c960ec5e8344d0ff5b09091573e0c5a81032d5292513d555bc723154419ec43e9e57095eeecdd82d92d8e1a3188b37787f925c958351ea6b3e49", 0xf4}], 0x6, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a80)="eb31000ffbc739729fbbd404ba40bb55b41667241a377506fde0ac0e29a3df5900d6ee61a70f56814f160c2cd8782356dfc2ebffb5ea95dfe133292fd6dc540c2dda6b61d605", 0x46}, {&(0x7f0000000b00)="ac5a438530580d4dccddd13e706a7dc19c11e6a5d0bf17342c35ec3716b930e4e4e0e36e8f10dcb32733f5074107c93da4d340969d2fadb1e3381b58443dddab08ecad0b958c37d107b18e67236b3ea51d5733087fd25ddcaf85e9e9b7e6a5f30adc3a8028f4176ec1f0cc64432181afa5332670d6d773669266b38c692c5ac72a7330100d470c759c3c61221ede96e029efa0e9567543a420fee2494986210fd4aa233c2ecb8c9b281cc5067e1355eee321875e14d6fb0469e7c93d40be295c1ef5df3c17a9", 0xc6}, {&(0x7f0000000c00)="01ca140de15097b520f41dee0207b1cc2abf12e8433d64e34566b8aaf471aeb787f4e7fdc889826f55ef0762ba2af9d2c970a5c0dfeaf11f6ede955797b74f6b55c0b4711d34ab20", 0x48}, {&(0x7f0000000c80)="9c48cf4047a1ddbe1aefd66f1c48c1ddcb96f71f0641c74ea2e4f7c400359b4a79e87bf4493c325ebe51d1a1a0da172e6636dd6952bdadce20da9419717f7f2950ddcf21654cd946a0d7a4c6baf01ae666d1ab688dc510e30d045070b953a4a4b3ee80164d88d9997549c44a853b65c2cd2b3250a10435b454a481467a0339bf130500b451134de69ad068a310e2e6a4f92b7764866071f66e22f994e7ebcf58ce0c1091", 0xa4}, {&(0x7f0000000d40)="248ac3e45449ec2b9d", 0x9}], 0x5, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x100000}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xc0}}, {{&(0x7f0000000ec0)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="f549e3a1b77d22ef7aba6993e99d82e8507a5188ede3bdef7f25c1a15ff2fce6a86cbb143321edb61b2b7164bd2596cd0d68e9d6a524330dd02c0d136dcfc73edf49f21cf39d3305cbd0b1", 0x4b}], 0x1, &(0x7f0000001000)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5972}}, @timestamping={{0x14, 0x1, 0x25, 0x8dd}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x3b3}}], 0xa8}}], 0x3, 0x4085) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000140)=0xff, 0x4) write$P9_RVERSION(r6, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x1006, 0x8, '9P2000.L'}, 0x15) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='\\\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r2, 0x1, 0x4a, &(0x7f0000000240)=0xfffffffd, 0x4c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m34.234025261s ago: executing program 32 (id=159): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$sock(r4, &(0x7f00000010c0)=[{{&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="b3083a0c990390e2e1e11a208be7197360c9a9eb070d2a928003452cab744314e0abed8d41de455cf31a462d010c3391a7304d8edf9e6dd588f21e7b7421c289d43f3366f1fef5025da9217c111ff4c23b3ee9a0666bca03844b586caeb13c690829ea6dd36399e023fd05a84da5919d87e8c22805e8e308799a69f54a0cb0e335b8ac4d48252654b82b4dedc1662648437e8884d7a54ae592c36ea97aca5277b8901f2b", 0xa4}, {&(0x7f0000000540)="cf2d196b445219d3e01f192655c39282117843b5baf71e0449a254c0214079af0ec70abdaa6827f27b09984bacb26007cac3cd7a4d4afec90cafe0cc6ac1fed0f6899adcb5a4105d6ea652b8ff84a71a651ac5dd049e13c1ac9d0a651b6834f5fe6030f5ca57ecb16dec81d51a2ce7509e874aa22ee461b2cfa319b2b9fe0ecbbe2c0c", 0x83}, {&(0x7f0000000640)="105c5fed483e1d97", 0x8}, {&(0x7f0000000680)="82d03492fa3994e9bbbe166cc27b82ff57752b237a483e9583dda4e162731880805bffc49b2d5683f71ff33d8921398e1afd1a588312ac6bb24daf765cbf00eec52fcebdd28072e6d7878682ab5e395a3e9c9f352a4537882a7f73bab37ef3e8323a9fe690927ef41680d8771187bdbb4b8658d369a0eb2b27d06851cca097663d952cafc0fc904c9031551e7d0e9edcc9058af33cf848b3440d6289d1d10d", 0x9f}, {&(0x7f0000000740)="532a3b228abf0b9679151d24c6a6a8ed9a34163f573ab83701096a006b93505c875bdfe7753c1570b300f932cffe34d94e09b2f011e5c7f39349034f89ce4d07ad6407a844d180199768626803bf84917ceb030456c2fd6bd433cb67ccc10086ccbea359940234b3541d739ddcf3cbd7d8fdc3cb157fa71350c10e1175d22b18e88662b7ecf19dbdea3ee4f356f9629a7c8bacb4a0b74ca10afb4ab4b3b9915f2ac5cdc6268c179fdbf055a11cf3090c5dcfc905111917251565201834c24c5c181457edce0cc75de665b9a981509254b7b0068555b93300203fe3db8a4207a3f30684", 0xe3}, {&(0x7f0000000840)="55123e3bb46580bb63423d7a55529a183452595b066017177632fad5ffeddc7e6cf15babaff726c53707d11591616ace3d941b51ba670a596a179615fe69b710cad8633644eecf98adbba1da75b3c795563cc676927c444842e9944527b739b4398714d3c3b35d51d90bb1158bf9244d6acbc549c86933c68cffdec7e9cc1005a3c9d596329c5d555bdd3b71ce01c83a55ecb3d9c58e03f7b9a8db77118577b28a0d2fb9f6030fd50221e240721424d97373d717253492dd4405c960ec5e8344d0ff5b09091573e0c5a81032d5292513d555bc723154419ec43e9e57095eeecdd82d92d8e1a3188b37787f925c958351ea6b3e49", 0xf4}], 0x6, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a80)="eb31000ffbc739729fbbd404ba40bb55b41667241a377506fde0ac0e29a3df5900d6ee61a70f56814f160c2cd8782356dfc2ebffb5ea95dfe133292fd6dc540c2dda6b61d605", 0x46}, {&(0x7f0000000b00)="ac5a438530580d4dccddd13e706a7dc19c11e6a5d0bf17342c35ec3716b930e4e4e0e36e8f10dcb32733f5074107c93da4d340969d2fadb1e3381b58443dddab08ecad0b958c37d107b18e67236b3ea51d5733087fd25ddcaf85e9e9b7e6a5f30adc3a8028f4176ec1f0cc64432181afa5332670d6d773669266b38c692c5ac72a7330100d470c759c3c61221ede96e029efa0e9567543a420fee2494986210fd4aa233c2ecb8c9b281cc5067e1355eee321875e14d6fb0469e7c93d40be295c1ef5df3c17a9", 0xc6}, {&(0x7f0000000c00)="01ca140de15097b520f41dee0207b1cc2abf12e8433d64e34566b8aaf471aeb787f4e7fdc889826f55ef0762ba2af9d2c970a5c0dfeaf11f6ede955797b74f6b55c0b4711d34ab20", 0x48}, {&(0x7f0000000c80)="9c48cf4047a1ddbe1aefd66f1c48c1ddcb96f71f0641c74ea2e4f7c400359b4a79e87bf4493c325ebe51d1a1a0da172e6636dd6952bdadce20da9419717f7f2950ddcf21654cd946a0d7a4c6baf01ae666d1ab688dc510e30d045070b953a4a4b3ee80164d88d9997549c44a853b65c2cd2b3250a10435b454a481467a0339bf130500b451134de69ad068a310e2e6a4f92b7764866071f66e22f994e7ebcf58ce0c1091", 0xa4}, {&(0x7f0000000d40)="248ac3e45449ec2b9d", 0x9}], 0x5, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x100000}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xc0}}, {{&(0x7f0000000ec0)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="f549e3a1b77d22ef7aba6993e99d82e8507a5188ede3bdef7f25c1a15ff2fce6a86cbb143321edb61b2b7164bd2596cd0d68e9d6a524330dd02c0d136dcfc73edf49f21cf39d3305cbd0b1", 0x4b}], 0x1, &(0x7f0000001000)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5972}}, @timestamping={{0x14, 0x1, 0x25, 0x8dd}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x3b3}}], 0xa8}}], 0x3, 0x4085) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000140)=0xff, 0x4) write$P9_RVERSION(r6, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x1006, 0x8, '9P2000.L'}, 0x15) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='\\\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r2, 0x1, 0x4a, &(0x7f0000000240)=0xfffffffd, 0x4c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 18.954098637s ago: executing program 4 (id=975): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) (async) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0x400007f) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0xc0000001, 0x8, 0x9, 0x7f, 0x400}, {0xd, 0xfffffffb, 0x1, 0xc1, 0x6}]}) 18.942925417s ago: executing program 4 (id=976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff00000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 18.8724812s ago: executing program 4 (id=977): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x384, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x3, 0x20, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0xffff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x30, 0xb3, {0xa, 0x25, 0x25, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0xfd, 0x2, {0xa, 0x25, 0x25, 0x2, 0x1, 0x81}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="2903145b6c2d7affffffffffff3798a1247728aa7a19451a5fc5e7081bf141ba577dd91e62d86ade41"]}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x10010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(0x0, 0x80) 17.566543374s ago: executing program 4 (id=986): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000110001"], 0x30}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x2, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x80000000, 0xffffffff, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x4, 0x0, 0x0, 0x5, 0x2000, 0x2, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) fsmount(r2, 0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000000)={0x20, 0x2, 0xef, {0xef, 0x2e, "4b2111fbffee79a2462e51d9d951ea74e3287443a01c4d2715773307f40bf37d9f7dc2bcac80c1c52657022be7f05e1287fac18f269585e8480e729315c0cf6928351242a873e5b8b9c1797d717f91f71757688f79f436e8fa22920e7f97636b2997457a3802d9862739aed63c60bae3f352b4d41d5af63a2d0a0e48f4de973f80bc786e9eb79a0840a54723dd7bd0b9ac315761de5210989f98e6a2c62095a758d378da7922d3f7adf9328d9a87935bffe101cda1a04bab2280a2c679261d593e14e0469f6e49906b65d9ec440e63747e10702a9dc640bdb76287c98c8612250f6cf095d7292665a56a568d29"}}, &(0x7f0000000380)={0x0, 0x3, 0x88, @string={0x88, 0x3, "d326087c81c19241594d4f6ec45838241783e7c7a622eead42371a919bdabdb06fd648e43244e42566e47c37c7d5fb0fe8cbf69dae37975f021be09afe27cfe02649502596fe00576f280664b22166c0316dd7714daf9f0d260f3e017ba23402baf630e3214515cc0c2251cdb9ae3aa3d598e933df455b7d1d47102e68cf74141163ec72118e"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x40, 0x2b, 0xa6, "af783b14df0581d409d1a630bbca7ee12b4fdd6288ac88b0039ff4ad21264c2ffcf171e741410c524a04b98918428820dfa0cdf6c822552bb624a4727e88097bacc42f722e3d28088f963e493e9bfb2a994a19246615a847ac83732fd68fb318d260600391a4d8a2d477707dd986f044c692258f2bb97019a9bc093a6748fc4d7bf8cd673baf8ae0451e969c026bcdc232d256d57f4974aa89daf604dd3f8b2a5986890a5ab0"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "45ba"}, &(0x7f0000000600)={0x20, 0x82, 0x2, "a6d9"}, &(0x7f0000000640)={0x20, 0x83, 0x2, "e4fc"}, &(0x7f0000000680)={0x20, 0x84, 0x3, "c446fd"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, 'gsg'}}) 17.011856133s ago: executing program 4 (id=995): r0 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x2a4a40, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) open(&(0x7f0000000040)='./bus\x00', 0x143bc2, 0x1c0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffd) r5 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x7, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) linkat(r6, &(0x7f0000000440)='./bus\x00', r6, &(0x7f0000000480)='./file0\x00', 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2608c0, 0x0) ioctl$TIOCEXCL(r7, 0x540c) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) tkill(r8, 0x19) ptrace(0x10, r8) timer_create(0x7, &(0x7f0000000180)={0x0, 0x11, 0x0, @tid=r8}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x77359400}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4a23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x6, 0x95d, 0xfffffffffffffffb, 0x2, 0x40, 0x6}, {0x40000e, 0x5, 0xb1b, 0x79}, 0x401, 0x8000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) 15.775726375s ago: executing program 4 (id=1010): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x2000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0x7, 0x7f, 0x7, 0xfe, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xe, 0x2, 0x7, 0x2, 0x5, 0x2, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x1, 0x1]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x43400078, 0x1000000000, 0x5, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff, 0x10}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000007999ecc90700000000000000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) memfd_create(0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103", @ANYRES16=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r4, 0x5f382000) (async) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f00000001c0)=""/126, 0x7e}], 0x5}}], 0x2, 0x0, 0x0) 6.298596317s ago: executing program 2 (id=1056): r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x81, 0x7fc00000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x6, 0x43, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0x0, 0x3, 0x0, 0x6, 0x7, 0xe, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x6, 0x9}, {0xffff1000, 0x100000, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0xfd, 0x2e}, {0x2, 0x3000, 0x0, 0x26, 0x7, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x9000, 0xd, 0x5, 0x3, 0x3, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xd000, [0x1, 0x401, 0x0, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000bc0)={0x2, 0x0, @ioapic={0x33325000, 0xb, 0xa, 0xfffffffe, 0x0, [{0xc, 0x6, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x2f, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0xff}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x8}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x2, 0x4, '\x00', 0xc}, {0xef, 0x6, 0x9, '\x00', 0xd}, {0xc, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0x1d, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xfe}, {0x92, 0x6, 0xfa}]}}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1, 0x0, 0x0, 0x20011}, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010000001044060e80400001020301090285000301ffc00c080b0002010130070904000000010130000a2401100a00ff0300000904010000010230000904010101010230001724010304000000ff7f0400000000000000070100fc0909050109010400090402000001023000090402010101023000090582090800fa1a020a252504000000055d00"], 0x0) 3.491711662s ago: executing program 0 (id=1070): socket$key(0xf, 0x3, 0x2) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001c00100229bd7000fbdbdf25330c00f0000b000000050019002b000000000000"], 0x24}}, 0x0) r4 = getpgrp(0xffffffffffffffff) setpgid(r2, r4) (async) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0xd1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) r5 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r5, &(0x7f0000000240), 0xfdef) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x500, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x9, 0x2da}) (async) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f01c2b8bce7aca10f23c00f21f835020006000f23f8b8008000000f23d00f21f8351000000c0f23f8c4e129f2210f01c566baf80cb8b2a59b8fef66bafc0c66ed0f09b9800000c00f320f300f30f30f1ed2", 0x38}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) read$FUSE(r5, &(0x7f0000002440)={0x2020}, 0x2020) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0xb8) 3.414392275s ago: executing program 0 (id=1071): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x2000001, 0x400, 0x5, 0x7, 0x4, 0x0, 0x2, 0x400, 0x6, 0x5}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x6}, 0x0, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 3.188606832s ago: executing program 2 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000001900150000000000fffffffe0a396385a30673cc34d000000002020000000000000c0009"], 0x28}], 0x1}, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00000cb000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd15, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_STATUS={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@subsystem='cpuset'}, {@none}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@name={'name', 0x3d, '^'}}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup\x00'}}]}) 3.079030006s ago: executing program 3 (id=1073): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d00000001088812fd010000000000000000000000000000ff0200000000000000000000000000014e204e23000890"], 0xfdef) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x4100) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x1, r4, 'id1\x00'}) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000580)) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000040)) 2.994342699s ago: executing program 3 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) futex(&(0x7f0000000000)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = syz_io_uring_setup(0x513d, &(0x7f00000001c0)={0x0, 0x3b42, 0x400, 0xffffffff, 0x3c1, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000280)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x25dfdc00, {{}, {}, {0x18, 0x17, {0x0, 0x5, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) 2.189248656s ago: executing program 3 (id=1075): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) io_setup(0x197, &(0x7f0000000440)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x31) (async) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x1b1402, 0x7b) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x0, r3, 0x0}]) (async) epoll_create1(0x0) (async) socket$nl_route(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x8, 0x6, 0x5, 0xc}, @ipv4=@generic={{0xa, 0x4, 0x2, 0x16, 0x1ab, 0x78, 0x0, 0x9, 0x11, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x5d, [@private=0xa010100, @multicast1, @rand_addr=0x64010100, @local]}]}}, "4658351738806ded05427a07dab063fd416d24e0689d552734f601503f4d395e7794229315d4d39f6453b5b0e5c4dcba679704b8245844ad9a2df7cc05734f08c63ab32f66f8ea4dec60fca3e11c64a5fdcb41dc8291282d4a0a6af9727ea119edaa53714fd2a7580edf4ff0356e360ecb0d38182fceed1ab2f6644125d5b71317c22f61205aa6554478e03cf7392e0d8e54a557f12d0db842a1e05c2d4de2d3aa4a681afee8eb9f08acc29c75e5698887c7fc925dbcfc2fb8512da9d621f4c33a51d14be564816e16d2d1cf77e7441af104aece606f6597699104233cb55c01074f73deafca015512bfa39941c6d256879c7ce230d27ba2736821a57bf96825d88cfbdddd5e48f7fad1114783079b98df132a85a5c8882be087b9d4040d603e82ad4d1b373b1a5cb484cc563bf07ec7f6415223e5bee1b60b2cd4ded9b1608f5137a2199c82672d0d73bd6f03112691fa97cf2bd22eb53cb1729e33e4d4907af29ba773a7961582dab8af2c737a67175b00f62745cdc0389040171dfe3c1b0f3e104a"}}, 0x1b5) (async, rerun: 32) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) (rerun: 32) 1.600552446s ago: executing program 3 (id=1076): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000240)=0x6, 0x8) listen(r3, 0x204) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x8440, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup(r6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2a, &(0x7f0000000180)=0x77, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0a008ea8ffffffffffffaaaaaaaaaaaa86dd6a9ea914002006fffe80000000aa4383ff88352c1231e986a600000000000000000000aafe8000000000000000000000000000bb0000000000000000000000000000000200004e2200004e000200000002000000"], 0x5a) 1.538360668s ago: executing program 3 (id=1077): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472796c6f636b2086"], 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0xffffff41) sendmmsg$inet(r2, &(0x7f0000000900), 0x0, 0x2400c040) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/hci\x00') r4 = memfd_create(&(0x7f0000000540)='\t^\x1bx1\xc7\xbe\xa1\xc6F\xfa\x82q\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~sr\xc8\xf7H\x83\xd1Js\\\xb2\xc5\xed\xe8\x7f\xc7\x15?