last executing test programs: 7.802768593s ago: executing program 2 (id=1614): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000000)='./file1/file0\x00', 0x2) pselect6(0x40, &(0x7f0000000040)={0x7ffffffc, 0x3, 0x3, 0x2, 0x4, 0x7, 0x8, 0x5}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001de000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000380)="2e3e0f0866b9990a00000f32baf80c66b828c3de8466efbafc0cb86958effa660ff9e4660fc5dbb80f01d10f01c5f0831ac6363e0f0011", 0x37}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x25}}}}}) r10 = syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) syz_usb_control_io$printer(r10, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x31, {0x31, 0x15, "bf11b80392d44036f9a6fdb5d0fdbf1407ad10b565879e0fa05391270a25788edb4d4485cab6d6a397ea5588e5d66e"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000280)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="200d2b000000957c882bb4f55ba15521ba3af1ddfe1cf93644c0dffa210bddedf2f198a6e17fef3f39132a7100e9617599ca2015d0458fb94518ed72ede1792b7b7ec93bb6ae3c4cf0109dd33931672c1f5cd79db9a1d5c472736d85426a20c8d9eef232065c379f1c0a0b9b0a34"], &(0x7f0000000100)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000180)={0x20, 0x0, 0x3c, {0x3a, "1d38b229135394b5649ab86e862ceec7d4aaad4cffb5bcf11d8d7f465244bd59826a2c34caa1a9bfb7149fed95cc0f328388b02db26fa1548224"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000240)={0x20, 0x0, 0x1, 0x1}}) 7.203797368s ago: executing program 2 (id=1618): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000001400)=0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000300)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x5) r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x800002) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000480)={0x1f, 0x81, @any, 0x0, 0x1}, 0xe) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000001400)=0xe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r4, &(0x7f0000000300)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x5) (async) syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x800002) (async) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r7, &(0x7f0000000480)={0x1f, 0x81, @any, 0x0, 0x1}, 0xe) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) 7.094142964s ago: executing program 2 (id=1621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) r3 = syz_open_dev$MSR(0x0, 0xfffffffffffffffb, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000100)=[0x8, 0x5, 0x3d21, 0x25e, 0xf1, 0x5, 0x3, 0x6]) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.073969015s ago: executing program 2 (id=1623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800101, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000680), 0x2010800, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4e23, 0xfffffffc, @local, 0x20000009}, 0x1c) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000500)='./file0/../file0\x00', 0x8) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) 7.046926917s ago: executing program 2 (id=1624): r0 = gettid() r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) capget(&(0x7f0000002040)={0x19980330}, &(0x7f0000002080)={0xf2, 0x4, 0x8, 0x80, 0x9, 0x80}) capget(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000140)={0x2, 0x10, 0x8000, 0x7, 0x9, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c74656275673d3078303030301030303030303030303031302c00"]) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x4044001}, 0x20004000) syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0xce0f, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x8, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x0, 0x7ffffffd, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x3e, 0x20008f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f35, 0x8, 0x1, 0x5, 0x10002, 0x20009, 0x4, 0x9, 0x8, 0x8, 0x4, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d0, 0x9, 0x5, 0x7ffc, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x7, 0x7, 0x38, 0x6, 0x200, 0x80, 0x2, 0xcc52, 0x6, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x2006, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xedd, 0x0, 0xffff, 0x3, 0x7f, 0xfffffff9, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0x200005, 0x9, 0x800001, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) mmap(&(0x7f000071f000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x6eafe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r10, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x6, 0x2, 0x0, 0x0, @irqchip={0x7fffffff, 0x8d80}}]}) ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000000)={0x6, 0x6}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6.862285888s ago: executing program 2 (id=1627): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1f, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @mcast2, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 6.81657847s ago: executing program 32 (id=1627): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1f, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @mcast2, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 5.11382937s ago: executing program 3 (id=1637): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}]}, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f000047c000/0x4000)=nil) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f00000000c0)={@remote, @empty, 0xffffffffffffffff, "b877f11c1a2855b63544059bdd1f7b14e61c0dc3360c7ca1f02081e3ffd2e11e", 0x63108000, 0x0, 0x0, 0xfff}, 0x3c) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 4.882993224s ago: executing program 3 (id=1638): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x6f, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xbf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xb5, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3a8c8d"}, {0x5, 0x24, 0x0, 0x5e}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb, 0x6, 0x7e}, [@obex={0x5, 0x24, 0x15, 0x26}, @obex={0x5, 0x24, 0x15, 0x62}, @mdlm={0x15, 0x24, 0x12, 0x53ce}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x8, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xb3, 0xfa, 0xe0, 0x20, 0xa}, 0x43, &(0x7f0000000c00)={0x5, 0xf, 0x43, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x11, 0x4, 0x348, 0xf, 0x9, [0x0, 0x0, 0x0, 0xa030]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc8, 0x2, 0x8, 0xbc6b, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0xfb, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0xe, 0x5}]}, 0x7, [{0xec, &(0x7f0000000c80)=@string={0xec, 0x3, "ec3769fcd0dfe86aefd70a5121009ca1224db3f810d68bf8f471266b8be1283cd95fd96a861a2e9e66a66a053f5d2d747d7a3508368d541ebac745391162bf732d0efb446f688ebf3d4930b7602f211225f2ad2c47e265e5d3c76dfd8cc324e24ad9d55d39122ca07125c3e011f4445575982720e3c29ad63e6ebbcf2dfeb8c9e957f8a550d974dc634c5b82903cb9487e5109469ce8eaa890e6b805d458bf90cc3ff50ec9f93483d9d6853a8438f1332900f42e8be70cfb6b533797736c4d3827884ab2cb3c34135a7a5e24f15a57b915495660e2d56bfaf9e9fe68a5c540e6e4d9697400d90a4e6dde"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x240a}}, {0xf, &(0x7f0000000dc0)=@string={0xf, 0x3, "2bfdb69663a55e671607d95b63"}}, {0xef, &(0x7f0000000e00)=@string={0xef, 0x3, "161aed98a416954b848640992ba43dd7484a7f791361fdd53f3eda4fde99efc2da019bb69cd1fdfdffb4c46e002dc0a6bc251487754a8d73d9c335c31238122111df2e67455cddfe15df552db9de35b657ce05417d46062c96f437a3fb63bd31c0cf517ddf50e2d746bca04dd0a6b016cb0954a3f7da2e2cb27d26fb0566f87739f9ace87c554140f3012f8ddb026427eef31b1c6b580aca09e9c58b40340f35b4852b62de448b0880020172eac37256a3a6c7b0a04e2b30ab559ccfe6862690c0de771525c9809e145dc838502bfae3e20808faf0de4b37091307abff3ad7fe1f49d72432b89cb2112b66aa6c"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x22, @lang_id={0x0, 0x3, 0x403}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "500730459072c36bbadcc06d144130a8"}}, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 4.285670068s ago: executing program 4 (id=1643): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xe0, 0xfb, 0x40, 0xfb8, 0xfac3, 0x9339, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x28, 0x0, 0x8, 0x5}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000100)=0xffff, 0x4) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="c1", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xbd, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x8, 0x60, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x2, 0x5, [0x5, 0xa, 0x1, 0x7, 0x8]}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x44, 0xd9, "8e5b162e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf5, 0x2, 0x3, 0x1, "d58b", "579f73"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xd, 0x1}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7f, 0x2, "ce44f4", "eb5962"}, @as_header={0x7, 0x24, 0x1, 0x62, 0x5, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9e, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x50, 0x9, {0x7, 0x25, 0x1, 0x80, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf, 0x2, 0x9, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1, 0xd, 0xa, 0x40, 0xf6}, 0x110, &(0x7f0000000400)={0x5, 0xf, 0x110, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x6, 0x1, 0x1, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x1, 0x1, 0x3}, @generic={0x21, 0x10, 0x2, "285091a0b6fb23bb014b9cc40cd800e4888065b1bc52aedeff9bb3f9f694"}, @generic={0xce, 0x10, 0x4, "7a3a48911954e9d82f31a84173517af1ec8455552a1e6ae73afaf5de19756494260a20e855815bb341ac88141ff199c23c81d51016016a70a84fe75d956ac5f29a2e19bba490b078b9a1a5c49d126928ccea2887f8983092cf26952d9c4e96735ef493716d581b433a8b2174a8407e538d0819c0769fcc53dcc0826ee7adf56c7e3297aaf3a9a74cefb81eb8b0ebc4904bbf336caacfc13776b5f591dc34987086bdef6f5067e776a9934a9d79912cff5b980f281567a3e9e52ae10be54b0e579bdb541ea2714d4494bd1c"}]}, 0x3, [{0x8e, &(0x7f0000000240)=@string={0x8e, 0x3, "c7b07b49eeec676cd223df19c637e3e8a46f346b938235df4b8bda200c8328a6bbb4dfdf92a027bbf914f58b6235c9cbdb8d761182645ed16b948dd8c81acf5bf14abb7473e87018fb26e1147db5efc60c172be15b2bea3fda6db96a7e8372683523c44b0bbb827004bbba21126be82b08f4bb7c1991538ee733b37b6087f8af43ae7fb29e607fbdae824e7c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x420}}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0x92, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x1fb}}, {{{0x9, 0x5, 0x81, 0x3, 0x1f7, 0x10, 0x7, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x5, 0x5, 0x8, 0x40}, 0xdc, &(0x7f0000000540)={0x5, 0xf, 0xdc, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0xb1, 0xf, 0xb70, [0xff3f, 0xc000, 0xc0, 0xc0c0]}, @generic={0xbb, 0x10, 0x3, "7f9057451033cca4388d93339c2e14af58222cb2c2413f9d9529436369f23b6fc039fcbca24e4223c656b4ff10b9f5bb052bd7b3d0661c709a5ef20520ed1dff045336e64687bbb88fd2538e9cea67bdac3bc2a255f27db3493cbc0c8f8bd746037354e74165679081986a34e2adf52de7362655ee40bdcd46336d76453dcb0797bb8105eb7ca9184264d5611ac9f888960f15aed666961fcba36fee3441be03edf75389c0a5be2252da8e2e61896a5743a3c15c2424db31"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x55, &(0x7f0000000640)=@string={0x55, 0x3, "4e20905dfd600a7889563aa3139d623443dfe0ea9547fec24e8ab59abfd2a392f944a0609e226df5d6472659a8fc1dd62e9b3962fe459e25ba2a1e48f9ee5209805919fbb10d0203814da40425cf93a41a3c89"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xe0, 0xfb, 0x40, 0xfb8, 0xfac3, 0x9339, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x28, 0x0, 0x8, 0x5}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000100)=0xffff, 0x4) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="c1", 0x1}], 0x1) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xbd, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x8, 0x60, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x2, 0x5, [0x5, 0xa, 0x1, 0x7, 0x8]}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x44, 0xd9, "8e5b162e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf5, 0x2, 0x3, 0x1, "d58b", "579f73"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xd, 0x1}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7f, 0x2, "ce44f4", "eb5962"}, @as_header={0x7, 0x24, 0x1, 0x62, 0x5, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9e, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x50, 0x9, {0x7, 0x25, 0x1, 0x80, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf, 0x2, 0x9, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1, 0xd, 0xa, 0x40, 0xf6}, 0x110, &(0x7f0000000400)={0x5, 0xf, 0x110, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xb, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x6, 0x1, 0x1, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x1, 0x1, 0x3}, @generic={0x21, 0x10, 0x2, "285091a0b6fb23bb014b9cc40cd800e4888065b1bc52aedeff9bb3f9f694"}, @generic={0xce, 0x10, 0x4, "7a3a48911954e9d82f31a84173517af1ec8455552a1e6ae73afaf5de19756494260a20e855815bb341ac88141ff199c23c81d51016016a70a84fe75d956ac5f29a2e19bba490b078b9a1a5c49d126928ccea2887f8983092cf26952d9c4e96735ef493716d581b433a8b2174a8407e538d0819c0769fcc53dcc0826ee7adf56c7e3297aaf3a9a74cefb81eb8b0ebc4904bbf336caacfc13776b5f591dc34987086bdef6f5067e776a9934a9d79912cff5b980f281567a3e9e52ae10be54b0e579bdb541ea2714d4494bd1c"}]}, 0x3, [{0x8e, &(0x7f0000000240)=@string={0x8e, 0x3, "c7b07b49eeec676cd223df19c637e3e8a46f346b938235df4b8bda200c8328a6bbb4dfdf92a027bbf914f58b6235c9cbdb8d761182645ed16b948dd8c81acf5bf14abb7473e87018fb26e1147db5efc60c172be15b2bea3fda6db96a7e8372683523c44b0bbb827004bbba21126be82b08f4bb7c1991538ee733b37b6087f8af43ae7fb29e607fbdae824e7c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x420}}]}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0x92, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x1fb}}, {{{0x9, 0x5, 0x81, 0x3, 0x1f7, 0x10, 0x7, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x5, 0x5, 0x8, 0x40}, 0xdc, &(0x7f0000000540)={0x5, 0xf, 0xdc, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0xb1, 0xf, 0xb70, [0xff3f, 0xc000, 0xc0, 0xc0c0]}, @generic={0xbb, 0x10, 0x3, "7f9057451033cca4388d93339c2e14af58222cb2c2413f9d9529436369f23b6fc039fcbca24e4223c656b4ff10b9f5bb052bd7b3d0661c709a5ef20520ed1dff045336e64687bbb88fd2538e9cea67bdac3bc2a255f27db3493cbc0c8f8bd746037354e74165679081986a34e2adf52de7362655ee40bdcd46336d76453dcb0797bb8105eb7ca9184264d5611ac9f888960f15aed666961fcba36fee3441be03edf75389c0a5be2252da8e2e61896a5743a3c15c2424db31"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x55, &(0x7f0000000640)=@string={0x55, 0x3, "4e20905dfd600a7889563aa3139d623443dfe0ea9547fec24e8ab59abfd2a392f944a0609e226df5d6472659a8fc1dd62e9b3962fe459e25ba2a1e48f9ee5209805919fbb10d0203814da40425cf93a41a3c89"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x425}}]}) (async) 3.510801474s ago: executing program 4 (id=1646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x444, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x42c, 0x11d, 0x0, 0x1, [{0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x1, 0xc, 0x30, 0x60, 0x7b, 0x36, 0x30, 0x24, 0x18, 0x6, 0x36, 0x60, 0x48, 0x60, 0x60, 0x6c, 0x1b, 0xb, 0x30, 0x4, 0x9, 0x4, 0x18, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x3}, {0x7}, {0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x3}, {0x4, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x16, 0x26, 0xc, 0x24, 0x3, 0x24, 0x16, 0xb, 0x9, 0x9, 0x1, 0x6c, 0x1, 0x4, 0x5, 0x6, 0x6c]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x2, 0x7, 0x6, 0x1, 0x6c8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0xb, 0x6, 0x33, 0x24, 0x4, 0x3, 0xc, 0x6, 0x12, 0x5a, 0x30, 0x36, 0x24, 0x4, 0x9, 0x18, 0x16, 0x2, 0x35, 0x4, 0x16, 0xb, 0x4f, 0x4, 0x18, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x81, 0x21, 0x7, 0x9, 0x5, 0xfff, 0x3]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x9, 0x1, 0x0, 0x2, 0xe, 0xc]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xa, 0x7, 0xf801, 0x9, 0x81, 0xfa3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x2, 0x4000, 0x8084, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb40e, 0x3, 0xfffd, 0x3, 0xf, 0x7, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x3, 0x48, 0x3, 0x4, 0x6c, 0x12, 0x16, 0x5, 0x3, 0x60, 0x18, 0x18, 0x1b, 0x60, 0x16, 0x3, 0x28, 0x24, 0x3, 0xb, 0xb, 0x16, 0xc, 0x1b, 0x32, 0x4, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x24, 0x3, 0x6, 0xc, 0x1, 0x3, 0x60]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0xb, 0x12, 0x60, 0x6c, 0x5, 0x16, 0x1b, 0x60, 0x3, 0x9, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd31d, 0x0, 0x7, 0x1, 0x4, 0x4, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x48, 0x6f, 0x32, 0x3, 0x24, 0x30, 0x18, 0x30, 0x6, 0x36, 0x6c, 0x30, 0xc, 0x36, 0x1b, 0x18, 0x16, 0x12, 0x48, 0x48, 0x36, 0x12, 0x1b, 0x5, 0x3, 0x7e, 0x36, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x3}, {0x4, 0x3}, {0x3, 0xa}, {0x6, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x3, 0x12}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x2}, {0x3, 0x6}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x2}, {0x4, 0x3}, {0x0, 0x3}, {}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0x7}, {0x5}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x9}, {0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0xa}, {0x3, 0x9}, {0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x5}, {0x5, 0x7}, {0x0, 0x9}, {}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x5}, {0x5, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x1}, {0x7, 0x2}, {0x1, 0x1}, {0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x0, 0x4, 0x1, 0xf001, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xab, 0xc, 0x7, 0x80, 0x7, 0x300, 0x9, 