last executing test programs: 1m48.711149672s ago: executing program 1 (id=196): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x18) sendto$packet(r0, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0xfcb6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @broadcast}, 0x14) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x2000, 0x1000, 0x4}, 0x20) 1m48.694183669s ago: executing program 1 (id=198): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a0544010000000000010902240001000010020904000b010300020009210000330122050009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x8d, 0x0, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="0f01c9e9020066b9cf0b00000f32b81a098ed00f01c2b880058ed00f01df0f01c5baf80c66b814b6428a66efbafc0ced66b9800000c00f326635000100000f30", 0x40}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000100)="9ea1d0081f", 0x5) recvmmsg(r5, &(0x7f00000008c0), 0x10, 0x0, 0x0) close(r4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000ab2cc67b6bde68804d35cfdc94522740628fd9d0169bdeffc2bbb1a4c8b4e6845949655aab3ab066edfc9addf13e9ce57279498264cf38b9e6ca660b51722e4798ca04d3e713094fe7161a50c5628d408a628097ae14d44b0bd758faa62cf03f"], 0x0}, 0x0) 1m46.967319488s ago: executing program 1 (id=202): mount(&(0x7f0000000000)=@md0, &(0x7f0000001340)='./cgroup\x00', &(0x7f0000001380)='openpromfs\x00', 0x2040010, 0x0) syz_clone3(&(0x7f0000001240)={0x100000, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x30}, &(0x7f0000000180)=""/104, 0x68, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) r1 = syz_open_procfs(r0, &(0x7f00000012c0)='sessionid\x00') socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r3, 0x409, 0x20) mmap(&(0x7f0000a97000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x4e652000) r4 = syz_open_pts(r2, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) getpid() close_range(r1, r4, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000001300)={0x3, 'ip_vti0\x00', {0x1}, 0x429c}) 1m46.142024901s ago: executing program 1 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000200)=0x188, 0x4) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0xffc7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000940)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) recvmmsg(r0, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0}, 0xe26}], 0x1, 0x10000, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0)) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0xfffffffd, 0x5, 0xffff2d37, 0x5, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffffffff, 0xe65d, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0x12, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x400ff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xffff6560, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x5, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8, 0x2, 0x2, 0x3, 0x20000004, 0x5, 0x6d01, 0x5, 0x39, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbc, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x9, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x8003, 0xffff, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x3, 0x16, 0xffffffff, 0x80000000, 0x5, 0x101, 0x10, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x104, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'veth1_virt_wifi\x00', 0x1000}) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) write$tcp_congestion(r5, &(0x7f0000000100)='hybla\x00', 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001d00010000000000000000008a005a0e"], 0x14}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x701200, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r9, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000340)=""/155, 0x9b}], 0x2, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r8}, 0x10) 1m46.090336661s ago: executing program 1 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xfffffffb) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288231}, 0x200048c4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x5) ptrace$cont(0x1f, r2, 0x8, 0x10001) 1m45.982407829s ago: executing program 1 (id=218): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x86dd}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @remote, @broadcast, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, 0x38) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x5c, @local, 0x4e21, 0x3, 'wlc\x00', 0x5, 0x5, 0x7c}, {@private=0xa010102, 0x4e23, 0x2000, 0x83a4, 0x4, 0x6}}, 0x44) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r4, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r5) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 1m45.924531577s ago: executing program 32 (id=218): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x86dd}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @remote, @broadcast, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, 0x38) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x5c, @local, 0x4e21, 0x3, 'wlc\x00', 0x5, 0x5, 0x7c}, {@private=0xa010102, 0x4e23, 0x2000, 0x83a4, 0x4, 0x6}}, 0x44) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000108000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r4, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r5) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 21.663220133s ago: executing program 0 (id=803): syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d00"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x1e, 0x400, 0x0, 0x25dfdbfb, {0x7}}, 0xffffffffffffffed}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_CONNECTINFO(r2, 0x8108551b, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc70a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100010000006357f9728a5d8b0981d79a88493073303a487560a6af2b295291cb071c2afb972af475d114b636e0b6f5212d2050f73ce8e7b780774c35ff632a9b8e8857ac3c9dcb64bef1ed050b5177639f795dcf7e6933f2e380a0afd610f0e6ca761484e3ee03df39aba5d2b87ad66526ccabd88aed21a8670ce1"], 0x1c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80641, 0x0) write(r5, &(0x7f0000001400)="547bbe", 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r0, 0x3, 0xfffffffffffffffd, 0x4) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000010301010000000000000000020000000c0002"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x55, r6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010122}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}) setresuid(r7, r7, 0x0) 21.143185217s ago: executing program 0 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') pread64(r1, &(0x7f0000001100)=""/4080, 0xff0, 0x7f) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5004, 0x80000001, @loopback, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a0) 21.033783095s ago: executing program 0 (id=807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone3(&(0x7f0000000380)={0x8000000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000100)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0a9662794005696c09ff00305840500601000000001000398864800008d5e63efbe8d2d2b737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000bc00600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b2941b94b661304fd5d60789b89d3ef3d99f30910a5bba2e177312e082bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d080000000f5f9dcdd51af51af8502943283f4bb102b21067693da9a9c2dbb8b8f5566791cf190201ded815b2ccd243f395ed3e30fa88b459d7c3ba4cc353d5a945ea2f61b2d7c3d21e804b0628567a45daef8ba7beaed89062a08403531f6bc3b4a98f6fd8d7c86d16efd3c9e0d4950bd29d476dc5a312446f3c59c4eeeed1c3a8dacb7ef1ca4ad7f2fdf5dafcfd7dfc181bc148068c64b0", 0x165) unshare(0x64000400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0000030180c2000003ffffffffffff86dd6900040000006cfffc01000000000000000000001e942100ff020000000000000000000000000001"], 0x3a) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) fgetxattr(r7, &(0x7f0000000180)=@known='security.selinux\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040015) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000af4c3887aa33856df665c6867138cbdce8023a7e5afc9096a17f971e00827baa8b56026a16e1152f1dd22675ebd1034c07ac6f631df1be3efbea7b0a4f7777c9c146c9bd", @ANYRES16=r10, @ANYBLOB="080029bd7000fddbdf2530000000060036001b0000000600360014000000060036000900000006003600050000000600360008000000060036003400000006003600000000000600360018000000"], 0x54}}, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4100000", @ANYRES16=r10, @ANYBLOB="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"], 0x10c4}, 0x1, 0x0, 0x0, 0x2000c401}, 0x4000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 20.996174407s ago: executing program 0 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fspick(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0x6840, 0x1c0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000001c0)='+#\'}\x00', &(0x7f0000000200)='./file2\x00', r2) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f00000002c0)={[], [{@permit_directio}, {@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, 'workdir'}}, {@uid_gt={'uid>', r0}}, {@dont_hash}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r3, &(0x7f00000000c0)=0xa7, 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 20.90938474s ago: executing program 0 (id=809): syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0xb0, 0x64}}]}}, 0x0) (async) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) accept4(r0, &(0x7f0000000100)=@nl=@proc, &(0x7f0000000180)=0x80, 0x800) 20.787441225s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) read$char_usb(r1, &(0x7f00000000c0)=""/30, 0x1e) read$char_usb(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e1221b23bb601c4773d86ddf06712e9000db8a10000c2497389ad", 0x1b}, {&(0x7f0000000200)='$\x00\x00\x00\x00', 0x5}], 0x2) 20.784936005s ago: executing program 33 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) read$char_usb(r1, &(0x7f00000000c0)=""/30, 0x1e) read$char_usb(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e1221b23bb601c4773d86ddf06712e9000db8a10000c2497389ad", 0x1b}, {&(0x7f0000000200)='$\x00\x00\x00\x00', 0x5}], 0x2) 9.132868732s ago: executing program 4 (id=845): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x87d7, 0x7800, 0x3, 0xfffffe67, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x68, 0x0, 0xd, 0x29, 0x0, @loopback, @empty, {[@end]}}}}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRESHEX], 0x0) 9.132457672s ago: executing program 2 (id=846): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="3599e95720f34e2f35527f68a8807e45206c336a1df7314f4042db703d25bb5312943490dc482149505006f469dfd72981349715e9c181a8a5efc4d7878f76f4ca03c4a57d52456184ffd03a82b11dd769d9f50a78235578b473e82237da105b1a1a2e67ba2d8b3b9e8d5f50d2a535e8a01e30f17cf9cd882eb9f0baa7eb74a176b37df1", 0x84}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x844b, 0x1000009, 0xffffeffffffffffb, 0x10000000, 0xfffd, 0x3, 0x4002004c1, 0xa, 0xb, 0x0, 0x1, 0x80, 0x2, 0x2, 0xa, 0x1010100000089], 0x1000, 0x100102}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0xfffffffffffffe8c}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x80000001, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0x9}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x1f, {0x40000092, 0x20000000000}}], 0x20}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x4, 0x1, 0xffff, 0xffffffff, 0x5b}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) userfaultfd(0x800) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) 9.131826892s ago: executing program 3 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x55, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x30}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.518908345s ago: executing program 4 (id=848): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1398, &(0x7f0000000040)={[{0x6e, 0x4e00, "3db23fdb2fdae04f2a08db362c2b3a2f17de6b3e5386d6c083a5edf52f97adc90d0419953f78ab3866bb5c3f38102f45c7d96e611b5515cf547df9feb5fa0df9930eec77bfe7597cadefb9b518d16ff4eebe402bdb85554b8b90cbd820bc772d1c4930e72284c27b1ee1db503989"}, {0xa2, 0x4e00, "592d48e24f07d67a4b9bd8fb5b664e922f4ca5b3b3b976a8e19c6bc31d50a163058dacd5a10bb2a4e8a0319803e040e6cf4f686308c092fe76d34b73e8b91e3c199072af75174b7dba5cc84e242ab33159522242a5274a12f4b2d35ee94f5a221c50feb0a7a25e29a8b396c105d88ef2c1a4e5463232ec1d070542a4f1d833294e4d5f52cfc4563a19909689e49e44b761ab66f79eddedee28e1ecfd0470007425ad"}, {0x1000, 0x4e00, "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"}, {0xb0, 0x4e00, "0d330b0661f95ce248988144bfff71174852c311d4c5a8dde387002a3505561ec73fffc38c4e9b91635a6c202a3cfef9dc98f3f11fa909bc01d30de58dc9bdc6d3939f2a6edbb52f0bc92304837965f964e53177d9a4c7156aef51fcff5cb7cb08b8ae8f9e1bab366285694a33efa4a4092c06e2e94eb4e94561ecb4bec8bb25c1cf9db636e693bcc7cdc3c5ccdd143103014d1b602c869e23a2aea54970419cf401530d09b5746fd3377feda9511d98"}, {0x51, 0x4e00, "a57ec52a54ffc1b7192645cb7867fd207fbd23b9a7aa028775811a9001cb866e42e388b89df17795899b456f057ca5c8080fea2940261cf7603fb648ba300b14403ef1fe1bd926029011270ef05eac80a1"}, {0x8, 0x4e00, "03606547cb10cc15"}, {0xb1, 0x4e00, "acc9a037cfedb10200f02c6c3f8351e1416b7cff03203ead4ff31681d499378496507bb0f290726a2976f5d2b9c05ae0a6cfd2f594855f3623d26f38af374a6f4df1b530a18d8ee6e72367d8030aedcc2d4613ce3df1d2b3059d3e361429995f2dce4c8d7ac4d9fa5b2f4fe4ec37a0cffd51043d68dab2793743884c8e58b788d6208b30444d12d2f41cce71d5577596306da5e859fe389780f24f62e99bde5ee4fcfd4e438b842dcea1b6b80d67f774b6"}, {0x25, 0x4e00, "31f438e7b42d857edd6e9598b3362925d9447654a92fb9835a2a2742c116ffca0895534272"}, {0x2c, 0x4e00, "f937ff1b2614ead57dfdfd5c7f4659f44a199303e615573ac00066f19bfd3151ca5618d1ba01ec5ae2f9ece9"}, {0x46, 0x4e00, "12cef3df1ac9a4e7728adade312f29ee9d28fa0c68c5e5ad7383971a7cc300b9c2cdfc40ea0788f65a9458faf2a1e2601ef99f0864fca5e79e6b5a5fb96d87f049e3c7516f66"}]}) 7.517599555s ago: executing program 2 (id=849): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xc0000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1ac}]}) 7.515267184s ago: executing program 3 (id=850): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x1, @broadcast}, 0x66, {0x2, 0x4e20, @broadcast}, 'team_slave_0\x00'}) r1 = syz_io_uring_complete(0x0) sendmsg$nl_generic(r1, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1014, 0x39, 0x400, 0x70bd2d, 0x25dfdbfd, {0x5}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x20}, 0x24048801) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x6c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64ab22a3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ea37dab}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0x38, 0x0, &(0x7f00000012c0)=[@enter_looper, @acquire_done={0x40106309, 0x3}, @increfs_done, @dead_binder_done], 0x89, 0x0, &(0x7f0000001300)="83880c2dfb82c94bf94f3367cdc3760166f5350fb8edcd438a661a9a1fe746af603e1595a12d03c357ea85554a4f6950826855216916de0aa305986c3fc4a32780daa9a62976ddb6fb2bae71dc2d94bde4ab501c8e2a52ee24aba9bf905f68bf59d2dacb135e8c893b13d3d89597084ea2b35c3acaf4fe2a8a25dc9e1250d66a1915d9019c910de676"}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001400), 0x400002, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000001440)={0xe9, 0x3ff}) readv(r1, &(0x7f0000001900)=[{&(0x7f0000001480)=""/162, 0xa2}, {&(0x7f0000001540)=""/148, 0x94}, {&(0x7f0000001600)=""/185, 0xb9}, {&(0x7f00000016c0)=""/88, 0x58}, {&(0x7f0000001740)=""/21, 0x15}, {&(0x7f0000001780)=""/83, 0x53}, {&(0x7f0000001800)=""/191, 0xbf}, {&(0x7f00000018c0)=""/4, 0x4}], 0x8) syz_usb_connect$uac2(0x5, 0x111, &(0x7f0000001980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0xd, 0x40, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x8, 0x20, 0x98}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x6, 0x2d, 0x6e}, [@processing_unit={0xd, 0x24, 0x8, 0x5, 0x2, [0x2, 0x3, 0x0, 0x0]}, @effect_unit={0xd, 0x24, 0x7, 0x4, 0x3, 0x4, [0x3, 0x2, 0x1]}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x2, "f9d7be489e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xf0, 0x5, 0x3, 0x4, 0x4, 0x6, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x4, 0x10}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5, 0xe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x5a68, 0x4, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xd48, 0xfbff, 0x0, "c4f037ecdec8bbe528"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xaf, 0x1, 0xf2, 0x8b, "8d45", "0e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x80, 0x2, {0x8, 0x25, 0x1, 0x81, 0x3, 0x9, 0x39b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xe5, 0xc, 0x7, 0x10}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x2, 0x8, 0x0, "863748bfe045bef64b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x45, 0x5, 0xf7, 0x2, 0x81}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x50}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x6, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0x6, 0x1}}}}}}}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x310, 0x3, 0x92, 0xfa, 0xff, 0xb}, 0xba, &(0x7f0000001b00)={0x5, 0xf, 0xba, 0x2, [@generic={0xae, 0x10, 0x3, "fec5b4a621f9ae6bd54d2b272465137ea98bbcbbce81f1f86ecc6479131060b1f014f0e213b0dbe7cd71f2a7adb7efd20616b2ff3b08e3caa6e073c33fa3c3ee61335d7ec9f44ffc7f9260cf7202c389a87d4f7aab4f6ed0fe7648b0b1d4cd7f5131244d21b8ca3754ef090ae3024f47420b3aa6204444cc2d99301569f5dd0a5139730ae902228aa90cb6a4d261a3187cc78fb5a84ade54a187927287b66342b828f462def7b29a48ee05"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x8, 0xff}]}, 0x2, [{0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x438}}, {0x58, &(0x7f0000001c00)=@string={0x58, 0x3, "bf8c02c77ccf1e038056bf7d46ccb50e410535b4976465122b6a6fe79d856426a8e5c68b757f5483d16937266be20b248647e444184350c9cdb5e4474642b5d8a4159665611d8bcd43711d28a51f11638764db9498ab"}}]}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000001cc0)={0x10000, 