\v\xad\xe7Z\x9e\x02K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\x00\x00\x00\x00\x00\x00\x00\x04\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb3( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x91\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x13\x96\xf9\xda\x88W\x11\x0f,\xf9T\x01h\x0f&/B\xa5\b%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\xe2\xff\xff', 0x6) recvfrom$inet(r2, &(0x7f0000000040)=""/54, 0x36, 0x100, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) fchmod(r4, 0x1c0) fstat(r3, &(0x7f0000000100)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0xc6, 0x3, 0x3, 0xc, 0xa, 0xd0}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x25}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r9, &(0x7f0000000300)='1\x00', 0x2) r10 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240)="6ea59508", 0x4, 0xffffffffffffffff) keyctl$update(0x2, r10, 0x0, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001200192340834b80040d8c560a067f024e22000000010001000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000010000000000", 0x58}], 0x1) socket$unix(0x1, 0x2, 0x0) 1.433075562s ago: executing program 2 (id=1078): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000000000)='/dev/net/tun\x00') r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000440)={{}, 0x5, 0xe9c, 0x5}) 1.405030163s ago: executing program 0 (id=1079): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0x8004b707, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/157, 0x9d, 0x0, &(0x7f0000000340)=""/249, 0xf9}, &(0x7f00000004c0)=0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 1.350330175s ago: executing program 2 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5, 0x80) lseek(r0, 0x16, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ffffffff", 0x58}], 0x1) getdents64(r0, &(0x7f0000000200)=""/119, 0x77) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r5, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}]) 1.350192945s ago: executing program 0 (id=1081): prctl$PR_CAPBSET_DROP(0x18, 0x25) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r1, &(0x7f0000000300)) (async) timer_gettime(r1, &(0x7f0000000300)) ptrace(0x10, r0) (async) ptrace(0x10, r0) r2 = timerfd_create(0x1, 0x0) timerfd_gettime(r2, &(0x7f0000000080)) (async) timerfd_gettime(r2, &(0x7f0000000080)) ptrace(0x10, r0) r3 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') (async) r4 = syz_open_procfs(r3, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x1}) ptrace(0x11, r0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x4, 0x5, 0x4, 0x0, 0x4, 0x9}) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) 1.278671007s ago: executing program 2 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write(r0, &(0x7f0000000140)="1c00000018000711ab092500090007000a0700030000000600003693", 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090582"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x1000]}, &(0x7f0000000080), 0x8) 707.678397ms ago: executing program 33 (id=1010): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x2000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0x7, 0x7f, 0x7, 0xfe, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xe, 0x2, 0x7, 0x2, 0x5, 0x2, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x1, 0x1]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x43400078, 0x1000000000, 0x5, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff, 0x10}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000007999ecc90700000000000000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) memfd_create(0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103", @ANYRES16=r5], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r4, 0x5f382000) (async) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0) (async) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f00000001c0)=""/126, 0x7e}], 0x5}}], 0x2, 0x0, 0x0) 705.637787ms ago: executing program 3 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)={0x40, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x24, 0x125, 0x0, 0x1, [@typed={0xa, 0x13, 0x0, 0x0, @str='wlan1\x00'}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 100.898807ms ago: executing program 0 (id=1085): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000040), 0x6e, &(0x7f0000000600)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/196, 0xc4}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/45, 0x2d}, {&(0x7f0000000580)=""/121, 0x79}], 0x9, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x40002100) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x134, 0x3, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x5962406c573abb36}, 0x20000004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000400)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f00000001c0)=0x5}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000940)) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r10 = socket(0x2, 0x2, 0x1) bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e) bind$can_raw(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) write$selinux_user(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="73797374656d5f753ac2f3303363745f723a6574635f743a733020757365725f7500"], 0x22) 100.240647ms ago: executing program 5 (id=1083): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, &(0x7f0000000200), 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) lseek(r1, 0x11, 0x4) fcntl$getflags(r1, 0x408) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x300) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000000)=""/108) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r5, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x8a, 0x1, 0x6, 0x4, @private2, @mcast1, 0x8, 0x700, 0x9, 0x2}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7001fe9bdf251300000008000300", @ANYRES32=r12, @ANYBLOB="040013000600b50066060000140006"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x88, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008800}, 0x2008000) 99.986277ms ago: executing program 0 (id=1086): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x81007702, 0x2) (async) socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x74bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8, 0x90, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2f, 0x2, 0x0, 0x23}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x82, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0xe, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0xa0, 0xff, 0x7f, 0x35, {0x7, 0x25, 0x1, 0x0, 0x1, 0xf}}}}}}}}]}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8806) (async) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f0000000000), 0x4) (async) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x464, 0x4, 0x70bd2b, 0x25dfdbfc, "62c6ed6e5147930ea3962d1e88afcb150a187c02274c838bb7a2e475a96f544c691494c2152bd01492745f666c837c34bb6c945abdbb3df482587ddab7f8f5b3591f2918d280e8ff3bff1ebc2c136a714a38b12cf2d20ef2ec798bcb3a753e66c9a302bc59c78cf20fec3f75269c69c30347da59adc3692479d1f7", ["", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x4a020}, 0x40d0) 99.483347ms ago: executing program 5 (id=1087): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) 46.444629ms ago: executing program 5 (id=1088): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x2000001, 0x400, 0x5, 0x7, 0x4, 0x0, 0x2, 0x400, 0x6, 0x5}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x6}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 0s ago: executing program 2 (id=1089): msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x8a06aa286e03a994, 0x92, 0x23}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/50, 0x32, 0x1, &(0x7f0000000140)=""/101, 0x65}, &(0x7f0000000200)=0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="1e0cd9ae2a1358a69bd7ea0167be8fccdeb09a38aca1adecd344323a4274ee5e4446ae30fb6e12a9e965bf44c61e3587beed78a59f1a611307187945c39d4a5d0b36fceb475912d220b0f3d455cc347f4ee0f186f64afaa0a952f430dc94a31b0827b9bfd06c9b8faca62eeb3048f62b3a3f02f510d69216d5a2df8ed9434c401eecbd7193a0b4fad250978d2e8c37c4461d4e7bd6a118984b371a6b116021d683a9737334cf555a6dc73b4f5782b59f896c8f878135b0baa63616bb2a1f2e7b2a696bce4d3dfdbb0860e9a228525011d8c44ba91d"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): d net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 97.330577][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 97.340362][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 97.350714][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 97.360325][ T46] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 97.370058][ T46] usb 1-1: USB disconnect, device number 41 [ 98.055327][ T454] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 98.082580][ T362] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 98.090983][ T362] usb 5-1: unit 83 not found! [ 98.095765][ T362] usb 5-1: unit 1 not found! [ 98.100444][ T362] usb 5-1: unit 8 not found! [ 98.112321][ T362] usb 5-1: USB disconnect, device number 25 [ 98.126048][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.149452][ T2010] +$<: renamed from bridge0 (while UP) [ 98.206172][ T454] usb 1-1: device descriptor read/64, error -71 [ 98.263869][ T2019] netlink: 316 bytes leftover after parsing attributes in process `syz.2.571'. [ 98.273605][ T2019] netlink: 316 bytes leftover after parsing attributes in process `syz.2.571'. [ 98.445297][ T454] usb 1-1: device descriptor read/64, error -71 [ 98.495303][ T362] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 98.531526][ T36] audit: type=1400 audit(1775210838.810:367): avc: denied { write } for pid=2033 comm="syz.2.576" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.531933][ T2035] random: crng reseeded on system resumption [ 98.575333][ T36] audit: type=1400 audit(1775210838.810:368): avc: denied { open } for pid=2033 comm="syz.2.576" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.645296][ T362] usb 5-1: Using ep0 maxpacket: 16 [ 98.651735][ T362] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 98.660285][ T362] usb 5-1: config 1 has no interface number 0 [ 98.669728][ T362] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 98.680102][ T362] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 98.690614][ T362] usb 5-1: config 1 interface 105 has no altsetting 0 [ 98.707933][ T454] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 98.720369][ T362] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 98.735328][ T362] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.743556][ T362] usb 5-1: Product: syz [ 98.747978][ T362] usb 5-1: Manufacturer: syz [ 98.755462][ T362] usb 5-1: SerialNumber: syz [ 98.769630][ T2012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.776935][ T2012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.845368][ T454] usb 1-1: device descriptor read/64, error -71 [ 99.115300][ T454] usb 1-1: device descriptor read/64, error -71 [ 99.125323][ T361] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 99.221671][ T2012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.225842][ T454] usb usb1-port1: attempt power cycle [ 99.229272][ T2012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.286257][ T361] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.294583][ T361] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.304915][ T361] usb 3-1: config 220 has no interface number 2 [ 99.311956][ T361] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.325485][ T361] usb 3-1: config 220 interface 0 has no altsetting 0 [ 99.332276][ T361] usb 3-1: config 220 interface 76 has no altsetting 0 [ 99.339168][ T361] usb 3-1: config 220 interface 1 has no altsetting 0 [ 99.347289][ T361] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.356384][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.364399][ T361] usb 3-1: Product: syz [ 99.368612][ T361] usb 3-1: Manufacturer: syz [ 99.373232][ T361] usb 3-1: SerialNumber: syz [ 99.582834][ T361] usb 3-1: selecting invalid altsetting 0 [ 99.588763][ T361] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 99.595129][ T361] usb 3-1: No valid video chain found. [ 99.600681][ T454] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 99.610786][ T361] usb 3-1: USB disconnect, device number 42 [ 99.626486][ T454] usb 1-1: device descriptor read/8, error -71 [ 99.756400][ T454] usb 1-1: device descriptor read/8, error -71 [ 99.762788][ T2069] netlink: 'syz.3.587': attribute type 10 has an invalid length. [ 99.770894][ T2069] netlink: 5 bytes leftover after parsing attributes in process `syz.3.587'. [ 99.779837][ T2069] bridge_slave_1: entered allmulticast mode [ 99.907017][ T362] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 99.918106][ T362] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 99.931042][ T362] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, be:63:84:0c:e5:39 [ 99.945045][ T362] usb 5-1: USB disconnect, device number 26 [ 99.952145][ T362] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 99.988498][ T362] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 99.997933][ T454] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 100.005626][ T362] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 100.014974][ T362] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 100.036388][ T454] usb 1-1: device descriptor read/8, error -71 [ 100.166455][ T454] usb 1-1: device descriptor read/8, error -71 [ 100.275383][ T454] usb usb1-port1: unable to enumerate USB device [ 100.345764][ T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 100.400597][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 100.400621][ T36] audit: type=1400 audit(1775210840.680:385): avc: denied { mount } for pid=2116 comm="syz.3.595" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 100.434083][ T36] audit: type=1400 audit(1775210840.700:386): avc: denied { search } for pid=2116 comm="syz.3.595" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.463892][ T36] audit: type=1400 audit(1775210840.700:387): avc: denied { read } for pid=2116 comm="syz.3.595" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.486121][ T36] audit: type=1400 audit(1775210840.700:388): avc: denied { open } for pid=2116 comm="syz.3.595" path="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.526758][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.535115][ T31] usb 3-1: config 118 has too many interfaces: 228, using maximum allowed: 32 [ 100.544979][ T31] usb 3-1: config 118 has 1 interface, different from the descriptor's value: 228 [ 100.554352][ T31] usb 3-1: config 118 has no interface number 0 [ 100.560679][ T31] usb 3-1: config 118 interface 120 has no altsetting 0 [ 100.569436][ T31] usb 3-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=65.3b [ 100.578609][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.586865][ T31] usb 3-1: Product: 챬㉳텋睺黬瞧孚뺼ࡖ︟ [ 100.594079][ T31] usb 3-1: Manufacturer: ю [ 100.598679][ T31] usb 3-1: SerialNumber: syz [ 100.806242][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.814837][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.825503][ T362] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 100.826498][ T31] usb 3-1: Found UVC 0.00 device 챬㉳텋睺黬瞧孚뺼ࡖ︟ (0408:4035) [ 100.842295][ T31] usb 3-1: Forcing UVC version to 1.0a [ 100.847928][ T31] usb 3-1: No valid video chain found. [ 100.854253][ T31] usb 3-1: USB disconnect, device number 43 [ 100.905765][ T36] audit: type=1400 audit(1775210841.190:389): avc: denied { setopt } for pid=2127 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.995440][ T362] usb 