0x7]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x5}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x3}, {0x4}, {0x3}, {0x4, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x8}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccc, 0x351, 0x1, 0x101, 0x138, 0xf800, 0xd, 0x7]}}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x4}, {}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x19}, {0x1, 0x1}, {0x3, 0x2}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x3, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x1}, {0x3, 0x2}, {0x7, 0x7}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x2}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x1b, 0x60, 0x2, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x10, 0xb5, 0x7f, 0x78, 0x7d, 0xbed]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {0x7}, {0x4}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x1, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5055, 0x7ff, 0x18, 0x7, 0xa26f, 0x2000, 0x4, 0x3]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x9, 0x12, 0x12, 0x9, 0x1b, 0x2, 0x5, 0x9, 0x16, 0x48, 0xb, 0x36, 0x6, 0x24, 0x6c, 0x6, 0x4, 0x18, 0x48, 0x3, 0xc, 0x36, 0x3, 0x5, 0xc, 0x1, 0x2, 0xc, 0x12, 0x48, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x444}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) 3.456102927s ago: executing program 4 (id=1649): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x16, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x209, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f], [0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc17, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x0, 0x9, 0x0, 0x3], [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56058db5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0xd, 0x6, 0xbd}) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) close(0x3) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b8e0102030109021b0001000000b3090400000101293000090509"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x800000000d, 0x2, 0x2, 0x2}, 0x0, &(0x7f0000000240)={0x7c, 0x2, 0x5, 0x2844bb54, 0xfec, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3) 3.001273034s ago: executing program 0 (id=1657): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)="2c0f", 0x2, 0x4000, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="80", 0x1, 0x40801, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000580)="1c11", 0x2, 0x8800000}]) io_getevents(r2, 0x3, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)={0x0, 0x3938700}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) 2.880628571s ago: executing program 0 (id=1658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8971, &(0x7f0000000440)={'sit0\x00', 0x0}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty}, 0x1c) (async) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) (async, rerun: 32) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r0, 0x0}]) (rerun: 32) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3, 0xf2, 0x3, 0x6, 0xcf4, 0x1, 0x9, 'syz0\x00'}) 2.830888134s ago: executing program 0 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003e00)={0x2000000, [{0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x672, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3cc9, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7f1b, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="0fc71b47ab65430f30476a046426660fe3e30f20d835200000000f22d8b8010000000f01d93e66430f3880860070000066b8d0008ed8c4417ee6a3c2000000", 0x3f}], 0x1, 0x60, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x7}}}}}]}}]}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)) 1.793506114s ago: executing program 1 (id=1664): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) (async, rerun: 32) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x82, &(0x7f00000000c0)={0x1f, 0x7, 0x7}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64) r1 = userfaultfd(0x1) (rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0x11000, 0x1}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000001c0)=ANY=[]) 1.70298291s ago: executing program 1 (id=1665): r0 = socket(0x10, 0x80ff7, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./bus\x00', 0x480600, 0x82) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=any']) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/122, 0x7a}, {&(0x7f0000000980)=""/64, 0x40}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/6, 0x6}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x0, &(0x7f0000003700)) 1.70065021s ago: executing program 1 (id=1666): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setreuid(0x0, 0xee01) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000600)="c1130389", 0x4}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffd}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xccffffffffffffff, 0x2, 0x3}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0xc}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x59, 0x32, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) 1.595766756s ago: executing program 1 (id=1667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r6, 0x701, 0x70bd25, 0x25dfdbfd, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4eecfdac}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x2004c050) 1.565812278s ago: executing program 1 (id=1668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="660fc7b53500c0fe66ba430066b8792766eff00fba6c8600040f01757fc4c1fd70f90066baf80cb81038b987ef66bafc0cedc4e3890f38000f017bfc640f01c266baf80cb880f9bd87ef66bafc0c66b8005066ef", 0x54}], 0x1, 0x14, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg$unix(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xfec00000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.463045134s ago: executing program 1 (id=1669): r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000180)={0x20, 0x16, 0x6, "633182864a4f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c0c1189640bbb20792f2aa90fc5a99b2104e03539140f59adff60d3cb46331e00f1fb5644d2befcebfdbbc844d1b889d85202dc520b717cf8866beb"], 0xa) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000700)={0x20, 0x9, 0x1, "a0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.460117624s ago: executing program 3 (id=1670): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc00020000", 0x45) writev(0xffffffffffffffff, &(0x7f0000000f00)=[{&(0x7f0000000000)="c80500002000", 0x6}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x20008094) r3 = open(&(0x7f0000000080)='./file0\x00', 0x109000, 0x1bc) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000100)) 1.422878106s ago: executing program 3 (id=1671): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) r3 = syz_open_dev$MSR(0x0, 0xfffffffffffffffb, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000100)=[0x8, 0x5, 0x3d21, 0x25e, 0xf1, 0x5, 0x3, 0x6]) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.422449176s ago: executing program 3 (id=1672): syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109025f0003017828020904000000010100000224"], &(0x7f0000000a80)={0x0, 0x0, 0x53, 0x0, 0x1, [{0x0, 0x0}]}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha256-arm64\x00'}}, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffff) syz_usb_connect$cdc_ecm(0x0, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0xf, {{0x6, 0x24, 0x6, 0x0, 0x0, "13"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe, 0x5, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x7ff}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0x80da}, @mdlm={0x15, 0x24, 0x12, 0x8001}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xef}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x7, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x80, 0x8, 0xf}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x81, 0x5, 0x0, 0x48, 0x6}, 0x87, &(0x7f0000000440)=ANY=[@ANYBLOB="050f87000182100181f58bc7f121fc7819f1a87cde92211712832a1867f170ff278adaa4ebade7dc043488ef70372387563bb1250e72c9ea9ca03a0a795258f53417d455fd405b8ccdab3f78e3d70fda0ef3f5cbab106ecaefb05c279582dab2af0dfb52fb9e77c2f8d35d38de817cad4754e475e93c4445e710b8150fa5168061cc88ec2dfb6ea7597403fec98b71f89507b232e8e0b947b585654e83ab13ee3ec956"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x402}}, {0x47, &(0x7f0000000200)=@string={0x47, 0x3, "65b2b6935b5d22233762bc4cc642568a2e476f603350712fdb42bb64ee0e85d6961a2d1c2a633973814bbbc32eea57c77b76799024f1c705685e9265d28d819196af1c8e1e"}}, {0xd3, &(0x7f0000000340)=@string={0xd3, 0x3, "0244f660a23e74d328e2e928deea62cdbffae7d974233d0588a95212dbb88c52db49f9ebea287386b1d3d06d3232aa24fbbcb7a242f4134a2fa503a28efffdbf33794739a330c02e15a3e9a3769d2db1ae1968afa48542788655e6f69ba556ef8f220049bc30eb782587d7f727b871f5f4527a40b5958ee27fd404c3ed15c61307adebbd26e799cb4d59d4f0604999abd77f21ec09e4719da7ab9aaf224e22a2aa396b96edf464b691f33041d6eb0ab8b57c1ad5a03f813e29e6fe811f0319e2f3f0845d20355990c613191e11d64abe1f"}}]}) 1.110966194s ago: executing program 0 (id=1673): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./file1/file2\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1/file2\x00', 0x81c0, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x618fa0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, r3, &(0x7f0000000180)) sync_file_range(r1, 0x1899, 0x5528, 0x3) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030001"], 0x54}}, 0x20004010) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200)=0x101, 0x4d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x3}) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000000)={0x2, 'geneve0\x00', {0xc9f0}, 0x6}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0xab8, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f00000003c0)=0x1, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000440), r10) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000000103000000f8ffffffffff090000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010023250000000000000000eeff000c000280052b8c1e6ad8343380d1286d8ba7000100000000002e4fcf1295cb3ad174163b2cf900b1871c9ac3a9945b68aeb64cb351cc1f288856e6e4ed827c07b2190dde3cec87946eff426f3c73c6ed47dd45f96c257e9374fc7b38991f65e6304cb2bd887a462f8c2a7d2b7a47547d8091de78ed0eac6456086bba49d09ed02c8973cd7eb67c87df5667614fa268b827839b02edb84be94812a2dd97db595a71dcd0cbaf314dd073f34bf1e2daaeee0ee3934887fd1a"], 0x50}}, 0x0) 1.050598378s ago: executing program 0 (id=1674): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) r1 = fcntl$getown(r0, 0x9) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={&(0x7f0000000100)=""/153, 0x99}) 1.02027463s ago: executing program 0 (id=1675): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x2008c085) r1 = socket$inet6(0xa, 0x6, 0x80003) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000180)={0x80, {{0xa, 0x4e22, 0x7f, @empty, 0x3}}, {{0xa, 0x4e20, 0x9, @local, 0x3}}}, 0x108) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="20145aa504000000042637b3506447848b44d7199d52cd5448b2b001f46d92cb93d08894623d8564e2c021aa5c132ee645396151ca533d8b758fb84e0e8d38e6e203a6c18bf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB="59b0d2879596078af13c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="001404"], 0x0, 0x0, 0x0, 0x0}) 394.939417ms ago: executing program 4 (id=1676): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x6, 0x0, 0xffffffff, {}, {0x77359400}, {0x2}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "d9c02bb203222e9dc1440e8e36b10d8ca461634f3fd47ebdb1aa56324aa43f74fabc10fcdeb144cb4dbd88913189901c29ec5068c00a348672129a254b535770"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8010) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f0000000540)="c2", 0x1, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000380)=0x8000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000100)="fd0a", 0x2, 0x404c824, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)="cc553b196e2a18fcbaa753e012a9d8f6425866d32fd660500518dc618966c5e02bce0550ce0f96da9abd3c8b1191e3964f0bd52eb984725663d2b4563143ac1c243c0a964b3f53df0a0beb32c20216647f4ec35ed95239b51c501f2d45f2e4c4fa389d21644e654c3026d54364f022ebbcf1f39acef7bc0b15bfc8b84e45bb82379073c297820d3369474be922e3905fe22e345dc5644e8e07d05313d51b4175328e5e50e675e82ff840c9b02f4bb657c1cc4f2511c23184ffe9082f9a6db478ec8e00c4024c918859c724d88652a325c0f9", 0xd2}, {&(0x7f0000000100)="d50919f82a4a7c9f56f210d9aea4de5144451cffce0df0d8d11d0c1f0c5c66d5356c7660537ff391b1e3e9ab52574822a466e946525edf45cbe278fb", 0x3c}], 0x4}}], 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001200010026bd7002fedbdf25feffffff0b00ce00000000000000000014002e800df30682"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 106.509873ms ago: executing program 3 (id=1677): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x7, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0xfffffe00, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x1, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xf, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x10000000, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="e7076f1c72627bda5906719cf66c16909a76040a2c268093acd0177fd43542ef57147adeb96fb08ae581a7b6e83b4e980d9e5cd235b63d926ea5c4fc26129ee0d072fb68f47fddb10cf5415dbbd823c7704515e9dd2d7e6bd8bea5cce5e98b8ccba9573eaa368357daf82652993ba3cc0ec89a615bede6e4669b6b5d57640c5dd30083aa908f42d8ac86893f05789ed42f6b07", 0x93) write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x34) fcntl$lock(r5, 0x7, &(0x7f0000000200)={0x2, 0x0, 0x92b, 0x1}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r1, &(0x7f0000000980)="a9", 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xa) read(r6, &(0x7f0000001a00)=""/1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x40, r10, 0xa29, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0xc002) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r10, 0x1, 0x0, 0xfffffffc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x40}}, 0x0) process_vm_writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) 103.420444ms ago: executing program 4 (id=1678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x0, r2}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x200, 0x0) (async) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x24522716a989086f, 0x5ce9}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8001000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x738}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x101a00, 0x83) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000300)={0x18, 0x1, 0x0, {0x4}}, 0x18) (async) ioctl$KVM_GET_XCRS(r7, 0x8188aea6, &(0x7f0000000040)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) 0s ago: executing program 4 (id=1679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x6f, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xbf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xb5, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3a8c8d"}, {0x5, 0x24, 0x0, 0x5e}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb, 0x6, 0x7e}, [@obex={0x5, 0x24, 0x15, 0x26}, @obex={0x5, 0x24, 0x15, 0x62}, @mdlm={0x15, 0x24, 0x12, 0x53ce}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x8, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xb3, 0xfa, 0xe0, 0x20, 0xa}, 0x43, &(0x7f0000000c00)={0x5, 0xf, 0x43, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x11, 0x4, 0x348, 0xf, 0x9, [0x0, 0x0, 0x0, 0xa030]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc8, 0x2, 0x8, 0xbc6b, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0xfb, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0xe, 0x5}]}, 0x7, [{0xec, &(0x7f0000000c80)=@string={0xec, 0x3, "ec3769fcd0dfe86aefd70a5121009ca1224db3f810d68bf8f471266b8be1283cd95fd96a861a2e9e66a66a053f5d2d747d7a3508368d541ebac745391162bf732d0efb446f688ebf3d4930b7602f211225f2ad2c47e265e5d3c76dfd8cc324e24ad9d55d39122ca07125c3e011f4445575982720e3c29ad63e6ebbcf2dfeb8c9e957f8a550d974dc634c5b82903cb9487e5109469ce8eaa890e6b805d458bf90cc3ff50ec9f93483d9d6853a8438f1332900f42e8be70cfb6b533797736c4d3827884ab2cb3c34135a7a5e24f15a57b915495660e2d56bfaf9e9fe68a5c540e6e4d9697400d90a4e6dde"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x240a}}, {0xf, &(0x7f0000000dc0)=@string={0xf, 0x3, "2bfdb69663a55e671607d95b63"}}, {0xef, &(0x7f0000000e00)=@string={0xef, 0x3, "161aed98a416954b848640992ba43dd7484a7f791361fdd53f3eda4fde99efc2da019bb69cd1fdfdffb4c46e002dc0a6bc251487754a8d73d9c335c31238122111df2e67455cddfe15df552db9de35b657ce05417d46062c96f437a3fb63bd31c0cf517ddf50e2d746bca04dd0a6b016cb0954a3f7da2e2cb27d26fb0566f87739f9ace87c554140f3012f8ddb026427eef31b1c6b580aca09e9c58b40340f35b4852b62de448b0880020172eac37256a3a6c7b0a04e2b30ab559ccfe6862690c0de771525c9809e145dc838502bfae3e20808faf0de4b37091307abff3ad7fe1f49d72432b89cb2112b66aa6c"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x22, @lang_id={0x0, 0x3, 0x403}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x12, @string={0x12, 0x3, "500730459072c36bbadcc06d144130a8"}}, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) kernel console output (not intermixed with test programs): ="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.515784][ T3252] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.535062][ T36] audit: type=1400 audit(1769233061.618:6082): avc: denied { setattr } for pid=3249 comm="syz.3.1028" name="HIDP" dev="sockfs" ino=21073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.736357][ T3260] kvm: pic: non byte read [ 132.740976][ T3260] kvm: pic: non byte read [ 132.932194][ T3281] input: syz0 as /devices/virtual/input/input25 [ 133.019764][ T3289] veth0_to_team: entered promiscuous mode [ 