0xa}) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x13, r1, 0x7) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001d00)={'macvlan0\x00', {0x2, 0x4e21, @broadcast}}) clock_gettime(0x7, &(0x7f0000001d40)) syz_open_dev$hiddev(&(0x7f0000001d80), 0xf, 0x204000) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001dc0)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r3, 0x304, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001f80), 0x408440, 0x0) write$selinux_load(r5, &(0x7f0000001fc0)={0xf97cff8c, 0x8, 'SE Linux', "0342a4a282e80ebeaff6af654789d5bbdb657ef063c7e55a19dd63096da48fa3d61e8f2a6826d97da12e88c0dd71164aa99a1301235a56a7e6085a62a3d486ae58f6e832203eb8f2288eb1f0561fb5d62ecba48343b4c31ca492b1f74df5babaef3cff68beb5fe710ba9d4ae164390e095ad68d45ec456b9f2f045de3c933dc73ece9ba085f54665fea4346f6432ea2bf226f9d711f7aa5d446194bcd9b4d035af090def501f6ed6e4056fc643f5a2f4f999"}, 0xc2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f00000020c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$sock(r0, &(0x7f0000002440)={&(0x7f0000002100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)="1804c495773f14ec2033454cb51e4a192d99cd717ff5bb0a3a5758c868e789ebe437c0b2d4455b1082d357182cf98d230f742a6cbff571fcb5c6ed20379e74a4bb5c095ac016faa67a2d2c79dd8983ae445387ce54f7163ff066618f0efbb31c9abef40037b888109dec9607d675a3afadcf4c", 0x73}, {&(0x7f0000002200)="33f10cdcba77982990345f28a65212ff15541eb2363b2190b9112cc9a27a49adb3a6a2ab4870c10fbb7bdaaf2a851a6f68f354c75ef347cdeb5e20824cce3e", 0x3f}, {&(0x7f0000002240)="c6e2cf3fb5c5969e9fa0724d733f2ca94b418700168bec27466b0f3b61718835862a0e93b4c011c54b14ea8a806b552d47da7fcb03e73dfd7c79b5ea0a97f3ce63", 0x41}, {&(0x7f00000022c0)="ee31be18804e3cd10dad2a81c91a15a499b1ad226df41597721b8a13601bccbeae2e9c5a89c8804acec054608f5ccfc0ec472b3fa0ef275f975e619ddc25762e8859832792079ec94990e45e9ff632f3df0e311441a7ed83e437b7d968f579139d8bd411572e8b984445ef1dceeb1865d1b39d3605", 0x75}, {&(0x7f0000002340)}], 0x5, &(0x7f0000002400)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}, 0x40) readv(r1, &(0x7f0000002680)=[{&(0x7f0000002580)=""/237, 0xed}], 0x1) 5.721018071s ago: executing program 4 (id=851): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080)=0x20, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x4e24, 0x20006de, @ipv4={'\x00', '\xff\xff', @multicast1}}}, {{0xa, 0x1, 0x0, @mcast2, 0x80000}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006ec0)={'veth0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 5.71953496s ago: executing program 2 (id=852): creat(&(0x7f0000000300)='./file0\x00', 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004500), 0x4000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}]}}) socket(0x8000000010, 0x2, 0x0) (async) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000000)=0x8001) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 5.691671644s ago: executing program 3 (id=853): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0xb) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4, 0xe3f, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500640bd3fe3955800cad3d0099cebdc25f570659f6b222831aaf904ab1f010000000400", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1aba00, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010006, 0x0, 0x90a7}]}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x5, 0x8, 0x11, "e460121535b175340eaeaec5623eea903dbfee784180017b3f5c8ae35038f91cff3af2b5a72d5bd5d78bc124263ec244162b891624e6b2fa4cd719aab6d80679", "57e41180eee0f2d562e52b1d8ece0953753520fa78c7105f1d4314aa9865ac4aef459c634568eca93b049488ffc9cfc90a20ae3c8b9fdbc07b8e86d0b7213d0f", "62ebe82f9d9e935300ed3c8a6976e1c5bc41499049fddfa8ed1965e7ebc2b80c", [0x3, 0x1]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) unshare(0x20040600) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100020e0000002cbd7040fcdbdf2505000600000000000a00632300000007ff010000000000000000000000000001010000800000000005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130282"], 0x70}, 0x1, 0x7}, 0x0) 3.975044016s ago: executing program 4 (id=854): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) keyctl$revoke(0x3, 0x0) (async, rerun: 32) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_gettime(r4, 0x0) (async, rerun: 64) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) (async, rerun: 64) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 3.969861265s ago: executing program 2 (id=855): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="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", 0x1000, 0x811, &(0x7f0000001040)={0x2, 0x4e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000001080)={0x2, 0x4e24, @broadcast}, 0x10) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x3f6, 0x0, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040091}, 0x4040840) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) (async) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000001200)=""/254, 0xfe}, {&(0x7f0000001300)=""/130, 0x82}, {&(0x7f00000013c0)=""/221, 0xdd}, {&(0x7f00000014c0)=""/91, 0x5b}, {&(0x7f0000001540)=""/220, 0xdc}, {&(0x7f0000001640)=""/106, 0x6a}], 0x6) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) connect$pppl2tp(r0, &(0x7f0000001840)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e24, 0x8, @mcast2, 0x9}}}, 0x3a) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001880)={'veth1_to_team\x00', {0x2, 0x4e21, @broadcast}}) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000018c0)=0x0) getpgrp(r2) (async) r3 = getpgid(r2) ptrace$getregs(0xc, r3, 0x101, &(0x7f0000001900)=""/4096) (async) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000002900)={r0, 0xd}) r4 = open_tree(0xffffffffffffffff, &(0x7f0000002940)='./file0\x00', 0x1) (async) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002980)) setns(r4, 0x10000000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r1, 0x106, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40854) (async) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000002ac0)=0x8000, &(0x7f0000002b00)=0x2) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000002b40)) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000002b80)={0x0, @multicast1, @multicast1}, &(0x7f0000002bc0)=0xc) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002c40)={0x2, &(0x7f0000002c00)=[{0xffff, 0x39, 0xc, 0xc95}, {0xfff7, 0x8, 0x5, 0x440}]}, 0x10) (async) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000002c80), 0x10) (async) landlock_restrict_self(r0, 0x5) (async) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000002cc0), 0x3) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) (async) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000002d00)=0x7ff, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000002d40)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x1c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 3.968541435s ago: executing program 3 (id=856): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="707f75ff3f00"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a53bf0fe4366"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c203f7c0b053"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a5d87c4aaff6"}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0c0}, 0x2400c005) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r1, 0x8a, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80, 0x5, 0x101, 0x128}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x114, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_IE={0xcc, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x2, @void, @val=0x24, @void}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7f, 0x28}}, @tim={0x5, 0x8a, {0x5, 0x71, 0x9f, "cc1a9067cbb4fa6928a87803ec17e98ad5b17ca4783f421a6ca85bab6a185a545050579fbf27bcac2ef3303d1d2775ebb13931c1fce0d0ba028445fca0eaa0be81e85dc22476e3ba1beb5e42c112d427c3748714a48aa3b503df615a71862d1a4a0c8a1c93b8fa9213c5fdbed5b52c9cbe5c049c99ffe280f90c5e146249918625b6039623782b"}}, @erp={0x2a, 0x1, {0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x34, 0x61}}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0xff}}, @ibss={0x6, 0x2, 0x6}, @ibss={0x6, 0x2, 0x5715}, @mic={0x8c, 0x10, {0xc48, "f45324138b2a", @short="8a376067ee6edd89"}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0x24000000}, 0x400a0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000680)={0x3, 'macsec0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10008007}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8}, 0xc080) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000880), 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x7, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d1}, 0x4c094) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000a40)={0x6, [0x7, 0xa, 0x401, 0x8d, 0xfffffffffffffffd, 0x401]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8001, 0x46}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40001) r8 = syz_clone(0xd200, &(0x7f0000000d80)="ac8c10e6", 0x4, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)="46b8fadaf59345ac77eb09856731e169a2624dda912ed4477e4c28d3d637fcab9bef92e4042de861f884d94e14c466b693b44f6ba834d7c3fcfe0316fb6ce41e77c00d9e361ccb137a98b4c93478975c6edc1c437365bb327e707a865fe7a3bfa32caa2b6958a53f8393a4334723955b643a6e8a272dafba1d16758fcb71012b7068e026883fdd5297929c72dda6cd95be0fbd4fb3d6d8b449c15955") lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5100) r11 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001080)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000001180)=0xe8) statx(r2, &(0x7f00000011c0)='./file0\x00', 0x100, 0x1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001300)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000001400)=0xe8) getresgid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0) r17 = getpid() sendmsg$unix(r2, &(0x7f00000017c0)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)="655aef4d32cbc66243488ff0846199665ab2af61f5abd75ffc79d048eb7b90120d0a5fe3d3b6ff7d0502adcde823742ec9d99b2550f3bc690f8436bdc9b80b8a8889e591ddc3fa24f591", 0x4a}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="40801e7329b62cae7b19d7fc533dd233c02fc43991274544aee31e08f26a", 0x1e}], 0x3, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r6, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8, 0x4000000}, 0x0) 2.056755638s ago: executing program 4 (id=857): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000480)={{0x12, 0x1, 0x388, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x3, 0x30, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1d, 0x2}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x302, 0x4, 0x1, 0x9, 0x10000, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf5, 0x9, 0x5, {0xa, 0x25, 0x25, 0x6, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x5, 0x10, {0xa, 0x25, 0x25, 0x3, 0x8, 0xba00}}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x5) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) dup2(r0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC=r3, @ANYRES8=0x0], 0x108}}, 0x4000000) 2.055645698s ago: executing program 2 (id=858): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000000c0)={0x9, 0x9f8}) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000540)={0x3, 0x0, 0x1a, 0xa, 0x15a, &(0x7f0000000140)}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) (async) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0x2, r1, &(0x7f00000006c0)) (async) fsetxattr(r0, &(0x7f0000000700)=@known='security.selinux\x00', &(0x7f0000000740)='--\xf0\x00', 0x4, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x50f080, 0x0) (async, rerun: 32) r3 = getpid() setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000007c0), 0x4) (async) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000800)={0x9, 0x0, [{0x8fd0ccfb85f739bc, 0x0, 0x100000000}, {0x950, 0x0, 0x3}, {0xa37, 0x0, 0x8}, {0x0, 0x0, 0x9}, {0xa78, 0x0, 0x7}, {0x868, 0x0, 0xa902}, {0x824, 0x0, 0x8}, {0x2f8, 0x0, 0x120c0000}, {0x319}]}) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000008c0)={0x2, {0x2, 0x5, 0xfffe, 0x4, 0x3}}) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000900), 0x4) (async, rerun: 32) r4 = getpgid(r3) r5 = syz_open_procfs(r4, &(0x7f0000000940)='mountstats\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000980)={0x30000, 0x2000}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000009c0)=0x4) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000a00)={0xa0000, 0x0, {[0x5, 0x28c, 0x4, 0xe62b, 0x6200000000000000, 0x4, 0x8, 0x5]}}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r5) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1f4, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "cc88629b6a888105e3030e6642997296"}, @TIPC_NLA_NODE_ID={0x14, 0x3, "f251cffb1ddd58b808898008604c12b6"}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3360}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e2aa679fc45f54d127f851b9bb46efe5daf05ce09042df1d5d9e5c99a0"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x856}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "2bdfc37e64e79e07bf48b4bd2af4595989d5428f129d557c7cfc2d9de4d4b1543eef93436259c8ed012bb53b9aa868d8ed07643c5bf216f82865eec071c22fdcb8857218b35c29ba8b76729c27a7f7ebd627dbefda24cfff6803abfd2b5cc9567d5aead1cfb53accf1a2237cd4a391b81b14f591f7b97d34853db9e3bf51eb93ff8d41d79b521de70fa078659d01b07a2c51f75079fb54e92b70df4e81f53f69b1ab55ad"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8004}, 0x840) ioctl$KVM_SET_TSC_KHZ_cpu(r0, 0xaea2, 0x800) (async) pwritev(r0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="e5511fc647228c6705926ac71db09dd8dbc5ba81891dde8ed44ddd610c65b4d89c06020da2f8c9d80524c2195955e8bc07429ce6ceb72d2c7123b180325cfbf801f14861bbde093334da7858d948669f48ed47eafdf9209863", 0x59}, {&(0x7f0000000e00)="44b98d64fe4ff26c3ab0607f2c88a419c986a3a64c0eed43e2c07a19743cef6f697ced0da2caa7050b3cf9f04133b8f5581cf2dde6e8690fc97603daba4575f9d90abb057c135ae1bae68b61386484bf88a5356f7a291913a4dca7c1de196c9852bd2a5618226c5b05645cd0de632a8dea3485c331bc7b3e051c226086dfd535fe99740f0e33b09b0b8141920bd6104657dbd38571479d279f2c903bb0828659af6b9710e77a35e2faedbecdedcb683c6ab0eaaf0da37c131fa1ac61aa94a4081c9a2d9a0678a98f33de5bcd2218af3629f966e08ed8a0aa767be5d13c4180b430527e4eabc7b45f16aa70b29f", 0xed}, {&(0x7f0000000f00)="aaede8726b9d19f058a6b5300e24", 0xe}], 0x3, 0x6, 0x8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000f80)) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000fc0)="97fd0ce05f2fcd3e2e76bf085a4bd7418c518b8e860768a8b686684ae891adb44a414763bd34695e4e3228ae2f6729a1ea438d6b26e3fd3ff101da4d80fb8837acf6b45afd695a7811958e369cc331812a36f3413be94afc76b51ad29e09") (async, rerun: 32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000001040)=0x9, 0x4) (async) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4045) 2.055071077s ago: executing program 3 (id=859): ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000340)={{[0x9, 0x2, 0x9, 0x7]}, 0x0, 0x1, 0x10000008, 0x0, &(0x7f0000000240)=[{{@align=0x8, {0x30, 0xb6, 0x7ff, 0x6}}, 0x1, 0x0, '6\x00'}, {{@align=0xab6c, {0x1, 0xc, 0x3, 0x1}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x1, 0x6]}, {0x9, 0x6122, 0x6, 0x3}}, 0x2ec, 0x0, '\x00'}, {{@align=0x6, {0xa, 0x9, 0x6, 0x6}}, 0x7fff, 0x0, '@-\x00'}, {{@_ha_fsid={[0x7, 0xcf]}, {0x9, 0xd, 0x2, 0x5}}, 0x0, 0x0, ')\xeb!