5-1: Using ep0 maxpacket: 32 [ 101.001868][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.023025][ T362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.035275][ T362] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 101.054639][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.063505][ T362] usb 5-1: config 0 descriptor?? [ 101.265297][ T454] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 101.346071][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.352585][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.407564][ T2143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 101.416551][ T2143] erspan0: left allmulticast mode [ 101.421675][ T2143] erspan0: left promiscuous mode [ 101.426941][ T2143] bridge0: port 3(erspan0) entered disabled state [ 101.434103][ T2143] bridge_slave_1: left allmulticast mode [ 101.440002][ T2143] bridge_slave_1: left promiscuous mode [ 101.445795][ T2143] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.453700][ T454] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.453924][ T2143] bridge_slave_0: left allmulticast mode [ 101.467469][ T2143] bridge_slave_0: left promiscuous mode [ 101.473136][ T2143] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.480970][ T454] usb 1-1: config 6 has an invalid interface number: 78 but max is 0 [ 101.489181][ T454] usb 1-1: config 6 has no interface number 0 [ 101.495341][ T454] usb 1-1: config 6 interface 78 has no altsetting 0 [ 101.503674][ T454] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=d8.c6 [ 101.512847][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.520957][ T454] usb 1-1: Product: syz [ 101.525166][ T454] usb 1-1: Manufacturer: syz [ 101.529864][ T454] usb 1-1: SerialNumber: syz [ 101.552396][ T2124] syzkaller1: entered promiscuous mode [ 101.558036][ T2124] syzkaller1: entered allmulticast mode [ 101.568000][ T362] nintendo 0003:057E:200E.000B: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 101.635295][ T362] nintendo 0003:057E:200E.000B: Failed charging grip handshake [ 101.643035][ T362] nintendo 0003:057E:200E.000B: Failed to initialize controller; ret=-110 [ 101.652640][ T362] nintendo 0003:057E:200E.000B: probe - fail = -110 [ 101.659520][ T362] nintendo 0003:057E:200E.000B: probe with driver nintendo failed with error -110 [ 101.737935][ T454] hub 1-1:6.78: bad descriptor, ignoring hub [ 101.744037][ T454] hub 1-1:6.78: probe with driver hub failed with error -5 [ 101.765650][ T454] usb 1-1: USB disconnect, device number 46 [ 101.816456][ T362] usb 5-1: USB disconnect, device number 27 [ 101.899566][ T2158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 102.251099][ T2169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.610'. [ 102.260170][ T2170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.610'. [ 102.341084][ T36] audit: type=1400 audit(1775210842.620:390): avc: denied { getopt } for pid=2179 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.379464][ T36] audit: type=1400 audit(1775210842.660:391): avc: denied { getopt } for pid=2187 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.400056][ T36] audit: type=1400 audit(1775210842.670:392): avc: denied { accept } for pid=2190 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 102.665398][ T362] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 102.725332][ T331] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 102.816427][ T362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.827412][ T362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.837186][ T362] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 102.846276][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.855355][ T362] usb 1-1: config 0 descriptor?? [ 102.876863][ T331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.885047][ T331] usb 5-1: not running at top speed; connect to a high speed hub [ 102.893591][ T331] usb 5-1: config 74 has an invalid interface number: 193 but max is 0 [ 102.901972][ T331] usb 5-1: config 74 has an invalid interface number: 244 but max is 0 [ 102.910483][ T331] usb 5-1: config 74 has 2 interfaces, different from the descriptor's value: 1 [ 102.919581][ T331] usb 5-1: config 74 has no interface number 0 [ 102.925814][ T331] usb 5-1: config 74 has no interface number 1 [ 102.932063][ T331] usb 5-1: config 74 interface 193 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 102.943157][ T331] usb 5-1: config 74 interface 193 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 102.954149][ T331] usb 5-1: config 74 interface 193 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 102.967342][ T331] usb 5-1: too many endpoints for config 74 interface 244 altsetting 55: 72, using maximum allowed: 30 [ 102.978472][ T331] usb 5-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 102.989789][ T331] usb 5-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 103.000879][ T331] usb 5-1: config 74 interface 244 altsetting 55 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 103.012050][ T331] usb 5-1: config 74 interface 244 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 72 [ 103.025402][ T331] usb 5-1: config 74 interface 193 has no altsetting 0 [ 103.032299][ T331] usb 5-1: config 74 interface 244 has no altsetting 0 [ 103.040719][ T331] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=d3.89 [ 103.049828][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.057958][ T331] usb 5-1: Product: syz [ 103.062631][ T331] usb 5-1: Manufacturer: syz [ 103.067485][ T331] usb 5-1: SerialNumber: syz [ 103.073414][ T331] usb 5-1: Interface #244 referenced by multiple IADs [ 103.080608][ T2196] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 103.093004][ T2202] syz.3.621: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 103.107795][ T2202] CPU: 0 UID: 0 PID: 2202 Comm: syz.3.621 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 103.107832][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.107847][ T2202] Call Trace: [ 103.107857][ T2202] [ 103.107863][ T2202] __dump_stack+0x21/0x30 [ 103.107888][ T2202] dump_stack_lvl+0x140/0x1c0 [ 103.107925][ T2202] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.107944][ T2202] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 103.107968][ T2202] dump_stack+0x19/0x20 [ 103.107985][ T2202] warn_alloc+0x1e7/0x2c0 [ 103.108001][ T2202] ? stack_depot_save_flags+0x399/0x800 [ 103.108022][ T2202] ? __cfi_warn_alloc+0x10/0x10 [ 103.108037][ T2202] ? kasan_save_track+0x3e/0x80 [ 103.108059][ T2202] ? kasan_save_alloc_info+0x40/0x50 [ 103.108077][ T2202] ? xsk_init_queue+0xb2/0x120 [ 103.108090][ T2202] ? xsk_setsockopt+0x42c/0x760 [ 103.108102][ T2202] ? do_sock_setsockopt+0x27c/0x410 [ 103.108122][ T2202] ? __x64_sys_setsockopt+0x1b7/0x250 [ 103.108141][ T2202] ? x64_sys_call+0x2adc/0x2ee0 [ 103.108162][ T2202] ? do_syscall_64+0x57/0xf0 [ 103.108182][ T2202] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.108205][ T2202] __vmalloc_node_range_noprof+0x132/0x1480 [ 103.108226][ T2202] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 103.108245][ T2202] ? kasan_save_alloc_info+0x40/0x50 [ 103.108281][ T2202] ? __kasan_kmalloc+0x96/0xb0 [ 103.108314][ T2202] ? __kmalloc_cache_noprof+0x23c/0x470 [ 103.108350][ T2202] vmalloc_user_noprof+0x77/0x90 [ 103.108375][ T2202] ? xskq_create+0xdb/0x290 [ 103.108390][ T2202] xskq_create+0xdb/0x290 [ 103.108405][ T2202] xsk_init_queue+0xb2/0x120 [ 103.108419][ T2202] xsk_setsockopt+0x42c/0x760 [ 103.108433][ T2202] ? __cfi_xsk_setsockopt+0x10/0x10 [ 103.108447][ T2202] ? do_futex+0x32a/0x510 [ 103.108466][ T2202] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 103.108490][ T2202] ? security_socket_setsockopt+0x3d/0x100 [ 103.108506][ T2202] ? __cfi_xsk_setsockopt+0x10/0x10 [ 103.108520][ T2202] do_sock_setsockopt+0x27c/0x410 [ 103.108542][ T2202] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 103.108577][ T2202] __x64_sys_setsockopt+0x1b7/0x250 [ 103.108597][ T2202] x64_sys_call+0x2adc/0x2ee0 [ 103.108619][ T2202] do_syscall_64+0x57/0xf0 [ 103.108640][ T2202] ? clear_bhb_loop+0x50/0xa0 [ 103.108653][ T2202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.108675][ T2202] RIP: 0033:0x7fadffd9c819 [ 103.108692][ T2202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.108706][ T2202] RSP: 002b:00007fae00bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.108721][ T2202] RAX: ffffffffffffffda RBX: 00007fae00015fa0 RCX: 00007fadffd9c819 [ 103.108732][ T2202] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000001 [ 103.108758][ T2202] RBP: 00007fadffe32c91 R08: 0000000000000004 R09: 0000000000000000 [ 103.108768][ T2202] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 103.108778][ T2202] R13: 00007fae00016038 R14: 00007fae00015fa0 R15: 00007ffd7893cb88 [ 103.108792][ T2202] [ 103.108858][ T2202] Mem-Info: [ 103.391619][ T502] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.419973][ T2202] active_anon:41055 inactive_anon:10 isolated_anon:0 [ 103.419973][ T2202] active_file:17759 inactive_file:2547 isolated_file:0 [ 103.419973][ T2202] unevictable:0 dirty:83 writeback:0 [ 103.419973][ T2202] slab_reclaimable:5358 slab_unreclaimable:72359 [ 103.419973][ T2202] mapped:31386 shmem:33087 pagetables:1130 [ 103.419973][ T2202] sec_pagetables:0 bounce:0 [ 103.419973][ T2202] kernel_misc_reclaimable:0 [ 103.419973][ T2202] free:1475043 free_pcp:2081 free_cma:0 [ 103.465736][ T2202] Node 0 active_anon:164280kB inactive_anon:40kB active_file:71036kB inactive_file:10188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125548kB dirty:332kB writeback:0kB shmem:132336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5120kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no [ 103.471026][ T362] pyra 0003:1E7D:2CF6.000C: item fetching failed at offset 6/7 [ 103.506897][ T362] pyra 0003:1E7D:2CF6.000C: parse failed [ 103.512635][ T362] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -22 [ 103.523672][ T2202] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963356kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:5192kB free_cma:0kB [ 103.554150][ T2202] lowmem_reserve[]: 0 3921 3921 [ 103.559249][ T2202] Normal free:2939924kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:166680kB inactive_anon:40kB active_file:71036kB inactive_file:10188kB unevictable:0kB writepending:332kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3184kB local_pcp:1860kB free_cma:0kB [ 103.590833][ T2202] lowmem_reserve[]: 0 0 0 [ 103.595294][ T2202] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 103.610988][ T2202] Normal: 29*4kB (UM) 53*8kB (UM) 16*16kB (UME) 79*32kB (UE) 54*64kB (UE) 37*128kB (UM) 29*256kB (UME) 31*512kB (UME) 19*1024kB (UME) 8*2048kB (UME) 700*4096kB (UME) = 2937852kB [ 103.629006][ T2202] 54997 total pagecache pages [ 103.633766][ T2202] 36 pages in swap cache [ 103.638105][ T2202] Free swap = 124460kB [ 103.642336][ T2202] Total swap = 124996kB [ 103.646572][ T2202] 2097051 pages RAM [ 103.650438][ T2202] 0 pages HighMem/MovableOnly [ 103.655168][ T2202] 352246 pages reserved [ 103.659469][ T2202] 0 pages cma reserved [ 103.667122][ T2202] Memory allocations: [ 103.671208][ T2202] 0 B 0 init/main.c:1477 func:do_initcalls [ 103.678499][ T2202] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 103.686652][ T2202] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 103.694360][ T2202] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 103.702375][ T2202] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 103.710417][ T2202] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 103.719121][ T2202] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 103.727113][ T2202] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 103.735192][ T2202] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 103.743376][ T2202] 0 B 0 init/initramfs.c:101 func:find_link [ 103.795395][ T363] usb 1-1: USB disconnect, device number 47 [ 104.002804][ T36] audit: type=1400 audit(1775210844.280:393): avc: denied { setattr } for pid=2218 comm="syz.3.626" name="CAN_RAW" dev="sockfs" ino=15143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.046422][ T2221] Dead loop on virtual device ip6_vti0, fix it urgently! [ 104.348980][ T2142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.363955][ T2225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 104.499167][ T36] audit: type=1400 audit(1775210844.780:394): avc: denied { mount } for pid=2229 comm="syz.2.631" name="/" dev="ramfs" ino=14210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 104.548010][ T2232] x_tables: duplicate entry at hook 1 [ 104.556549][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.559442][ T2232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 104.652023][ T2242] process 'syz.3.635' launched './file0' with NULL argv: empty string added [ 104.660855][ T363] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 104.816452][ T363] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 104.826680][ T363] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.841316][ T363] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 104.850531][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.858614][ T363] usb 1-1: Product: syz [ 104.862874][ T363] usb 1-1: Manufacturer: syz [ 104.867524][ T363] usb 1-1: SerialNumber: syz [ 104.874769][ T363] rtl8150 1-1:1.0: couldn't find required endpoints [ 104.881558][ T363] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 105.077433][ T362] usb 1-1: USB disconnect, device number 48 [ 105.449071][ T331] rndis_host 5-1:74.193: skipping garbage [ 105.457271][ T331] usb 5-1: bad CDC descriptors [ 105.462350][ T331] cdc_acm 5-1:74.193: skipping garbage [ 105.472115][ T331] usb 5-1: USB disconnect, device number 28 [ 105.705985][ T2270] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 105.713939][ T2270] SELinux: failed to load policy [ 105.765303][ T331] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 105.943511][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 105.943530][ T36] audit: type=1400 audit(1775210846.220:398): avc: denied { ioctl } for pid=2269 comm="syz.0.644" path="socket:[15232]" dev="sockfs" ino=15232 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.977839][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 105.987671][ T331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 106.015263][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 106.035292][ T331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 106.067231][ T331] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 106.076421][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.084453][ T331] usb 5-1: Product: syz [ 106.104421][ T331] usb 5-1: Manufacturer: syz [ 106.115287][ T331] usb 5-1: SerialNumber: syz [ 106.180047][ T331] usb 5-1: config 0 descriptor?? [ 106.187903][ T331] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 106.324455][ T2285] can0: slcan on ptm1. [ 106.366289][ T2285] can0 (unregistered): slcan off ptm1. [ 106.392432][ T331] scsi host1: usb-storage 5-1:0.0 [ 106.400745][ T331] usb 5-1: USB disconnect, device number 29 [ 106.585567][ T502] Bluetooth: hci0: command 0x1003 tx timeout [ 106.591631][ T503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.797935][ T36] audit: type=1400 audit(1775210847.080:399): avc: denied { write } for pid=2298 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.800851][ T2299] netlink: 'syz.0.653': attribute type 46 has an invalid length. [ 107.085338][ T331] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 107.139268][ T2315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.660'. [ 107.236380][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.246687][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.256331][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 107.265464][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.273465][ T331] usb 1-1: SerialNumber: syz [ 107.280927][ T331] usb 1-1: 0:2 : does not exist [ 107.405266][ T362] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 107.556777][ T362] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.565306][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.575497][ T362] usb 3-1: too many endpoints for config 1 interface 1 altsetting 245: 255, using maximum allowed: 30 [ 107.586497][ T362] usb 3-1: config 1 interface 1 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.599766][ T362] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.612670][ T362] usb 3-1: config 1 interface 1 has no altsetting 0 [ 107.620780][ T362] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 107.630566][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.638683][ T362] usb 3-1: Product: syz [ 107.642871][ T362] usb 3-1: Manufacturer: syz [ 107.647571][ T362] usb 3-1: SerialNumber: syz [ 107.680404][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.689063][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.732280][ T2334] can0: slcan on ptm0. [ 107.962926][ T36] audit: type=1400 audit(1775210848.240:400): avc: denied { mounton } for pid=2316 comm="syz.2.661" path="/153/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 