133.041774][ T3293] fuse: Bad value for 'group_id' [ 133.046762][ T3293] fuse: Bad value for 'group_id' [ 133.154998][ T3306] netlink: 'syz.3.1048': attribute type 4 has an invalid length. [ 133.179974][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.190374][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.439373][ T458] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 133.591125][ T458] usb 4-1: config 251 has an invalid interface number: 120 but max is 1 [ 133.599645][ T458] usb 4-1: config 251 has an invalid descriptor of length 13, skipping remainder of the config [ 133.610146][ T458] usb 4-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 133.619429][ T458] usb 4-1: config 251 has no interface number 0 [ 133.625849][ T458] usb 4-1: config 251 interface 120 has no altsetting 0 [ 133.634146][ T458] usb 4-1: New USB device found, idVendor=19d2, idProduct=1089, bcdDevice=9b.3a [ 133.643492][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.651569][ T458] usb 4-1: Product: syz [ 133.655794][ T458] usb 4-1: Manufacturer: syz [ 133.660436][ T458] usb 4-1: SerialNumber: syz [ 133.735905][ T3319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.744766][ T3319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.770132][ T457] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 133.870521][ T458] usb 4-1: USB disconnect, device number 70 [ 133.920440][ T457] usb 2-1: Using ep0 maxpacket: 32 [ 133.927332][ T457] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 133.935526][ T457] usb 2-1: config 0 has no interface number 0 [ 133.943440][ T457] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.952788][ T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.960911][ T457] usb 2-1: Product: syz [ 133.965123][ T457] usb 2-1: Manufacturer: syz [ 133.969717][ T457] usb 2-1: SerialNumber: syz [ 133.975363][ T457] usb 2-1: config 0 descriptor?? [ 133.982350][ T457] smsc95xx v2.0.0 [ 134.210271][ T3323] overlayfs: missing 'lowerdir' [ 134.297702][ T3334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.306437][ T3334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.383494][ T457] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 134.394309][ T457] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.692047][ T10] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 134.822341][ T10] usb 4-1: device descriptor read/64, error -71 [ 134.835049][ T3340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.843738][ T3340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.853976][ T3340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.862645][ T3340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.010446][ T457] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 135.021458][ T457] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 135.031311][ T457] usb 2-1: USB disconnect, device number 61 [ 135.062767][ T10] usb 4-1: device descriptor read/64, error -71 [ 135.303233][ T10] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 135.382956][ T3343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.391500][ T3343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.433475][ T10] usb 4-1: device descriptor read/64, error -71 [ 135.530623][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 135.618161][ T3354] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 135.684034][ T10] usb 4-1: device descriptor read/64, error -71 [ 135.802397][ T10] usb usb4-port1: attempt power cycle [ 135.889033][ T3373] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1076'. [ 135.962319][ T3377] kvm: MWAIT instruction emulated as NOP! [ 136.104816][ T457] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 136.154845][ T10] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 136.166274][ T3384] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1081'. [ 136.176665][ T10] usb 4-1: device descriptor read/8, error -71 [ 136.255007][ T457] usb 2-1: Using ep0 maxpacket: 16 [ 136.276027][ T457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.288192][ T457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.305647][ T457] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 136.315394][ T457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.323892][ T10] usb 4-1: device descriptor read/8, error -71 [ 136.336518][ T457] usb 2-1: config 0 descriptor?? [ 136.346374][ T3393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.354934][ T3393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.565641][ T10] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 136.586754][ T10] usb 4-1: device descriptor read/8, error -71 [ 136.716874][ T10] usb 4-1: device descriptor read/8, error -71 [ 136.746450][ T457] usbhid 2-1:0.0: can't add hid device: -71 [ 136.752437][ T457] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.761439][ T457] usb 2-1: USB disconnect, device number 62 [ 136.826436][ T10] usb usb4-port1: unable to enumerate USB device [ 136.992922][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.002413][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.011925][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.020654][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.312430][ T36] kauditd_printk_skb: 468 callbacks suppressed [ 137.312447][ T36] audit: type=1400 audit(1769233066.548:6551): avc: denied { read write } for pid=3420 comm="syz.1.1093" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.342099][ T36] audit: type=1400 audit(1769233066.548:6552): avc: denied { open } for pid=3420 comm="syz.1.1093" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.345822][ T3428] overlayfs: failed to resolve './file0': -2 [ 137.366425][ T36] audit: type=1400 audit(1769233066.558:6553): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.395817][ T36] audit: type=1400 audit(1769233066.558:6554): avc: denied { open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.420269][ T36] audit: type=1400 audit(1769233066.558:6555): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.445975][ T36] audit: type=1400 audit(1769233066.568:6556): avc: denied { create } for pid=3425 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.465939][ T36] audit: type=1400 audit(1769233066.578:6557): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.486104][ T3430] devtmpfs: Unknown parameter 'fuse' [ 137.490608][ T36] audit: type=1400 audit(1769233066.578:6558): avc: denied { open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.496502][ T3431] devtmpfs: Unknown parameter 'fuse' [ 137.519939][ T36] audit: type=1400 audit(1769233066.578:6559): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.550228][ T36] audit: type=1400 audit(1769233066.578:6560): avc: denied { mounton } for pid=3427 comm="syz.1.1095" path="/208/bus" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 137.639984][ T3440] cgroup: Setting release_agent not allowed [ 137.651757][ T457] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 137.749647][ T3449] 9pnet_fd: Insufficient options for proto=fd [ 137.762352][ T3449] overlayfs: missing 'lowerdir' [ 137.770450][ T3449] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1102'. [ 137.780643][ T3449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.819478][ T457] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 137.832200][ T457] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.843113][ T457] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.866866][ T457] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 137.877921][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 137.889379][ T457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.902587][ T3452] netlink: 'syz.2.1103': attribute type 4 has an invalid length. [ 137.903755][ T457] usb 2-1: config 0 descriptor?? [ 137.917901][ T3452] netlink: 'syz.2.1103': attribute type 27 has an invalid length. [ 137.925754][ T3452] netlink: 3609 bytes leftover after parsing attributes in process `syz.2.1103'. [ 137.928472][ T457] usb-storage 2-1:0.0: USB Mass Storage device detected [ 137.967674][ T457] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 138.000433][ T3454] netlink: 'syz.2.1104': attribute type 4 has an invalid length. [ 138.049839][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.053477][ T3459] incfs_lookup_dentry err:-13 [ 138.061126][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.069003][ T3459] netlink: 'syz.2.1105': attribute type 25 has an invalid length. [ 138.075698][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 138.092970][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.103547][ T10] usb 4-1: config 0 descriptor?? [ 138.133469][ T3466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.142058][ T3466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.155389][ T3466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 138.228291][ T3470] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1108'. [ 138.238067][ T3470] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1108'. [ 138.247035][ T3470] 0ªî{X¹¦: renamed from gretap0 [ 138.252915][ T3470] 0ªî{X¹¦: left promiscuous mode [ 138.258236][ T3470] 0ªî{X¹¦: entered allmulticast mode [ 138.264730][ T3470] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 138.512447][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.519573][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.526641][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.533677][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.540710][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.547758][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.554761][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 138.563266][ T10] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 138.629685][ T10] cp2112 0003:10C4:EA90.0019: error requesting version [ 138.637450][ T10] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -32 [ 138.646510][ T65] usb 2-1: USB disconnect, device number 63 [ 138.685683][ T3486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 139.029708][ T65] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 139.181004][ T65] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 139.189174][ T65] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 139.199609][ T65] usb 2-1: config 0 has no interface number 0 [ 139.207283][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 139.216975][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.225101][ T65] usb 2-1: Product: syz [ 139.229323][ T65] usb 2-1: Manufacturer: syz [ 139.233957][ T65] usb 2-1: SerialNumber: syz [ 139.239544][ T65] usb 2-1: config 0 descriptor?? [ 139.427366][ T457] usb 4-1: USB disconnect, device number 75 [ 139.450880][ T3520] overlay: Unknown parameter 'subj_role' [ 139.613255][ T3539] overlayfs: failed to clone lowerpath [ 139.658208][ T3545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1128'. [ 139.706537][ T3550] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 139.706894][ T65] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 139.721101][ T65] usb 2-1: No valid video chain found. [ 139.728012][ T65] usb 2-1: USB disconnect, device number 64 [ 139.810861][ T457] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 139.962338][ T457] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.972824][ T457] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.988410][ T457] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 139.997659][ T457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.005981][ T457] usb 4-1: Product: syz [ 140.010415][ T457] usb 4-1: Manufacturer: syz [ 140.015110][ T457] usb 4-1: SerialNumber: syz [ 140.017556][ T3590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.033777][ T3590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.305442][ T457] usb 4-1: USB disconnect, device number 76 [ 141.072803][ T457] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 141.233033][ T457] usb 4-1: Using ep0 maxpacket: 32 [ 141.265137][ T457] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 141.273386][ T457] usb 4-1: can't read configurations, error -61 [ 141.403249][ T457] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 141.563425][ T457] usb 4-1: Using ep0 maxpacket: 32 [ 141.585679][ T457] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 141.593910][ T457] usb 4-1: can't read configurations, error -61 [ 141.600974][ T457] usb usb4-port1: attempt power cycle [ 141.753543][ T458] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 141.973751][ T457] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 141.983760][ T458] usb 2-1: device descriptor read/64, error -71 [ 142.024441][ T457] usb 4-1: Using ep0 maxpacket: 32 [ 142.035511][ T457] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.043143][ T457] usb 4-1: can't read configurations, error -61 [ 142.194063][ T457] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 142.214454][ T457] usb 4-1: Using ep0 maxpacket: 32 [ 142.221145][ T457] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.229110][ T458] usb 2-1: device descriptor read/64, error -71 [ 142.235516][ T457] usb 4-1: can't read configurations, error -61 [ 142.242045][ T457] usb usb4-port1: unable to enumerate USB device [ 142.483573][ T458] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 142.585615][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 142.585633][ T36] audit: type=1400 audit(1769233071.810:7059): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.619895][ T458] usb 2-1: device descriptor read/64, error -71 [ 142.627992][ T3645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.637190][ T3645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.645314][ T36] audit: type=1400 audit(1769233071.840:7060): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.670895][ T36] audit: type=1400 audit(1769233071.840:7061): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.697636][ T36] audit: type=1400 audit(1769233071.850:7062): avc: denied { read write } for pid=3644 comm="syz.2.1156" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.722139][ T36] audit: type=1400 audit(1769233071.850:7063): avc: denied { read write open } for pid=3644 comm="syz.2.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.747395][ T36] audit: type=1400 audit(1769233071.850:7064): avc: denied { ioctl } for pid=3644 comm="syz.2.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.773166][ T36] audit: type=1400 audit(1769233071.920:7065): avc: denied { create } for pid=3644 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.793484][ T36] audit: type=1400 audit(1769233071.920:7066): avc: denied { connect } for pid=3644 comm="syz.2.1156" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.814488][ T36] audit: type=1400 audit(1769233071.940:7067): avc: denied { write } for pid=3644 comm="syz.2.1156" path="socket:[23300]" dev="sockfs" ino=23300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.838872][ T36] audit: type=1400 audit(1769233071.970:7068): avc: denied { ioctl } for pid=3629 comm="syz.1.1151" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.914908][ T458] usb 2-1: device descriptor read/64, error -71 [ 143.025170][ T458] usb usb2-port1: attempt power cycle [ 143.365472][ T458] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 143.386863][ T458] usb 2-1: device descriptor read/8, error -71 [ 143.516745][ T458] usb 2-1: device descriptor read/8, error -71 [ 143.755898][ T458] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 143.777031][ T458] usb 2-1: device descriptor read/8, error -71 [ 143.914377][ T458] usb 2-1: device descriptor read/8, error -71 [ 144.026550][ T458] usb usb2-port1: unable to enumerate USB device [ 144.257059][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 144.297645][ T3671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.309043][ T3671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.426625][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 144.433084][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.444467][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 144.453774][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.472254][ T10] usb 4-1: config 0 descriptor?? [ 144.533147][ T3673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3673 comm=syz.1.1165 [ 144.546369][ T3673] netlink: 1048 bytes leftover after parsing attributes in process `syz.1.1165'. [ 144.897612][ T10] input: HID 0458:5019 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5019.001A/input/input27 [ 144.929521][ T10] input: HID 0458:5019 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5019.001A/input/input28 [ 144.966897][ T10] kye 0003:0458:5019.001A: input,hiddev96,hidraw0: USB HID v2.49 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 145.101388][ T10] usb 4-1: USB disconnect, device number 81 [ 145.129516][ T3693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.139958][ T3693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.156453][ T3693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.175659][ T3693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.738778][ T3718] SELinux: security_context_str_to_sid () failed with errno=-22 [ 145.747474][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.756282][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.292176][ T3727] input: syz1 as /devices/virtual/input/input29 [ 146.328395][ T3729] overlayfs: missing 'workdir' [ 146.346720][ T3731] /dev/loop0: Can't lookup blockdev [ 146.455875][ T3735] IPv4: Oversized IP packet from 127.202.26.0 [ 146.542086][ T3753] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 