$/-\x00'}, {{@_ha_fsid={[0x91e2, 0x5]}, {0xffc0, 0xb, 0xbc, 0x7}}, 0x1, 0x0, '\x00'}, {{@_ha_fsid={[0x8, 0x10001]}, {0x1, 0x18, 0xeb, 0x40}}, 0x2, 0x0, '\x00'}]}) (async) syz_usb_connect(0x0, 0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="12015002abef560821046c02723f0102030109025c0001089fc00609042455010202ffff052406000105240004000d240f01ff7f0000420003006506241aeb0d0813c6c26f6a6bc6d0c0052406000105240002000d240f"], &(0x7f00000009c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x200, 0x6, 0x5, 0x4, 0xff, 0x6}, 0x0, 0x0}) (async) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000380), 0x10) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x4}, 0x2) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) io_destroy(r0) (async) epoll_create1(0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x426702, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r5, 0x32c29000) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) (async) ioctl$BLKRRPART(r5, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.342591ms ago: executing program 4 (id=860): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x81000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x400000f1, 0x0, 0x80000000806cd}]}) syz_io_uring_setup(0x0, &(0x7f0000003400)={0x0, 0x6460, 0x800, 0x0, 0x1d3}, &(0x7f0000003480), &(0x7f00000034c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'pim6reg\x00', 0x3}, 0x18) socket$inet_icmp(0x2, 0x2, 0x1) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) (async) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x81000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x400000f1, 0x0, 0x80000000806cd}]}) (async) syz_io_uring_setup(0x0, &(0x7f0000003400)={0x0, 0x6460, 0x800, 0x0, 0x1d3}, &(0x7f0000003480), &(0x7f00000034c0)) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'pim6reg\x00', 0x3}, 0x18) (async) 2.616841ms ago: executing program 2 (id=861): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000280)={0x14}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f00000002c0)='./bus\x00', 0x4c37e, 0x6) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)) socket(0x1d, 0x3, 0x0) 0s ago: executing program 3 (id=862): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000340)="7800000018001f07b9409b0dffff000d0216be0400030605060140034300080012000000bf46d32345652b000000caaf6c26c291a34549935ade4a460c89b6ec0cff3943a59b3cb50b0ae854be4dc0c63359547f5090583a86c902000000004a3200637939cc1cd10400160012000a00800000000000000000", 0x79, 0x20004000, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100020000000000040009000000000008000700", @ANYRES32=0x0, @ANYRESDEC=r4], 0x2c, 0x0) socket(0xa, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00000001090222006d49b17f0009040000000e010000082403010102100708"], 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f00000001c0)={{0x2c, @multicast1, 0x4e23, 0x4, 'fo\x00', 0x32, 0x1, 0x4e}, {@loopback, 0x4e21, 0x10000, 0x2, 0x7, 0x6d9}}, 0x44) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) close_range(r2, r8, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000640)=0x8001, 0x4) sendto$inet6(r6, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) kernel console output (not intermixed with test programs): -1: Using ep0 maxpacket: 32 [ 97.371627][ T9] usb 1-1: too many configurations: 32, using maximum allowed: 8 [ 97.381594][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 97.389274][ T9] usb 1-1: can't read configurations, error -61 [ 97.395714][ T9] usb usb1-port1: attempt power cycle [ 97.512966][ T36] audit: type=1400 audit(1772376374.430:378): avc: denied { getopt } for pid=1635 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.737312][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 97.776035][ T45] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 97.783853][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 97.789487][ T9] usb 1-1: too many configurations: 32, using maximum allowed: 8 [ 97.799737][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 97.809899][ T1647] SELinux: failed to load policy [ 97.815005][ T9] usb 1-1: can't read configurations, error -61 [ 97.820627][ T1649] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 97.833593][ T1649] netlink: 'syz.4.392': attribute type 6 has an invalid length. [ 97.841490][ T1649] netlink: 3645 bytes leftover after parsing attributes in process `syz.4.392'. [ 97.935966][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 97.942509][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.951174][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.956386][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 97.960699][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.976482][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.986332][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.996193][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.996804][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 98.010205][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.016603][ T9] usb 1-1: too many configurations: 32, using maximum allowed: 8 [ 98.023628][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.033803][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 98.046832][ T45] usb 4-1: config 0 descriptor?? [ 98.052218][ T9] usb 1-1: can't read configurations, error -61 [ 98.058878][ T9] usb usb1-port1: unable to enumerate USB device [ 98.239331][ T12] bridge_slave_1: left allmulticast mode [ 98.245365][ T12] bridge_slave_1: left promiscuous mode [ 98.256527][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.268030][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.276644][ T12] bridge_slave_0: left allmulticast mode [ 98.284225][ T45] usb 4-1: USB disconnect, device number 43 [ 98.290601][ T12] bridge_slave_0: left promiscuous mode [ 98.297328][ T45] usblp0: removed [ 98.301173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.399967][ T1663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 98.417780][ T12] veth1_macvtap: left promiscuous mode [ 98.423386][ T12] veth0_vlan: left promiscuous mode [ 98.503009][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.510227][ T1661] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.517921][ T1661] bridge_slave_0: entered allmulticast mode [ 98.524265][ T1661] bridge_slave_0: entered promiscuous mode [ 98.531702][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.538769][ T1661] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.545874][ T1661] bridge_slave_1: entered allmulticast mode [ 98.552301][ T1661] bridge_slave_1: entered promiscuous mode [ 98.605215][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.612293][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.619610][ T1661] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.626695][ T1661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.650345][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.658025][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.668627][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.675697][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.689309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.696399][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.715959][ T329] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 98.732516][ T1661] veth0_vlan: entered promiscuous mode [ 98.743601][ T1661] veth1_macvtap: entered promiscuous mode [ 98.766034][ T45] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 98.858165][ T329] usb 3-1: device descriptor read/64, error -71 [ 98.916027][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 98.922410][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.931110][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.940545][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.949878][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.960007][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.970185][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.983694][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.992931][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.002432][ T45] usb 4-1: config 0 descriptor?? [ 99.126044][ T330] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 99.136025][ T329] usb 3-1: device descriptor read/64, error -71 [ 99.209076][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.275969][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 99.283493][ T330] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 99.292704][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.300813][ T330] usb 1-1: Product: syz [ 99.305227][ T330] usb 1-1: Manufacturer: syz [ 99.309887][ T330] usb 1-1: SerialNumber: syz [ 99.319454][ T45] usb 4-1: USB disconnect, device number 44 [ 99.329832][ T45] usblp0: removed [ 99.376209][ T329] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 99.506015][ T329] usb 3-1: device descriptor read/64, error -71 [ 99.525999][ T330] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 99.543798][ T330] usb 1-1: USB disconnect, device number 45 [ 99.563866][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 99.563886][ T36] audit: type=1400 audit(1772376376.480:387): avc: denied { read } for pid=1696 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.620148][ T1705] 9pnet_fd: Insufficient options for proto=fd [ 99.745980][ T329] usb 3-1: device descriptor read/64, error -71 [ 99.856088][ T329] usb usb3-port1: attempt power cycle [ 99.936002][ T330] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 100.085986][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 100.093942][ T330] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 100.103146][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.111258][ T330] usb 1-1: Product: syz [ 100.115480][ T330] usb 1-1: Manufacturer: syz [ 100.120126][ T330] usb 1-1: SerialNumber: syz [ 100.125474][ T330] usb 1-1: config 0 descriptor?? [ 100.134331][ T330] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 100.149398][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.205989][ T329] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 100.227288][ T329] usb 3-1: device descriptor read/8, error -71 [ 100.357179][ T329] usb 3-1: device descriptor read/8, error -71 [ 100.385865][ T1712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1712 comm=syz.0.409 [ 100.496067][ T330] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 100.596003][ T329] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 100.617323][ T329] usb 3-1: device descriptor read/8, error -71 [ 100.647556][ T330] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 100.655799][ T330] usb 4-1: config 0 has no interface number 0 [ 100.662031][ T330] usb 4-1: config 0 interface 41 has no altsetting 0 [ 100.670396][ T330] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 100.679639][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.687704][ T330] usb 4-1: Product: syz [ 100.691908][ T330] usb 4-1: Manufacturer: syz [ 100.696591][ T330] usb 4-1: SerialNumber: syz [ 100.702031][ T330] usb 4-1: config 0 descriptor?? [ 100.747242][ T329] usb 3-1: device descriptor read/8, error -71 [ 100.856147][ T329] usb usb3-port1: unable to enumerate USB device [ 101.557913][ T36] audit: type=1400 audit(1772376378.480:388): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.633196][ T1719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 101.660246][ T1721] netlink: 'syz.2.416': attribute type 7 has an invalid length. [ 101.911843][ T1711] overlayfs: missing 'workdir' [ 101.925465][ T1711] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1152 sclass=netlink_xfrm_socket pid=1711 comm=syz.3.412 [ 101.966017][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 101.980326][ T330] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 101.991062][ T330] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 102.001111][ T330] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 102.012682][ T330] usb 4-1: USB disconnect, device number 45 [ 102.117479][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.127333][ T9] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 102.136679][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.144682][ T9] usb 3-1: Product: syz [ 102.148903][ T9] usb 3-1: Manufacturer: syz [ 102.153547][ T9] usb 3-1: SerialNumber: syz [ 102.367665][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 102.378261][ T9] usb 3-1: USB disconnect, device number 35 [ 102.388872][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.629197][ T330] usb 1-1: USB disconnect, device number 46 [ 102.781770][ T36] audit: type=1400 audit(1772376379.700:389): avc: denied { bpf } for pid=1738 comm="syz.0.423" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.807525][ T36] audit: type=1400 audit(1772376379.730:390): avc: denied { setopt } for pid=1738 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.950466][ T36] audit: type=1400 audit(1772376379.870:391): avc: denied { bind } for pid=1745 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.285990][ T330] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 103.346044][ T329] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 103.437169][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.447426][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.456531][ T330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.466502][ T330] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 103.475556][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.485974][ T329] usb 4-1: device descriptor read/64, error -71 [ 103.490802][ T330] hub 1-1:1.0: bad descriptor, ignoring hub [ 103.500344][ T330] hub 1-1:1.0: probe with driver hub failed with error -5 [ 103.508578][ T330] cdc_wdm 1-1:1.0: skipping garbage [ 103.513827][ T330] cdc_wdm 1-1:1.0: skipping garbage [ 103.519625][ T330] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 103.527471][ T330] cdc_wdm 1-1:1.0: Unknown control protocol [ 103.726008][ T329] usb 4-1: device descriptor read/64, error -71 [ 103.796081][ T330] usb 1-1: USB disconnect, device number 47 [ 103.965995][ T329] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 104.096032][ T329] usb 4-1: device descriptor read/64, error -71 [ 104.286070][ T1774] can: request_module (can-proto-7) failed. [ 104.292678][ T36] audit: type=1400 audit(1772376381.210:392): avc: denied { ioctl } for pid=1772 comm="syz.0.434" path="socket:[15135]" dev="sockfs" ino=15135 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.345989][ T329] usb 4-1: device descriptor read/64, error -71 [ 104.456111][ T329] usb usb4-port1: attempt power cycle [ 104.518526][ T1786] netlink: 156 bytes leftover after parsing attributes in process `syz.2.438'. [ 104.527922][ T1786] tipc: Started in network mode [ 104.532792][ T1786] tipc: Node identity 0000003a5f003a000000000000000001, cluster identity 4711 [ 104.542035][ T1786] tipc: Enabling of bearer rejected, failed to enable media [ 104.666953][ T330] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 104.796009][ T329] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 104.815978][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 104.817521][ T329] usb 4-1: device descriptor read/8, error -71 [ 104.821374][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 104.836302][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.846500][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.857056][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.866189][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.874206][ T330] usb 1-1: Product: syz [ 104.878465][ T330] usb 1-1: Manufacturer: syz [ 104.883078][ T330] usb 1-1: SerialNumber: syz [ 104.957204][ T329] usb 4-1: device descriptor read/8, error -71 [ 104.981544][ T1794] netlink: 'syz.4.442': attribute type 3 has an invalid length. [ 104.996062][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 105.007238][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 105.017300][ T9] usb 3-1: config 0 has no interface number 0 [ 105.025037][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 105.040742][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.049109][ T9] usb 3-1: Product: syz [ 105.053388][ T9] usb 3-1: Manufacturer: syz [ 105.058347][ T9] usb 3-1: SerialNumber: syz [ 105.064243][ T9] usb 3-1: config 0 descriptor?? [ 105.070595][ T9] smsc95xx v2.0.0 [ 105.081361][ T1799] kvm: kvm [1797]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 105.206045][ T329] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 105.227441][ T329] usb 4-1: device descriptor read/8, error -71 [ 105.300958][ T330] usb 1-1: 0:2 : does not exist [ 105.353454][ T1812] can: request_module (can-proto-6) failed. [ 105.370056][ T329] usb 4-1: device descriptor read/8, error -71 [ 105.472039][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 105.483485][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.496067][ T329] usb usb4-port1: unable to enumerate USB device [ 105.503467][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.513529][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.528921][ T330] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 105.537645][ T36] audit: type=1400 audit(1772376382.460:393): avc: denied { mounton } for pid=1814 comm="syz.4.449" path=2F35302FE91F7189591E9233614B dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 105.562962][ T330] usb 1-1: USB disconnect, device number 48 [ 105.587695][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.620489][ T1817] syzkaller1: entered promiscuous mode [ 105.626070][ T1817] syzkaller1: entered allmulticast mode [ 105.676016][ T1819] netlink: 'syz.4.451': attribute type 27 has an invalid length. [ 106.162114][ T36] audit: type=1400 audit(1772376383.080:394): avc: denied { mount } for pid=1841 comm="syz.3.457" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 106.184726][ T36] audit: type=1400 audit(1772376383.080:395): avc: denied { search } for pid=1841 comm="syz.3.457" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.207364][ T36] audit: type=1400 audit(1772376383.090:396): avc: denied { write } for pid=1841 comm="syz.3.457" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.229351][ T36] audit: type=1400 audit(1772376383.130:397): avc: denied { add_name } for pid=1841 comm="syz.3.457" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.250272][ T36] audit: type=1400 audit(1772376383.130:398): avc: denied { create } for pid=1841 comm="syz.3.457" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 106.270397][ T36] audit: type=1400 audit(1772376383.130:399): avc: denied { connect } for pid=1841 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.295951][ T36] audit: type=1400 audit(1772376383.130:400): avc: denied { write } for pid=1841 comm="syz.3.457" laddr=fe80::9c0c:41ff:feb2:1398 lport=1 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.326263][ T36] audit: type=1400 audit(1772376383.220:401): avc: denied { name_bind } for pid=1844 comm="syz.0.458" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 106.348336][ T36] audit: type=1400 audit(1772376383.220:402): avc: denied { create } for pid=1844 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.390590][ T1850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.460'. [ 106.655981][ T45] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 106.806023][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 106.811262][ T329] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 106.820256][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.831203][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.841056][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.853917][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 106.863029][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.872011][ T45] usb 1-1: config 0 descriptor?? [ 