107.963185][ T2351] fuseblk: Unknown parameter 'grup_id' [ 108.241951][ T2329] can0 (unregistered): slcan off ptm0. [ 108.473235][ T36] audit: type=1400 audit(1775210848.750:401): avc: denied { bind } for pid=2381 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.505320][ T454] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 108.685336][ T454] usb 5-1: Using ep0 maxpacket: 32 [ 108.693257][ T454] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 108.702469][ T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.710550][ T454] usb 5-1: Product: syz [ 108.714837][ T454] usb 5-1: Manufacturer: syz [ 108.719519][ T454] usb 5-1: SerialNumber: syz [ 108.926401][ T36] audit: type=1400 audit(1775210849.210:402): avc: denied { execute } for pid=2361 comm="syz.4.668" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.954998][ T454] usb 5-1: USB disconnect, device number 30 [ 108.967609][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 109.186046][ T2390] netlink: 9 bytes leftover after parsing attributes in process `syz.3.672'. [ 109.195045][ T2390] z00X: renamed from gretap0 [ 109.200867][ T2390] z00X: entered allmulticast mode [ 109.208122][ T2390] vlan1: entered promiscuous mode [ 109.213771][ T2389] vlan1: left promiscuous mode [ 109.326199][ T36] audit: type=1400 audit(1775210849.610:403): avc: denied { mount } for pid=2402 comm="syz.3.677" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.471244][ T36] audit: type=1400 audit(1775210849.750:404): avc: denied { sqpoll } for pid=2408 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.677069][ T36] audit: type=1400 audit(1775210849.960:405): avc: denied { append } for pid=2415 comm="syz.4.681" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.848773][ T306] usb 1-1: USB disconnect, device number 49 [ 109.965319][ T454] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 110.116298][ T454] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 110.124451][ T454] usb 5-1: config 0 has no interface number 0 [ 110.132089][ T454] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 110.141187][ T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.149235][ T454] usb 5-1: Product: syz [ 110.153453][ T454] usb 5-1: Manufacturer: syz [ 110.158126][ T454] usb 5-1: SerialNumber: syz [ 110.163504][ T454] usb 5-1: config 0 descriptor?? [ 110.175942][ T362] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 110.182679][ T362] usb 3-1: selecting invalid altsetting 0 [ 110.189299][ T454] ftdi_sio 5-1:0.32: FTDI USB Serial Device converter detected [ 110.197151][ T306] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 110.205119][ T454] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 110.225016][ T362] usb 3-1: USB disconnect, device number 44 [ 110.241935][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.335309][ T306] usb 1-1: device descriptor read/64, error -71 [ 110.546697][ T454] usb 5-1: USB disconnect, device number 31 [ 110.555753][ T454] ftdi_sio 5-1:0.32: device disconnected [ 110.595367][ T306] usb 1-1: device descriptor read/64, error -71 [ 110.635395][ T362] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 110.788696][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.799709][ T362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.810424][ T362] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.819554][ T362] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 110.827557][ T362] usb 3-1: Manufacturer: syz [ 110.832876][ T362] usb 3-1: config 0 descriptor?? [ 110.839671][ T306] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 110.973353][ T306] usb 1-1: device descriptor read/64, error -71 [ 111.043127][ T2449] netlink: 'syz.3.693': attribute type 6 has an invalid length. [ 111.160250][ T2466] overlayfs: failed to resolve './file2': -2 [ 111.167123][ T2466] overlayfs: failed to clone upperpath [ 111.207688][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.219158][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.230498][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.231528][ T306] usb 1-1: device descriptor read/64, error -71 [ 111.243504][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.262731][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.273979][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.285376][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.296547][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.307685][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.318796][ T2468] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 111.344987][ T66] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 111.365807][ T306] usb usb1-port1: attempt power cycle [ 111.466561][ T2439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.475386][ T2439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.485268][ T362] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 111.494274][ T362] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 111.502075][ T362] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 111.510156][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 111.517322][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.517433][ T362] usb 3-1: USB disconnect, device number 45 [ 111.538878][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.561742][ T66] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 111.571062][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.583990][ T66] usb 5-1: config 0 descriptor?? [ 111.726885][ T306] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 111.769239][ T306] usb 1-1: device descriptor read/8, error -71 [ 111.798849][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.807924][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.816103][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.824973][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.834174][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.842947][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.852035][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.860561][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.868785][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.877302][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.889826][ T66] usbhid 5-1:0.0: can't add hid device: -71 [ 111.895869][ T66] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.903577][ T306] usb 1-1: device descriptor read/8, error -71 [ 111.910684][ T66] usb 5-1: USB disconnect, device number 32 [ 112.149372][ T306] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 112.168349][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.177567][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.185948][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.194374][ T306] usb 1-1: device descriptor read/8, error -71 [ 112.200764][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.209590][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.219038][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.228013][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.232580][ T2485] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 112.236888][ T36] audit: type=1400 audit(1775210852.463:406): avc: denied { nlmsg_tty_audit } for pid=2484 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.245824][ T2485] overlayfs: missing 'lowerdir' [ 112.266696][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.280797][ T2485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2485 comm=syz.3.705 [ 112.281290][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.295185][ T2485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2485 comm=syz.3.705 [ 112.304002][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.324842][ T2485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2485 comm=syz.3.705 [ 112.326097][ T306] usb 1-1: device descriptor read/8, error -71 [ 112.417179][ T66] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 112.448309][ T306] usb usb1-port1: unable to enumerate USB device [ 112.571773][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 112.705735][ T66] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 112.860033][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 112.865544][ T66] usb usb3-port1: attempt power cycle [ 112.947826][ T2500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 113.219962][ T66] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 113.240883][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 113.343293][ T46] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 113.374148][ T66] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 113.395104][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 113.400542][ T66] usb usb3-port1: unable to enumerate USB device [ 113.477027][ T46] usb 1-1: device descriptor read/64, error -71 [ 113.521280][ T2510] overlayfs: failed to clone lowerpath [ 113.527317][ T2510] overlayfs: failed to clone lowerpath [ 113.548963][ T306] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 113.704363][ T306] usb 5-1: config 1 interface 0 has no altsetting 0 [ 113.712510][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.721629][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.729700][ T306] usb 5-1: Product: syz [ 113.733878][ T306] usb 5-1: Manufacturer: syz [ 113.734133][ T46] usb 1-1: device descriptor read/64, error -71 [ 113.738512][ T306] usb 5-1: SerialNumber: syz [ 113.957133][ T2502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.965864][ T2502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.977738][ T306] usb 5-1: USB disconnect, device number 33 [ 113.990809][ T46] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 114.073512][ T2515] fuse: Unknown parameter 'L' [ 114.124243][ T46] usb 1-1: device descriptor read/64, error -71 [ 114.370567][ T46] usb 1-1: device descriptor read/64, error -71 [ 114.483565][ T46] usb usb1-port1: attempt power cycle [ 114.619464][ T2531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.628612][ T2531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.832468][ T46] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 114.863207][ T306] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 115.017190][ T306] usb 5-1: Using ep0 maxpacket: 16 [ 115.024147][ T306] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.034648][ T306] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 115.044036][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.056056][ T306] usb 5-1: Product: syz [ 115.062622][ T306] usb 5-1: Manufacturer: syz [ 115.070634][ T306] usb 5-1: SerialNumber: syz [ 115.141018][ T46] usb 1-1: device descriptor read/8, error -71 [ 115.274531][ T46] usb 1-1: device descriptor read/8, error -71 [ 115.306325][ T306] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.315318][ T2539] netlink: 'syz.2.724': attribute type 12 has an invalid length. [ 115.316173][ T306] usb 5-1: found format II with max.bitrate = 5, frame size=11 [ 115.344952][ T306] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 115.367524][ T306] usb 5-1: USB disconnect, device number 34 [ 115.398492][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.432532][ T36] audit: type=1400 audit(1775210855.578:407): avc: denied { mount } for pid=2541 comm="syz.2.725" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.519056][ T46] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 115.550945][ T46] usb 1-1: device descriptor read/8, error -71 [ 115.684017][ T46] usb 1-1: device descriptor read/8, error -71 [ 115.795846][ T46] usb usb1-port1: unable to enumerate USB device [ 115.836722][ T424] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 115.991383][ T424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.007674][ T424] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.016822][ T424] usb 3-1: config 1 has no interface number 0 [ 116.023118][ T424] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.043104][ T424] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 116.054635][ T424] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 116.065545][ T424] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.074806][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.083220][ T424] usb 3-1: Product: syz [ 116.087445][ T424] usb 3-1: Manufacturer: syz [ 116.092093][ T424] usb 3-1: SerialNumber: syz [ 116.098396][ T2558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.115446][ T2558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.123466][ T2545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.440425][ T46] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 116.541998][ T2545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.891162][ T2583] netlink: 9 bytes leftover after parsing attributes in process `syz.4.738'. [ 116.900548][ T2583] gretap0: entered promiscuous mode [ 116.911718][ T2583] netlink: 5 bytes leftover after parsing attributes in process `syz.4.738'. [ 116.920583][ T2583] 0{X: renamed from gretap0 [ 116.933036][ T2583] 0{X: left promiscuous mode [ 116.938130][ T2583] 0{X: entered allmulticast mode [ 116.944641][ T2583] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 116.960188][ T424] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 116.962175][ T2579] netlink: 9 bytes leftover after parsing attributes in process `syz.3.737'. [ 116.978194][ T2579] z00X: entered promiscuous mode [ 116.983662][ T2579] z00X: left allmulticast mode [ 116.985775][ T424] cdc_ncm 3-1:1.1: bind() failure [ 116.995536][ T424] usb 3-1: USB disconnect, device number 50 [ 117.000070][ T2579] netlink: 5 bytes leftover after parsing attributes in process `syz.3.737'. [ 117.020734][ T2579] 0{X: renamed from z00X [ 117.030767][ T2579] 0{X: left promiscuous mode [ 117.035979][ T2579] 0{X: entered allmulticast mode [ 117.041977][ T2579] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 117.176248][ T36] audit: type=1400 audit(1775210857.278:408): avc: denied { remount } for pid=2591 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.196642][ T36] audit: type=1400 audit(1775210857.298:409): avc: denied { getopt } for pid=2591 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.738624][ T306] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 117.764429][ T36] audit: type=1400 audit(1775210857.856:410): avc: denied { create } for pid=2599 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.893106][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.904082][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.913919][ T306] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 117.923018][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.932134][ T306] usb 3-1: config 0 descriptor?? [ 117.963320][ T424] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 118.116351][ T424] usb 5-1: Using ep0 maxpacket: 8 [ 118.122553][ T424] usb 5-1: config 7 has an invalid interface number: 32 but max is 0 [ 118.130903][ T424] usb 5-1: config 7 has no interface number 0 [ 118.137034][ T424] usb 5-1: config 7 interface 32 has no altsetting 0 [ 118.145231][ T424] usb 5-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=ee.e5 [ 118.154379][ T424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.162636][ T424] usb 5-1: Product: syz [ 118.166956][ T424] usb 5-1: Manufacturer: syz [ 118.171611][ T424] usb 5-1: SerialNumber: syz [ 118.355740][ T306] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 118.363924][ T306] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 118.371423][ T306] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 118.378830][ T306] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 118.386787][ T306] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 118.393364][ T424] usb 5-1: NDI device with a latency value of 1 [ 118.401511][ T424] ftdi_sio 5-1:7.32: FTDI USB Serial Device converter detected [ 118.409226][ T306] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 118.410724][ T424] ftdi_sio ttyUSB0: unknown device type: 0xeee5 [ 118.431246][ T424] usb 5-1: USB disconnect, device number 35 [ 118.444007][ T424] ftdi_sio 5-1:7.32: device disconnected [ 118.561460][ T306] playstation 0003:054C:0DF2.000E: Failed to retrieve feature with reportID 9: -71 [ 118.572241][ T306] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense pairing info: -71 [ 118.582140][ T306] playstation 0003:054C:0DF2.000E: Failed to get MAC address from DualSense [ 118.590896][ T306] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 118.599242][ T306] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -71 [ 118.610179][ T306] usb 3-1: USB disconnect, device number 51 [ 118.843002][ T2608] netlink: 'syz.3.748': attribute type 8 has an invalid length. [ 118.916127][ T306] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 119.054883][ T306] usb 3-1: device descriptor read/64, error -71 [ 119.272922][ T36] audit: type=1400 audit(1775210859.336:411): avc: denied { bind } for pid=2621 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.299419][ T306] usb 3-1: device descriptor read/64, error -71 [ 119.543967][ T306] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 119.676454][ T306] usb 3-1: device descriptor read/64, error -71 [ 119.732626][ T2624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 119.741811][ T2624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2624 comm=syz.3.753 [ 119.931385][ T306] usb 3-1: device descriptor read/64, error -71 [ 120.043325][ T306] usb usb3-port1: attempt power cycle [ 120.104272][ T46] usb 1-1: device descriptor read/64, error -71 [ 120.368861][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 120.375869][ T46] usb 1-1: config 1 interface 0 altsetting 245 endpoint 0x81 has an invalid bInterval 99, changing to 10 [ 120.387310][ T46] usb 1-1: config 1 interface 0 altsetting 245 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 120.400651][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.408980][ T46] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 120.409696][ T306] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 120.418727][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.434169][ T46] usb 1-1: Product: syz [ 120.438484][ T46] usb 1-1: Manufacturer: ᖣ볂㘁曗๮새﷭⽢놤蹆ⴒ䢨ဍ睊⹠Ъ솉萶觙묷햙ꧽᢼ㫉뙽떅笿죻鵑贆⋓較綠澌쾽恧騖齙犉㔏㔅堤ﾔ⾍忈ਝǰ옋담ﱦ첀ᕦꪜꩅ⇇岼닝函➁櫑퍈駧ꁑ䱻虐ꨅ㮟礇龾䗳趨එ勪榤ఀ뉢Ś뀤㼓☗䝓࣪ಃ갾楔婻豑쐘褄⹡ḝꛨᛶ䍣ḩ拑ꘈ늳燁嘐嫿੨鮕㓢竘 [ 120.473619][ T46] usb 1-1: SerialNumber: syz [ 120.479593][ T46] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 120.488504][ T46] usb 1-1: no configuration chosen from 1 choice [ 120.489589][ T306] usb 3-1: device descriptor read/8, error -71 [ 120.589404][ T36] audit: type=1400 audit(1775210860.622:412): avc: denied { setattr } for pid=2645 comm="syz.2.761" path="socket:[16275]" dev="sockfs" ino=16275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.628749][ T2648] cgroup: none used incorrectly [ 120.635201][ T306] usb 3-1: device descriptor read/8, error -71 [ 120.669000][ T2652] tun0: tun_chr_ioctl cmd 1074025675 [ 120.674378][ T2652] tun0: persist enabled [ 120.678734][ T2652] tun0: tun_chr_ioctl cmd 1074025675 [ 120.684090][ T2652] tun0: persist enabled [ 121.029838][ T2662] fuse: Unknown parameter 'fd[' [ 121.709478][ T36] audit: type=1400 audit(1775210861.724:413): avc: denied { read } for pid=2670 comm="syz.2.771" laddr=172.20.20.170 lport=8 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.049770][ T2678] fuse: Bad value for 'group_id' [ 122.054776][ T2678] fuse: Bad value for 'group_id' [ 122.061716][ T2678] fuse: Unknown parameter 'u00000000000000000000' [ 122.068728][ T2678] fuse: Bad value for 'group_id' [ 122.073723][ T2678] fuse: Bad value for 'group_id' [ 122.099422][ T36] audit: type=1326 audit(1775210862.107:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadffd9c819 code=0x7ffc0000 [ 122.134437][ T36] audit: type=1326 audit(1775210862.107:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fadffd9c819 code=0x7ffc0000 [ 122.162457][ T36] audit: type=1326 audit(1775210862.107:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadffd9c819 code=0x7ffc0000 [ 122.185837][ T36] audit: type=1326 audit(1775210862.107:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadffd9c819 code=0x7ffc0000 [ 122.209943][ T2688] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 122.217925][ T2688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 122.219997][ T36] audit: type=1326 audit(1775210862.117:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadffd9c819 code=0x7ffc0000 [ 122.250456][ T36] audit: type=1326 audit(1775210862.117:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadffd9c819 code=0x7ffc0000 [ 122.876142][ T362] usb 1-1: USB disconnect, device number 58 [ 122.882276][ T2713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=2713 comm=syz.2.784 [ 122.960057][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 122.960076][ T36] audit: type=1400 audit(1775210862.954:440): avc: denied { create } for pid=2714 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 123.017806][ T2725] loop6: detected capacity change from 0 to 8 [ 123.123693][ T2726] loop6: detected capacity change from 8 to 7 [ 123.149981][ T2729] netlink: 'syz.4.789': attribute type 4 has an invalid length. [ 123.157839][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.167049][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.180938][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.190209][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.198146][ T2725] loop6: unable to read partition table [ 123.203875][ T2725] loop_reread_partitions: partition scan of loop6 (2iY~hh/,3</kƆxn1:rD) failed (rc=-5) [ 123.217494][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.226654][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.234768][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.243942][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.252150][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.261324][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.274571][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.283772][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.291981][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.298411][ T2731] rust_binder: Write failure EINVAL in pid:401 [ 123.301162][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 123.413007][ T46] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 123.590397][ T46] usb 5-1: device descriptor read/64, error -71 [ 123.793048][ T362] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 123.853941][ T46] usb 5-1: device descriptor read/64, error -71 [ 123.924920][ T363] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 123.962218][ T36] audit: type=1400 audit(1775210863.949:441): avc: denied { setopt } for pid=2741 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.985816][ T362] usb 1-1: Using ep0 maxpacket: 16 [ 123.992035][ T362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.003216][ T362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.013138][ T362] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.026092][ T362] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.035210][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.046742][ T362] usb 1-1: config 0 descriptor?? [ 124.087229][ T363] usb 3-1: Using ep0 maxpacket: 32 [ 124.093628][ T363] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 124.101871][ T363] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.112217][ T363] usb 3-1: config 0 has no interface number 0 [ 124.118518][ T363] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.131599][ T46] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 124.139195][ T363] usb 3-1: config 0 interface 196 has no altsetting 0 [ 124.147628][ T363] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 124.156731][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.164774][ T363] usb 3-1: Product: syz [ 124.169075][ T363] usb 3-1: Manufacturer: syz [ 124.173734][ T363] usb 3-1: SerialNumber: syz [ 124.179282][ T363] usb 3-1: config 0 descriptor?? [ 124.260671][ T2738] SELinux: failed to load policy [ 124.279823][ T46] usb 5-1: device descriptor read/64, error -71 [ 124.389988][ T363] ipheth 3-1:0.196: Unable to find endpoints [ 124.397438][ T363] usb 3-1: USB disconnect, device number 56 [ 124.469668][ T2738] netlink: 188 bytes leftover after parsing attributes in process `syz.0.792'. [ 124.532459][ T2738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.541006][ T46] usb 5-1: device descriptor read/64, error -71 [ 124.543616][ T2738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.562422][ T362] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input16 [ 124.575996][ T362] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 124.654962][ T46] usb usb5-port1: attempt power cycle [ 124.818008][ T363] usb 1-1: USB disconnect, device number 59 [ 124.999546][ T46] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 125.021221][ T46] usb 5-1: device descriptor read/8, error -71 [ 125.151468][ T424] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 125.162898][ T46] usb 5-1: device descriptor read/8, error -71 [ 125.304591][ T424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 125.315472][ T424] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.328278][ T424] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 125.337354][ T424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.346793][ T424] usb 3-1: config 0 descriptor?? [ 125.352344][ T2761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 125.404766][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 125.426087][ T46] usb 5-1: device descriptor read/8, error -71 [ 125.557668][ T46] usb 5-1: device descriptor read/8, error -71 [ 125.566338][ T424] uclogic 0003:28BD:0078.0010: interface is invalid, ignoring [ 125.627513][ T362] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 125.668146][ T46] usb usb5-port1: unable to enumerate USB device [ 125.759196][ T362] usb 1-1: device descriptor read/64, error -71 [ 125.768711][ T331] usb 3-1: USB disconnect, device number 57 [ 125.978377][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.803'. [ 126.002283][ T362] usb 1-1: device descriptor read/64, error -71 [ 126.245266][ T362] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 126.376848][ T362] usb 1-1: device descriptor read/64, error -71 [ 126.589250][ T361] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 126.599440][ T331] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 126.619623][ T362] usb 1-1: device descriptor read/64, error -71 [ 126.731131][ T362] usb usb1-port1: attempt power cycle [ 126.742413][ T361] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.750514][ T361] usb 3-1: not running at top speed; connect to a high speed hub [ 126.759168][ T361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.769464][ T361] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 126.779065][ T331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.787844][ T361] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 126.797039][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.805492][ T361] usb 3-1: Product: syz [ 126.809713][ T361] usb 3-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 126.827630][ T361] usb 3-1: SerialNumber: syz [ 126.833095][ T331] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 126.842142][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.850574][ T331] usb 5-1: Product: syz [ 126.855131][ T331] usb 5-1: Manufacturer: syz [ 126.859790][ T331] usb 5-1: SerialNumber: syz [ 126.867627][ T331] usb 5-1: selecting invalid altsetting 1 [ 126.873941][ T331] usb 5-1: unit 6 not found! [ 127.069115][ T454] usb 3-1: USB disconnect, device number 58 [ 127.075764][ T362] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 127.096392][ T362] usb 1-1: device descriptor read/8, error -71 [ 127.105945][ T2798] overlayfs: failed to clone upperpath [ 127.124136][ T2801] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.132058][ T2801] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.227636][ T362] usb 1-1: device descriptor read/8, error -71 [ 127.469398][ T362] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 127.492463][ T362] usb 1-1: device descriptor read/8, error -71 [ 127.632251][ T362] usb 1-1: device descriptor read/8, error -71 [ 127.649619][ T331] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 127.661341][ T331] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.671306][ T331] usb 5-1: selecting invalid altsetting 1 [ 127.677319][ T331] usb 5-1: unit 6 not found! [ 127.683133][ T331] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 127.691628][ T331] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 127.701914][ T331] usb 5-1: selecting invalid altsetting 1 [ 127.708285][ T331] usb 5-1: unit 6 not found! [ 127.713194][ T331] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 127.727569][ T331] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 127.738737][ T331] usb 5-1: USB disconnect, device number 40 [ 127.744923][ T362] usb usb1-port1: unable to enumerate USB device [ 127.758062][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.780971][ T36] audit: type=1400 audit(1775210867.712:442): avc: denied { name_bind } for pid=2815 comm="syz.3.818" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 128.066104][ T2822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.075127][ T2822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.084001][ T2822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.092554][ T2822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.100544][ T2822] lo: entered promiscuous mode [ 128.105728][ T2822] lo: left promiscuous mode [ 128.379310][ T66] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 128.530977][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 128.537639][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.546300][ T2832] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 128.554232][ T66] usb 3-1: config 3 has an invalid interface number: 11 but max is 0 [ 128.562378][ T66] usb 3-1: config 3 has no interface number 0 [ 128.568453][ T66] usb 3-1: config 3 interface 11 altsetting 225 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 128.579441][ T66] usb 3-1: config 3 interface 11 altsetting 225 has an invalid descriptor for endpoint zero, skipping [ 128.590415][ T66] usb 3-1: config 3 interface 11 has no altsetting 0 [ 128.598597][ T66] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=d4.bb [ 128.607699][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.616037][ T66] usb 3-1: Product: syz [ 128.620209][ T66] usb 3-1: Manufacturer: syz [ 128.624837][ T66] usb 3-1: SerialNumber: syz [ 128.698734][ T2835] fuse: Unknown parameter '0xffffffffffffffff' [ 128.784996][ T2839] syz.4.826 (2839): attempted to duplicate a private mapping with mremap. This is not supported. [ 128.837028][ T66] usbhid 3-1:3.11: couldn't find an input interrupt endpoint [ 128.845834][ T66] usb 3-1: USB disconnect, device number 59 [ 129.357050][ T2858] loop6: detected capacity change from 0 to 8 [ 129.363581][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.373864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.382019][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.392302][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.400242][ T2858] loop6: unable to read partition table [ 129.406235][ T2858] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 129.419799][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.430023][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.450934][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.461646][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.471865][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.479829][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.490073][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.497979][ T2859] loop6: unable to read partition table [ 129.503827][ T2859] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 129.517333][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.517361][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.527970][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.545623][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.553739][ T424] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 129.561719][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.571952][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.580063][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.590313][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.754570][ T424] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.762774][ T424] usb 1-1: not running at top speed; connect to a high speed hub [ 129.772892][ T424] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 129.781989][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.790162][ T424] usb 1-1: Product: syz [ 129.794504][ T424] usb 1-1: Manufacturer: syz [ 129.799113][ T424] usb 1-1: SerialNumber: syz [ 129.854178][ T66] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 129.874400][ T331] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 130.005680][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 130.011433][ T2854] netlink: 'syz.0.832': attribute type 4 has an invalid length. [ 130.012425][ T66] usb 3-1: config 120 has an invalid interface number: 100 but max is 0 [ 130.027553][ T331] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 130.027969][ T66] usb 3-1: config 120 has no interface number 0 [ 130.042054][ T66] usb 3-1: config 120 interface 100 has no altsetting 0 [ 130.046139][ T331] usb 5-1: config 0 has no interface number 0 [ 130.051557][ T66] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice=d9.04 [ 130.064363][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.071668][ T331] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 130.073769][ T424] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 130.090567][ T66] usb 3-1: Product: syz [ 130.092367][ T331] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 130.094759][ T66] usb 3-1: Manufacturer: syz [ 130.094779][ T66] usb 3-1: SerialNumber: syz [ 