146.758975][ T353] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 146.889131][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 146.899097][ T353] usb 2-1: device descriptor read/64, error -71 [ 147.028085][ T3779] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 147.039445][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 147.045859][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.061806][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 147.070996][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.087982][ T10] usb 4-1: config 0 descriptor?? [ 147.146979][ T3784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.155693][ T353] usb 2-1: device descriptor read/64, error -71 [ 147.156729][ T3784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.361481][ T3809] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 147.369846][ T3809] overlayfs: missing 'lowerdir' [ 147.377682][ T3809] 9pnet_fd: Insufficient options for proto=fd [ 147.399564][ T353] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 147.529670][ T353] usb 2-1: device descriptor read/64, error -71 [ 147.538459][ T10] wacom 0003:056A:00C5.001B: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.3-1/input0 [ 147.650287][ T36] kauditd_printk_skb: 397 callbacks suppressed [ 147.650307][ T36] audit: type=1400 audit(1769233076.875:7466): avc: denied { ioctl } for pid=3738 comm="syz.1.1190" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.750241][ T36] audit: type=1400 audit(1769233076.975:7467): avc: denied { ioctl } for pid=3738 comm="syz.1.1190" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.777334][ T36] audit: type=1400 audit(1769233076.995:7468): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.802030][ T36] audit: type=1400 audit(1769233076.995:7469): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.809997][ T353] usb 2-1: device descriptor read/64, error -71 [ 147.826393][ T36] audit: type=1400 audit(1769233076.995:7470): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.862636][ T36] audit: type=1400 audit(1769233077.005:7471): avc: denied { read append } for pid=3816 comm="syz.2.1218" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.885993][ T36] audit: type=1400 audit(1769233077.005:7472): avc: denied { open } for pid=3816 comm="syz.2.1218" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.891701][ T458] usb 4-1: USB disconnect, device number 82 [ 147.913142][ T36] audit: type=1400 audit(1769233077.005:7473): avc: denied { ioctl } for pid=3816 comm="syz.2.1218" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.939874][ T36] audit: type=1400 audit(1769233077.015:7474): avc: denied { ioctl } for pid=3816 comm="syz.2.1218" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.965600][ T36] audit: type=1400 audit(1769233077.155:7475): avc: denied { create } for pid=3821 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 147.986757][ T353] usb usb2-port1: attempt power cycle [ 148.052060][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.061226][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.070135][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.079286][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.330379][ T353] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 148.351404][ T353] usb 2-1: device descriptor read/8, error -71 [ 148.471716][ T3832] overlayfs: failed to clone upperpath [ 148.477795][ T3832] overlayfs: failed to clone upperpath [ 148.491236][ T353] usb 2-1: device descriptor read/8, error -71 [ 148.548330][ T3847] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 148.597490][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.606138][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.740720][ T353] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 148.761853][ T353] usb 2-1: device descriptor read/8, error -71 [ 148.891812][ T353] usb 2-1: device descriptor read/8, error -71 [ 149.000990][ T353] usb usb2-port1: unable to enumerate USB device [ 149.138810][ T3878] netlink: 'syz.2.1237': attribute type 4 has an invalid length. [ 149.168691][ T3881] 9pnet_fd: p9_fd_create_unix (3881): problem connecting socket: ./file0: -111 [ 149.202604][ T3886] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1240'. [ 149.756950][ T3896] cgroup: fork rejected by pids controller in /syz0 [ 149.839724][ T4029] netlink: 'syz.0.1247': attribute type 4 has an invalid length. [ 149.974173][ T4134] x_tables: duplicate underflow at hook 1 [ 150.000281][ T4138] tc_dump_action: action bad kind [ 150.033495][ T4141] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 150.157813][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 150.178738][ T4147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28573 sclass=netlink_route_socket pid=4147 comm=syz.3.1255 [ 150.182994][ T4150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.223207][ T4150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.421688][ T4153] fuse: Bad value for 'group_id' [ 150.426743][ T4153] fuse: Bad value for 'group_id' [ 150.516992][ T4164] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 150.542086][ T4164] SELinux: failed to load policy [ 150.912369][ T458] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 151.063835][ T458] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.074151][ T458] usb 4-1: config 1 interface 0 has no altsetting 0 [ 151.081075][ T458] usb 4-1: language id specifier not provided by device, defaulting to English [ 151.091767][ T458] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 151.101010][ T458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.111087][ T458] usb 4-1: Product: syz [ 151.115774][ T458] usb 4-1: Manufacturer: ޿ṕ즒꡴婵皰磈ã ç¼¥é‰“堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻â•㈺ïµå‚µéš¥êµ„糶䵎孜 [ 151.129643][ T458] usb 4-1: SerialNumber: syz [ 151.338853][ T458] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 151.347039][ T458] usb 4-1: USB disconnect, device number 83 [ 151.674542][ T4200] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 151.748217][ T4204] overlayfs: conflicting options: userxattr,verity=on [ 151.755868][ T4204] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 151.764129][ T4204] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1275'. [ 151.772975][ T458] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 151.937336][ T458] usb 2-1: config 1 has an invalid descriptor of length 87, skipping remainder of the config [ 151.955184][ T458] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.965561][ T458] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.983630][ T458] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.993555][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 152.003511][ T458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.023153][ T458] usb 2-1: Product: syz [ 152.028759][ T458] usb 2-1: Manufacturer: syz [ 152.034196][ T458] usb 2-1: SerialNumber: syz [ 152.043026][ T458] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 152.050471][ T458] cdc_ncm 2-1:1.0: bind() failure [ 152.093165][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 152.223282][ T10] usb 4-1: device descriptor read/64, error -71 [ 152.289540][ T4235] SELinux: failed to load policy [ 152.329177][ T4240] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 152.375225][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.384870][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.395359][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.404006][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.413927][ T4246] tipc: Started in network mode [ 152.418815][ T4246] tipc: Node identity ac14140f, cluster identity 4711 [ 152.425845][ T4246] tipc: New replicast peer: 255.255.255.255 [ 152.432069][ T4246] tipc: Enabled bearer , priority 10 [ 152.473446][ T10] usb 4-1: device descriptor read/64, error -71 [ 152.690869][ T36] kauditd_printk_skb: 543 callbacks suppressed [ 152.690887][ T36] audit: type=1400 audit(1769233081.901:8019): avc: denied { mounton } for pid=4248 comm="syz.0.1294" path="/507/bus" dev="tmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.691158][ T4249] overlayfs: failed to clone upperpath [ 152.725438][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 152.734069][ T36] audit: type=1400 audit(1769233081.951:8020): avc: denied { ioctl } for pid=4211 comm="syz.3.1279" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.741354][ T4251] overlayfs: failed to clone upperpath [ 152.759715][ T36] audit: type=1400 audit(1769233081.951:8021): avc: denied { ioctl } for pid=4211 comm="syz.3.1279" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.790338][ T36] audit: type=1400 audit(1769233081.951:8022): avc: denied { mounton } for pid=4250 comm="syz.0.1295" path="/508/bus" dev="tmpfs" ino=2736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.813268][ T36] audit: type=1400 audit(1769233082.001:8023): avc: denied { create } for pid=4252 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.833284][ T36] audit: type=1400 audit(1769233082.001:8024): avc: denied { setopt } for pid=4252 comm="syz.0.1296" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.854137][ T36] audit: type=1400 audit(1769233082.001:8025): avc: denied { create } for pid=4252 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.873946][ T36] audit: type=1400 audit(1769233082.001:8026): avc: denied { create } for pid=4252 comm="syz.0.1296" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.883688][ T10] usb 4-1: device descriptor read/64, error -71 [ 152.895485][ T36] audit: type=1400 audit(1769233082.001:8027): avc: denied { map } for pid=4252 comm="syz.0.1296" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.926137][ T36] audit: type=1400 audit(1769233082.001:8028): avc: denied { read write } for pid=4252 comm="syz.0.1296" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.001649][ T4260] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 153.022076][ T4262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.030658][ T4262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.133852][ T10] usb 4-1: device descriptor read/64, error -71 [ 153.243977][ T10] usb usb4-port1: attempt power cycle [ 153.419180][ T4272] tipc: Enabling of bearer rejected, failed to enable media [ 153.429829][ T353] tipc: Node number set to 2886997007 [ 153.584167][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 153.605354][ T10] usb 4-1: device descriptor read/8, error -71 [ 153.667521][ T4284] netlink: 'syz.2.1308': attribute type 4 has an invalid length. [ 153.735673][ T10] usb 4-1: device descriptor read/8, error -71 [ 153.994327][ T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 154.016515][ T10] usb 4-1: device descriptor read/8, error -71 [ 154.020623][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.034095][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.045571][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.054084][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.064760][ T4301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.073348][ T4301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.146250][ T10] usb 4-1: device descriptor read/8, error -71 [ 154.198534][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.208668][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.254736][ T10] usb usb4-port1: unable to enumerate USB device [ 154.737683][ T4310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.746660][ T4310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.768501][ T4315] input: syz0 as /devices/virtual/input/input37 [ 154.798484][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.807042][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.820359][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.829073][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.097117][ T353] usb 2-1: USB disconnect, device number 73 [ 155.116809][ T4321] netlink: 'syz.1.1319': attribute type 4 has an invalid length. [ 155.265045][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 155.401202][ T4327] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 155.418545][ T10] usb 4-1: no configurations [ 155.423242][ T10] usb 4-1: can't read configurations, error -22 [ 155.433147][ T4329] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 155.445145][ T353] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 155.462792][ T4331] SELinux: failed to load policy [ 155.549847][ T4338] input: syz0 as /devices/virtual/input/input38 [ 155.556242][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 155.580002][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.588716][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.597070][ T353] usb 2-1: Using ep0 maxpacket: 16 [ 155.600858][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.604044][ T353] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 155.610956][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.624775][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 155.641414][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 155.652748][ T353] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 155.661824][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.669932][ T353] usb 2-1: Product: syz [ 155.674103][ T353] usb 2-1: Manufacturer: syz [ 155.678717][ T353] usb 2-1: SerialNumber: syz [ 155.684203][ T353] usb 2-1: config 0 descriptor?? [ 155.715689][ T10] usb 4-1: no configurations [ 155.720447][ T10] usb 4-1: can't read configurations, error -22 [ 155.727302][ T10] usb usb4-port1: attempt power cycle [ 155.892357][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.901044][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.913208][ T353] usb 2-1: USB disconnect, device number 74 [ 156.065475][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 156.086327][ T10] usb 4-1: no configurations [ 156.091030][ T10] usb 4-1: can't read configurations, error -22 [ 156.151127][ T4346] netlink: 'syz.2.1328': attribute type 4 has an invalid length. [ 156.172934][ T4348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1329'. [ 156.226067][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 156.246358][ T10] usb 4-1: no configurations [ 156.251008][ T10] usb 4-1: can't read configurations, error -22 [ 156.257707][ T10] usb usb4-port1: unable to enumerate USB device [ 156.285575][ T353] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 156.415684][ T353] usb 2-1: device descriptor read/64, error -71 [ 156.655778][ T353] usb 2-1: device descriptor read/64, error -71 [ 156.683198][ T4358] overlayfs: failed to clone upperpath [ 156.808358][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 156.817383][ T4362] bridge_slave_1: left allmulticast mode [ 156.823043][ T4362] bridge_slave_1: left promiscuous mode [ 156.828827][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.836852][ T4362] bridge_slave_0: left allmulticast mode [ 156.842508][ T4362] bridge_slave_0: left promiscuous mode [ 156.848335][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.895925][ T353] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 157.025965][ T353] usb 2-1: device descriptor read/64, error -71 [ 157.266054][ T353] usb 2-1: device descriptor read/64, error -71 [ 157.376220][ T353] usb usb2-port1: attempt power cycle [ 157.716308][ T353] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 157.736711][ T36] kauditd_printk_skb: 325 callbacks suppressed [ 157.736765][ T36] audit: type=1400 audit(1769233086.948:8354): avc: denied { ioctl } for pid=4342 comm="syz.1.1327" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.768650][ T353] usb 2-1: device descriptor read/8, error -71 [ 157.890345][ T36] audit: type=1400 audit(1769233087.098:8355): avc: denied { read write } for pid=2351 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.914837][ T36] audit: type=1400 audit(1769233087.128:8356): avc: denied { read write open } for pid=2351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.926127][ T4372] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 157.940214][ T36] audit: type=1400 audit(1769233087.128:8357): avc: denied { ioctl } for pid=2351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.974331][ T36] audit: type=1400 audit(1769233087.128:8358): avc: denied { create } for pid=4371 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.995480][ T36] audit: type=1400 audit(1769233087.128:8359): avc: denied { write } for pid=4371 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.015807][ T353] usb 2-1: device descriptor read/8, error -71 [ 158.015832][ T36] audit: type=1400 audit(1769233087.128:8360): avc: denied { nlmsg_write } for pid=4371 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.042829][ T36] audit: type=1400 audit(1769233087.168:8361): avc: denied { read write } for pid=2351 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.067540][ T36] audit: type=1400 audit(1769233087.168:8362): avc: denied { open } for pid=2351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.092396][ T36] audit: type=1400 audit(1769233087.168:8363): avc: denied { ioctl } for pid=2351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.256549][ T353] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 158.277870][ T353] usb 2-1: device descriptor read/8, error -71 [ 158.336536][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 158.407583][ T353] usb 2-1: device descriptor read/8, error -71 [ 158.486644][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 158.493488][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.502034][ T10] usb 4-1: config 127 has an invalid interface number: 121 but max is 0 [ 158.510587][ T10] usb 4-1: config 127 has no interface number 0 [ 158.516751][ T353] usb usb2-port1: unable to enumerate USB device [ 158.517026][ T10] usb 4-1: config 127 interface 121 has no altsetting 0 [ 158.531792][ T10] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=ba.4a [ 158.540926][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.548967][ T10] usb 4-1: Product: syz [ 158.553181][ T10] usb 4-1: Manufacturer: syz [ 158.558068][ T10] usb 4-1: SerialNumber: syz [ 158.769826][ T10] usb_ehset_test 4-1:127.121: probe with driver usb_ehset_test failed with error -32 [ 158.780417][ T10] usb 4-1: USB disconnect, device number 92 [ 158.850918][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 159.283297][ T4386] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 159.292645][ T4386] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1344'. [ 159.326964][ T458] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 159.347273][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.348880][ T4395] netlink: 'syz.3.1346': attribute type 4 has an invalid length. [ 159.361984][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.383987][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.397651][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.489510][ T458] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.497597][ T458] usb 2-1: not running at top speed; connect to a high speed hub [ 159.506121][ T458] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.516274][ T458] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.527218][ T458] usb 2-1: string descriptor 0 read error: -22 [ 159.533466][ T458] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.542568][ T458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.553124][ T458] usb 2-1: 0:2 : does not exist [ 159.617083][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 159.778181][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 159.786491][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 159.795484][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 159.805834][ T10] usb 4-1: config 220 has no interface number 2 [ 159.812169][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 159.825409][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 159.832219][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 159.839153][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 159.847451][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 159.856717][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.864797][ T10] usb 4-1: Product: syz [ 159.869119][ T10] usb 4-1: Manufacturer: syz [ 159.873810][ T10] usb 4-1: SerialNumber: syz [ 160.082065][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.095703][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.105492][ T4399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.114731][ T4422] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 160.124110][ T4399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.169741][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 160.188096][ T458] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 160.205613][ T458] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 160.215000][ T10] usb 4-1: No valid video chain found. [ 160.234371][ T10] usb 4-1: selecting invalid altsetting 0 [ 160.255883][ T458] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 160.288518][ T10] usb 4-1: USB disconnect, device number 93 [ 160.304404][ T458] usb 2-1: USB disconnect, device number 79 [ 160.637482][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 160.717691][ T4455] fuse: Bad value for 'fd' [ 160.807544][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 160.818846][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.839770][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 160.862977][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.880911][ T10] usb 4-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 46 [ 160.899357][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.908633][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.916686][ T10] usb 4-1: Product: syz [ 160.921943][ T10] usb 4-1: Manufacturer: syz [ 160.926630][ T10] usb 4-1: SerialNumber: syz [ 161.016043][ T4460] netlink: 'syz.2.1367': attribute type 4 has an invalid length. [ 161.038087][ T4462] input: syz0 as /devices/virtual/input/input40 [ 161.110326][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.118942][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.138366][ T4440] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 161.153500][ T10] usb 4-1: USB disconnect, device number 94 [ 161.169366][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.292718][ T4475] overlayfs: failed to clone upperpath [ 161.623724][ T4479] netlink: 'syz.1.1376': attribute type 4 has an invalid length. [ 161.648251][ T4481] input: syz0 as /devices/virtual/input/input41 [ 161.691417][ T4487] netlink: 'syz.1.1381': attribute type 5 has an invalid length. [ 161.699895][ T4487] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1381'. [ 161.775934][ T4504] netlink: 'syz.3.1386': attribute type 4 has an invalid length. [ 161.810561][ T4508] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 161.841385][ T4512] input: syz0 as /devices/virtual/input/input42 [ 161.852222][ T4513] tipc: Started in network mode [ 161.860406][ T4513] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.874077][ T4513] tipc: Enabling of bearer rejected, failed to enable media [ 161.947960][ T1586] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 162.098033][ T1586] usb 2-1: Using ep0 maxpacket: 16 [ 162.104514][ T1586] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.112934][ T1586] usb 2-1: config 1 has an invalid interface number: 171 but max is 0 [ 162.118028][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 162.121171][ T1586] usb 2-1: config 1 has no interface number 0 [ 162.135176][ T1586] usb 2-1: config 1 interface 171 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 162.146153][ T1586] usb 2-1: config 1 interface 171 altsetting 2 endpoint 0xC has an invalid bInterval 64, changing to 7 [ 162.157216][ T1586] usb 2-1: config 1 interface 171 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 162.168116][ T1586] usb 2-1: config 1 interface 171 has no altsetting 0 [ 162.176317][ T1586] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0199, bcdDevice=c0.a2 [ 162.185420][ T1586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.193539][ T1586] usb 2-1: Product: ì‘誒⺎鰸䮆æ²î…»é ¢é­²å‹ê ‰â£æŽŽç¡‡æŠˆ [ 162.201854][ T1586] usb 2-1: Manufacturer: á³ë¤¯æ¤€á¼›å®—毱᪗ [ 162.208055][ T1586] usb 2-1: SerialNumber: 臔啨蹖㡊䯠ᣣ磋皦◧瀇舌í½è‘µå™Žî‘šï™æ†’쯓齈ï¤ç½ëž‘ላ鸈꿇蹊幾颓餼摼眘 [ 162.288151][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 162.294532][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.304803][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.318805][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.327907][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.335971][ T10] usb 4-1: SerialNumber: syz [ 162.344484][ T10] cdc_acm 4-1:1.0: skipping garbage [ 162.349785][ T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 162.357711][ T10] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 162.364197][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 162.429778][ T1586] ftdi_sio 2-1:1.171: FTDI USB Serial Device converter detected [ 162.437850][ T1586] ftdi_sio ttyUSB0: unknown device type: 0xc0a2 [ 162.446435][ T1586] usb 2-1: USB disconnect, device number 80 [ 162.453760][ T1586] ftdi_sio 2-1:1.171: device disconnected [ 162.684900][ T4526] netlink: 'syz.2.1395': attribute type 4 has an invalid length. [ 162.719883][ T4530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.728906][ T4530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.955034][ T36] kauditd_printk_skb: 383 callbacks suppressed [ 162.955055][ T36] audit: type=1400 audit(1769233092.166:8747): avc: denied { mounton } for pid=4533 comm="syz.1.1399" path="/242/bus" dev="tmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 162.983894][ T36] audit: type=1400 audit(1769233092.176:8748): avc: denied { create } for pid=4535 comm="syz.1.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.005089][ T36] audit: type=1400 audit(1769233092.176:8749): avc: denied { read append } for pid=4535 comm="syz.1.1400" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.029026][ T36] audit: type=1400 audit(1769233092.176:8750): avc: denied { open } for pid=4535 comm="syz.1.1400" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.053779][ T36] audit: type=1400 audit(1769233092.246:8751): avc: denied { ioctl } for pid=4535 comm="syz.1.1400" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.089764][ T36] audit: type=1400 audit(1769233092.306:8752): avc: denied { read } for pid=4537 comm="syz.1.1401" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.112735][ T36] audit: type=1400 audit(1769233092.306:8753): avc: denied { open } for pid=4537 comm="syz.1.1401" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.136456][ T36] audit: type=1400 audit(1769233092.306:8754): avc: denied { ioctl } for pid=4537 comm="syz.1.1401" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.259623][ T36] audit: type=1400 audit(1769233092.476:8755): avc: denied { read write } for pid=4540 comm="syz.1.1402" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.283141][ T36] audit: type=1400 audit(1769233092.476:8756): avc: denied { open } for pid=4540 comm="syz.1.1402" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.331218][ T4543] input: syz0 as /devices/virtual/input/input43 [ 163.335362][ T4545] netlink: 'syz.1.1404': attribute type 4 has an invalid length. [ 163.608528][ T353] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 163.758565][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 163.765001][ T353] usb 2-1: config 251 has an invalid interface number: 19 but max is 1 [ 163.773628][ T353] usb 2-1: config 251 has an invalid interface number: 217 but max is 1 [ 163.782127][ T353] usb 2-1: config 251 has no interface number 0 [ 163.788383][ T353] usb 2-1: config 251 has no interface number 1 [ 163.794754][ T353] usb 2-1: config 251 interface 19 has no altsetting 0 [ 163.801765][ T353] usb 2-1: config 251 interface 217 has no altsetting 0 [ 163.810337][ T353] usb 2-1: New USB device found, idVendor=12d1, idProduct=c4a9, bcdDevice=bd.40 [ 163.819457][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.827439][ T353] usb 2-1: Product: syz [ 163.831695][ T353] usb 2-1: Manufacturer: syz [ 163.836487][ T353] usb 2-1: SerialNumber: syz [ 164.046645][ T353] uvcvideo 2-1:251.217: Found Unit with invalid ID 0 [ 164.054249][ T353] usb 2-1: selecting invalid altsetting 0 [ 164.060323][ T353] usb 2-1: Found UVC 252.03 device syz (12d1:c4a9) [ 164.066865][ T353] usb 2-1: No valid video chain found. [ 164.073848][ T353] usb 2-1: USB disconnect, device number 81 [ 164.172409][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.180977][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.642832][ T4569] SELinux: failed to load policy [ 164.648000][ T4570] SELinux: failed to load policy [ 164.712167][ T4576] input: syz0 as /devices/virtual/input/input44 [ 164.757077][ T4583] overlay: Unknown parameter 'smackfsroot' [ 164.811544][ T458] usb 4-1: USB disconnect, device number 95 [ 165.138987][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 165.158973][ T458] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 165.289038][ T458] usb 4-1: device descriptor read/64, error -71 [ 165.296330][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 165.304684][ T10] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.40 [ 165.313946][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.322085][ T10] usb 2-1: Product: syz [ 165.326391][ T10] usb 2-1: SerialNumber: syz [ 165.522398][ T4617] overlayfs: failed to clone upperpath [ 165.529111][ T458] usb 4-1: device descriptor read/64, error -71 [ 165.538724][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.547399][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.576774][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 165.583157][ T4620] overlay: Bad value for 'index' [ 165.593624][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 165.607710][ T10] usb 2-1: USB disconnect, device number 82 [ 165.755031][ T4634] IPv6: Can't replace route, no match found [ 165.779191][ T458] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 165.909192][ T458] usb 4-1: device descriptor read/64, error -71 [ 166.124793][ T4642] netlink: 'syz.0.1436': attribute type 4 has an invalid length. [ 166.149256][ T458] usb 4-1: device descriptor read/64, error -71 [ 166.259537][ T458] usb usb4-port1: attempt power cycle [ 166.290310][ T4647] input: syz0 as /devices/virtual/input/input45 [ 166.599377][ T458] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 166.620397][ T458] usb 4-1: device descriptor read/8, error -71 [ 166.684113][ T4655] block device autoloading is deprecated and will be removed. [ 166.697846][ T4655] netlink: 'syz.0.1441': attribute type 64 has an invalid length. [ 166.705875][ T4655] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1441'. [ 166.714807][ T4655] gretap0: entered allmulticast mode [ 166.750578][ T458] usb 4-1: device descriptor read/8, error -71 [ 166.989457][ T458] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 167.010482][ T458] usb 4-1: device descriptor read/8, error -71 [ 167.140655][ T458] usb 4-1: device descriptor read/8, error -71 [ 167.234642][ T4666] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 167.248019][ T4668] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1446'. [ 167.257378][ T458] usb usb4-port1: unable to enumerate USB device [ 167.285615][ T4674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=275 sclass=netlink_route_socket pid=4674 comm=syz.1.1448 [ 167.539643][ T1586] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 167.689621][ T1586] usb 2-1: Using ep0 maxpacket: 16 [ 167.695279][ T1586] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 167.710352][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.718961][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.735213][ T1586] usb 2-1: string descriptor 0 read error: -71 [ 167.741521][ T1586] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 167.750695][ T1586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.760245][ T1586] r8152-cfgselector 2-1: Unknown version 0x0000 [ 167.766620][ T1586] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 167.776676][ T1586] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 167.786694][ T1586] r8152-cfgselector 2-1: USB disconnect, device number 83 [ 167.866005][ T4683] input: syz0 as /devices/virtual/input/input46 [ 167.971489][ T36] kauditd_printk_skb: 283 callbacks suppressed [ 167.971508][ T36] audit: type=1400 audit(1769233097.185:9040): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 168.000676][ T36] audit: type=1400 audit(1769233097.215:9041): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.026013][ T36] audit: type=1400 audit(1769233097.215:9042): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.050223][ T36] audit: type=1400 audit(1769233097.215:9043): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.075974][ T36] audit: type=1400 audit(1769233097.215:9044): avc: denied { create } for pid=4685 comm="syz.2.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.096432][ T36] audit: type=1400 audit(1769233097.215:9045): avc: denied { execmem } for pid=4685 comm="syz.2.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 168.115748][ T36] audit: type=1400 audit(1769233097.215:9046): avc: denied { read } for pid=4685 comm="syz.2.1452" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.138841][ T36] audit: type=1400 audit(1769233097.215:9047): avc: denied { open } for pid=4685 comm="syz.2.1452" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.162298][ T36] audit: type=1400 audit(1769233097.215:9048): avc: denied { ioctl } for pid=4685 comm="syz.2.1452" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.187220][ T36] audit: type=1400 audit(1769233097.215:9049): avc: denied { execmem } for pid=4685 comm="syz.2.