106.967685][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.976103][ T329] usb 4-1: not running at top speed; connect to a high speed hub [ 106.984653][ T329] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 4 [ 106.997639][ T329] usb 4-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 107.006823][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.014858][ T329] usb 4-1: Product: syz [ 107.019098][ T329] usb 4-1: Manufacturer: syz [ 107.023749][ T329] usb 4-1: SerialNumber: syz [ 107.233934][ T1858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.243405][ T1858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.258492][ T329] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 107.269645][ T329] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.281030][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 107.284217][ T45] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 107.293865][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 107.305969][ T329] usb 4-1: USB disconnect, device number 50 [ 107.316346][ T45] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 107.324524][ T9] usb 3-1: USB disconnect, device number 36 [ 107.332598][ T45] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 107.334080][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.340149][ T45] microsoft 0003:045E:07DA.0011: unknown global tag 0xc [ 107.364363][ T45] microsoft 0003:045E:07DA.0011: item 0 0 1 12 parsing failed [ 107.372220][ T45] microsoft 0003:045E:07DA.0011: parse failed [ 107.378409][ T45] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22 [ 107.483133][ T546] usb 1-1: USB disconnect, device number 49 [ 107.781798][ T1860] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 107.789642][ T1860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.464'. [ 107.799905][ T1860] veth1: entered promiscuous mode [ 107.818466][ T1862] 9pnet_fd: Insufficient options for proto=fd [ 107.902064][ T1871] netlink: 388 bytes leftover after parsing attributes in process `syz.2.468'. [ 107.921757][ T1873] netlink: 104 bytes leftover after parsing attributes in process `syz.3.466'. [ 108.104246][ T1889] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 108.114572][ T1889] SELinux: failed to load policy [ 108.132675][ T1891] netlink: 104 bytes leftover after parsing attributes in process `syz.2.474'. [ 108.143106][ T1892] overlay: ./file0 is not a directory [ 108.148954][ T1891] overlay: ./file0 is not a directory [ 108.296024][ T546] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 108.445955][ T546] usb 1-1: Using ep0 maxpacket: 16 [ 108.452275][ T546] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 108.460558][ T546] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.470807][ T546] usb 1-1: config 1 has no interface number 0 [ 108.476934][ T546] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.490335][ T546] usb 1-1: config 1 interface 105 has no altsetting 0 [ 108.498743][ T546] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 108.507889][ T546] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 108.516213][ T546] usb 1-1: Product: syz [ 108.520426][ T546] usb 1-1: Manufacturer: syz [ 108.525083][ T546] usb 1-1: SerialNumber: syz [ 108.734909][ T546] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 108.936279][ T546] usb 1-1: USB disconnect, device number 50 [ 109.101144][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.256010][ T45] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 109.408967][ T45] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 109.418092][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.426278][ T45] usb 4-1: Product: syz [ 109.430465][ T45] usb 4-1: Manufacturer: syz [ 109.435059][ T45] usb 4-1: SerialNumber: syz [ 109.844847][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.853526][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.863474][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 109.874405][ T45] usb 4-1: USB disconnect, device number 51 [ 109.916023][ T329] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 110.067281][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.078259][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.088092][ T329] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 110.097371][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.106302][ T329] usb 1-1: config 0 descriptor?? [ 110.541238][ T1939] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 110.708312][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 110.708331][ T36] audit: type=1400 audit(1772376387.630:410): avc: denied { mounton } for pid=1946 comm="syz.3.490" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.986028][ T330] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 111.125992][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.128804][ T1295] Bluetooth: hci0: command 0x1003 tx timeout [ 111.139760][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 111.154051][ T330] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.162463][ T330] usb 4-1: config 179 has no interface number 0 [ 111.168937][ T330] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 111.180237][ T330] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 111.193431][ T330] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.204917][ T330] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.218378][ T330] usb 4-1: config 179 interface 65 has no altsetting 0 [ 111.225347][ T330] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 111.234704][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.254013][ T330] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 111.306061][ T95] input input14: unable to receive magic message: -110 [ 111.313534][ T95] input input14: unable to receive magic message: -32 [ 111.329335][ T95] input input14: unable to receive magic message: -32 [ 111.338469][ T95] input input14: unable to receive magic message: -32 [ 111.455717][ T45] usb 4-1: USB disconnect, device number 52 [ 111.455773][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.472198][ T45] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 111.756023][ T437] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 111.825953][ T45] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 111.907035][ T437] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 111.917051][ T437] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.930073][ T437] usb 3-1: config 1 interface 0 has no altsetting 0 [ 111.975950][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 111.982154][ T45] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 111.990449][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.000614][ T45] usb 4-1: config 0 has no interface number 0 [ 112.006839][ T45] usb 4-1: config 0 interface 227 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.023445][ T45] usb 4-1: New USB device found, idVendor=0d83, idProduct=28bc, bcdDevice=7a.80 [ 112.037371][ T1967] loop6: detected capacity change from 0 to 8 [ 112.045269][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.066920][ T45] usb 4-1: Product: syz [ 112.071168][ T45] usb 4-1: Manufacturer: syz [ 112.075814][ T45] usb 4-1: SerialNumber: syz [ 112.081487][ T45] usb 4-1: config 0 descriptor?? [ 112.302357][ T36] audit: type=1400 audit(1772376389.220:411): avc: denied { create } for pid=1964 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 112.378251][ T45] cdc_eem 4-1:0.227: probe with driver cdc_eem failed with error -22 [ 112.387690][ T45] usb 4-1: USB disconnect, device number 53 [ 112.674434][ T329] usbhid 1-1:0.0: can't add hid device: -71 [ 112.687824][ T329] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.697059][ T329] usb 1-1: USB disconnect, device number 51 [ 112.729418][ T1984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.738483][ T1984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.035979][ T329] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 113.185936][ T329] usb 1-1: Using ep0 maxpacket: 32 [ 113.192723][ T329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.201632][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.212067][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.222856][ T329] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 113.232260][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.240314][ T329] usb 1-1: Product: syz [ 113.244533][ T329] usb 1-1: Manufacturer: syz [ 113.249200][ T329] usb 1-1: SerialNumber: syz [ 113.459923][ T329] usb 1-1: 0:1 : does not exist [ 113.464906][ T329] usb 1-1: BAAD GENERIC IO: no channels? [ 113.472717][ T329] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.482699][ T329] usb 1-1: USB disconnect, device number 52 [ 113.493018][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.095945][ T329] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 114.246803][ T329] usb 4-1: Using ep0 maxpacket: 8 [ 114.254649][ T329] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 114.267675][ T36] audit: type=1400 audit(1772376391.190:412): avc: denied { map } for pid=2005 comm="syz.0.510" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.280080][ T329] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 114.292976][ T36] audit: type=1400 audit(1772376391.190:413): avc: denied { execute } for pid=2005 comm="syz.0.510" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.315177][ T329] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 114.337951][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.347159][ T329] usb 4-1: config 0 descriptor?? [ 114.353309][ T329] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 114.361360][ T329] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 114.519387][ T437] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.535563][ T437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.546067][ T437] usb 3-1: can't set config #1, error -71 [ 114.552525][ T437] usb 3-1: USB disconnect, device number 37 [ 114.561817][ T546] usb 4-1: USB disconnect, device number 54 [ 114.776011][ T330] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 114.846008][ T437] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 114.928249][ T330] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.937499][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.945508][ T330] usb 1-1: Product: syz [ 114.949715][ T330] usb 1-1: Manufacturer: syz [ 114.954339][ T330] usb 1-1: SerialNumber: syz [ 114.997241][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.008490][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.018353][ T437] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 115.027474][ T437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.036472][ T437] usb 3-1: config 0 descriptor?? [ 115.265386][ T2018] sit0: entered promiscuous mode [ 115.272226][ T2018] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 115.280029][ T2018] netlink: 1 bytes leftover after parsing attributes in process `syz.4.514'. [ 115.449214][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.456393][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.463211][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.470301][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.477200][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.484035][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.490912][ T437] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 115.498735][ T437] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 115.647368][ T437] isku 0003:1E7D:319C.0012: couldn't init struct isku_device [ 115.654918][ T2010] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 115.662749][ T437] isku 0003:1E7D:319C.0012: couldn't install keyboard [ 115.672403][ T2010] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 115.681361][ T437] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -32 [ 115.694707][ T437] usb 3-1: USB disconnect, device number 38 [ 116.098265][ T2038] overlayfs: missing 'workdir' [ 116.365983][ T437] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 116.517718][ T437] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.526859][ T437] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.537019][ T437] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.545975][ T437] usb 4-1: config 1 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.558965][ T437] usb 4-1: config 1 interface 0 has no altsetting 0 [ 116.566035][ T330] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 116.575369][ T437] usb 4-1: string descriptor 0 read error: -22 [ 116.581671][ T437] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 6.40 [ 116.590780][ T437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.717250][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.727775][ T330] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 116.738633][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.752532][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.761663][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.769692][ T330] usb 3-1: SerialNumber: syz [ 116.853821][ T36] audit: type=1400 audit(1772376393.780:414): avc: denied { shutdown } for pid=2042 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.267432][ T330] usb 1-1: USB disconnect, device number 53 [ 117.307233][ T2066] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 117.316106][ T2066] rust_binder: Write failure EINVAL in pid:111 [ 117.556653][ T2070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.571914][ T2070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.725976][ T330] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 117.875956][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 117.882470][ T330] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.890762][ T330] usb 1-1: config 0 has no interface number 0 [ 117.898476][ T330] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.907632][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.915823][ T330] usb 1-1: Product: syz [ 117.920049][ T330] usb 1-1: Manufacturer: syz [ 117.924666][ T330] usb 1-1: SerialNumber: syz [ 117.930161][ T330] usb 1-1: config 0 descriptor?? [ 117.936005][ T330] smsc95xx v2.0.0 [ 118.337578][ T330] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 118.348515][ T330] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.900743][ T2079] batadv_slave_1: entered promiscuous mode [ 118.907388][ T2078] batadv_slave_1: left promiscuous mode [ 119.137071][ T546] usb 4-1: USB disconnect, device number 55 [ 119.153393][ T36] audit: type=1326 audit(1772376396.070:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2085 comm="syz.3.536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe50319c799 code=0x0 [ 119.178663][ T330] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 119.189512][ T330] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 119.327430][ T437] usb 3-1: USB disconnect, device number 39 [ 121.716134][ T546] usb 1-1: USB disconnect, device number 54 [ 121.919422][ T2131] SELinux: Context system_u:object_r:semanage_store_t:s0 is not valid (left unmapped). [ 121.929580][ T36] audit: type=1400 audit(1772376398.850:416): avc: denied { relabelto } for pid=2128 comm="syz.0.547" name="file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_store_t:s0" [ 121.956245][ T36] audit: type=1400 audit(1772376398.850:417): avc: denied { associate } for pid=2128 comm="syz.0.547" name="file0" dev="tmpfs" ino=229 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_store_t:s0" [ 121.983942][ T36] audit: type=1400 audit(1772376398.870:418): avc: denied { unlink } for pid=1661 comm="syz-executor" name="file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_store_t:s0" [ 122.011282][ T36] audit: type=1400 audit(1772376398.900:419): avc: denied { read } for pid=2133 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.086198][ T330] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 122.235960][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 122.242275][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.252549][ T330] usb 4-1: config 0 has no interfaces? [ 122.259592][ T330] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 122.268745][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.276789][ T330] usb 4-1: Product: syz [ 122.281250][ T330] usb 4-1: Manufacturer: syz [ 122.285867][ T330] usb 4-1: SerialNumber: syz [ 122.291669][ T330] usb 4-1: config 0 descriptor?? [ 122.445036][ T2137] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 122.499119][ T2116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 122.569703][ T330] usb 4-1: USB disconnect, device number 56 [ 122.885993][ T2149] netlink: 188 bytes leftover after parsing attributes in process `syz.2.553'. [ 122.910041][ T36] audit: type=1400 audit(1772376399.830:420): avc: denied { watch } for pid=2153 comm="syz.2.554" path="/140/file0" dev="tmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.942125][ T36] audit: type=1400 audit(1772376399.860:421): avc: denied { search } for pid=2155 comm="syz.2.555" name="/" dev="configfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.964431][ T36] audit: type=1400 audit(1772376399.870:422): avc: denied { read } for pid=2155 comm="syz.2.555" name="/" dev="configfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.986538][ T36] audit: type=1400 audit(1772376399.870:423): avc: denied { open } for pid=2155 comm="syz.2.555" path="/" dev="configfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.008440][ T36] audit: type=1400 audit(1772376399.870:424): avc: denied { ioctl } for pid=2155 comm="syz.2.555" path="/" dev="configfs" ino=1553 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.047884][ T36] audit: type=1400 audit(1772376399.970:425): avc: granted { setsecparam } for pid=2158 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 123.096017][ T330] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 123.247376][ T330] usb 1-1: No LPM exit latency info found, disabling LPM. [ 123.255352][ T330] usb 1-1: config 24 has no interfaces? [ 123.263208][ T330] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 123.272422][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.280498][ T330] usb 1-1: Manufacturer: ࢆ掇郻骾떆윣䌾⼷铊椞㴈濒啁룮䅬픰ݫ៱䖠换柎拯㈋刾뮙ᚖ⽩컍ũ䤅㋦榨㩬两녷챨ऻ㩓攔癞█兽쐬뀉쌒Ŝꊯ缨짼᯳ꖏல䂂哿㓃鞿肓䆴刣㺺洼ᜥ뀽砱棯钼틉꿫葔ථ޹ɋ쌹⑵㌋ౠ [ 123.307914][ T330] usb 1-1: SerialNumber: ࡭佡펃맍㦒뛻縄ຒ⥙㕟唼壂茡剬ᩯ脄꽤嚆뛷鋛ᨫ잂ଶ쨱珀︛㏯┻❞㜶䄉䀂✡失ஈﲋ粒먑䋤쁣쯛䒍ﵻ䗾賩ꐂ뺭Ꚏᚳ궩㸊瀞ꄟ벹⁀⫲䜧욘쮧 [ 123.395981][ T45] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 123.547224][ T45] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 123.555346][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.565720][ T45] usb 4-1: config 0 has no interface number 0 [ 123.571982][ T45] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 123.583139][ T45] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.596505][ T45] usb 4-1: config 0 interface 2 has no altsetting 0 [ 123.604751][ T45] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 123.624538][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.632851][ T45] usb 4-1: Product: syz [ 123.637241][ T45] usb 4-1: Manufacturer: syz [ 123.641893][ T45] usb 4-1: SerialNumber: syz [ 123.647960][ T45] usb 4-1: config 0 descriptor?? [ 123.653422][ T2165] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 123.696447][ T330] usb 1-1: USB disconnect, device number 55 [ 123.863338][ T45] usb 4-1: invalid MIDI in EP 0 [ 123.872911][ T45] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 123.883762][ T45] usb 4-1: USB disconnect, device number 57 [ 123.901724][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.296046][ T388] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 124.447158][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.458136][ T388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.467926][ T388] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.480869][ T388] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.490193][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.499044][ T388] usb 1-1: config 0 descriptor?? [ 124.616026][ T330] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 124.767189][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.776112][ T330] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 124.785023][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.793776][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.802657][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 124.811400][ T330] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 124.821745][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.832250][ T330] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 124.841422][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.849467][ T330] usb 4-1: Product: syz [ 124.853758][ T330] usb 4-1: Manufacturer: ဉ [ 124.858409][ T330] usb 4-1: SerialNumber: syz [ 124.907898][ T388] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 124.921340][ T388] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 125.067586][ T330] usb 4-1: 0:1 : does not exist [ 125.072541][ T330] usb 4-1: 0:2 : does not exist [ 125.084343][ T330] usb 4-1: USB disconnect, device number 58 [ 125.109233][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.445965][ T546] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 125.599130][ T546] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.610160][ T546] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 125.620422][ T546] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 125.633060][ T546] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 125.642450][ T546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.650732][ T546] usb 3-1: Product: syz [ 125.654972][ T546] usb 3-1: Manufacturer: syz [ 125.659820][ T546] usb 3-1: SerialNumber: syz [ 125.676617][ T546] cdc_mbim 3-1:1.0: skipping garbage [ 125.876682][ T2194] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 126.005992][ T388] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 126.155992][ T388] usb 4-1: Using ep0 maxpacket: 16 [ 126.164567][ T388] usb 4-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 126.173731][ T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.181807][ T388] usb 4-1: Product: syz [ 126.186080][ T388] usb 4-1: Manufacturer: 貿윂콼̞嚀綿챆ີՁ됵撗ብ樫薝♤识罵荔槑☷␋䞆䓤䌘쥐뗍䟤䉆ᖤ斖ᵡ춋煃⠝ᾥ挑撇铛ꮘ [ 126.201422][ T388] usb 4-1: SerialNumber: syz [ 126.285377][ T2194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.294165][ T2194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.304800][ T546] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 126.314069][ T546] cdc_mbim 3-1:1.0: bind() failure [ 126.321622][ T546] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 126.328551][ T546] cdc_ncm 3-1:1.1: bind() failure [ 126.345998][ T10] usb 1-1: reset high-speed USB device number 56 using dummy_hcd [ 126.366567][ T437] usb 3-1: USB disconnect, device number 40 [ 126.410327][ T2208] raw_sendmsg: syz.3.570 forgot to set AF_INET. Fix it! [ 126.453254][ T388] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 126.464561][ T388] usb 4-1: USB disconnect, device number 59 [ 126.475585][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.939571][ T2214] 9pnet_fd: Insufficient options for proto=fd [ 126.997488][ T2219] 9pnet_fd: Insufficient options for proto=fd [ 127.220604][ T36] audit: type=1400 audit(1772376404.140:426): avc: denied { create } for pid=2232 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 127.545983][ T10] usb 1-1: device descriptor read/64, error -71 [ 127.656381][ T10] usb 1-1: device reset changed ep0 maxpacket size! [ 127.664448][ T330] usb 1-1: USB disconnect, device number 56 [ 127.796092][ T330] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 127.945945][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 127.952368][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.962620][ T330] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 127.973541][ T330] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.994317][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 128.003664][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.012103][ T330] usb 1-1: Product: syz [ 128.016397][ T330] usb 1-1: Manufacturer: syz [ 128.021188][ T330] usb 1-1: SerialNumber: syz [ 128.027653][ T36] audit: type=1326 audit(1772376404.950:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2244 comm="syz.3.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50319c799 code=0x0 [ 128.234493][ T330] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 128.250964][ T330] usb 1-1: USB disconnect, device number 57 [ 128.260471][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.366019][ T388] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 128.495996][ T388] usb 4-1: device descriptor read/64, error -71 [ 128.641120][ T36] audit: type=1400 audit(1772376405.560:428): avc: denied { mount } for pid=2251 comm="syz.4.583" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 128.736040][ T388] usb 4-1: device descriptor read/64, error -71 [ 128.755444][ T36] audit: type=1400 audit(1772376405.670:429): avc: denied { execmem } for pid=2253 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 128.915225][ T2254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.923961][ T2254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.986014][ T388] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 129.115993][ T388] usb 4-1: device descriptor read/64, error -71 [ 129.146098][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 129.295952][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 129.302158][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 129.313648][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 129.324517][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.334279][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 129.343469][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.352170][ T10] usb 1-1: config 0 descriptor?? [ 129.358290][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 129.366008][ T388] usb 4-1: device descriptor read/64, error -71 [ 129.476136][ T388] usb usb4-port1: attempt power cycle [ 129.558357][ T2254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.569249][ T2254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.577602][ T45] usb 1-1: USB disconnect, device number 58 [ 129.815981][ T388] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 129.836947][ T388] usb 4-1: device descriptor read/8, error -71 [ 129.925985][ T10] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 129.967367][ T388] usb 4-1: device descriptor read/8, error -71 [ 130.077556][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.085676][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 130.094399][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 130.105481][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 130.116454][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 130.127410][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 130.137116][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.148155][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 130.157279][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.165328][ T10] usb 3-1: Product: syz [ 130.169555][ T10] usb 3-1: Manufacturer: syz [ 130.174221][ T10] usb 3-1: SerialNumber: syz [ 130.179536][ T10] usb 3-1: config 0 descriptor?? [ 130.185058][ T2258] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.203877][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.219755][ T388] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 130.247354][ T388] usb 4-1: device descriptor read/8, error -71 [ 130.278541][ T36] audit: type=1400 audit(1772376407.200:430): avc: denied { create } for pid=2262 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.298775][ T36] audit: type=1400 audit(1772376407.220:431): avc: denied { write } for pid=2262 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.318902][ T36] audit: type=1400 audit(1772376407.220:432): avc: denied { nlmsg_write } for pid=2262 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.340241][ T36] audit: type=1404 audit(1772376407.220:433): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 130.355262][ T36] audit: type=1404 audit(1772376407.250:434): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 130.370260][ T36] audit: type=1400 audit(1772376407.280:435): avc: denied { read write } for pid=2264 comm="syz.0.588" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.394157][ T10] usb 3-1: USB disconnect, device number 41 [ 130.401022][ T388] usb 4-1: device descriptor read/8, error -71 [ 130.516110][ T388] usb usb4-port1: unable to enumerate USB device [ 130.585970][ T437] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 130.747659][ T437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.755809][ T437] usb 1-1: not running at top speed; connect to a high speed hub [ 130.764588][ T437] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 130.773023][ T437] usb 1-1: config 12 has no interface number 0 [ 130.779266][ T437] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 130.792016][ T437] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 130.801133][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.809190][ T437] usb 1-1: Product: syz [ 130.813371][ T437] usb 1-1: Manufacturer: syz [ 130.818008][ T437] usb 1-1: SerialNumber: syz [ 131.034631][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.047303][ T2285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'. [ 131.056682][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.435978][ T45] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 131.443652][ T388] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 131.596009][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 131.602654][ T388] usb 3-1: config index 0 descriptor too short (expected 65479, got 30) [ 131.611446][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 131.619724][ T388] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 131.629879][ T45] usb 4-1: config 0 has no interface number 0 [ 131.636070][ T388] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.649007][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 131.657361][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 131.666545][ T388] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 131.675674][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.683802][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.691956][ T45] usb 4-1: Product: syz [ 131.696233][ T388] usb 3-1: Product: syz [ 131.700455][ T388] usb 3-1: Manufacturer: syz [ 131.705118][ T388] usb 3-1: SerialNumber: syz [ 131.709893][ T45] usb 4-1: Manufacturer: syz [ 131.714551][ T45] usb 4-1: SerialNumber: syz [ 131.723070][ T45] usb 4-1: config 0 descriptor?? [ 131.728964][ T388] rtl8150 3-1:1.0: couldn't find required endpoints [ 131.736085][ T388] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 131.744954][ T45] smsc75xx v1.0.0 [ 131.924129][ T388] usb 3-1: USB disconnect, device number 42 [ 132.458780][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 132.458799][ T36] audit: type=1400 audit(1772376409.380:489): avc: denied { mounton } for pid=2308 comm="syz.2.605" path="/162/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.488002][ T36] audit: type=1400 audit(1772376409.380:490): avc: denied { mount } for pid=2308 comm="syz.2.605" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.510677][ T36] audit: type=1400 audit(1772376409.380:491): avc: denied { getopt } for pid=2308 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.530974][ T36] audit: type=1400 audit(1772376409.410:492): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.552930][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 132.568575][ T36] audit: type=1400 audit(1772376409.490:493): avc: denied { write } for pid=2310 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.600384][ T36] audit: type=1400 audit(1772376409.520:494): avc: denied { create } for pid=2315 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.623438][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.631247][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.648175][ T36] audit: type=1400 audit(1772376409.570:495): avc: denied { ioctl } for pid=2315 comm="syz.2.607" path="socket:[25689]" dev="sockfs" ino=25689 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.691743][ T2318] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.699235][ T36] audit: type=1400 audit(1772376409.570:496): avc: denied { sys_module } for pid=2315 comm="syz.2.607" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 132.720631][ T36] audit: type=1400 audit(1772376409.600:497): avc: denied { connect } for pid=2315 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.741334][ T36] audit: type=1400 audit(1772376409.610:498): avc: denied { name_bind } for pid=2317 comm="syz.4.608" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.763659][ T2318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.774521][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 132.787576][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 132.797675][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 132.807928][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 132.817509][ T45] usb 4-1: USB disconnect, device number 64 [ 133.298200][ T2324] fuse: Unknown parameter '00000000000000000000' [ 133.382482][ T437] usb 1-1: USB disconnect, device number 59 [ 133.395671][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.795967][ T437] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 133.947603][ T437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.955752][ T437] usb 1-1: not running at top speed; connect to a high speed hub [ 133.964447][ T437] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.974602][ T437] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.985927][ T437] usb 1-1: string descriptor 0 read error: -22 [ 133.992196][ T437] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.001274][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.012251][ T437] usb 1-1: 0:2 : does not exist [ 134.222316][ T437] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 134.233701][ T437] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 134.244498][ T437] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 134.272809][ T437] usb 1-1: USB disconnect, device number 60 [ 134.645949][ T1295] Bluetooth: hci0: command 0x1003 tx timeout [ 134.645949][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.909030][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 135.046635][ T2373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.627'. [ 135.067384][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.075717][ T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 135.084763][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 135.095448][ T10] usb 1-1: config 220 has no interface number 2 [ 135.101821][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.115067][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 135.121932][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 135.128904][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 135.137138][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.146255][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.154416][ T10] usb 1-1: Product: syz [ 135.158647][ T10] usb 1-1: Manufacturer: syz [ 135.163257][ T10] usb 1-1: SerialNumber: syz [ 135.262780][ T2377] kvm: user requested TSC rate below hardware speed [ 135.285519][ T2379] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 135.293510][ T2377] kvm: user requested TSC rate below hardware speed [ 135.303072][ T2379] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 135.311968][ T2379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=2379 comm=syz.3.630 [ 135.576064][ T388] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 135.727839][ T388] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.736520][ T388] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.745249][ T388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.755445][ T388] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.770120][ T388] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.779269][ T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.787348][ T388] usb 4-1: Product: syz [ 135.791539][ T388] usb 4-1: Manufacturer: syz [ 135.796195][ T388] usb 4-1: SerialNumber: syz [ 136.007181][ T388] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 136.015153][ T388] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 136.022638][ T388] usb 4-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 136.030070][ T388] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 136.042789][ T388] usb 4-1: USB disconnect, device number 65 [ 136.056236][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.514039][ T2397] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 136.565411][ T2402] : renamed from lo [ 136.572070][ T2404] input: syz0 as /devices/virtual/input/input16 [ 136.655956][ T546] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 136.827156][ T546] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.835374][ T546] usb 3-1: config 0 has no interface number 0 [ 136.841605][ T330] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 136.849228][ T546] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.860374][ T546] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.870283][ T546] usb 3-1: config 0 interface 1 has no altsetting 0 [ 136.877131][ T546] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 136.886235][ T546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.894976][ T546] usb 3-1: config 0 descriptor?? [ 137.027135][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.038121][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.047930][ T330] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 137.057018][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.065715][ T330] usb 4-1: config 0 descriptor?? [ 137.102249][ T2392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.110944][ T2392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.407075][ T546] uclogic 0003:2179:0053.0014: failed retrieving string descriptor #100: -71 [ 137.416018][ T546] uclogic 0003:2179:0053.0014: failed retrieving pen parameters: -71 [ 137.424144][ T546] uclogic 0003:2179:0053.0014: pen probing failed: -71 [ 137.431123][ T546] uclogic 0003:2179:0053.0014: failed probing parameters: -71 [ 137.438718][ T546] uclogic 0003:2179:0053.0014: probe with driver uclogic failed with error -71 [ 137.449892][ T546] usb 3-1: USB disconnect, device number 43 [ 137.473543][ T330] arvo 0003:1E7D:30D4.0015: item fetching failed at offset 6/7 [ 137.481404][ T330] arvo 0003:1E7D:30D4.0015: parse failed [ 137.487143][ T330] arvo 0003:1E7D:30D4.0015: probe with driver arvo failed with error -22 [ 137.624987][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 137.631661][ T10] usb 1-1: No valid video chain found. [ 137.637367][ T10] usb 1-1: selecting invalid altsetting 0 [ 137.647752][ T10] usb 1-1: USB disconnect, device number 61 [ 137.672758][ T546] usb 4-1: USB disconnect, device number 66 [ 137.923952][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 137.923971][ T36] audit: type=1400 audit(1772376414.840:550): avc: denied { create } for pid=2423 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.949494][ T36] audit: type=1400 audit(1772376414.840:551): avc: denied { connect } for pid=2423 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.969080][ T36] audit: type=1400 audit(1772376414.840:552): avc: denied { write } for pid=2423 comm="syz.2.648" laddr=172.20.20.170 lport=4 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.025970][ T10] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 138.082868][ T36] audit: type=1400 audit(1772376415.000:553): avc: denied { getopt } for pid=2440 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.084267][ T2441] netlink: 'syz.2.651': attribute type 13 has an invalid length. [ 138.110949][ T2441] erspan0: refused to change device tx_queue_len [ 138.165939][ T10] usb 1-1: device descriptor read/64, error -71 [ 138.203247][ T36] audit: type=1400 audit(1772376415.120:554): avc: denied { remount } for pid=2446 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.347001][ T36] audit: type=1400 audit(1772376415.270:555): avc: denied { ioctl } for pid=2452 comm="syz.2.655" path="socket:[27431]" dev="sockfs" ino=27431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.371737][ T36] audit: type=1400 audit(1772376415.270:556): avc: denied { read } for pid=2452 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.405972][ T10] usb 1-1: device descriptor read/64, error -71 [ 138.475987][ T45] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 138.586006][ T330] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 138.627642][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 138.636303][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.646542][ T45] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 138.656036][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 138.664805][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 138.674040][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.682145][ T45] usb 4-1: Product: 赃⢙辙槇巒ꡲꡄରꆱﲈ䑵㒤䀩㒾⓬砗락਷쒦헴 [ 138.692182][ T45] usb 4-1: Manufacturer: 蹑홓╩裡 [ 138.697619][ T45] usb 4-1: SerialNumber: 鿆ᏽ줇䛽ȭ腋눦鮶秕氧ਧ⬫꧲⌊ᑮ㼗絥駱鑮ꪋᰤࣳ벦⣶筭텘쏤﷠첑ߓꇬ쥈䃐쿻盄꿈닂庥트﬛戮媀쎩뱏諤袞㛘귙쑂ج욮੄薴＼Ƽ㺟훪뀬锲鱲칆늿ｵ㜀ꀪᔯ额号 [ 138.745957][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 138.752378][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.764244][ T330] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 138.773505][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.781863][ T330] usb 3-1: Product: syz [ 138.786085][ T330] usb 3-1: Manufacturer: syz [ 138.791145][ T330] usb 3-1: SerialNumber: syz [ 138.795953][ T10] usb 1-1: device descriptor read/64, error -71 [ 138.802989][ T330] usb 3-1: config 0 descriptor?? [ 138.808918][ T330] usb 3-1: bad CDC descriptors [ 138.813910][ T330] usb 3-1: unsupported MDLM descriptors [ 139.035962][ T10] usb 1-1: device descriptor read/64, error -71 [ 139.124669][ T388] usb 4-1: USB disconnect, device number 67 [ 139.146105][ T10] usb usb1-port1: attempt power cycle [ 139.485969][ T10] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 139.507342][ T10] usb 1-1: device descriptor read/8, error -71 [ 139.638584][ T10] usb 1-1: device descriptor read/8, error -71 [ 139.645662][ T36] audit: type=1400 audit(1772376416.560:557): avc: denied { nlmsg_read } for pid=2455 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.668845][ T36] audit: type=1400 audit(1772376416.590:558): avc: denied { read } for pid=2455 comm="syz.3.656" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.692631][ T36] audit: type=1400 audit(1772376416.590:559): avc: denied { open } for pid=2455 comm="syz.3.656" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.875967][ T10] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 139.897190][ T10] usb 1-1: device descriptor read/8, error -71 [ 140.027030][ T10] usb 1-1: device descriptor read/8, error -71 [ 140.136110][ T10] usb usb1-port1: unable to enumerate USB device [ 140.334041][ T2460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 140.775953][ T388] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 140.855000][ T2468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2468 comm=syz.0.660 [ 140.884058][ T2470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 140.927075][ T388] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.937089][ T388] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.949355][ T388] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.966708][ T388] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 140.975918][ T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.986819][ T388] usb 4-1: Product: syz [ 140.991043][ T388] usb 4-1: Manufacturer: syz [ 140.995665][ T388] usb 4-1: SerialNumber: syz [ 141.007937][ T388] usblp0: Disabling reads from problematic bidirectional printer [ 141.036915][ T2485] 9pnet_fd: Insufficient options for proto=fd [ 141.050815][ T2485] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 141.208440][ T388] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 141.307109][ T330] usb 3-1: USB disconnect, device number 44 [ 141.462950][ T2508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.470976][ T2508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 141.479572][ T2508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.487520][ T2508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 141.496342][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 141.568622][ T2515] fuse: Unknown parameter '' [ 141.640186][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.649158][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.661555][ T330] usb 4-1: USB disconnect, device number 68 [ 141.669801][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 141.684434][ T330] usblp0: removed [ 141.690247][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 141.698828][ T10] usb 1-1: config 0 has no interface number 0 [ 141.707497][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 141.716613][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.724892][ T10] usb 1-1: Product: syz [ 141.729191][ T10] usb 1-1: Manufacturer: syz [ 141.733823][ T10] usb 1-1: SerialNumber: syz [ 141.739188][ T10] usb 1-1: config 0 descriptor?? [ 141.947856][ T10] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 141.954347][ T10] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 141.964816][ T10] usb 1-1: USB disconnect, device number 66 [ 142.406256][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 142.462656][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 142.535976][ T10] usb 3-1: device descriptor read/64, error -71 [ 142.775972][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.015954][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 143.146034][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.262713][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 143.262732][ T36] audit: type=1400 audit(1772376420.180:583): avc: denied { bind } for pid=2534 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.328784][ T36] audit: type=1400 audit(1772376420.250:584): avc: denied { map } for pid=2536 comm="syz.0.683" path="socket:[27587]" dev="sockfs" ino=27587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.351839][ T36] audit: type=1400 audit(1772376420.250:585): avc: denied { read } for pid=2536 comm="syz.0.683" path="socket:[27587]" dev="sockfs" ino=27587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.385963][ T10] usb 3-1: device descriptor read/64, error -71 [ 143.496083][ T10] usb usb3-port1: attempt power cycle [ 143.515978][ T330] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 143.666478][ T330] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 143.675309][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.685523][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.699540][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.709743][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.723494][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.733662][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.747319][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.757485][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.771107][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.781458][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.795293][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.805619][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.819272][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.829882][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.843814][ T330] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 143.854069][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 143.861856][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.876639][ T330] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 143.885826][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.893961][ T330] usb 4-1: Product: syz [ 143.898250][ T330] usb 4-1: Manufacturer: syz [ 143.902969][ T330] usb 4-1: SerialNumber: syz [ 143.908332][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.036981][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.056646][ T36] audit: type=1400 audit(1772376420.980:586): avc: denied { write } for pid=2539 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.116975][ T330] rtl8150 4-1:1.0: couldn't find required endpoints [ 144.123695][ T330] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 144.136318][ T330] usb 4-1: USB disconnect, device number 69 [ 144.276072][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 144.320615][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.359740][ T2549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 144.457694][ T10] usb 3-1: device descriptor read/8, error -71 [ 144.566360][ T10] usb usb3-port1: unable to enumerate USB device [ 144.705954][ T330] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 144.855972][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 144.862226][ T330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 144.872817][ T330] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 144.882019][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.890177][ T330] usb 1-1: Product: syz [ 144.894584][ T330] usb 1-1: Manufacturer: syz [ 144.899331][ T330] usb 1-1: SerialNumber: syz [ 144.904894][ T330] usb 1-1: config 0 descriptor?? [ 144.913152][ T330] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 144.921469][ T330] usb 1-1: Detected FT232R [ 145.112718][ T330] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 145.185964][ T45] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 145.288680][ T2578] netlink: 52 bytes leftover after parsing attributes in process `syz.2.696'. [ 145.321833][ T330] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 145.337981][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.346620][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 145.356655][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 145.370487][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 145.381852][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 145.392987][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 145.403189][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 145.414824][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 145.427734][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 145.436964][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.445045][ T45] usb 4-1: Product: syz [ 145.449723][ T36] audit: type=1400 audit(1772376422.370:587): avc: denied { create } for pid=2579 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 145.449835][ T45] usb 4-1: Manufacturer: syz [ 145.449857][ T45] usb 4-1: SerialNumber: syz [ 145.479743][ T45] usb 4-1: config 0 descriptor?? [ 145.485578][ T2566] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 145.499008][ T45] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 145.523899][ T45] usb 1-1: USB disconnect, device number 67 [ 145.525833][ T840] udevd[840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.552893][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 145.562907][ T45] ftdi_sio 1-1:0.0: device disconnected [ 145.697547][ T437] usb 4-1: USB disconnect, device number 70 [ 145.756011][ T330] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 145.907387][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.918496][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.928286][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.941234][ T330] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.950362][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.959031][ T330] usb 3-1: config 0 descriptor?? [ 146.042158][ T36] audit: type=1400 audit(1772376422.960:588): avc: denied { mount } for pid=2585 comm="syz.0.699" name="/" dev="overlay" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 146.064638][ T36] audit: type=1400 audit(1772376422.970:589): avc: denied { read write } for pid=2585 comm="syz.0.699" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.087849][ T36] audit: type=1400 audit(1772376422.970:590): avc: denied { open } for pid=2585 comm="syz.0.699" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.110796][ T36] audit: type=1400 audit(1772376422.970:591): avc: denied { ioctl } for pid=2585 comm="syz.0.699" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 146.135340][ T36] audit: type=1400 audit(1772376422.980:592): avc: denied { getopt } for pid=2585 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.367511][ T330] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 146.376917][ T330] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.505998][ T546] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 146.535947][ T437] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 146.568013][ T2584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.576617][ T2584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.585943][ T330] usb 3-1: USB disconnect, device number 49 [ 146.657278][ T546] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 146.666125][ T437] usb 1-1: device descriptor read/64, error -71 [ 146.667373][ T546] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 146.682689][ T546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.893190][ T2595] 9pnet_fd: Insufficient options for proto=fd [ 146.900410][ T546] usb 4-1: string descriptor 0 read error: -71 [ 146.906441][ T437] usb 1-1: device descriptor read/64, error -71 [ 146.908665][ T546] hub 4-1:32.0: bad descriptor, ignoring hub [ 146.919847][ T546] hub 4-1:32.0: probe with driver hub failed with error -5 [ 146.946316][ T546] usb 4-1: USB disconnect, device number 71 [ 147.155996][ T437] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 147.286107][ T437] usb 1-1: device descriptor read/64, error -71 [ 147.527401][ T437] usb 1-1: device descriptor read/64, error -71 [ 147.636171][ T437] usb usb1-port1: attempt power cycle [ 147.745960][ T45] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 147.895981][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 147.902651][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 147.910860][ T45] usb 4-1: config 0 has no interface number 0 [ 147.924535][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 147.933739][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.941829][ T45] usb 4-1: Product: syz [ 147.946102][ T45] usb 4-1: Manufacturer: syz [ 147.950750][ T45] usb 4-1: SerialNumber: syz [ 147.965944][ T45] usb 4-1: config 0 descriptor?? [ 147.979623][ T437] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 147.994777][ T45] smsc95xx v2.0.0 [ 148.007785][ T437] usb 1-1: device descriptor read/8, error -71 [ 148.097068][ T2631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.137135][ T437] usb 1-1: device descriptor read/8, error -71 [ 148.375949][ T437] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 148.395970][ T329] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 148.404177][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 148.415403][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.424923][ T437] usb 1-1: device descriptor read/8, error -71 [ 148.555989][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 148.562484][ T437] usb 1-1: device descriptor read/8, error -71 [ 148.568828][ T329] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 148.577092][ T329] usb 3-1: config 0 has no interface number 0 [ 148.583201][ T329] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 148.599238][ T329] usb 3-1: config 0 interface 196 has no altsetting 0 [ 148.611874][ T329] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 148.621349][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.629560][ T329] usb 3-1: Product: syz [ 148.633967][ T329] usb 3-1: Manufacturer: syz [ 148.638657][ T329] usb 3-1: SerialNumber: syz [ 148.651971][ T329] usb 3-1: config 0 descriptor?? [ 148.657426][ T2634] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.686092][ T437] usb usb1-port1: unable to enumerate USB device [ 149.034935][ T2612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.043749][ T2612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.052380][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 149.063383][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 149.076745][ T45] usb 4-1: USB disconnect, device number 72 [ 149.085079][ T329] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 149.093479][ T329] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 149.105234][ T329] usb 3-1: USB disconnect, device number 50 [ 149.319889][ T2643] netlink: 9 bytes leftover after parsing attributes in process `syz.0.718'. [ 149.328831][ T2643] z00X: renamed from gretap0 (while UP) [ 149.335313][ T2643] z00X: entered allmulticast mode [ 149.596249][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 149.596267][ T36] audit: type=1400 audit(1772376426.520:597): avc: denied { create } for pid=2646 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.627199][ T36] audit: type=1400 audit(1772376426.550:598): avc: denied { setopt } for pid=2646 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.705965][ T329] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 149.805969][ T45] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 149.835961][ T329] usb 1-1: device descriptor read/64, error -71 [ 149.957614][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.965782][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 149.974562][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.984772][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.995990][ T45] usb 4-1: string descriptor 0 read error: -22 [ 150.002217][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.011302][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.022007][ T45] usb 4-1: 0:2 : does not exist [ 150.075972][ T329] usb 1-1: device descriptor read/64, error -71 [ 150.326638][ T329] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 150.465970][ T329] usb 1-1: device descriptor read/64, error -71 [ 150.638450][ T45] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 150.648323][ T45] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 150.658280][ T45] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 150.674999][ T45] usb 4-1: USB disconnect, device number 73 [ 150.705998][ T329] usb 1-1: device descriptor read/64, error -71 [ 150.816073][ T329] usb usb1-port1: attempt power cycle [ 151.075962][ T45] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 151.155931][ T329] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 151.183963][ T329] usb 1-1: device descriptor read/8, error -71 [ 151.197180][ T36] audit: type=1400 audit(1772376428.120:599): avc: denied { create } for pid=2662 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 151.225969][ T36] audit: type=1400 audit(1772376428.120:600): avc: denied { sys_admin } for pid=2662 comm="syz.3.725" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 151.264440][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.272927][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 151.281630][ T45] usb 3-1: config 4 has no interfaces? [ 151.288917][ T45] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 151.298572][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.307011][ T45] usb 3-1: Product: ؿ깫Ԇ봱ﵨ톭꜈ﯹ蘃⑩啢ᩐ᎛㳳⮱⡩沠솖쐧六뿪䭞⸊д坛勁㑂䬍ፍ칬脕ꎔዴᡤ峩濎ꗣ篥⩋຃⤼邞୫䮖ؔ削⾨¾咖홰䉻釜㜐⿎緗㹀ងร淅稘섡﵅䥷辸爳箼⇜镩⅍Ⅳ璜࿎킕๩橝绁康 [ 151.345970][ T45] usb 3-1: Manufacturer: Љ [ 151.350683][ T45] usb 3-1: SerialNumber: ⯶殦Ⲁ⧟⯓ᩮ훔쒌樿ኦ촍َ鬖楷缇ロந෌䪥⢬㬔쇷됈됰田ꢼ㒒鰤ⵟ嵙䗥疪遞鸿抉ꭊ䟳묓ꠞ籭梁燺쟖烐뀞ɽ⳵攪慹 [ 151.369155][ T329] usb 1-1: device descriptor read/8, error -71 [ 151.483964][ T2670] SELinux: Context is not valid (left unmapped). [ 151.491094][ T36] audit: type=1400 audit(1772376428.410:601): avc: denied { relabelto } for pid=2669 comm="syz.3.727" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 151.516966][ T2670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 151.534716][ T36] audit: type=1400 audit(1772376428.440:602): avc: denied { associate } for pid=2669 comm="syz.3.727" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1088 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 151.568394][ T36] audit: type=1400 audit(1772376428.440:603): avc: denied { ioctl } for pid=2669 comm="syz.3.727" path="/194/blkio.bfq.io_serviced" dev="tmpfs" ino=1088 ioctlcmd=0xaf73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 151.595718][ T36] audit: type=1400 audit(1772376428.450:604): avc: denied { unlink } for pid=291 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 151.621717][ T45] usb 3-1: USB disconnect, device number 51 [ 151.628066][ T329] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 151.647210][ T329] usb 1-1: device descriptor read/8, error -71 [ 151.787107][ T329] usb 1-1: device descriptor read/8, error -71 [ 151.896034][ T329] usb usb1-port1: unable to enumerate USB device [ 152.116028][ T36] audit: type=1400 audit(1772376429.030:605): avc: denied { ioctl } for pid=2675 comm="syz.2.729" path="socket:[28454]" dev="sockfs" ino=28454 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 152.355951][ T329] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 152.418973][ T2687] 9pnet_fd: p9_fd_create_tcp (2687): problem connecting socket to 127.0.0.1 [ 152.510642][ T329] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.523256][ T329] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 152.532784][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.541070][ T329] usb 3-1: Product: syz [ 152.545385][ T329] usb 3-1: Manufacturer: syz [ 152.550306][ T329] usb 3-1: SerialNumber: syz [ 152.580689][ T36] audit: type=1400 audit(1772376429.500:606): avc: denied { load_policy } for pid=2694 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 152.601366][ T2695] SELinux: failed to load policy [ 152.767835][ T329] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 152.780123][ T329] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 152.794054][ T329] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 152.804722][ T329] usb 3-1: USB disconnect, device number 52 [ 152.815373][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.845985][ T546] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 152.997142][ T546] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.007415][ T546] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 153.016520][ T546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.025362][ T546] usb 4-1: config 0 descriptor?? [ 153.033673][ T546] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 153.105989][ T329] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 153.234414][ T2695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.242912][ T329] usb 3-1: device descriptor read/64, error -71 [ 153.243326][ T2695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.258301][ T546] usb 4-1: USB disconnect, device number 74 [ 153.455990][ T45] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 153.485961][ T329] usb 3-1: device descriptor read/64, error -71 [ 153.607649][ T45] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.616128][ T45] usb 1-1: config 0 has no interface number 0 [ 153.622231][ T45] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.633159][ T45] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.642967][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 153.652057][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.661045][ T45] usb 1-1: config 0 descriptor?? [ 153.726000][ T329] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 153.865949][ T329] usb 3-1: device descriptor read/64, error -71 [ 154.075053][ T2701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.083784][ T2701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.105976][ T329] usb 3-1: device descriptor read/64, error -71 [ 154.216131][ T329] usb usb3-port1: attempt power cycle [ 154.293713][ T45] usbhid 1-1:0.2: can't add hid device: -71 [ 154.300056][ T45] usbhid 1-1:0.2: probe with driver usbhid failed with error -71 [ 154.309107][ T45] usb 1-1: USB disconnect, device number 76 [ 154.555984][ T329] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 154.577108][ T329] usb 3-1: device descriptor read/8, error -71 [ 154.707492][ T329] usb 3-1: device descriptor read/8, error -71 [ 154.772148][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 154.772171][ T36] audit: type=1400 audit(1772376431.680:609): avc: denied { create } for pid=2714 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 154.809411][ T36] audit: type=1400 audit(1772376431.710:610): avc: denied { write } for pid=2716 comm="syz.3.743" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.838795][ T2722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 154.850507][ T36] audit: type=1400 audit(1772376431.770:611): avc: denied { ioctl } for pid=2721 comm="syz.0.744" path="socket:[28596]" dev="sockfs" ino=28596 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.933521][ T36] audit: type=1400 audit(1772376431.850:612): avc: denied { name_bind } for pid=2724 comm="syz.3.745" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 154.946115][ T329] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 154.987897][ T2722] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 154.997434][ T329] usb 3-1: device descriptor read/8, error -71 [ 154.999820][ T2722] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 155.012095][ T2722] kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 155.020571][ T2722] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 155.028832][ T2722] kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 155.037189][ T2722] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 155.045602][ T2722] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 155.053981][ T2722] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 155.062115][ T2722] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 155.070329][ T2722] kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 155.126984][ T329] usb 3-1: device descriptor read/8, error -71 [ 155.236070][ T329] usb usb3-port1: unable to enumerate USB device [ 155.257969][ T2750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 155.286026][ T45] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 155.435946][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 155.442468][ T45] usb 4-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 155.451261][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 155.460498][ T45] usb 4-1: config 0 has no interface number 0 [ 155.466874][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.478005][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.487812][ T45] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 155.497015][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.505781][ T45] usb 4-1: config 0 descriptor?? [ 155.809177][ T2756] fuse: Bad value for 'rootmode' [ 155.814307][ T36] audit: type=1400 audit(1772376432.730:613): avc: denied { mounton } for pid=2755 comm="syz.2.756" path="/193/file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 155.904066][ T2768] tmpfs: Unknown parameter 'per' [ 155.913982][ T45] hid-generic 0003:1B1C:1B34.0017: unknown main item tag 0x0 [ 155.928508][ T45] hid-generic 0003:1B1C:1B34.0017: unknown main item tag 0x0 [ 155.939032][ T45] hid-generic 0003:1B1C:1B34.0017: failed to start in urb: -90 [ 155.964637][ T45] hid-generic 0003:1B1C:1B34.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input1 [ 156.114858][ T2728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 156.124620][ T45] usb 4-1: USB disconnect, device number 75 [ 156.195961][ T546] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 156.195961][ T437] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 156.345986][ T546] usb 3-1: Using ep0 maxpacket: 8 [ 156.352741][ T546] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.361709][ T546] usb 3-1: config 9 has an invalid interface number: 59 but max is 0 [ 156.367676][ T437] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.370361][ T546] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 156.381447][ T437] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.390152][ T546] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 156.399926][ T437] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.410135][ T546] usb 3-1: config 9 has no interface number 0 [ 156.416682][ T437] usb 1-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 156.422793][ T546] usb 3-1: config 9 interface 59 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 156.431875][ T437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.442721][ T546] usb 3-1: config 9 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 156.452837][ T437] usb 1-1: config 0 descriptor?? [ 156.470153][ T546] usb 3-1: config 9 interface 59 has no altsetting 0 [ 156.478490][ T546] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=d2.ba [ 156.488219][ T546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.496310][ T546] usb 3-1: Product: syz [ 156.500534][ T546] usb 3-1: Manufacturer: syz [ 156.505181][ T546] usb 3-1: SerialNumber: syz [ 156.678461][ T2780] fuse: Unknown parameter 'bd' [ 156.690161][ T36] audit: type=1326 audit(1772376433.610:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz.3.763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe50319c799 code=0x0 [ 156.720799][ T546] usb 3-1: USB disconnect, device number 57 [ 156.731622][ T841] udevd[841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.59/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.743554][ T36] audit: type=1400 audit(1772376433.660:615): avc: denied { map } for pid=2779 comm="syz.3.763" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.772465][ T36] audit: type=1404 audit(1772376433.700:616): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 156.789619][ T36] audit: type=1400 audit(1772376433.720:617): avc: denied { read write } for pid=2779 comm="syz.3.763" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 156.875128][ T36] audit: type=1400 audit(1772376433.790:618): avc: denied { read write } for pid=2769 comm="syz.0.760" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 156.887573][ T2770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14592 