130.113507][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.127211][ T424] usb 1-1: USB disconnect, device number 64 [ 130.133448][ T331] usb 5-1: Product: syz [ 130.138453][ T331] usb 5-1: Manufacturer: syz [ 130.143201][ T331] usb 5-1: SerialNumber: syz [ 130.158723][ T331] usb 5-1: config 0 descriptor?? [ 130.164426][ T2866] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 130.176757][ T331] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ca:e3:fe:06:53:f3 [ 130.191649][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.320881][ T2885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.329800][ T2885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.343446][ T66] ax88179_178a 3-1:120.100: probe with driver ax88179_178a failed with error -22 [ 130.354167][ T66] usb 3-1: USB disconnect, device number 60 [ 130.383142][ T363] usb 5-1: USB disconnect, device number 42 [ 130.389754][ T363] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 130.422711][ T36] audit: type=1400 audit(1775210870.335:443): avc: denied { watch } for pid=2892 comm="syz.4.839" path="/90/file0" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.500284][ T424] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 130.570305][ T2909] fuse: Unknown parameter '0x0000000000000006' [ 130.638392][ T36] audit: type=1326 audit(1775210870.543:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2912 comm="syz.4.842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9124d9c819 code=0x0 [ 130.663761][ T424] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.672246][ T424] usb 1-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 130.682840][ T424] usb 1-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 130.694093][ T424] usb 1-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 130.707368][ T424] usb 1-1: config 1 interface 0 has no altsetting 0 [ 130.721360][ T424] usb 1-1: string descriptor 0 read error: -22 [ 130.727702][ T424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.724444][ T36] audit: type=1401 audit(1775210870.633:445): op=setxattr invalid_context=0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000626C6B696F2E6266712E696F5F7365727669636564000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 130.736956][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.740104][ T424] usb 1-1: bad CDC descriptors [ 130.913392][ T2924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2924 comm=syz.4.846 [ 130.926713][ T2924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2924 comm=syz.4.846 [ 130.944557][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.953168][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.976733][ T2926] netlink: 72 bytes leftover after parsing attributes in process `syz.2.847'. [ 130.986821][ T66] usb 1-1: USB disconnect, device number 65 [ 131.082418][ T36] audit: type=1400 audit(1775210870.989:446): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.148731][ T36] audit: type=1400 audit(1775210871.059:447): avc: denied { mounton } for pid=2935 comm="syz.2.849" path="/proc/560/task" dev="proc" ino=18762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 131.321714][ T2936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.330390][ T2936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.499189][ T424] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 131.651614][ T424] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.663271][ T424] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.674367][ T424] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 131.684336][ T424] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 131.693398][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.736497][ T2956] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.858'. [ 131.751486][ T331] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 131.767832][ T2958] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.795759][ T2958] erspan0: default FDB implementation only supports local addresses [ 131.910050][ T2950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.918514][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 131.924089][ T2950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.938626][ T331] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.947335][ T331] usb 1-1: config 0 has no interface number 0 [ 131.955065][ T331] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.964270][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.972387][ T331] usb 1-1: Product: syz [ 131.976800][ T331] usb 1-1: Manufacturer: syz [ 131.983199][ T331] usb 1-1: SerialNumber: syz [ 131.990124][ T331] usb 1-1: config 0 descriptor?? [ 131.997502][ T331] smsc95xx v2.0.0 [ 132.001106][ T424] usb 5-1: string descriptor 0 read error: -71 [ 132.008324][ T424] hub 5-1:32.0: USB hub found [ 132.013875][ T424] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 132.044424][ T424] usb 5-1: USB disconnect, device number 43 [ 132.326180][ T66] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 132.400070][ T331] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 132.411073][ T331] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 132.412389][ T2978] netlink: 'syz.3.866': attribute type 27 has an invalid length. [ 132.478892][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.487636][ T66] usb 3-1: config 6 has an invalid interface number: 78 but max is 0 [ 132.497456][ T66] usb 3-1: config 6 has no interface number 0 [ 132.503645][ T66] usb 3-1: config 6 interface 78 has no altsetting 0 [ 132.512159][ T66] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=d8.c6 [ 132.521390][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.529469][ T66] usb 3-1: Product: syz [ 132.533855][ T66] usb 3-1: Manufacturer: syz [ 132.541067][ T66] usb 3-1: SerialNumber: syz [ 132.621229][ T2987] tmpfs: Unknown parameter 'nMnodes' [ 132.890703][ T454] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 133.043406][ T454] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.053531][ T454] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 133.062767][ T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.070807][ T454] usb 5-1: Product: syz [ 133.075132][ T454] usb 5-1: Manufacturer: syz [ 133.079784][ T454] usb 5-1: SerialNumber: syz [ 133.087957][ T454] usb 5-1: selecting invalid altsetting 1 [ 133.094030][ T454] usb 5-1: unit 6 not found! [ 133.137976][ T2991] netlink: 116 bytes leftover after parsing attributes in process `syz.3.871'. [ 133.291217][ T454] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 133.299865][ T454] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.309814][ T454] usb 5-1: selecting invalid altsetting 1 [ 133.315842][ T454] usb 5-1: unit 6 not found! [ 133.511030][ T454] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 133.520967][ T454] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 133.530780][ T454] usb 5-1: selecting invalid altsetting 1 [ 133.536838][ T454] usb 5-1: unit 6 not found! [ 133.541718][ T454] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 133.551774][ T454] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 133.566024][ T454] usb 5-1: USB disconnect, device number 44 [ 133.578100][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.839393][ T331] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 133.851117][ T331] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 133.865401][ T331] usb 1-1: USB disconnect, device number 66 [ 134.127351][ T3020] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 134.272623][ T3030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 134.300332][ T3035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:319 [ 134.603582][ T362] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 134.764683][ T362] usb 1-1: Using ep0 maxpacket: 8 [ 134.770892][ T362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.781094][ T362] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 134.790420][ T362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.799345][ T362] usb 1-1: config 0 descriptor?? [ 134.892794][ T66] hub 3-1:6.78: bad descriptor, ignoring hub [ 134.899229][ T66] hub 3-1:6.78: probe with driver hub failed with error -5 [ 134.920897][ T36] audit: type=1326 audit(1775210874.799:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.2.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe25699c819 code=0x0 [ 134.944031][ T66] usb 3-1: USB disconnect, device number 61 [ 135.038987][ T424] usb 1-1: USB disconnect, device number 67 [ 135.409090][ T66] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 135.570213][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 135.580897][ T66] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 135.592938][ T3074] netlink: 'syz.3.902': attribute type 7 has an invalid length. [ 135.601424][ T3074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.902'. [ 135.601869][ T66] usb 5-1: string descriptor 0 read error: -71 [ 135.618721][ T66] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 135.627917][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.640856][ T66] r8152-cfgselector 5-1: Unknown version 0x0000 [ 135.647220][ T66] r8152-cfgselector 5-1: rejected 8 configurations due to insufficient available bus power [ 135.658889][ T66] r8152-cfgselector 5-1: no configuration chosen from 8 choices [ 135.670211][ T66] r8152-cfgselector 5-1: USB disconnect, device number 45 [ 135.675542][ T3081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 135.689170][ T36] audit: type=1400 audit(1775210875.554:449): avc: denied { bind } for pid=3080 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.811786][ T362] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 135.963965][ T362] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.977846][ T362] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.985910][ T3102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3102 comm=syz.3.913 [ 135.987321][ T362] usb 1-1: config 1 has no interface number 0 [ 136.005314][ T362] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.013201][ T363] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 136.016886][ T362] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 136.034737][ T362] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.045890][ T362] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.055234][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.063313][ T362] usb 1-1: Product: syz [ 136.067535][ T362] usb 1-1: Manufacturer: syz [ 136.072184][ T362] usb 1-1: SerialNumber: syz [ 136.077899][ T3072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 136.146834][ T36] audit: type=1400 audit(1775210876.021:450): avc: denied { read } for pid=3108 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.185381][ T363] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.193808][ T363] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.203065][ T363] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.212122][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.221854][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 136.232699][ T363] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.245708][ T363] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.254799][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.263621][ T363] usb 3-1: config 0 descriptor?? [ 136.271050][ T3088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.385483][ T454] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 136.484053][ T363] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.494981][ T3072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 136.536388][ T454] usb 5-1: Using ep0 maxpacket: 16 [ 136.543895][ T454] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 136.553006][ T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.561172][ T454] usb 5-1: Product: syz [ 136.565345][ T454] usb 5-1: Manufacturer: syz [ 136.569988][ T454] usb 5-1: SerialNumber: syz [ 136.575347][ T454] usb 5-1: config 0 descriptor?? [ 136.581492][ T454] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 136.589346][ T454] usb 5-1: Detected FT-X [ 136.618277][ T3111] overlayfs: missing 'lowerdir' [ 136.689536][ C0] usblp0: nonzero read bulk status received: -71 [ 136.696607][ T36] audit: type=1400 audit(1775210876.557:451): avc: denied { read write } for pid=3087 comm="syz.2.907" name="lp0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 136.696872][ T3088] usblp0: error -71 reading from printer [ 136.727608][ T36] audit: type=1400 audit(1775210876.557:452): avc: denied { open } for pid=3087 comm="syz.2.907" path="/dev/usb/lp0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 136.729280][ C0] usblp0: nonzero read bulk status received: -71 [ 136.775564][ T36] audit: type=1400 audit(1775210876.637:453): avc: denied { read write } for pid=3087 comm="syz.2.907" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.799331][ T3088] syzkaller1: entered allmulticast mode [ 136.805822][ T36] audit: type=1400 audit(1775210876.667:454): avc: denied { open } for pid=3087 comm="syz.2.907" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.851194][ T363] usb 3-1: USB disconnect, device number 62 [ 136.859629][ T363] usblp0: removed [ 136.959648][ T362] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 136.979275][ T362] cdc_ncm 1-1:1.1: bind() failure [ 136.985919][ T362] usb 1-1: USB disconnect, device number 68 [ 137.011643][ T454] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 137.018871][ T454] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 137.026206][ T454] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 137.036759][ T454] usb 5-1: USB disconnect, device number 46 [ 137.045702][ T454] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.055279][ T454] ftdi_sio 5-1:0.0: device disconnected [ 137.397278][ T36] audit: type=1400 audit(1775210877.253:455): avc: denied { write } for pid=3126 comm="syz.2.923" name="icmp6" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.398127][ T3128] tmpfs: Bad value for 'nr_blocks' [ 137.478993][ T36] audit: type=1400 audit(1775210877.333:456): avc: denied { read } for pid=3139 comm="syz.0.926" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.502028][ T36] audit: type=1400 audit(1775210877.333:457): avc: denied { ioctl } for pid=3139 comm="syz.0.926" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.606437][ T3155] tmpfs: Unknown parameter 'indo64' [ 137.612179][ T3155] tmpfs: Unknown parameter 'indo64' [ 137.674051][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.680506][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.834224][ T424] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 137.985137][ T424] usb 3-1: Using ep0 maxpacket: 16 [ 137.991536][ T424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.001848][ T424] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.012552][ T424] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.021707][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.029782][ T424] usb 3-1: Product: syz [ 138.033966][ T424] usb 3-1: Manufacturer: syz [ 138.038599][ T424] usb 3-1: SerialNumber: syz [ 138.248131][ T424] usb 3-1: 0:2 : does not exist [ 138.254913][ T424] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 138.266021][ T424] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 138.276976][ T424] usb 3-1: USB disconnect, device number 63 [ 138.288047][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.403872][ T36] audit: type=1400 audit(1775210878.257:458): avc: denied { mounton } for pid=3174 comm="syz.0.937" path="/150/file0" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.451600][ T3184] capability: warning: `syz.3.940' uses 32-bit capabilities (legacy support in use) [ 139.061252][ T362] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 139.211846][ T362] usb 3-1: Using ep0 maxpacket: 32 [ 139.217503][ T362] usb 3-1: too many configurations: 43, using maximum allowed: 8 [ 139.226079][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.236208][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.249812][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.259971][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.273786][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.283988][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.297679][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.307852][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.321636][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.331779][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.345781][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.356085][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.370063][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.380472][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.394333][ T362] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.404581][ T362] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.420111][ T362] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 139.429659][ T362] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=173 [ 139.438334][ T362] usb 3-1: Product: syz [ 139.442578][ T362] usb 3-1: Manufacturer: syz [ 139.447349][ T362] usb 3-1: SerialNumber: syz [ 139.454268][ T362] hub 3-1:4.0: Invalid hub with more than one config or interface [ 139.462118][ T362] hub 3-1:4.0: probe with driver hub failed with error -22 [ 139.469653][ T362] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 139.621374][ T3237] netlink: 188 bytes leftover after parsing attributes in process `syz.3.955'. [ 139.684278][ T424] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 139.734554][ T502] Bluetooth: hci0: command 0x1003 tx timeout [ 139.735002][ T503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.835050][ T424] usb 1-1: Using ep0 maxpacket: 32 [ 139.844227][ T424] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 139.852519][ T424] usb 1-1: config 2 has no interface number 0 [ 139.858917][ T424] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 139.869070][ T424] usb 1-1: config 2 interface 88 has no altsetting 0 [ 139.877497][ T424] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 139.886754][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.894775][ T424] usb 1-1: Product: syz [ 139.899018][ T424] usb 1-1: Manufacturer: syz [ 139.903637][ T424] usb 1-1: SerialNumber: syz [ 139.909445][ T3231] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.118167][ T3231] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 140.125594][ T3269] netlink: 'syz.0.953': attribute type 11 has an invalid length. [ 140.206977][ T362] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 140.329031][ T424] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.339355][ T424] asix 1-1:2.88: probe with driver asix failed with error -71 [ 140.347729][ T424] usb 1-1: USB disconnect, device number 69 [ 140.357662][ T362] usb 5-1: Using ep0 maxpacket: 32 [ 140.364349][ T362] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.372825][ T362] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 140.381631][ T362] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.391832][ T362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.402923][ T362] usb 5-1: string descriptor 0 read error: -22 [ 140.409178][ T362] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.418377][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.429234][ T362] usb 5-1: 0:2 : does not exist [ 140.629025][ T424] usb 5-1: USB disconnect, device number 47 [ 140.721155][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 140.721173][ T36] audit: type=1400 audit(1775210880.565:462): avc: denied { associate } for pid=3270 comm="syz.3.966" name="memory.numa_stat" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 140.756450][ T3275] overlayfs: missing 'workdir' [ 140.757052][ T3276] overlayfs: missing 'workdir' [ 140.875064][ T36] audit: type=1400 audit(1775210880.715:463): avc: denied { create } for pid=3287 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.091188][ T362] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 141.241882][ T362] usb 1-1: Using ep0 maxpacket: 8 [ 141.248064][ T362] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 141.259181][ T362] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 141.271773][ T362] usb 1-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 141.280896][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.293302][ T362] usb 1-1: Product: syz [ 141.297506][ T362] usb 1-1: Manufacturer: syz [ 141.302204][ T362] usb 1-1: SerialNumber: syz [ 141.307420][ T3298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 141.317128][ T3298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 141.326230][ T3299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 141.414388][ T3303] overlayfs: failed to resolve './file1': -2 [ 141.520628][ T362] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.527780][ T362] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 141.540308][ T362] usb 1-1: USB disconnect, device number 70 [ 141.549886][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.583486][ T331] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 141.734096][ T331] usb 5-1: Using ep0 maxpacket: 16 [ 141.740731][ T331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.749378][ T331] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.761852][ T331] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 141.770991][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.779093][ T331] usb 5-1: Product: syz [ 141.783333][ T331] usb 5-1: Manufacturer: syz [ 141.787978][ T331] usb 5-1: SerialNumber: syz [ 141.849815][ T46] usb 3-1: USB disconnect, device number 64 [ 142.085218][ T331] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 142.092847][ T331] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.103661][ T331] usb 5-1: USB disconnect, device number 48 [ 142.114516][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.206220][ T46] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 142.306694][ T424] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 142.356672][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 142.363160][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.371811][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 142.384493][ T46] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 142.393613][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.401658][ T46] usb 3-1: Product: syz [ 142.405824][ T46] usb 3-1: Manufacturer: syz [ 142.410479][ T46] usb 3-1: SerialNumber: syz [ 142.457822][ T424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.469170][ T424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.478963][ T424] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 142.488041][ T424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.496843][ T424] usb 1-1: config 0 descriptor?? [ 142.618926][ T3310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.628188][ T3310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.650189][ T46] usb 3-1: USB disconnect, device number 65 [ 142.666693][ T3327] netlink: 5 bytes leftover after parsing attributes in process `syz.4.986'. [ 142.676558][ T3327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.680650][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.910040][ T424] hid-led 0003:1D34:000A.0011: unknown main item tag 0x0 [ 142.917369][ T424] hid-led 0003:1D34:000A.0011: unknown main item tag 0x0 [ 142.924461][ T424] hid-led 0003:1D34:000A.0011: unknown main item tag 0x0 [ 142.978762][ T3338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 142.988177][ T36] audit: type=1400 audit(1775210882.830:464): avc: denied { setopt } for pid=3337 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.117664][ T424] hid-led 0003:1D34:000A.0011: probe with driver hid-led failed with error -71 [ 143.129194][ T424] usb 1-1: USB disconnect, device number 71 [ 143.446689][ T306] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 143.596713][ T306] usb 5-1: Using ep0 maxpacket: 32 [ 143.603187][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.614205][ T306] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 143.624202][ T306] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 143.640440][ T306] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.654284][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.663427][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.676977][ T306] usb 5-1: SerialNumber: syz [ 143.682568][ T3350] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.692538][ T3350] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.718733][ T306] hub 5-1:1.0: bad descriptor, ignoring hub [ 143.729585][ T3359] netlink: 'syz.3.998': attribute type 27 has an invalid length. [ 143.745577][ T36] audit: type=1400 audit(1775210883.580:465): avc: denied { map } for pid=3367 comm="syz.2.1001" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.750862][ T306] hub 5-1:1.0: probe with driver hub failed with error -5 [ 143.836818][ T306] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 144.346667][ T331] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 144.405350][ T36] audit: type=1400 audit(1775210884.240:466): avc: denied { create } for pid=3401 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.516671][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 144.523495][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.532436][ T331] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.545013][ T331] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 144.560810][ T331] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 144.569122][ T331] usb 1-1: Product: syz [ 144.573403][ T331] usb 1-1: Manufacturer: syz [ 144.578361][ T331] usb 1-1: SerialNumber: syz [ 144.797247][ T331] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.815696][ T331] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 144.826666][ T331] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 144.834109][ T331] usb 1-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 144.867963][ T331] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 144.891424][ T331] usb 1-1: USB disconnect, device number 72 [ 144.909511][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.102909][ T36] audit: type=1400 audit(1775210884.940:467): avc: denied { create } for pid=3411 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.123785][ T36] audit: type=1400 audit(1775210884.960:468): avc: denied { write } for pid=3411 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.144157][ T36] audit: type=1400 audit(1775210884.960:469): avc: denied { nlmsg_write } for pid=3411 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.176649][ T454] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 145.336651][ T454] usb 3-1: Using ep0 maxpacket: 32 [ 145.343042][ T454] usb 3-1: config 1 has an invalid interface number: 14 but max is 2 [ 145.366656][ T454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.386662][ T454] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.405855][ T454] usb 3-1: config 1 has no interface number 0 [ 145.413451][ T454] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 145.426621][ T454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.444841][ T454] usb 3-1: Product: syz [ 145.449220][ T454] usb 3-1: Manufacturer: syz [ 145.453903][ T454] usb 3-1: SerialNumber: syz [ 145.544246][ T36] audit: type=1400 audit(1775210885.380:470): avc: denied { accept } for pid=3417 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.634214][ T3421] incfs: Options parsing error. -22 [ 145.639601][ T3421] incfs: mount failed -22 [ 145.678470][ T454] usb 3-1: USB disconnect, device number 66 [ 145.703672][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.14/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.193627][ T36] audit: type=1400 audit(1775210886.030:471): avc: denied { execmem } for pid=3422 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.414713][ T3421] overlayfs: statfs failed on './file0' [ 146.463840][ T36] audit: type=1400 audit(2000000000.000:472): avc: denied { setattr } for pid=3433 comm="syz.2.1023" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 146.581337][ T3446] netlink: 'syz.0.1026': attribute type 16 has an invalid length. [ 146.746665][ T454] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 146.896687][ T454] usb 3-1: device descriptor read/64, error -71 [ 147.136638][ T454] usb 3-1: device descriptor read/64, error -71 [ 147.376646][ T454] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 147.506654][ T454] usb 3-1: device descriptor read/64, error -71 [ 147.521766][ T36] audit: type=1326 audit(2000000001.060:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3455 comm="syz.0.1029" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6d3b9c819 code=0x0 [ 147.756708][ T454] usb 3-1: device descriptor read/64, error -71 [ 147.866798][ T454] usb usb3-port1: attempt power cycle [ 148.216684][ T454] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 148.247436][ T454] usb 3-1: device descriptor read/8, error -71 [ 148.371499][ T36] audit: type=1400 audit(2000000001.910:474): avc: denied { create } for pid=3468 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 148.378286][ T454] usb 3-1: device descriptor read/8, error -71 [ 148.666647][ T454] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 148.697783][ T454] usb 3-1: device descriptor read/8, error -71 [ 148.828986][ T454] usb 3-1: device descriptor read/8, error -71 [ 148.936817][ T454] usb usb3-port1: unable to enumerate USB device [ 148.956887][ T306] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 149.309249][ T3480] fuse: Unknown parameter '0x0000000000000005' [ 149.556650][ T306] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 149.717982][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.729152][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.740694][ T306] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 149.749988][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.759597][ T306] usb 1-1: Product: syz [ 149.764143][ T306] usb 1-1: Manufacturer: syz [ 149.768930][ T306] usb 1-1: SerialNumber: syz [ 149.774785][ T306] usb 1-1: config 0 descriptor?? [ 149.781048][ T306] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 149.788438][ T306] usb 1-1: No valid video chain found. [ 149.926725][ T454] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 149.982020][ T306] usb 1-1: USB disconnect, device number 73 [ 150.111142][ T454] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.126655][ T454] usb 3-1: config 0 has no interface number 0 [ 150.132923][ T454] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.144031][ T454] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.158724][ T454] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 150.168187][ T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.177517][ T454] usb 3-1: config 0 descriptor?? [ 150.184782][ T36] audit: type=1400 audit(2000000003.720:475): avc: denied { getopt } for pid=3493 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.056276][ T454] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0012/input/input18 [ 151.157841][ T454] holtek_kbd 0003:04D9:A055.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 151.272405][ T66] usb 3-1: USB disconnect, device number 71 [ 151.977433][ T66] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 152.126657][ T66] usb 1-1: device descriptor read/64, error -71 [ 152.246676][ T363] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 152.386762][ T66] usb 1-1: device descriptor read/64, error -71 [ 152.416646][ T363] usb 3-1: Using ep0 maxpacket: 32 [ 152.423032][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.434215][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.444226][ T363] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.453460][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.465702][ T363] usb 3-1: config 0 descriptor?? [ 152.473604][ T363] hub 3-1:0.0: USB hub found [ 152.646673][ T66] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 152.796662][ T66] usb 1-1: device descriptor read/64, error -71 [ 152.874751][ T363] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 152.885753][ T363] usbhid 3-1:0.0: can't add hid device: -71 [ 152.892022][ T363] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 152.917014][ T363] usb 3-1: USB disconnect, device number 72 [ 153.036686][ T66] usb 1-1: device descriptor read/64, error -71 [ 153.146740][ T66] usb usb1-port1: attempt power cycle [ 153.496627][ T66] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 153.527258][ T66] usb 1-1: device descriptor read/8, error -71 [ 153.657956][ T66] usb 1-1: device descriptor read/8, error -71 [ 153.896705][ T66] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 153.924831][ T66] usb 1-1: device descriptor read/8, error -71 [ 154.046918][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 154.057084][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 154.060150][ T66] usb 1-1: device descriptor read/8, error -71 [ 154.065970][ T3526] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 154.206684][ T66] usb usb1-port1: unable to enumerate USB device [ 154.307174][ T331] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 154.456663][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 154.462981][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.475732][ T331] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.484971][ T331] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.495993][ T331] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1025, setting to 1024 [ 154.508736][ T331] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 154.518054][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.526075][ T331] usb 3-1: Product: syz [ 154.530626][ T331] usb 3-1: Manufacturer: syz [ 154.535253][ T331] usb 3-1: SerialNumber: syz [ 154.871089][ T3533] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 155.296653][ T424] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 155.446828][ T424] usb 1-1: Using ep0 maxpacket: 32 [ 155.453262][ T424] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.464668][ T424] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.477991][ T424] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.484907][ T424] usb 1-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 155.494547][ T424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.508639][ T424] usb 1-1: config 0 descriptor?? [ 155.942185][ T424] kye 0003:0458:5014.