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 168.284625][ T4694] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 168.314783][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.324138][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.589847][ T458] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 168.739890][ T458] usb 2-1: Using ep0 maxpacket: 32 [ 168.746683][ T458] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 168.762224][ T458] usb 2-1: config 0 has no interface number 0 [ 168.768462][ T458] usb 2-1: config 0 interface 184 has no altsetting 0 [ 168.777091][ T458] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.786284][ T458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.794384][ T458] usb 2-1: Product: syz [ 168.798590][ T458] usb 2-1: Manufacturer: syz [ 168.803255][ T458] usb 2-1: SerialNumber: syz [ 168.808842][ T458] usb 2-1: config 0 descriptor?? [ 168.814910][ T458] smsc75xx v1.0.0 [ 168.901619][ T4719] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 169.019962][ T330] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 169.169987][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 169.176286][ T330] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 169.184644][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.194811][ T330] usb 4-1: config 0 has no interface number 0 [ 169.201042][ T330] usb 4-1: too many endpoints for config 0 interface 230 altsetting 0: 167, using maximum allowed: 30 [ 169.212183][ T330] usb 4-1: config 0 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 169.232046][ T330] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 169.241696][ T330] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 169.249958][ T330] usb 4-1: Product: syz [ 169.254216][ T330] usb 4-1: Manufacturer: syz [ 169.258861][ T330] usb 4-1: SerialNumber: syz [ 169.265331][ T330] usb 4-1: config 0 descriptor?? [ 169.426762][ T458] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 169.437680][ T458] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 169.476812][ T4717] rust_binder: Error in use_page_slow: ESRCH [ 169.476836][ T4717] rust_binder: use_range failure ESRCH [ 169.483109][ T4717] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 169.488732][ T4717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.496746][ T4717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:287 [ 169.508305][ T330] hub 4-1:0.230: bad descriptor, ignoring hub [ 169.523940][ T330] hub 4-1:0.230: probe with driver hub failed with error -5 [ 169.531574][ T330] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 169.539955][ T330] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 169.580532][ T330] usb 4-1: USB disconnect, device number 100 [ 169.648101][ T458] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 169.659026][ T458] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 169.668709][ T458] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 169.678335][ T458] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 169.773184][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.781761][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.270220][ T330] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 170.305785][ T4744] fuse: Bad value for 'fd' [ 170.392409][ T4748] netlink: 'syz.2.1474': attribute type 6 has an invalid length. [ 170.400545][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 170.412191][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.419617][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.421581][ T330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.427344][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.438052][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.445174][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.458113][ T330] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 170.465592][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.475478][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.482336][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.494913][ T330] usb 4-1: config 0 descriptor?? [ 170.497864][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.510426][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.512568][ T330] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 170.517920][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.517950][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.540372][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.547932][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.555369][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.562775][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.570151][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.577557][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.584976][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.592450][ T1586] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 170.600916][ T1586] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 170.621816][ T4752] fido_id[4752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.650301][ T4754] netlink: 'syz.2.1475': attribute type 4 has an invalid length. [ 170.705325][ T4762] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1478'. [ 170.843746][ T4766] FAULT_INJECTION: forcing a failure. [ 170.843746][ T4766] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.856865][ T4766] CPU: 1 UID: 0 PID: 4766 Comm: syz.2.1480 Not tainted syzkaller #0 8fe1ccc9e4b69d602f55f226be20610034af3d84 [ 170.856900][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.856912][ T4766] Call Trace: [ 170.856919][ T4766] [ 170.856927][ T4766] __dump_stack+0x21/0x30 [ 170.856949][ T4766] dump_stack_lvl+0x140/0x1c0 [ 170.856963][ T4766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.856978][ T4766] ? check_stack_object+0x12b/0x150 [ 170.856993][ T4766] dump_stack+0x19/0x20 [ 170.857006][ T4766] should_fail_ex+0x3d7/0x530 [ 170.857020][ T4766] should_fail+0xf/0x20 [ 170.857030][ T4766] should_fail_usercopy+0x1e/0x30 [ 170.857043][ T4766] _copy_to_user+0x24/0xa0 [ 170.857062][ T4766] simple_read_from_buffer+0xed/0x160 [ 170.857080][ T4766] proc_fail_nth_read+0x1aa/0x220 [ 170.857092][ T4766] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 170.857104][ T4766] ? bpf_lsm_file_permission+0xd/0x20 [ 170.857115][ T4766] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 170.857127][ T4766] vfs_read+0x286/0xcb0 [ 170.857139][ T4766] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 170.857152][ T4766] ? __cfi_vfs_read+0x10/0x10 [ 170.857165][ T4766] ? __kasan_check_write+0x18/0x20 [ 170.857179][ T4766] ? mutex_lock+0x97/0x1d0 [ 170.857196][ T4766] ? __cfi_mutex_lock+0x10/0x10 [ 170.857212][ T4766] ? __fget_files+0x2c5/0x340 [ 170.857228][ T4766] ksys_read+0x145/0x260 [ 170.857241][ T4766] ? __cfi_ksys_read+0x10/0x10 [ 170.857255][ T4766] ? __kasan_check_read+0x15/0x20 [ 170.857268][ T4766] __x64_sys_read+0x7f/0x90 [ 170.857281][ T4766] x64_sys_call+0x2638/0x2ee0 [ 170.857309][ T4766] do_syscall_64+0x57/0xf0 [ 170.857323][ T4766] ? clear_bhb_loop+0x50/0xa0 [ 170.857338][ T4766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.857352][ T4766] RIP: 0033:0x7f136a95b58e [ 170.857369][ T4766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.857381][ T4766] RSP: 002b:00007f136b7dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.857396][ T4766] RAX: ffffffffffffffda RBX: 00007f136b7dd6c0 RCX: 00007f136a95b58e [ 170.857406][ T4766] RDX: 000000000000000f RSI: 00007f136b7dd0a0 RDI: 0000000000000005 [ 170.857414][ T4766] RBP: 00007f136b7dd090 R08: 0000000000000000 R09: 0000000000000000 [ 170.857422][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.857430][ T4766] R13: 00007f136ac16038 R14: 00007f136ac15fa0 R15: 00007ffe0a0bb568 [ 170.857444][ T4766] [ 171.357525][ T330] usb 2-1: USB disconnect, device number 84 [ 171.425817][ T4774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.434542][ T4774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.569690][ T4781] netlink: 'syz.1.1484': attribute type 4 has an invalid length. [ 171.890518][ T330] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 172.040540][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 172.047127][ T330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.055594][ T330] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 172.064007][ T330] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 172.074512][ T330] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 172.083719][ T330] usb 2-1: config 128 has no interface number 0 [ 172.090195][ T330] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 172.101596][ T330] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.111944][ T330] usb 2-1: config 128 interface 127 has no altsetting 0 [ 172.121587][ T330] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 172.130703][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.138777][ T330] usb 2-1: Product: syz [ 172.143123][ T330] usb 2-1: Manufacturer: syz [ 172.148619][ T330] usb 2-1: SerialNumber: syz [ 172.363538][ T330] usb 2-1: USB disconnect, device number 85 [ 172.375611][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.001089][ T36] kauditd_printk_skb: 288 callbacks suppressed [ 173.001108][ T36] audit: type=1400 audit(1769233102.214:9338): avc: denied { ioctl } for pid=4806 comm="syz.1.1492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.130740][ T330] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 173.280740][ T330] usb 2-1: Using ep0 maxpacket: 8 [ 173.286899][ T330] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.295410][ T330] usb 2-1: config 179 has no interface number 0 [ 173.301814][ T330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 173.312956][ T330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 173.324434][ T330] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 173.335965][ T330] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.349374][ T330] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 173.358530][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.368114][ T4808] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 173.374723][ T36] audit: type=1400 audit(1769233102.574:9339): avc: denied { ioctl } for pid=4806 comm="syz.1.1492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.400376][ T36] audit: type=1400 audit(1769233102.584:9340): avc: denied { ioctl } for pid=4806 comm="syz.1.1492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.477590][ T36] audit: type=1400 audit(1769233102.684:9341): avc: denied { create } for pid=4812 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.484145][ T4813] netlink: 'syz.0.1494': attribute type 4 has an invalid length. [ 173.527873][ T4815] overlayfs: missing 'lowerdir' [ 173.532882][ T36] audit: type=1400 audit(1769233102.734:9342): avc: denied { mounton } for pid=4814 comm="syz.0.1495" path="/570/file0" dev="tmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.555686][ T330] usb 4-1: USB disconnect, device number 101 [ 173.556181][ T36] audit: type=1400 audit(1769233102.744:9343): avc: denied { read write } for pid=2351 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.579794][ T10] usb 2-1: USB disconnect, device number 86 [ 173.586089][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 173.586135][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 173.588133][ T36] audit: type=1400 audit(1769233102.744:9344): avc: denied { open } for pid=2351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.633486][ T36] audit: type=1400 audit(1769233102.744:9345): avc: denied { ioctl } for pid=2351 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.661991][ T4820] 9pnet_fd: Insufficient options for proto=fd [ 173.670036][ T36] audit: type=1400 audit(1769233102.804:9346): avc: denied { create } for pid=4816 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.690731][ T36] audit: type=1400 audit(1769233102.804:9347): avc: denied { write } for pid=4816 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.108450][ T4843] netlink: 'syz.1.1505': attribute type 4 has an invalid length. [ 174.128768][ T4845] netlink: 'syz.1.1506': attribute type 4 has an invalid length. [ 174.136874][ T4845] netlink: 'syz.1.1506': attribute type 4 has an invalid length. [ 174.190055][ T4847] kvm: kvm [4846]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 174.211027][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 174.373072][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.383319][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.396856][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.406287][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.416248][ T10] usb 4-1: config 0 descriptor?? [ 174.427484][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 174.775386][ T4864] netlink: 'syz.2.1514': attribute type 4 has an invalid length. [ 174.864807][ T4869] fuse: Bad value for 'fd' [ 174.971046][ T353] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 175.121072][ T353] usb 2-1: Using ep0 maxpacket: 16 [ 175.129057][ T353] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 175.138187][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.146344][ T353] usb 2-1: Product: syz [ 175.150690][ T353] usb 2-1: Manufacturer: syz [ 175.155657][ T353] usb 2-1: SerialNumber: syz [ 175.161465][ T353] usb 2-1: config 0 descriptor?? [ 175.173185][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.184102][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.192794][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.201314][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.202493][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.344099][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.354541][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.373415][ T10] usb 2-1: USB disconnect, device number 87 [ 175.943519][ T4901] netlink: 'syz.1.1524': attribute type 4 has an invalid length. [ 176.500404][ T4914] overlayfs: failed to clone upperpath [ 176.547137][ T4921] overlayfs: failed to clone upperpath [ 176.553370][ T4921] overlayfs: failed to clone lowerpath [ 176.559561][ T4922] overlayfs: failed to clone lowerpath [ 176.670754][ T4929] 9pnet_fd: p9_fd_create_tcp (4929): problem connecting socket to 127.0.0.1 [ 177.445468][ T10] usb 4-1: USB disconnect, device number 102 [ 177.483394][ T4931] netlink: 'syz.3.1533': attribute type 4 has an invalid length. [ 177.568849][ T4941] overlayfs: lower data-only dirs require metacopy support. [ 177.610295][ T4943] overlayfs: failed to resolve './file0': -2 [ 177.716925][ T4950] input: syz0 as /devices/virtual/input/input48 [ 178.175795][ T36] kauditd_printk_skb: 276 callbacks suppressed [ 178.175817][ T36] audit: type=1400 audit(1769233107.383:9624): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.184463][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.206959][ T36] audit: type=1400 audit(1769233107.383:9625): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.216303][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.240490][ T36] audit: type=1400 audit(1769233107.383:9626): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.256962][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.272680][ T36] audit: type=1400 audit(1769233107.393:9627): avc: denied { read write } for pid=4952 comm="syz.2.1541" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.282729][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.305637][ T36] audit: type=1400 audit(1769233107.393:9628): avc: denied { open } for pid=4952 comm="syz.2.1541" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.335569][ T36] audit: type=1400 audit(1769233107.393:9629): avc: denied { ioctl } for pid=4952 comm="syz.2.1541" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.360978][ T36] audit: type=1400 audit(1769233107.463:9630): avc: denied { read write } for pid=4952 comm="syz.2.1541" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.385043][ T36] audit: type=1400 audit(1769233107.463:9631): avc: denied { open } for pid=4952 comm="syz.2.1541" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.408501][ T36] audit: type=1400 audit(1769233107.463:9632): avc: denied { ioctl } for pid=4952 comm="syz.2.1541" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.554136][ T36] audit: type=1400 audit(1769233107.763:9633): avc: denied { read write } for pid=2351 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.565319][ T4955] netlink: 'syz.3.1542': attribute type 4 has an invalid length. [ 178.853503][ T330] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 178.855361][ T4963] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1546'. [ 178.877554][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.886291][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.949889][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.958467][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.967278][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.975957][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.011545][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 179.018240][ T330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.026818][ T330] usb 4-1: config 6 has an invalid interface number: 254 but max is 0 [ 179.035032][ T330] usb 4-1: config 6 has no interface number 0 [ 179.041149][ T330] usb 4-1: config 6 interface 254 has no altsetting 0 [ 179.049314][ T330] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00 [ 179.058395][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.066406][ T330] usb 4-1: Product: syz [ 179.070660][ T330] usb 4-1: Manufacturer: syz [ 179.075275][ T330] usb 4-1: SerialNumber: syz [ 179.132368][ T4968] overlayfs: failed to resolve './file1': -2 [ 179.287153][ T330] ftdi_sio 4-1:6.254: FTDI USB Serial Device converter detected [ 179.295187][ T330] usb 4-1: Detected FT2232HP [ 179.300079][ T330] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 179.307210][ T330] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 179.315054][ T330] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 179.324305][ T330] usb 4-1: USB disconnect, device number 103 [ 179.331683][ T330] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 179.341302][ T330] ftdi_sio 4-1:6.254: device disconnected [ 179.461618][ T1586] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 179.612715][ T1586] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.622547][ T1586] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.629802][ T1586] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 179.639633][ T1586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.649228][ T1586] usb 2-1: config 0 descriptor?? [ 179.801750][ T4984] fuse: Invalid rootmode [ 180.057675][ T4987] 