sclass=netlink_route_socket pid=2770 comm=syz.0.760 [ 156.934163][ T2788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 157.033238][ T2798] futex_wake_op: syz.0.768 tries to shift op by 32; fix this program [ 157.074702][ T437] usbhid 1-1:0.0: can't add hid device: -71 [ 157.080808][ T437] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.090142][ T437] usb 1-1: USB disconnect, device number 77 [ 159.815907][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 159.815926][ T36] audit: type=1400 audit(1772376436.730:730): avc: denied { read write } for pid=1056 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 159.846673][ T36] audit: type=1400 audit(1772376436.740:731): avc: denied { read write } for pid=2864 comm="syz.4.794" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 159.870542][ T36] audit: type=1400 audit(1772376436.740:732): avc: denied { read append } for pid=2864 comm="syz.4.794" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 159.894024][ T36] audit: type=1400 audit(1772376436.800:733): avc: denied { sqpoll } for pid=2866 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 159.913366][ T36] audit: type=1400 audit(1772376436.800:734): avc: denied { sqpoll } for pid=2866 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 159.935291][ T2869] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.796'. [ 159.944501][ T2869] netlink: 280 bytes leftover after parsing attributes in process `syz.0.796'. [ 159.976731][ T36] audit: type=1400 audit(1772376436.900:735): avc: denied { create } for pid=2873 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 159.996139][ T36] audit: type=1400 audit(1772376436.900:736): avc: denied { create } for pid=2873 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 160.015521][ T36] audit: type=1400 audit(1772376436.900:737): avc: denied { read write } for pid=2873 comm="syz.0.798" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 160.039130][ T36] audit: type=1400 audit(1772376436.900:738): avc: denied { read write } for pid=2873 comm="syz.0.798" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 160.062563][ T36] audit: type=1400 audit(1772376436.900:739): avc: denied { read write } for pid=2873 comm="syz.0.798" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 161.108122][ T2895] netlink: 188 bytes leftover after parsing attributes in process `syz.0.807'. [ 161.136700][ T2895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19631 sclass=netlink_route_socket pid=2895 comm=syz.0.807 [ 161.418905][ T46] bridge_slave_1: left allmulticast mode [ 161.431559][ T46] bridge_slave_1: left promiscuous mode [ 161.442858][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.450762][ T46] bridge_slave_0: left allmulticast mode [ 161.456547][ T46] bridge_slave_0: left promiscuous mode [ 161.462277][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.598388][ T46] veth1_macvtap: left promiscuous mode [ 161.603937][ T46] veth0_vlan: left promiscuous mode [ 162.385988][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.405982][ T1295] Bluetooth: hci0: command 0x1003 tx timeout [ 164.405982][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.926798][ T36] kauditd_printk_skb: 293 callbacks suppressed [ 164.926818][ T36] audit: type=1400 audit(1772376441.850:1033): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.034681][ T36] audit: type=1400 audit(1772376441.960:1034): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 165.433017][ T36] audit: type=1400 audit(1772376442.350:1035): avc: denied { execmem } for pid=2951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 165.454864][ T36] audit: type=1400 audit(1772376442.350:1036): avc: denied { read write } for pid=2953 comm="syz.2.828" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 165.479079][ T36] audit: type=1400 audit(1772376442.380:1037): avc: denied { read write } for pid=2953 comm="syz.2.828" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 165.502656][ T36] audit: type=1400 audit(1772376442.380:1038): avc: denied { read write } for pid=2953 comm="syz.2.828" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 165.526242][ T36] audit: type=1400 audit(1772376442.380:1039): avc: denied { create } for pid=2955 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 165.545924][ T36] audit: type=1400 audit(1772376442.380:1040): avc: denied { read write } for pid=2955 comm="syz.3.829" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 165.569368][ T36] audit: type=1400 audit(1772376442.390:1041): avc: denied { create } for pid=2955 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 165.589780][ T36] audit: type=1400 audit(1772376442.390:1042): avc: denied { read } for pid=2955 comm="syz.3.829" dev="nsfs" ino=4026532411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 170.113522][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 170.113544][ T36] audit: type=1400 audit(1772376447.030:1154): avc: denied { create } for pid=2993 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 170.144123][ T36] audit: type=1400 audit(1772376447.050:1155): avc: denied { execmem } for pid=2992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 170.163828][ T36] audit: type=1400 audit(1772376447.050:1156): avc: denied { read } for pid=2994 comm="syz.3.841" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 170.186455][ T36] audit: type=1400 audit(1772376447.050:1157): avc: denied { create } for pid=2994 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 170.206089][ T36] audit: type=1400 audit(1772376447.050:1158): avc: denied { read write } for pid=2994 comm="syz.3.841" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 170.230745][ T36] audit: type=1400 audit(1772376447.050:1159): avc: denied { read write } for pid=2994 comm="syz.3.841" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 170.253885][ T36] audit: type=1400 audit(1772376447.070:1160): avc: denied { read write } for pid=2993 comm="syz.4.839" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 170.277417][ T36] audit: type=1400 audit(1772376447.070:1161): avc: denied { create } for pid=2993 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 170.297823][ T36] audit: type=1400 audit(1772376447.070:1162): avc: denied { read } for pid=2993 comm="syz.4.839" dev="nsfs" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 170.318910][ T36] audit: type=1400 audit(1772376447.090:1163): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 175.186742][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 175.186761][ T36] audit: type=1400 audit(1772376452.110:1200): avc: denied { read write } for pid=1056 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 175.217147][ T36] audit: type=1400 audit(1772376452.110:1201): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.381113][ T36] audit: type=1400 audit(1772376453.300:1202): avc: denied { execmem } for pid=3024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 176.404840][ T3031] netlink: 'syz.2.852': attribute type 12 has an invalid length. [ 176.417212][ T36] audit: type=1400 audit(1772376453.320:1203): avc: denied { create } for pid=3025 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 176.436883][ T36] audit: type=1400 audit(1772376453.320:1204): avc: denied { read write } for pid=3029 comm="syz.3.853" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.461358][ T36] audit: type=1400 audit(1772376453.320:1205): avc: denied { create } for pid=3025 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.482150][ T36] audit: type=1400 audit(1772376453.320:1206): avc: denied { create } for pid=3025 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.502718][ T36] audit: type=1400 audit(1772376453.320:1207): avc: denied { create } for pid=3025 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 176.522430][ T36] audit: type=1400 audit(1772376453.320:1208): avc: denied { mounton } for pid=3026 comm="syz.2.852" path="/216/file0" dev="tmpfs" ino=1210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 176.545159][ T36] audit: type=1400 audit(1772376453.320:1209): avc: denied { read write } for pid=3029 comm="syz.3.853" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 180.202676][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 180.202695][ T36] audit: type=1400 audit(1772376457.120:1246): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.692040][ T36] audit: type=1400 audit(1772376457.610:1247): avc: denied { read write } for pid=1056 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.146527][ T36] audit: type=1400 audit(1772376459.070:1248): avc: denied { create } for pid=3062 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 182.168345][ T3064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 182.209322][ T36] audit: type=1400 audit(1772376459.070:1249): avc: denied { create } for pid=3060 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 182.257600][ T36] audit: type=1400 audit(1772376459.070:1250): avc: denied { execmem } for pid=3059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 182.277240][ T36] audit: type=1400 audit(1772376459.080:1251): avc: denied { read } for pid=3060 comm="syz.4.860" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 182.299943][ T36] audit: type=1400 audit(1772376459.080:1252): avc: denied { create } for pid=3060 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 182.324450][ T36] audit: type=1400 audit(1772376459.080:1253): avc: denied { read } for pid=3060 comm="syz.4.860" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 182.347774][ T36] audit: type=1400 audit(1772376459.090:1254): avc: denied { read write } for pid=3061 comm="syz.2.861" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 182.388792][ T36] audit: type=1400 audit(1772376459.090:1255): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1945]" dev="pipefs" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 182.579050][ T12] bridge_slave_1: left allmulticast mode [ 182.584768][ T12] bridge_slave_1: left promiscuous mode [ 182.590669][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.598671][ T12] bridge_slave_0: left allmulticast mode [ 182.604343][ T12] bridge_slave_0: left promiscuous mode [ 182.610256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.808668][ T12] tipc: Left network mode [ 182.814034][ T12] veth1_macvtap: left promiscuous mode [ 182.819666][ T12] veth0_vlan: left promiscuous mode [ 183.008873][ T12] bridge_slave_1: left allmulticast mode [ 183.014551][ T12] bridge_slave_1: left promiscuous mode [ 183.020260][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.027938][ T12] bridge_slave_0: left allmulticast mode [ 183.033588][ T12] bridge_slave_0: left promiscuous mode [ 183.039382][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.047231][ T12] bridge_slave_1: left allmulticast mode [ 183.052887][ T12] bridge_slave_1: left promiscuous mode [ 183.058666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.066368][ T12] bridge_slave_0: left allmulticast mode [ 183.072030][ T12] bridge_slave_0: left promiscuous mode [ 183.077787][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.271082][ T12] veth0_vlan: left promiscuous mode [ 183.276820][ T12] veth1_macvtap: left promiscuous mode [ 183.282390][ T12] veth0_vlan: left promiscuous mode [ 183.649064][ T12] ------------[ cut here ]------------ [ 183.654565][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 183.664585][ T12] Modules linked in: [ 183.668566][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 183.680216][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.690865][ T12] Workqueue: netns cleanup_net [ 183.695665][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 183.701813][ T12] Code: e8 e1 99 db fc 4b 83 3c 3e 00 75 19 e8 b5 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 a7 b7 83 fc 49 83 c7 08 eb c9 e8 9c b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 183.721657][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 183.727800][ T12] RAX: ffffffff8503e7c4 RBX: ffff88812ad558c0 RCX: ffff888102654c00 [ 183.735825][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811a820000 [ 183.743900][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 183.751983][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 183.760085][ T12] R13: dffffc0000000000 R14: ffff88811a820000 R15: 0000000000000000 [ 183.768160][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 183.777175][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.783781][ T12] CR2: 00007ffcef861cdf CR3: 00000000074a8000 CR4: 00000000003526b0 [ 183.791828][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 183.799886][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 183.807954][ T12] Call Trace: [ 183.811253][ T12] [ 183.814185][ T12] cleanup_net+0x6bd/0xc90 [ 183.818670][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 183.823638][ T12] ? kick_pool+0xb9/0x550 [ 183.828035][ T12] process_scheduled_works+0x7d4/0x1020 [ 183.833619][ T12] worker_thread+0xc70/0x10b0 [ 183.838426][ T12] kthread+0x2c9/0x370 [ 183.842524][ T12] ? __cfi_worker_thread+0x10/0x10 [ 183.847746][ T12] ? __cfi_kthread+0x10/0x10 [ 183.852366][ T12] ret_from_fork+0x64/0xa0 [ 183.856852][ T12] ? __cfi_kthread+0x10/0x10 [ 183.861468][ T12] ret_from_fork_asm+0x1a/0x30 [ 183.866319][ T12] [ 183.869354][ T12] ---[ end trace 0000000000000000 ]--- [ 183.875037][ T12] ------------[ cut here ]------------ [ 183.880561][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 183.890693][ T12] Modules linked in: [ 183.894590][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 183.907700][ T12] Tainted: [W]=WARN [ 183.911517][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.921651][ T12] Workqueue: netns cleanup_net [ 183.926460][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 183.932547][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 52 b7 83 fc 49 83 c7 08 eb c5 e8 47 b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 b7 83 fc 5b 41 5c 41 5e 41 [ 183.952214][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 183.958342][ T12] RAX: ffffffff8503e819 RBX: ffff88811a820800 RCX: ffff888102654c00 [ 183.966401][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811a820808 [ 183.974398][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 183.982433][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 183.990453][ T12] R13: dffffc0000000000 R14: ffff88811a820000 R15: 0000000000000008 [ 183.998495][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 184.007488][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.014078][ T12] CR2: 00007ffcef861cdf CR3: 00000000074a8000 CR4: 00000000003526b0 [ 184.022119][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 184.030176][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 184.038309][ T12] Call Trace: [ 184.041609][ T12] [ 184.044547][ T12] cleanup_net+0x6bd/0xc90 [ 184.049052][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 184.054027][ T12] ? kick_pool+0xb9/0x550 [ 184.058447][ T12] process_scheduled_works+0x7d4/0x1020 [ 184.064035][ T12] worker_thread+0xc70/0x10b0 [ 184.068796][ T12] kthread+0x2c9/0x370 [ 184.072900][ T12] ? __cfi_worker_thread+0x10/0x10 [ 184.078092][ T12] ? __cfi_kthread+0x10/0x10 [ 184.082743][ T12] ret_from_fork+0x64/0xa0 [ 184.087447][ T12] ? __cfi_kthread+0x10/0x10 [ 184.092114][ T12] ret_from_fork_asm+0x1a/0x30 [ 184.096995][ T12] [ 184.100037][ T12] ---[ end trace 0000000000000000 ]--- [ 184.109970][ T12] ------------[ cut here ]------------ [ 184.115466][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 184.125038][ T12] Modules linked in: [ 184.129054][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 c4f231820317ff22bb61fe038e0df9024df7047c [ 184.142184][ T12] Tainted: [W]=WARN [ 184.146418][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.156657][ T12] Workqueue: netns cleanup_net [ 184.161470][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 184.167108][ T12] Code: 3c 20 00 74 08 48 89 df e8 8f 63 f6 fc 48 8b 3b e8 27 9e e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 c3 b7 00 cc e8 52 81 9e fc <0f> 0b e9 b0 fd ff ff e8 46 81 9e fc 0f 0b e9 18 fe ff ff e8 3a 81 [ 184.186823][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 184.192923][ T12] RAX: ffffffff84e91e0e RBX: ffff88812ad558c0 RCX: ffff888102654c00 [ 184.200964][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888102654c00 [ 184.209113][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 184.217272][ T12] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: 1ffffffff0fa6870 [ 184.225280][ T12] R13: dffffc0000000000 R14: ffff88812ad564c0 R15: dffffc0000000000 [ 184.233360][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 184.242419][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.249096][ T12] CR2: 00007ffcef861cdf CR3: 00000000074a8000 CR4: 00000000003526b0 [ 184.257173][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 184.265167][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 184.273201][ T12] Call Trace: [ 184.276541][ T12] [ 184.279488][ T12] xfrm_net_exit+0x31/0x80 [ 184.283921][ T12] cleanup_net+0x6bd/0xc90 [ 184.288473][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 184.293455][ T12] ? kick_pool+0xb9/0x550 [ 184.297879][ T12] process_scheduled_works+0x7d4/0x1020 [ 184.303476][ T12] worker_thread+0xc70/0x10b0 [ 184.308447][ T12] kthread+0x2c9/0x370 [ 184.312544][ T12] ? __cfi_worker_thread+0x10/0x10 [ 184.317739][ T12] ? __cfi_kthread+0x10/0x10 [ 184.322351][ T12] ret_from_fork+0x64/0xa0 [ 184.326878][ T12] ? __cfi_kthread+0x10/0x10 [ 184.331549][ T12] ret_from_fork_asm+0x1a/0x30 [ 184.336389][ T12] [ 184.339428][ T12] ---[ end trace 0000000000000000 ]---