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 155.962358][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 155.975452][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 155.982586][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 155.990229][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 155.999041][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.006111][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.013129][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.020401][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.027389][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.034195][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.041245][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.048175][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.055012][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.062005][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.069037][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.075824][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.089262][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.096113][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.103144][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.110094][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.117020][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.124991][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.134925][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.141891][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.149325][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.156155][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.163200][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.170198][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.177168][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.184003][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.191010][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.197977][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.204796][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.211821][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.218794][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.225612][ T424] kye 0003:0458:5014.0013: unknown main item tag 0x0 [ 156.237791][ T424] kye 0003:0458:5014.0013: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.0-1/input0 [ 156.248874][ T424] kye 0003:0458:5014.0013: tablet-enabling feature report not found [ 156.272141][ T424] kye 0003:0458:5014.0013: tablet enabling failed [ 156.299749][ T424] usb 1-1: USB disconnect, device number 78 [ 156.979530][ T331] usb 3-1: USB disconnect, device number 73 [ 156.991696][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.029128][ T3577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 157.031600][ T424] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 157.066347][ T3577] can0: slcan on ttyS3. [ 157.144232][ T3581] x_tables: unsorted underflow at hook 2 [ 157.237696][ T424] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.252851][ T3591] tipc: Enabling of bearer rejected, already enabled [ 157.256721][ T424] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.271666][ T424] usb 1-1: config 1 has no interface number 0 [ 157.302727][ T424] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.325354][ T424] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 157.350688][ T424] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 157.371313][ T424] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.393535][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.396793][ T331] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 157.411902][ T424] usb 1-1: Product: syz [ 157.423065][ T424] usb 1-1: Manufacturer: syz [ 157.432875][ T424] usb 1-1: SerialNumber: syz [ 157.443798][ T3575] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 157.577728][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.588692][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.598496][ T331] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.607590][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.618422][ T331] usb 3-1: config 0 descriptor?? [ 157.826222][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 157.835361][ T3577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'. [ 157.869372][ T3575] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 158.049837][ T331] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 158.066741][ T331] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input19 [ 158.153378][ T331] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 158.252901][ T3577] cgroup: Invalid name [ 158.279663][ T424] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 158.310580][ T424] cdc_ncm 1-1:1.1: bind() failure [ 158.327265][ T424] usb 1-1: USB disconnect, device number 79 [ 158.765557][ T331] usb 3-1: USB disconnect, device number 74 [ 158.828163][ T3611] overlayfs: conflicting lowerdir path [ 158.971462][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 159.126657][ T361] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 159.236660][ T424] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 159.276639][ T361] usb 1-1: Using ep0 maxpacket: 32 [ 159.287367][ T361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.308032][ T361] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 159.326647][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.334750][ T361] usb 1-1: Product: syz [ 159.339164][ T361] usb 1-1: Manufacturer: syz [ 159.343780][ T361] usb 1-1: SerialNumber: syz [ 159.356842][ T361] usb 1-1: config 0 descriptor?? [ 159.367010][ T361] smsc75xx v1.0.0 [ 159.370660][ T361] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 159.388134][ T424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.396663][ T361] smsc75xx 1-1:0.0: probe with driver smsc75xx failed with error -22 [ 159.396870][ T424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.420538][ T424] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 159.432070][ T424] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.443513][ T424] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 159.452818][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.466371][ T424] usb 3-1: Product: syz [ 159.474306][ T424] usb 3-1: Manufacturer: syz [ 159.484586][ T424] usb 3-1: SerialNumber: syz [ 159.511581][ T3623] netlink: 'syz.3.1084': attribute type 19 has an invalid length. [ 159.532697][ T3623] netlink: 'syz.3.1084': attribute type 28 has an invalid length. [ 159.563290][ T361] usb 1-1: USB disconnect, device number 80 [ 159.649705][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.656932][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.664016][ T3624] bridge_slave_0: entered allmulticast mode [ 159.670479][ T3624] bridge_slave_0: entered promiscuous mode [ 159.677137][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.684187][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.691554][ T3624] bridge_slave_1: entered allmulticast mode [ 159.698401][ T3624] bridge_slave_1: entered promiscuous mode [ 159.712986][ T12] bridge_slave_1: left allmulticast mode [ 159.716923][ T331] usb 5-1: USB disconnect, device number 49 [ 159.723126][ T424] usb 3-1: USB disconnect, device number 75 [ 159.735574][ T12] bridge_slave_1: left promiscuous mode [ 159.743664][ T12] +$<: port 2(bridge_slave_1) entered disabled state [ 159.753382][ T12] bridge_slave_0: left allmulticast mode [ 159.759169][ T12] bridge_slave_0: left promiscuous mode [ 159.764869][ T12] +$<: port 1(bridge_slave_0) entered disabled state [ 159.881791][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.888867][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.896171][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.903239][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.923924][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.931484][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.940545][ T12] veth1_macvtap: left promiscuous mode [ 159.946102][ T12] veth0_vlan: left promiscuous mode [ 159.991596][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.998682][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.007426][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.014489][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.041391][ T3624] veth0_vlan: entered promiscuous mode [ 160.055629][ T3624] veth1_macvtap: entered promiscuous mode [ 160.247770][ T12] ------------[ cut here ]------------ [ 160.253322][ T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 160.263332][ T12] Modules linked in: [ 160.267337][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 160.278926][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.289160][ T12] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 160.293937][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 160.300024][ T12] Code: e8 91 47 d9 fc 4b 83 3c 3e 00 75 19 e8 05 11 81 fc 49 81 ff f8 07 00 00 74 1b e8 f7 10 81 fc 49 83 c7 08 eb c9 e8 ec 10 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 160.304314][ T36] audit: type=1400 audit(2000000013.840:476): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2258]" dev="pipefs" ino=2258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 160.319697][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 160.319720][ T12] RAX: ffffffff850699f4 RBX: ffff88812f65b540 RCX: ffff888102655f00 [ 160.319736][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881203f00b8 [ 160.319751][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d38c07 R09: 1ffffffff0fa7180 [ 160.355600][ T424] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 160.356930][ T12] R10: dffffc0000000000 R11: fffffbfff0fa7181 R12: dffffc0000000000 [ 160.356951][ T12] R13: dffffc0000000000 R14: ffff8881203f0000 R15: 00000000000000b8 [ 160.396820][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 160.405769][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.412417][ T12] CR2: 00007fe256985980 CR3: 000000011da2a000 CR4: 00000000003526b0 [ 160.420472][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.428662][ T12] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 160.436702][ T12] Call Trace: [ 160.440006][ T12] [ 160.442962][ T12] cleanup_net+0x6bd/0xc90 [ 160.447443][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 160.452406][ T12] ? kick_pool+0xb9/0x550 [ 160.456735][ T46] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 160.464234][ T12] process_scheduled_works+0x7d1/0x1020 [ 160.469883][ T12] worker_thread+0xc70/0x10b0 [ 160.474602][ T12] kthread+0x2c6/0x370 [ 160.478730][ T12] ? __cfi_worker_thread+0x10/0x10 [ 160.483885][ T12] ? __cfi_kthread+0x10/0x10 [ 160.488541][ T12] ret_from_fork+0x67/0xa0 [ 160.493003][ T12] ? __cfi_kthread+0x10/0x10 [ 160.497659][ T12] ret_from_fork_asm+0x1a/0x30 [ 160.502458][ T12] [ 160.505491][ T12] ---[ end trace 0000000000000000 ]--- [ 160.554664][ T12] ------------[ cut here ]------------ [ 160.560265][ T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 160.566734][ T424] usb 1-1: Using ep0 maxpacket: 8 [ 160.570375][ T12] Modules linked in: [ 160.579249][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 160.592351][ T12] Tainted: [W]=WARN [ 160.596178][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.606322][ T12] Workqueue: netns cleanup_net [ 160.611134][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 160.617258][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 b0 10 81 fc 49 81 ff f8 07 00 00 74 1b e8 a2 10 81 fc 49 83 c7 08 eb c5 e8 97 10 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 87 10 81 fc 5b 41 5c 41 5e 41 [ 160.636953][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 160.643072][ T12] RAX: ffffffff85069a49 RBX: ffff8881203f0800 RCX: ffff888102655f00 [ 160.651121][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881203f0808 [ 160.659143][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d38c07 R09: 1ffffffff0fa7180 [ 160.667156][ T12] R10: dffffc0000000000 R11: fffffbfff0fa7181 R12: dffffc0000000000 [ 160.675146][ T12] R13: dffffc0000000000 R14: ffff8881203f0000 R15: 0000000000000008 [ 160.683178][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 160.692163][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.698795][ T12] CR2: 00007fe256985980 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 160.706907][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.714939][ T12] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 160.722972][ T12] Call Trace: [ 160.726277][ T12] [ 160.729255][ T12] cleanup_net+0x6bd/0xc90 [ 160.733705][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 160.738750][ T12] ? kick_pool+0xb9/0x550 [ 160.743118][ T12] process_scheduled_works+0x7d1/0x1020 [ 160.748741][ T12] worker_thread+0xc70/0x10b0 [ 160.753461][ T12] kthread+0x2c6/0x370 [ 160.757592][ T12] ? __cfi_worker_thread+0x10/0x10 [ 160.762772][ T12] ? __cfi_kthread+0x10/0x10 [ 160.767456][ T12] ret_from_fork+0x67/0xa0 [ 160.771907][ T12] ? __cfi_kthread+0x10/0x10 [ 160.776530][ T12] ret_from_fork_asm+0x1a/0x30 [ 160.781372][ T12] [ 160.784418][ T12] ---[ end trace 0000000000000000 ]--- [ 160.878795][ T46] usb 6-1: device descriptor read/all, error -71 [ 160.919651][ T12] ------------[ cut here ]------------ [ 160.925175][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 160.934631][ T12] Modules linked in: [ 160.938605][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 a40991d314adffa3075cd603e5b19eadab4cccf0 [ 160.951721][ T12] Tainted: [W]=WARN [ 160.955547][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.965650][ T12] Workqueue: netns cleanup_net [ 160.970479][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 160.976062][ T12] Code: 3c 20 00 74 08 48 89 df e8 8f 13 f4 fc 48 8b 3b e8 f7 3b df fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 dc 9b fc <0f> 0b e9 b0 fd ff ff e8 e6 dc 9b fc 0f 0b e9 18 fe ff ff e8 da dc [ 160.995745][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 161.001868][ T12] RAX: ffffffff84ebcdee RBX: ffff88812f65b540 RCX: ffff888102655f00 [ 161.009905][ T12] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888102655f00 [ 161.017925][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d38c07 R09: 1ffffffff0fa7180 [ 161.025937][ T12] R10: dffffc0000000000 R11: fffffbfff0fa7181 R12: 1ffffffff0fa6ed0 [ 161.034014][ T12] R13: dffffc0000000000 R14: ffff88812f65c140 R15: dffffc0000000000 [ 161.042018][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 161.050994][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.057611][ T12] CR2: 00007f9375c517e8 CR3: 0000000131ff4000 CR4: 00000000003526b0 [ 161.065605][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.073637][ T12] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 161.081660][ T12] Call Trace: [ 161.084957][ T12] [ 161.087930][ T12] xfrm_net_exit+0x31/0x80 [ 161.092381][ T12] cleanup_net+0x6bd/0xc90 [ 161.096848][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 161.101814][ T12] ? kick_pool+0xb9/0x550 [ 161.106176][ T12] process_scheduled_works+0x7d1/0x1020 [ 161.111789][ T12] worker_thread+0xc70/0x10b0 [ 161.116508][ T12] kthread+0x2c6/0x370 [ 161.120639][ T12] ? __cfi_worker_thread+0x10/0x10 [ 161.125790][ T12] ? __cfi_kthread+0x10/0x10 [ 161.130451][ T12] ret_from_fork+0x67/0xa0 [ 161.134910][ T12] ? __cfi_kthread+0x10/0x10 [ 161.139558][ T12] ret_from_fork_asm+0x1a/0x30 [ 161.144360][ T12] [ 161.147415][ T12] ---[ end trace 0000000000000000 ]--- [ 161.168934][ T467] can0 (unregistered): slcan off ttyS3. [ 161.210989][ T424] usb 1-1: device descriptor read/all, error -71 [ 161.227678][ T12] bridge_slave_1: left allmulticast mode [ 161.233446][ T12] bridge_slave_1: left promiscuous mode [ 161.251133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.267737][ T12] bridge_slave_0: left allmulticast mode [ 161.273504][ T12] bridge_slave_0: left promiscuous mode [ 161.296688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.530295][ T12] veth1_macvtap: left promiscuous mode [ 161.535832][ T12] veth0_vlan: left promiscuous mode [ 161.998758][ T12] tipc: Disabling bearer [ 162.004118][ T12] tipc: Left network mode [ 162.010243][ T12] veth1_macvtap: left promiscuous mode [ 162.015791][ T12] veth0_vlan: left promiscuous mode [ 162.021448][ T12] veth1_macvtap: left promiscuous mode [ 162.026993][ T12] veth0_vlan: left promiscuous mode [ 168.450655][ T305] tipc: Disabling bearer [ 168.455992][ T305] tipc: Left network mode [ 168.461075][ T305] veth1_macvtap: left promiscuous mode [ 168.466560][ T305] veth0_vlan: left promiscuous mode