9pnet_fd: p9_fd_create_unix (4987): problem connecting socket: ./file1: -111 [ 180.071713][ T330] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 180.178336][ T4991] overlayfs: failed to clone upperpath [ 180.221700][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 180.228527][ T330] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.239707][ T330] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 180.253173][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.259933][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 180.269177][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.278530][ T330] usb 4-1: config 0 descriptor?? [ 180.457647][ T1586] hid-led 0003:0FC5:B080.001D: probe with driver hid-led failed with error -32 [ 180.687470][ T330] logitech-djreceiver 0003:046D:C52B.001E: item fetching failed at offset 4/5 [ 180.696589][ T330] logitech-djreceiver 0003:046D:C52B.001E: logi_dj_probe: parse failed [ 180.704888][ T330] logitech-djreceiver 0003:046D:C52B.001E: probe with driver logitech-djreceiver failed with error -22 [ 180.773643][ T5000] netlink: 'syz.0.1560': attribute type 4 has an invalid length. [ 181.317493][ T5006] fuse: Invalid rootmode [ 181.392420][ T330] usb 4-1: USB disconnect, device number 104 [ 181.731925][ T330] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 181.845611][ T5017] overlayfs: failed to clone upperpath [ 181.881856][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 181.888265][ T330] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 181.896581][ T330] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 181.905200][ T330] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 181.914440][ T330] usb 4-1: config 250 has no interface number 0 [ 181.920827][ T330] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 181.932525][ T330] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 181.944068][ T330] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.954594][ T330] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.964966][ T330] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 181.978495][ T330] usb 4-1: config 250 interface 228 has no altsetting 0 [ 181.986945][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 181.996320][ T330] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 182.004819][ T330] usb 4-1: Product: syz [ 182.009090][ T330] usb 4-1: SerialNumber: syz [ 182.016365][ T330] hub 4-1:250.228: bad descriptor, ignoring hub [ 182.022792][ T330] hub 4-1:250.228: probe with driver hub failed with error -5 [ 182.064440][ T5022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1568'. [ 182.217853][ T330] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 105 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 182.238289][ T10] usb 2-1: USB disconnect, device number 88 [ 182.267341][ T5024] netlink: 'syz.1.1569': attribute type 4 has an invalid length. [ 182.382616][ T5030] fuse: Invalid rootmode [ 182.498659][ T5037] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 182.508487][ T458] usb 4-1: USB disconnect, device number 105 [ 182.516611][ T458] usblp0: removed [ 182.581920][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 182.591204][ T5039] 9pnet: p9_errstr2errno: server reported unknown error [ 182.624657][ T5045] input: syz0 as /devices/virtual/input/input49 [ 182.654347][ T5048] veth0_virt_wifi: entered allmulticast mode [ 182.660672][ T5046] veth0_virt_wifi: left allmulticast mode [ 182.733650][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.744752][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.754231][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 249, using maximum allowed: 30 [ 182.765088][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.776013][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 182.790635][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.799739][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.809699][ T5054] random: crng reseeded on system resumption [ 182.816165][ T10] usb 2-1: Product: syz [ 182.820330][ T10] usb 2-1: Manufacturer: syz [ 182.831949][ T10] usb 2-1: SerialNumber: syz [ 182.869602][ T5056] fuse: Bad value for 'rootmode' [ 182.886751][ T5058] input: syz0 as /devices/virtual/input/input50 [ 183.023193][ T5062] netlink: 'syz.2.1585': attribute type 4 has an invalid length. [ 183.123285][ T5071] input: syz0 as /devices/virtual/input/input51 [ 183.190793][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.198239][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.205892][ T5069] bridge_slave_0: entered allmulticast mode [ 183.212347][ T5069] bridge_slave_0: entered promiscuous mode [ 183.218193][ T36] kauditd_printk_skb: 319 callbacks suppressed [ 183.218209][ T36] audit: type=1400 audit(1769233112.423:9953): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.243197][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.249560][ T36] audit: type=1400 audit(1769233112.423:9954): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.256183][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.280001][ T36] audit: type=1400 audit(1769233112.423:9955): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.315737][ T36] audit: type=1400 audit(1769233112.433:9956): avc: denied { read } for pid=5076 comm="syz.2.1588" dev="nsfs" ino=4026532473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.326096][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.337336][ T36] audit: type=1400 audit(1769233112.433:9957): avc: denied { open } for pid=5076 comm="syz.2.1588" path="net:[4026532473]" dev="nsfs" ino=4026532473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.353567][ T5069] bridge_slave_1: entered allmulticast mode [ 183.368865][ T36] audit: type=1400 audit(1769233112.433:9958): avc: denied { create } for pid=5076 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.392176][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.395774][ T36] audit: type=1400 audit(1769233112.433:9959): avc: denied { write } for pid=5076 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.409043][ T5069] bridge_slave_1: entered promiscuous mode [ 183.425510][ T36] audit: type=1400 audit(1769233112.433:9960): avc: denied { read } for pid=5076 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.449744][ T36] audit: type=1400 audit(1769233112.503:9961): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.459366][ T458] usb 2-1: USB disconnect, device number 89 [ 183.474152][ T36] audit: type=1400 audit(1769233112.503:9962): avc: denied { open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.482782][ T5079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1589'. [ 183.526541][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 183.539023][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 183.597523][ T5086] fuse: Bad value for 'rootmode' [ 183.624674][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.632046][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.639316][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.646367][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.668249][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.676073][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.685581][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.692668][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.702483][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.709531][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.733695][ T5069] veth0_vlan: entered promiscuous mode [ 183.744202][ T5069] veth1_macvtap: entered promiscuous mode [ 183.832050][ T458] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 183.862078][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 183.929082][ T5099] netlink: 'syz.0.1593': attribute type 4 has an invalid length. [ 183.953493][ T5101] input: syz0 as /devices/virtual/input/input52 [ 183.993731][ T458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.003622][ T458] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 184.013097][ T458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.021942][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.036034][ T458] usb 2-1: config 0 descriptor?? [ 184.044731][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.064467][ T5104] input: syz0 as /devices/virtual/input/input53 [ 184.077412][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.088621][ T10] usb 4-1: config 0 descriptor?? [ 184.103690][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.193115][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.201731][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.309355][ T5120] tipc: Enabling of bearer rejected, failed to enable media [ 184.449575][ T458] wacom 0003:056A:00D2.001F: unknown main item tag 0x0 [ 184.456712][ T458] wacom 0003:056A:00D2.001F: unknown main item tag 0x0 [ 184.463622][ T458] wacom 0003:056A:00D2.001F: unknown main item tag 0x0 [ 184.470563][ T458] wacom 0003:056A:00D2.001F: unknown main item tag 0x0 [ 184.477514][ T458] wacom 0003:056A:00D2.001F: unknown main item tag 0x0 [ 184.484539][ T458] wacom 0003:056A:00D2.001F: unknown main item tag 0x0 [ 184.491556][ T458] wacom 0003:056A:00D2.001F: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 184.502167][ T458] wacom 0003:056A:00D2.001F: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.1-1/input0 [ 184.516098][ T458] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D2.001F/input/input54 [ 184.693070][ T458] usb 2-1: USB disconnect, device number 90 [ 184.873932][ T5129] netlink: 'syz.2.1603': attribute type 4 has an invalid length. [ 184.905230][ T5131] rust_binder: Write failure EINVAL in pid:1199 [ 184.963039][ T5136] kvm: kvm [5135]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc2) = 0x7 [ 184.987994][ T5136] kvm: kvm [5135]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x11e) = 0x7 [ 185.013665][ T5140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.022440][ T5140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.312519][ T458] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 185.463302][ T458] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 185.471899][ T458] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 185.472523][ T65] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 185.483417][ T458] usb 1-1: config 220 has no interface number 2 [ 185.496193][ T458] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.509633][ T458] usb 1-1: config 220 interface 0 has no altsetting 0 [ 185.516707][ T458] usb 1-1: config 220 interface 76 has no altsetting 0 [ 185.523740][ T458] usb 1-1: config 220 interface 1 has no altsetting 0 [ 185.531827][ T458] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.541016][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.549056][ T458] usb 1-1: Product: syz [ 185.553510][ T458] usb 1-1: Manufacturer: syz [ 185.558270][ T458] usb 1-1: SerialNumber: syz [ 185.632485][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 185.639122][ T65] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 185.647813][ T65] usb 2-1: config 0 has no interface number 0 [ 185.654114][ T65] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 185.665948][ T65] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 185.675137][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.683337][ T65] usb 2-1: Product: syz [ 185.687878][ T65] usb 2-1: Manufacturer: syz [ 185.692533][ T65] usb 2-1: SerialNumber: syz [ 185.698381][ T65] usb 2-1: config 0 descriptor?? [ 185.704048][ T5150] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 185.768829][ T458] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 185.775315][ T458] usb 1-1: No valid video chain found. [ 185.780875][ T458] usb 1-1: selecting invalid altsetting 0 [ 185.789605][ T458] usb 1-1: USB disconnect, device number 16 [ 185.820239][ T5154] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 185.855966][ T5156] netlink: 'syz.2.1613': attribute type 7 has an invalid length. [ 185.913741][ T5150] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 186.007214][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.016061][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.324482][ T65] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 186.334813][ T65] asix 2-1:0.188: probe with driver asix failed with error -61 [ 186.527425][ T353] usb 2-1: USB disconnect, device number 91 [ 186.598465][ T5173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.611062][ T5173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.619446][ T5173] netlink: 'syz.2.1618': attribute type 4 has an invalid length. [ 186.674553][ T5182] netlink: 'syz.2.1621': attribute type 4 has an invalid length. [ 186.742323][ T10] usb 3-1: USB disconnect, device number 46 [ 186.784639][ T776] bridge_slave_1: left allmulticast mode [ 186.790425][ T776] bridge_slave_1: left promiscuous mode [ 186.799431][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.807190][ T776] bridge_slave_0: left allmulticast mode [ 186.812993][ T776] bridge_slave_0: left promiscuous mode [ 186.818657][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.940365][ T776] tipc: Disabling bearer [ 186.945970][ T776] tipc: Left network mode [ 187.080827][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.087971][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.095162][ T5193] bridge_slave_0: entered allmulticast mode [ 187.101812][ T5193] bridge_slave_0: entered promiscuous mode [ 187.106945][ T10] usb 4-1: USB disconnect, device number 106 [ 187.109265][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.125641][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.136776][ T5193] bridge_slave_1: entered allmulticast mode [ 187.142937][ T353] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 187.151024][ T5193] bridge_slave_1: entered promiscuous mode [ 187.216431][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.223527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.233431][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.240564][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.268655][ T5211] netlink: 'syz.3.1632': attribute type 4 has an invalid length. [ 187.286745][ T5193] veth0_vlan: entered promiscuous mode [ 187.305527][ T5193] veth1_macvtap: entered promiscuous mode [ 187.312334][ T65] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 187.320065][ T353] usb 1-1: Using ep0 maxpacket: 32 [ 187.329028][ T353] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.337624][ T353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.353315][ T353] usb 1-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 187.362793][ T353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.372321][ T353] usb 1-1: Product: syz [ 187.376566][ T353] usb 1-1: Manufacturer: syz [ 187.378400][ T5216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7726 sclass=netlink_route_socket pid=5216 comm=syz.4.1628 [ 187.381668][ T353] usb 1-1: SerialNumber: syz [ 187.472339][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 187.478680][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.486984][ T65] usb 2-1: too many configurations: 76, using maximum allowed: 8 [ 187.497866][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.506115][ T65] usb 2-1: can't read configurations, error -61 [ 187.609187][ T353] usb 1-1: USB disconnect, device number 17 [ 187.622389][ T10] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 187.642646][ T65] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 187.772369][ T31] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 187.773517][ T10] usb 4-1: descriptor type invalid, skip [ 187.785961][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 187.792354][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 187.794528][ T10] usb 4-1: config 0 has no interfaces? [ 187.799665][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.806296][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.812346][ T65] usb 2-1: too many configurations: 76, using maximum allowed: 8 [ 187.821893][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.830510][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.837184][ T10] usb 4-1: Product: syz [ 187.845397][ T65] usb 2-1: can't read configurations, error -61 [ 187.848985][ T10] usb 4-1: Manufacturer: syz [ 187.855516][ T65] usb usb2-port1: attempt power cycle [ 187.859857][ T10] usb 4-1: SerialNumber: syz [ 187.870873][ T10] usb 4-1: config 0 descriptor?? [ 187.923868][ T31] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.935161][ T31] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.948534][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 187.955587][ T31] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 187.964835][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.973924][ T31] usb 5-1: config 0 descriptor?? [ 188.084770][ T10] usb 4-1: USB disconnect, device number 107 [ 188.144309][ T5225] input: syz0 as /devices/virtual/input/input57 [ 188.212442][ T65] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 188.232808][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 188.238947][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.246943][ T65] usb 2-1: too many configurations: 76, using maximum allowed: 8 [ 188.256109][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.264357][ T65] usb 2-1: can't read configurations, error -61 [ 188.271116][ T36] kauditd_printk_skb: 569 callbacks suppressed [ 188.271135][ T36] audit: type=1400 audit(1769233117.472:10532): avc: denied { ioctl } for pid=5197 comm="syz.1.1630" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.311572][ T36] audit: type=1400 audit(1769233117.512:10533): avc: denied { execmem } for pid=5224 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.331221][ T36] audit: type=1400 audit(1769233117.512:10534): avc: denied { execute } for pid=5224 comm="syz.0.1636" path="/14/cpuacct.usage_sys" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.355368][ T36] audit: type=1400 audit(1769233117.512:10535): avc: denied { execmem } for pid=5224 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.375746][ T36] audit: type=1400 audit(1769233117.512:10536): avc: denied { create } for pid=5224 comm="syz.0.1636" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.397478][ T36] audit: type=1400 audit(1769233117.512:10537): avc: denied { ioctl } for pid=5224 comm="syz.0.1636" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36399 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.423734][ T65] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 188.431832][ T36] audit: type=1400 audit(1769233117.562:10538): avc: denied { ioctl } for pid=5197 comm="syz.1.1630" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.457057][ T36] audit: type=1400 audit(1769233117.572:10539): avc: denied { read write } for pid=5224 comm="syz.0.1636" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.472751][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 188.480711][ T36] audit: type=1400 audit(1769233117.572:10540): avc: denied { ioctl open } for pid=5224 comm="syz.0.1636" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.486546][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.509685][ T36] audit: type=1400 audit(1769233117.602:10541): avc: denied { ioctl } for pid=5221 comm="syz.4.1635" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.517621][ T65] usb 2-1: too many configurations: 76, using maximum allowed: 8 [ 188.551112][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.558756][ T65] usb 2-1: can't read configurations, error -61 [ 188.565164][ T65] usb usb2-port1: unable to enumerate USB device [ 188.883283][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 188.890186][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.899139][ T31] usb 5-1: USB disconnect, device number 2 [ 189.082471][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 189.180739][ T5238] netlink: 'syz.0.1640': attribute type 4 has an invalid length. [ 189.234479][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.244372][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 189.253462][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.262538][ T10] usb 4-1: config 0 descriptor?? [ 189.269415][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 189.442580][ T458] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 189.603583][ T458] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.613770][ T458] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 189.624749][ T458] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.636220][ T458] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 189.649253][ T458] usb 1-1: config 1 interface 1 has no altsetting 1 [ 189.657217][ T458] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.666318][ T458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.674447][ T458] usb 1-1: Product: syz [ 189.678697][ T458] usb 1-1: Manufacturer: syz [ 189.683316][ T458] usb 1-1: SerialNumber: syz [ 189.690985][ T458] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 189.697850][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 189.705411][ T458] cdc_ncm 1-1:1.1: bind() failure [ 189.863617][ T10] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 189.871796][ T10] usb 5-1: config 0 has no interface number 0 [ 189.878144][ T10] usb 5-1: config 0 interface 60 has no altsetting 0 [ 189.886413][ T10] usb 5-1: New USB device found, idVendor=0fb8, idProduct=fac3, bcdDevice=93.39 [ 189.895576][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.897748][ T31] usb 1-1: USB disconnect, device number 18 [ 189.903607][ T10] usb 5-1: Product: syz [ 189.903626][ T10] usb 5-1: Manufacturer: syz [ 189.918371][ T10] usb 5-1: SerialNumber: syz [ 189.924949][ T10] usb 5-1: config 0 descriptor?? [ 189.931026][ T10] usb-storage 5-1:0.60: USB Mass Storage device detected [ 190.132371][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.141434][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.153264][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.161821][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.172074][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.181672][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.182230][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.195999][ T31] usb 5-1: USB disconnect, device number 3 [ 190.201298][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.318611][ T5269] input: syz0 as /devices/virtual/input/input58 [ 190.416037][ T5271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 190.425048][ T5271] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 190.433696][ T5271] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 190.492493][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 190.497284][ T5273] syz.0.1651 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.593576][ T5281] netlink: 'syz.0.1653': attribute type 4 has an invalid length. [ 190.653987][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.665137][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.675061][ T10] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 190.684332][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.693728][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.702491][ T10] usb 2-1: config 0 descriptor?? [ 190.854264][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.866149][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 190.875931][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.884617][ T31] usb 5-1: Product: syz [ 190.889085][ T31] usb 5-1: Manufacturer: syz [ 190.893787][ T31] usb 5-1: SerialNumber: syz [ 190.899526][ T31] usb 5-1: config 0 descriptor?? [ 191.192556][ T458] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 191.311536][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 191.317621][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.326774][ T10] usb 2-1: USB disconnect, device number 96 [ 191.342549][ T458] usb 1-1: Using ep0 maxpacket: 32 [ 191.349100][ T458] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.362179][ T458] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.368847][ T458] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 191.378024][ T458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.387392][ T458] usb 1-1: config 0 descriptor?? [ 191.871521][ T5307] netlink: 'syz.1.1662': attribute type 4 has an invalid length. [ 191.999604][ T458] usbhid 1-1:0.0: can't add hid device: -71 [ 192.011900][ T458] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 192.024880][ T458] usb 1-1: USB disconnect, device number 19 [ 192.066172][ T5322] overlayfs: overlapping lowerdir path [ 192.182026][ T5324] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 192.290860][ T10] usb 4-1: USB disconnect, device number 108 [ 192.328467][ T5333] netlink: 'syz.3.1671': attribute type 4 has an invalid length. [ 192.512977][ T458] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 192.627153][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 192.664001][ T458] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 192.672385][ T458] usb 2-1: config 1 has no interface number 0 [ 192.679037][ T10] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 192.686707][ T458] usb 2-1: config 1 interface 105 has no altsetting 0 [ 192.696020][ T458] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 192.705326][ T458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.714095][ T458] usb 2-1: Product: syz [ 192.718543][ T458] usb 2-1: Manufacturer: syz [ 192.723594][ T458] usb 2-1: SerialNumber: syz [ 192.844036][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.852468][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.862833][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.874355][ T10] usb 4-1: string descriptor 0 read error: -22 [ 192.880812][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.890021][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.062550][ T529] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.105581][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.114330][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.212551][ T529] usb 1-1: Using ep0 maxpacket: 32 [ 193.218838][ T529] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.227701][ T529] usb 1-1: config 0 has no interface number 0 [ 193.234414][ T529] usb 1-1: config 0 interface 184 has no altsetting 0 [ 193.242783][ T529] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.251850][ T529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.260050][ T529] usb 1-1: Product: syz [ 193.264381][ T529] usb 1-1: Manufacturer: syz [ 193.269020][ T529] usb 1-1: SerialNumber: syz [ 193.275106][ T529] usb 1-1: config 0 descriptor?? [ 193.280583][ T36] kauditd_printk_skb: 428 callbacks suppressed [ 193.280600][ T36] audit: type=1400 audit(1769233123.482:10970): avc: denied { ioctl } for pid=5340 comm="syz.0.1675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.281506][ T529] smsc75xx v1.0.0 [ 193.330418][ T36] audit: type=1400 audit(1769233123.532:10971): avc: denied { read write } for pid=5193 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.334669][ T31] usb 5-1: USB disconnect, device number 4 [ 193.362782][ T10] usb 4-1: cannot find UAC_HEADER [ 193.369736][ T36] audit: type=1400 audit(1769233123.532:10972): avc: denied { open } for pid=5193 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.377345][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 193.407916][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 193.408726][ T10] usb 4-1: USB disconnect, device number 109 [ 193.424542][ T36] audit: type=1400 audit(1769233123.532:10973): avc: denied { ioctl } for pid=5193 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.447691][ T5345] netlink: 'syz.4.1676': attribute type 46 has an invalid length. [ 193.463290][ T36] audit: type=1400 audit(1769233123.572:10974): avc: denied { ioctl } for pid=5328 comm="syz.1.1669" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.468766][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 193.494394][ T36] audit: type=1400 audit(1769233123.602:10975): avc: denied { create } for pid=5344 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.504492][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.521398][ T36] audit: type=1400 audit(1769233123.632:10976): avc: denied { connect } for pid=5344 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.553266][ T36] audit: type=1400 audit(1769233123.632:10977): avc: denied { write } for pid=5344 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.573573][ T458] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 193.574321][ T36] audit: type=1400 audit(1769233123.632:10978): avc: denied { create } for pid=5344 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.585602][ T458] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 193.605313][ T36] audit: type=1400 audit(1769233123.632:10979): avc: denied { name_bind } for pid=5344 comm="syz.4.1676" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 193.838278][ T5329] ------------[ cut here ]------------ [ 193.843839][ T5329] WARNING: CPU: 1 PID: 5329 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 193.853552][ T5329] Modules linked in: [ 193.857484][ T5329] CPU: 1 UID: 0 PID: 5329 Comm: syz.1.1669 Not tainted syzkaller #0 8fe1ccc9e4b69d602f55f226be20610034af3d84 [ 193.869153][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.879265][ T5329] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 193.885325][ T5329] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d ba aa 0b 06 00 0f 85 c2 00 00 00 c6 05 ad aa 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 193.905202][ T5329] RSP: 0018:ffffc9000e6a7960 EFLAGS: 00010246 [ 193.910594][ T458] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6a:eb:45:38:6d:76 [ 193.911410][ T5329] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 193.932166][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e6a7a18 [ 193.940223][ T5329] RBP: ffffc9000e6a7a88 R08: ffffc9000e6a7a17 R09: 0000000000000000 [ 193.948274][ T5329] R10: ffffc9000e6a7a00 R11: fffff52001cd4f43 R12: ffffc9000e6a79a0 [ 193.956621][ T5329] R13: dffffc0000000000 R14: 1ffff92001cd4f30 R15: 0000000000000000 [ 193.964745][ T5329] FS: 00007f95dbca66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 193.973754][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.980385][ T5329] CR2: 00007f95db141000 CR3: 000000010f794000 CR4: 00000000003526b0 [ 193.988444][ T5329] Call Trace: [ 193.991753][ T5329] [ 193.994786][ T5329] ? __asan_set_shadow_00+0x12/0x20 [ 194.000030][ T5329] ? do_vfs_ioctl+0x182d/0x2010 [ 194.004975][ T5329] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 194.010744][ T5329] ? raw_ioctl+0x1888/0x3740 [ 194.015414][ T5329] ___kmalloc_large_node+0x81/0x210 [ 194.020655][ T5329] ? raw_ioctl+0x1888/0x3740 [ 194.022588][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 194.025324][ T5329] __kmalloc_large_node_noprof+0x1e/0xd0 [ 194.038623][ T5329] ? raw_ioctl+0x1888/0x3740 [ 194.043283][ T5329] __kmalloc_noprof+0x326/0x500 [ 194.048269][ T5329] raw_ioctl+0x1888/0x3740 [ 194.052774][ T5329] ? _raw_spin_lock_irq+0x93/0x120 [ 194.058019][ T5329] ? __cfi_raw_ioctl+0x10/0x10 [ 194.062842][ T5329] ? selinux_file_ioctl+0x732/0x1480 [ 194.068163][ T5329] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 194.073782][ T5329] ? __hrtimer_run_queues+0x983/0x9e0 [ 194.079210][ T5329] ? do_futex+0x37d/0x510 [ 194.083600][ T5329] ? __cfi_do_futex+0x10/0x10 [ 194.088489][ T5329] ? __fget_files+0x2c5/0x340 [ 194.093335][ T5329] ? bpf_lsm_file_ioctl+0xd/0x20 [ 194.098394][ T5329] ? security_file_ioctl+0x3e/0x110 [ 194.103697][ T5329] ? __cfi_raw_ioctl+0x10/0x10 [ 194.108501][ T5329] __se_sys_ioctl+0x135/0x1b0 [ 194.113269][ T5329] __x64_sys_ioctl+0x7f/0xa0 [ 194.117933][ T5329] x64_sys_call+0x1878/0x2ee0 [ 194.122709][ T5329] do_syscall_64+0x57/0xf0 [ 194.127172][ T5329] ? clear_bhb_loop+0x50/0xa0 [ 194.131893][ T5329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.137861][ T5329] RIP: 0033:0x7f95dad9acb9 [ 194.142318][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.162113][ T5329] RSP: 002b:00007f95dbca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.170609][ T5329] RAX: ffffffffffffffda RBX: 00007f95db015fa0 RCX: 00007f95dad9acb9 [ 194.178835][ T5329] RDX: 0000200000000080 RSI: 00000000c0085504 RDI: 0000000000000005 [ 194.186864][ T5329] RBP: 00007f95dae08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 194.195122][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.203140][ T5329] R13: 00007f95db016038 R14: 00007f95db015fa0 R15: 00007ffc8a016be8 [ 194.204870][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.211401][ T5329] [ 194.211417][ T5329] ---[ end trace 0000000000000000 ]--- [ 194.211503][ T529] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 194.221787][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.224325][ T529] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.230711][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.248397][ T353] usb 2-1: USB disconnect, device number 97 [ 194.250059][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 194.259865][ T353] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 194.273491][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 194.300517][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 194.300757][ T10] usb 5-1: config 0 descriptor?? [ 194.309055][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 194.322709][ T149] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 194.326938][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 194.331166][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 194.346714][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 194.354959][ T149] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 194.363647][ T149] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 194.372457][ T149] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 194.381140][ T149] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 194.390114][ T353] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 194.398215][ T353] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 194.406324][ T353] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 194.414408][ T353] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 194.456894][ T353] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.466535][ T353] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.476882][ T353] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 194.988482][ T529] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 194.999956][ T529] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 195.010249][ T529] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 195.019901][ T529] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.030270][ T529] usb 1-1: USB disconnect, device number 20 [ 195.241127][ T5389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.249844][ T5389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.328731][ T10] usb 5-1: USB disconnect, device number 5